last executing test programs: 22m7.151819458s ago: executing program 1 (id=2): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x80}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r1, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 22m5.745506688s ago: executing program 1 (id=5): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x1ff, 0x0) fstat64(r0, &(0x7f0000000000)) r1 = io_uring_setup(0x194e, &(0x7f0000000a80)={0x0, 0xd3d5, 0x80, 0x5, 0x2b0}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000180)={0x53, 0x0, 0x6, 0xa, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000280)="1201b9048020", 0x0, 0x0, 0x4, 0x0, 0x0}) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x62182, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 22m3.573353507s ago: executing program 1 (id=6): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0xfffffcdc}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xc, 0x762, 0x5, 0xc, 0x9}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0xffffffff}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x90) write$cgroup_int(r3, &(0x7f0000000000)=0x400, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) io_uring_setup(0x31fa, &(0x7f00000001c0)={0x0, 0x6a93, 0x40, 0x2, 0x800000d1}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) socket(0xa, 0x3, 0x3a) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000340)) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x44840) syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mknod$loop(0x0, 0x2000, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x30040043}, 0x240008c4) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5, 0x1, 0x2, 0xd, 0x50, 0xef1f}, 0x20) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000000306010800000000000000000600000705000100070000000500010007000000050001000700000005000100070000000900020073797a3000000000050001000700000005000100070000000900020073797a30000000000900020073797a30000000000900020073797a31"], 0x74}, 0x1, 0x0, 0x0, 0x80c1}, 0x50) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={0x2, 0x400000000000003, 0x0, 0x9, 0x18, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0x5}, @sadb_address={0x5, 0x6, 0x6c, 0x20, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_lifetime={0x4, 0x4, 0x0, 0x7}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x70000001}, @sadb_address={0x3, 0x17, 0x0, 0x120, 0x0, @in={0x2, 0x4e21, @local}}, @sadb_x_sa2={0x2, 0x13, 0x6, 0x0, 0x0, 0x70bd26}, @sadb_x_sa2={0x2, 0x13, 0x7, 0x0, 0x0, 0x70bd28, 0x3502}]}, 0xc0}}, 0x8080) socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="041319000200c90000000000000000"], 0x1c) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) 21m47.951121642s ago: executing program 32 (id=6): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0xfffffcdc}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xc, 0x762, 0x5, 0xc, 0x9}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0xffffffff}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x90) write$cgroup_int(r3, &(0x7f0000000000)=0x400, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) io_uring_setup(0x31fa, &(0x7f00000001c0)={0x0, 0x6a93, 0x40, 0x2, 0x800000d1}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) socket(0xa, 0x3, 0x3a) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000340)) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x44840) syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mknod$loop(0x0, 0x2000, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x30040043}, 0x240008c4) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5, 0x1, 0x2, 0xd, 0x50, 0xef1f}, 0x20) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000000306010800000000000000000600000705000100070000000500010007000000050001000700000005000100070000000900020073797a3000000000050001000700000005000100070000000900020073797a30000000000900020073797a30000000000900020073797a31"], 0x74}, 0x1, 0x0, 0x0, 0x80c1}, 0x50) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={0x2, 0x400000000000003, 0x0, 0x9, 0x18, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0x5}, @sadb_address={0x5, 0x6, 0x6c, 0x20, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_lifetime={0x4, 0x4, 0x0, 0x7}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x70000001}, @sadb_address={0x3, 0x17, 0x0, 0x120, 0x0, @in={0x2, 0x4e21, @local}}, @sadb_x_sa2={0x2, 0x13, 0x6, 0x0, 0x0, 0x70bd26}, @sadb_x_sa2={0x2, 0x13, 0x7, 0x0, 0x0, 0x70bd28, 0x3502}]}, 0xc0}}, 0x8080) socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="041319000200c90000000000000000"], 0x1c) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) 21m16.158008199s ago: executing program 4 (id=115): sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) timer_create(0x7, &(0x7f0000000080)={0x0, 0x17, 0x2, @thr={&(0x7f00000001c0)="31d2274d06e2965f8711a064833c7f882c2b76c18d4b", 0x0}}, 0x0) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x20, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x49}) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @control={0x2, 0xfff, 0xe}}], 0x1c) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012002, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0xffffffffffffffff, 0x0, 0x0, 0x3}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='rxrpc_retransmit\x00'}, 0x18) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f00000003c0)={0x1, r2}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000440)={0x1, 0x20000006}) io_setup(0x3ff, &(0x7f0000000500)) 21m15.531371928s ago: executing program 4 (id=118): sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) timer_create(0x7, &(0x7f0000000080)={0x0, 0x17, 0x2, @thr={&(0x7f00000001c0)="31d2274d06e2965f8711a064833c7f882c2b76c18d4b", 0x0}}, 0x0) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x20, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x49}) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @control={0x2, 0xfff, 0xe}}], 0x1c) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012002, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0xffffffffffffffff, 0x0, 0x0, 0x3}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.state\x00', 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @random="ffffff51ae00"}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='rxrpc_retransmit\x00', r3}, 0x18) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = dup(r5) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f00000003c0)={0x1, r6}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000440)={0x1, 0x20000006}) pipe(&(0x7f0000000040)) 21m14.882001026s ago: executing program 4 (id=119): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000c6853d9d933be1dfd714164469626a146d27481484cbb5a43bede7e2a44e8e873380d076ba8d4079bb8f01e12e2bb2aa832f4523991ab5fe15336794847a1495afdd42307e427f194a00", @ANYRES32=0x0], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000000801080000000000000000844d6f24fbee8f1fdada005dbf2563cb27131f000900010073797a300000000004000480050003003a000000a05d1fe10a5fa5393c902af3160d1673beb655c9b27004cf3766ac6c0ec1c7b017cefda90000d29f01421c6492096f4fab5c8a065a03009415a776773b13a2ee3e4ee291f3d2c26fea624c7fcf00b482783b36f6e8081b126fce9d66186331e6c0fbfd6afdf107e259822c736632c72b2fa0c4065e704c5d3e5bd9b868000000"], 0x34}, 0x1, 0x0, 0x0, 0x24018100}, 0x4000000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) unlink(&(0x7f0000000000)='./file0\x00') bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xff80, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x779b, &(0x7f0000000380)={0x0, 0xf5a5, 0x0, 0xffffffff, 0x2028a}, &(0x7f0000000280), &(0x7f0000000200)) 21m13.226389937s ago: executing program 4 (id=124): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140), &(0x7f00000004c0), 0x7fff, r0}, 0x38) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)={0x0, 0xffffffff, 0x1, 0x0, 0x90, "ff00f7000000000000000020af88008300"}) r3 = syz_open_pts(r2, 0x141601) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) write(r3, &(0x7f0000000000)="d5", 0xfffffedf) syz_io_uring_setup(0x47a7, &(0x7f00000012c0)={0x0, 0x10006f55, 0x390, 0x80002, 0x400200}, 0x0, 0x0) syz_io_uring_setup(0x10278e, &(0x7f0000000000)={0x0, 0x7974, 0x10, 0x0, 0x4}, &(0x7f00000005c0), &(0x7f0000000180)) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') r6 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdff"], 0xfc}}, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x5c, 0x12, 0x0, 0x70bd26, 0x25dfdbfc, {0x8, 0x6, 0xa, 0x1, {0x4e24, 0x4e23, [0xfffffff8, 0x3, 0x6], [0x400, 0x9, 0x8, 0x9], 0x0, [0x1, 0x3]}, 0x4, 0xb}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "f102dcf29effae15cd"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000440)={r9, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x80000], [0xfffffffe], [0x4, 0xfffffffffffffffc, 0x0, 0x1]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r6, 0xc06864b8, &(0x7f0000000000)={0x0, 0x41, 0x34b, 0x30315559, 0x3, [r10, 0x0, 0x0, r11], [0x0, 0x0, 0x0, 0x7], [0xb0b, 0x10000008, 0x0, 0x5], [0x2]}) read$FUSE(r5, &(0x7f00000040c0)={0x2020}, 0x2020) 21m12.922127973s ago: executing program 4 (id=127): ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@local}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt(r1, 0xeb, 0x10, &(0x7f0000000340)=""/45, &(0x7f0000000400)=0x2d) landlock_restrict_self(0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x807, 0x2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x2, 0x103, 0x7}, 0x20) r4 = io_uring_setup(0x7c35, &(0x7f0000000100)={0x0, 0xaf33, 0x1, 0x2, 0x294}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='rdma.current\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000005c0)={r5, 0x800, {0x2a00, 0x80010000, 0x0, 0x200000000000005, 0x0, 0x0, 0x13, 0x23, 0x1d, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8db520882939dfc1fa6bab22d0000b420a9c81f40f05f819e01177d3d368dac00000000000000000000003b0000000000000000020000000000000100", "90be8b1c5512406c7f00", [0x4, 0x3fffffffffffff]}}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000001c0)=r5, 0x1) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x3c}, 0x20) sendmsg$inet6(r2, &(0x7f00000000c0)={&(0x7f0000000180)={0xa, 0x4e21, 0x4080000, @dev={0xfe, 0x80, '\x00', 0x1a}}, 0x1c, 0x0}, 0x40c0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) getpgid(r0) r6 = memfd_secret(0x0) ioctl$int_out(r6, 0x5460, 0x0) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000500)={[0x6]}, 0x8, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r8}, 0xc) r9 = syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xe7b3, 0x13500}, &(0x7f0000000280), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r9, 0x21, &(0x7f0000000440)=r7, 0x1) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) close(0x3) 21m12.352239729s ago: executing program 4 (id=128): socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x3, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x4e, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r1, &(0x7f0000000200)='./file1\x00', 0x40, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_open_dev$sndctrl(&(0x7f0000000400), 0x0, 0x801) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) r3 = syz_open_dev$usbfs(&(0x7f00000002c0), 0xc, 0x101b01) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000340)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x64010100, 0x40000005}, @nfc={0x27, 0x0, 0x1, 0x3}, @nl=@unspec, 0xc, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140)='bond_slave_1\x00', 0x500000, 0x100000a, 0x1}) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0cba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34201113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed00083fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f61e00"}) 20m57.100072324s ago: executing program 33 (id=128): socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x3, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x4e, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r1, &(0x7f0000000200)='./file1\x00', 0x40, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_open_dev$sndctrl(&(0x7f0000000400), 0x0, 0x801) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) r3 = syz_open_dev$usbfs(&(0x7f00000002c0), 0xc, 0x101b01) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000340)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x64010100, 0x40000005}, @nfc={0x27, 0x0, 0x1, 0x3}, @nl=@unspec, 0xc, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140)='bond_slave_1\x00', 0x500000, 0x100000a, 0x1}) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0cba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34201113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed00083fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f61e00"}) 14m11.395180263s ago: executing program 2 (id=2143): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000100)={[{0x3, 0x28, 0x2d, 0x3, 0x5, 0xe, 0x6, 0xa, 0x2, 0x8, 0xfd, 0x5, 0x4}, {0x8, 0x6, 0x1, 0x4, 0x5, 0x8, 0x1, 0xa, 0x1, 0xfb, 0x9, 0xfc, 0x401}, {0xffff, 0x200, 0x8, 0x8, 0x8, 0xa, 0x9, 0x6, 0x6, 0x3, 0x80, 0x2, 0xffffffffffffffff}], 0x9}) write$char_usb(r1, &(0x7f0000000480)="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", 0x1000) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000340)={0x3}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x12, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x43100}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x5, 0x9, 0x3, 0x0, 0x0, 0x6], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee0000, 0xe, 0x8, 0xb, 0xe6, 0x40, 0x9, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x36, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xd, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x16, 0x7, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xdddd0000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x81}, {0xeeee0000, 0x30}, {0x8000000, 0x7}, 0x0, 0x0, 0x3000, 0x20a4, 0x0, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]}) r4 = openat$sr(0xffffff9c, &(0x7f0000000300), 0x406882, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f00000016c0)={0x1, 0x0, @ioapic={0xffff1000, 0x40, 0x18, 0x6c4, 0x0, [{0x20, 0x4, 0x2, '\x00', 0x7}, {0xb, 0x6, 0x8, '\x00', 0x6}, {0x59, 0x5, 0x7b, '\x00', 0x5}, {0x0, 0x2, 0x2, '\x00', 0x6}, {0x34, 0x9, 0x23, '\x00', 0xd}, {0x8, 0x3, 0x8, '\x00', 0x7}, {0xd2, 0x6d, 0x8, '\x00', 0x80}, {0x2, 0x6, 0x2, '\x00', 0xd}, {0x1, 0x8, 0x8}, {0x1, 0x59, 0x2, '\x00', 0x4}, {0x41, 0x8, 0x15, '\x00', 0x3}, {0x1, 0x2, 0x43, '\x00', 0x80}, {0x4, 0x4, 0x8e, '\x00', 0x3}, {0x5e, 0x0, 0x3}, {0x1, 0x7, 0x0, '\x00', 0x39}, {0x53, 0x57, 0x2, '\x00', 0x3}, {0x8, 0x7f, 0x3, '\x00', 0x81}, {0x1, 0xa2, 0x7, '\x00', 0x8}, {0x7, 0x6, 0x9, '\x00', 0xa}, {0x2, 0x9, 0x5, '\x00', 0x2}, {0x11, 0xd, 0x7}, {0x2, 0x2, 0x9, '\x00', 0x40}, {0xeb, 0x9, 0x1, '\x00', 0x2}, {0x4b, 0x8, 0x8}]}}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 14m11.13611293s ago: executing program 2 (id=2145): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1, 0x9c, 0x10000}, 0x28) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) r5 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x3c, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x64}]}, 0x3c}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) memfd_secret(0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="14010000350001000000000000000000010100800c0001"], 0x114}], 0x1}, 0x0) 14m10.149625994s ago: executing program 2 (id=2147): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x85, 0x0, 0x0) 14m10.07646234s ago: executing program 2 (id=2148): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x2b00, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) fgetxattr(r2, &(0x7f0000000000)=@known='system.sockprotoname\x00', 0x0, 0x0) mount(&(0x7f0000000140)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='romfs\x00', 0x3202000, 0x0) ppoll(&(0x7f0000000140)=[{r1, 0x4000}], 0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, 0x0) setpgid(0x0, r3) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2, 0x48) rename(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='./file1\x00') (fail_nth: 1) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000000000)) ioctl$VT_DISALLOCATE(r4, 0x5608) 14m9.788278269s ago: executing program 2 (id=2149): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) bind$tipc(r0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) listen(r3, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000002bc0)=@base={0x21, 0xff, 0x1, 0x200, 0x2103, 0xffffffffffffffff, 0x2afb, '\x00', 0x0, r5, 0x0, 0x3, 0x5}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r6, @ANYBLOB="06000000000000005ab6a4605286f128a9cb0ae74a1583576b3b6ae7b7f9dde122e5c7bbb9fd9dfb5554182ddfe27935a52b37c742f3a6333d8b8c3281faafbc60f60b36a18b092052b076be755d5ff63b5aaacd9e630f297212c0e789fab683176b483c1462d5877e30a62c06356da60267470c4d8d9ff53f4edba8a656d8efca8ba618b6361a28e7c56e8c7ed6d8802ac2c6af372cecdb3e8096d152167608b20bd854809a834d02082ca347e66e5e80f606", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 14m9.526722497s ago: executing program 2 (id=2151): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000080)) prctl$PR_SET_VMA(0x23, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000040)='#\':-:)*x\xc1\xf26E\xfd\xd7\xa7O7') r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$X86_IOC_RDMSR_REGS(r1, 0xc02063a0, &(0x7f00000000c0)=[0x4f0, 0x0, 0x4, 0x3, 0x401, 0xe0, 0xe, 0x9]) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="00000800000186dd06100004aaaaaaaaaa0df842000000000000b49e000000000000aaaaaaaaaaaafc0200"/56], 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000001000f0000000080000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x10000, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf0b2}, 0x94) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000001240), 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40a8, 0x10000, 0x4082, 0x382, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x11da}}) io_uring_enter(r5, 0x2def, 0x4000, 0x0, 0x0, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x8, 0x3, 0x45c, 0x338, 0xa, 0x148, 0x0, 0x60, 0x3c8, 0x2a8, 0x2a8, 0x3c8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x338, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x2, 0xffffffff, 0xfff}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x2, 0x35, "67e9c80df082f218581eebfb671a9c2b4c28659c7341df4e8cabf196635a"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x4b8) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb01001800000000e15df6000000002000000005000000030000000100000f040000000e000000000000000004030000000000006100000000000000582fbf44d100abc8dea737e7a933eadde85006b75cb872fcaf5b49f5964e37106a640cd3ef2aa4cd67f7545c9a2532d003a5a519ce83af"], &(0x7f0000000f80)=""/4115, 0x3d, 0x1013, 0x1}, 0x28) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000030000000060a010400000000000000000100000008000b40000000000900010073797a3000000000050007400800000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0) recvmmsg(r9, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 14m9.120456548s ago: executing program 34 (id=2151): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000080)) prctl$PR_SET_VMA(0x23, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000040)='#\':-:)*x\xc1\xf26E\xfd\xd7\xa7O7') r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$X86_IOC_RDMSR_REGS(r1, 0xc02063a0, &(0x7f00000000c0)=[0x4f0, 0x0, 0x4, 0x3, 0x401, 0xe0, 0xe, 0x9]) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="00000800000186dd06100004aaaaaaaaaa0df842000000000000b49e000000000000aaaaaaaaaaaafc0200"/56], 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000001000f0000000080000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x10000, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf0b2}, 0x94) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000001240), 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40a8, 0x10000, 0x4082, 0x382, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x11da}}) io_uring_enter(r5, 0x2def, 0x4000, 0x0, 0x0, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x8, 0x3, 0x45c, 0x338, 0xa, 0x148, 0x0, 0x60, 0x3c8, 0x2a8, 0x2a8, 0x3c8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x338, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x2, 0xffffffff, 0xfff}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x2, 0x35, "67e9c80df082f218581eebfb671a9c2b4c28659c7341df4e8cabf196635a"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x4b8) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb01001800000000e15df6000000002000000005000000030000000100000f040000000e000000000000000004030000000000006100000000000000582fbf44d100abc8dea737e7a933eadde85006b75cb872fcaf5b49f5964e37106a640cd3ef2aa4cd67f7545c9a2532d003a5a519ce83af"], &(0x7f0000000f80)=""/4115, 0x3d, 0x1013, 0x1}, 0x28) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000030000000060a010400000000000000000100000008000b40000000000900010073797a3000000000050007400800000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0) recvmmsg(r9, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 4m57.916043045s ago: executing program 0 (id=5672): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x1000000, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x1}]}}]}, 0xac}}, 0x0) 4m57.847359539s ago: executing program 0 (id=5675): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x1300, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4m57.843730452s ago: executing program 0 (id=5677): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x1f, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001802000060090390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000140)={'wg2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x8000, 0x8, 0x6, 0x9, {{0x37, 0x4, 0x1, 0x0, 0xdc, 0x68, 0x0, 0x1, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@timestamp_prespec={0x44, 0x2c, 0x32, 0x3, 0x5, [{@rand_addr=0x64010100, 0x2}, {@rand_addr=0x64010100, 0x3}, {@private=0xa010101, 0xff}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x94}, {@remote, 0x7}]}, @generic={0xa334fa7a3a2e3473, 0x7, "7f38a5b7c1"}, @ssrr={0x89, 0x1b, 0xf7, [@loopback, @rand_addr=0x64010100, @broadcast, @empty, @private=0xa010102, @empty]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x2, 0x7, "f4dc1ef335"}, {0x7, 0xf, "534bb533b6266607614a7e655c"}, {0x2, 0x5, "ded7e5"}, {0x0, 0xa, "85b180234bdf02c8"}]}, @rr={0x7, 0x1b, 0x17, [@local, @broadcast, @multicast2, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x33, 0xffffffffffffffff, [{0x2, 0x4, "3ba8"}, {0x7, 0xb, "827db4e466c8e5b475"}, {0x6, 0xd, "8234c35c45c13974dc5eda"}, {0x2, 0x8, "ed5de855dfc3"}, {0x1, 0x9, "006ac9b6f94202"}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth1_to_hsr\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x2f, 0x9, 0xf, 0xb, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, @empty, 0x80, 0x10, 0x9, 0x1}}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xc, 0xc}, {0xa, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x130, r1, 0x0, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x40081}, 0x20000000) 4m57.748826332s ago: executing program 0 (id=5680): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_FSGETXATTR(r2, 0x8907, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b7db000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e83a02650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) fsetxattr$security_ima(r3, &(0x7f0000000080), &(0x7f0000000100)=@sha1={0x1, "af6a6376c8cc066e0f3e44db5225fa5e506d6090"}, 