last executing test programs: 1m16.046229307s ago: executing program 2 (id=430): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x20, &(0x7f0000000300)={&(0x7f00000003c0)=""/75, 0x4b, 0x0, &(0x7f0000000440)=""/202, 0xca}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x7, 0xa, &(0x7f00000001c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ldst={0x3, 0x3, 0x2, 0x7, 0x4, 0x10, 0x8}], &(0x7f0000000000)='GPL\x00', 0x100, 0x0, 0x0, 0x40f00, 0x6, '\x00', r3, @fallback=0x34, r4, 0x8, &(0x7f0000000280)={0x1, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x5, 0x8, 0x6}, 0x10, r5, r0, 0x1, &(0x7f00000005c0)=[r2, r6, r1, r1, r1, r2, r2], &(0x7f0000000600)=[{0x4, 0x5, 0xf, 0x5}], 0x10, 0x8, @void, @value}, 0x94) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x8001}, 0x1c) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r8, r7, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r10, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)="e0"}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r11 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r11, &(0x7f0000000480)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000002e80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000002e80)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='mm_khugepaged_scan_pmd\x00', r12}, 0x18) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) 1m16.021784986s ago: executing program 2 (id=431): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[]) timerfd_create(0x1, 0x80800) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000100)=0x0) ioprio_set$pid(0x2, r3, 0x4007) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) mkdir(&(0x7f0000000040)='./file0\x00', 0x6d) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 1m15.517424081s ago: executing program 2 (id=433): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0xc048aec8, &(0x7f0000000080)={0x6}) unshare(0x62040200) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x268, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x23c, 0x4, 0x0, 0x1, [{0x238, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x228, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x214, 0x3, "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"}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x290}}, 0x4048010) socket$alg(0x26, 0x5, 0x0) openat$snapshot(0xffffff9c, &(0x7f0000000080), 0x40040, 0x0) userfaultfd(0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x180) pread64(0xffffffffffffffff, &(0x7f0000000740)=""/4077, 0xfff, 0xfffffffe) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r5, 0x0, 0xa0028000}, 0x38) 1m12.665203886s ago: executing program 2 (id=438): syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x40, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x1f, 0x88c02) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$afs(0x0, &(0x7f0000000380)='./file0/file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) mount$afs(0x0, &(0x7f0000000380)='./file0/file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) epoll_create1(0x80000) syz_usb_disconnect(r0) socket$xdp(0x2c, 0x3, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x2040, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 1m11.107215598s ago: executing program 2 (id=447): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0xcbe) socket$tipc(0x1e, 0x5, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x34c, 0x18c, 0x2b8, 0x182, 0x18c, 0x0, 0x284, 0x3a8, 0x3a8, 0x284, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x164, 0x18c, 0x0, {0x0, 0xe0ffff00000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "83f0a574725c23587dcfbd695650fe91ad9f7783f34f23315a573f167f755eaff4d665d219fa653cdfd7ee1092b07e243bd3e81b17fa1a6a18d79ae45b76f817515ec14cdf53d785cfe1d638f578cf51801a954830bfb97c4595e7b07b7147a846d1a230f2e1053fd68b5c45f2847c271539bdbd0f149a701a72fc1f87ab788a"}}]}, @common=@inet=@SET1={0x28}}, {{@uncond, 0x0, 0xc8, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3a8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x60, 0x43, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001600), 0x1, r4}, 0x38) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000300)={0x6, {{0x2, 0x0, @multicast2}}}, 0xe7) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x7, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000580)={0x6, {{0x2, 0x4e25, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x10c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r6 = eventfd(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000000)) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/3\x00') pread64(r7, &(0x7f0000000300)=""/246, 0xf6, 0x0) 1m10.304079234s ago: executing program 3 (id=449): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0xc048aec8, &(0x7f0000000080)={0x6}) unshare(0x62040200) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x268, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x23c, 0x4, 0x0, 0x1, [{0x238, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x228, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x214, 0x3, "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"}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x290}}, 0x4048010) openat$snapshot(0xffffff9c, &(0x7f0000000080), 0x40040, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$kcm(0x10, 0x2, 0x0) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) mkdir(&(0x7f00000004c0)='./bus\x00', 0x180) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r6, 0x0, 0xa0028000}, 0x38) fchdir(r2) 1m8.026847114s ago: executing program 3 (id=453): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_STEAL_TIME(r0, 0x4068aea3, &(0x7f0000000280)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f00000003c0)) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pipe(&(0x7f0000000080)) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1m7.801932827s ago: executing program 2 (id=455): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x19, 0x4c}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x27}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffbf, 0x10, &(0x7f0000000000), 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x28) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r3, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000002840)=ANY=[@ANYBLOB="1400000027001333"], 0x14}], 0x1}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x8, 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000009400000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) getpid() sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) 1m7.775394311s ago: executing program 32 (id=455): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x19, 0x4c}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x27}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffbf, 0x10, &(0x7f0000000000), 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x28) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r3, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000002840)=ANY=[@ANYBLOB="1400000027001333"], 0x14}], 0x1}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x8, 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000009400000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) getpid() sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) 1m6.707221589s ago: executing program 3 (id=460): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x19, 0x4c}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x27}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffbf, 0x10, &(0x7f0000000000), 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x28) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r3, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000002840)=ANY=[@ANYBLOB="1400000027001333"], 0x14}], 0x1}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x8, 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000009400000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) getpid() sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) 1m5.816254777s ago: executing program 3 (id=462): syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x40, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002b80)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @remote}]}}}]}, 0x50}}, 0x0) mount$afs(0x0, &(0x7f0000000380)='./file0/file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) mount$afs(0x0, &(0x7f0000000380)='./file0/file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) epoll_create1(0x80000) syz_usb_disconnect(r0) socket$xdp(0x2c, 0x3, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x2040, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 1m2.576354287s ago: executing program 3 (id=470): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="03000000", @ANYRES16=r1, @ANYBLOB], 0x6c}}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffe60, &(0x7f00000002c0)=0x400001000000002) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x0) close(r2) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x0, r5}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x80000, 0x0, 0xffffffffffffffff}) write$midi(r6, &(0x7f0000000440)="97904d559ddaf5cbdc5c4feb8c1c8dfb98d7ea3e696c5d78bd9aa167c7c13734addc1ef72caf89ba76150be2f6413db282b5f6c6f51304e43690393183166a61cc4d5902f8fa3b3e82596ceaf12db304b7cbcc3162986184087a15e2a1bef9ac8afbe4f25204cafc3b156b97a910851cd7bb32718613484d5e12df29a439d7deed5396c5272268e8c91b7913e65730f1d9b9104e41927dd473a74b1b6f79d4b37bac658074954aaf6d83f0b346f642879abd35bff5bedf932b7f3c3309a1e0bb1ee1b0cbc3ec5003578f158361bfef1155a0967b9679d7721e", 0xd9) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x0, 0x0}) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r3, 0xf507, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000e40)={{0x14}, [@NFT_MSG_NEWSETELEM={0x8a4, 0xc, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x730, 0x3, 0x0, 0x1, [{0x354, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_DATA={0x130, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xf2, 0x1, "765143bd17f101e5c4022944992556d0ed9e8dd327d4d9e09f17a58be9aa0f43ae153acc6fc297379f0013743310f0d472200cb2e9cb55b8ad96a3b13f0722cb63502b615726be004da8eb325e9de5252b520e69e258c556e224fc4aa57a28ea32d4d61a0e9c299eacca92344d9be8fd461c130169f9c056c419674d35c3ec28ec38755376cfee814f06633fa717e154e8e6e40c375c7e9fafd1f342fd68ce8d1c488c30a16d29bb9869d633cd2cd72c95f4305d0264a2e3ec79494d26746b348113c2756eb27012d5ff5ee53439c036f8a65913ab69c0e2d292859562f16ebfe0ca4901f2a7fd4fa99f04f6dda4"}]}, @NFTA_SET_ELEM_USERDATA={0xeb, 0x6, 0x1, 0x0, "27a44dfc8798f0e16c75d472cb6aed0fd50c0f558b68f1e6bf2c7d22e1b8f0d5b287145d61f770d20bd7aecf7a5c6f5a42fa47db252a1654e792b18651e405dc90f51a62d612f3ca097fb795a7d3376fa880e30b66c66e66d2a3b6f58e859bd1a909eed6c10ddfc7f991770ea57df504a967b9e1f9c036b344aa006d5eef88889e5e405d32472544dd6d6bfaf6e707091510f2ed439ff7ef22e07a01d55d82fd5e345cc6286989a73f367d94a42e46c761793b76d107b514fa0222dbd332312c378499efa576e291c9d4d03de9812c2eca094d64b88dd3c9c521cb81c33c1d9167a32a99f2af82"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_USERDATA={0xeb, 0x6, 0x1, 0x0, "faf12bfc37eb1aaae4860f1b0a8dcad38ea9bdd59067c276eb27d969c310a1ad034b5df10b3748bb682c9ed7b968a3c4307114225f99aed5a9774bb26fa779a2134480fd0f9a0b1096223dc4fdbfbc4541399828b8f731fb42c9c049df2c693b23f4b48989a46f0b5b2eb13d33fdb4e5b81661cde7906a5fd3d34e87fc17decd6586659ee27e5d951b4ef3a28c0903e5c87f777030f5272789b2d2736d221c9864e91f55c54ca0b5a0b8c231f4656a5a3f4d42d128935dcfa54a67bb640e8eb4fa4d9f60ed6a8529eb5ec4e0f0f9f2e8e9d11c3178fdd1ddf7cab8e68b8d7328addcd63937aad7"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x40}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}]}, {0x3d8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x160, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x38, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8000000000000000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2f4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}]}}}, {0x34, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x5d}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}}}, {0x3c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_TUNNEL_DREG={0x8}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, {0x48, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x8000}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x480}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x4000000}, @NFTA_LOG_PREFIX={0x5, 0x2, 0x1, 0x0, '\x00'}, @NFTA_LOG_FLAGS={0x8}, @NFTA_LOG_PREFIX={0x7, 0x2, 0x1, 0x0, '{,\x00'}]}}}, {0x5c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1a}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_META_DREG={0x8}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xc}]}}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0xf4, 0xb, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xf}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}]}}}, {0x40, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}, @NFTA_SET_ELEM_KEY_END={0x160, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}]}, @NFTA_DATA_VALUE={0xe3, 0x1, "cfa44626cec4e3c64d08814d9a7f1fdc2081fb24671d0a2159ba8ca34903c8dd0a200cd89a892a93b64f648a0b909bdc06eea79d146e269084eebbd2afa441ff45b136b832f5f96f6152ba7d9799d40a2bd869ec6475cbca78ca69b5a42843037ce988327a3bef5234e7ec8469aa20d5cfcf59e6a9878e18486aee2c9bdb7940b3bdcfdbc2e6bd19e93a37d7f4724f055be365a9e2e1661c137481036e6ce6e3d1990fb0f44a54c99f1a251c35df3290114ce85129c1d8c742264b64655d6be2aa783454f12879e6c5ef6294d7b63a22280c3322078aaea6eccc2067e250fb"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x6c, 0x3, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x48, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x1c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x8, 0x3, "12f30b9e"}]}}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @target={{0xb}, @void}}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc8, 0x3, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xa8, 0x6, 0x1, 0x0, "7cdfa304a573224c2a61e0f72b47a522aa53531725af4e9403ce52c45d9ce3038862c26864e80c2ff3549fa8d3f0b567a3aa205078a86f5b3b43f6c2e6e16a0e3b4ada4a05cabe38cb59dfa6eecedc1d5ca9395448320a775877f4a0265735d5f08a9a0c6941b97b9a46d0c29530f00fe36937ccf6f54bfca7eba59bb99ea97fa130c18a516190e6e992ec8d66dc3455175373a20fa4cf0518090b7c75cefbecf4bdee70"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @dup={{0x8}, @void}}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x8cc}}, 0x0) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000300)=ANY=[@ANYBLOB="12010002000000406af3831b2e292f3c4f0109022d000101105009040020000000cd030921094004ee211c0809058103400006095909050203ff03fc5705"], &(0x7f0000000b00)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x300, 0xff, 0xe, 0x3, 0xff}, 0xf8, &(0x7f0000000c80)={0x5, 0xf, 0xf8, 0x3, [@generic={0x39, 0x10, 0x4, "32444001daa88ac47e611b4f409a3ea01e58565044508c7f3731b930010ceb69c8d0a087589b43d5abf52f424bff24630d026c43f4b2"}, @generic={0x47, 0x10, 0x3, "367455cc671b6b76b1b036abb54327d6398566c3a616533f8900cd67f4c543b1abb7644ac3ff9eaf982f35e24ebcd94feeb2ac4df8b27b482b075335c75ee85df49b1bc2"}, @generic={0x73, 0x10, 0x2, "e2d9340c9789f4e96c19efd24d67b4876744073f65ca2d2d7413a9bc45ea8fae41e1d36624ff3c9a9c3f528595e5ae1bbc8b5a772c9743e0eb5e00b275cafdf9895cdf274fe6f57e0d49be4bd985f5693403faf4428c82e7b20edde55563e8c171c6ea4d96b098f7ea49c2ca6a838e09"}]}, 0x9, [{0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x444}}, {0x75, &(0x7f00000003c0)=@string={0x75, 0x3, "678f51ee4aa9ac69411e1e4e1713fc3b936ba880f523d3a52581447a5785ebeef5c07ffd75a4170ec94fa1fed3cdc312341daee8c3bc68738b142e7a90c37e7185f112ec91ccbb1d473ad57c2278c540427203913602fdea92996e6f9a81625a30359a7143e582291694f05fa7d90000000000"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x424}}, {0xff, &(0x7f0000000a00)=@string={0xff, 0x3, "2ef377657fb6283a6a08b266d2965d0cc0e3660f0c3b7eb127d4b750ee8087533bc721acbcb96c02d49c4503d7530653c56028f18ae054432b5357b3a213c1bd45f2dbe9c42c8b9ae4603a9f4de46666812c622f4d316d159a3b199a9a0e4d093afd63b98b231b4ca82c5ff8da39803af799e0e58d6834344d850ce8c716481d827655906276c28dec34d7fc8c802f62a880c18ddae4b3be119fb2e5e60e717bdcd4d99fe0b76d24439890df78d142a640b09897da511e40bbf3c225bc41565d16c37c6eddfeea178bee3f00b4dd4ef158a4ab7856a0968595d6a6f831058ea1705d5abcd31061c4c5832bdcadb1d09e545c795e9808c84958bc2ffafe"}}, {0x50, &(0x7f00000007c0)=ANY=[@ANYBLOB="50036f7ada86774207d62f802b0b96df6f18844baae248cf316e999d202f3dabf9718bb2a1116a8753a73c88c79bfc14197ccd607b442235a6eb8a6cf1bbe90fac83e14ba6247b77900f445524d5f99c"]}, {0x50, &(0x7f0000000840)=@string={0x50, 0x3, "fee53a15a12bb61d1d1212c11ea10518468bc1bd3ffa745e7a3d635ad634654a8f9082e686149437c4f281ec7e0033a1acb7a80dea0460f8528609ca89be89f38f9491e97857ebe475b6773b0941"}}, {0x2a, &(0x7f00000008c0)=@string={0x2a, 0x3, "e531ce34aa779a5965052651ffa329c5d9e4a88b5e6decc62065dec8a51db1e98345c7657fb876f1"}}, {0xe0, &(0x7f0000000900)=@string={0xe0, 0x3, "4987db36c64515ec28c93b5ef188ae889bfb1ebcad7ed99800a6834b26717724c3f2d54491b9f1c7126987394a69ccf1b9d88215a9eb5d7aa5d2810a892aa7ac93b6794ef240f850cb93ee7bb2ed2f40da2493ce56d1a7a08c73325e37a4bbf3d4e9b5fd891b91552eb6698aca2c030c30874a0cdf70f12f98d23c4e3683afb29be9bf293cc7a89fe8d4974bd4d759153fbbbf8a0454d70415d08d5bec25f53bdfa4741eb2da16363f8a1751ff3397d7b4728fbc4e204068c30fb57326d084189da64d15f0f00a4b1dcf9500fb9e201b093915d48f5655f4b0aa1a4b3ed9"}}, {0xcb, &(0x7f0000000b80)=ANY=[@ANYBLOB="cb03edebdf3cc0997cb7b9f602acc00c7284fd2cda1314afceeafa701e630facfe33f2e00d3151d139023a0edc1bfbc69b7626e073af570b47185272ee8da43dcd7b14df8024fe1a4420dbd0125f6ce443ef4ae9a84ab44584ee784c365dd543cd1fbceb250dd63fe615f30e1b61aaaa7d4913bc62b23b364dbc050fa34cd719fcb9e3987870ca0e8f60379691afa667784815bc0ceefa01be750dd85aca8d4eabf2954b00bf736d52cfe7beb05e352addf19558bdf2b436c844afd020823b5d0eed2d23a2740641c1c9ff45c828e68c4793238634030060cf3fcabca213d544d3461d59a694812c08fae1310000"]}]}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)) 1m2.291804988s ago: executing program 3 (id=472): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r4) write$P9_RREADDIR(r2, &(0x7f0000000140), 0xfdef) ioctl$TIOCSWINSZ(r1, 0x4b66, &(0x7f0000000240)) 1m2.170484312s ago: executing program 33 (id=472): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r4) write$P9_RREADDIR(r2, &(0x7f0000000140), 0xfdef) ioctl$TIOCSWINSZ(r1, 0x4b66, &(0x7f0000000240)) 34.193705693s ago: executing program 5 (id=603): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0xc048aec8, &(0x7f0000000080)={0x6}) unshare(0x62040200) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x268, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x23c, 0x4, 0x0, 0x1, [{0x238, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x228, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x214, 0x3, "d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d532452032d5f166334739d1719a5778bd4f724ee4ca57f2527aeeb0c75755d68fc6fa55f4825682ee95e581039823e5963beedcf65b8b005623d90772b8b6ebd2498b0aff725a3eabb6c99cb2edfe10b9c33be8a971e08401bc0807e75a2ff376b7934473bc1f02bb512b77414daf260c9c7d4e1f0758b56ec5823892af310e6252fcfb1d9dbaddefdaa26f43f12f831fd221926d6536eeff641db46920ae0e48f3ff5de599714ba6510ce479d4116a519792281736f39c9fc0e10ef557392c43389271cebcf36543fcf6f83bf74b93ee4eb5e8c82e35bb4784cc1ed0ad291b16e8368487589f7590bf5896f340a36555a1cf69736da230a809176dbdfba3d47efb9a6932e5503d277532b7d4e6f7c7373a298e5843a9f74d5fd07fbc6ad22bc644ba9b3c94ec3c8f0b9321b16e5826b1f058f781760a5d4b6a8880202b41689139c37cd51f65a92d883f8901add03b650c9ec182fb565a4d657ebba9d6a5eb426b22d5933b72362e6ec327fb679aa8034b8b3b6680ad138be47652a3e77981187d2921cebfc1639aa280e3d38dba9b1af49ceded79c78a2d656b3a3e946e17e6257def6679f70f11aa01a2d906aecf4dbc7d1a332a8932ed719ce7eecb5450f494f944b3f6b637502ddba609c6e45dcfad1db7c7dda3e2c755ddcf27132985442e9b8df16f96c82e72e3e2491856d07756b9f"}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x290}}, 0x4048010) openat$snapshot(0xffffff9c, &(0x7f0000000080), 0x40040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x180) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r5, 0x0, 0xa0028000}, 0x38) 31.126622381s ago: executing program 5 (id=616): madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, &(0x7f0000000000), 0x0) r0 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000f21000/0x3000)=nil, r0, 0x1000000, 0x20010, r1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x80) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x0}]}) ioctl$DRM_IOCTL_DMA(r2, 0xc0286429, &(0x7f0000000200)={r3, 0x7, &(0x7f0000000100)=[0x4, 0x100, 0xa682, 0xffffe865, 0x0, 0x6, 0x800], &(0x7f0000000140)=[0x7], 0x4d, 0x8, 0x7ff, &(0x7f0000000180)=[0x7ff, 0x0, 0x0, 0x1, 0x9, 0x7fff, 0x2, 0x5], &(0x7f00000001c0)=[0x6]}) 31.081977479s ago: executing program 5 (id=618): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x20000002, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x6}) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) removexattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)=@known='system.posix_acl_default\x00') r2 = syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x40000000}, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0), 0x4) close(r5) io_uring_enter(r2, 0xa3d, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000400)) clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) socket(0x2a, 0x2, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r6 = timerfd_create(0x9, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) 30.846910182s ago: executing program 5 (id=620): socket$kcm(0x10, 0x2, 0x10) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) mount$bind(&(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x11080, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x80001, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000240)={0x600, 0x1000000}) 30.677015412s ago: executing program 5 (id=622): ioctl$KVM_CAP_STEAL_TIME(0xffffffffffffffff, 0x4068aea3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x81800) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f00000003c0)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pipe(&(0x7f0000000080)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 30.386822009s ago: executing program 5 (id=624): r0 = syz_usb_connect$uac1(0x6, 0x71, &(0x7f0000000000)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x5, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000001c3a000005100000095000000000000009458e47d77d7cc449a751af843fc4e8460fa1a51cbcf0d4e3c19030030c5d1850db5e1967bfc6d411aad91eec5f5748da06d0b8d"], &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r7, &(0x7f0000000200)={0x1d, r6, 0x3, {0x2, 0xfd}}, 0x18) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1}}, 0xee) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0x25dfdbfb, {0x0, 0x0, 0x74, r8, {0xf, 0x4}, {0xf, 0x4}, {0xa, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x20000080}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYRES8=r6, @ANYRES16=r0, @ANYRES64=r5], 0x28}, 0x1, 0x0, 0x0, 0xc091}, 0x44000) prlimit64(0x0, 0xe, 0x0, 0x0) r10 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r12, 0x4048ae9b, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r10, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)={0x713880}, 0x18) 15.219787466s ago: executing program 34 (id=624): r0 = syz_usb_connect$uac1(0x6, 0x71, &(0x7f0000000000)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x5, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000001c3a000005100000095000000000000009458e47d77d7cc449a751af843fc4e8460fa1a51cbcf0d4e3c19030030c5d1850db5e1967bfc6d411aad91eec5f5748da06d0b8d"], &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r7, &(0x7f0000000200)={0x1d, r6, 