0x15, 0x1) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7, 0x12, r3, 0xa6bf0000) ioctl$TIOCMIWAIT(r3, 0x545c, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r4, r0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) socket(0x10, 0x3, 0x0) r5 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r5, 0x4c00, 0x3) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000240)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r6 = syz_io_uring_setup(0xef4, &(0x7f0000000300)={0x0, 0x1c2a, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x6c5832815a6b3292, 0x0, @fd, 0x0, 0x0, 0x0, {0x484}}) io_uring_enter(r6, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), r9) sendmsg$IEEE802154_LLSEC_SETPARAMS(r9, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002abd7000fedbdf2525686c3b0aca000a0001007770616e3000000005002a8e459de05285840e1564dba247f1e4d913fe2caf8ce8b7a45651db0ec42ec874849d6d90a9ea0501325257ab932c9d10be263aee646a3440fe81e8573426d2ecbbf7a2cde2d9882967133ac0b6e46a97a1ed0d2684e87a27ef89bb9c823beffe3a8a3fb931aad9697475595046fe7f20d775599d65ae4a7a7bb40bff7e709969ed2bfa968509002733c1c5ebbbfc6e2c63081bea19bb021621a3b180231b28f0a2a44203fc474cded1cdb05b48375596fa1d2dfdf257ce9a9add50e70f91d518e0c4e931f7eca466ec757e8070529bc8411c08439949c929966bd72136af5286939f"], 0x28}, 0x1, 0x0, 0x0, 0xc048885}, 0x4000) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c06c6800820f9039bffbcc25415ed71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x207]}) 4m57.616603212s ago: executing program 0 (id=5682): r0 = syz_open_dev$vim2m(&(0x7f0000000380), 0x8, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405668, &(0x7f00000004c0)={0x20, 0x0, 0x2, 0x80880}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB=','], 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90724fc60", 0x14}], 0x1}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x6}, 0x1c) listen(r2, 0x3) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x4}]}}}}}}}, 0x0) 4m57.016484036s ago: executing program 0 (id=5687): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = fsopen(&(0x7f00000000c0)='ocfs2_dlmfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0xfffe) 4m56.907963022s ago: executing program 35 (id=5687): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = fsopen(&(0x7f00000000c0)='ocfs2_dlmfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0xfffe) 11.947240873s ago: executing program 6 (id=7704): r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000040)='pimreg\x00'}) syz_io_uring_setup(0x1e7f, &(0x7f0000000540)={0x0, 0xac24, 0x10000, 0x2, 0x362}, &(0x7f0000000340), &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) socket$netlink(0x10, 0x3, 0x15) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r1, 0x0, 0x5004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0xd) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000240)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sync() close(r6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) 10.039444151s ago: executing program 6 (id=7715): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000008500000018000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet(0x2, 0x2, 0x6a113fc2) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000001c0)="39c96f4fe2adf8322f1c087d3b9dcadfe2cf95202b82d3cf5c7a55856f6252d2a00e7ed70d7cb1beaf849e2b13f625f8d3cd300ed63d4914f59e50c5de2e33ca0fed7e179b5a6489ff742bdac293ed1dcd787dee19e5961eeda97b3ab0cb1fa7c3330dd9a00681729240a2c31b58dcc2a9c8f47d0334178350dca55bfda211b9590f6a5b2fe0cc15fed2185d641a068bf14ffb7ac54ca5d05d9623d9936f8dfcf48b04117d2276728de25c2f5bad5e3031495aaffa02e4d54ce9f4dcb94d90f66d974ea60e8361c4b7fe30bba3de34e6ad096fcea9ffd74a9a9eced2070c8858ba72e0c5572c8f35a1b0febc", 0xec}], 0x2}, 0x44004) r1 = socket$inet(0x2, 0x2, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080000001e000000000a0000040500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) pipe2$watch_queue(&(0x7f00000002c0), 0x80) r5 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x0, 0x0) r6 = epoll_create1(0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r7, &(0x7f0000003d00)=[{{&(0x7f0000000380)=@xdp, 0x80, &(0x7f0000000540)=[{&(0x7f0000000400)=""/117, 0x75}, {&(0x7f0000000500)}], 0x2, &(0x7f0000000780)=""/199, 0xc7}, 0x1}, {{&(0x7f0000000580)=@isdn, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000940)=""/216, 0xd8}, {&(0x7f0000000680)=""/45, 0x2d}, {&(0x7f0000000a40)=""/168, 0xa8}, {&(0x7f0000000880)=""/67, 0x43}, {&(0x7f0000000b00)=""/83, 0x53}, {&(0x7f0000000b80)=""/132, 0x84}, {&(0x7f0000000cc0)=""/255, 0xff}], 0x7, &(0x7f0000000dc0)=""/4096, 0x1000}, 0x5}, {{0x0, 0x0, &(0x7f0000001dc0), 0x0, &(0x7f0000001e00)=""/95, 0x5f}, 0x8000}, {{&(0x7f0000001e80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000002100)=[{&(0x7f0000001f00)=""/87, 0x57}, {&(0x7f0000001f80)=""/135, 0x87}, {&(0x7f0000002040)=""/169, 0xa9}], 0x3, &(0x7f0000002140)=""/47, 0x2f}}, {{0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f0000002180)=""/3, 0x3}, {&(0x7f00000021c0)=""/31, 0x1f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/247, 0xf7}, {&(0x7f0000003300)=""/124, 0x7c}, {&(0x7f0000003380)}], 0x6}, 0x7fffffff}, {{&(0x7f0000003400)=@can, 0x80, &(0x7f0000003900)=[{&(0x7f0000003480)=""/179, 0xb3}, {&(0x7f0000003540)=""/172, 0xac}, {&(0x7f0000000500)=""/13, 0xd}, {&(0x7f0000003640)=""/68, 0x44}, {&(0x7f00000036c0)=""/24, 0x18}, {&(0x7f0000003700)=""/14, 0xe}, {&(0x7f0000003740)=""/225, 0xe1}, {&(0x7f0000003840)=""/182, 0xb6}], 0x8}, 0x2}, {{&(0x7f0000003940)=@x25={0x9, @remote}, 0x80, &(0x7f0000003cc0)=[{&(0x7f00000039c0)=""/57, 0x39}, {&(0x7f0000003a00)=""/97, 0x61}, {&(0x7f0000003a80)=""/102, 0x66}, {&(0x7f0000003b00)=""/156, 0x9c}, {&(0x7f0000003bc0)=""/35, 0x23}, {&(0x7f0000003c00)=""/67, 0x43}, {&(0x7f0000003c80)=""/16, 0x10}], 0x7}, 0x5}], 0x7, 0x2, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000000)={0xa0000001}) epoll_wait(r8, &(0x7f0000000340)=[{}], 0x1, 0x1000) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r9 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r9, 0x0, 0x0) syz_usb_control_io(r9, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 8.225435121s ago: executing program 7 (id=7727): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) (async) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) (async) close(r0) syz_io_uring_setup(0x2afc, 0x0, 0x0, &(0x7f0000000000)) (async) r2 = syz_io_uring_setup(0x2afc, 0x0, 0x0, &(0x7f0000000000)) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000003c0)={0x14, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x40400) io_submit(0x0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2}]) io_uring_enter(r2, 0x1a7e, 0xfc94, 0x6, 0x0, 0x0) (async) io_uring_enter(r2, 0x1a7e, 0xfc94, 0x6, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='bic', 0x3) sendto$inet6(r3, 0x0, 0x0, 0x20000845, 0x0, 0x0) (async) sendto$inet6(r3, 0x0, 0x0, 0x20000845, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0, 0x0, &(0x7f0000000140)='grpquota') (async) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0, 0x0, &(0x7f0000000140)='grpquota') setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x48, &(0x7f0000000180)={0x8, 0x2000004f, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x18) socket$nl_route(0x10, 0x3, 0x0) openat$hpet(0xffffff9c, &(0x7f0000000040), 0x40cc40, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e0600120c"], 0x9) r5 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r5, 0x400, 0x1) (async) fcntl$setlease(r5, 0x400, 0x1) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x4}, 0x4) (async) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x4}, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) (async) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) 7.4058572s ago: executing program 7 (id=7731): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=@newtaction={0x10c8, 0x30, 0x1, 0x0, 0x0, {}, [{0x10b4, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xeb4c, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ct={0x106c, 0x17, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_LABELS={0x14, 0x7, "1397ce795e4a48941407b46de8cd5e38"}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e21}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast2}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}]}, {0x1004, 0x6, "4730b75afee96a4da8c52263bdb3de913240eaaaa99dded43619d5675a960dfc47d03dcc02a219837f108975ae2f858bced5a0f45b624b86a384fd071c4a6f93c9dc195bf17c13615ab15466ee210cc1876a77f0512242327ccf878f49b522d2454a7712eb705f1e5069054743bb10793cceb93f55c69cd9f3e54c9efc85b44603737628e77efe66c53236c2efa5787d784e6c3b991ffe7cef799de7e9641313e2c9b6133bef745cbd0795639af253d0a6ce8ac5caf6e0daef5ddf60348d7dc75e1ed6b6da5e54485008f7691adb2d99ec30dcaf48bf0676527adebd65ce5bdc796006092432b23ea183fbb720ac4e796d851c1239ce7410c896e466be1da3396cb9a7c6a73211a81f2b19fe4db97e59d649a7981a06004b0af378f5306bf0a508996268d559127ba4991fa6030c21f4d2e6cc4e81df3651ede5be97f8b88ce2225b87961ed64e3aa08309d844541fe86a386b6b26d80b4e8c68dd8abd29ab51994f8c331ce0710de7a6c3620d4eebab4874be9d6e5d9278916a19d09b2365b0b71ee394670251330aa436496616d415342dc3a5da03f02e61e6037d48fe4318931e16b3766de686f117c6d5927edc3c2eb632a6f716dfa2bb7374c7e8ba0fa9611b3c1a1086c5270955a3408f08d2bc3aa581489b579d144518e911b79cb4dfc17af9c740ebfaabb57141092fd1637a8ecf7a9677e74a767e46918d0c4d317d09f359e114c8334c9ea6e8cb970023b247f23a1ba91de996268a9d00c2120eebbaff8c2769c8c5e6c71cf98c8cfee44eef512d777089c7fa4802d1118ed77852eb6b5d159f6f960606c6db411191db5c41024567c73544412a6ac01f697f1a6719219369549126b413aecb9b3e9bbbde9283f936d0fab5a727bd0e1ef91b4a337c8640c13f88e111881be0c8ff20ae348657123ef6b289f5b807ab5294d5a99df14d89b522ed654bdfb64cf19e54bfca820b0f68d6b8a0635578a60f8bb4502287a6c91d175634300cc0bab782f9334b781b5b91e0ad60b90d56f4a0c5444fd630b1cd69c79abd63477bdbd9b730192d2d2db593e63f68ea2553592b6e42e4464344e3b685eb44077e14a92b805f1ed84b94b824d7f4a223a97e061d5914c782d11da8157afd65399f1ef4b7dbefabfa1c96afd4e6703f1760a5da5f5ae8db5daef55b52a922c7687e43baf1bedd50e6d8087d97e314805f9ceb2d9a5eb5ca4815e8c9ec9ad8dd636d44680dd8e7d8f0b1c0baad7054dc31a78ca4fb062e40c377f4eccf90e3755a414663112b1a0f1d1948d4c2a076dacff747b3d9808c03d1900eed301445ec2978c1dfefa7b4be14d65db8af8e2d3cf1b3bd410a1b4aa6581a0f3e2b4948c6870919dbb45d766099974643387ba9cec69b269155dbe8aaea6a5bafc29432e06b5d449f5ab69a5a8303f357a76cb8c81f4a4af924d7fa48ad4b44e12c01cdc55901eb29eba94a7f13fd76ebdacc658e007af2db92e68f097ff388aec8ab9d1cac794dbe96252bd002275266446c1812ab52892fab538fcf6c74165ef0c0e11cf589a2af0930be626a2d288bd239f39946ae0fd1c63ef05b5ad932e9925f17601f0585b6c59a8267113a50037209836f03ee0a442a20e7d393f03de82376353ba44ea01830faeb7c2f15a56b5c5857debe5d1258f2e9a46dfb89775d7332367ce096d388c46a5ce845d4d576b4655986179339e1496ec21bd7366ac70d41b4e24fa07f5980a5d62839dc13450f26fef0ed441838d4d0a8aadc1fd70783c05dbb56e27bee91768a1c31417c99a6741d279972089733305f384cd18ca97995d103a8d5973c987997c5cbb95bacb7e5a1301bd2a8fbb4a0fa6d07bac794033001959ac034aa5e8b19db819a4e198f760b562a026ded84db740101b4f5bb2ede2a7b59272d62e6dc6dbcfc9a2aa9442f28cb4148e3cd1d4b1505a6af10de11bd7dfb185a583b52265cc8a7ee9256c087023a0a9d0ca20fd96204382fe3657e706fbd0f21e2c21f1acce2f02a9f12ce93b54d9b4928007218d6482b2570f7147f20bf5c02170417cf398a4503060f4088b29618ccc36de67934a4fe2d9dc2108d43bcf35bfc47ba3047b2cd98f01838611de689dc447b5faee59aa02dc8e3d5f29c593134a82963efdfc6c425f39aa7f99a2cb29d95546f1d7a5cad3f2fadaeeb6147a05a52f83fe7ef740ea98a3c37a7d1c3b66517a157e21fefdfdaf786f500ac283935ad5c582b0193044dfeff10adffc830c0528a8646360445dc4a10aec15677b46ea1c8a31e35f805f40b9c28e6a649c5a4205139e0241b08417b56ab12f582cd2c71cf7768cb28031d9aeaab774c7e760b36ea21e22fdcbc2f9d5b015ea4aeb3575ba3c83baa652c8b9627d296821a0f98508e15afe93857068890d3b0b0aad73df93130317a407553b142310819676e6cd4de43072a946378ec996f57e8d29c9e82880869e146df4f310fcc94fc46abfea02767a104dba20a80148e6d9dc2342af475754b2b15af4699253b2cd15bb6448d9a13085cda4f3b8267ccde757bc385265abecb06bf3082b5e413077278dbd93c9b670103c7aa7971977dec89216335be97462e0b59ccf32007adf4f0996d526e822c01d5deb3dc5581c06d6856aaacafe30010636745c276f185cce9efe9bc05d5f8035681c9929e8532fae94f1f5ce1b8cad0a5f0d463ed333c4c4211557528267071d5d2e3cab19e1aac0ce63eabb594763bbdb1770b492cd10db5ceb02145e07e3d3dab192147c405fc11dc423dfa376a836ce6d381b0cdbffc7cf1f2ba0b167d453721ef8632c200af0431c1c6a82605a0d0d182f6cead207192f36fa84092626a6e1a75c2b4af803c510b688ec0bf413384f405421d4fa844bb380c5c2a678d4c93563a203eaea55cec2e5dce48a46a4d92a2dd564bc3ef7f748e4886f30cd4f37005eccd45c67156c466d4d721f6ccafb3d0609a91a9f99bd212fda8b11e462cc9ab8694d6f5f94a4d22ce157bd2710cc79903a676fd7b5b9a1bf33f011e017b6c10a6757025dde714894a3cb544bde878652b53ced52c03bda0b436fd389beac084cbcbeae334e8757c4702d281517105da20e1cac14c1a753da791353cdbac3f038dc11cf7ee2885693d52e9e9feb43542a025be70abac45d781628e33178f9e74284fd85bdfb57e491e648a827e486e3a3e8a70de394c2d7a3df8b0c908347c8c002051d00bc420464acb4c09cd0dd09aa60be98645035661a3b81cd66f2b6cdbfb8ed2f00058ee9276058e5a98088c09aaeb626fb7bec35a9a31ac8bac94e1f61acaefba1bd851102cca0ffb76b63a4f541ddd125a6d9d6f6474fe8897d08a56dbe0af2017965d073cf11d2769714178f120ba1122cba503665bb08edacee717d5850e42dcf1d75da1199abfea083a9d935c59832c4f5fef6386d71d46c1af22de9ceb4cc1b52521d673cd4467a6438c77ebd398d72482e2ceb585fe82274fb8b675628a2fb5701fea5675364c3f1385c504b3a1c4d7186e264328e2ed5535ffd43eaaf06a94fb6433621b5904bd8072d8158214a821c6d3be468afaf4541b5104f0288b8b46336c25f38c2704c5e6f497494c23dec193d16790abcb460bb8e9bbeed0ef8357df999e9df08759db12405dab5b92ec7c49e14d811b0ba0cf297b8fdcae631ebbf085204358b12c7c6664ece9770f2cadcbc0b96d5d7166e4d1b01209cd5d4eab7905fe253440bc1bc59099f9305764d2ce69636758aa73fdc87c992fce5f6e0ef903d2afff1adb6c70c56d2149fec1507f1fe494266eb35b0d266ad922cadaf1b534c6847ca4ccf99210bd7046e4e794c822c9879213703051ca214de0cce2254750f84a87f70b4ac1525f2d72dee6cad0645feb7576b1b94fbafa35299088d86163abdb88e5ca65bb6153a314d6f42834b09b319bb644c4424b3ec2f9b6fc1d9e0dd691c7dc6bfa2e3b33ceb174a50084dafd5a2f68d344c973b6b3413b4b632ad0235079aa7f7c4d590f795e7b9cc82e61fc2dd10716f7503a8f35073a476bc56745d7049a540f09680600bae7b04c352e7dd10c60e6a80967843db983d34cf3168c06772b7e367e77bbfc901260a50c1cbe1afba36c29f7c01e6ce930af5265456ef2c1f1b3ff077367fc9f851e316993347e3babafbd628b8f5ddb64d61361aceaf38f9c24edaa624447eb7c3877611aa8c50d147457506df16c905d7a459b0514e7aefc85b2a943eadb5f03978729aeaca8d962c5f26196d86d6f4ecfbe28717ef9aa5f7feb56e31654b955dfe8c7c4e982f9cea67a8899fe3eefd58c19490b246976025c8850ba36115ad0db7e006cc35b904a03bbb2e5b19559e129151f6e3173917ba7e7c98e786955061363d250144b326600b57b2298b96ac810982d61c31786d5c597692850124aaf5c0e3e84aed0d2f9ee6f610e582f8b452ee3b85a210af81126cc9ca1b1d1619844671d5ba638d1bd3637203a658cec136a403eaabaaea1557f7e69546b79fed6adf834b2c78afd62c0dd7b9750165fbe400fb68ad68d30672815214f74076c0812a2d31b1a4865f680f59dbd6c11a53928b17c5f40dd05c93039e7ea6621c3f43049aeff6c6c9221fa4e2e4273b93ace12918bfb5dabc2b5ce36b7cfb7216b319f4fdd0c05a5685eba8d12c1bc381e9447951d8e486627c5c8388a450a4423d66a553b1392b77de633ae52710817de3df623cff8b64b529b95c40e111223743facfa7a7f59a7e94335f7a1c3c4a1f9dede74c67d2c9c31fdccbb16cec5ac905ef04549c9935ecdca9a07e2a7eb49c946cdfa1b151575ac3ef31cab94dc0aa33046b2beb6b55073cc55ef405255f20cacfc6f3741ab20e2503984912fb3c30788dc98a13ad88cb6b84cd0b9f88a72b3464172607a8acb245271ca4581970bfe0f0a763d345ce3ed1710317da58d2e8a405506b860219173e42cff6d59b9fc2406de34ce3a7a3c8071f327f9055650527347958f1df12e5e452001c1963e123f59ff7b24c07a9957717231c1472c9386424401fbc80095418d4c65ef5709a7b5570ba8b0c553567b9b1c18a67bb29aa29e1b055a4ffa41b30299dcf23d4d681a76c51fd17ba18fad188df75be67e827243fdd46cf8780407692e8cdab8177ef7d9c7a638b000256bd8775455140db4821d773a506d3209612a53eac118b9461aa4c5cd67df70a5c0b0f9a5015c2a36eccd466520f02947cc1ab31f7eb8bcaaf91f0fcebf4b8dde87e305b5a629e91e8c18200afa65525e617b4fb6f9090ad42210547ff70f4a5cc512c1d3d99eb022512cf3c3d15e3f55f513e4add22e76eec6cfa772615f98f34faa1b4d39d3e6a5108e471cdf89e81b9100f05c7c657e5526ff6b7c4856a7ef901e229c9911ac9ed17f68b606fb4daa017f879380364e999c98e4181d1610658bc283e9225b68aee0dd098808f0a35920acd503030d9d768fd2e8ca05c7bc8c62ad51c71f65f688362c07501b2f2763447c4e45c61308eab31192dbe1729de162c2f6414d96f036123e6fe434811727eb331002995f59308bec73b34ee224aff094d9a55cc92f978410c894c61d2ac341557507b7137f9e7698c8c0e57a97138a011155e2435ab589d794d54cece8bedb539e1c846cd57a7c7d5d6ad38dc42029fb83325ee553d31bef0b70950d85f79ab82f6c67b5a8545397dfb17987aeb2214b0325ff2721839ac23edfb40d807b43892eac7ced97ee2ded26e957b7159fd4ddd0a95506d8329b6772ccf6d322cc4102e9681d301caaaedbf6a5eb62df3ac211b104390d64"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x10c8}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x0, @empty=0x1000000}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)='\b\x00', 0x2}, {&(0x7f00000001c0)="5b063dd69cd3efa2d9381cea9925fe", 0xf}], 0x2, &(0x7f0000000280)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @empty}}}], 0x18}, 0x4000000) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x0, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x0, 0x0, 0xfffffffc, r6, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000004300)={0x50, 0x0, r5, {0x7, 0x26, 0x8, 0xfffffffff323ca46, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x10, 0x10001}}, 0x50) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r4, &(0x7f0000008400)="44ea07862a07eefa4de37092cf4356f54454db90301c4d373d57166f794f169d63344840a37048638ffd5e30beade3fd768b18191001eb890277fad8bdfe3742686deeb34395963bcf7a870addd76c80aba9f771ebdf410c7d7542fc2b6ae9a458d79457755d94ba8a3248b01a2293d8a70e60815b90297002652966a6b836065bcae0b44f4b26be93dec3cd4cdcbbc84c5b916a1b0d8313340675d67fb0c785d0307f95e426546c9a4d0161a8f52b02b95f4da53ced705a658722091864d74ac0a3a5f3853a0ad71ddb29835680ca9ff30531f8df0f0ac66f7f1433c33d75fa8f0f022b175df093648a81af5ed701b2e7a14199c83b539e763dbe7228f2e184a02becd41bae305d3f34c72e8db93dd214ec203eee6e6dab26b41848c95fe1ece8ca157a90bb7a990dac5f3c64cf49c5c5aa8414b9153f82eca9df88d90a8d6c0e72eacd52f82939d46d41e0f5ccf708c03fccecea467f33f5a49888514787e42c0a12255bca89e82344ab01ac3b6c6158e3c1b34ad953eaf55f3a2c487efd9423a542e41dbd0058aa021cb6fdc5df88f807033edd31abaf5ff7e6a9578d2be6a2d925d98108fda2a7e56a0bbcdce0689fa9e2111b0be8f3e2807f7f3728489917a031f2187ad98a744f19851687adf59a4b4c328ad5c4f2eaa0d112041369319f6d3f928c22d05f9fd68b5c268da5e2f433d651bc602a65ee83752c0c92f7e29002faf9475fbb467a85d1f41db5964a19bdd45377c7c8c792de5e76e87da9296ff90e7fa9e57f093531998c8779bb2348d651808e969e960763c5231c65a06ee16979f4d990dbe7e10b3a2392dfd6483bf2c7c5f6f3d941cc17663668cca83dcc38089b4342a801c74039b32550c2d9cf95a0236523933ce3e7538ff9da2b7b741f3cbf53e6084702d0a5dadab4350848f6e7ba46d4736c7a2ae702c480c30dd78f994a10b9c3157a17e9e29576a68139403300586eb0c673252a319aa1cb01efa777228d8242ebdbef9db5c03e4c8e09bf7a009b7eb19357d1ad6d1defc0dbb58c31d85b9f1035056615ad0b0ded12751273c8bb7810ccc5b2efe51d223894b141dda837e6b7ba21de9a978ac447d995394b800e1065906455af544b9d7f353d1eefcd3387d18e3611f3913926f3a4b87efb3a9707d6136dc00e49ea5e7a6d0bea17eb49cae93c0c4422374b0f46380e0d554e1087c1392716d368b04b1da85d271206b465608468802fae00c7ad9425974d822cffbc420e739f7617f59a879f791ab5dd7a6215298cc7dc6904679889e60a09114b0f421b6f1286d0a6ab3dc887c2d3a48d53a7611ec270530b07a83ae1a2bfa6da42ab38bec3eb8ed1e207d91c02e74a31c29abbd25f5779189f5f2494ea5c3f4b829b96de0c54b3851dd58610c2b9ddcc2960f34fb857c5ab1aa67e8eb10a59639db2ddebd0206ae7ee56b21ef484e3c66003af46326f1c456ad2ab5273d0c0b2bf412f71f820ae12723c74e1857e0ae3d5587a0427c1595e06b1d5ab5e815a5558302e0d9c50b8c6cbd599eb554df6f7323b01f1353b557c565dfe0de51032a88541b49ab682a7dbe4dccb9b952ba9c9ce3bbff80af01e47953666327b8acd7d2cf363c6f7172caaf01d8e3417f768ab08f2cfa7ff26efd219e25ef0f9a84c7b116978eeafe3410972490203dbe49aec33f14d5592a466a6efe630904db9c77ece20bec7552b3dfb48d4e0427ce5024fdc0aec7271e93c51aab19d7a40670add6ea5820f625831a593137f60543e424892856b3bb9e608e88e65cc6dca098d5139a38ada517cd788b9f13618d9c2c31d7918cac6cd669710692797e61f4df3938dd429d977cc11e7465a7a23740052039d9b31cd26b95efba17bfcefe121fcbb762d29287145b11a3abb3e0683b9216a8b5d9744baa75da5d840e70cb310c507c4f7eef1d6535d8e11079edcb51df7ea63a7204e314147eeb57916171ca33c0f5932916e4d568d9e7dd3555500ae119f0c63045658303e1f4ea99c896eaeff3ebf76b2def0ea856a3f24cd76dc437236b71dad9a26fbf3882e81565851eb6c5b265a0721be43f0844f4d0e4296011e280236a0ed7656f2eb906e6b2ec4a8e5bf91eb7e8be889ded6d8492bb72f1de26cf3973249ebcb5c993d1dfa896a658a528aadf57dc28a8db32656ed8e416f96e1f89ac24d4ba587df31f3d2d8d7809d06c8b2d68eb15b377918424499cd6a7fb62e49a78831f0e4b1476bef657fb34bd59e34793d21da3f7bd0278bbea8beed261c697ce17f36f1cbc1b94aef11dd1dbf1c68496765258f4cfc8b5fdc9197d7260b733d2061f399c861bc5912ac76cfb62b9218196fe054b92a295a9b9526871167d436b830a7b4944f527fb4d75a036acf3a71a1a710f609f4e794f1d764a5317ac067e8194666dbc73e32b2870eecf8776bb7641dcdd6d764f91dec83fbb53a97e6531211dd8b86bbb57f8acd637f4b1b66fd9705a200e3081ea382262d54edb161927eb1d85cf7b9373a24607c99f3d66b85e22d2cd5cfe24020d56e0552bd43d803882128317d9a56e63a4808ed6401b662187888a0d0b311364fbddad07911b5244877eeace22ab5bd8501d748ed5cb05809e1639678c4c6cc43a3c2fcdd5b0970332429c3cde09d9556c8360f26caa744ce5e57bfaabcf7d124b2d4fa97d7e72f16cdfc35f87493717e2a852b64fa344db5ec72dbdf22dbdfcd12ff796d515d5f3fd3cddbf53426183bbd92e2fd3e91fca8fee1c1ef4f8d59036df9c48fc7677f2c4905b6cf4adcf448029c6c6a2968b13e3b77d578e2661ae7d07ef84fa098bae9a564bc8c507a103990c00a0e6d2854a1689f7b095a100b7f38df028baf20bd56c843c24f8ca4a81130256b13636440836837429c1c86ae1668d3b250108406acdd21b40450399872c1da6178184bf9c2cc11ad80caa9997d3c6631f09ba2a4d96e6b74313f1e40fbf8a29962648f400dd256c4852c556deca2e3443b858efa43d53efcd496bf5037a82e14868b508632bdb2dde924ce2cd6c65f1708c18cf49073e536f09e8fcfa9a44fdbc349ae75e17205754d3bb82d3ee8a93c59aea1bd7ea6d124224b11405f815ed518a1cb9a80191249ac1cc0e5c1f9aab8fe67bb737cdfefac82a89a7d6ae08bb9e1f710cee451d851b35ba9b886dfd9c277dd67891331d43f36353c78c65e9f3524e1b9b229c9f91de7b5ab16a66017d171e2a4e185481d33cb5bd9c5e3d93c49d2c620c16467bf4db73621957f76d656e6d4cb4d59cacf1209da4e39352554cc2abcc8e82379b4f819fd6d261c6d7615f85f6c5d0b9f57976836493367e1bbb14c57983aa97c6e4e7c4fe2a166284c904ac4f70ef2e52e4e7dbd677ace683cd61aa60b702770aa0ddf14b694bf3cfaeb585f8fd8a85bee2f78400a0874dfb4c319be24a46d1914b6e902d5de8d8375c9ec786ef6eccf1ee7a003f83d2e163097980a06ab9fe23c4ae8e91755e4217d3c302111febfa9dce02a49b217aef709d183a5ab8ad1d39e9a697a79be303fdb2290c827279ce187d1c647cc28e20c0b3ebcab2b1c75850db46211150a8bc5d80d868141f885f7a5ef520ecee6d33842141003df4ce066090c8359b5dc32dd9ecb1039454d0b691d8f97932b69981be240804e860a88d1a047f46ff43609b41ea36dc276b28e87364049940ea7b6dc78848221b30dc6aa1b60f17942c96c46e347606d14ef02ed3ebddb20f7f4d28b9460f4af047b772927ca6a046b7de2a21b8ce79eadb74e4825af5e19ac2955999d7304a35851a4b9086ff922da8845da10a55fbb62fd13d98d45f60842d0d6301cd72e7cb97bc84393a414f671e5e0115a6c1c26054a80ddde10e0a83a4ffd123504c881a844bb7187c604f87588dd0d0f11930f9a3cfeb7098f38f84923637f1a9f6b3e3d0899a156d50d7e740b118c4865ec5e69aac247a930007452748bea9af0af511cc1129740510b13f48fe07ef1417ccc765b2cd0138cb51dd71fbdbe967fc321082a9ee4bbd1ea404cb24971de5a1ee7d7993b5d11d67d30e8ba94a9e943852675a07b88a51df6f4abb507cdaee96726023855e4dee6bccb3e26a2a88fb60d812e7856c13af5f4fcb6776ba8e27a35bffc5e46473b31a4b83ea1a3376f4549af87d03102413faccc3fc897ccae95d2700163f1fc5170a643554169018c5cfcf8f50c7981270995d8aaa9f923c0679b258aab60f79111627b71404e1ce8751228972cbb2bebbe25973cf98bf8fe8e63575950a0aaa1ff060f01e96791d128d0b7b40855126ef3910ed7d7a6d9490618da352ad7b889f7d905bca2214224e170f30a088cff91921917c937950926cb11c04fdc6bee776b9abd2aa286ea5074e72756482fcb6a7d072edc075f99e02747ea49a40b26b58118b6692fbe55b09b054a044d1f481173e8923a74806cb770c4c61ffa982077f82bc4db7fee4ae2beed4673e39f5ff0614072a771034174a0f052ce39e27450d18920664e924ee963c9bbc9852fe68f30a199ee4856c1dadc08c061165867438bd3bb73f5a50f5131b7867dc80e0c5d43eae80cc2874d48edc910e7f8f9b73e032a8ccd7c348e84b4179fa101d488c2fc16cdf953e269a9cf13c0dfe575e0da49d7d2c09293296c0232bca9fe0aa8199b21e19746c4783630e432b5c7e1e25864fcd4deae07c2b07782d155fe6e6b5d9eed4beb9db47bae4007753d8be56b10723b5467c64acb0eee4cb9050b4ef2b57b630f4608af96fbe484816454ff385aa3765051408779384c6585f2e24662fcc3008dc17abb07ba9cf96ff4c795c97811e73b06c65e1b5c66c2e1873191d972830b1f53bbfedf8b5e8a64a29fb3b3eca67f1791652f9ac037c2f87c6d1d9d453b12d5d2b0c070a8084aa15505e240bd0c61895383f23f0460027d60dd9efd8539807f717bc353f9b858b9bfd2acecf2190e280faf6a1603566ff8893dba33ad3300e10438241709ba7413fde84810b966b4556f9c8a51aef27f9b9010e7b6208715169a585e42bf3f7333209afb5b19c0de7722004850d53329d93e2e4909eced3da67dd7d2c82a4c9d0d7cb6f5ff7dbf195e8b39ba9cf0c1699ea1f8b6d1293509774ef3bf48597146a60aa5b6eff2bc8a64f9ae9a81becb9c398ab9676d2cecb14d28f819d08050269bb0ca9bcf59d5c9bd2fe2bcdfe82a8f037781c6275c9229b0729cd085e66e2712bdf22009440c4136c2daa54e547386e1acd16a1d30f3d55c1ef0fe10c108210b9d8894d31e5ef17b049106700bae524eef744ef4b3a69e9cfed4efa9b0c9262177f9fe16f5b1fe5bfe5fc6a611e6ffcb9c5f329d4e328cb69912f0dfb7f4a83d326cb20b053653663096870e7ad2753e992dced7405a00a39dc55e652eb6b2e1b1e9782b42f443890c4067b07376c6f0fb2ea6589e04a8eb39a94d913d9f4410d238e6880c167a0a23b266577c41ec3e0f513eb7fc948c12b26ea2646c0481488417d9911a0107ca0ae11c2c4b8c2eefa5144ecf8b149d22abbd26d1b2a3fe51016b9bbfd229c090fc2fbbca4803217c991e36f86d4720b45ae45e6b20f09fcd8e5decd79997e79177bd67de7433282c1d0be5d585a71c873e7171a133d9f5ea35ac0ac5c1a643279ca66a365d278d14eee3ea90961eebb3f6c098c00d051d4716853ec7069be2a4625cef4c0f72abae5309d2709901d05217fc3e52049c4aa16b50121e43ce491d1bc9adb01679ec25ab5009f746170c2517f0072f16c574cb447c6d8ce4a2e45426900463c5303413bf4fe7fd64c273b404cf936068cb3085c3a81b9872ad2cb79aa4c051e7ad97cd4e8c6b94bb0df87e4347ca6f11f155ea265762f81eb0e9fbaf3dc05157eb9f12596ccdf9193018a2226824db6bbebf4e89a070688f698bbf23f30dfb04db7c3d804a7587ad0fd03e68cff7e516e5109e328e1eb3b887a6aced15804f2c898f41c5452e160ca30e35843705c150bad932d2d3fbd791100b1535d9f3306dcf127fa49c1a36b172f46b1fb676ea8783c23edf89b2446560dc1b95b39f80eb9d0994c8dcac9a5a304c554133e1d6ba368468a17312167cda37932cbd4b93c58b7ef772d56d4311182a680e19da6fb938848aad40242856379310b61d6113de6814644092712133823ee2281639b52cec52ab0dbd65ddae631e7113ca75a5476797cde5f5456acbfe63c6ca8b83774690eaca3a019771ca0e742815ca5645418730ee17f52fa2531e5487c10da3ee080acd50fbd19710ed5cb924e28a18985132afbb7d2ff90f6c3855c56970854b9a48ec4f7566d2829e271af3f0ce26742602241fef70461a484499591a9079ed53aed113589fd74918146e1917a063514d7eaa7f4720a386eb2f32b6d35baaa5d36c2013eb405cec607202f19bda80bfeda8005c5d1582208b861437fff41ec0708a6a98f2b4b4463141c1c312a8115509e363a274864898be996176049d5f7e6cba76b3a37c9b2ee9553fc70f79503797464d736d97d0bb4741ea8ad14fde6f18fbb02ae97e5a77bc1527a13f18624927d79aa5b4df2dffde7fb5356e521c7a419209031df8138838151c7e90783c9af133b6961b44f8de89d6348b191cfa6c0ab652746b8582134537727b18c670691f3c1e8ca0e3cefcd26111bef476eb816482b7726399c86cbc98f0f06929c26cf831163bdbe1fa8d8f96a65d3bbb3d37657cec4b77516864cb32404996dae1d0d9f3c12b7f2698f07930b791813b7ccf0f0dcd3320b78833f077ee55aae156af804fa9a15e60c709fb30b06ac092bf97a4fe4732ea7bc93aa73232024c80434b4900cc30de20cbc1ea407746fb186a610fe31635766f5edaa8c9ae974ff8cecc4e7e391a50bdb34ca1dec1567e866497bb59852cfc1fdb361b235c803d70cfc90c229078079619b4a8086a68d420ee1d7fac403b18c7f6aad91612e2f2b9e5e206bf897bd98a3b24a0637e2b986ae7f5d376bd63d63f6c4f151ce7eaa97a30d9d51f1a9207dca6b596831a9b92517b9d5571e72b4a06c07d5ff0d325896a1b32e9fb4f9d67a903946b205fba7beda108fde3fc503c7352c59c03bebc2891007fbe966a0441a7f4bc8320b901563ac8eadba643bdfc1636864d33549a1b9ad3ce01bec94b631ac6f46c453c57c62f2cf0f76d9f1e0731e266311624a138e607e699c91e37a33096117f418b4c92c66d96fa1b1324cfb569e3d558598ee65e69b8e0b9625d551af54a09db8082f2fa9da1386f92245aadaa13bfa3cf5c39fe455180bbb5e2427e4067bd2f5a5c755c31405477ba832dbbdd4af66acc7c11e576f700e24fb4c26160b4443b8c17805238519c7c732df774b92579e02a8da5e9a17e3c20e92afba7fab49000a7b83987ea48d5854a0411615462cabd245ab3f49ba375ef179c0a78059ffc14264177a6e45dc5f2fe6c957a313ba9889fef33b788933bb37a17943551db9cd08fd8d823fd0b35110ad589c3bb3af4f69bd1c7c7a3e726f933e4a0cb1209e75ff14910061c3750b9312de42c86838d5c35a681899c25220ea87aff02bf72fdd8745f5d751e6d62861496890c956143c08a222774974789bb46924b68a6e3138ce9dbca622e78c5aeed8215de4ee5c1f8312b6349a91ef1e210f18522b7a644700e90eff995e950c8eda05d0bb8e799ef32a7ddb8a87b4120a798a3f87cc78b6db0c7947b4786db1618c523203c097ef3d3dc0f4e1e87d0d597c4eaaac05a033a3fa91309c05cd8c14de649d7dd16d8ed81e5290950f66b66fd519a2a16fc6b3526f97aa1121b4fb52b30640122dfb50ff619fb5c88eb1c4e6ed7f6d09fd29e27b3375a1aad5b09f8175157018467f883ba385208fcd32a50a311b22f7951bd0e912d234364f8590e247dea604872f9bb847bb32b3906339f5698d6e7c0f2a3ed17b194239299091f5ee4ed51c75b76bc949cf0cf341d617fb150f07ec81881fdc1e15cef5e72eecd7843a981eff417682604769e302f378ff9519cdbd3ba2bfe50f85a903aa08b900118226889e9bc68124777f6e02fb26fff91d1f31d3828243cc46d4b4fa2965445774e0ddc521fe5fc9626fe3428403e746de0196a45d6acef57f662faf27294be80fed39778a7585b41178ea38f64893f9a46334af6425a4aa46e25e92b0d77750c6737b237dff19913fd9e69ed92c4b6671b4226776b34ae2468907c654bb0f619b2c9b55920fb99e97bf32212f852b615689f3cf4c03d51d1587455b5720692430fe2684522bfe6dae871aa2ff5f00045861ffcfc219888fef8320bec1307236a7a42dd4a691cb6cd4d8436f31a3f2d642b05946dbfee692aee0da31419f9b8bc0e1dcf89a8ffd7856b21b1180ebc8ad75308b1370b93d680e968bcde7d235f601760a5d181f7b55daf330a001ae1da86c130c76fbd956442b6c705889d665560f8b34663390592d85ddde790e0f4f1f0df09c1c6f95477f9d72dc0894b2efe2c3d162ad80f80cae03a06548014293a02f00d6386723d42ab09052f019a1d71d88a78db27afead58bc516be8d23893f007a17ff47b32777752a15648d0ececd345aee1f36c58abb7efaff5567100c0bfa54f172c862e15872abc9d96cead6688f02ea8466fe1134bd3756c6f0df8903fe7935dbe3e635da368f13a10e3018cfb5557d38f859a983a54d660a02bdb3dac2922e7a37651677bfc664d58df59ea625e8e63ee776bcc2937b921f5544924b75cba04bf3cd0df831938f9e9c79572e8492d884646244990920400192c63e15024e2e1239f41390bf7c0e18f852e23d514256ccb8ccb2726710401c4306657fd75eba94a353987780a6d6219012cfe80858060e37652a84ae89d07f5d651fe82a2a8d0e8568492156713b1f76e89e12f76a0254da7d526df51a089600f5b7559afdc63d4872fe8d6ce00a8d0c9b00db5ee676ae2545e74fb7b39f8345a67913b234cfb4f6e3b4e2b1e1f4f1c7fcce8c09cdeb6a1a21bd2370004e583ef62971aec24ce0c6c049b6a2e22081d36854956a362b6cbad48049d7d5f90134d3e77febf87bf4a32c07cdeb36c9cc56b2b3cc8c8b47879a32ff00f3b2e977cee0acb30fc424dbfe24c88d1a08d047925cd7d65a5834e56db2b3e7e0a23dbf948c799db5a48fd4a5fdea43913b2b2c149ae9a98f452b797b55abe1dd44b30232387f466856d6c38ca735dd6175b455363dbf228ef52e443da22a1ee3a158ee304d9ca63c110a3d19ca3bab6d1745affd81c480ff8bcf5f8f7c1ea6d08a7b3c3958c324d42732711170e19523bd209134674b184d4d442a774e04d6eb4ac89a6d018cf0bb68a73da87abce127e57428cf73a5a551c85ea8c376ae951cb8357506f037d17d163172dc5764682c753050f35c6802fb269d7490b196d57bb8a1ada55da7550f82357320e14cf573ed39860f02a11bdad917b2ba2de885c7ea8b30dd62bdad207dfe10e97c8b71abbc8c5661a4483bb6f9488ada0f5885c471cfc1271b60d54f903317cca28ce977f4444cefac5c2ff233dc872d4e809091f8452de9c774ab3bbebf62de92cd6aa7421a41f7d1dea42e4f94bd3a4869c958f3940a99c88835ed2f4021114b9a5bb17240f468887b213814956f9f5e6344cbae19d8753b97c7ce2e9d0954a30dde23dea2748e1c9514672bf4ea3ec3e348a563d9649899e7227708e2e77d0fc5847dc16b59ac3dea9449c176dea2d2ff6b6af764d28dee5ccfd0dfd6e3100d97040657d7ac5da4032e3b7f6b0cef2ec55a83350c3045abb10200c264e6e68e3e03b68546ae48a538063b86315bb8073103a812717f2d8816534fa98d0e956e0f9a67bcdc522cacefc77b0be71832a69ffb72fa15ca4d8b15f7fe03da0f4b24c5fb68e5f3a2297bb0cb0b7bfdeeec4deb64bf71f57820d62c47276e2780b4341b6bc65ac49be09c94013783455a95de92c11d91b9e921a484ed69532b92e202d684d2293a2666709ee38d2114add4c5337bfeef31d481e12530c5c7e83a6c8aa2f580f6da2d735ee5260cf9a7185eff84eb22d6e0d5ac0e63fe6a3def819274a144be5ab90fa157bb7517a54c208aa82da926d5b09ba649e326a654fe8fa9dd7e6d83b0a66253526e5b5aa03e665f2eb4678e8293110420c9d7556df07c7dd1c3e817a4c7409890c4ff5044ecdb34eb652a4d7e20b4b0d596f46ee3c3dad675e958e91c3b40f2d22e671bae51518443042c529c31e343647d6ddeac7ec370970fcc71a24a0826b58d111e9b776ac0e2fa40b3099298ffd0d1c04d41ee1dd039425f52f9f8057ac1f206203f20e1ae9cbae356518ba2fe9e49b47e36942ed7204f3d7da9e71b8d69df3ae7b2de05a13a879af6a1ea6241c645ed73c139e15060aeab6f423c2180dd101863a24f1688ec1a33edc624c3f5e80a20e4cc5c86ab2c692c2d3d17d8a68bb3924efffb29c9fc3df937526452d82a8ca9a558c75d6b2504df1b66c91823216a1c3b3bc39dee0d22491b9c891b9eea193c8af8a992096d0cd74630f7222e9a3530034a582f40601a694cf1085fda7fb33b07332c6aebfa70e2ebb8d7ccf19a69dfb5e4c166add5e153504eeec92f4ea2fe47f291625e1c470b832a488f884692b8ec49b96df235f193027ed38fb4d8b88ed382825df8ffe5b0c6fab8db3e38d60d467f9da725023deb72c378258e911442afae4db650be3621a033a3b84eee65c4c0664ec6d5771cc138937434a6a361de3dc1c12a2a6735f080e94314ddf291516971af252e3cc56e1c65ba5cf8ac2538878b22034ba458e08db26205608ae941a42a27f2643ded87bde626387c2b791ce57991dd2ba08010237279cac2760e19cab9059b229ea002ce4d3b4afa495230e424752f289003a240f5cafc7a83112636321107918d582fad2606a4319199a06ef2cbeaa3e1a4d8c30501aab796f5cbe15453b61218a396b79c547d15d5c11033b3746b432b426404f7b0421b9daafd9e8558f1901283d58e173c4db0511ee826ddc6363eb51e0837c9be6b2078d808d2c05db7495d29322ee6af68b0d52c45f00a59731c0e5b2608ae046af8bcf830f001ffd2f955ea89bed216e71ccb5b44713e2abf5ee5438d63829c9aea34b57f7ab52b820c24a7e9fa138243e4afb2df93588e805e719c1767146a351debb34678a86dd19f0587af31195460a3aa3e68773859fe13b47b6b31a501b4a25c6660cfc47f3318b33b77b10ed4ba91086482db039a56fbd1490f440a6fbb280b62b6d2333afe1c42c3f16865b9c0e484a4f6f393b8bc34fbba856cc5ffad2fe423e79f691b95e7e0dbdb2b2757d9d4443f9a23a8b1bfdb16f8bffd81b4789f80f1fc4bf751627965755d008d134e2c35da34f54718615e9deaca0685396ae7e58121327e0c0696591f6af93f2999ebd3b4e03cfe2a48b2b94015eb06b2a9031ab5e129b2700648fd62ab75f77734b89abb402282635eee41606eb306619e2dae84488e2aac1df54f78460b36115072a2c28801fc122482f1d46de4b2eec07bbbbcf85f30ffb3829c5d0fdbdf3af8c6322d62f4c55ebe8fd52728e2d5d1a24f096fffcec6ff2e752f7500", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xa0, 0x0, 0x16c, {{0x3, 0x0, 0x4, 0x0, 0x6, 0x3, {0x0, 0x7fff, 0x5, 0xffff, 0x4, 0x4, 0x1, 0x9, 0x0, 0x2000, 0x0, r6, 0xee01, 0xd8, 0x400001}}, {0x0, 0x4}}}, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) socket$rxrpc(0x21, 0x2, 0xa) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0xffffffffffffff2b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r7 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, 0x0) 6.987706405s ago: executing program 6 (id=7733): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="020025bd7000fc84b4f782219e725101cc19", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x20000000) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) 6.636258927s ago: executing program 6 (id=7734): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x28}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x8845}, 0x4000) openat$sr(0xffffff9c, 0x0, 0x80000, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}}}, 0x30) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x60}}}}]}]}, 0x70}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r4}, 0x94) r5 = getpid() r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0xc2ddb5edb7ba9069, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 6.411269198s ago: executing program 7 (id=7735): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000002940)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}, @call={0x85, 0x0, 0x0, 0x11}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00', r2}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000580)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1b5008, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f0000000180), 0x8c0a, &(0x7f0000000600)={[{@mode={'mode', 0x3d, 0x1}}]}) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2101499, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 5.095018403s ago: executing program 5 (id=7738): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, r2, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0xd, 0x9, @udp='udp:syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20048000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000040)) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c951ee12e"}}}}}}}, 0x0) 4.852084625s ago: executing program 5 (id=7739): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x1, @empty, 'bond0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x40047452, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'bridge_slave_1\x00'}}) 4.785642786s ago: executing program 5 (id=7740): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000008500000018000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet(0x2, 0x2, 0x6a113fc2) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000001c0)="39c96f4fe2adf8322f1c087d3b9dcadfe2cf95202b82d3cf5c7a55856f6252d2a00e7ed70d7cb1beaf849e2b13f625f8d3cd300ed63d4914f59e50c5de2e33ca0fed7e179b5a6489ff742bdac293ed1dcd787dee19e5961eeda97b3ab0cb1fa7c3330dd9a00681729240a2c31b58dcc2a9c8f47d0334178350dca55bfda211b9590f6a5b2fe0cc15fed2185d641a068bf14ffb7ac54ca5d05d9623d9936f8dfcf48b04117d2276728de25c2f5bad5e3031495aaffa02e4d54ce9f4dcb94d90f66d974ea60e8361c4b7fe30bba3de34e6ad096fcea9ffd74a9a9eced2070c8858ba72e0c5572c8f35a1b0febc", 0xec}], 0x2}, 0x44004) r1 = socket$inet(0x2, 0x2, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080000001e000000000a0000040500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) pipe2$watch_queue(&(0x7f00000002c0), 0x80) r5 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x0, 0x0) r6 = epoll_create1(0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r7, &(0x7f0000003d00)=[{{&(0x7f0000000380)=@xdp, 0x80, &(0x7f0000000540)=[{&(0x7f0000000400)=""/117, 0x75}, {&(0x7f0000000500)}], 0x2, &(0x7f0000000780)=""/199, 0xc7}, 0x1}, {{&(0x7f0000000580)=@isdn, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000940)=""/216, 0xd8}, {&(0x7f0000000680)=""/45, 0x2d}, {&(0x7f0000000a40)=""/168, 0xa8}, {&(0x7f0000000880)=""/67, 0x43}, {&(0x7f0000000b00)=""/83, 0x53}, {&(0x7f0000000b80)=""/132, 0x84}, {&(0x7f0000000cc0)=""/255, 0xff}], 0x7, &(0x7f0000000dc0)=""/4096, 0x1000}, 0x5}, {{0x0, 0x0, &(0x7f0000001dc0), 0x0, &(0x7f0000001e00)=""/95, 0x5f}, 0x8000}, {{&(0x7f0000001e80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000002100)=[{&(0x7f0000001f00)=""/87, 0x57}, {&(0x7f0000001f80)=""/135, 0x87}, {&(0x7f0000002040)=""/169, 0xa9}], 0x3, &(0x7f0000002140)=""/47, 0x2f}}, {{0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f0000002180)=""/3, 0x3}, {&(0x7f00000021c0)=""/31, 0x1f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/247, 0xf7}, {&(0x7f0000003300)=""/124, 0x7c}, {&(0x7f0000003380)}], 0x6}, 0x7fffffff}, {{&(0x7f0000003400)=@can, 0x80, &(0x7f0000003900)=[{&(0x7f0000003480)=""/179, 0xb3}, {&(0x7f0000003540)=""/172, 0xac}, {&(0x7f0000000500)=""/13, 0xd}, {&(0x7f0000003640)=""/68, 0x44}, {&(0x7f00000036c0)=""/24, 0x18}, {&(0x7f0000003700)=""/14, 0xe}, {&(0x7f0000003740)=""/225, 0xe1}, {&(0x7f0000003840)=""/182, 0xb6}], 0x8}, 0x2}, {{&(0x7f0000003940)=@x25={0x9, @remote}, 0x80, &(0x7f0000003cc0)=[{&(0x7f00000039c0)=""/57, 0x39}, {&(0x7f0000003a00)=""/97, 0x61}, {&(0x7f0000003a80)=""/102, 0x66}, {&(0x7f0000003b00)=""/156, 0x9c}, {&(0x7f0000003bc0)=""/35, 0x23}, {&(0x7f0000003c00)=""/67, 0x43}, {&(0x7f0000003c80)=""/16, 0x10}], 0x7}, 0x5}], 0x7, 0x2, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000000)={0xa0000001}) epoll_wait(r8, &(0x7f0000000340)=[{}], 0x1, 0x1000) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r9 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r9, 0x0, 0x0) syz_usb_control_io(r9, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 3.978577956s ago: executing program 3 (id=7728): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000200)="e02742e86c0d85ff9783763a0a00", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.908418313s ago: executing program 3 (id=7741): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x34, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044094) 3.69925205s ago: executing program 3 (id=7742): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x38) socketpair$unix(0x1, 0x3, 0x0, 0x0) iopl(0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix={0x434c, 0x8, 0x584e4f53, 0x0, 0x2, 0x7, 0xb, 0x1, 0x1, 0x4, 0x2, 0x7}}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000008050000000000000000008001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x19, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020300008500000082000000850000002a000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10005}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_GET_PIT2(r2, 0x8070ae9f, &(0x7f0000000400)) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r7, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2}}], 0x1, 0x2700, 0x0) sendfile(r8, r7, 0x0, 0x578410eb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) pipe(0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={&(0x7f0000000300), &(0x7f0000000380)}}, &(0x7f0000000100)) 3.692317525s ago: executing program 7 (id=7743): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000002940)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}, @call={0x85, 0x0, 0x0, 0x11}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000580)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1b5008, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f0000000180), 0x8c0a, &(0x7f0000000600)={[{@mode={'mode', 0x3d, 0x1}}]}) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2101499, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 1.889848833s ago: executing program 6 (id=7744): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, r2, 0x25, 0x4, @val=@tcx={@void, @value=r0}}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) 1.722708556s ago: executing program 5 (id=7745): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r0 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x82, &(0x7f00000003c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x4c, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x13, 0x2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x70}, @generic={0xfe, 0x5, ']B\v'}, @sack_perm={0x4, 0x2}, @eol, @timestamp={0x8, 0xa, 0x0, 0x2000000}, @sack_perm={0x4, 0x2}, @fastopen={0x22, 0x5, "e823b2"}, @exp_fastopen={0xfe, 0x14, 0xf989, "876cd1c15666f542e913e01d9df2ec66"}, @eol, @exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0) 1.568925755s ago: executing program 5 (id=7746): prctl$PR_SET_TSC(0x1a, 0x1) openat$cdrom(0xffffff9c, &(0x7f00000010c0), 0x309900, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000013c0)=@newtaction={0xe0, 0x30, 0x200, 0x0, 0x0, {}, [{0xcc, 0x1, [@m_sample={0x9c, 0x1c, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x5}]}, {0x4f, 0x6, "10d58f541ad29cf7e1c84934ab249c03914def54e968e8e5fb572359f6259070c682b2ac58335904cc8548cf6631667dc9bf600b42f6e8df89c8fe6a7314119a673bc361d07a6cb99acfa6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ife={0x2c, 0x20, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x894}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) r4 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000001f40)={0x9, {{0xa, 0x0, 0x3, @mcast2}}, {{0xa, 0x2, 0x4, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffff8}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000180)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000001280)={0x6f, {{0xa, 0x4e24, 0x3, @mcast2, 0xf3}}, 0x1, 0x1, [{{0xa, 0x4e20, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}]}, 0x10c) mq_open(0x0, 0x6e93ebbbcc0884f2, 0x2c, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000400), 0x6, &(0x7f0000001100)=ANY=[@ANYRESHEX=r5, @ANYBLOB="2c7766646e823df5d7c86c6ba406e8fd6040f9be6eefecf5ce7511d1eb1994e2e0a7ae18e49db0dedca298f6ec42781a069d64f7e0d0f2497f0c28b1ad12c0dca7d60e419f8a556b3feecd8a37b1424cf3387b1706fe222909864dcf569ff15fc13b08e81fb31993b4d1cd2ca0d7d5b64d3d51935f2286fea5ca899f99e34c76ac45bcf7cac2abe551957deaf74f1039f630346eba5c4c43244b5b3637139f507c662bda433e914db646501fb8d125d0022dc9eba226d7f8515f17aa80ea71ce4d42", @ANYRESHEX=r5, @ANYBLOB=',\x00']) connect$pptp(r3, &(0x7f0000000040)={0x18, 0x2, {0xfffc, @initdev={0xac, 0x1e, 0x5, 0x0}}}, 0x1e) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="14000000100001000075c7000000000000000000000a3c000000120a01020000000000000000020000000900dfffffff08000440000000000900010073797a3000000000080003400000000a140000001100010000000000000000000000000a000000009e03"], 0x64}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000640)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x65, 0x0, 0x0, 0x3a, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}, {0x8000, 0x4e21, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x0, 0x100}}}}}}}, 0x0) close(0xffffffffffffffff) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 1.399074761s ago: executing program 3 (id=7747): prctl$PR_SET_TSC(0x1a, 0x1) openat$cdrom(0xffffff9c, &(0x7f00000010c0), 0x309900, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) mq_open(0x0, 0x6e93ebbbcc0884f2, 0x2c, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000400), 0x6, &(0x7f0000001100)=ANY=[@ANYRESHEX=r4, @ANYBLOB="2c7766646e823df5d7c86c6ba406e8fd6040f9be6eefecf5ce7511d1eb1994e2e0a7ae18e49db0dedca298f6ec42781a069d64f7e0d0f2497f0c28b1ad12c0dca7d60e419f8a556b3feecd8a37b1424cf3387b1706fe222909864dcf569ff15fc13b08e81fb31993b4d1cd2ca0d7d5b64d3d51935f2286fea5ca899f99e34c76ac45bcf7cac2abe551957deaf74f1039f630346eba5c4c43244b5b3637139f507c662bda433e914db646501fb8d125d0022dc9eba226d7f8515f17aa80ea71ce4d42", @ANYRESHEX=r4, @ANYBLOB=',\x00']) connect$pptp(r3, &(0x7f0000000040)={0x18, 0x2, {0xfffc, @initdev={0xac, 0x1e, 0x5, 0x0}}}, 0x1e) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x6aff}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000640)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x65, 0x0, 0x0, 0x3a, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}, {0x8000, 0x4e21, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x0, 0x100}}}}}}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(0xffffffffffffffff) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000002200)={[&(0x7f0000000340)='^-%-\\x\\$})\'!