0x3, {0x2, 0xfd}}, 0x18) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1}}, 0xee) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0x25dfdbfb, {0x0, 0x0, 0x74, r8, {0xf, 0x4}, {0xf, 0x4}, {0xa, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x20000080}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYRES8=r6, @ANYRES16=r0, @ANYRES64=r5], 0x28}, 0x1, 0x0, 0x0, 0xc091}, 0x44000) prlimit64(0x0, 0xe, 0x0, 0x0) r10 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r12, 0x4048ae9b, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r10, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)={0x713880}, 0x18) 10.476553566s ago: executing program 6 (id=715): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80) sendto(r0, &(0x7f0000000140)="050000007a19b90c9daaeca1b1ec5719af0abbb83b0514127c8b417386b5c7cc0f676b6dac18222d5bf3b8b98708a136ddca61719a13016d", 0x38, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x6, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, &(0x7f0000001040), &(0x7f0000001080)=0x26) mkdirat(0xffffffffffffffff, &(0x7f0000000680)='./bus\x00', 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x184c, 0x0, 0x0, 0x0, 0x0) write$uinput_user_dev(r6, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x1966cd75, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x641, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff122]}, 0x45c) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xbcV\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x5) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x4010012, r7, 0x0) 7.367820517s ago: executing program 6 (id=724): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x19, 0x4c}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x27}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffbf, 0x10, &(0x7f0000000000), 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x28) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) times(&(0x7f00000001c0)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r3, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000002840)=ANY=[@ANYBLOB="1400000027001333"], 0x14}], 0x1}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x8, 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000009400000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) getpid() sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) 7.166587811s ago: executing program 1 (id=728): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x200000001494) fcntl$setstatus(r0, 0x4, 0x40000) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x2) r1 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r2 = request_key(&(0x7f0000000540)='encrypted\x00', &(0x7f0000000580)={'syz', 0x1}, &(0x7f00000005c0)='/dev/vsock\x00', r1) r3 = add_key(&(0x7f0000000980)='encrypted\x00', &(0x7f00000009c0)={'syz', 0x1}, 0x0, 0x0, r1) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0xffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x62, &(0x7f0000000ac0)=ANY=[@ANYBLOB="45471b76ae31e1a47869dde07b877ae3d8a517105505f24cc84f6e75bb7ba98513666f194a98929b70d023368702730ccc8569b6b321d72101fc9ab247db4e0ff1c15f5532c184cd2465cddc6ca5b5ca4393f6d3e25f301454fe2ec07aa5f8fa62310ff2c8c27310e0e69a72f14055e955f3cbb8268653cd6cd465459b4d86", @ANYBLOB="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", @ANYRESDEC=r2, @ANYRES16=r0, @ANYRES16=r3], 0x0, 0xfffffffc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000000f14010000000000000000000d0045006f"], 0x20}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r5}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) gettid() syz_fuse_handle_req(r7, &(0x7f0000004180)="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", 0x2000, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x0, {0x0, 0x0, 0x0, 0xffff, 0x369, 0x0, 0x4, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r7, &(0x7f0000000440)={0x50, 0xfffffffffffffffe, r8, {0x7, 0x29, 0x9485, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) r10 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r10, 0x932, 0x0) prlimit64(r9, 0x5, 0x0, 0x0) pread64(r4, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 6.404248864s ago: executing program 6 (id=732): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x0, r2, 0x0, 0x440}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5432, &(0x7f0000000000)=0x14) 6.286247247s ago: executing program 6 (id=733): r0 = socket$nl_generic(0x10, 0x3, 0x10) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x8000, 0x7, 0x4, 0x9, {{0x9, 0x4, 0x1, 0x7, 0x24, 0x65, 0x0, 0x5, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @multicast1, {[@cipso={0x86, 0xe, 0xffffffffffffffff, [{0x2, 0x8, "ec1f07ab2185"}]}, @end]}}}}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000d00)=ANY=[@ANYBLOB="1c0000000d7f077c8e1b8bad6a3f9d7e5dcb37f2c750a8591e7250d8ec175846b48ffdf1b261de059b2043e888bfc9868a1f121faa58fecabde4d30c3f53b682366c6945224f12a40c6e1b9f3128db38868547d9d5a5e7c3935b001afa255bbf6b32bacf956a4f8a675ebef487a98bff94d857afa07923cfc5a59908bf182e70107219ee6b965e80fef133818a3dc5d5285356062f2a720fedc7b557ed947410255b5c156fa646", @ANYRES16=r4, @ANYBLOB="310300000000000000000800000008000300", @ANYRES32=r5, @ANYBLOB], 0x1c}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340), 0x0, 0x43, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000400), &(0x7f0000000300), 0x8, 0xc, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000500)={@initdev, @multicast1, 0x0}, &(0x7f0000000540)=0xc) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000b00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000006c0)={0x3d4, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x320, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xf5, 0x5, "129e13a8dd576d4f95b9540a2b60c5a794514e55cf2e1203115ec1d3c8cae0c4ae4ccb0e576cd672fe2c029ce68a82aeaa71249232c32ff33e55433d5190bcdd25229768c1db97f2ed84de19782067dd4a2b8a8632fd3b0c0f7801a3f06b4db8c8de86b0e85d139479f3c74c7898bcc1c0dc528f3f0e4f66cd39a16b1d211dbb641d2a67ba9aefd4d50617cc98d02e62896b623f1edf021e64f9d945f954944159e6590e0130dc7150f9bfcb2e359c7201430a57297b5ddfc0dd5446a326aed138e4fe2597a76f4317af00d3c026614c0e585a7afabbaadf79077694c02a2166e953ae2807756e7e0f3ccc3f1ecb472f81"}, @ETHTOOL_A_BITSET_MASK={0x9c, 0x5, "528032816fc0259baab824cd64ef1b30f7a09ebb6e7d1f9513c7ebfdf4d18892ee7da69f1a3af2ee1e67006e8c4a63cd2be19c702609294d0ee26510b816d365197e878dcc2e51f0e25f09148c3eb64a6639e9718b2b3ade783aedbb34205c3c2527869b7e17541591949b31419cf71e7dc3e04805715e8ef1041062887f976eea2cd5fce8d6802c5f33202ad927491bf476da1356ebaa98"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x180, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '(%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '#\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '{./*}{]-(-^-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '+,\\{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff7}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '++#+*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-%\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x61}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb2a8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[:\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xcae}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '{/~&[\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff8}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '@%,\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_DEBUG_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_DEBUG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}]}, 0x3d4}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r8, 0xc01064ac, &(0x7f0000000140)={0x0, 0x0, 0x0}) r9 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r10, &(0x7f0000000180)=ANY=[@ANYRESDEC=r10, @ANYRESDEC=r10], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000005, 0x12, r10, 0x0) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r10, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x64, r11, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fffffff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xdd}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x4) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) r12 = gettid() mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) acct(&(0x7f0000000140)='./file0\x00') timer_create(0x0, &(0x7f0000000240)={0x0, 0x1f, 0x800000000004, @tid=r12}, &(0x7f0000bbdffc)) poll(&(0x7f0000000000)=[{r1, 0x230}], 0x1, 0x80) openat(r1, &(0x7f0000000580)='./file0\x00', 0xc2c41, 0x17c) syz_usb_connect(0x2, 0x3d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r13 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) poll(&(0x7f0000000000)=[{r13, 0x20}], 0x1, 0x36) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400400028000900000000000000000001000000"], 0x14}}, 0x0) 6.166222558s ago: executing program 1 (id=734): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, 0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) process_vm_readv(0x0, &(0x7f0000000400)=[{&(0x7f0000000200)=""/146, 0x92}, {&(0x7f0000000500)=""/170, 0xaa}, {0x0}], 0x3, &(0x7f00000006c0), 0x0, 0x0) bind$alg(r4, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x6) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f00000013c0)) read$dsp(r5, &(0x7f0000000440)=""/171, 0xab) (fail_nth: 4) 5.953772149s ago: executing program 1 (id=736): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="0f0f4e409e507b5e68f7d02bf130b767fcce7cae92c9efd5981d353ae44760a146f649eb18becc3c08601ae41fe6bfb6a706764cb07bb254919200858f56a98e21043104da3b969eaea7345b9dfbd0a51c8c14aea27692c58c2d41b0da56622374a2b5767434578917ef964b9b776928374797b2e721f23ef66a9424ef62", @ANYRESDEC=r1, @ANYRES16=r0, @ANYBLOB="106bc62a9d1b0d9d2679d27abb55ebc6d5e20a728633a85c04354b7c31bd", @ANYRES16=r0], &(0x7f0000000000)='GPL\x00', 0x10001, 0xbf, &(0x7f0000000580)=""/191, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a, @void, @value}, 0xf5) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x1}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f00000bd000), 0x30, 0x800) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = openat$autofs(0xffffff9c, &(0x7f00000002c0), 0x40080, 0x0) fstat(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$netlink(0x10, 0x3, 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsgid(r8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4, {r7, r8}}, './file1/file0\x00'}) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0x3, 0x12) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0xb}}) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2197f52584b39e3ce07900"/21], 0x0}, 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) 3.875785147s ago: executing program 0 (id=744): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x19, 0x4c}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x27}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffbf, 0x10, &(0x7f0000000000), 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x28) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) times(&(0x7f00000001c0)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r3, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000002840)=ANY=[@ANYBLOB="1400000027001333"], 0x14}], 0x1}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x8, 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000009400000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) getpid() sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) 3.780799479s ago: executing program 4 (id=747): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$netlink(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet(0x2, 0x1, 0x0) r3 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r3, 0x3) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r5 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000001500), 0x588, 0x190000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3, 0x6, 0x101}, 0x14}}, 0x0) 3.47623562s ago: executing program 4 (id=748): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000080)={0x34, r1, 0x13, 0x0, 0x0, {0x8}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 3.475734606s ago: executing program 4 (id=749): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$pmem0(0xffffff9c, &(0x7f0000000040), 0x6000, 0x0) ioctl$BLKGETDISKSEQ(r1, 0x80081280, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r2 = userfaultfd(0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) pselect6(0x40, &(0x7f0000000040)={0x9, 0x8, 0xffff, 0x9, 0x7, 0x80000001, 0x8, 0x86}, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) (async) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) (async) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$pmem0(0xffffff9c, &(0x7f0000000040), 0x6000, 0x0) (async) ioctl$BLKGETDISKSEQ(r1, 0x80081280, &(0x7f0000000080)) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) userfaultfd(0x1) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) prlimit64(0x0, 0xe, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) (async) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) (async) pselect6(0x40, &(0x7f0000000040)={0x9, 0x8, 0xffff, 0x9, 0x7, 0x80000001, 0x8, 0x86}, 0x0, 0x0, 0x0, 0x0) (async) 3.231499748s ago: executing program 6 (id=750): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0xc048aec8, &(0x7f0000000080)={0x6}) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x268, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x23c, 0x4, 0x0, 0x1, [{0x238, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x228, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x214, 0x3, "d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d532452032d5f166334739d1719a5778bd4f724ee4ca57f2527aeeb0c75755d68fc6fa55f4825682ee95e581039823e5963beedcf65b8b005623d90772b8b6ebd2498b0aff725a3eabb6c99cb2edfe10b9c33be8a971e08401bc0807e75a2ff376b7934473bc1f02bb512b77414daf260c9c7d4e1f0758b56ec5823892af310e6252fcfb1d9dbaddefdaa26f43f12f831fd221926d6536eeff641db46920ae0e48f3ff5de599714ba6510ce479d4116a519792281736f39c9fc0e10ef557392c43389271cebcf36543fcf6f83bf74b93ee4eb5e8c82e35bb4784cc1ed0ad291b16e8368487589f7590bf5896f340a36555a1cf69736da230a809176dbdfba3d47efb9a6932e5503d277532b7d4e6f7c7373a298e5843a9f74d5fd07fbc6ad22bc644ba9b3c94ec3c8f0b9321b16e5826b1f058f781760a5d4b6a8880202b41689139c37cd51f65a92d883f8901add03b650c9ec182fb565a4d657ebba9d6a5eb426b22d5933b72362e6ec327fb679aa8034b8b3b6680ad138be47652a3e77981187d2921cebfc1639aa280e3d38dba9b1af49ceded79c78a2d656b3a3e946e17e6257def6679f70f11aa01a2d906aecf4dbc7d1a332a8932ed719ce7eecb5450f494f944b3f6b637502ddba609c6e45dcfad1db7c7dda3e2c755ddcf27132985442e9b8df16f96c82e72e3e2491856d07756b9f"}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x290}}, 0x4048010) socket$alg(0x26, 0x5, 0x0) openat$snapshot(0xffffff9c, &(0x7f0000000080), 0x40040, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$kcm(0x10, 0x2, 0x0) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) mkdir(&(0x7f00000004c0)='./bus\x00', 0x180) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r6, 0x0, 0xa0028000}, 0x38) fchdir(r2) 2.926488713s ago: executing program 0 (id=751): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0xcbe) socket$tipc(0x1e, 0x5, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x34c, 0x18c, 0x2b8, 0x182, 0x18c, 0x0, 0x284, 0x3a8, 0x3a8, 0x284, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x164, 0x18c, 0x0, {0x0, 0xe0ffff00000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "83f0a574725c23587dcfbd695650fe91ad9f7783f34f23315a573f167f755eaff4d665d219fa653cdfd7ee1092b07e243bd3e81b17fa1a6a18d79ae45b76f817515ec14cdf53d785cfe1d638f578cf51801a954830bfb97c4595e7b07b7147a846d1a230f2e1053fd68b5c45f2847c271539bdbd0f149a701a72fc1f87ab788a"}}]}, @common=@inet=@SET1={0x28}}, {{@uncond, 0x0, 0xc8, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3a8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001600), 0x1}, 0x38) bpf$BPF_GET_PROG_INFO(0x15, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000300)={0x6, {{0x2, 0x0, @multicast2}}}, 0xe7) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x7, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000580)={0x6, {{0x2, 0x4e25, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x10c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r5 = eventfd(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000000)) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/3\x00') pread64(r6, &(0x7f0000000300)=""/246, 0xf6, 0x0) 2.806751448s ago: executing program 1 (id=752): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x50071, 0xffffffffffffffff, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040007000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0xa, 0x1, 0x3, 0x45, 0xffffffffffffffff, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x2, 0xa, @void, @value, @void, @value}, 0x50) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r7, 0xc048aec8, &(0x7f0000000100)={0xd6, 0x0, 0x1}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={0x1, 0xffffffffffffffff}, 0x4) r9 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @map_fd={0x18, 0x4, 0x1, 0x0, r4}], &(0x7f0000000200)='syzkaller\x00', 0x1, 0x58, &(0x7f0000000240)=""/88, 0x40f00, 0x4, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x0, 0x5, 0x9, 0x1}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000380)=[r8, r9], &(0x7f00000003c0)=[{0x2, 0x4, 0x4, 0x2}, {0x4, 0x2, 0x2}, {0x5, 0x5, 0x10, 0x1}], 0x10, 0x3ff, @void, @value}, 0x94) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f00000001c0)={0x2, 0x8}, 0x2) unshare(0x60000000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) 2.146836674s ago: executing program 4 (id=753): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, r4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x0, r2, 0x0, 0x440}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) 2.036779237s ago: executing program 0 (id=754): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) pwritev2(r0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r1, &(0x7f0000000080)={0x13, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000003ac0)="bb", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f00000001c0)="5a93f8b2bfa061126aef3f5eabafa3997fcf0068bfdf4b6db2987a52846a38dac5a545e912cde07faa58e12d2282d4bd6f6b4ced1fedd92c1fa0762765444808afab1c4ee981049fde0806bb84989a69b540d6910ca212cb9b5e65f99979c194938a9b13f2f5adf765d69aca3eb5a439537d7333352252c8b35a6361182331ce07c70ec53d713563d033d0de532272a01e", 0x91}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="c813", 0x2}], 0x1}}], 0x3, 0x60cd894) 2.036472337s ago: executing program 0 (id=755): setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x10000}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="8401000010001307000000000000560020010000000000000000000000000001fe8000000000000000000000001d00ff00000000000000000000000000000000eb435d41f92c72fceda3f10d7bc35716c3c39d7de8cacf1a31c1020d164b5420acf517c36491947bd3dc4e81eb77fcf054b64e2db077b23811286a43033daec7f78877fe24612e06032100983182e6c5458be9f63365f166ec2a123a5b6a48c7510bae65637dfb", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000020000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400636d61632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000"], 0x184}}, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r3, 0x11, 0xb, &(0x7f0000000240)=0x1, 0x4) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000)={r6, 0x5a, 0x5, 0x40}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={r6, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @multicast1}]}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000280), &(0x7f0000000000)=0x8) 1.966688511s ago: executing program 0 (id=756): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f00000001c0)={@pptp={0x18, 0x2, {0x1, @private=0xa010100}}, {&(0x7f0000000000)=""/108, 0x6c}, &(0x7f0000000080), 0x23}, 0xa0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x48882, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34325241, 0x0, 0xa, [{0x9}, {0x10}, {0x8}, {0x0, 0x200000}], 0x0, 0xfd}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0x4, 0x4, 0x324, 0xffffffff, 0x194, 0xc8, 0x0, 0xfeffffff, 0xffffffff, 0x25c, 0x25c, 0x25c, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private2, [], [], 'batadv_slave_0\x00', 'team_slave_1\x00', {}, {}, 0x6, 0x0, 0x1}, 0x2f2, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @private0, [], [], 'hsr0\x00', 'veth0_macvtap\x00'}, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x380) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0xe, 0x141341) ioctl$USBDEVFS_IOCTL(r3, 0xc00c5512, &(0x7f0000000200)) syz_emit_ethernet(0x96, &(0x7f0000000240)={@random="c16d473d990c", @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xa010101, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8864, 0x30, 0x0, [], "a9e30205c05481cd37808b64a6b35486f934a965830cfc16bbed02013b48c8ac3f454dec5278a5ddaff09e9ac607652d"}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x3}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x2, {0x10000000}}}}}}}}, 0x0) ioctl$USBDEVFS_BULK(r3, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x14, 0x10, &(0x7f0000000040)}) r4 = dup(0xffffffffffffffff) write$UHID_INPUT(r4, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340100001a0001000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000006c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bd000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000a00000000000000480003006465666c6174e5af567a00"/236], 0x134}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, 0x0, 0x14800, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='smaps_rollup\x00') ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2) 194.210251ms ago: executing program 1 (id=757): syz_emit_ethernet(0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004500006c000000000001907864010100ac1414aa0b009078032c000044000000000000000089000000000000ac1414aa862900000000000d5e000000ff10000000000000054eb8a6ab179606"], 0x0) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="041817aaaaaaaaaa105af8a008a6888ca237dc9bc0205a2851e3"], 0x1a) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) mount(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="041817aaaaaaaaaa10"], 0x1a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 193.822178ms ago: executing program 4 (id=758): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000002e80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='mm_khugepaged_scan_pmd\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000002e80)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='mm_khugepaged_scan_pmd\x00', r2}, 0x18) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (fail_nth: 4) 190.380601ms ago: executing program 0 (id=759): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="03000000", @ANYRES16=r1, @ANYBLOB], 0x6c}}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffe60, &(0x7f00000002c0)=0x400001000000002) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x0) close(r2) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x0, r5}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x80000, 0x0, 