&}*', &(0x7f0000000440)='syz0']}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1.105351636s ago: executing program 7 (id=7748): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x28}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x8845}, 0x4000) openat$sr(0xffffff9c, 0x0, 0x80000, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}}}, 0x30) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x60}}}}]}]}, 0x70}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r4}, 0x94) getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r5, 0x0, 0x0) 96.231919ms ago: executing program 6 (id=7749): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x2d, 0x301, 0x270bd26, 0x25dfdbfa, {0x6}}, 0x14}}, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x118) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) r6 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0x211a, 0x0, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x2, r5, 0x0, 0x0, 0x0, 0x1800}) io_uring_enter(r6, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 95.737024ms ago: executing program 3 (id=7750): socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) (async) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800020, 0x0, 0xffffffffffffffc0, 0x9, 0x8, 0x0, 0x3}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800020, 0x0, 0xffffffffffffffc0, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$kcm(0x2d, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a5"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x40}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44880}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0xe4ff, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd25, 0x25df9bfb, {0x0, 0x0, 0x0, r7, {0xd, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x54, 0x2, [@TCA_ROUTE4_ACT={0x50, 0x6, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x5, 0x4, 0x7, 0x8}, 0x39}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x80, 0x3}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) gettid() (async) r8 = gettid() ptrace$getregset(0x4204, r8, 0x201, &(0x7f00000002c0)={&(0x7f0000000380)=""/199, 0xc7}) (async) ptrace$getregset(0x4204, r8, 0x201, &(0x7f00000002c0)={&(0x7f0000000380)=""/199, 0xc7}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)=@updpolicy={0xba8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xc}}, [@algo_aead={0x98f, 0x12, {{'morus640-sse2\x00'}, 0x4a18, 0x200, "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"}}, @user_kmaddress={0x2c, 0x13, {@in=@rand_addr=0x64010101, @in6=@empty, 0x0, 0x2}}, @offload={0xc, 0x1c, {0x0, 0x1}}, @migrate={0x9c, 0x11, [{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@multicast1, @in=@broadcast, @in6=@remote, 0x3c, 0x1, 0x0, 0x3507, 0xa}, {@in6=@mcast1, @in=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@empty, 0x0, 0x2, 0x0, 0x3505, 0x2, 0x2}]}, @lastused={0xc, 0xf, 0x4}, @etimer_thresh={0x8, 0xc, 0xffff}, @lastused={0xc, 0xf, 0x2}, @replay_esn_val={0x38, 0x17, {0x7, 0x70bd2b, 0x70bd26, 0x70bd2d, 0x70bd26, 0xa, [0x5, 0x8, 0xae8, 0x3, 0x6, 0x5, 0x1000]}}, @offload={0xc, 0x1c, {0x0, 0x2}}, @user_kmaddress={0x2c, 0x13, {@in6=@dev={0xfe, 0x80, '\x00', 0x21}, @in=@rand_addr=0x64010102, 0x0, 0xa}}]}, 0xba8}}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 81.065345ms ago: executing program 7 (id=7751): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000002940)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}, @call={0x85, 0x0, 0x0, 0x11}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00', r2}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000580)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1b5008, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f0000000180), 0x8c0a, &(0x7f0000000600)={[{@mode={'mode', 0x3d, 0x1}}]}) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2101499, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 80.816591ms ago: executing program 5 (id=7752): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000d80)={0x38, 0x1, 0x4, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x1}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x5}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8c) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001680)) r2 = eventfd2(0x1, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x3}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000180)={@host}) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000340)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 0s ago: executing program 3 (id=7753): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x28}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x8845}, 0x4000) openat$sr(0xffffff9c, 0x0, 0x80000, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}}}, 0x30) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x60}}}}]}]}, 0x70}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r4}, 0x94) r5 = getpid() r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0xc2ddb5edb7ba9069, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) kernel console output (not intermixed with test programs): r parsing attributes in process `syz.3.3368'. [ 820.689024][T17934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 820.692705][T17934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 820.910127][T17936] netlink: 'syz.3.3376': attribute type 1 has an invalid length. [ 820.913027][T17936] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3376'. [ 821.480906][T17958] ptrace attach of "/syz-executor exec"[15027] was attempted by " \x0cH;'Sde/Ȑ|zPиW\x0bPt5QI0kp;t>?7~՞8)>\x0a.Fv\x5c0CP{\x07ԭ4OT)%DkfCkF 籥;m\x0cv\x0cTʪz5m֢vī'c^تg_\x0bƍ8)c,(qeB㑻SPt4o IHwL#@mUpE^agh~d_9\x07r|GJj+&ҽk(\x07rnE4(#ë\x0b YβB\x0aЦ&R`?L1tիw.M=3|Gsmg4`|\x22{б춋1[{ȯw/B_g6-qyk*o\x0d\x5cc8\x5 [ 822.723801][ T64] Bluetooth: hci4: command 0x040f tx timeout [ 823.239535][T17995] netlink: 'syz.3.3396': attribute type 1 has an invalid length. [ 823.242037][T17995] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3396'. [ 823.765057][T18018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 823.768494][T18018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 824.074585][ T64] Bluetooth: hci2: unexpected event for opcode 0x0c6d [ 824.284653][T18033] netlink: 'syz.0.3406': attribute type 1 has an invalid length. [ 824.287222][T18033] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3406'. [ 824.635558][T18047] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3412'. [ 824.652604][T18047] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3412'. [ 824.655649][T18047] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3412'. [ 824.660375][T18047] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3412'. [ 824.919863][T18051] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3414'. [ 824.923430][T18051] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3414'. [ 825.766012][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 825.768179][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 826.153879][ T5960] Bluetooth: hci4: command 0x040f tx timeout [ 827.166620][T18081] 9pnet_fd: Insufficient options for proto=fd [ 828.478825][T18114] netlink: 'syz.0.3429': attribute type 1 has an invalid length. [ 828.481332][T18114] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3429'. [ 828.732065][T18117] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3431'. [ 829.108891][T18133] FAULT_INJECTION: forcing a failure. [ 829.108891][T18133] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 829.112994][T18133] CPU: 0 UID: 0 PID: 18133 Comm: syz.6.3436 Not tainted syzkaller #0 PREEMPT(full) [ 829.113010][T18133] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 829.113017][T18133] Call Trace: [ 829.113021][T18133] [ 829.113026][T18133] dump_stack_lvl+0x16c/0x1f0 [ 829.113044][T18133] should_fail_ex+0x512/0x640 [ 829.113058][T18133] _copy_from_user+0x2e/0xd0 [ 829.113071][T18133] get_user_ifreq+0x116/0x1c0 [ 829.113086][T18133] compat_sock_ioctl+0x3f6/0x730 [ 829.113104][T18133] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 829.113120][T18133] ? hook_file_ioctl_common+0x145/0x410 [ 829.113139][T18133] ? __fget_files+0x20e/0x3c0 [ 829.113159][T18133] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 829.113175][T18133] __ia32_compat_sys_ioctl+0x242/0x370 [ 829.113190][T18133] __do_fast_syscall_32+0x7c/0x300 [ 829.113207][T18133] do_fast_syscall_32+0x32/0x80 [ 829.113222][T18133] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 829.113237][T18133] RIP: 0023:0xf70fd579 [ 829.113246][T18133] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 829.113257][T18133] RSP: 002b:00000000f54ed55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 829.113268][T18133] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008946 [ 829.113275][T18133] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 829.113282][T18133] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 829.113288][T18133] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 829.113295][T18133] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 829.113308][T18133] [ 829.306649][T18139] 9pnet_fd: Insufficient options for proto=fd [ 829.872683][T18145] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3440'. [ 829.878046][T18145] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3440'. [ 830.168283][T18158] FAULT_INJECTION: forcing a failure. [ 830.168283][T18158] name failslab, interval 1, probability 0, space 0, times 0 [ 830.173375][T18158] CPU: 3 UID: 0 PID: 18158 Comm: syz.6.3445 Not tainted syzkaller #0 PREEMPT(full) [ 830.173403][T18158] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 830.173414][T18158] Call Trace: [ 830.173421][T18158] [ 830.173428][T18158] dump_stack_lvl+0x16c/0x1f0 [ 830.173477][T18158] should_fail_ex+0x512/0x640 [ 830.173494][T18158] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 830.173515][T18158] should_failslab+0xc2/0x120 [ 830.173532][T18158] kmem_cache_alloc_noprof+0x75/0x6e0 [ 830.173555][T18158] ? skb_clone+0x190/0x3f0 [ 830.173577][T18158] ? skb_clone+0x190/0x3f0 [ 830.173593][T18158] skb_clone+0x190/0x3f0 [ 830.173611][T18158] netlink_deliver_tap+0xabd/0xd30 [ 830.173636][T18158] netlink_unicast+0x64c/0x870 [ 830.173658][T18158] ? __pfx_netlink_unicast+0x10/0x10 [ 830.173686][T18158] netlink_sendmsg+0x8c8/0xdd0 [ 830.173723][T18158] ? __pfx_netlink_sendmsg+0x10/0x10 [ 830.173751][T18158] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 830.173778][T18158] ____sys_sendmsg+0xa98/0xc70 [ 830.173799][T18158] ? btrfs_dev_replace_cancel+0x7d4/0xc70 [ 830.173825][T18158] ? __pfx_____sys_sendmsg+0x10/0x10 [ 830.173846][T18158] ? get_compat_msghdr+0x11a/0x170 [ 830.173874][T18158] ___sys_sendmsg+0x134/0x1d0 [ 830.173894][T18158] ? __pfx____sys_sendmsg+0x10/0x10 [ 830.173924][T18158] ? find_held_lock+0x2b/0x80 [ 830.173963][T18158] __sys_sendmsg+0x16d/0x220 [ 830.173982][T18158] ? __pfx___sys_sendmsg+0x10/0x10 [ 830.174011][T18158] ? rcu_is_watching+0x12/0xc0 [ 830.174053][T18158] __do_fast_syscall_32+0x7c/0x300 [ 830.174080][T18158] do_fast_syscall_32+0x32/0x80 [ 830.174100][T18158] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 830.174121][T18158] RIP: 0023:0xf70fd579 [ 830.174135][T18158] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 830.174151][T18158] RSP: 002b:00000000f54ed55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 830.174167][T18158] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 830.174178][T18158] RDX: 0000000004000084 RSI: 0000000000000000 RDI: 0000000000000000 [ 830.174188][T18158] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 830.174197][T18158] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 830.174207][T18158] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 830.174231][T18158] [ 830.325203][T18153] netlink: 'syz.0.3443': attribute type 1 has an invalid length. [ 830.327835][T18153] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3443'. [ 830.618081][T18178] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3451'. [ 830.947122][T18184] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3461'. [ 830.951155][T18184] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3461'. [ 831.460204][T18191] 9pnet_fd: Insufficient options for proto=fd [ 831.461456][T18193] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3455'. [ 831.465460][T18193] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3455'. [ 832.066419][T18215] netlink: 'syz.6.3462': attribute type 1 has an invalid length. [ 832.069835][T18215] netlink: 244 bytes leftover after parsing attributes in process `syz.6.3462'. [ 832.480942][T18225] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3474'. [ 833.251731][T18193] Set syz1 is full, maxelem 65536 reached [ 833.477342][T18242] 9pnet_fd: Insufficient options for proto=fd [ 834.619681][T18226] Set syz1 is full, maxelem 65536 reached [ 835.162507][T18264] Set syz1 is full, maxelem 65536 reached [ 835.350583][T18273] __nla_validate_parse: 4 callbacks suppressed [ 835.350595][T18273] netlink: 9 bytes leftover after parsing attributes in process `syz.5.3482'. [ 835.355934][T18273] 0: renamed from hsr_slave_1 (while UP) [ 835.358825][T18273] 0: entered allmulticast mode [ 835.360777][T18273] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 835.420154][T18277] bridge0: entered promiscuous mode [ 835.422102][T18277] macsec1: entered allmulticast mode [ 835.423915][T18277] bridge0: entered allmulticast mode [ 835.581612][T18281] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3486'. [ 835.584602][T18281] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3486'. [ 835.700055][T18287] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.825227][T18313] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 836.832633][T18317] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3494'. [ 836.836300][T18317] 0: renamed from hsr_slave_1 (while UP) [ 836.839412][T18317] 0: entered allmulticast mode [ 836.841349][T18317] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 836.875462][T18306] netlink: 'syz.6.3493': attribute type 10 has an invalid length. [ 836.883311][T18306] veth0_vlan: left promiscuous mode [ 836.886280][T18306] veth0_vlan: entered promiscuous mode [ 836.889862][T18306] team0: Device veth0_vlan failed to register rx_handler [ 837.308217][T18322] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3496'. [ 837.311261][T18322] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3496'. [ 837.938677][T18334] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3502'. [ 837.995103][ T41] audit: type=1800 audit(2000000655.399:3993): pid=18332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3500" name="bus" dev="overlay" ino=1777 res=0 errno=0 [ 838.221547][T18343] netlink: 'syz.3.3501': attribute type 1 has an invalid length. [ 838.224328][T18343] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3501'. [ 838.532054][T18344] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3504'. [ 838.914197][T18360] netlink: 9 bytes leftover after parsing attributes in process `syz.6.3510'. [ 838.917074][T18360] 0: renamed from hsr_slave_1 (while UP) [ 838.920158][T18360] 0: entered allmulticast mode [ 838.921954][T18360] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 839.139473][T18363] netlink: 'syz.5.3509': attribute type 10 has an invalid length. [ 839.160410][T18363] veth0_vlan: left promiscuous mode [ 839.165866][T18363] veth0_vlan: entered promiscuous mode [ 839.174754][T18363] team0: Device veth0_vlan failed to register rx_handler [ 840.321283][T18383] qnx6: unable to set blocksize [ 840.404616][T18387] __nla_validate_parse: 1 callbacks suppressed [ 840.404628][T18387] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3518'. [ 840.410369][T18387] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3518'. [ 840.643539][T18393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3520'. [ 840.704446][T18397] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3522'. [ 840.964446][T18413] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 840.988348][T18413] netlink: 'syz.0.3521': attribute type 10 has an invalid length. [ 841.008864][T18413] veth0_vlan: left promiscuous mode [ 841.017054][T18413] veth0_vlan: entered promiscuous mode [ 841.021928][T18413] team0: Device veth0_vlan failed to register rx_handler [ 842.309807][T18387] Set syz1 is full, maxelem 65536 reached [ 842.384625][T18437] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3534'. [ 842.391619][T18439] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3535'. [ 842.490727][T18447] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3545'. [ 842.765341][T18454] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 842.775246][T18454] netlink: 'syz.3.3538': attribute type 10 has an invalid length. [ 842.791972][T18454] veth0_vlan: left promiscuous mode [ 842.796525][T18454] veth0_vlan: entered promiscuous mode [ 842.808689][T18454] team0: Device veth0_vlan failed to register rx_handler [ 843.904670][T18473] netlink: 'syz.6.3552': attribute type 10 has an invalid length. [ 843.907310][T18473] veth0_vlan: left promiscuous mode [ 843.909507][T18473] veth0_vlan: entered promiscuous mode [ 843.912824][T18473] team0: Device veth0_vlan failed to register rx_handler [ 844.906775][T18487] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3546'. [ 844.909877][T18487] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3546'. [ 845.058668][T18496] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3548'. [ 846.449850][T18509] netlink: 'syz.5.3555': attribute type 10 has an invalid length. [ 846.453444][T18509] veth0_vlan: left promiscuous mode [ 846.457053][T18509] veth0_vlan: entered promiscuous mode [ 846.461398][T18509] team0: Device veth0_vlan failed to register rx_handler [ 846.634311][ T41] audit: type=1800 audit(2000000663.969:3994): pid=18510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3556" name="bus" dev="overlay" ino=1165 res=0 errno=0 [ 847.175045][T18487] Set syz1 is full, maxelem 65536 reached [ 847.598843][T18538] netlink: 'syz.6.3565': attribute type 10 has an invalid length. [ 847.602429][T18538] veth0_vlan: left promiscuous mode [ 847.607304][T18538] veth0_vlan: entered promiscuous mode [ 847.611650][T18538] team0: Device veth0_vlan failed to register rx_handler [ 847.821564][T18549] Failed to get privilege flags for destination (handle=0x0:0x0) [ 849.492880][T18573] netlink: 'syz.6.3571': attribute type 1 has an invalid length. [ 849.495504][T18573] netlink: 244 bytes leftover after parsing attributes in process `syz.6.3571'. [ 850.141080][T18584] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3575'. [ 850.175095][T18587] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3577'. [ 850.178238][T18587] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3577'. [ 850.916270][T18606] netlink: 'syz.5.3583': attribute type 10 has an invalid length. [ 850.919527][T18606] veth0_vlan: left promiscuous mode [ 850.923891][T18606] veth0_vlan: entered promiscuous mode [ 850.931191][T18606] team0: Device veth0_vlan failed to register rx_handler [ 851.644828][T18609] netlink: 'syz.6.3584': attribute type 10 has an invalid length. [ 851.647695][T18609] veth0_vlan: left promiscuous mode [ 851.650397][T18609] veth0_vlan: entered promiscuous mode [ 851.654871][T18609] team0: Device veth0_vlan failed to register rx_handler [ 851.738758][T18618] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3587'. [ 852.138531][T18627] netlink: 'syz.3.3588': attribute type 1 has an invalid length. [ 852.141007][T18627] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3588'. [ 852.833151][ T86] erspan0: left allmulticast mode [ 852.833189][ T86] erspan0: left promiscuous mode [ 852.833361][ T86] bridge0: port 3(erspan0) entered disabled state [ 852.843044][ T86] bridge_slave_1: left allmulticast mode [ 852.843061][ T86] bridge_slave_1: left promiscuous mode [ 852.843181][ T86] bridge0: port 2(bridge_slave_1) entered disabled state [ 852.846173][ T86] bridge_slave_0: left allmulticast mode [ 852.846187][ T86] bridge_slave_0: left promiscuous mode [ 852.846301][ T86] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.885793][T18647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 852.885987][T18647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 853.314702][T18652] netlink: 'syz.3.3595': attribute type 10 has an invalid length. [ 853.649710][ T86] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 853.651844][ T86] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 853.652449][ T86] bond0 (unregistering): Released all slaves [ 853.737345][ T86] bond1 (unregistering): Released all slaves [ 853.744701][T18652] veth0_vlan: left promiscuous mode [ 853.746908][T18652] veth0_vlan: entered promiscuous mode [ 853.749729][T18652] team0: Device veth0_vlan failed to register rx_handler [ 854.279053][T18673] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 854.349263][T18674] netlink: 'syz.3.3598': attribute type 10 has an invalid length. [ 854.367747][T18674] veth0_vlan: left promiscuous mode [ 854.369957][T18674] veth0_vlan: entered promiscuous mode [ 854.372655][T18674] team0: Device veth0_vlan failed to register rx_handler [ 854.497653][ T86] hsr_slave_0: left promiscuous mode [ 854.500547][ T86] hsr_slave_1: left promiscuous mode [ 854.510775][ T86] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 854.514711][ T86] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 854.670827][T18682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3599'. [ 855.119132][T18689] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 855.136101][T18689] netlink: 'syz.0.3600': attribute type 10 has an invalid length. [ 855.341940][T18693] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3602'. [ 855.345969][T18693] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 855.408715][T18694] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3602'. [ 855.460048][T18695] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3602'. [ 855.463513][ T86] team0 (unregistering): Port device team_slave_1 removed [ 855.849479][T18699] program syz.3.3604 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 855.853485][T18701] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3605'. [ 855.857970][T18702] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3605'. [ 855.964657][T18700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 856.076995][T18710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3604'. [ 856.259846][T18689] veth0_vlan: left promiscuous mode [ 856.263023][T18689] veth0_vlan: entered promiscuous mode [ 856.267108][T18689] team0: Device veth0_vlan failed to register rx_handler [ 856.423142][T18695] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 856.430689][T18695] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 856.435759][T18695] bond0 (unregistering): Released all slaves [ 856.456173][T18715] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3606'. [ 856.460534][T18715] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3606'. [ 856.828040][T18731] netlink: 'syz.6.3608': attribute type 1 has an invalid length. [ 856.831566][T18731] netlink: 244 bytes leftover after parsing attributes in process `syz.6.3608'. [ 859.149747][T18773] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 859.523139][T18789] gtp0: entered promiscuous mode [ 859.807110][T18799] netlink: 'syz.3.3620': attribute type 1 has an invalid length. [ 859.807165][T18799] __nla_validate_parse: 2 callbacks suppressed [ 859.807203][T18799] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3620'. [ 860.070013][T18806] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3625'. [ 860.073019][T18806] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3625'. [ 861.243015][T18827] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3629'. [ 861.251244][T18827] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3629'. [ 861.587392][T18843] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3635'. [ 861.590923][T18843] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3635'. [ 862.147781][T18852] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 862.170936][T18852] netlink: 'syz.6.3637': attribute type 10 has an invalid length. [ 862.174979][T18852] veth0_vlan: left promiscuous mode [ 862.180744][T18852] veth0_vlan: entered promiscuous mode [ 862.193030][T18852] team0: Device veth0_vlan failed to register rx_handler [ 862.717950][T18858] netlink: 'syz.6.3639': attribute type 2 has an invalid length. [ 862.728057][T18858] : entered promiscuous mode [ 862.731088][T18859] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 862.771841][T18859] netlink: 'syz.3.3638': attribute type 10 has an invalid length. [ 862.775592][T18859] veth0_vlan: left promiscuous mode [ 862.777905][T18859] veth0_vlan: entered promiscuous mode [ 862.780955][T18859] team0: Device veth0_vlan failed to register rx_handler [ 863.240146][T18843] Set syz1 is full, maxelem 65536 reached [ 863.465286][T18873] nbd: must specify a size in bytes for the device [ 863.635906][T18878] vcan0: tx address claim with dest, not broadcast [ 864.403283][T18887] overlayfs: failed to clone upperpath [ 864.767911][T18897] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 864.776823][T18897] netlink: 'syz.0.3648': attribute type 10 has an invalid length. [ 864.780511][T18897] veth0_vlan: left promiscuous mode [ 864.783855][T18897] veth0_vlan: entered promiscuous mode [ 864.787090][T18897] team0: Device veth0_vlan failed to register rx_handler [ 865.686426][T18909] netlink: 'syz.6.3655': attribute type 10 has an invalid length. [ 865.690002][T18909] veth0_vlan: left promiscuous mode [ 865.693101][T18909] veth0_vlan: entered promiscuous mode [ 865.697736][T18909] team0: Device veth0_vlan failed to register rx_handler [ 867.269918][T18942] netlink: 'syz.6.3662': attribute type 2 has an invalid length. [ 867.852307][T18951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3665'. [ 867.894914][T18954] 9pnet_fd: Insufficient options for proto=fd [ 867.984517][T13948] bond1 (unregistering): (slave macvlan3): Releasing backup interface [ 867.993957][T13948] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 868.000399][T13948] bond0 (unregistering): Released all slaves [ 868.101745][T13948] bond1 (unregistering): Released all slaves [ 868.117629][T18942] 9: entered promiscuous mode [ 868.226763][T13948] tipc: Left network mode [ 868.378228][T18969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 868.381027][T18969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 868.390169][T18969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 868.394975][T18969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 868.569806][T13948] hsr_slave_0: left promiscuous mode [ 868.572790][T13948] hsr_slave_1: left promiscuous mode [ 868.698709][T18981] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 868.714647][T18981] netlink: 'syz.0.3670': attribute type 10 has an invalid length. [ 868.953676][T18989] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3674'. [ 869.415323][T18997] netlink: 'syz.6.3676': attribute type 1 has an invalid length. [ 869.418184][T18997] netlink: 244 bytes leftover after parsing attributes in process `syz.6.3676'. [ 870.598996][T18981] veth0_vlan: left promiscuous mode [ 870.601521][T18981] veth0_vlan: entered promiscuous mode [ 870.603858][T18981] team0: Device veth0_vlan failed to register rx_handler [ 870.837796][T19002] team0 (unregistering): Port device team_slave_0 removed [ 870.846111][T19002] team0 (unregistering): Port device team_slave_1 removed [ 871.222554][T19055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3683'. [ 871.247812][T19019] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3680'. [ 871.250722][T19019] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3680'. [ 872.844804][T19064] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 872.876046][T19071] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 872.881543][T19064] netlink: 'syz.0.3684': attribute type 10 has an invalid length. [ 872.882563][T19071] netlink: 'syz.6.3685': attribute type 10 has an invalid length. [ 872.884227][T19064] veth0_vlan: left promiscuous mode [ 872.888928][T19064] veth0_vlan: entered promiscuous mode [ 872.891292][T19064] team0: Device veth0_vlan failed to register rx_handler [ 872.904309][T19071] veth0_vlan: left promiscuous mode [ 872.907512][T19071] veth0_vlan: entered promiscuous mode [ 872.911528][T19071] team0: Device veth0_vlan failed to register rx_handler [ 873.147492][T19093] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3692'. [ 873.150863][T19093] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3692'. [ 873.214865][T19096] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3693'. [ 873.338680][T19096] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3693'. [ 874.023940][T19113] netlink: 'syz.0.3695': attribute type 1 has an invalid length. [ 874.026458][T19113] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3695'. [ 874.114362][T19115] netlink: 'syz.6.3700': attribute type 1 has an invalid length. [ 874.117599][T19115] netlink: 244 bytes leftover after parsing attributes in process `syz.6.3700'. [ 874.697628][T19128] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3703'. [ 874.701626][T19128] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3703'. [ 875.699000][T19098] Set syz1 is full, maxelem 65536 reached [ 875.983942][T19141] input: syz0 as /devices/virtual/input/input10 [ 876.050681][T19140] netlink: 'syz.5.3704': attribute type 10 has an invalid length. [ 876.072815][T19145] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 876.153154][T19146] netlink: 'syz.0.3707': attribute type 10 has an invalid length. [ 876.156609][T19146] veth0_vlan: left promiscuous mode [ 876.160246][T19146] veth0_vlan: entered promiscuous mode [ 876.164021][T19146] team0: Device veth0_vlan failed to register rx_handler [ 876.414408][T19148] trusted_key: syz.3.3708 sent an empty control message without MSG_MORE. [ 876.421533][T19148] batadv1: entered allmulticast mode [ 876.424121][T19148] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 876.426637][T19148] bridge0: port 3(batadv1) entered blocking state [ 876.428819][T19148] bridge0: port 3(batadv1) entered disabled state [ 876.431801][T19148] batadv1: entered promiscuous mode [ 876.434089][T19148] bridge0: port 3(batadv1) entered blocking state [ 876.436952][T19148] bridge0: port 3(batadv1) entered forwarding state [ 876.804465][T19157] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3713'. [ 876.804707][T19155] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 876.807495][T19157] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3713'. [ 876.869446][T19155] netlink: 'syz.3.3709': attribute type 10 has an invalid length. [ 876.873486][T19155] veth0_vlan: left promiscuous mode [ 876.878771][T19155] veth0_vlan: entered promiscuous mode [ 876.887417][T19155] team0: Device veth0_vlan failed to register rx_handler [ 876.993136][ T47] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 876.996453][ T47] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 877.998319][T19129] Set syz1 is full, maxelem 65536 reached [ 878.413485][T19189] netlink: 'syz.5.3718': attribute type 10 has an invalid length. [ 878.709867][T19181] input: syz0 as /devices/virtual/input/input11 [ 879.175785][T19202] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3725'. [ 879.180913][T19202] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3725'. [ 879.317212][T19203] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 879.319656][T19203] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 879.665018][T19203] vhci_hcd vhci_hcd.0: Device attached [ 879.740038][T19224] overlayfs: failed to clone upperpath [ 880.124644][T19236] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 880.192985][T19236] netlink: 'syz.6.3734': attribute type 10 has an invalid length. [ 880.196012][T19236] veth0_vlan: left promiscuous mode [ 880.199520][T19236] veth0_vlan: entered promiscuous mode [ 880.204736][T19236] team0: Device veth0_vlan failed to register rx_handler [ 880.309603][ T55] usb 44-1: SetAddress Request (14) to port 0 [ 880.328525][ T55] usb 44-1: new SuperSpeed USB device number 14 using vhci_hcd [ 880.678692][T19241] netlink: 'syz.5.3735': attribute type 10 has an invalid length. [ 881.078019][T19244] bridge0: port 3(erspan0) entered blocking state [ 881.081161][T19244] bridge0: port 3(erspan0) entered disabled state [ 881.084830][T19244] erspan0: entered allmulticast mode [ 881.090269][T19244] erspan0: entered promiscuous mode [ 881.093629][T19244] bridge0: port 3(erspan0) entered blocking state [ 881.095942][T19244] bridge0: port 3(erspan0) entered forwarding state [ 881.110657][T19244] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3736'. [ 881.139447][T19206] vhci_hcd: connection reset by peer [ 881.143681][T19023] vhci_hcd: stop threads [ 881.145794][T19023] vhci_hcd: release socket [ 881.147344][T19023] vhci_hcd: disconnect device [ 883.706617][T19277] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 883.723800][T19277] netlink: 'syz.6.3743': attribute type 10 has an invalid length. [ 883.727645][T19277] veth0_vlan: left promiscuous mode [ 883.733324][T19277] veth0_vlan: entered promiscuous mode [ 883.743248][T19277] team0: Device veth0_vlan failed to register rx_handler [ 885.366085][T19303] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3753'. [ 885.369691][T19303] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3753'. [ 885.425810][T19313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 885.438641][ T55] usb 44-1: device descriptor read/8, error -110 [ 885.440465][T19312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3754'. [ 885.449434][T19312] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3754'. [ 885.830360][ T55] usb usb44-port1: attempt power cycle [ 886.036743][T19336] netlink: 'syz.3.3760': attribute type 1 has an invalid length. [ 886.039359][T19336] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3760'. [ 886.434229][T19340] netlink: 'syz.0.3770': attribute type 1 has an invalid length. [ 886.437309][T19340] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3770'. [ 886.993620][T19348] siw: device registration error -23 [ 887.063549][ T55] usb usb44-port1: unable to enumerate USB device [ 887.195828][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 887.195858][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 887.249004][T19350] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 887.250440][T19350] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 887.710805][T19358] [U] [ 887.711991][T19358] [U] [ 887.712882][T19358] [U] [ 887.713793][T19358] [U] [ 887.715824][T19358] [U] [ 887.716776][T19358] [U] [ 887.717714][T19358] [U] [ 887.718620][T19358] [U] [ 887.719649][T19358] [U] [ 887.720583][T19358] [U] [ 887.721504][T19358] [U] [ 887.722408][T19358] [U] [ 887.723469][T19358] [U] [ 887.724408][T19358] [U] [ 887.725329][T19358] [U] [ 887.726251][T19358] [U] [ 887.727996][T19358] [U] [ 887.728968][T19358] [U] [ 887.729871][T19358] [U] [ 887.730759][T19358] [U] [ 887.731734][T19358] [U] [ 887.732625][T19358] [U] [ 887.733530][T19358] [U] [ 887.734431][T19358] [U] [ 887.735598][T19358] [U] [ 887.736501][T19358] [U] [ 887.737447][T19358] [U] [ 887.738351][T19358] [U] [ 887.740694][T19358] [U] [ 887.741671][T19358] [U] [ 887.742580][T19358] [U] [ 887.743488][T19358] [U] [ 887.745053][T19358] [U] [ 887.745972][T19358] [U] [ 887.746854][T19358] [U] [ 887.747772][T19358] [U] [ 887.748730][T19358] [U] [ 887.749642][T19358] [U] [ 887.750541][T19358] [U] [ 887.751465][T19358] [U] [ 887.752528][T19358] [U] [ 887.753452][T19358] [U] [ 887.754356][T19358] [U] [ 887.755247][T19358] [U] [ 887.756821][T19358] [U] [ 887.757792][T19358] [U] [ 887.758686][T19358] [U] [ 887.759579][T19358] [U] [ 887.760552][T19358] [U] [ 887.761465][T19358] [U] [ 887.762372][T19358] [U] [ 887.763289][T19358] [U] [ 887.764701][T19358] [U] [ 887.765642][T19358] [U] [ 887.766535][T19358] [U] [ 887.767484][T19358] [U] [ 887.768454][T19358] [U] [ 887.769543][T19358] [U] [ 887.770449][T19358] [U] [ 887.771336][T19358] [U] [ 887.772311][T19358] [U] [ 887.773225][T19358] [U] [ 887.774133][T19358] [U] [ 887.775039][T19358] [U] [ 887.777057][T19358] [U] [ 887.778003][T19358] [U] [ 887.778985][T19358] [U] [ 887.779914][T19358] [U] [ 887.780889][T19358] [U] [ 887.781815][T19358] [U] [ 887.782722][T19358] [U] [ 887.783603][T19358] [U] [ 887.785203][T19358] [U] [ 887.786113][T19358] [U] [ 887.787010][T19358] [U] [ 887.787920][T19358] [U] [ 887.788949][T19358] [U] [ 887.789869][T19358] [U] [ 887.790747][T19358] [U] [ 887.791632][T19358] [U] [ 887.792614][T19358] [U] [ 887.793536][T19358] [U] [ 887.794466][T19358] [U] [ 887.795337][T19358] [U] [ 887.796501][T19358] [U] [ 887.797439][T19358] [U] [ 887.798934][T19358] [U] [ 887.800273][T19358] [U] [ 887.802061][T19358] [U] [ 887.803138][T19358] [U] [ 887.803935][T19358] [U] [ 887.804941][T19358] [U] [ 887.806687][T19358] [U] [ 887.807690][T19358] [U] [ 887.808642][T19358] [U] [ 887.809550][T19358] [U] [ 887.810523][T19358] [U] [ 887.811414][T19358] [U] [ 887.812309][T19358] [U] [ 887.813199][T19358] [U] [ 887.814593][T19358] [U] [ 887.815465][T19358] [U] [ 887.816378][T19358] [U] [ 887.817314][T19358] [U] [ 887.818621][T19358] [U] [ 887.819514][T19358] [U] [ 887.820414][T19358] [U] [ 887.821300][T19358] [U] [ 887.822241][T19358] [U] [ 887.823116][T19358] [U] [ 887.824189][T19358] [U] [ 887.825366][T19358] [U] [ 887.829039][T19358] [U] [ 887.830278][T19358] [U] [ 887.831473][T19358] [U] [ 887.832664][T19358] [U] [ 887.836777][T19358] [U] [ 887.837710][T19358] [U] [ 887.838588][T19358] [U] [ 887.839469][T19358] [U] [ 887.841073][T19358] [U] [ 887.841979][T19358] [U] [ 887.842861][T19358] [U] [ 887.843780][T19358] [U] [ 887.847309][T19358] [U] [ 887.848273][T19358] [U] [ 887.849189][T19358] [U] [ 887.851268][T19357] [U] [ 888.178124][T19373] netlink: 'syz.3.3773': attribute type 1 has an invalid length. [ 888.180654][T19373] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3773'. [ 889.032660][T19388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3777'. [ 889.037243][T19388] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3777'. [ 890.197567][T19410] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3782'. [ 890.523909][T19417] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 890.533573][T19417] netlink: 'syz.6.3784': attribute type 10 has an invalid length. [ 890.537978][T19417] veth0_vlan: left promiscuous mode [ 890.544357][T19417] veth0_vlan: entered promiscuous mode [ 890.555296][T19417] team0: Device veth0_vlan failed to register rx_handler [ 891.323534][T19426] netlink: 'syz.3.3785': attribute type 1 has an invalid length. [ 891.326092][T19426] __nla_validate_parse: 3 callbacks suppressed [ 891.326100][T19426] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3785'. [ 892.335555][T19412] Set syz1 is full, maxelem 65536 reached [ 893.074656][T19461] netlink: 'syz.5.3797': attribute type 10 has an invalid length. [ 894.121856][T19472] netlink: 'syz.0.3800': attribute type 1 has an invalid length. [ 894.124543][T19472] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3800'. [ 894.200902][T19477] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3803'. [ 894.204485][T19477] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3803'. [ 894.606529][T19487] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 894.617831][T19487] netlink: 'syz.0.3804': attribute type 10 has an invalid length. [ 894.621223][T19487] veth0_vlan: left promiscuous mode [ 894.624432][T19487] veth0_vlan: entered promiscuous mode [ 894.627658][T19487] team0: Device veth0_vlan failed to register rx_handler [ 895.599068][T19507] netlink: 'syz.6.3811': attribute type 10 has an invalid length. [ 895.602046][T19507] veth0_vlan: left promiscuous mode [ 895.605830][T19507] veth0_vlan: entered promiscuous mode [ 895.612072][T19507] team0: Device veth0_vlan failed to register rx_handler [ 896.341970][T19516] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3814'. [ 896.345243][T19516] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3814'. [ 896.434216][T19522] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 896.437873][T19522] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 897.278441][T19539] netlink: 'syz.5.3821': attribute type 10 has an invalid length. [ 898.410839][T19556] netlink: 'syz.6.3826': attribute type 1 has an invalid length. [ 898.413506][T19556] netlink: 244 bytes leftover after parsing attributes in process `syz.6.3826'. [ 898.549610][T19559] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3829'. [ 898.627813][T19566] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3831'. [ 898.679965][T19569] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3832'. [ 898.730300][T19571] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3833'. [ 898.734547][T19571] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3833'. [ 900.535848][T19583] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 900.542004][T19583] block device autoloading is deprecated and will be removed. [ 901.199029][T19602] netlink: 'syz.3.3840': attribute type 10 has an invalid length. [ 901.202075][T19602] veth0_vlan: left promiscuous mode [ 901.206370][T19602] veth0_vlan: entered promiscuous mode [ 901.210616][T19602] team0: Device veth0_vlan failed to register rx_handler [ 901.527882][T19606] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3841'. [ 902.132745][T19613] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 902.138777][T19613] netlink: 'syz.0.3843': attribute type 10 has an invalid length. [ 902.141681][T19613] veth0_vlan: left promiscuous mode [ 902.143904][T19613] veth0_vlan: entered promiscuous mode [ 902.146305][T19613] team0: Device veth0_vlan failed to register rx_handler [ 902.175197][T19619] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3848'. [ 902.502136][T19633] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3852'. [ 902.589139][T19635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3853'. [ 903.191452][T19645] netlink: 'syz.6.3855': attribute type 10 has an invalid length. [ 903.195399][T19645] veth0_vlan: left promiscuous mode [ 903.200970][T19645] veth0_vlan: entered promiscuous mode [ 903.212640][T19645] team0: Device veth0_vlan failed to register rx_handler [ 903.604210][T19651] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3858'. [ 903.665692][T19651] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3858'. [ 903.733183][T19651] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3858'. [ 904.045389][T19671] netlink: 'syz.3.3859': attribute type 10 has an invalid length. [ 904.048467][T19671] veth0_vlan: left promiscuous mode [ 904.052513][T19671] veth0_vlan: entered promiscuous mode [ 904.056194][T19671] team0: Device veth0_vlan failed to register rx_handler [ 904.796833][T19675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3862'. [ 904.815347][T19675] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3862'. [ 904.897930][T19679] binder_alloc: 19678: binder_alloc_buf, no vma [ 905.213313][T19686] netlink: 'syz.0.3863': attribute type 1 has an invalid length. [ 905.216587][T19686] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3863'. [ 906.466913][T19728] netlink: 'syz.3.3876': attribute type 1 has an invalid length. [ 907.154975][T19748] __nla_validate_parse: 6 callbacks suppressed [ 907.155025][T19748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3884'. [ 907.164995][T19748] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3884'. [ 907.335305][T19755] overlayfs: missing 'workdir' [ 907.382240][T19758] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3887'. [ 907.396462][T19758] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3887'. [ 907.495249][T19759] fuse: Invalid rootmode [ 908.579672][T19774] netlink: 'syz.3.3890': attribute type 1 has an invalid length. [ 908.583260][T19774] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3890'. [ 910.322974][T19806] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3896'. [ 910.329196][ T41] audit: type=1326 audit(2000000727.739:3995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19796 comm="syz.3.3897" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 910.343042][ T41] audit: type=1326 audit(2000000727.739:3996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19796 comm="syz.3.3897" exe="/syz-executor" sig=0 arch=40000003 syscall=293 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 910.352004][ T41] audit: type=1326 audit(2000000727.739:3997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19796 comm="syz.3.3897" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 910.361582][ T41] audit: type=1326 audit(2000000727.739:3998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19796 comm="syz.3.3897" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 910.384032][ T41] audit: type=1326 audit(2000000727.739:3999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19796 comm="syz.3.3897" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 910.391716][ T41] audit: type=1326 audit(2000000727.749:4000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19796 comm="syz.3.3897" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 910.413442][ T41] audit: type=1326 audit(2000000727.749:4001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19796 comm="syz.3.3897" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 910.467581][ T41] audit: type=1326 audit(2000000727.869:4002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19796 comm="syz.3.3897" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 910.474846][ T41] audit: type=1326 audit(2000000727.869:4003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19796 comm="syz.3.3897" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 910.482163][ T41] audit: type=1326 audit(2000000727.879:4004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19796 comm="syz.3.3897" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 910.661822][T19814] netlink: 'syz.0.3901': attribute type 1 has an invalid length. [ 910.664610][T19814] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3901'. [ 910.777259][T19817] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3903'. [ 910.780519][T19817] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3903'. [ 911.040794][T19824] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3906'. [ 911.051495][T19824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 911.413101][T19831] netlink: 'syz.5.3907': attribute type 10 has an invalid length. [ 911.455018][T19834] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 911.465487][T19834] netlink: 'syz.3.3908': attribute type 10 has an invalid length. [ 911.468839][T19834] veth0_vlan: left promiscuous mode [ 911.473417][T19834] veth0_vlan: entered promiscuous mode [ 911.478158][T19834] team0: Device veth0_vlan failed to register rx_handler [ 913.675187][T19873] bridge0: port 3(erspan0) entered blocking state [ 913.682350][T19873] bridge0: port 3(erspan0) entered disabled state [ 913.685556][T19873] erspan0: entered allmulticast mode [ 913.689302][T19873] erspan0: entered promiscuous mode [ 913.692030][T19873] bridge0: port 3(erspan0) entered blocking state [ 913.694996][T19873] bridge0: port 3(erspan0) entered forwarding state [ 913.711410][T19873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3919'. [ 913.789174][T19874] netlink: 'syz.5.3918': attribute type 10 has an invalid length. [ 914.858595][T19900] netlink: 'syz.0.3924': attribute type 10 has an invalid length. [ 914.862358][T19900] veth0_vlan: left promiscuous mode [ 914.868806][T19900] veth0_vlan: entered promiscuous mode [ 914.873907][T19900] team0: Device veth0_vlan failed to register rx_handler [ 915.613651][T19917] autofs: Bad