0xffffffffffffffff}) write$midi(r6, &(0x7f0000000440)="97904d559ddaf5cbdc5c4feb8c1c8dfb98d7ea3e696c5d78bd9aa167c7c13734addc1ef72caf89ba76150be2f6413db282b5f6c6f51304e43690393183166a61cc4d5902f8fa3b3e82596ceaf12db304b7cbcc3162986184087a15e2a1bef9ac8afbe4f25204cafc3b156b97a910851cd7bb32718613484d5e12df29a439d7deed5396c5272268e8c91b7913e65730f1d9b9104e41927dd473a74b1b6f79d4b37bac658074954aaf6d83f0b346f642879abd35bff5bedf932b7f3c3309a1e0bb1ee1b0cbc3ec5003578f158361bfef1155a0967b9679d7721e", 0xd9) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r3, 0xf507, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000e40)={{0x14}, [@NFT_MSG_NEWSETELEM={0x8a4, 0xc, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x730, 0x3, 0x0, 0x1, [{0x354, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_DATA={0x130, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xf2, 0x1, "765143bd17f101e5c4022944992556d0ed9e8dd327d4d9e09f17a58be9aa0f43ae153acc6fc297379f0013743310f0d472200cb2e9cb55b8ad96a3b13f0722cb63502b615726be004da8eb325e9de5252b520e69e258c556e224fc4aa57a28ea32d4d61a0e9c299eacca92344d9be8fd461c130169f9c056c419674d35c3ec28ec38755376cfee814f06633fa717e154e8e6e40c375c7e9fafd1f342fd68ce8d1c488c30a16d29bb9869d633cd2cd72c95f4305d0264a2e3ec79494d26746b348113c2756eb27012d5ff5ee53439c036f8a65913ab69c0e2d292859562f16ebfe0ca4901f2a7fd4fa99f04f6dda4"}]}, @NFTA_SET_ELEM_USERDATA={0xeb, 0x6, 0x1, 0x0, "27a44dfc8798f0e16c75d472cb6aed0fd50c0f558b68f1e6bf2c7d22e1b8f0d5b287145d61f770d20bd7aecf7a5c6f5a42fa47db252a1654e792b18651e405dc90f51a62d612f3ca097fb795a7d3376fa880e30b66c66e66d2a3b6f58e859bd1a909eed6c10ddfc7f991770ea57df504a967b9e1f9c036b344aa006d5eef88889e5e405d32472544dd6d6bfaf6e707091510f2ed439ff7ef22e07a01d55d82fd5e345cc6286989a73f367d94a42e46c761793b76d107b514fa0222dbd332312c378499efa576e291c9d4d03de9812c2eca094d64b88dd3c9c521cb81c33c1d9167a32a99f2af82"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_USERDATA={0xeb, 0x6, 0x1, 0x0, "faf12bfc37eb1aaae4860f1b0a8dcad38ea9bdd59067c276eb27d969c310a1ad034b5df10b3748bb682c9ed7b968a3c4307114225f99aed5a9774bb26fa779a2134480fd0f9a0b1096223dc4fdbfbc4541399828b8f731fb42c9c049df2c693b23f4b48989a46f0b5b2eb13d33fdb4e5b81661cde7906a5fd3d34e87fc17decd6586659ee27e5d951b4ef3a28c0903e5c87f777030f5272789b2d2736d221c9864e91f55c54ca0b5a0b8c231f4656a5a3f4d42d128935dcfa54a67bb640e8eb4fa4d9f60ed6a8529eb5ec4e0f0f9f2e8e9d11c3178fdd1ddf7cab8e68b8d7328addcd63937aad7"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x40}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}]}, {0x3d8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x160, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x38, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8000000000000000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2f4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}]}}}, {0x34, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x5d}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}}}, {0x3c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_TUNNEL_DREG={0x8}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, {0x48, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x8000}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x480}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x4000000}, @NFTA_LOG_PREFIX={0x5, 0x2, 0x1, 0x0, '\x00'}, @NFTA_LOG_FLAGS={0x8}, @NFTA_LOG_PREFIX={0x7, 0x2, 0x1, 0x0, '{,\x00'}]}}}, {0x5c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1a}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_META_DREG={0x8}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xc}]}}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0xf4, 0xb, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xf}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}]}}}, {0x40, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}, @NFTA_SET_ELEM_KEY_END={0x160, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}]}, @NFTA_DATA_VALUE={0xe3, 0x1, "cfa44626cec4e3c64d08814d9a7f1fdc2081fb24671d0a2159ba8ca34903c8dd0a200cd89a892a93b64f648a0b909bdc06eea79d146e269084eebbd2afa441ff45b136b832f5f96f6152ba7d9799d40a2bd869ec6475cbca78ca69b5a42843037ce988327a3bef5234e7ec8469aa20d5cfcf59e6a9878e18486aee2c9bdb7940b3bdcfdbc2e6bd19e93a37d7f4724f055be365a9e2e1661c137481036e6ce6e3d1990fb0f44a54c99f1a251c35df3290114ce85129c1d8c742264b64655d6be2aa783454f12879e6c5ef6294d7b63a22280c3322078aaea6eccc2067e250fb"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x6c, 0x3, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x48, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x1c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x8, 0x3, "12f30b9e"}]}}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @target={{0xb}, @void}}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc8, 0x3, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xa8, 0x6, 0x1, 0x0, "7cdfa304a573224c2a61e0f72b47a522aa53531725af4e9403ce52c45d9ce3038862c26864e80c2ff3549fa8d3f0b567a3aa205078a86f5b3b43f6c2e6e16a0e3b4ada4a05cabe38cb59dfa6eecedc1d5ca9395448320a775877f4a0265735d5f08a9a0c6941b97b9a46d0c29530f00fe36937ccf6f54bfca7eba59bb99ea97fa130c18a516190e6e992ec8d66dc3455175373a20fa4cf0518090b7c75cefbecf4bdee70"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @dup={{0x8}, @void}}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x8cc}}, 0x0) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000300)=ANY=[@ANYBLOB="12010002000000406af3831b2e292f3c4f0109022d000101105009040020000000cd030921094004ee211c0809058103400006095909050203ff03fc5705"], &(0x7f0000000b00)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x300, 0xff, 0xe, 0x3, 0xff}, 0xf8, &(0x7f0000000c80)={0x5, 0xf, 0xf8, 0x3, [@generic={0x39, 0x10, 0x4, "32444001daa88ac47e611b4f409a3ea01e58565044508c7f3731b930010ceb69c8d0a087589b43d5abf52f424bff24630d026c43f4b2"}, @generic={0x47, 0x10, 0x3, "367455cc671b6b76b1b036abb54327d6398566c3a616533f8900cd67f4c543b1abb7644ac3ff9eaf982f35e24ebcd94feeb2ac4df8b27b482b075335c75ee85df49b1bc2"}, @generic={0x73, 0x10, 0x2, "e2d9340c9789f4e96c19efd24d67b4876744073f65ca2d2d7413a9bc45ea8fae41e1d36624ff3c9a9c3f528595e5ae1bbc8b5a772c9743e0eb5e00b275cafdf9895cdf274fe6f57e0d49be4bd985f5693403faf4428c82e7b20edde55563e8c171c6ea4d96b098f7ea49c2ca6a838e09"}]}, 0x9, [{0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x444}}, {0x75, &(0x7f00000003c0)=@string={0x75, 0x3, "678f51ee4aa9ac69411e1e4e1713fc3b936ba880f523d3a52581447a5785ebeef5c07ffd75a4170ec94fa1fed3cdc312341daee8c3bc68738b142e7a90c37e7185f112ec91ccbb1d473ad57c2278c540427203913602fdea92996e6f9a81625a30359a7143e582291694f05fa7d90000000000"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x424}}, {0xff, &(0x7f0000000a00)=@string={0xff, 0x3, "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"}}, {0x50, &(0x7f00000007c0)=ANY=[@ANYBLOB="50036f7ada86774207d62f802b0b96df6f18844baae248cf316e999d202f3dabf9718bb2a1116a8753a73c88c79bfc14197ccd607b442235a6eb8a6cf1bbe90fac83e14ba6247b77900f445524d5f99c"]}, {0x50, &(0x7f0000000840)=@string={0x50, 0x3, "fee53a15a12bb61d1d1212c11ea10518468bc1bd3ffa745e7a3d635ad634654a8f9082e686149437c4f281ec7e0033a1acb7a80dea0460f8528609ca89be89f38f9491e97857ebe475b6773b0941"}}, {0x2a, &(0x7f00000008c0)=@string={0x2a, 0x3, "e531ce34aa779a5965052651ffa329c5d9e4a88b5e6decc62065dec8a51db1e98345c7657fb876f1"}}, {0xe0, &(0x7f0000000900)=@string={0xe0, 0x3, "4987db36c64515ec28c93b5ef188ae889bfb1ebcad7ed99800a6834b26717724c3f2d54491b9f1c7126987394a69ccf1b9d88215a9eb5d7aa5d2810a892aa7ac93b6794ef240f850cb93ee7bb2ed2f40da2493ce56d1a7a08c73325e37a4bbf3d4e9b5fd891b91552eb6698aca2c030c30874a0cdf70f12f98d23c4e3683afb29be9bf293cc7a89fe8d4974bd4d759153fbbbf8a0454d70415d08d5bec25f53bdfa4741eb2da16363f8a1751ff3397d7b4728fbc4e204068c30fb57326d084189da64d15f0f00a4b1dcf9500fb9e201b093915d48f5655f4b0aa1a4b3ed9"}}, {0xcb, &(0x7f0000000b80)=ANY=[@ANYBLOB="cb03edebdf3cc0997cb7b9f602acc00c7284fd2cda1314afceeafa701e630facfe33f2e00d3151d139023a0edc1bfbc69b7626e073af570b47185272ee8da43dcd7b14df8024fe1a4420dbd0125f6ce443ef4ae9a84ab44584ee784c365dd543cd1fbceb250dd63fe615f30e1b61aaaa7d4913bc62b23b364dbc050fa34cd719fcb9e3987870ca0e8f60379691afa667784815bc0ceefa01be750dd85aca8d4eabf2954b00bf736d52cfe7beb05e352addf19558bdf2b436c844afd020823b5d0eed2d23a2740641c1c9ff45c828e68c4793238634030060cf3fcabca213d544d3461d59a694812c08fae1310000"]}]}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)) 126.847361ms ago: executing program 1 (id=760): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x19, 0x4c}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x27}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffbf, 0x10, &(0x7f0000000000), 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x28) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) times(&(0x7f00000001c0)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r3, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000002840)=ANY=[@ANYBLOB="1400000027001333"], 0x14}], 0x1}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x8, 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000009400000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) getpid() sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) 46.561675ms ago: executing program 4 (id=761): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x6, @none, 0x3, 0x1}, 0xe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000c80)=[{0x20, 0xfc, 0x0, 0xfffff00c}]}, 0x8) r2 = fcntl$dupfd(r0, 0x0, r0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) cachestat(r3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setresuid(0xee01, 0x0, 0x0) keyctl$session_to_parent(0x12) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, 0x2, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) r5 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r5, 0xab00, r6) r8 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x181800) ioctl$NBD_SET_SOCK(r5, 0xab00, r5) ioctl$NBD_SET_FLAGS(r8, 0xab0a, 0x1000001000104) ioctl$NBD_SET_SOCK(r8, 0xab00, r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r9 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r9, 0x101, 0xa, &(0x7f0000000140)=0x6, 0x4) ioctl$NBD_DO_IT(r5, 0xab03) ioctl$NBD_CLEAR_SOCK(r8, 0xab04) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r4, 0x0, 0x67d}, 0x18) syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0xd4181) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000200)='2'}], 0x1) 0s ago: executing program 6 (id=762): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = io_uring_setup(0x666, &(0x7f00000002c0)={0x0, 0x4}) r3 = socket$tipc(0x1e, 0x4, 0x0) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r5, 0x80046402, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) chdir(&(0x7f0000000100)='./file0\x00') write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800030030"], 0xfdef) kernel console output (not intermixed with test programs): h: hci0: command 0x040f tx timeout [ 130.155869][ T7428] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 130.959490][ T7428] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 130.961914][ T7428] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 130.964403][ T7428] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 131.010877][ T7440] fuse: Unknown parameter '' [ 131.122415][ T7427] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 131.645712][ T6007] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 131.849374][ T6007] usb 7-1: not running at top speed; connect to a high speed hub [ 131.853486][ T6007] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.856255][ T6007] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 131.864100][ T6007] usb 7-1: New USB device found, idVendor=f36a, idProduct=1b83, bcdDevice=29.2e [ 131.870470][ T6007] usb 7-1: New USB device strings: Mfr=47, Product=60, SerialNumber=79 [ 131.873991][ T6007] usb 7-1: Product: syz [ 131.875112][ T6007] usb 7-1: Manufacturer: syz [ 131.878448][ T6007] usb 7-1: SerialNumber: syz [ 132.167180][ T1414] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.169086][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.237260][ T66] Bluetooth: hci1: command 0x0c1a tx timeout [ 132.288251][ T6007] usb 7-1: USB disconnect, device number 5 [ 132.358840][ T7476] overlayfs: failed to resolve './file1': -2 [ 132.511290][ T7478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.368'. [ 133.046165][ T66] Bluetooth: hci3: command 0x0c1a tx timeout [ 133.046197][ T5955] Bluetooth: hci2: command 0x0c1a tx timeout [ 133.205746][ T5955] Bluetooth: hci0: command 0x040f tx timeout [ 133.440068][ T7484] syz.2.370 (7484): drop_caches: 2 [ 135.755796][ T5955] Bluetooth: hci0: command 0x040f tx timeout [ 135.758118][ T7496] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 136.617400][ T7496] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 136.619902][ T7496] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 136.622243][ T7496] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 136.700665][ T7495] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 136.849603][ T7525] overlayfs: failed to resolve './file0': -2 [ 136.895602][ T6007] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 137.159913][ T6007] usb 8-1: device descriptor read/all, error -71 [ 137.844729][ T5955] Bluetooth: hci1: command 0x0c1a tx timeout [ 138.635662][ T5955] Bluetooth: hci3: command 0x0c1a tx timeout [ 138.635717][ T66] Bluetooth: hci2: command 0x0c1a tx timeout [ 138.980119][ T7560] netlink: 20 bytes leftover after parsing attributes in process `syz.1.390'. [ 138.987768][ T39] kauditd_printk_skb: 749 callbacks suppressed [ 138.987778][ T39] audit: type=1326 audit(1734842934.565:2354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7558 comm="syz.1.390" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x0 [ 139.675690][ T7537] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 139.675693][ T66] Bluetooth: hci0: command 0x040f tx timeout [ 140.529096][ T7537] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 140.530786][ T7537] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 140.532434][ T7537] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 140.609694][ T7536] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 140.936875][ T7585] overlayfs: failed to resolve './file0': -2 [ 140.958495][ T7584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.396'. [ 141.275711][ T6007] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 141.292521][ T7598] netlink: 28 bytes leftover after parsing attributes in process `syz.3.400'. [ 141.296633][ T7598] netem: incorrect gi model size [ 141.298765][ T7598] netem: change failed [ 141.321374][ T7595] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 141.357426][ T7591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.398'. [ 141.446928][ T6007] usb 5-1: not running at top speed; connect to a high speed hub [ 141.450499][ T6007] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.453120][ T6007] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 141.457004][ T6007] usb 5-1: New USB device found, idVendor=f36a, idProduct=1b83, bcdDevice=29.2e [ 141.459371][ T6007] usb 5-1: New USB device strings: Mfr=47, Product=60, SerialNumber=79 [ 141.461591][ T6007] usb 5-1: Product: syz [ 141.462849][ T6007] usb 5-1: Manufacturer: syz [ 141.464786][ T6007] usb 5-1: SerialNumber: syz [ 141.644484][ T7604] bridge0: port 3(syz_tun) entered blocking state [ 141.646827][ T7604] bridge0: port 3(syz_tun) entered disabled state [ 141.648682][ T7604] syz_tun: entered allmulticast mode [ 141.651310][ T7604] syz_tun: entered promiscuous mode [ 141.653492][ T7604] bridge0: port 3(syz_tun) entered blocking state [ 141.655311][ T7604] bridge0: port 3(syz_tun) entered forwarding state [ 141.805659][ T66] Bluetooth: hci1: command 0x0c1a tx timeout [ 141.860752][ T7612] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 141.919348][ T6007] usb 5-1: USB disconnect, device number 6 [ 142.466588][ T7619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.407'. [ 142.555832][ T66] Bluetooth: hci2: command 0x0c1a tx timeout [ 142.565637][ T66] Bluetooth: hci3: command 0x0c1a tx timeout [ 142.601910][ T7624] syzkaller0: entered promiscuous mode [ 142.603898][ T7624] syzkaller0: entered allmulticast mode [ 142.645624][ T66] Bluetooth: hci0: command 0x040f tx timeout [ 142.671001][ T7626] FAULT_INJECTION: forcing a failure. [ 142.671001][ T7626] name failslab, interval 1, probability 0, space 0, times 0 [ 142.675227][ T7626] CPU: 3 UID: 0 PID: 7626 Comm: syz.3.410 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 142.678949][ T7626] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 142.682747][ T7626] Call Trace: [ 142.683741][ T7626] [ 142.684635][ T7626] dump_stack_lvl+0x16c/0x1f0 [ 142.686164][ T7626] should_fail_ex+0x497/0x5b0 [ 142.687709][ T7626] ? fs_reclaim_acquire+0xae/0x150 [ 142.689383][ T7626] should_failslab+0xc2/0x120 [ 142.690922][ T7626] __kmalloc_noprof+0xce/0x4f0 [ 142.692503][ T7626] ? tomoyo_realpath_from_path+0xbf/0x710 [ 142.694363][ T7626] tomoyo_realpath_from_path+0xbf/0x710 [ 142.696212][ T7626] ? tomoyo_path_perm+0x262/0x480 [ 142.697941][ T7626] tomoyo_path_perm+0x276/0x480 [ 142.699551][ T7626] ? tomoyo_path_perm+0x262/0x480 [ 142.701253][ T7626] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 142.702998][ T7626] ? __pfx_lock_release+0x10/0x10 [ 142.704331][ T7626] ? kmem_cache_free+0x152/0x4c0 [ 142.705627][ T7626] ? putname+0x13c/0x180 [ 142.706733][ T7626] ? user_path_at+0x44/0x60 [ 142.707944][ T7626] ? __ia32_sys_umount+0x10a/0x1a0 [ 142.709305][ T7626] ? __pfx_aa_get_newest_label+0x10/0x10 [ 142.710820][ T7626] tomoyo_sb_umount+0x8d/0xd0 [ 142.712061][ T7626] ? __pfx_tomoyo_sb_umount+0x10/0x10 [ 142.713467][ T7626] ? get_current_fs_domain+0x184/0x1f0 [ 142.714893][ T7626] security_sb_umount+0x8e/0x210 [ 142.716329][ T7626] path_umount+0x2c5/0x10d0 [ 142.717992][ T7626] ? putname+0x13c/0x180 [ 142.719481][ T7626] ? __pfx_path_umount+0x10/0x10 [ 142.721173][ T7626] ? putname+0x13c/0x180 [ 142.722622][ T7626] __ia32_sys_umount+0x16b/0x1a0 [ 142.724265][ T7626] ? __pfx___ia32_sys_umount+0x10/0x10 [ 142.726075][ T7626] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 142.728314][ T7626] __do_fast_syscall_32+0x73/0x120 [ 142.730112][ T7626] do_fast_syscall_32+0x32/0x80 [ 142.731824][ T7626] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 142.734031][ T7626] RIP: 0023:0xf70ee579 [ 142.735455][ T7626] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 142.741977][ T7626] RSP: 002b:00000000f50e055c EFLAGS: 00000296 ORIG_RAX: 0000000000000034 [ 142.744856][ T7626] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 0000000000000000 [ 142.747167][ T7626] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 142.749280][ T7626] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 142.751897][ T7626] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 142.754452][ T7626] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 142.757144][ T7626] [ 142.758705][ T7626] ERROR: Out of memory at tomoyo_realpath_from_path. [ 142.776158][ T64] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 142.947198][ T64] usb 5-1: Using ep0 maxpacket: 8 [ 142.949860][ T64] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 142.952090][ T64] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 142.954608][ T64] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 142.958071][ T64] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 142.960733][ T64] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 142.964134][ T64] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 142.966890][ T64] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.005190][ T7630] input: syz0 as /devices/virtual/input/input16 [ 143.183913][ T64] usb 5-1: usb_control_msg returned -32 [ 143.185746][ T64] usbtmc 5-1:16.0: can't read capabilities [ 143.562889][ T7635] input: syz0 as /devices/virtual/input/input17 [ 143.797483][ T6007] usb 5-1: USB disconnect, device number 7 [ 144.192035][ T7651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.416'. [ 144.567283][ T7660] overlayfs: failed to resolve './file0': -2 [ 145.995769][ T7641] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 146.005661][ T66] Bluetooth: hci0: command 0x040f tx timeout [ 146.853985][ T7641] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 146.856216][ T7641] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 146.857831][ T7641] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 146.938988][ T7640] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 146.968635][ T7679] netlink: 'syz.2.423': attribute type 10 has an invalid length. [ 147.008001][ T7679] bridge0: port 3(team0) entered disabled state [ 147.055174][ T7681] netlink: 'syz.2.423': attribute type 10 has an invalid length. [ 147.057585][ T7681] netlink: 2 bytes leftover after parsing attributes in process `syz.2.423'. [ 147.065502][ T7679] team0: left allmulticast mode [ 147.067093][ T7679] team_slave_0: left allmulticast mode [ 147.068536][ T7679] team_slave_1: left allmulticast mode [ 147.069999][ T7679] team0: left promiscuous mode [ 147.071348][ T7679] team_slave_0: left promiscuous mode [ 147.073192][ T7679] team_slave_1: left promiscuous mode [ 147.075223][ T7679] bridge0: port 3(team0) entered disabled state [ 147.085658][ T7679] batman_adv: batadv0: Adding interface: team0 [ 147.087287][ T7679] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.094491][ T7679] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 147.097782][ T7681] team0: entered promiscuous mode [ 147.099163][ T7681] team_slave_0: entered promiscuous mode [ 147.100716][ T7681] team_slave_1: entered promiscuous mode [ 147.102945][ T7681] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.104756][ T7681] batman_adv: batadv0: Interface activated: team0 [ 147.108692][ T7681] batman_adv: batadv0: Interface deactivated: team0 [ 147.110522][ T7681] batman_adv: batadv0: Removing interface: team0 [ 147.115379][ T7681] bridge0: port 3(team0) entered blocking state [ 147.117492][ T7681] bridge0: port 3(team0) entered disabled state [ 147.119260][ T7681] team0: entered allmulticast mode [ 147.120668][ T7681] team_slave_0: entered allmulticast mode [ 147.122151][ T7681] team_slave_1: entered allmulticast mode [ 147.124888][ T7681] bridge0: port 3(team0) entered blocking state [ 147.127287][ T7681] bridge0: port 3(team0) entered forwarding state [ 147.130332][ T5985] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 147.171229][ T7682] input: syz0 as /devices/virtual/input/input18 [ 147.207678][ T7684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.425'. [ 148.075728][ T66] Bluetooth: hci1: command 0x0c1a tx timeout [ 148.587675][ T7721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.434'. [ 148.875745][ T66] Bluetooth: hci3: command 0x0c1a tx timeout [ 148.877344][ T66] Bluetooth: hci2: command 0x0c1a tx timeout [ 149.995691][ T5955] Bluetooth: hci0: command 0x040f tx timeout [ 149.996174][ T7703] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 150.859160][ T7703] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 150.861013][ T7703] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 150.862618][ T7703] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 150.941546][ T7702] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 151.160624][ T7737] input: syz0 as /devices/virtual/input/input19 [ 151.312740][ T5985] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 151.473025][ T5985] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 151.477516][ T5985] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 109, changing to 10 [ 151.480252][ T5985] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 42584, setting to 1024 [ 151.482929][ T5985] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 151.485164][ T5985] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.497880][ T7727] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 151.501976][ T5985] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 151.710883][ T64] usb 7-1: USB disconnect, device number 6 [ 152.061487][ T7748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.444'. [ 152.075719][ T5955] Bluetooth: hci1: command 0x0c1a tx timeout [ 152.875850][ T5955] Bluetooth: hci3: command 0x0c1a tx timeout [ 152.875946][ T66] Bluetooth: hci2: command 0x0c1a tx timeout [ 154.433410][ T7776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.451'. [ 154.485681][ T66] Bluetooth: hci0: command 0x040f tx timeout [ 154.487389][ T7750] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 155.384653][ T7750] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 155.454838][ T7750] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 155.538709][ T7783] syzkaller0: entered promiscuous mode [ 155.540039][ T7749] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 155.540587][ T7783] syzkaller0: entered allmulticast mode [ 155.893864][ T5955] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 155.903232][ T5955] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 155.908833][ T5955] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 155.916670][ T5955] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 155.922225][ T5955] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 155.924739][ T5955] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 156.166220][ T6006] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 156.526962][ T6006] usb 5-1: not running at top speed; connect to a high speed hub [ 156.544180][ T6006] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.552011][ T6006] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 156.555713][ T66] Bluetooth: hci1: command 0x0c1a tx timeout [ 156.572486][ T6006] usb 5-1: New USB device found, idVendor=f36a, idProduct=1b83, bcdDevice=29.2e [ 156.580091][ T6006] usb 5-1: New USB device strings: Mfr=47, Product=60, SerialNumber=79 [ 156.589071][ T6006] usb 5-1: Product: syz [ 156.596529][ T6006] usb 5-1: Manufacturer: syz [ 156.600351][ T6006] usb 5-1: SerialNumber: syz [ 156.873114][ T6006] usb 5-1: USB disconnect, device number 8 [ 156.914476][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.967563][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.035424][ T7805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.460'. [ 157.044848][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.155128][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.262758][ T11] team0: left allmulticast mode [ 157.264237][ T11] team_slave_0: left allmulticast mode [ 157.265855][ T11] team_slave_1: left allmulticast mode [ 157.267977][ T11] bridge0: port 3(team0) entered disabled state [ 157.271529][ T11] bridge_slave_1: left allmulticast mode [ 157.273178][ T11] bridge_slave_1: left promiscuous mode [ 157.274688][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.278612][ T11] bridge_slave_0: left allmulticast mode [ 157.280169][ T11] bridge_slave_0: left promiscuous mode [ 157.281728][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.519341][ T66] Bluetooth: hci2: command 0x0c1a tx timeout [ 157.525395][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.529586][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.532707][ T11] bond0 (unregistering): Released all slaves [ 157.812585][ T11] hsr_slave_0: left promiscuous mode [ 157.815090][ T11] hsr_slave_1: left promiscuous mode [ 157.819260][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.821996][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.825371][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.829054][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.852915][ T11] veth1_macvtap: left promiscuous mode [ 157.855247][ T11] veth0_macvtap: left promiscuous mode [ 157.857968][ T11] veth1_vlan: left promiscuous mode [ 157.859922][ T11] veth0_vlan: left promiscuous mode [ 157.996400][ T66] Bluetooth: hci3: command tx timeout [ 158.389195][ T11] team_slave_1 (unregistering): left promiscuous mode [ 158.393302][ T11] team0 (unregistering): Port device team_slave_1 removed [ 158.447733][ T11] team_slave_0 (unregistering): left promiscuous mode [ 158.449998][ T11] team0 (unregistering): Port device team_slave_0 removed [ 158.876427][ T7797] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 158.886187][ T66] Bluetooth: hci0: command 0x040f tx timeout [ 159.073851][ T7797] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 159.076634][ T7797] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 159.078403][ T7797] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 159.080243][ T7797] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 159.084240][ T7797] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 159.147993][ T7790] chnl_net:caif_netlink_parms(): no params data found [ 159.205021][ T7796] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 159.236621][ T7790] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.238597][ T7790] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.240509][ T7790] bridge_slave_0: entered allmulticast mode [ 159.242462][ T7790] bridge_slave_0: entered promiscuous mode [ 159.247758][ T7790] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.249598][ T7790] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.251480][ T7790] bridge_slave_1: entered allmulticast mode [ 159.253436][ T7790] bridge_slave_1: entered promiscuous mode [ 159.280160][ T7790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.290961][ T7790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.319809][ T7790] team0: Port device team_slave_0 added [ 159.322887][ T7790] team0: Port device team_slave_1 added [ 159.350031][ T7790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.351862][ T7790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.358925][ T7790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.373106][ T7862] syzkaller0: entered promiscuous mode [ 159.374602][ T7862] syzkaller0: entered allmulticast mode [ 159.377842][ T7790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.380224][ T7790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.388675][ T7790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.395639][ T833] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 159.451764][ T7863] input: syz0 as /devices/virtual/input/input20 [ 159.549133][ T833] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 159.552117][ T833] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 109, changing to 10 [ 159.555083][ T833] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 42584, setting to 1024 [ 159.559539][ T833] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 159.562002][ T833] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.568187][ T7819] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 159.574614][ T833] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 159.852334][ T5990] usb 8-1: USB disconnect, device number 7 [ 160.452551][ T7790] hsr_slave_0: entered promiscuous mode [ 160.454596][ T7790] hsr_slave_1: entered promiscuous mode [ 160.456892][ T7790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.459225][ T7790] Cannot create hsr debugfs directory [ 160.554133][ T7790] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 160.558137][ T7790] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 160.561200][ T7790] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 160.568362][ T7790] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 160.596418][ T7790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.602910][ T7790] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.606613][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.608487][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.614627][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.617873][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.697898][ T7790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.817224][ T7790] veth0_vlan: entered promiscuous mode [ 160.823991][ T7790] veth1_vlan: entered promiscuous mode [ 160.841143][ T7790] veth0_macvtap: entered promiscuous mode [ 160.844871][ T7790] veth1_macvtap: entered promiscuous mode [ 160.853792][ T7790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.858825][ T7790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.861906][ T7790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.864577][ T7790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.873380][ T7790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.883031][ T7790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.886870][ T7790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.889402][ T7790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.892235][ T7790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.895246][ T7790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.905322][ T7790] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.907848][ T7790] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.910177][ T7790] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.912519][ T7790] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.944993][ T1221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.950662][ T1221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.955697][ T66] Bluetooth: hci1: command 0x0c1a tx timeout [ 160.960484][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.962643][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.031872][ T5944] bridge0: port 3(syz_tun) entered disabled state [ 161.040229][ T5944] syz_tun (unregistering): left allmulticast mode [ 161.041962][ T5944] syz_tun (unregistering): left promiscuous mode [ 161.043680][ T5944] bridge0: port 3(syz_tun) entered disabled state [ 161.115730][ T66] Bluetooth: hci2: command 0x0c1a tx timeout [ 161.115751][ T5955] Bluetooth: hci3: command 0x040f tx timeout [ 161.261455][ T7916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.456'. [ 161.288471][ T214] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.405382][ T214] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.457479][ T214] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.539575][ T66] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 161.543737][ T66] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 161.557937][ T66] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 161.561830][ T66] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 161.564849][ T66] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 161.567525][ T66] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 161.608330][ T214] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.701877][ T7924] chnl_net:caif_netlink_parms(): no params data found [ 161.745634][ T7933] input: syz0 as /devices/virtual/input/input21 [ 161.753822][ T7924] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.756381][ T7924] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.758336][ T7924] bridge_slave_0: entered allmulticast mode [ 161.760303][ T7924] bridge_slave_0: entered promiscuous mode [ 161.762764][ T7924] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.764681][ T7924] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.767137][ T7924] bridge_slave_1: entered allmulticast mode [ 161.769199][ T7924] bridge_slave_1: entered promiscuous mode [ 161.830188][ T7924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.837263][ T214] bridge_slave_1: left allmulticast mode [ 161.838847][ T214] bridge_slave_1: left promiscuous mode [ 161.840391][ T214] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.843136][ T214] bridge_slave_0: left allmulticast mode [ 161.844633][ T214] bridge_slave_0: left promiscuous mode [ 161.847120][ T214] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.157810][ T214] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.161685][ T214] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.164788][ T214] bond0 (unregistering): Released all slaves [ 162.171031][ T7924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.198121][ T7924] team0: Port device team_slave_0 added [ 162.203051][ T7924] team0: Port device team_slave_1 added [ 162.244409][ T7924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.249253][ T7924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.258260][ T7924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.268915][ T7924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.270779][ T7924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.277568][ T7924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.320103][ T7924] hsr_slave_0: entered promiscuous mode [ 162.322062][ T7924] hsr_slave_1: entered promiscuous mode [ 162.323900][ T7924] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.325909][ T7924] Cannot create hsr debugfs directory [ 162.427928][ T7924] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 162.517599][ T7924] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 162.542375][ T7924] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 162.548983][ T7924] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 162.560326][ T214] hsr_slave_0: left promiscuous mode [ 162.563219][ T214] hsr_slave_1: left promiscuous mode [ 162.585405][ T214] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.587607][ T214] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.617329][ T214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.641245][ T214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.703268][ T214] veth1_macvtap: left promiscuous mode [ 162.704763][ T214] veth0_macvtap: left promiscuous mode [ 162.706577][ T214] veth1_vlan: left promiscuous mode [ 162.708073][ T214] veth0_vlan: left promiscuous mode [ 163.195652][ T5955] Bluetooth: hci3: command 0x040f tx timeout [ 163.548340][ T214] team0 (unregistering): Port device team_slave_1 removed [ 163.605642][ T5955] Bluetooth: hci0: command tx timeout [ 163.682883][ T7977] FAULT_INJECTION: forcing a failure. [ 163.682883][ T7977] name failslab, interval 1, probability 0, space 0, times 0 [ 163.693899][ T7977] CPU: 2 UID: 0 PID: 7977 Comm: syz.0.483 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 163.696676][ T7977] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 163.699712][ T7977] Call Trace: [ 163.700608][ T7977] [ 163.701391][ T7977] dump_stack_lvl+0x16c/0x1f0 [ 163.702616][ T7977] should_fail_ex+0x497/0x5b0 [ 163.704190][ T7977] ? fs_reclaim_acquire+0xae/0x150 [ 163.705641][ T7977] should_failslab+0xc2/0x120 [ 163.706865][ T7977] __kmalloc_noprof+0xce/0x4f0 [ 163.708075][ T7977] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 163.709519][ T7977] ? tomoyo_realpath_from_path+0xbf/0x710 [ 163.710967][ T7977] ? rcu_is_watching+0x12/0xc0 [ 163.712211][ T7977] tomoyo_realpath_from_path+0xbf/0x710 [ 163.713619][ T7977] tomoyo_check_open_permission+0x2ad/0x3c0 [ 163.715134][ T7977] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 163.716746][ T7977] ? __pfx_hook_file_open+0x10/0x10 [ 163.718069][ T7977] ? lock_acquire+0x2f/0xb0 [ 163.719261][ T7977] tomoyo_file_open+0x6b/0x90 [ 163.720814][ T7977] security_file_open+0x84/0x1e0 [ 163.722580][ T7977] do_dentry_open+0x57e/0x1ea0 [ 163.724282][ T7977] dentry_open+0xdd/0x470 [ 163.725545][ T7977] ovl_path_open+0x198/0x1f0 [ 163.726773][ T7977] ovl_dir_read_merged+0x185/0x5d0 [ 163.728070][ T7977] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 163.729561][ T7977] ? __pfx_ovl_fill_merge+0x10/0x10 [ 163.730951][ T7977] ? kasan_save_track+0x14/0x30 [ 163.732219][ T7977] ovl_iterate+0x865/0xe40 [ 163.733380][ T7977] ? down_read_killable+0xcc/0x380 [ 163.734721][ T7977] ? __pfx_down_read_killable+0x10/0x10 [ 163.736166][ T7977] ? __pfx_ovl_iterate+0x10/0x10 [ 163.737456][ T7977] wrap_directory_iterator+0x9f/0xe0 [ 163.739021][ T7977] iterate_dir+0x52f/0xb40 [ 163.740416][ T7977] __ia32_sys_getdents64+0x148/0x2c0 [ 163.741859][ T7977] ? __pfx___ia32_sys_getdents64+0x10/0x10 [ 163.743399][ T7977] ? __pfx_filldir64+0x10/0x10 [ 163.744652][ T7977] __do_fast_syscall_32+0x73/0x120 [ 163.745973][ T7977] do_fast_syscall_32+0x32/0x80 [ 163.747248][ T7977] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 163.748925][ T7977] RIP: 0023:0xf708e579 [ 163.749995][ T7977] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 163.755026][ T7977] RSP: 002b:00000000f508055c EFLAGS: 00000296 ORIG_RAX: 00000000000000dc [ 163.757200][ T7977] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000300 [ 163.759642][ T7977] RDX: 000000000000009a RSI: 0000000000000000 RDI: 0000000000000000 [ 163.762469][ T7977] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 163.764499][ T7977] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 163.766502][ T7977] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 163.768674][ T7977] [ 163.770786][ T7977] ERROR: Out of memory at tomoyo_realpath_from_path. [ 163.784237][ T214] team0 (unregistering): Port device team_slave_0 removed [ 164.284187][ T7983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.484'. [ 164.350699][ T7924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.357900][ T7924] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.374685][ T7924] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 164.382108][ T7924] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 164.385617][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.387450][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.389851][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.391680][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.534162][ T7998] input: syz0 as /devices/virtual/input/input22 [ 164.770860][ T7924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.910974][ T7924] veth0_vlan: entered promiscuous mode [ 164.914659][ T7924] veth1_vlan: entered promiscuous mode [ 164.925166][ T7924] veth0_macvtap: entered promiscuous mode [ 164.929603][ T7924] veth1_macvtap: entered promiscuous mode [ 164.934635][ T7924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.937504][ T7924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.940256][ T7924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.942960][ T7924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.946430][ T7924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.949203][ T7924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.951969][ T7924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.954515][ T7924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.957517][ T7924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.961325][ T7924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.968556][ T7924] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.970862][ T7924] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.973089][ T7924] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.975353][ T7924] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.008799][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.010929][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.022936][ T8026] netlink: 28 bytes leftover after parsing attributes in process `syz.4.487'. [ 165.025431][ T8026] netem: incorrect gi model size [ 165.027650][ T8026] netem: change failed [ 165.031625][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.033722][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.111838][ T8035] FAULT_INJECTION: forcing a failure. [ 165.111838][ T8035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.116971][ T8035] CPU: 3 UID: 0 PID: 8035 Comm: syz.4.488 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 165.120221][ T8035] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 165.123371][ T8035] Call Trace: [ 165.124509][ T8035] [ 165.125607][ T8035] dump_stack_lvl+0x16c/0x1f0 [ 165.127252][ T8035] should_fail_ex+0x497/0x5b0 [ 165.128538][ T8035] _copy_from_user+0x2e/0xd0 [ 165.129761][ T8035] get_old_timespec32+0x153/0x1f0 [ 165.131127][ T8035] ? __pfx_get_old_timespec32+0x10/0x10 [ 165.132609][ T8035] __ia32_sys_clock_nanosleep_time32+0x1ce/0x4d0 [ 165.134277][ T8035] ? __pfx___ia32_sys_clock_nanosleep_time32+0x10/0x10 [ 165.136057][ T8035] __do_fast_syscall_32+0x73/0x120 [ 165.137409][ T8035] do_fast_syscall_32+0x32/0x80 [ 165.138817][ T8035] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 165.140503][ T8035] RIP: 0023:0xf70fe579 [ 165.141579][ T8035] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 165.146625][ T8035] RSP: 002b:00000000f50f055c EFLAGS: 00000296 ORIG_RAX: 000000000000010b [ 165.148904][ T8035] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000000000000 [ 165.151002][ T8035] RDX: 00000000200000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 165.153057][ T8035] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 165.155126][ T8035] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 165.157184][ T8035] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 165.159296][ T8035] [ 165.240675][ T8046] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 165.276103][ T5955] Bluetooth: hci3: command 0x040f tx timeout [ 165.676304][ T5955] Bluetooth: hci0: command tx timeout [ 165.935369][ T8032] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 165.956992][ T8032] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 165.960227][ T8032] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 165.961876][ T8032] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 165.963490][ T8032] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 165.966653][ T8032] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 166.278402][ T8083] input: syz0 as /devices/virtual/input/input23 [ 166.797771][ T8108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.496'. [ 167.012479][ T8121] input: syz0 as /devices/virtual/input/input24 [ 167.205728][ T5955] Bluetooth: hci1: command 0x0c1a tx timeout [ 168.008056][ T5955] Bluetooth: hci0: command 0x0419 tx timeout [ 168.008086][ T5957] Bluetooth: hci2: command 0x0c1a tx timeout [ 168.010324][ T66] Bluetooth: hci3: command 0x040f tx timeout [ 168.330374][ T8126] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 168.342306][ T8126] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 168.344081][ T8126] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 168.346265][ T8126] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 169.615652][ T5955] Bluetooth: hci1: command 0x0c1a tx timeout [ 170.046120][ T8169] netlink: 24 bytes leftover after parsing attributes in process `syz.5.511'. [ 170.395966][ T5955] Bluetooth: hci0: command 0x0419 tx timeout [ 170.396074][ T66] Bluetooth: hci2: command 0x0c1a tx timeout [ 170.399203][ T5957] Bluetooth: hci3: command 0x040f tx timeout [ 171.675697][ T5957] Bluetooth: hci1: command 0x0c1a tx timeout [ 171.677391][ T8156] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 172.486041][ T5957] Bluetooth: hci0: command 0x0419 tx timeout [ 172.544279][ T8156] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 172.547335][ T8156] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 172.549039][ T8156] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 172.691258][ T8230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.519'. [ 172.693567][ T8230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.519'. [ 172.831168][ T8239] FAULT_INJECTION: forcing a failure. [ 172.831168][ T8239] name failslab, interval 1, probability 0, space 