value for 'fd' [ 916.049328][T19921] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3934'. [ 916.052317][T19921] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3934'. [ 916.917149][T19939] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 916.929672][T19939] netlink: 'syz.0.3939': attribute type 10 has an invalid length. [ 916.933951][T19939] veth0_vlan: left promiscuous mode [ 916.941073][T19939] veth0_vlan: entered promiscuous mode [ 916.948178][T19939] team0: Device veth0_vlan failed to register rx_handler [ 917.480381][T19944] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3942'. [ 917.619253][T19953] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 917.671290][T19957] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3946'. [ 917.675461][T19957] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3946'. [ 917.766413][T19962] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3948'. [ 917.769463][T19962] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3948'. [ 918.494671][T19967] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 918.503629][T19967] netlink: 'syz.3.3949': attribute type 10 has an invalid length. [ 918.506971][T19967] veth0_vlan: left promiscuous mode [ 918.513078][T19967] veth0_vlan: entered promiscuous mode [ 918.518895][T19967] team0: Device veth0_vlan failed to register rx_handler [ 919.398592][T19980] autofs: Bad value for 'fd' [ 919.633971][T19962] Set syz1 is full, maxelem 65536 reached [ 920.743487][T19982] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3954'. [ 921.381742][T19992] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 921.382186][T19987] netlink: 'syz.5.3953': attribute type 10 has an invalid length. [ 921.386288][T19992] netlink: 'syz.3.3955': attribute type 10 has an invalid length. [ 921.389818][T19992] veth0_vlan: left promiscuous mode [ 921.392401][T19992] veth0_vlan: entered promiscuous mode [ 921.395003][T19992] team0: Device veth0_vlan failed to register rx_handler [ 921.447948][T20001] netlink: 'syz.0.3957': attribute type 1 has an invalid length. [ 921.470772][T20001] 8021q: adding VLAN 0 to HW filter on device bond2 [ 921.503263][T20001] bond2: (slave veth3): Enslaving as an active interface with a down link [ 921.536794][T20001] bond2: (slave veth0_to_bond): making interface the new active one [ 921.540388][T20001] veth0_to_bond: entered promiscuous mode [ 921.542427][T20001] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 921.561052][T20001] vlan0: entered allmulticast mode [ 921.562692][T20001] veth0_to_bond: entered allmulticast mode [ 921.567224][T20001] bond2: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 922.313944][ T41] kauditd_printk_skb: 19 callbacks suppressed [ 922.313963][ T41] audit: type=1800 audit(2000000739.709:4024): pid=20014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3962" name="nullb0" dev="tmpfs" ino=2635 res=0 errno=0 [ 922.404823][T20017] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3964'. [ 922.776109][T20030] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 922.851656][T20034] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 922.859434][T20034] netlink: 'syz.6.3966': attribute type 10 has an invalid length. [ 922.862426][T20034] veth0_vlan: left promiscuous mode [ 922.866569][T20034] veth0_vlan: entered promiscuous mode [ 922.872512][T20034] team0: Device veth0_vlan failed to register rx_handler [ 923.172458][T20041] netlink: 'syz.3.3969': attribute type 1 has an invalid length. [ 923.175973][T20041] netlink: 4112 bytes leftover after parsing attributes in process `syz.3.3969'. [ 923.546990][T20048] netlink: 'syz.6.3972': attribute type 1 has an invalid length. [ 923.552684][T20050] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3973'. [ 923.562162][T20048] 8021q: adding VLAN 0 to HW filter on device bond3 [ 923.602408][T20048] bond3: (slave veth3): Enslaving as an active interface with a down link [ 923.629644][T20048] bond3: (slave veth0_to_bond): making interface the new active one [ 923.633136][T20048] veth0_to_bond: entered promiscuous mode [ 923.635584][T20048] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 923.660984][T20048] vlan2: entered allmulticast mode [ 923.663174][T20048] veth0_to_bond: entered allmulticast mode [ 923.667239][T20048] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 925.365943][ T64] Bluetooth: hci2: ACL packet for unknown connection handle 1085 [ 925.672302][T20090] netlink: 'syz.5.3985': attribute type 1 has an invalid length. [ 925.686710][T20090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 925.714338][T20092] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 925.723832][T20092] netlink: 'syz.0.3983': attribute type 10 has an invalid length. [ 925.725832][T20090] bond0: (slave veth3): Enslaving as an active interface with a down link [ 925.729670][T20092] veth0_vlan: left promiscuous mode [ 925.735638][T20092] veth0_vlan: entered promiscuous mode [ 925.739803][T20092] team0: Device veth0_vlan failed to register rx_handler [ 925.754784][T20090] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 925.767326][T20090] vlan2: entered allmulticast mode [ 925.769016][T20090] veth0_to_bond: entered allmulticast mode [ 925.771800][T20090] veth0_to_bond: entered promiscuous mode [ 925.774565][T20090] veth0_to_bond: left promiscuous mode [ 925.776501][T20090] veth0_to_bond: entered promiscuous mode [ 925.778497][T20090] bond0: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 925.784532][T20090] veth0_to_bond: left promiscuous mode [ 926.247630][ T41] audit: type=1800 audit(2000000743.659:4025): pid=20098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3987" name="bus" dev="overlay" ino=2400 res=0 errno=0 [ 926.456584][T20104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3991'. [ 926.495945][T20108] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3992'. [ 926.498868][T20108] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3992'. [ 927.050622][T20127] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4000'. [ 927.146604][T20135] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4002'. [ 927.149384][T20135] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4002'. [ 927.244104][T20138] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 927.253010][T20138] netlink: 'syz.0.3998': attribute type 10 has an invalid length. [ 927.256613][T20138] veth0_vlan: left promiscuous mode [ 927.260874][T20138] veth0_vlan: entered promiscuous mode [ 927.265226][T20138] team0: Device veth0_vlan failed to register rx_handler [ 927.681150][ T41] audit: type=1800 audit(2000000745.089:4026): pid=20142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4004" name="nullb0" dev="tmpfs" ino=2635 res=0 errno=0 [ 928.186282][T20155] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 928.771795][T20161] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4009'. [ 928.900774][T20135] Set syz1 is full, maxelem 65536 reached [ 930.073327][T20199] netlink: 'syz.5.4019': attribute type 10 has an invalid length. [ 930.234164][T20201] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4020'. [ 930.237456][T20201] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4020'. [ 930.817306][T20215] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 931.151756][T20224] netlink: 'syz.5.4026': attribute type 10 has an invalid length. [ 931.791993][T20228] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4029'. [ 931.795132][T20228] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4029'. [ 931.859518][T20231] netlink: 'syz.5.4030': attribute type 27 has an invalid length. [ 931.862536][T20231] netlink: 164 bytes leftover after parsing attributes in process `syz.5.4030'. [ 932.729855][T20255] netlink: 'syz.5.4035': attribute type 10 has an invalid length. [ 932.900507][T20259] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4039'. [ 932.905874][T20259] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4039'. [ 932.951438][T20261] vivid-000: disconnect [ 933.067736][T20260] vivid-000: reconnect [ 933.457707][T20278] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4046'. [ 933.562912][T20279] netlink: 'syz.0.4043': attribute type 4 has an invalid length. [ 933.668990][ T72] veth0_to_bond: left promiscuous mode [ 933.778449][T20285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 933.783616][T20285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 934.138401][T20289] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4049'. [ 934.141802][T20289] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4049'. [ 934.272250][T20295] tipc: Enabled bearer , priority 0 [ 934.613136][T20308] netlink: 'syz.5.4052': attribute type 10 has an invalid length. [ 935.185472][T20310] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4055'. [ 935.273319][T20312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4056'. [ 935.428135][ T41] audit: type=1800 audit(2000000752.839:4027): pid=20321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4059" name="nullb0" dev="tmpfs" ino=2635 res=0 errno=0 [ 935.524032][T19032] veth0_to_bond: left promiscuous mode [ 935.692446][T20289] Set syz1 is full, maxelem 65536 reached [ 936.424179][T20350] wireguard0: entered promiscuous mode [ 936.426142][T20350] wireguard0: entered allmulticast mode [ 936.809788][T20370] __nla_validate_parse: 7 callbacks suppressed [ 936.809806][T20370] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4076'. [ 936.817243][T20370] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4076'. [ 937.342703][T20394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4082'. [ 937.415403][T20398] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4083'. [ 937.444638][T20400] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4079'. [ 937.690946][T20406] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4085'. [ 937.695168][T20406] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4085'. [ 937.735552][T20408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4086'. [ 937.739375][T20408] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4086'. [ 937.957864][T20418] overlay: Unknown parameter 'fscontext' [ 938.303228][T20430] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4094'. [ 939.091044][T20452] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 939.098604][T20452] netlink: 'syz.3.4101': attribute type 10 has an invalid length. [ 939.101561][T20452] veth0_vlan: left promiscuous mode [ 939.106438][T20452] veth0_vlan: entered promiscuous mode [ 939.110183][T20452] team0: Device veth0_vlan failed to register rx_handler [ 939.792352][T20465] FAULT_INJECTION: forcing a failure. [ 939.792352][T20465] name failslab, interval 1, probability 0, space 0, times 0 [ 939.797565][T20465] CPU: 1 UID: 0 PID: 20465 Comm: syz.0.4105 Not tainted syzkaller #0 PREEMPT(full) [ 939.797595][T20465] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 939.797603][T20465] Call Trace: [ 939.797607][T20465] [ 939.797612][T20465] dump_stack_lvl+0x16c/0x1f0 [ 939.797631][T20465] should_fail_ex+0x512/0x640 [ 939.797643][T20465] ? __kmalloc_noprof+0xca/0x880 [ 939.797661][T20465] should_failslab+0xc2/0x120 [ 939.797672][T20465] __kmalloc_noprof+0xdd/0x880 [ 939.797686][T20465] ? sock_kmalloc+0x111/0x170 [ 939.797704][T20465] ? sock_kmalloc+0x111/0x170 [ 939.797718][T20465] sock_kmalloc+0x111/0x170 [ 939.797733][T20465] skcipher_accept_parent_nokey+0xa4/0x2e0 [ 939.797747][T20465] af_alg_accept+0x34a/0x610 [ 939.797764][T20465] ? __pfx_skcipher_accept_parent_nokey+0x10/0x10 [ 939.797778][T20465] do_accept+0x33e/0x530 [ 939.797797][T20465] ? __pfx_do_accept+0x10/0x10 [ 939.797823][T20465] __sys_accept4+0x100/0x1c0 [ 939.797840][T20465] ? __pfx___sys_accept4+0x10/0x10 [ 939.797858][T20465] ? __pfx_ksys_write+0x10/0x10 [ 939.797878][T20465] __ia32_sys_accept4+0x94/0x100 [ 939.797895][T20465] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 939.797911][T20465] __do_fast_syscall_32+0x7c/0x300 [ 939.797928][T20465] do_fast_syscall_32+0x32/0x80 [ 939.797943][T20465] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 939.797957][T20465] RIP: 0023:0xf7fa1579 [ 939.797966][T20465] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 939.797978][T20465] RSP: 002b:00000000f545455c EFLAGS: 00000296 ORIG_RAX: 000000000000016c [ 939.797989][T20465] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000000 [ 939.797996][T20465] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 939.798002][T20465] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 939.798009][T20465] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 939.798015][T20465] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 939.798029][T20465] [ 939.814776][T20466] FAULT_INJECTION: forcing a failure. [ 939.814776][T20466] name failslab, interval 1, probability 0, space 0, times 0 [ 939.882522][T20466] CPU: 0 UID: 0 PID: 20466 Comm: syz.3.4106 Not tainted syzkaller #0 PREEMPT(full) [ 939.882539][T20466] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 939.882546][T20466] Call Trace: [ 939.882551][T20466] [ 939.882555][T20466] dump_stack_lvl+0x16c/0x1f0 [ 939.882574][T20466] should_fail_ex+0x512/0x640 [ 939.882586][T20466] ? __kmalloc_noprof+0xca/0x880 [ 939.882602][T20466] should_failslab+0xc2/0x120 [ 939.882614][T20466] __kmalloc_noprof+0xdd/0x880 [ 939.882627][T20466] ? __pfx___mutex_trylock_common+0x10/0x10 [ 939.882646][T20466] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 939.882667][T20466] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 939.882696][T20466] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 939.882714][T20466] ? __mutex_lock+0x1c5/0x1060 [ 939.882731][T20466] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 939.882747][T20466] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 939.882763][T20466] ? genl_get_cmd+0x194/0x580 [ 939.882781][T20466] ? ____sys_sendmsg+0xa98/0xc70 [ 939.882796][T20466] ? ___sys_sendmsg+0x134/0x1d0 [ 939.882807][T20466] ? __radix_tree_lookup+0x21f/0x2c0 [ 939.882821][T20466] genl_rcv_msg+0x55c/0x800 [ 939.882838][T20466] ? __pfx_genl_rcv_msg+0x10/0x10 [ 939.882854][T20466] ? __pfx_nbd_genl_status+0x10/0x10 [ 939.882880][T20466] ? __lock_acquire+0x622/0x1c90 [ 939.882898][T20466] netlink_rcv_skb+0x158/0x420 [ 939.882915][T20466] ? __pfx_genl_rcv_msg+0x10/0x10 [ 939.882935][T20466] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 939.882964][T20466] ? netlink_deliver_tap+0x1ae/0xd30 [ 939.882986][T20466] genl_rcv+0x28/0x40 [ 939.883004][T20466] netlink_unicast+0x5aa/0x870 [ 939.883028][T20466] ? __pfx_netlink_unicast+0x10/0x10 [ 939.883055][T20466] netlink_sendmsg+0x8c8/0xdd0 [ 939.883078][T20466] ? __pfx_netlink_sendmsg+0x10/0x10 [ 939.883101][T20466] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 939.883124][T20466] ____sys_sendmsg+0xa98/0xc70 [ 939.883147][T20466] ? __pfx_____sys_sendmsg+0x10/0x10 [ 939.883163][T20466] ? get_compat_msghdr+0x11a/0x170 [ 939.883181][T20466] ___sys_sendmsg+0x134/0x1d0 [ 939.883194][T20466] ? __pfx____sys_sendmsg+0x10/0x10 [ 939.883213][T20466] ? find_held_lock+0x2b/0x80 [ 939.883238][T20466] __sys_sendmsg+0x16d/0x220 [ 939.883251][T20466] ? __pfx___sys_sendmsg+0x10/0x10 [ 939.883269][T20466] ? rcu_is_watching+0x12/0xc0 [ 939.883287][T20466] __do_fast_syscall_32+0x7c/0x300 [ 939.883327][T20466] do_fast_syscall_32+0x32/0x80 [ 939.883342][T20466] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 939.883357][T20466] RIP: 0023:0xf707d579 [ 939.883367][T20466] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 939.883378][T20466] RSP: 002b:00000000f544c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 939.883392][T20466] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000dc0 [ 939.883399][T20466] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 939.883405][T20466] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 939.883411][T20466] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 939.883418][T20466] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 939.883432][T20466] [ 941.243924][ C3] vcan0: j1939_tp_rxtimer: 0xffff88805edc0800: rx timeout, send abort [ 941.280533][T20493] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 941.293123][T20493] netlink: 'syz.3.4114': attribute type 10 has an invalid length. [ 941.297821][T20493] veth0_vlan: left promiscuous mode [ 941.301436][T20493] veth0_vlan: entered promiscuous mode [ 941.305115][T20493] team0: Device veth0_vlan failed to register rx_handler [ 941.744082][ C3] vcan0: j1939_tp_rxtimer: 0xffff88802acbd400: rx timeout, send abort [ 941.748050][ C3] vcan0: j1939_tp_rxtimer: 0xffff88805edc0800: abort rx timeout. Force session deactivation [ 942.101792][T20514] __nla_validate_parse: 5 callbacks suppressed [ 942.101805][T20514] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4120'. [ 942.117604][T20514] macvlan3: entered allmulticast mode [ 942.119717][T20514] veth1_vlan: entered allmulticast mode [ 942.124140][T20514] veth1_vlan: left allmulticast mode [ 942.246852][ C3] vcan0: j1939_tp_rxtimer: 0xffff88802acbd400: abort rx timeout. Force session deactivation [ 942.718478][T20523] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 942.725626][T20523] netlink: 'syz.0.4123': attribute type 10 has an invalid length. [ 942.728620][T20523] veth0_vlan: left promiscuous mode [ 942.732469][T20523] veth0_vlan: entered promiscuous mode [ 942.736599][T20523] team0: Device veth0_vlan failed to register rx_handler [ 943.156815][T20536] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4128'. [ 943.247897][T20544] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4130'. [ 943.675981][T20561] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4136'. [ 943.746306][T20564] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4134'. [ 943.962147][T20575] overlayfs: failed to clone lowerpath [ 944.018520][T20577] overlayfs: failed to clone lowerpath [ 944.327559][T20584] netlink: 'syz.0.4141': attribute type 10 has an invalid length. [ 944.331950][T20584] veth0_vlan: left promiscuous mode [ 944.338283][T20584] veth0_vlan: entered promiscuous mode [ 944.345009][T20584] team0: Device veth0_vlan failed to register rx_handler [ 945.019492][T20594] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 945.027506][T20594] netlink: 'syz.3.4143': attribute type 10 has an invalid length. [ 945.030467][T20594] veth0_vlan: left promiscuous mode [ 945.034171][T20594] veth0_vlan: entered promiscuous mode [ 945.037831][T20594] team0: Device veth0_vlan failed to register rx_handler [ 945.427833][T20603] fuse: Bad value for 'rootmode' [ 945.932736][T20618] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4154'. [ 946.240243][T20629] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 946.267184][T20631] netlink: 2 bytes leftover after parsing attributes in process `syz.5.4158'. [ 946.281627][T20629] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 946.283671][T20629] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 946.287750][T20629] vhci_hcd vhci_hcd.0: Device attached [ 946.291991][T20634] vhci_hcd: connection closed [ 946.292412][T19034] vhci_hcd: stop threads [ 946.298333][T19034] vhci_hcd: release socket [ 946.300582][T19034] vhci_hcd: disconnect device [ 946.675614][T20646] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4163'. [ 946.715435][T20648] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4164'. [ 946.718384][T20648] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4164'. [ 947.466581][T20675] __nla_validate_parse: 1 callbacks suppressed [ 947.466594][T20675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4172'. [ 947.514388][T20677] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4173'. [ 947.517341][T20677] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4173'. [ 947.986271][T20689] overlayfs: failed to clone lowerpath [ 948.133802][ T41] audit: type=1326 audit(2000000765.539:4028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20683 comm="syz.5.4176" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 948.145089][ T41] audit: type=1326 audit(2000000765.539:4029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20683 comm="syz.5.4176" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f315a7 code=0x7ffc0000 [ 948.153868][ T41] audit: type=1326 audit(2000000765.539:4030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20683 comm="syz.5.4176" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 948.162384][ T41] audit: type=1326 audit(2000000765.539:4031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20683 comm="syz.5.4176" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f315a7 code=0x7ffc0000 [ 948.171067][ T41] audit: type=1326 audit(2000000765.539:4032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20683 comm="syz.5.4176" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 948.179625][ T41] audit: type=1326 audit(2000000765.539:4033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20683 comm="syz.5.4176" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f315a7 code=0x7ffc0000 [ 948.189146][ T41] audit: type=1326 audit(2000000765.539:4034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20683 comm="syz.5.4176" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 948.197320][ T41] audit: type=1326 audit(2000000765.539:4035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20683 comm="syz.5.4176" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f315a7 code=0x7ffc0000 [ 948.206021][ T41] audit: type=1326 audit(2000000765.539:4036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20683 comm="syz.5.4176" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 948.214741][ T41] audit: type=1326 audit(2000000765.539:4037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20683 comm="syz.5.4176" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f315a7 code=0x7ffc0000 [ 948.287707][T20700] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 948.295231][T20700] netlink: 'syz.3.4179': attribute type 10 has an invalid length. [ 948.298075][T20700] veth0_vlan: left promiscuous mode [ 948.301478][T20700] veth0_vlan: entered promiscuous mode [ 948.306378][T20700] team0: Device veth0_vlan failed to register rx_handler [ 948.637038][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 948.639365][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 950.952059][T20711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4181'. [ 950.981535][T20713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4182'. [ 951.052581][T20707] netlink: 'syz.6.4180': attribute type 10 has an invalid length. [ 951.056734][T20707] veth0_vlan: left promiscuous mode [ 951.059409][T20707] veth0_vlan: entered promiscuous mode [ 951.062371][T20707] team0: Device veth0_vlan failed to register rx_handler [ 951.546139][T20733] overlay: Unknown parameter 'fscontext' [ 951.724022][T20737] netlink: 'syz.5.4191': attribute type 10 has an invalid length. [ 952.256264][T20741] syzkaller0: entered promiscuous mode [ 952.258210][T20741] syzkaller0: entered allmulticast mode [ 952.382249][T20744] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4193'. [ 952.445390][T20746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4194'. [ 957.298086][T20852] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4225'. [ 957.443519][T20862] overlayfs: failed to clone upperpath [ 958.505573][T20877] netlink: 'syz.0.4229': attribute type 10 has an invalid length. [ 958.508940][T20877] veth0_vlan: left promiscuous mode [ 958.513865][T20877] veth0_vlan: entered promiscuous mode [ 958.517598][T20877] team0: Device veth0_vlan failed to register rx_handler [ 958.738976][ T54] libceph: connect (1)[c::]:6789 error -101 [ 958.741302][ T54] libceph: mon0 (1)[c::]:6789 connect error [ 958.888825][T20885] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4236'. [ 959.004091][ T54] libceph: connect (1)[c::]:6789 error -101 [ 959.009428][ T54] libceph: mon0 (1)[c::]:6789 connect error [ 959.516363][ T54] libceph: connect (1)[c::]:6789 error -101 [ 959.519072][ T54] libceph: mon0 (1)[c::]:6789 connect error [ 959.563599][T20879] ceph: No mds server is up or the cluster is laggy [ 959.623006][T20895] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 959.625223][T20895] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 959.628192][T20895] vhci_hcd vhci_hcd.0: Device attached [ 959.646451][T20896] vhci_hcd: connection closed [ 959.646663][ T72] vhci_hcd: stop threads [ 959.649576][ T72] vhci_hcd: release socket [ 959.650994][ T72] vhci_hcd: disconnect device [ 960.042590][T19028] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.059874][ T5960] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 960.061657][T20905] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4243'. [ 960.065035][ T5960] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 960.072565][ T5960] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 960.079441][ T5960] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 960.088968][ T5960] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 960.137691][T19028] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.230255][T19028] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.346916][T19028] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.408284][T20931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4250'. [ 960.440360][T20902] chnl_net:caif_netlink_parms(): no params data found [ 960.565967][T20902] bridge0: port 1(bridge_slave_0) entered blocking state [ 960.568583][T20902] bridge0: port 1(bridge_slave_0) entered disabled state [ 960.570996][T20902] bridge_slave_0: entered allmulticast mode [ 960.573897][T20902] bridge_slave_0: entered promiscuous mode [ 960.577257][T19028] bridge_slave_1: left allmulticast mode [ 960.579375][T19028] bridge_slave_1: left promiscuous mode [ 960.581827][T19028] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.588696][T19028] bridge_slave_0: left allmulticast mode [ 960.591422][T19028] bridge_slave_0: left promiscuous mode [ 960.594350][T19028] bridge0: port 1(bridge_slave_0) entered disabled state [ 960.715107][T19028] bond1 (unregistering): (slave gretap1): Releasing active interface [ 961.057392][T19028] bond1 (unregistering): Released all slaves [ 961.065464][T19028] bond2 (unregistering): Released all slaves [ 961.097588][T20942] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4253'. [ 961.155028][T19028] bond0 (unregistering): (slave veth3): Releasing active interface [ 961.158914][T19028] bond0 (unregistering): (slave veth0_to_bond): Releasing active interface [ 961.162532][T19028] bond0 (unregistering): Released all slaves [ 961.168898][T20902] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.171156][T20902] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.173405][T20902] bridge_slave_1: entered allmulticast mode [ 961.176096][T20902] bridge_slave_1: entered promiscuous mode [ 961.211944][T20902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 961.218180][T20902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 961.265343][T20902] team0: Port device team_slave_0 added [ 961.269520][T20902] team0: Port device team_slave_1 added [ 961.319537][T20902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 961.322352][T20902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 961.331583][T20902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 961.337930][T20902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 961.340362][T20902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 961.348801][T20902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 961.406101][T20902] hsr_slave_0: entered promiscuous mode [ 961.408377][T20902] hsr_slave_1: entered promiscuous mode [ 961.410412][T20902] debugfs: 'hsr0' already exists in 'hsr' [ 961.412192][T20902] Cannot create hsr debugfs directory [ 961.707024][T19028] hsr_slave_0: left promiscuous mode [ 961.711064][T19028] 0: left promiscuous mode [ 961.712853][T19028] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 961.718383][T19028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 961.721287][T19028] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 961.723570][T19028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 961.750427][T19028] veth1_macvtap: left promiscuous mode [ 961.752322][T19028] veth0_macvtap: left promiscuous mode [ 961.754111][T19028] veth1_vlan: left promiscuous mode [ 962.156061][T20965] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4258'. [ 962.166265][ T5960] Bluetooth: hci0: command tx timeout [ 962.211454][T20966] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4258'. [ 963.021229][ T41] kauditd_printk_skb: 20915 callbacks suppressed [ 963.021242][ T41] audit: type=1800 audit(2000001036.431:24953): pid=20978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4260" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 964.170548][T20902] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 964.179333][T19028] IPVS: stop unused estimator thread 0... [ 964.193501][T20902] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 964.216853][T20902] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 964.227927][T20902] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 964.248515][ T5960] Bluetooth: hci0: command tx timeout [ 964.341172][T20902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 964.361939][T20902] 8021q: adding VLAN 0 to HW filter on device team0 [ 964.370663][T19027] bridge0: port 1(bridge_slave_0) entered blocking state [ 964.373649][T19027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 964.384103][T19032] bridge0: port 2(bridge_slave_1) entered blocking state [ 964.387496][T19032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 964.511245][T20902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 964.701011][T20902] veth0_vlan: entered promiscuous mode [ 964.713764][T20902] veth1_vlan: entered promiscuous mode [ 964.732136][T20902] veth0_macvtap: entered promiscuous mode [ 964.737383][T20902] veth1_macvtap: entered promiscuous mode [ 964.757451][T20902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 964.765906][T20902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 964.772974][T19029] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.780245][T19029] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.783301][T19029] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.800080][T19029] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.848718][T19029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 964.851911][T19029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 964.856989][T19029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 964.861101][T19029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 965.659889][T21054] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4270'. [ 965.716044][T21054] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4270'. [ 966.329702][ T5960] Bluetooth: hci0: command tx timeout [ 966.568432][T21067] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4276'. [ 967.020510][T21079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4281'. [ 967.024203][T21079] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4281'. [ 968.301021][ T41] audit: type=1800 audit(2000001041.705:24954): pid=21112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4289" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 968.401538][ T5960] Bluetooth: hci0: command tx timeout [ 968.684734][T21116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4290'. [ 968.689671][T21116] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4290'. [ 968.736905][T21120] FAULT_INJECTION: forcing a failure. [ 968.736905][T21120] name failslab, interval 1, probability 0, space 0, times 0 [ 968.741005][T21120] CPU: 3 UID: 0 PID: 21120 Comm: syz.3.4292 Not tainted syzkaller #0 PREEMPT(full) [ 968.741021][T21120] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 968.741028][T21120] Call Trace: [ 968.741032][T21120] [ 968.741037][T21120] dump_stack_lvl+0x16c/0x1f0 [ 968.741056][T21120] should_fail_ex+0x512/0x640 [ 968.741068][T21120] ? fs_reclaim_acquire+0xae/0x150 [ 968.741081][T21120] should_failslab+0xc2/0x120 [ 968.741093][T21120] __kmalloc_noprof+0xdd/0x880 [ 968.741108][T21120] ? tomoyo_encode2+0x100/0x3e0 [ 968.741127][T21120] ? tomoyo_encode2+0x100/0x3e0 [ 968.741142][T21120] tomoyo_encode2+0x100/0x3e0 [ 968.741160][T21120] tomoyo_encode+0x29/0x50 [ 968.741176][T21120] tomoyo_realpath_from_path+0x18f/0x6e0 [ 968.741195][T21120] ? tomoyo_profile+0x47/0x60 [ 968.741207][T21120] tomoyo_path_number_perm+0x245/0x580 [ 968.741220][T21120] ? tomoyo_path_number_perm+0x237/0x580 [ 968.741236][T21120] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 968.741278][T21120] ? find_held_lock+0x2b/0x80 [ 968.741294][T21120] ? hook_file_ioctl_common+0x145/0x410 [ 968.741313][T21120] ? __fget_files+0x20e/0x3c0 [ 968.741331][T21120] security_file_ioctl_compat+0x9b/0x240 [ 968.741348][T21120] __ia32_compat_sys_ioctl+0xc3/0x370 [ 968.741364][T21120] __do_fast_syscall_32+0x7c/0x300 [ 968.741380][T21120] do_fast_syscall_32+0x32/0x80 [ 968.741395][T21120] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 968.741414][T21120] RIP: 0023:0xf707d579 [ 968.741424][T21120] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 968.741435][T21120] RSP: 002b:00000000f546d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 968.741446][T21120] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000000089f0 [ 968.741453][T21120] RDX: 0000000080001440 RSI: 0000000000000000 RDI: 0000000000000000 [ 968.741459][T21120] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 968.741466][T21120] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 968.741472][T21120] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 968.741487][T21120] [ 968.796659][T21122] input: syz1 as /devices/virtual/input/input12 [ 968.800597][T21120] ERROR: Out of memory at tomoyo_realpath_from_path. [ 968.819030][T21120] bridge0: port 4(erspan0) entered blocking state [ 968.821988][T21120] bridge0: port 4(erspan0) entered disabled state [ 968.824185][T21120] erspan0: entered allmulticast mode [ 968.826742][T21120] erspan0: entered promiscuous mode [ 968.828715][T21120] bridge0: port 4(erspan0) entered blocking state [ 968.830821][T21120] bridge0: port 4(erspan0) entered forwarding state [ 968.836237][T21123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4292'. [ 969.735119][T21136] bridge0: port 3(erspan0) entered blocking state [ 969.739253][T21136] bridge0: port 3(erspan0) entered disabled state [ 969.742056][T21136] erspan0: entered allmulticast mode [ 969.748465][T21136] erspan0: entered promiscuous mode [ 969.752404][T21136] bridge0: port 3(erspan0) entered blocking state [ 969.755291][T21136] bridge0: port 3(erspan0) entered forwarding state [ 969.764112][T21136] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4296'. [ 970.015484][T21149] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4300'. [ 970.119579][T21156] FAULT_INJECTION: forcing a failure. [ 970.119579][T21156] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 970.125499][T21156] CPU: 0 UID: 0 PID: 21156 Comm: syz.5.4302 Not tainted syzkaller #0 PREEMPT(full) [ 970.125524][T21156] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 970.125535][T21156] Call Trace: [ 970.125542][T21156] [ 970.125550][T21156] dump_stack_lvl+0x16c/0x1f0 [ 970.125578][T21156] should_fail_ex+0x512/0x640 [ 970.125600][T21156] _copy_to_user+0x32/0xd0 [ 970.125621][T21156] bpf_test_finish.isra.0+0x53c/0x6e0 [ 970.125646][T21156] ? __pfx_bpf_test_finish.isra.0+0x10/0x10 [ 970.125665][T21156] ? ktime_get+0x200/0x310 [ 970.125682][T21156] ? lockdep_hardirqs_on+0x7c/0x110 [ 970.125704][T21156] ? find_held_lock+0x2b/0x80 [ 970.125729][T21156] ? bpf_prog_test_run_flow_dissector+0x4b0/0x980 [ 970.125753][T21156] bpf_prog_test_run_flow_dissector+0x5d8/0x980 [ 970.125783][T21156] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 970.125806][T21156] ? find_held_lock+0x2b/0x80 [ 970.125830][T21156] ? __fget_files+0x204/0x3c0 [ 970.125859][T21156] ? __fget_files+0x20e/0x3c0 [ 970.125897][T21156] ? pfn_swap_entry_to_page+0x540/0x540 [ 970.125926][T21156] ? fput+0x9b/0xd0 [ 970.125944][T21156] ? __bpf_prog_get+0x97/0x2a0 [ 970.125963][T21156] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 970.125984][T21156] __sys_bpf+0x1035/0x4980 [ 970.126011][T21156] ? __pfx___sys_bpf+0x10/0x10 [ 970.126034][T21156] ? find_held_lock+0x2b/0x80 [ 970.126063][T21156] ? find_held_lock+0x2b/0x80 [ 970.126093][T21156] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 970.126137][T21156] ? fput+0x9b/0xd0 [ 970.126155][T21156] ? ksys_write+0x1ac/0x250 [ 970.126180][T21156] ? __pfx_ksys_write+0x10/0x10 [ 970.126208][T21156] __ia32_sys_bpf+0x76/0xe0 [ 970.126235][T21156] __do_fast_syscall_32+0x7c/0x300 [ 970.126260][T21156] do_fast_syscall_32+0x32/0x80 [ 970.126282][T21156] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 970.126304][T21156] RIP: 0023:0xf702d579 [ 970.126318][T21156] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 970.126335][T21156] RSP: 002b:00000000f541d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 970.126354][T21156] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000180 [ 970.126365][T21156] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 970.126375][T21156] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 970.126386][T21156] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 970.126397][T21156] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 970.126421][T21156] [ 970.352546][T21166] input: syz1 as /devices/virtual/input/input13 [ 971.227791][T21181] vlan0: entered allmulticast mode [ 971.459157][T21189] __nla_validate_parse: 1 callbacks suppressed [ 971.459170][T21189] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4311'. [ 971.465104][T21189] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4311'. [ 971.541939][T21194] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4313'. [ 971.606933][T21199] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4313'. [ 971.673550][T21192] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 971.678967][T21192] netlink: 'syz.3.4310': attribute type 10 has an invalid length. [ 971.682679][T21192] veth0_vlan: left promiscuous mode [ 971.685615][T21192] veth0_vlan: entered promiscuous mode [ 971.688955][T21192] team0: Device veth0_vlan failed to register rx_handler [ 972.452731][T21224] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4323'. [ 972.460669][T21224] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4323'. [ 972.562526][T21230] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4325'. [ 973.247675][T21247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4332'. [ 973.252282][T21247] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4332'. [ 974.240164][T21276] input: syz1 as /devices/virtual/input/input14 [ 975.339847][ T41] audit: type=1326 audit(2000001048.749:24955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21302 comm="syz.3.4345" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 975.347707][ T41] audit: type=1326 audit(2000001048.749:24956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21302 comm="syz.3.4345" exe="/syz-executor" sig=0 arch=40000003 syscall=293 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 975.355884][ T41] audit: type=1326 audit(2000001048.749:24957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21302 comm="syz.3.4345" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 975.363492][ T41] audit: type=1326 audit(2000001048.749:24958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21302 comm="syz.3.4345" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 975.373767][ T41] audit: type=1326 audit(2000001048.779:24959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21302 comm="syz.3.4345" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 975.385644][ T41] audit: type=1326 audit(2000001048.779:24960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21302 comm="syz.3.4345" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 975.393728][ T41] audit: type=1326 audit(2000001048.779:24961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21302 comm="syz.3.4345" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 975.401497][ T41] audit: type=1326 audit(2000001048.789:24962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21302 comm="syz.3.4345" exe="/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 975.408984][ T41] audit: type=1326 audit(2000001048.789:24963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21302 comm="syz.3.4345" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 975.416331][ T41] audit: type=1326 audit(2000001048.799:24964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21302 comm="syz.3.4345" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 977.057757][T21344] : renamed from lo [ 977.064789][T21344] Cannot find set identified by id 0 to match [ 977.465788][T21353] netlink: 244 bytes leftover after parsing attributes in process `syz.3.4360'. [ 977.642358][T21361] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4363'. [ 977.725504][T21365] fuse: Unknown parameter '' [ 977.731870][T21365] No control pipe specified [ 978.720776][T21392] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 978.725393][T21392] netlink: 'syz.5.4372': attribute type 10 has an invalid length. [ 978.740685][T21392] veth0_vlan: left promiscuous mode [ 978.744736][T21392] veth0_vlan: entered promiscuous mode [ 978.751721][T21392] team0: Device veth0_vlan failed to register rx_handler [ 979.332734][T21409] fuseblk: Bad value for 'fd' [ 979.635786][T21422] netlink: 'syz.6.4383': attribute type 10 has an invalid length. [ 979.638354][T21422] veth0_vlan: left promiscuous mode [ 979.640441][T21422] veth0_vlan: entered promiscuous mode [ 979.643343][T21422] team0: Device veth0_vlan failed to register rx_handler [ 979.720738][T21425] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4384'. [ 979.725768][T21425] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4384'. [ 979.870409][T21435] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4389'. [ 979.873757][T21435] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4389'. [ 979.918205][T21443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4392'. [ 979.922625][T21443] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4392'. [ 979.993838][T21435] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4389'. [ 980.452384][T21470] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4400'. [ 980.457991][T21470] bridge0: port 2(bridge_slave_1) entered disabled state [ 982.853239][ T41] kauditd_printk_skb: 7 callbacks suppressed [ 982.853257][ T41] audit: type=1800 audit(2000001055.572:24972): pid=21519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4417" name="bus" dev="overlay" ino=2105 res=0 errno=0 [ 983.119287][T21523] overlayfs: failed to clone upperpath [ 983.356716][T21532] netlink: 'syz.3.4420': attribute type 13 has an invalid length. [ 983.356731][T21535] netlink: 'syz.3.4420': attribute type 13 has an invalid length. [ 983.433106][T21532] bridge0: port 4(erspan0) entered disabled state [ 983.437062][T21532] syz.3.4420: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 983.442579][T21532] CPU: 3 UID: 0 PID: 21532 Comm: syz.3.4420 Not tainted syzkaller #0 PREEMPT(full) [ 983.442594][T21532] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 983.442600][T21532] Call Trace: [ 983.442604][T21532] [ 983.442609][T21532] dump_stack_lvl+0x16c/0x1f0 [ 983.442627][T21532] warn_alloc+0x248/0x3a0 [ 983.442644][T21532] ? __pfx_warn_alloc+0x10/0x10 [ 983.442665][T21532] ? pfifo_fast_change_tx_queue_len+0x15a/0xb90 [ 983.442684][T21532] ? __vmalloc_node_noprof+0xad/0xf0 [ 983.442699][T21532] __vmalloc_node_range_noprof+0xfe2/0x1480 [ 983.442712][T21532] ? __kasan_kmalloc+0xaa/0xb0 [ 983.442728][T21532] ? pfifo_fast_change_tx_queue_len+0xe7/0xb90 [ 983.442750][T21532] ? pfifo_fast_change_tx_queue_len+0x15a/0xb90 [ 983.442772][T21532] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 983.442788][T21532] ? ___kmalloc_large_node+0xed/0x160 [ 983.442803][T21532] __kvmalloc_node_noprof+0x431/0x9c0 [ 983.442820][T21532] ? pfifo_fast_change_tx_queue_len+0x15a/0xb90 [ 983.442840][T21532] ? pfifo_fast_change_tx_queue_len+0x15a/0xb90 [ 983.442861][T21532] ? pfifo_fast_change_tx_queue_len+0x15a/0xb90 [ 983.442880][T21532] pfifo_fast_change_tx_queue_len+0x15a/0xb90 [ 983.442900][T21532] ? ib_device_get_by_netdev+0x1c2/0x520 [ 983.442913][T21532] ? vxlan_netdevice_event+0x11f/0x370 [ 983.442927][T21532] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 983.442941][T21532] ? __pfx_pfifo_fast_change_tx_queue_len+0x10/0x10 [ 983.442974][T21532] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 983.442993][T21532] ? ip6_route_dev_notify+0xe4/0x750 [ 983.443012][T21532] ? __pfx_pfifo_fast_change_tx_queue_len+0x10/0x10 [ 983.443030][T21532] dev_qdisc_change_tx_queue_len+0x169/0x380 [ 983.443046][T21532] netif_change_tx_queue_len+0x1a1/0x1e0 [ 983.443060][T21532] ? __pfx_netif_change_tx_queue_len+0x10/0x10 [ 983.443075][T21532] ? netif_change_flags+0x10d/0x160 [ 983.443088][T21532] do_setlink.constprop.0+0xd00/0x4380 [ 983.443106][T21532] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 983.443123][T21532] ? __lock_acquire+0xb8a/0x1c90 [ 983.443141][T21532] ? __mutex_trylock_common+0xe9/0x250 [ 983.443153][T21532] ? __pfx___mutex_trylock_common+0x10/0x10 [ 983.443167][T21532] ? __pfx___might_resched+0x10/0x10 [ 983.443183][T21532] ? rcu_is_watching+0x12/0xc0 [ 983.443200][T21532] ? trace_contention_end+0xdd/0x130 [ 983.443212][T21532] ? __mutex_lock+0x1c5/0x1060 [ 983.443227][T21532] ? __nla_validate_parse+0x600/0x2880 [ 983.443243][T21532] ? rcu_is_watching+0x12/0xc0 [ 983.443261][T21532] ? __pfx___mutex_lock+0x10/0x10 [ 983.443284][T21532] rtnl_newlink+0x18e0/0x2000 [ 983.443302][T21532] ? __pfx_rtnl_newlink+0x10/0x10 [ 983.443317][T21532] ? kmem_cache_free+0x2d4/0x6c0 [ 983.443333][T21532] ? kfree_skbmem+0x1a4/0x1f0 [ 983.443351][T21532] ? kfree_skbmem+0x1a4/0x1f0 [ 983.443368][T21532] ? __lock_acquire+0x622/0x1c90 [ 983.443381][T21532] ? rcu_is_watching+0x12/0xc0 [ 983.443401][T21532] ? find_held_lock+0x2b/0x80 [ 983.443416][T21532] ? __pfx_rtnl_newlink+0x10/0x10 [ 983.443428][T21532] ? __pfx_rtnl_newlink+0x10/0x10 [ 983.443440][T21532] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 983.443453][T21532] ? __pfx_rtnl_newlink+0x10/0x10 [ 983.443466][T21532] rtnetlink_rcv_msg+0x95e/0xe90 [ 983.443481][T21532] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 983.443498][T21532] ? ref_tracker_free+0x37c/0x830 [ 983.443511][T21532] netlink_rcv_skb+0x158/0x420 [ 983.443525][T21532] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 983.443539][T21532] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 983.443558][T21532] ? netlink_deliver_tap+0x1ae/0xd30 [ 983.443573][T21532] netlink_unicast+0x5aa/0x870 [ 