0, times 0 [ 172.834399][ T8239] CPU: 2 UID: 0 PID: 8239 Comm: syz.1.521 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 172.837050][ T8239] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 172.839753][ T8239] Call Trace: [ 172.840627][ T8239] [ 172.841385][ T8239] dump_stack_lvl+0x16c/0x1f0 [ 172.842628][ T8239] should_fail_ex+0x497/0x5b0 [ 172.843882][ T8239] ? fs_reclaim_acquire+0xae/0x150 [ 172.845229][ T8239] should_failslab+0xc2/0x120 [ 172.846477][ T8239] __kmalloc_cache_noprof+0x68/0x420 [ 172.847861][ T8239] ? kasan_save_track+0x14/0x30 [ 172.849156][ T8239] snd_mixer_oss_put_volume1_vol.constprop.0.isra.0+0xd0/0x560 [ 172.851123][ T8239] snd_mixer_oss_put_volume1+0x937/0xd30 [ 172.852579][ T8239] ? __pfx_snd_mixer_oss_put_volume1+0x10/0x10 [ 172.854193][ T8239] snd_mixer_oss_ioctl1+0x611/0x1a90 [ 172.855577][ T8239] ? __pfx_snd_mixer_oss_ioctl1+0x10/0x10 [ 172.857069][ T8239] ? __pfx_lock_release+0x10/0x10 [ 172.858399][ T8239] ? trace_lock_acquire+0x14e/0x1f0 [ 172.859779][ T8239] ? __fget_files+0x206/0x3a0 [ 172.861027][ T8239] snd_mixer_oss_ioctl_compat+0x43/0x70 [ 172.862473][ T8239] ? __pfx_snd_mixer_oss_ioctl_compat+0x10/0x10 [ 172.864104][ T8239] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 172.865486][ T8239] __do_fast_syscall_32+0x73/0x120 [ 172.866803][ T8239] do_fast_syscall_32+0x32/0x80 [ 172.868068][ T8239] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 172.869696][ T8239] RIP: 0023:0xf711e579 [ 172.870762][ T8239] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 172.875621][ T8239] RSP: 002b:00000000f511055c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 172.877793][ T8239] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040086603 [ 172.879830][ T8239] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 172.881901][ T8239] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 172.883951][ T8239] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 172.886007][ T8239] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 172.888073][ T8239] [ 173.005245][ T8243] input: syz0 as /devices/virtual/input/input25 [ 173.065756][ T5990] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 173.241431][ T5990] usb 10-1: Using ep0 maxpacket: 8 [ 173.243835][ T5990] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.246638][ T5990] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.248919][ T5990] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 173.251213][ T5990] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 173.253486][ T5990] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 173.255831][ T5990] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 173.259453][ T5990] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 173.261589][ T5990] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.263473][ T5990] usb 10-1: Product: syz [ 173.264495][ T5990] usb 10-1: Manufacturer: syz [ 173.265739][ T5990] usb 10-1: SerialNumber: syz [ 173.547457][ T5990] cdc_ncm 10-1:1.0: bind() failure [ 173.550437][ T5990] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 173.566258][ T5990] cdc_ncm 10-1:1.1: bind() failure [ 173.582945][ T5990] usb 10-1: USB disconnect, device number 2 [ 173.756054][ T66] Bluetooth: hci2: command 0x0c1a tx timeout [ 174.056226][ T8222] Trying to write to read-only block-device nullb0 [ 174.265728][ T5988] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 174.555700][ T66] Bluetooth: hci0: command 0x0419 tx timeout [ 174.555713][ T5957] Bluetooth: hci3: command 0x040f tx timeout [ 174.576796][ T5988] usb 6-1: not running at top speed; connect to a high speed hub [ 174.580360][ T5988] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.583253][ T5988] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 174.587393][ T5988] usb 6-1: New USB device found, idVendor=f36a, idProduct=1b83, bcdDevice=29.2e [ 174.589776][ T5988] usb 6-1: New USB device strings: Mfr=47, Product=60, SerialNumber=79 [ 174.592017][ T5988] usb 6-1: Product: syz [ 174.593135][ T5988] usb 6-1: Manufacturer: syz [ 174.594548][ T5988] usb 6-1: SerialNumber: syz [ 174.837188][ T5988] usb 6-1: USB disconnect, device number 9 [ 174.923047][ T8275] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 174.924952][ T8275] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 174.926892][ T8275] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 174.928498][ T8275] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 175.577180][ T8308] netlink: 4 bytes leftover after parsing attributes in process `syz.5.532'. [ 176.245668][ T66] Bluetooth: hci1: command 0x0c1a tx timeout [ 176.452376][ T8323] syzkaller0: entered promiscuous mode [ 176.453846][ T8323] syzkaller0: entered allmulticast mode [ 176.968331][ T66] Bluetooth: hci0: command 0x0419 tx timeout [ 176.968372][ T5955] Bluetooth: hci2: command 0x0c1a tx timeout [ 176.971843][ T5957] Bluetooth: hci3: command 0x040f tx timeout [ 177.301196][ T8327] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 177.303121][ T8327] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 177.305130][ T8327] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 177.313121][ T8327] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 177.678894][ T8356] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 179.077196][ T8438] FAULT_INJECTION: forcing a failure. [ 179.077196][ T8438] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.080655][ T8438] CPU: 1 UID: 0 PID: 8438 Comm: syz.4.556 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 179.083376][ T8438] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 179.086163][ T8438] Call Trace: [ 179.087044][ T8438] [ 179.087824][ T8438] dump_stack_lvl+0x16c/0x1f0 [ 179.089076][ T8438] should_fail_ex+0x497/0x5b0 [ 179.090366][ T8438] _copy_from_user+0x2e/0xd0 [ 179.091587][ T8438] memdup_user+0x71/0xd0 [ 179.092709][ T8438] strndup_user+0x78/0xe0 [ 179.093846][ T8438] __ia32_sys_mount+0x181/0x310 [ 179.095126][ T8438] ? __pfx___ia32_sys_mount+0x10/0x10 [ 179.096521][ T8438] __do_fast_syscall_32+0x73/0x120 [ 179.097862][ T8438] do_fast_syscall_32+0x32/0x80 [ 179.099142][ T8438] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 179.100825][ T8438] RIP: 0023:0xf70fe579 [ 179.101894][ T8438] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 179.106790][ T8438] RSP: 002b:00000000f50f055c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 179.108949][ T8438] RAX: ffffffffffffffda RBX: 0000000020000140 RCX: 0000000020000100 [ 179.111028][ T8438] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000020000980 [ 179.113018][ T8438] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 179.115092][ T8438] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 179.117120][ T8438] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 179.119103][ T8438] [ 179.155717][ T8440] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 179.358365][ T5955] Bluetooth: hci0: command 0x0419 tx timeout [ 179.358395][ T5957] Bluetooth: hci2: command 0x0c1a tx timeout [ 179.365638][ T5957] Bluetooth: hci3: command 0x040f tx timeout [ 180.475689][ T5957] Bluetooth: hci1: command 0x0c1a tx timeout [ 180.475790][ T8408] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 181.287963][ T8408] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 181.290742][ T8408] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 181.292515][ T8408] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 182.025452][ T8475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.565'. [ 182.164627][ T8476] netlink: 4 bytes leftover after parsing attributes in process `syz.5.564'. [ 182.565624][ T5957] Bluetooth: hci2: command 0x0c1a tx timeout [ 182.875493][ T8506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.574'. [ 183.365740][ T5957] Bluetooth: hci0: command 0x0419 tx timeout [ 183.365759][ T5955] Bluetooth: hci3: command 0x040f tx timeout [ 184.475661][ T5955] Bluetooth: hci1: command 0x0c1a tx timeout [ 184.476028][ T8480] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 185.324467][ T8480] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 185.326316][ T8480] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 185.327971][ T8480] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 185.382857][ T8512] SET target dimension over the limit! [ 185.675665][ T6007] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 185.846790][ T6007] usb 9-1: config 0 has no interfaces? [ 185.848375][ T6007] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 185.851234][ T6007] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.861286][ T6007] usb 9-1: config 0 descriptor?? [ 186.015368][ T8529] netlink: 132 bytes leftover after parsing attributes in process `syz.0.582'. [ 186.114474][ T39] audit: type=1326 audit(1734842981.685:2355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8534 comm="syz.0.583" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 186.120219][ T39] audit: type=1326 audit(1734842981.685:2356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8534 comm="syz.0.583" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 186.124260][ T8514] kvm: pic: single mode not supported [ 186.126283][ T8514] kvm: pic: level sensitive irq not supported [ 186.126562][ T39] audit: type=1326 audit(1734842981.685:2357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8534 comm="syz.0.583" exe="/syz-executor" sig=0 arch=40000003 syscall=153 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 186.128210][ T8514] kvm: pic: non byte read [ 186.129349][ T39] audit: type=1326 audit(1734842981.685:2358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8534 comm="syz.0.583" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 186.136097][ T8514] kvm: pic: non byte read [ 186.136575][ T8514] kvm: pic: single mode not supported [ 186.138220][ T39] audit: type=1326 audit(1734842981.685:2359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8534 comm="syz.0.583" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 186.143209][ T8514] kvm: pic: level sensitive irq not supported [ 186.144305][ T39] audit: type=1326 audit(1734842981.685:2360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8534 comm="syz.0.583" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 186.153921][ T8514] kvm: pic: non byte read [ 186.159420][ T39] audit: type=1326 audit(1734842981.685:2361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8534 comm="syz.0.583" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 186.159440][ T39] audit: type=1326 audit(1734842981.685:2362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8534 comm="syz.0.583" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 186.159456][ T39] audit: type=1326 audit(1734842981.695:2363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8534 comm="syz.0.583" exe="/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 186.159472][ T39] audit: type=1326 audit(1734842981.695:2364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8534 comm="syz.0.583" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 186.407689][ T8541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.584'. [ 186.555775][ T5955] Bluetooth: hci2: command 0x0c1a tx timeout [ 186.983846][ T8539] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 186.986770][ T8539] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 186.989059][ T8539] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 186.992120][ T8539] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 187.020851][ T8548] netlink: 'syz.0.587': attribute type 10 has an invalid length. [ 187.118249][ T6007] usb 9-1: USB disconnect, device number 2 [ 187.647063][ T8567] netlink: 4 bytes leftover after parsing attributes in process `syz.5.591'. [ 187.664917][ T8569] FAULT_INJECTION: forcing a failure. [ 187.664917][ T8569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.668768][ T8569] CPU: 0 UID: 0 PID: 8569 Comm: syz.4.593 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 187.671541][ T8569] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 187.674305][ T8569] Call Trace: [ 187.675221][ T8569] [ 187.676006][ T8569] dump_stack_lvl+0x16c/0x1f0 [ 187.677242][ T8569] should_fail_ex+0x497/0x5b0 [ 187.678489][ T8569] _copy_to_user+0x32/0xd0 [ 187.679829][ T8569] simple_read_from_buffer+0xd0/0x160 [ 187.681326][ T8569] proc_fail_nth_read+0x198/0x270 [ 187.682648][ T8569] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 187.684100][ T8569] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 187.685535][ T8569] vfs_read+0x1df/0xbe0 [ 187.686631][ T8569] ? __fget_files+0x1fc/0x3a0 [ 187.687856][ T8569] ? __pfx___mutex_lock+0x10/0x10 [ 187.689169][ T8569] ? __pfx_vfs_read+0x10/0x10 [ 187.690435][ T8569] ? __fget_files+0x206/0x3a0 [ 187.691672][ T8569] ksys_read+0x12b/0x250 [ 187.692777][ T8569] ? __pfx_ksys_read+0x10/0x10 [ 187.694038][ T8569] __do_fast_syscall_32+0x73/0x120 [ 187.695378][ T8569] do_fast_syscall_32+0x32/0x80 [ 187.696666][ T8569] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 187.698285][ T8569] RIP: 0023:0xf70fe579 [ 187.699346][ T8569] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 187.704307][ T8569] RSP: 002b:00000000f50f0590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 187.706458][ T8569] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50f0620 [ 187.708505][ T8569] RDX: 000000000000000f RSI: 00000000f7433ff4 RDI: 0000000000000000 [ 187.710564][ T8569] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 187.712609][ T8569] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 187.714519][ T8569] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 187.716543][ T8569] [ 188.168105][ T8579] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 188.217212][ T8584] netlink: 4 bytes leftover after parsing attributes in process `syz.4.595'. [ 188.235648][ T5955] Bluetooth: hci1: command 0x0c1a tx timeout [ 188.364565][ T8586] usb usb4: usbfs: process 8586 (syz.5.598) did not claim interface 0 before use [ 188.427579][ T8581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.597'. [ 189.095438][ T5955] Bluetooth: hci0: command 0x0419 tx timeout [ 189.095516][ T5957] Bluetooth: hci2: command 0x0c1a tx timeout [ 189.097838][ T5955] Bluetooth: hci3: command 0x040f tx timeout [ 189.879373][ T8621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.605'. [ 191.595819][ T66] Bluetooth: hci1: command 0x0c1a tx timeout [ 191.598810][ T8601] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 192.362515][ T8601] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 192.364097][ T8601] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 192.365764][ T8601] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 192.375717][ T39] kauditd_printk_skb: 7 callbacks suppressed [ 192.375730][ T39] audit: type=1326 audit(1734842987.945:2372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8641 comm="syz.0.613" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 192.384731][ T39] audit: type=1326 audit(1734842987.945:2373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8641 comm="syz.0.613" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 192.391780][ T39] audit: type=1326 audit(1734842987.945:2374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8641 comm="syz.0.613" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 192.398526][ T39] audit: type=1326 audit(1734842987.945:2375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8641 comm="syz.0.613" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 192.497354][ T39] audit: type=1326 audit(1734842988.075:2376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8641 comm="syz.0.613" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 192.566542][ T39] audit: type=1326 audit(1734842988.145:2377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8641 comm="syz.0.613" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 192.621828][ T8654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.617'. [ 192.635669][ T6008] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 192.638059][ T39] audit: type=1326 audit(1734842988.215:2378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8641 comm="syz.0.613" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 192.643870][ T39] audit: type=1326 audit(1734842988.215:2379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8641 comm="syz.0.613" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 192.649860][ T39] audit: type=1326 audit(1734842988.225:2380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8641 comm="syz.0.613" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 192.705827][ T39] audit: type=1326 audit(1734842988.285:2381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8641 comm="syz.0.613" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 192.807179][ T6008] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 192.810107][ T6008] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 192.812784][ T6008] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 192.815109][ T6008] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.820729][ T8644] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 192.824081][ T6008] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 192.943172][ T8671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.619'. [ 193.073038][ T833] usb 5-1: USB disconnect, device number 9 [ 193.076333][ T8641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.171419][ T8677] netlink: 4 bytes leftover after parsing attributes in process `syz.5.624'. [ 193.175818][ T8675] nbd4: detected capacity change from 0 to 67108884 [ 193.191748][ T6034] block nbd4: Send control failed (result -89) [ 193.193559][ T6034] block nbd4: Request send failed, requeueing [ 193.197758][ T66] block nbd4: Receive control failed (result -32) [ 193.198976][ T8235] block nbd4: Dead connection, failed to find a fallback [ 193.201634][ T8235] block nbd4: shutting down sockets [ 193.203216][ T8235] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 193.206144][ T8235] Buffer I/O error on dev nbd4, logical block 0, async page read [ 193.211835][ T6034] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 193.214572][ T6034] Buffer I/O error on dev nbd4, logical block 0, async page read [ 193.218182][ T6034] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 193.220570][ T6034] Buffer I/O error on dev nbd4, logical block 0, async page read [ 193.223250][ T6034] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 193.226566][ T6034] Buffer I/O error on dev nbd4, logical block 0, async page read [ 193.229497][ T6034] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 193.231884][ T6034] Buffer I/O error on dev nbd4, logical block 0, async page read [ 193.234029][ T6034] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 193.236768][ T6034] Buffer I/O error on dev nbd4, logical block 0, async page read [ 193.238841][ T6034] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 193.241175][ T6034] Buffer I/O error on dev nbd4, logical block 0, async page read [ 193.244149][ T6034] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 193.247062][ T6034] Buffer I/O error on dev nbd4, logical block 0, async page read [ 193.249815][ T6034] ldm_validate_partition_table(): Disk read failed. [ 193.251573][ T6034] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 193.253906][ T6034] Buffer I/O error on dev nbd4, logical block 0, async page read [ 193.256053][ T6034] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 193.258373][ T6034] Buffer I/O error on dev nbd4, logical block 0, async page read [ 193.260431][ T6034] Dev nbd4: unable to read RDB block 0 [ 193.262050][ T6034] nbd4: unable to read partition table [ 193.272626][ T8681] syz.0.625: attempt to access beyond end of device [ 193.272626][ T8681] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 193.276962][ T8681] syz.0.625: attempt to access beyond end of device [ 193.276962][ T8681] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 193.280946][ T8681] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 193.283977][ T8681] syz.0.625: attempt to access beyond end of device [ 193.283977][ T8681] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 193.287450][ T8681] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 193.289929][ T8681] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 193.291996][ T8681] UDF-fs: Scanning with blocksize 512 failed [ 193.297580][ T8681] syz.0.625: attempt to access beyond end of device [ 193.297580][ T8681] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 193.301548][ T8681] syz.0.625: attempt to access beyond end of device [ 193.301548][ T8681] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 193.305006][ T8681] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 193.309623][ T8681] syz.0.625: attempt to access beyond end of device [ 193.309623][ T8681] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 193.314292][ T8681] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 193.318578][ T8681] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 193.321166][ T8681] UDF-fs: Scanning with blocksize 1024 failed [ 193.323674][ T8681] syz.0.625: attempt to access beyond end of device [ 193.323674][ T8681] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 193.332095][ T8681] syz.0.625: attempt to access beyond end of device [ 193.332095][ T8681] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 193.336159][ T8681] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 193.338673][ T8681] syz.0.625: attempt to access beyond end of device [ 193.338673][ T8681] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 193.341963][ T8681] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 193.344365][ T8681] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 193.348686][ T8681] UDF-fs: Scanning with blocksize 2048 failed [ 193.350512][ T8681] syz.0.625: attempt to access beyond end of device [ 193.350512][ T8681] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 193.353667][ T8681] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 193.356067][ T8678] ldm_validate_partition_table(): Disk read failed. [ 193.357054][ T8681] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 193.360608][ T8681] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 193.360638][ T8678] Dev nbd4: unable to read RDB block 0 [ 193.362485][ T8681] UDF-fs: Scanning with blocksize 4096 failed [ 193.362492][ T8681] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 193.371375][ T8678] nbd4: unable to read partition table [ 193.377821][ T8678] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 193.387965][ T8678] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554441, location=33554441 [ 193.399041][ T8678] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554185, location=33554185 [ 193.402439][ T8678] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554440, location=33554440 [ 193.405503][ T8678] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554184, location=33554184 [ 193.410289][ T8678] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554439, location=33554439 [ 193.413862][ T8678] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554183, location=33554183 [ 193.418171][ T8678] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554291, location=33554291 [ 193.419482][ T6034] ldm_validate_partition_table(): Disk read failed. [ 193.421173][ T8678] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554035, location=33554035 [ 193.422828][ T6034] Dev nbd4: unable to read RDB block 0 [ 193.424977][ T8678] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554289, location=33554289 [ 193.430126][ T8678] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554033, location=33554033 [ 193.431945][ T6034] nbd4: unable to read partition table [ 193.433379][ T8678] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 193.441459][ T8678] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 193.444603][ T8678] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16777220, location=16777220 [ 193.449170][ T8678] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16776964, location=16776964 [ 193.453588][ T8678] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16777219, location=16777219 [ 193.457321][ T8678] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16776963, location=16776963 [ 193.460833][ T8678] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16777218, location=16777218 [ 193.464786][ T8678] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16776962, location=16776962 [ 193.469273][ T8678] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16777070, location=16777070 [ 193.473438][ T8678] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16776814, location=16776814 [ 193.477480][ T8678] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16777068, location=16777068 [ 193.481056][ T8678] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16776812, location=16776812 [ 193.484333][ T8678] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 193.490002][ T8678] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 193.492784][ T8678] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388609, location=8388609 [ 193.495845][ T8678] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388353, location=8388353 [ 193.498748][ T8678] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388608, location=8388608 [ 193.502166][ T8678] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388352, location=8388352 [ 193.505477][ T8678] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388607, location=8388607 [ 193.510894][ T8678] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388351, location=8388351 [ 193.513841][ T8678] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388459, location=8388459 [ 193.516894][ T8678] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388203, location=8388203 [ 193.519977][ T8678] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388457, location=8388457 [ 193.522814][ T8678] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388201, location=8388201 [ 193.525617][ T8678] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 193.528105][ T8678] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 193.606075][ T1414] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.607861][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.675638][ T66] Bluetooth: hci2: command 0x0c1a tx timeout [ 193.765055][ T8691] input: syz0 as /devices/virtual/input/input27 [ 194.089365][ T8698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.630'. [ 194.300746][ T8706] blktrace: Concurrent blktraces are not allowed on sg0 [ 194.381499][ T8711] FAULT_INJECTION: forcing a failure. [ 194.381499][ T8711] name failslab, interval 1, probability 0, space 0, times 0 [ 194.384859][ T8711] CPU: 0 UID: 0 PID: 8711 Comm: syz.0.635 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 194.387731][ T8711] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 194.390513][ T8711] Call Trace: [ 194.391409][ T8711] [ 194.392200][ T8711] dump_stack_lvl+0x16c/0x1f0 [ 194.393441][ T8711] should_fail_ex+0x497/0x5b0 [ 194.394693][ T8711] ? fs_reclaim_acquire+0xae/0x150 [ 194.396085][ T8711] should_failslab+0xc2/0x120 [ 194.397358][ T8711] __kmalloc_noprof+0xce/0x4f0 [ 194.398664][ T8711] ? ioctl_standard_iw_point+0x3c6/0xc00 [ 194.400136][ T8711] ioctl_standard_iw_point+0x3c6/0xc00 [ 194.401570][ T8711] ? __pfx_cfg80211_wext_giwscan+0x10/0x10 [ 194.403110][ T8711] ? __pfx_ioctl_standard_iw_point+0x10/0x10 [ 194.404686][ T8711] ? rcu_is_watching+0x12/0xc0 [ 194.405962][ T8711] ? trace_contention_end+0xee/0x140 [ 194.407348][ T8711] ? __mutex_lock+0x1cc/0xa60 [ 194.408600][ T8711] compat_standard_call+0x20f/0x350 [ 194.409982][ T8711] ? __pfx_cfg80211_wext_giwscan+0x10/0x10 [ 194.411519][ T8711] ? __pfx_compat_standard_call+0x10/0x10 [ 194.413005][ T8711] ? wireless_warn_cfg80211_wext+0x82/0x130 [ 194.414570][ T8711] ? __pfx_wireless_warn_cfg80211_wext+0x10/0x10 [ 194.416225][ T8711] ? __pfx_compat_standard_call+0x10/0x10 [ 194.417725][ T8711] ? __pfx_cfg80211_wext_giwscan+0x10/0x10 [ 194.419256][ T8711] wireless_process_ioctl.constprop.0+0x2b7/0x390 [ 194.420962][ T8711] compat_wext_handle_ioctl+0x1bf/0x310 [ 194.422414][ T8711] ? __pfx_compat_wext_handle_ioctl+0x10/0x10 [ 194.423995][ T8711] ? unix_ioctl+0x2c6/0x5c0 [ 194.425193][ T8711] compat_sock_ioctl+0x337/0x7e0 [ 194.426506][ T8711] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 194.427925][ T8711] ? __fget_files+0x206/0x3a0 [ 194.429174][ T8711] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 194.430611][ T8711] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 194.431996][ T8711] __do_fast_syscall_32+0x73/0x120 [ 194.433360][ T8711] do_fast_syscall_32+0x32/0x80 [ 194.434647][ T8711] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 194.436335][ T8711] RIP: 0023:0xf708e579 [ 194.437419][ T8711] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 194.442445][ T8711] RSP: 002b:00000000f508055c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 194.444762][ T8711] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008b19 [ 194.446861][ T8711] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 194.448936][ T8711] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 194.451021][ T8711] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 194.453067][ T8711] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 194.455159][ T8711] [ 194.456090][ C0] vkms_vblank_simulate: vblank timer overrun [ 194.459335][ T66] Bluetooth: hci0: command 0x0419 tx timeout [ 194.460634][ T5955] Bluetooth: hci3: command 0x040f tx timeout [ 194.574426][ T8724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.639'. [ 194.769097][ T8732] netlink: 24 bytes leftover after parsing attributes in process `syz.1.641'. [ 194.771515][ T8732] netlink: 24 bytes leftover after parsing attributes in process `syz.1.641'. [ 195.556895][ T8737] netlink: 28 bytes leftover after parsing attributes in process `syz.1.642'. [ 195.559445][ T8737] netem: incorrect gi model size [ 195.560902][ T8737] netem: change failed [ 195.562790][ T8737] blktrace: Concurrent blktraces are not allowed on sg0 [ 196.565727][ T8716] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 196.565965][ T5955] Bluetooth: hci1: command 0x0c1a tx timeout [ 197.357616][ T8716] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 197.363265][ T8716] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 197.365636][ T8716] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 198.470170][ T8752] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 198.472149][ T8752] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 198.474473][ T8752] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 198.476841][ T8752] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 199.358122][ T8769] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 199.360222][ T8769] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 199.362019][ T8769] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 199.363915][ T8769] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 199.586153][ T8792] FAULT_INJECTION: forcing a failure. [ 199.586153][ T8792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.590592][ T8792] CPU: 0 UID: 0 PID: 8792 Comm: syz.0.659 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 199.594116][ T8792] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 199.597772][ T8792] Call Trace: [ 199.598914][ T8792] [ 199.599928][ T8792] dump_stack_lvl+0x16c/0x1f0 [ 199.601537][ T8792] should_fail_ex+0x497/0x5b0 [ 199.603200][ T8792] _copy_from_iter+0x29b/0x1400 [ 199.604975][ T8792] ? trace_lock_acquire+0x14e/0x1f0 [ 199.606821][ T8792] ? __alloc_skb+0x200/0x380 [ 199.608426][ T8792] ? __pfx__copy_from_iter+0x10/0x10 [ 199.610248][ T8792] ? __virt_addr_valid+0x1a4/0x590 [ 199.611989][ T8792] ? __virt_addr_valid+0x5e/0x590 [ 199.613651][ T8792] ? __phys_addr_symbol+0x30/0x80 [ 199.615352][ T8792] ? __check_object_size+0x488/0x710 [ 199.617141][ T8792] netlink_sendmsg+0x813/0xd70 [ 199.618781][ T8792] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.620570][ T8792] ____sys_sendmsg+0x9ae/0xb40 [ 199.622182][ T8792] ? __pfx_____sys_sendmsg+0x10/0x10 [ 199.623958][ T8792] ? get_compat_msghdr+0x11b/0x170 [ 199.625679][ T8792] ___sys_sendmsg+0x135/0x1e0 [ 199.627289][ T8792] ? __pfx____sys_sendmsg+0x10/0x10 [ 199.629000][ T8792] ? __pfx_lock_release+0x10/0x10 [ 199.630650][ T8792] ? trace_lock_acquire+0x14e/0x1f0 [ 199.632335][ T8792] ? __fget_files+0x206/0x3a0 [ 199.633857][ T8792] __sys_sendmsg+0x16e/0x220 [ 199.635353][ T8792] ? __pfx___sys_sendmsg+0x10/0x10 [ 199.637005][ T8792] __do_fast_syscall_32+0x73/0x120 [ 199.638638][ T8792] do_fast_syscall_32+0x32/0x80 [ 199.640225][ T8792] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 199.642259][ T8792] RIP: 0023:0xf708e579 [ 199.643569][ T8792] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 199.649625][ T8792] RSP: 002b:00000000f508055c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 199.652300][ T8792] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140 [ 199.654787][ T8792] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 199.657279][ T8792] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 199.659795][ T8792] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 199.662351][ T8792] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 199.664873][ T8792] [ 199.666041][ C0] vkms_vblank_simulate: vblank timer overrun [ 199.713676][ T8794] netlink: 'syz.0.660': attribute type 2 has an invalid length. [ 199.716411][ T8794] netlink: 'syz.0.660': attribute type 1 has an invalid length. [ 199.720527][ T8794] bio_check_eod: 2 callbacks suppressed [ 199.720539][ T8794] syz.0.660: attempt to access beyond end of device [ 199.720539][ T8794] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 199.726731][ T8794] syz.0.660: attempt to access beyond end of device [ 199.726731][ T8794] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 199.730197][ T8794] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 199.732948][ T8794] syz.0.660: attempt to access beyond end of device [ 199.732948][ T8794] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 199.737418][ T8794] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 199.740513][ T8794] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 199.742779][ T8794] UDF-fs: Scanning with blocksize 512 failed [ 199.744636][ T8794] syz.0.660: attempt to access beyond end of device [ 199.744636][ T8794] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 199.748246][ T8794] syz.0.660: attempt to access beyond end of device [ 199.748246][ T8794] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 199.751657][ T8794] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 199.754221][ T8794] syz.0.660: attempt to access beyond end of device [ 199.754221][ T8794] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 199.758208][ T8794] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 199.760517][ T8794] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 199.762801][ T8794] UDF-fs: Scanning with blocksize 1024 failed [ 199.764728][ T8794] syz.0.660: attempt to access beyond end of device [ 199.764728][ T8794] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 199.768469][ T8794] syz.0.660: attempt to access beyond end of device [ 199.768469][ T8794] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 199.772506][ T8794] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 199.775095][ T8794] syz.0.660: attempt to access beyond end of device [ 199.775095][ T8794] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 199.780064][ T8794] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 199.782659][ T8794] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 199.784598][ T8794] UDF-fs: Scanning with blocksize 2048 failed [ 199.786860][ T8794] syz.0.660: attempt to access beyond end of device [ 199.786860][ T8794] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 199.790307][ T8794] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 199.792821][ T8794] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 199.795249][ T8794] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 199.799398][ T8794] UDF-fs: Scanning with blocksize 4096 failed [ 199.801102][ T8794] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 200.169690][ T8804] netlink: 20 bytes leftover after parsing attributes in process `syz.1.662'. [ 200.466575][ T8810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.663'. [ 201.435637][ T5955] Bluetooth: hci0: command 0x0419 tx timeout [ 201.435710][ T66] Bluetooth: hci3: command 0x040f tx timeout [ 201.437308][ T5957] Bluetooth: hci2: command 0x0c1a tx timeout [ 201.835705][ T8782] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 201.835973][ T5957] Bluetooth: hci1: command 0x0c1a tx timeout [ 202.394026][ T8782] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 202.396337][ T8782] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 202.398008][ T8782] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 202.641926][ T8829] input: syz0 as /devices/virtual/input/input28 [ 202.766174][ T8831] input: syz0 as /devices/virtual/input/input29 [ 203.915705][ T5957] Bluetooth: hci2: command 0x0c1a tx timeout [ 204.233244][ T8838] netlink: 28 bytes leftover after parsing attributes in process `syz.1.672'. [ 204.236396][ T8838] netem: incorrect gi model size [ 204.237701][ T8838] netem: change failed [ 204.240142][ T8838] blktrace: Concurrent blktraces are not allowed on sg0 [ 204.475684][ T5957] Bluetooth: hci0: command 0x0419 tx timeout [ 204.485638][ T5957] Bluetooth: hci3: command 0x040f tx timeout [ 205.060678][ T8840] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 205.062426][ T8840] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 205.064049][ T8840] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 205.065993][ T8840] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 205.385899][ T6007] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 205.397157][ T8857] nbd4: detected capacity change from 0 to 67108884 [ 205.403280][ T8860] block nbd4: Send control failed (result -89) [ 205.405120][ T8860] block nbd4: Request send failed, requeueing [ 205.408126][ T5957] block nbd4: Receive control failed (result -32) [ 205.408619][ T8235] block nbd4: Dead connection, failed to find a fallback [ 205.412125][ T8235] block nbd4: shutting down sockets [ 205.413494][ T8235] blk_print_req_error: 128 callbacks suppressed [ 205.413501][ T8235] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 205.417509][ T8235] buffer_io_error: 88 callbacks suppressed [ 205.417515][ T8235] Buffer I/O error on dev nbd4, logical block 0, async page read [ 205.422471][ T8860] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 205.424953][ T8860] Buffer I/O error on dev nbd4, logical block 0, async page read [ 205.427285][ T8860] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 205.429586][ T8860] Buffer I/O error on dev nbd4, logical block 0, async page read [ 205.431682][ T8860] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 205.434046][ T8860] Buffer I/O error on dev nbd4, logical block 0, async page read [ 205.436898][ T8860] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 205.439353][ T8860] Buffer I/O error on dev nbd4, logical block 0, async page read [ 205.442127][ T8860] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 205.444509][ T8860] Buffer I/O error on dev nbd4, logical block 0, async page read [ 205.446931][ T8860] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 205.449785][ T8860] Buffer I/O error on dev nbd4, logical block 0, async page read [ 205.452391][ T8860] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 205.454795][ T8860] Buffer I/O error on dev nbd4, logical block 0, async page read [ 205.457350][ T8860] ldm_validate_partition_table(): Disk read failed. [ 205.459194][ T8860] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 205.461496][ T8860] Buffer I/O error on dev nbd4, logical block 0, async page read [ 205.463522][ T8860] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 205.466313][ T8860] Buffer I/O error on dev nbd4, logical block 0, async page read [ 205.468632][ T8860] Dev nbd4: unable to read RDB block 0 [ 205.470456][ T8860] nbd4: unable to read partition table [ 205.473811][ T8860] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 205.478011][ T8860] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554441, location=33554441 [ 205.481807][ T8860] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554185, location=33554185 [ 205.485914][ T8860] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554440, location=33554440 [ 205.492007][ T8861] input: syz0 as /devices/virtual/input/input30 [ 205.493308][ T6034] ldm_validate_partition_table(): Disk read failed. [ 205.496698][ T8860] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554184, location=33554184 [ 205.505712][ T8860] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554439, location=33554439 [ 205.509469][ T8860] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554183, location=33554183 [ 205.512846][ T6034] Dev nbd4: unable to read RDB block 0 [ 205.513585][ T8860] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554291, location=33554291 [ 205.514925][ T6034] nbd4: unable to read partition table [ 205.518074][ T8860] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554035, location=33554035 [ 205.521938][ T8860] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554289, location=33554289 [ 205.528117][ T8860] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554033, location=33554033 [ 205.532082][ T8860] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 205.541774][ T8860] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 205.546769][ T8860] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16777220, location=16777220 [ 205.546833][ T6034] ldm_validate_partition_table(): Disk read failed. [ 205.547125][ T6034] Dev nbd4: unable to read RDB block 0 [ 205.549671][ T8860] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16776964, location=16776964 [ 205.552037][ T6034] nbd4: unable to read partition table [ 205.552730][ T8860] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16777219, location=16777219 [ 205.559861][ T8860] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16776963, location=16776963 [ 205.562709][ T8860] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16777218, location=16777218 [ 205.566910][ T8860] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16776962, location=16776962 [ 205.570823][ T8860] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16777070, location=16777070 [ 205.574304][ T8860] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16776814, location=16776814 [ 205.577439][ T8860] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16777068, location=16777068 [ 205.580292][ T8860] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16776812, location=16776812 [ 205.583184][ T8860] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 205.587784][ T8860] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 205.590482][ T8860] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388609, location=8388609 [ 205.593282][ T8860] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388353, location=8388353 [ 205.596912][ T8860] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388608, location=8388608 [ 205.599964][ T8860] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388352, location=8388352 [ 205.604144][ T8860] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388607, location=8388607 [ 205.607667][ T8860] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388351, location=8388351 [ 205.610432][ T8860] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388459, location=8388459 [ 205.613060][ T8860] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388203, location=8388203 [ 205.616134][ T8860] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388457, location=8388457 [ 205.618872][ T8860] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388201, location=8388201 [ 205.621656][ T8860] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 205.624135][ T8860] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 205.937752][ T6007] usb 6-1: not running at top speed; connect to a high speed hub [ 205.940420][ T6007] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.942890][ T6007] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 205.946483][ T6007] usb 6-1: New USB device found, idVendor=f36a, idProduct=1b83, bcdDevice=29.2e [ 205.948723][ T6007] usb 6-1: New USB device strings: Mfr=47, Product=60, SerialNumber=79 [ 205.950717][ T6007] usb 6-1: Product: syz [ 205.951730][ T6007] usb 6-1: Manufacturer: syz [ 205.952905][ T6007] usb 6-1: SerialNumber: syz [ 206.315713][ T1488] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 206.395722][ T5957] Bluetooth: hci1: command 0x0c1a tx timeout [ 206.467658][ T1488] usb 9-1: not running at top speed; connect to a high speed hub [ 206.472448][ T1488] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 206.475130][ T1488] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 206.475456][ T6007] usb 6-1: USB disconnect, device number 10 [ 206.487606][ T1488] usb 9-1: New USB device found, idVendor=f36a, idProduct=1b83, bcdDevice=29.2e [ 206.490657][ T1488] usb 9-1: New USB device strings: Mfr=47, Product=60, SerialNumber=79 [ 206.493411][ T1488] usb 9-1: Product: syz [ 206.494917][ T1488] usb 9-1: Manufacturer: syz [ 206.499122][ T1488] usb 9-1: SerialNumber: syz [ 206.765809][ T1488] usb 9-1: USB disconnect, device number 3 [ 206.866305][ T8869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.679'. [ 207.115829][ T66] Bluetooth: hci0: command 0x0419 tx timeout [ 207.117976][ T66] Bluetooth: hci3: command 0x040f tx timeout [ 207.120076][ T66] Bluetooth: hci2: command 0x0c1a tx timeout [ 207.535817][ T8877] FAULT_INJECTION: forcing a failure. [ 207.535817][ T8877] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 207.540810][ T8877] CPU: 3 UID: 0 PID: 8877 Comm: syz.4.681 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 207.544390][ T8877] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 207.548260][ T8877] Call Trace: [ 207.549412][ T8877] [ 207.550444][ T8877] dump_stack_lvl+0x16c/0x1f0 [ 207.552073][ T8877] should_fail_ex+0x497/0x5b0 [ 207.553660][ T8877] ? fs_reclaim_acquire+0xae/0x150 [ 207.555311][ T8877] should_fail_alloc_page+0xe7/0x130 [ 207.557031][ T8877] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 207.559006][ T8877] ? hlock_class+0x4e/0x130 [ 207.560483][ T8877] __alloc_pages_noprof+0x190/0x25b0 [ 207.562234][ T8877] ? hlock_class+0x4e/0x130 [ 207.563760][ T8877] ? mark_lock+0xb5/0xc60 [ 207.565225][ T8877] ? __lock_acquire+0xcc5/0x3c40 [ 207.566814][ T8877] ? __pfx_mark_lock+0x10/0x10 [ 207.568378][ T8877] ? hlock_class+0x4e/0x130 [ 207.569850][ T8877] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 207.571709][ T8877] ? hlock_class+0x4e/0x130 [ 207.573246][ T8877] ? mark_lock+0xb5/0xc60 [ 207.574717][ T8877] ? __pfx_mark_lock+0x10/0x10 [ 207.576473][ T8877] ? hlock_class+0x4e/0x130 [ 207.577916][ T8877] ? __lock_acquire+0xcc5/0x3c40 [ 207.579504][ T8877] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 207.581439][ T8877] ? policy_nodemask+0xea/0x4e0 [ 207.583106][ T8877] alloc_pages_mpol_noprof+0x2c9/0x610 [ 207.584958][ T8877] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 207.587001][ T8877] ? __lock_acquire+0xcc5/0x3c40 [ 207.588683][ T8877] folio_alloc_mpol_noprof+0x36/0xd0 [ 207.590477][ T8877] vma_alloc_folio_noprof+0xee/0x1b0 [ 207.592268][ T8877] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 207.594281][ T8877] ? find_held_lock+0x2d/0x110 [ 207.595924][ T8877] do_pte_missing+0x2017/0x3e00 [ 207.597592][ T8877] __handle_mm_fault+0x103c/0x2a40 [ 207.599361][ T8877] ? __pfx___handle_mm_fault+0x10/0x10 [ 207.601221][ T8877] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 207.603079][ T8877] ? find_vma+0xc0/0x140 [ 207.604505][ T8877] ? __pfx_find_vma+0x10/0x10 [ 207.606083][ T8877] handle_mm_fault+0x3fa/0xaa0 [ 207.607422][ T8877] do_user_addr_fault+0x7a3/0x13f0 [ 207.608947][ T8877] exc_page_fault+0x5c/0xc0 [ 207.610581][ T8877] asm_exc_page_fault+0x26/0x30 [ 207.612210][ T8877] RIP: 0010:__put_user_4+0x11/0x20 [ 207.613652][ T8877] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 [ 207.619465][ T8877] RSP: 0018:ffffc90003597b68 EFLAGS: 00050206 [ 207.621285][ T8877] RAX: 0000000080407202 RBX: 0000000000000000 RCX: 0000000020001fc0 [ 207.623544][ T8877] RDX: ffff8880216ca440 RSI: ffffffff88b4cff3 RDI: ffffffff8bb16fc0 [ 207.625718][ T8877] RBP: ffff888022196c00 R08: 0000000000000000 R09: fffffbfff2039c92 [ 207.628579][ T8877] R10: ffffffff901ce497 R11: 0000000000000000 R12: 0000000000000040 [ 207.630800][ T8877] R13: 00000000c0306201 R14: ffff888068f4c688 R15: ffffc90003597da0 [ 207.632983][ T8877] ? binder_ioctl+0x55d3/0x7080 [ 207.634285][ T8877] binder_ioctl+0x55e2/0x7080 [ 207.635538][ T8877] ? tomoyo_path_number_perm+0x190/0x5b0 [ 207.637020][ T8877] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 207.638710][ T8877] ? __pfx_binder_ioctl+0x10/0x10 [ 207.640130][ T8877] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 207.641524][ T8877] ? __pfx_autoremove_wake_function+0x10/0x10 [ 207.643288][ T8877] ? trace_lock_acquire+0x14e/0x1f0 [ 207.644667][ T8877] ? __fget_files+0x206/0x3a0 [ 207.645925][ T8877] ? __pfx_binder_ioctl+0x10/0x10 [ 207.647347][ T8877] compat_ptr_ioctl+0x6b/0xa0 [ 207.648754][ T8877] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 207.650257][ T8877] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 207.651771][ T8877] __do_fast_syscall_32+0x73/0x120 [ 207.653117][ T8877] do_fast_syscall_32+0x32/0x80 [ 207.654410][ T8877] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 207.656056][ T8877] RIP: 0023:0xf70fe579 [ 207.657128][ T8877] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 207.662168][ T8877] RSP: 002b:00000000f50f055c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 207.664417][ T8877] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c0306201 [ 207.666531][ T8877] RDX: 0000000020000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 207.668656][ T8877] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 207.670797][ T8877] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 207.673401][ T8877] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 207.676234][ T8877] [ 207.677496][ C3] vkms_vblank_simulate: vblank timer overrun [ 207.681065][ T8877] binder: 8876:8877 ioctl c0306201 20000140 returned -14 [ 207.912219][ T8884] overlayfs: missing 'lowerdir' [ 207.929296][ T8884] xt_limit: Overflow, try lower: 0/0 [ 208.375585][ T8891] nbd4: detected capacity change from 0 to 67108884 [ 208.380983][ T8894] block nbd4: Send control failed (result -89) [ 208.383034][ T8894] block nbd4: Request send failed, requeueing [ 208.386064][ T5957] block nbd4: Receive control failed (result -32) [ 208.388021][ T1304] block nbd4: Dead connection, failed to find a fallback [ 208.391175][ T1304] block nbd4: shutting down sockets [ 208.400849][ T8894] ldm_validate_partition_table(): Disk read failed. [ 208.405664][ T8894] Dev nbd4: unable to read RDB block 0 [ 208.410441][ T8894] nbd4: unable to read partition table [ 208.413361][ T8894] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 208.413582][ T6034] ldm_validate_partition_table(): Disk read failed. [ 208.416179][ T8894] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554441, location=33554441 [ 208.418196][ T6034] Dev nbd4: unable to read RDB block 0 [ 208.420526][ T8894] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554185, location=33554185 [ 208.422351][ T6034] nbd4: unable to read partition table [ 208.424544][ T8894] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554440, location=33554440 [ 208.430605][ T8894] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554184, location=33554184 [ 208.433837][ T8894] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554439, location=33554439 [ 208.437683][ T8894] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554183, location=33554183 [ 208.440950][ T8894] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554291, location=33554291 [ 208.444545][ T8894] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554035, location=33554035 [ 208.448080][ T8894] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554289, location=33554289 [ 208.451260][ T8894] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554033, location=33554033 [ 208.453233][ T66] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 208.454740][ T8894] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 208.458565][ T6034] ldm_validate_partition_table(): Disk read failed. [ 208.459862][ T8894] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 208.463344][ T6034] Dev nbd4: unable to read RDB block 0 [ 208.463662][ T8894] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16777220, location=16777220 [ 208.465301][ T66] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 208.469053][ T6034] nbd4: unable to read partition table [ 208.469550][ T8894] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16776964, location=16776964 [ 208.471240][ T66] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 208.473783][ T8894] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16777219, location=16777219 [ 208.476881][ T66] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 208.479061][ T8894] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16776963, location=16776963 [ 208.480902][ T66] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 208.482728][ T8894] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16777218, location=16777218 [ 208.484630][ T66] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 208.487481][ T8894] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16776962, location=16776962 [ 208.492855][ T8894] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16777070, location=16777070 [ 208.496147][ T8894] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16776814, location=16776814 [ 208.499421][ T8894] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16777068, location=16777068 [ 208.502403][ T8894] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16776812, location=16776812 [ 208.505710][ T8894] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 208.511147][ T8894] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 208.514029][ T8894] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388609, location=8388609 [ 208.517271][ T8894] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388353, location=8388353 [ 208.520111][ T8894] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388608, location=8388608 [ 208.523103][ T8894] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388352, location=8388352 [ 208.527092][ T8894] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388607, location=8388607 [ 208.529965][ T8894] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388351, location=8388351 [ 208.532801][ T8894] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388459, location=8388459 [ 208.535635][ T8894] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388203, location=8388203 [ 208.539481][ T8894] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388457, location=8388457 [ 208.542877][ T8894] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388201, location=8388201 [ 208.546983][ T8894] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 208.549534][ T8894] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 208.568405][ T8895] chnl_net:caif_netlink_parms(): no params data found [ 208.666864][ T8895] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.668777][ T8895] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.670745][ T8895] bridge_slave_0: entered allmulticast mode [ 208.672831][ T8895] bridge_slave_0: entered promiscuous mode [ 208.675656][ T8895] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.677489][ T8895] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.679375][ T8895] bridge_slave_1: entered allmulticast mode [ 208.681465][ T8895] bridge_slave_1: entered promiscuous mode [ 208.704381][ T8895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.708735][ T8895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.732721][ T8895] team0: Port device team_slave_0 added [ 208.736208][ T8895] team0: Port device team_slave_1 added [ 208.762310][ T8895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.764256][ T8895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.770939][ T8895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.774987][ T8895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.776868][ T8895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.783713][ T8895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.851075][ T8895] hsr_slave_0: entered promiscuous mode [ 208.872757][ T8895] hsr_slave_1: entered promiscuous mode [ 208.875431][ T8895] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.879369][ T8895] Cannot create hsr debugfs directory [ 208.998181][ T8895] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 209.002048][ T8895] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 209.005313][ T8895] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 209.039951][ T8895] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 209.050040][ T8895] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.051810][ T8895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.053595][ T8895] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.055301][ T8895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.077512][ T8895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.083980][ T214] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.129297][ T214] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.141137][ T8895] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.151027][ T214] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.152912][ T214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.157483][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.159407][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.178618][ T8895] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 209.181322][ T8895] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 209.275648][ T8914] fuse: Bad value for 'user_id' [ 209.276985][ T8914] fuse: Bad value for 'user_id' [ 209.382301][ T8895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.473800][ T8895] veth0_vlan: entered promiscuous mode [ 209.477599][ T8895] veth1_vlan: entered promiscuous mode [ 209.489274][ T8895] veth0_macvtap: entered promiscuous mode [ 209.492196][ T8895] veth1_macvtap: entered promiscuous mode [ 209.498106][ T8895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.500807][ T8895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.503307][ T8895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.506569][ T8895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.509103][ T8895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.511708][ T8895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.514970][ T8895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.521312][ T8895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.524008][ T8895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.526582][ T8895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.529323][ T8895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.531893][ T8895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.534635][ T8895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.538783][ T8895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.542258][ T8895] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.544521][ T8895] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.546833][ T8895] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.549271][ T8895] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.572381][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.574463][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.585215][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.587727][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.636297][ T8933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.691'. [ 210.097485][ T8942] netlink: 4 bytes leftover after parsing attributes in process `syz.6.687'. [ 210.555672][ T66] Bluetooth: hci4: command tx timeout [ 210.772974][ T8951] netlink: 12 bytes leftover after parsing attributes in process `syz.6.695'. [ 210.803207][ T8954] program syz.1.696 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 211.073059][ T8967] ptrace attach of "/syz-executor exec"[7790] was attempted by "/syz-executor exec"[8967] [ 211.476007][ T5988] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 211.485282][ T8970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.700'. [ 211.638382][ T5988] usb 5-1: not running at top speed; connect to a high speed hub [ 211.643948][ T8982] netlink: 28 bytes leftover after parsing attributes in process `syz.4.702'. [ 211.648384][ T8982] netem: incorrect gi model size [ 211.649759][ T8982] netem: change failed [ 211.687030][ T5988] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.689697][ T5988] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 211.761609][ T5988] usb 5-1: New USB device found, idVendor=f36a, idProduct=1b83, bcdDevice=29.2e [ 211.764015][ T5988] usb 5-1: New USB device strings: Mfr=47, Product=60, SerialNumber=79 [ 211.766419][ T5988] usb 5-1: Product: syz [ 211.767624][ T5988] usb 5-1: Manufacturer: syz [ 211.768908][ T5988] usb 5-1: SerialNumber: syz [ 212.129206][ T5988] usb 5-1: USB disconnect, device number 10 [ 212.158392][ T8990] IPv6: addrconf: prefix option has invalid lifetime [ 212.188296][ T8996] netlink: 28 bytes leftover after parsing attributes in process `syz.4.705'. [ 212.190643][ T8996] netem: incorrect gi model size [ 212.192014][ T8996] netem: change failed [ 212.333487][ T8998] netlink: 16 bytes leftover after parsing attributes in process `syz.1.707'. [ 212.553970][ T9011] fuse: Unknown parameter 'root7'zQO33`шzX^?w焳@{mode' [ 212.645650][ T66] Bluetooth: hci4: command tx timeout [ 212.729444][ T9018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.709'. [ 212.805294][ T9024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.713'. [ 212.882246][ T9025] netlink: 187320 bytes leftover after parsing attributes in process `syz.6.714'. [ 212.885359][ T9025] netlink: zone id is out of range [ 212.886899][ T9025] netlink: zone id is out of range [ 212.888426][ T9025] netlink: zone id is out of range [ 212.890022][ T9025] netlink: zone id is out of range [ 212.892083][ T9025] netlink: zone id is out of range [ 212.896137][ T9025] netlink: zone id is out of range [ 212.898300][ T9025] netlink: zone id is out of range [ 212.900266][ T9025] netlink: zone id is out of range [ 212.901694][ T9025] netlink: zone id is out of range [ 213.721759][ T9045] usb usb4: usbfs: process 9045 (syz.0.719) did not claim interface 0 before use [ 214.728232][ T66] Bluetooth: hci4: command tx timeout [ 215.285929][ T66] Bluetooth: hci1: command 0x0c1a tx timeout [ 215.287592][ T9029] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 216.096546][ T9029] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 216.099142][ T9029] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 216.100993][ T9029] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 216.102853][ T9029] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 216.104442][ T9029] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 216.109876][ T9029] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 216.282550][ T9058] FAULT_INJECTION: forcing a failure. [ 216.282550][ T9058] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.286126][ T9058] CPU: 2 UID: 0 PID: 9058 Comm: syz.4.725 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 216.288798][ T9058] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 216.291485][ T9058] Call Trace: [ 216.292340][ T9058] [ 216.293079][ T9058] dump_stack_lvl+0x16c/0x1f0 [ 216.294275][ T9058] should_fail_ex+0x497/0x5b0 [ 216.295479][ T9058] _copy_from_user+0x2e/0xd0 [ 216.296661][ T9058] get_compat_msghdr+0xa8/0x170 [ 216.297913][ T9058] ? __pfx_get_compat_msghdr+0x10/0x10 [ 216.299306][ T9058] ___sys_sendmsg+0x1b0/0x1e0 [ 216.300561][ T9058] ? __pfx____sys_sendmsg+0x10/0x10 [ 216.301891][ T9058] ? __pfx_lock_release+0x10/0x10 [ 216.303166][ T9058] ? trace_lock_acquire+0x14e/0x1f0 [ 216.304469][ T9058] ? __fget_files+0x206/0x3a0 [ 216.305628][ T9058] __sys_sendmsg+0x16e/0x220 [ 216.306825][ T9058] ? __pfx___sys_sendmsg+0x10/0x10 [ 216.308106][ T9058] __do_fast_syscall_32+0x73/0x120 [ 216.309401][ T9058] do_fast_syscall_32+0x32/0x80 [ 216.310693][ T9058] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 216.312295][ T9058] RIP: 0023:0xf70fe579 [ 216.313330][ T9058] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 216.318157][ T9058] RSP: 002b:00000000f50f055c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 216.320618][ T9058] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000000 [ 216.322680][ T9058] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 216.324741][ T9058] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 216.326846][ T9058] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 216.328894][ T9058] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 216.330993][ T9058] [ 216.332473][ T9060] netlink: 'syz.1.726': attribute type 10 has an invalid length. [ 216.335500][ T9060] syz_tun: entered promiscuous mode [ 216.342471][ T9060] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 216.481769][ T9071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.721'. [ 216.523255][ T9074] netlink: 4 bytes leftover after parsing attributes in process `syz.6.724'. [ 217.355653][ T66] Bluetooth: hci2: command 0x0c1a tx timeout [ 217.440300][ T9091] FAULT_INJECTION: forcing a failure. [ 217.440300][ T9091] name failslab, interval 1, probability 0, space 0, times 0 [ 217.443724][ T9091] CPU: 3 UID: 0 PID: 9091 Comm: syz.1.734 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 217.446408][ T9091] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 217.449273][ T9091] Call Trace: [ 217.450150][ T9091] [ 217.450915][ T9091] dump_stack_lvl+0x16c/0x1f0 [ 217.452143][ T9091] should_fail_ex+0x497/0x5b0 [ 217.453365][ T9091] ? fs_reclaim_acquire+0xae/0x150 [ 217.454756][ T9091] should_failslab+0xc2/0x120 [ 217.455988][ T9091] __kmalloc_noprof+0xce/0x4f0 [ 217.457233][ T9091] ? unwind_get_return_address+0x59/0xa0 [ 217.458782][ T9091] ? constrain_params_by_rules+0x176/0xca0 [ 217.460440][ T9091] constrain_params_by_rules+0x176/0xca0 [ 217.461963][ T9091] ? stack_trace_save+0x95/0xd0 [ 217.463248][ T9091] ? stack_depot_save_flags+0x28/0x9e0 [ 217.464698][ T9091] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 217.466299][ T9091] ? __kasan_kmalloc+0xaa/0xb0 [ 217.467551][ T9091] ? snd_pcm_oss_change_params_locked+0x242/0x3a50 [ 217.469425][ T9091] ? snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 217.471035][ T9091] ? snd_pcm_oss_read+0x396/0x750 [ 217.472336][ T9091] ? rcu_is_watching+0x12/0xc0 [ 217.473553][ T9091] ? snd_interval_refine+0x2fa/0x580 [ 217.474976][ T9091] snd_pcm_hw_refine+0x7ec/0xad0 [ 217.476258][ T9091] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 217.477668][ T9091] ? _snd_pcm_hw_param_min+0x259/0x630 [ 217.479433][ T9091] snd_pcm_oss_change_params_locked+0x651/0x3a50 [ 217.481533][ T9091] ? __mutex_init+0x107/0x120 [ 217.482765][ T9091] ? trace_contention_end+0xee/0x140 [ 217.484156][ T9091] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 217.485883][ T9091] ? find_held_lock+0x2d/0x110 [ 217.487107][ T9091] ? snd_pcm_oss_read+0x374/0x750 [ 217.488460][ T9091] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 217.489980][ T9091] snd_pcm_oss_read+0x396/0x750 [ 217.491265][ T9091] ? bpf_lsm_file_permission+0x9/0x10 [ 217.492648][ T9091] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 217.494031][ T9091] vfs_read+0x1df/0xbe0 [ 217.495147][ T9091] ? __fget_files+0x1fc/0x3a0 [ 217.496365][ T9091] ? __pfx_lock_release+0x10/0x10 [ 217.497672][ T9091] ? __pfx_vfs_read+0x10/0x10 [ 217.499194][ T9091] ? lock_acquire+0x2f/0xb0 [ 217.500867][ T9091] ? __fget_files+0x40/0x3a0 [ 217.502151][ T9091] ? __fget_files+0x206/0x3a0 [ 217.503375][ T9091] ksys_read+0x12b/0x250 [ 217.504501][ T9091] ? __pfx_ksys_read+0x10/0x10 [ 217.505761][ T9091] __do_fast_syscall_32+0x73/0x120 [ 217.507091][ T9091] do_fast_syscall_32+0x32/0x80 [ 217.508436][ T9091] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 217.510203][ T9091] RIP: 0023:0xf711e579 [ 217.511259][ T9091] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 217.516201][ T9091] RSP: 002b:00000000f50ef55c EFLAGS: 00000296 ORIG_RAX: 0000000000000003 [ 217.518417][ T9091] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000440 [ 217.521270][ T9091] RDX: 00000000000000ab RSI: 0000000000000000 RDI: 0000000000000000 [ 217.523374][ T9091] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 217.525431][ T9091] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 217.527448][ T9091] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 217.529480][ T9091] [ 217.531210][ T6007] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 217.616017][ T30] usb 11-1: new full-speed USB device number 2 using dummy_hcd [ 217.660524][ T9093] FAULT_INJECTION: forcing a failure. [ 217.660524][ T9093] name failslab, interval 1, probability 0, space 0, times 0 [ 217.663851][ T9093] CPU: 3 UID: 0 PID: 9093 Comm: syz.4.735 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 217.666606][ T9093] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 217.669385][ T9093] Call Trace: [ 217.670265][ T9093] [ 217.671038][ T9093] dump_stack_lvl+0x16c/0x1f0 [ 217.672260][ T9093] should_fail_ex+0x497/0x5b0 [ 217.673484][ T9093] should_failslab+0xc2/0x120 [ 217.674710][ T9093] __kmalloc_cache_noprof+0x68/0x420 [ 217.676125][ T9093] ? __mutex_lock+0x1cc/0xa60 [ 217.677393][ T9093] __hw_addr_add_ex+0x310/0x700 [ 217.678777][ T9093] dev_addr_init+0x13b/0x230 [ 217.680056][ T9093] ? __pfx_dev_addr_init+0x10/0x10 [ 217.681394][ T9093] alloc_netdev_mqs+0x330/0x1320 [ 217.682688][ T9093] ? __pfx_caifdev_setup+0x10/0x10 [ 217.684020][ T9093] ? security_capable+0x7e/0x260 [ 217.685314][ T9093] ldisc_open+0x153/0x980 [ 217.686461][ T9093] ? tty_set_ldisc+0x2a5/0x720 [ 217.687672][ T9093] ? __pfx_ldisc_open+0x10/0x10 [ 217.689102][ T9093] ? down_write+0x14e/0x200 [ 217.690314][ T9093] ? __pfx_ldisc_open+0x10/0x10 [ 217.691582][ T9093] tty_ldisc_open+0x9c/0x120 [ 217.692786][ T9093] tty_set_ldisc+0x318/0x720 [ 217.694001][ T9093] tty_ioctl+0xc22/0x1640 [ 217.695131][ T9093] ? __pfx_tty_ioctl+0x10/0x10 [ 217.696389][ T9093] ? __pfx_lock_release+0x10/0x10 [ 217.697747][ T9093] ? trace_lock_acquire+0x14e/0x1f0 [ 217.699132][ T9093] ? __fget_files+0x206/0x3a0 [ 217.700380][ T9093] tty_compat_ioctl+0x24a/0x4d0 [ 217.701648][ T9093] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 217.703043][ T9093] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 217.704417][ T9093] __do_fast_syscall_32+0x73/0x120 [ 217.705754][ T9093] do_fast_syscall_32+0x32/0x80 [ 217.707018][ T9093] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 217.708885][ T9093] RIP: 0023:0xf70fe579 [ 217.710405][ T9093] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 217.715527][ T9093] RSP: 002b:00000000f50f055c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 217.717697][ T9093] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000005423 [ 217.719788][ T9093] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 217.721818][ T9093] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 217.723840][ T9093] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 217.725877][ T9093] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 217.727944][ T9093] getty: ttyS0: read error: Resource temporarily unavailable [ 217.749604][ T6007] usb 5-1: not running at top speed; connect to a high speed hub [ 217.753641][ T6007] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.756778][ T6007] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 217.762634][ T6007] usb 5-1: New USB device found, idVendor=f36a, idProduct=1b83, bcdDevice=29.2e [ 217.767132][ T6007] usb 5-1: New USB device strings: Mfr=47, Product=60, SerialNumber=79 [ 217.774122][ T6007] usb 5-1: Product: syz [ 217.775764][ T6007] usb 5-1: Manufacturer: syz [ 217.777017][ T6007] usb 5-1: SerialNumber: syz [ 217.785803][ T30] usb 11-1: device descriptor read/64, error -71 [ 218.058103][ T6007] usb 5-1: USB disconnect, device number 11 [ 218.065817][ T30] usb 11-1: new full-speed USB device number 3 using dummy_hcd [ 218.067892][ T5990] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 218.155735][ T66] Bluetooth: hci3: command 0x040f tx timeout [ 218.155759][ T5957] Bluetooth: hci4: command 0x0c1a tx timeout [ 218.157891][ T66] Bluetooth: hci0: command 0x0419 tx timeout [ 218.196099][ T30] usb 11-1: device descriptor read/64, error -71 [ 218.217623][ T5990] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.221441][ T5990] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.224894][ T5990] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 218.233566][ T5990] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 218.236970][ T5990] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.241087][ T5990] usb 6-1: config 0 descriptor?? [ 218.316153][ T30] usb usb11-port1: attempt power cycle [ 218.603801][ T9103] netlink: 'syz.0.738': attribute type 5 has an invalid length. [ 218.665658][ T30] usb 11-1: new full-speed USB device number 4 using dummy_hcd [ 218.687839][ T30] usb 11-1: device descriptor read/8, error -71 [ 218.965812][ T30] usb 11-1: new full-speed USB device number 5 using dummy_hcd [ 218.986674][ T30] usb 11-1: device descriptor read/8, error -71 [ 219.098856][ T30] usb usb11-port1: unable to enumerate USB device [ 219.760716][ T9129] fuse: Unknown parameter '/yZ:餽S&ac&Ub^4}[dsL%^mcxsOiXv}:;^I'V /'7/)>tي' [ 219.905013][ T9134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.744'. [ 220.235771][ T66] Bluetooth: hci4: command 0x0c1a tx timeout [ 220.719331][ T5990] usbhid 6-1:0.0: can't add hid device: -71 [ 220.722526][ T5990] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 220.725458][ T5990] usb 6-1: USB disconnect, device number 11 [ 221.456519][ T9159] fuse: Bad value for 'fd' [ 221.546386][ T9163] netlink: 152 bytes leftover after parsing attributes in process `syz.0.755'. [ 221.670240][ T9166] usb usb4: usbfs: process 9166 (syz.0.756) did not claim interface 0 before use [ 222.325614][ T66] Bluetooth: hci4: command 0x0c1a tx timeout [ 222.475657][ T66] Bluetooth: hci1: command 0x0c1a tx timeout [ 222.477449][ T9142] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 223.347593][ T9142] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 223.350121][ T9142] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 223.351821][ T9142] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 223.353430][ T9142] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 223.389060][ T9171] No source specified [ 223.402808][ T9174] FAULT_INJECTION: forcing a failure. [ 223.402808][ T9174] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.406995][ T9174] CPU: 0 UID: 0 PID: 9174 Comm: syz.4.758 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 223.410538][ T9174] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 223.414078][ T9174] Call Trace: [ 223.415199][ T9174] [ 223.416189][ T9174] dump_stack_lvl+0x16c/0x1f0 [ 223.417779][ T9174] should_fail_ex+0x497/0x5b0 [ 223.419359][ T9174] _copy_to_user+0x32/0xd0 [ 223.420885][ T9174] simple_read_from_buffer+0xd0/0x160 [ 223.422559][ T9174] proc_fail_nth_read+0x198/0x270 [ 223.423868][ T9174] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 223.425304][ T9174] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 223.426752][ T9174] vfs_read+0x1df/0xbe0 [ 223.427842][ T9174] ? __fget_files+0x1fc/0x3a0 [ 223.429079][ T9174] ? __pfx___mutex_lock+0x10/0x10 [ 223.430431][ T9174] ? __pfx_vfs_read+0x10/0x10 [ 223.431656][ T9174] ? __fget_files+0x206/0x3a0 [ 223.432876][ T9174] ksys_read+0x12b/0x250 [ 223.433991][ T9174] ? __pfx_ksys_read+0x10/0x10 [ 223.435236][ T9174] __do_fast_syscall_32+0x73/0x120 [ 223.436565][ T9174] do_fast_syscall_32+0x32/0x80 [ 223.437845][ T9174] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 223.439481][ T9174] RIP: 0023:0xf70fe579 [ 223.440541][ T9174] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 223.445481][ T9174] RSP: 002b:00000000f50f0590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 223.447788][ T9174] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000f50f0620 [ 223.449866][ T9174] RDX: 000000000000000f RSI: 00000000f7433ff4 RDI: 0000000000000000 [ 223.451894][ T9174] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 223.453929][ T9174] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 223.455956][ T9174] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 223.458005][ T9174] [ 223.458934][ C0] vkms_vblank_simulate: vblank timer overrun [ 223.658704][ T9181] [ 223.659669][ T9181] ====================================================== [ 223.662029][ T9181] WARNING: possible circular locking dependency detected [ 223.664323][ T9181] 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 Not tainted [ 223.668112][ T9181] ------------------------------------------------------ SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 223.670875][ T9181] syz.4.761/9181 is trying to acquire lock: [ 223.672925][ T9181] ffff8880436ba330 (&q->sysfs_lock){+.+.}-{4:4}, at: __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 223.676355][ T9181] [ 223.676355][ T9181] but task is already holding lock: [ 223.678846][ T9181] ffff8880436b9e00 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x1460 [ 223.682001][ T9181] [ 223.682001][ T9181] which lock already depends on the new lock. [ 223.682001][ T9181] [ 223.685199][ T9181] [ 223.685199][ T9181] the existing dependency chain (in reverse order) is: [ 223.688121][ T9181] [ 223.688121][ T9181] -> #4 (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 223.690405][ T9181] blk_mq_submit_bio+0x1fb6/0x24c0 [ 223.691854][ T9181] __submit_bio+0x384/0x540 [ 223.693218][ T9181] submit_bio_noacct_nocheck+0x698/0xd70 [ 223.695305][ T9181] submit_bio_noacct+0x93a/0x1e20 [ 223.696863][ T9181] mpage_readahead+0x41d/0x590 [ 223.698282][ T9181] read_pages+0x1a8/0xdc0 [ 223.699563][ T9181] page_cache_ra_unbounded+0x3dc/0x750 [ 223.701117][ T9181] force_page_cache_ra+0x24b/0x340 [ 223.702618][ T9181] page_cache_sync_ra+0x110/0x9c0 [ 223.704536][ T9181] filemap_get_pages+0xd7b/0x1be0 [ 223.706264][ T9181] filemap_read+0x3ca/0xd70 [ 223.707714][ T9181] blkdev_read_iter+0x187/0x480 [ 223.709184][ T9181] vfs_read+0x87f/0xbe0 [ 223.710480][ T9181] ksys_read+0x12b/0x250 [ 223.711720][ T9181] do_syscall_64+0xcd/0x250 [ 223.713023][ T9181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.714679][ T9181] [ 223.714679][ T9181] -> #3 (mapping.invalidate_lock#2){++++}-{4:4}: [ 223.716864][ T9181] down_read+0x9a/0x330 [ 223.718101][ T9181] page_cache_ra_unbounded+0x173/0x750 [ 223.719658][ T9181] page_cache_ra_order+0x8f2/0xc80 [ 223.721104][ T9181] filemap_fault+0x14a5/0x2820 [ 223.722476][ T9181] __do_fault+0x10a/0x490 [ 223.723747][ T9181] do_pte_missing+0x1a8/0x3e00 [ 223.725112][ T9181] __handle_mm_fault+0x103c/0x2a40 [ 223.726557][ T9181] handle_mm_fault+0x3fa/0xaa0 [ 223.727916][ T9181] __get_user_pages+0x8d9/0x3b50 [ 223.729332][ T9181] get_user_pages_unlocked+0x1c2/0x780 [ 223.730890][ T9181] hva_to_pfn+0x8be/0xc20 [ 223.732153][ T9181] kvm_follow_pfn+0x29f/0x3f0 [ 223.733497][ T9181] __kvm_faultin_pfn+0x11c/0x1a0 [ 223.734916][ T9181] kvm_mmu_faultin_pfn+0x469/0x1f30 [ 223.736387][ T9181] kvm_tdp_page_fault+0x182/0x3d0 [ 223.737799][ T9181] kvm_mmu_do_page_fault+0x58d/0x690 [ 223.739286][ T9181] kvm_mmu_page_fault+0x20f/0x1bb0 [ 223.740757][ T9181] handle_ept_violation+0x25a/0x640 [ 223.742238][ T9181] vmx_handle_exit+0x733/0x1f70 [ 223.743641][ T9181] vcpu_run+0x2aaf/0x4c00 [ 223.744907][ T9181] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 223.746491][ T9181] kvm_vcpu_ioctl+0x6ce/0x1520 [ 223.747858][ T9181] kvm_vcpu_compat_ioctl+0x210/0x3f0 [ 223.749363][ T9181] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 223.750904][ T9181] __do_fast_syscall_32+0x73/0x120 [ 223.752368][ T9181] do_fast_syscall_32+0x32/0x80 [ 223.753767][ T9181] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 223.755419][ T9181] [ 223.755419][ T9181] -> #2 (&mm->mmap_lock){++++}-{4:4}: [ 223.757320][ T9181] __might_fault+0x11b/0x190 [ 223.758647][ T9181] _copy_from_user+0x29/0xd0 [ 223.759973][ T9181] __blk_trace_setup+0xa8/0x180 [ 223.761317][ T9181] blk_trace_setup+0x47/0x70 [ 223.762622][ T9181] sg_ioctl+0x7a3/0x26b0 [ 223.763815][ T9181] compat_ptr_ioctl+0x6b/0xa0 [ 223.765116][ T9181] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 223.766552][ T9181] __do_fast_syscall_32+0x73/0x120 [ 223.767975][ T9181] do_fast_syscall_32+0x32/0x80 [ 223.769272][ T9181] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 223.771015][ T9181] [ 223.771015][ T9181] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}: [ 223.772951][ T9181] __mutex_lock+0x19b/0xa60 [ 223.774223][ T9181] blk_register_queue+0x13c/0x4f0 [ 223.775588][ T9181] add_disk_fwnode+0x785/0x1300 [ 223.776914][ T9181] brd_alloc.isra.0+0x50a/0x7c0 [ 223.778241][ T9181] brd_init+0x12b/0x1d0 [ 223.779404][ T9181] do_one_initcall+0x128/0x630 [ 223.780750][ T9181] kernel_init_freeable+0x58f/0x8b0 [ 223.782171][ T9181] kernel_init+0x1c/0x2b0 [ 223.783412][ T9181] ret_from_fork+0x45/0x80 [ 223.784657][ T9181] ret_from_fork_asm+0x1a/0x30 [ 223.785991][ T9181] [ 223.785991][ T9181] -> #0 (&q->sysfs_lock){+.+.}-{4:4}: [ 223.787880][ T9181] __lock_acquire+0x249e/0x3c40 [ 223.789229][ T9181] lock_acquire.part.0+0x11b/0x380 [ 223.790688][ T9181] __mutex_lock+0x19b/0xa60 [ 223.791950][ T9181] __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 223.793578][ T9181] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 223.795104][ T9181] nbd_start_device+0x15b/0xd70 [ 223.796454][ T9181] nbd_ioctl+0x21a/0xfd0 [ 223.797668][ T9181] compat_blkdev_ioctl+0x2f7/0x750 [ 223.799075][ T9181] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 223.800552][ T9181] __do_fast_syscall_32+0x73/0x120 [ 223.801978][ T9181] do_fast_syscall_32+0x32/0x80 [ 223.803350][ T9181] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 223.805038][ T9181] [ 223.805038][ T9181] other info that might help us debug this: [ 223.805038][ T9181] [ 223.807573][ T9181] Chain exists of: [ 223.807573][ T9181] &q->sysfs_lock --> mapping.invalidate_lock#2 --> &q->q_usage_counter(io)#53 [ 223.807573][ T9181] [ 223.811257][ T9181] Possible unsafe locking scenario: [ 223.811257][ T9181] [ 223.813122][ T9181] CPU0 CPU1 [ 223.814484][ T9181] ---- ---- [ 223.815839][ T9181] lock(&q->q_usage_counter(io)#53); [ 223.817184][ T9181] lock(mapping.invalidate_lock#2); [ 223.819129][ T9181] lock(&q->q_usage_counter(io)#53); [ 223.821129][ T9181] lock(&q->sysfs_lock); [ 223.822226][ T9181] [ 223.822226][ T9181] *** DEADLOCK *** [ 223.822226][ T9181] [ 223.824235][ T9181] 4 locks held by syz.4.761/9181: [ 223.825477][ T9181] #0: ffff888023e16998 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x151/0xfd0 [ 223.827821][ T9181] #1: ffff888023e168d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x20/0x40 [ 223.830520][ T9181] #2: ffff8880436b9e00 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x1460 [ 223.833449][ T9181] #3: ffff8880436b9e38 (&q->q_usage_counter(queue)#37){+.+.}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x1460 [ 223.836463][ T9181] [ 223.836463][ T9181] stack backtrace: [ 223.838007][ T9181] CPU: 3 UID: 0 PID: 9181 Comm: syz.4.761 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 223.840641][ T9181] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 223.843408][ T9181] Call Trace: [ 223.844293][ T9181] [ 223.845070][ T9181] dump_stack_lvl+0x116/0x1f0 [ 223.846309][ T9181] print_circular_bug+0x41c/0x610 [ 223.847634][ T9181] check_noncircular+0x31a/0x400 [ 223.848943][ T9181] ? __pfx_check_noncircular+0x10/0x10 [ 223.850389][ T9181] ? save_trace+0x42/0xa10 [ 223.851563][ T9181] ? add_lock_to_list+0x17d/0x390 [ 223.852877][ T9181] __lock_acquire+0x249e/0x3c40 [ 223.854153][ T9181] ? __pfx___lock_acquire+0x10/0x10 [ 223.855506][ T9181] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 223.857018][ T9181] ? stack_depot_save_flags+0x36d/0x9e0 [ 223.858470][ T9181] lock_acquire.part.0+0x11b/0x380 [ 223.859798][ T9181] ? __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 223.861400][ T9181] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 223.862873][ T9181] ? rcu_is_watching+0x12/0xc0 [ 223.864122][ T9181] ? trace_lock_acquire+0x14e/0x1f0 [ 223.865491][ T9181] ? __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 223.867100][ T9181] ? lock_acquire+0x2f/0xb0 [ 223.868295][ T9181] ? __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 223.869906][ T9181] __mutex_lock+0x19b/0xa60 [ 223.871099][ T9181] ? __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 223.872692][ T9181] ? __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 223.874293][ T9181] ? __pfx___mutex_lock+0x10/0x10 [ 223.875610][ T9181] ? __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 223.877203][ T9181] __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 223.878770][ T9181] ? lock_acquire.part.0+0x11b/0x380 [ 223.880135][ T9181] ? __mutex_trylock_common+0xea/0x250 [ 223.881544][ T9181] ? __pfx___mutex_trylock_common+0x10/0x10 [ 223.883096][ T9181] ? blk_mq_update_nr_hw_queues+0x20/0x40 [ 223.884572][ T9181] ? rcu_is_watching+0x12/0xc0 [ 223.885826][ T9181] ? __pfx___blk_mq_update_nr_hw_queues+0x10/0x10 [ 223.887488][ T9181] ? __pfx___mutex_trylock_common+0x10/0x10 [ 223.889027][ T9181] ? blk_mq_update_nr_hw_queues+0x20/0x40 [ 223.890517][ T9181] ? __pfx___mutex_lock+0x10/0x10 [ 223.891835][ T9181] ? trace_contention_end+0xee/0x140 [ 223.893210][ T9181] ? __mutex_lock+0x1cc/0xa60 [ 223.894456][ T9181] ? nbd_ioctl+0x151/0xfd0 [ 223.895627][ T9181] ? __pfx___mutex_lock+0x10/0x10 [ 223.896942][ T9181] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 223.898385][ T9181] nbd_start_device+0x15b/0xd70 [ 223.899671][ T9181] ? bpf_lsm_capable+0x9/0x10 [ 223.900904][ T9181] nbd_ioctl+0x21a/0xfd0 [ 223.902020][ T9181] ? __pfx_nbd_ioctl+0x10/0x10 [ 223.903284][ T9181] ? __pfx_lock_release+0x10/0x10 [ 223.904600][ T9181] ? trace_lock_acquire+0x14e/0x1f0 [ 223.905959][ T9181] ? __pfx_nbd_ioctl+0x10/0x10 [ 223.907220][ T9181] compat_blkdev_ioctl+0x2f7/0x750 [ 223.908565][ T9181] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 223.910036][ T9181] ? __fget_files+0x206/0x3a0 [ 223.911248][ T9181] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 223.912642][ T9181] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 223.913967][ T9181] __do_fast_syscall_32+0x73/0x120 [ 223.915302][ T9181] do_fast_syscall_32+0x32/0x80 [ 223.916584][ T9181] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 223.918236][ T9181] RIP: 0023:0xf70fe579 [ 223.919307][ T9181] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 223.924278][ T9181] RSP: 002b:00000000f50f055c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 223.926439][ T9181] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 000000000000ab03 [ 223.928493][ T9181] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 223.930569][ T9181] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 223.932613][ T9181] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 223.934660][ T9181] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 223.936701][ T9181] [ 223.995656][ T64] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 224.028636][ T9183] block nbd4: shutting down sockets [ 224.108596][ T9176] bond0: (slave syz_tun): Releasing backup interface [ 224.317058][ T45] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.398269][ T45] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.468652][ T45] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.508408][ T45] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.719934][ T45] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 224.722251][ T45] bond0 (unregistering): Released all slaves [ 224.974805][ T45] hsr_slave_0: left promiscuous mode [ 224.977166][ T45] hsr_slave_1: left promiscuous mode [ 224.979612][ T45] veth1_macvtap: left promiscuous mode [ 224.981049][ T45] veth0_macvtap: left promiscuous mode [ 224.982504][ T45] veth1_vlan: left promiscuous mode [ 224.983895][ T45] veth0_vlan: left promiscuous mode [ 225.355679][ T5955] Bluetooth: hci0: command 0x0419 tx timeout [ 225.823423][ T45] IPVS: stop unused estimator thread 0... [ 225.918460][ T45] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.988023][ T45] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.068714][ T45] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.158285][ T45] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.219523][ T45] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.288009][ T45] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.358136][ T45] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.419388][ T45] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.533820][ T45] bridge_slave_1: left allmulticast mode [ 226.535323][ T45] bridge_slave_1: left promiscuous mode [ 226.537787][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.540381][ T45] bridge_slave_0: left allmulticast mode [ 226.541904][ T45] bridge_slave_0: left promiscuous mode [ 226.543425][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.546351][ T45] bridge_slave_1: left allmulticast mode [ 226.547841][ T45] bridge_slave_1: left promiscuous mode [ 226.549357][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.552049][ T45] bridge_slave_0: left allmulticast mode [ 226.553530][ T45] bridge_slave_0: left promiscuous mode [ 226.555150][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.738511][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.741472][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.744132][ T45] bond0 (unregistering): Released all slaves [ 226.748254][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.751298][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.753954][ T45] bond0 (unregistering): Released all slaves [ 227.240699][ T45] hsr_slave_0: left promiscuous mode [ 227.242636][ T45] hsr_slave_1: left promiscuous mode [ 227.244480][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.246516][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.248844][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.250851][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.255389][ T45] hsr_slave_0: left promiscuous mode [ 227.258212][ T45] hsr_slave_1: left promiscuous mode [ 227.260632][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.262984][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.265929][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.268363][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.273582][ T45] veth1_macvtap: left promiscuous mode [ 227.275490][ T45] veth0_macvtap: left promiscuous mode [ 227.277396][ T45] veth1_vlan: left promiscuous mode [ 227.279193][ T45] veth0_vlan: left promiscuous mode [ 227.281873][ T45] veth1_macvtap: left promiscuous mode [ 227.283771][ T45] veth0_macvtap: left promiscuous mode [ 227.285887][ T45] veth1_vlan: left promiscuous mode [ 227.287718][ T45] veth0_vlan: left promiscuous mode [ 227.493830][ T45] team0 (unregistering): Port device team_slave_1 removed [ 227.528477][ T45] team0 (unregistering): Port device team_slave_0 removed [ 227.801228][ T45] team0 (unregistering): Port device team_slave_1 removed [ 227.834604][ T45] team0 (unregistering): Port device team_slave_0 removed syzkaller VM DIAGNOSIS: 04:50:19 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000002 RBX=ffffffff8ba9ab42 RCX=ffffffff8b17b960 RDX=ffff888024a2c880 RSI=0000000000000007 RDI=0000000000000001 RBP=ffffc90007177e02 RSP=ffffc90007177a60 R8 =0000000000000001 R9 =0000000000000007 R10=0000000000000009 R11=00000000000a201e R12=ffffffff8ba9ab45 R13=0000000000000003 R14=ffffc90007177b50 R15=0000000000000009 RIP=ffffffff81994f5c RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000571e69bc CR3=0000000065152000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000003ed00 RBX=ffff888024234880 RCX=0000000000000001 RDX=0000000000000000 RSI=0000000000000001 RDI=ffff888024234894 RBP=ffffc90007f97628 RSP=ffffc90007f97490 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=ffff888024382890 R12=ffff88804e410940 R13=dffffc0000000000 R14=ffff88802b53fb10 R15=ffff88802b53ed00 RIP=ffffffff8b1b201f RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020020000 CR3=00000000645dc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=ffffc90003567118 RCX=ffffffff90bc9036 RDX=1ffff920006ace24 RSI=ffffc90003567330 RDI=ffffc90003567118 RBP=ffffc90003567330 RSP=ffffc90003567068 R8 =0000000000000001 R9 =ffffffff90bc903a R10=ffffc90003567118 R11=000000000001050d R12=0000000000000008 R13=ffffc90003567118 R14=ffffc90003567120 R15=ffffc90003567350 RIP=ffffffff8148eca0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f86e40 CR3=000000000db7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f7423ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85142e65 RDI=ffffffff9a6672c0 RBP=ffffffff9a667280 RSP=ffffc90007eaf000 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=000000000000002e R14=ffffffff85142e00 R15=0000000000000000 RIP=ffffffff85142e8f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020000140 CR3=000000005e09c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000