983.443588][T21532] ? __pfx_netlink_unicast+0x10/0x10 [ 983.443601][T21532] ? __pfx___might_resched+0x10/0x10 [ 983.443621][T21532] netlink_sendmsg+0x8c8/0xdd0 [ 983.443636][T21532] ? __pfx_netlink_sendmsg+0x10/0x10 [ 983.443651][T21532] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 983.443667][T21532] ____sys_sendmsg+0xa98/0xc70 [ 983.443682][T21532] ? btrfs_resume_dev_replace_async+0x400/0x6d0 [ 983.443700][T21532] ? __pfx_____sys_sendmsg+0x10/0x10 [ 983.443715][T21532] ? get_compat_msghdr+0x11a/0x170 [ 983.443730][T21532] ? __pfx_futex_wake_mark+0x10/0x10 [ 983.443746][T21532] ___sys_sendmsg+0x134/0x1d0 [ 983.443759][T21532] ? __pfx____sys_sendmsg+0x10/0x10 [ 983.443778][T21532] ? find_held_lock+0x2b/0x80 [ 983.443802][T21532] __sys_sendmsg+0x16d/0x220 [ 983.443815][T21532] ? __pfx___sys_sendmsg+0x10/0x10 [ 983.443827][T21532] ? __ia32_sys_futex_time32+0x1d9/0x460 [ 983.443846][T21532] ? rcu_is_watching+0x12/0xc0 [ 983.443864][T21532] __do_fast_syscall_32+0x7c/0x300 [ 983.443880][T21532] do_fast_syscall_32+0x32/0x80 [ 983.443895][T21532] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 983.443910][T21532] RIP: 0023:0xf707d579 [ 983.443919][T21532] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 983.443930][T21532] RSP: 002b:00000000f544c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 983.443940][T21532] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 0000000080000180 [ 983.443947][T21532] RDX: 0000000004000c00 RSI: 0000000000000000 RDI: 0000000000000000 [ 983.443954][T21532] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 983.443960][T21532] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 983.443971][T21532] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 983.443985][T21532] [ 983.444114][T21532] Mem-Info: [ 983.614932][T21532] active_anon:2045 inactive_anon:20782 isolated_anon:0 [ 983.614932][T21532] active_file:3560 inactive_file:10807 isolated_file:0 [ 983.614932][T21532] unevictable:1768 dirty:21 writeback:0 [ 983.614932][T21532] slab_reclaimable:7322 slab_unreclaimable:61819 [ 983.614932][T21532] mapped:25286 shmem:21188 pagetables:1564 [ 983.614932][T21532] sec_pagetables:328 bounce:0 [ 983.614932][T21532] kernel_misc_reclaimable:0 [ 983.614932][T21532] free:51931 free_pcp:10122 free_cma:0 [ 983.628955][T21532] Node 0 active_anon:608kB inactive_anon:112kB active_file:8kB inactive_file:24kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:20kB dirty:8kB writeback:0kB shmem:4028kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8120kB pagetables:1512kB sec_pagetables:1160kB all_unreclaimable? yes Balloon:0kB [ 983.640121][T21532] Node 1 active_anon:7588kB inactive_anon:83016kB active_file:14232kB inactive_file:43204kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:101184kB dirty:76kB writeback:0kB shmem:80724kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6640kB pagetables:4780kB sec_pagetables:152kB all_unreclaimable? no Balloon:0kB [ 983.650004][T21532] Node 0 DMA free:2084kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:396kB local_pcp:8kB free_cma:0kB [ 983.659294][T21532] lowmem_reserve[]: 0 292 292 292 292 [ 983.661021][T21532] Node 0 DMA32 free:17180kB boost:0kB min:13448kB low:16808kB high:20168kB reserved_highatomic:2048KB free_highatomic:16KB active_anon:616kB inactive_anon:188kB active_file:8kB inactive_file:24kB unevictable:3536kB writepending:0kB zspages:1672kB present:1032196kB managed:299556kB mlocked:0kB bounce:0kB free_pcp:8228kB local_pcp:2128kB free_cma:0kB [ 983.671262][T21532] lowmem_reserve[]: 0 0 0 0 0 [ 983.673631][T21532] Node 1 DMA32 free:190052kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:2048KB free_highatomic:1984KB active_anon:7488kB inactive_anon:83016kB active_file:14232kB inactive_file:43204kB unevictable:3536kB writepending:0kB zspages:4568kB present:1048432kB managed:948220kB mlocked:0kB bounce:0kB free_pcp:30856kB local_pcp:17140kB free_cma:0kB [ 983.684577][T21532] lowmem_reserve[]: 0 0 0 0 0 [ 983.686411][T21532] Node 0 DMA: 7*4kB (UM) 11*8kB (UM) 19*16kB (UM) 10*32kB (UM) 3*64kB (UM) 1*128kB (M) 0*256kB 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2084kB [ 983.691008][T21532] Node 0 DMA32: 209*4kB (UMEH) 160*8kB (UMEH) 35*16kB (UM) 82*32kB (UME) 44*64kB (UME) 19*128kB (UME) 8*256kB (UME) 7*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 17204kB [ 983.696666][T21532] Node 1 DMA32: 2296*4kB (UMEH) 1747*8kB (UMEH) 1033*16kB (UMEH) 919*32kB (UMEH) 453*64kB (UMEH) 249*128kB (UMEH) 116*256kB (UMEH) 52*512kB (UMH) 20*1024kB (UM) 7*2048kB (UM) 0*4096kB = 221096kB [ 983.702926][T21532] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 983.706241][T21532] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 983.709474][T21532] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 983.713052][T21532] Node 1 hugepages_total=4 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 983.716748][T21532] 35965 total pagecache pages [ 983.718302][T21532] 711 pages in swap cache [ 983.719685][T21532] Free swap = 86684kB [ 983.721114][T21532] Total swap = 124996kB [ 983.722468][T21532] 524155 pages RAM [ 983.723682][T21532] 0 pages HighMem/MovableOnly [ 983.725274][T21532] 208371 pages reserved [ 983.727325][T21532] 0 pages cma reserved [ 983.730459][T21532] erspan0: refused to change device tx_queue_len [ 983.732503][T21532] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 983.741693][T21535] erspan0: refused to change device tx_queue_len [ 983.743720][T21535] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 983.752815][T21539] netlink: 'syz.0.4421': attribute type 10 has an invalid length. [ 983.756872][T21539] veth0_vlan: left promiscuous mode [ 983.759686][T21539] veth0_vlan: entered promiscuous mode [ 983.762933][T21539] team0: Device veth0_vlan failed to register rx_handler [ 983.777107][T21541] __nla_validate_parse: 6 callbacks suppressed [ 983.777118][T21541] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4422'. [ 983.801788][T21541] FAULT_INJECTION: forcing a failure. [ 983.801788][T21541] name failslab, interval 1, probability 0, space 0, times 0 [ 983.816089][T21541] CPU: 3 UID: 0 PID: 21541 Comm: syz.3.4422 Not tainted syzkaller #0 PREEMPT(full) [ 983.816108][T21541] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 983.816115][T21541] Call Trace: [ 983.816119][T21541] [ 983.816124][T21541] dump_stack_lvl+0x16c/0x1f0 [ 983.816144][T21541] should_fail_ex+0x512/0x640 [ 983.816155][T21541] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 983.816168][T21541] should_failslab+0xc2/0x120 [ 983.816181][T21541] kmem_cache_alloc_noprof+0x75/0x6e0 [ 983.816197][T21541] ? skb_clone+0x190/0x3f0 [ 983.816218][T21541] ? skb_clone+0x190/0x3f0 [ 983.816229][T21541] skb_clone+0x190/0x3f0 [ 983.816242][T21541] netlink_deliver_tap+0xabd/0xd30 [ 983.816258][T21541] netlink_unicast+0x71f/0x870 [ 983.816273][T21541] ? __pfx_netlink_unicast+0x10/0x10 [ 983.816287][T21541] ? genl_rcv_msg+0x4bb/0x800 [ 983.816306][T21541] netlink_ack+0x696/0xb80 [ 983.816323][T21541] netlink_rcv_skb+0x332/0x420 [ 983.816336][T21541] ? __pfx_genl_rcv_msg+0x10/0x10 [ 983.816352][T21541] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 983.816371][T21541] ? netlink_deliver_tap+0x1ae/0xd30 [ 983.816386][T21541] genl_rcv+0x28/0x40 [ 983.816399][T21541] netlink_unicast+0x5aa/0x870 [ 983.816414][T21541] ? __pfx_netlink_unicast+0x10/0x10 [ 983.816433][T21541] netlink_sendmsg+0x8c8/0xdd0 [ 983.816448][T21541] ? __pfx_netlink_sendmsg+0x10/0x10 [ 983.816464][T21541] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 983.816479][T21541] ____sys_sendmsg+0xa98/0xc70 [ 983.816496][T21541] ? __pfx_____sys_sendmsg+0x10/0x10 [ 983.816566][T21541] ? get_compat_msghdr+0x11a/0x170 [ 983.816604][T21541] ___sys_sendmsg+0x134/0x1d0 [ 983.816626][T21541] ? __pfx____sys_sendmsg+0x10/0x10 [ 983.816659][T21541] ? find_held_lock+0x2b/0x80 [ 983.816696][T21541] __sys_sendmsg+0x16d/0x220 [ 983.816709][T21541] ? __pfx___sys_sendmsg+0x10/0x10 [ 983.816727][T21541] ? rcu_is_watching+0x12/0xc0 [ 983.816746][T21541] __do_fast_syscall_32+0x7c/0x300 [ 983.816764][T21541] do_fast_syscall_32+0x32/0x80 [ 983.816779][T21541] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 983.816794][T21541] RIP: 0023:0xf707d579 [ 983.816804][T21541] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 983.816816][T21541] RSP: 002b:00000000f546d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 983.816827][T21541] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 983.816834][T21541] RDX: 0000000000042000 RSI: 0000000000000000 RDI: 0000000000000000 [ 983.816841][T21541] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 983.816848][T21541] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 983.816855][T21541] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 983.816869][T21541] [ 983.907069][T21543] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4425'. [ 983.983219][T21543] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4425'. [ 984.866436][T21568] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 984.871587][T21568] netlink: 'syz.5.4432': attribute type 10 has an invalid length. [ 984.875058][T21568] veth0_vlan: left promiscuous mode [ 984.878648][T21568] veth0_vlan: entered promiscuous mode [ 984.882762][T21568] team0: Device veth0_vlan failed to register rx_handler [ 984.965206][T21572] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4434'. [ 985.180711][T21578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4436'. [ 985.459033][T21589] syz.5.4439 (21589): /proc/21587/oom_adj is deprecated, please use /proc/21587/oom_score_adj instead. [ 986.100006][T21600] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 986.103519][T21600] netlink: 'syz.3.4442': attribute type 10 has an invalid length. [ 986.106170][T21600] veth0_vlan: left promiscuous mode [ 986.108481][T21600] veth0_vlan: entered promiscuous mode [ 986.110777][T21600] team0: Device veth0_vlan failed to register rx_handler [ 986.569541][T21615] netlink: 244 bytes leftover after parsing attributes in process `syz.5.4444'. [ 987.082610][T21618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4446'. [ 988.212570][T21640] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4452'. [ 988.217574][T21640] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4452'. [ 988.305519][T21641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4451'. [ 988.362593][T21641] bridge0: port 4(erspan0) entered blocking state [ 988.364727][T21641] bridge0: port 4(erspan0) entered forwarding state [ 988.389035][T21641] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 988.921143][T21655] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4455'. [ 989.226970][T21677] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4462'. [ 989.231231][T21677] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4462'. [ 989.422444][T21675] netlink: 'syz.0.4461': attribute type 10 has an invalid length. [ 989.425075][T21675] veth0_vlan: left promiscuous mode [ 989.427242][T21675] veth0_vlan: entered promiscuous mode [ 989.429473][T21675] team0: Device veth0_vlan failed to register rx_handler [ 989.479109][T21685] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4465'. [ 989.650708][T21700] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4471'. [ 989.654323][T21700] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4471'. [ 990.313684][T21716] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4475'. [ 990.318531][T21716] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4475'. [ 990.569530][T21725] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 990.574779][T21725] netlink: 'syz.3.4476': attribute type 10 has an invalid length. [ 990.578271][T21725] veth0_vlan: left promiscuous mode [ 990.581389][T21725] veth0_vlan: entered promiscuous mode [ 990.588494][T21725] team0: Device veth0_vlan failed to register rx_handler [ 990.599038][T21727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4480'. [ 990.605546][T21727] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4480'. [ 990.972770][T21733] netlink: 'syz.6.4482': attribute type 10 has an invalid length. [ 990.976201][T21733] veth0_vlan: left promiscuous mode [ 990.978956][T21733] veth0_vlan: entered promiscuous mode [ 990.982877][T21733] team0: Device veth0_vlan failed to register rx_handler [ 992.243071][T21772] netlink: 'syz.6.4493': attribute type 10 has an invalid length. [ 992.245810][T21772] veth0_vlan: left promiscuous mode [ 992.247865][T21772] veth0_vlan: entered promiscuous mode [ 992.250543][T21772] team0: Device veth0_vlan failed to register rx_handler [ 992.366154][T21770] mkiss: ax0: crc mode is auto. [ 992.394496][T21774] overlayfs: failed to clone upperpath [ 993.635166][ T30] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 993.815342][ T30] usb 10-1: Using ep0 maxpacket: 8 [ 993.821188][ T30] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 993.824386][ T30] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 993.828409][ T30] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 993.832260][ T30] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 993.836387][ T30] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 993.841592][ T30] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 993.845254][ T30] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.922119][T21800] bridge0: port 4(erspan0) entered disabled state [ 993.933873][T21800] bridge0: port 3(batadv1) entered disabled state [ 993.936051][T21800] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.943040][T21800] tipc: Resetting bearer [ 993.961200][T21804] __nla_validate_parse: 3 callbacks suppressed [ 993.961218][T21804] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4502'. [ 993.991224][T21800] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 993.997481][T21800] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 994.056496][T21795] syz.5.4500 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 994.060895][ T30] usb 10-1: usb_control_msg returned -32 [ 994.064987][ T30] usbtmc 10-1:16.0: can't read capabilities [ 994.084722][T19032] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 994.088478][T19032] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.091713][T19032] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 994.094866][T19032] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.097998][T19032] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 994.101053][T19032] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.104107][T19032] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 994.107188][T19032] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.226779][T21816] netlink: 'syz.3.4506': attribute type 3 has an invalid length. [ 994.244874][ T41] audit: type=1804 audit(2000001067.621:24973): pid=21817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4504" name="bus" dev="tmpfs" ino=2438 res=1 errno=0 [ 994.313439][T21818] netlink: 'syz.6.4505': attribute type 10 has an invalid length. [ 994.316936][T21818] veth0_vlan: left promiscuous mode [ 994.319726][T21818] veth0_vlan: entered promiscuous mode [ 994.323401][T21818] team0: Device veth0_vlan failed to register rx_handler [ 994.444126][T21822] usbtmc 10-1:16.0: INDICATOR_PULSE returned 0 [ 994.673329][ T844] usb 10-1: USB disconnect, device number 25 [ 994.710284][ T64] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 994.714169][ T64] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 994.718087][ T64] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 994.721093][ T64] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 994.723540][ T64] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 994.785669][ T6027] usb 11-1: USB disconnect, device number 7 [ 995.088915][T19032] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.104408][T21825] chnl_net:caif_netlink_parms(): no params data found [ 995.226122][T19032] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.251407][T21825] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.254947][T21825] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.259271][T21825] bridge_slave_0: entered allmulticast mode [ 995.263007][T21825] bridge_slave_0: entered promiscuous mode [ 995.277561][T21825] bridge0: port 2(bridge_slave_1) entered blocking state [ 995.280525][T21841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4512'. [ 995.280962][T21825] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.287870][T21825] bridge_slave_1: entered allmulticast mode [ 995.290579][T21825] bridge_slave_1: entered promiscuous mode [ 995.340593][T21845] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4512'. [ 995.404772][T19032] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.463332][T21825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 995.471011][T21825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 995.532930][T19032] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.559239][T21825] team0: Port device team_slave_0 added [ 995.565305][T21825] team0: Port device team_slave_1 added [ 995.609168][T21825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 995.611724][T21825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 995.623579][T21825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 995.631058][T21825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 995.633877][T21825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 995.645164][T21825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 995.687092][T21851] input: syz1 as /devices/virtual/input/input18 [ 995.750466][T21825] hsr_slave_0: entered promiscuous mode [ 995.753366][T21825] hsr_slave_1: entered promiscuous mode [ 995.842098][T19032] erspan0: left allmulticast mode [ 995.843823][T19032] erspan0: left promiscuous mode [ 995.845713][T19032] bridge0: port 3(erspan0) entered disabled state [ 995.857679][T19032] bridge_slave_1: left allmulticast mode [ 995.860131][T19032] bridge_slave_1: left promiscuous mode [ 995.862887][T19032] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.867926][T19032] bridge_slave_0: left allmulticast mode [ 995.870294][T19032] bridge_slave_0: left promiscuous mode [ 995.872150][T19032] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.902351][T19032] bond_slave_0: left promiscuous mode [ 995.904710][T19032] @0: left promiscuous mode [ 996.178749][T19032] bridge0 (unregistering): left allmulticast mode [ 996.651506][T19032] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 996.664600][T19032] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 996.673731][T19032] bond0 (unregistering): (slave c@0): Releasing backup interface [ 996.679126][T19032] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 996.682624][T19032] bond0 (unregistering): Released all slaves [ 996.763419][ T5960] Bluetooth: hci1: command tx timeout [ 996.788983][T19032] bond1 (unregistering): Released all slaves [ 996.796439][T19032] bond2 (unregistering): Released all slaves [ 996.887555][T19032] bond3 (unregistering): (slave veth3): Releasing active interface [ 996.890284][T19032] veth0_to_bond: entered promiscuous mode [ 996.894188][T19032] bond3 (unregistering): (slave veth0_to_bond): Releasing active interface [ 996.898153][T19032] bond3 (unregistering): Released all slaves [ 997.002295][T21860] mkiss: ax0: crc mode is auto. [ 997.015632][T19032] : left promiscuous mode [ 997.092864][T21874] 9pnet_fd: Insufficient options for proto=fd [ 997.115488][T19032] 9: left promiscuous mode [ 997.248012][T21884] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4520'. [ 997.272931][T21884] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4520'. [ 997.323928][T21890] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4523'. [ 997.327257][T21890] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4523'. [ 997.621776][T19032] hsr_slave_0: left promiscuous mode [ 997.623902][T19032] 0: left promiscuous mode [ 997.625627][T19032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 997.627999][T19032] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 997.647090][T19032] veth1_macvtap: left promiscuous mode [ 997.649193][T19032] veth0_macvtap: left promiscuous mode [ 997.650925][T19032] veth1_vlan: left promiscuous mode [ 997.742687][T19032] pimreg3 (unregistering): left allmulticast mode [ 997.990383][T21908] JFS: discard option not supported on device [ 998.076546][T21908] Mount JFS Failure: -22 [ 998.079220][T21908] jfs_mount failed w/return code = -22 [ 998.835670][ T5960] Bluetooth: hci1: command tx timeout [ 998.916430][T19032] team0 (unregistering): Port device team_slave_1 removed [ 998.994300][T19032] team0 (unregistering): Port device team_slave_0 removed [ 999.885377][T21825] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 999.899262][T21825] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 999.918639][T21825] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 999.930341][T21825] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1000.001006][T21943] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4531'. [ 1000.011021][T21943] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4531'. [ 1000.049222][T21825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1000.070656][T21825] 8021q: adding VLAN 0 to HW filter on device team0 [ 1000.083249][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.085590][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1000.093230][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 1000.095497][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1012.306271][T22231] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 1012.323031][T22231] netlink: 'syz.3.4598': attribute type 4 has an invalid length. [ 1012.333538][T22231] netlink: 'syz.3.4598': attribute type 4 has an invalid length. [ 1012.631882][T22233] pim6reg: entered allmulticast mode [ 1012.655387][T22233] pim6reg: left allmulticast mode [ 1013.303558][T22236] FAULT_INJECTION: forcing a failure. [ 1013.303558][T22236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1013.312916][T22236] CPU: 2 UID: 0 PID: 22236 Comm: syz.3.4599 Not tainted syzkaller #0 PREEMPT(full) [ 1013.312935][T22236] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1013.312942][T22236] Call Trace: [ 1013.312946][T22236] [ 1013.312951][T22236] dump_stack_lvl+0x16c/0x1f0 [ 1013.312969][T22236] should_fail_ex+0x512/0x640 [ 1013.312983][T22236] copy_fpstate_to_sigframe+0x854/0xaf0 [ 1013.312997][T22236] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 1013.313008][T22236] ? posixtimer_deliver_signal+0x105/0x6b0 [ 1013.313025][T22236] ? posixtimer_deliver_signal+0x1c7/0x6b0 [ 1013.313038][T22236] ? x86_task_fpu+0x5f/0x90 [ 1013.313056][T22236] get_sigframe+0x4a8/0x9c0 [ 1013.313075][T22236] ? __pfx_get_sigframe+0x10/0x10 [ 1013.313093][T22236] ? _raw_spin_unlock_irq+0x23/0x50 [ 1013.313106][T22236] ? siginfo_layout+0x177/0x290 [ 1013.313124][T22236] ia32_setup_rt_frame+0xe3/0xb30 [ 1013.313139][T22236] ? evdev_ioctl_compat+0x7e/0x1a0 [ 1013.313155][T22236] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 1013.313172][T22236] arch_do_signal_or_restart+0x471/0x790 [ 1013.313191][T22236] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1013.313212][T22236] ? evdev_ioctl_compat+0x7e/0x1a0 [ 1013.313229][T22236] exit_to_user_mode_loop+0x85/0x130 [ 1013.313244][T22236] __do_fast_syscall_32+0x240/0x300 [ 1013.313260][T22236] do_fast_syscall_32+0x32/0x80 [ 1013.313276][T22236] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1013.313290][T22236] RIP: 0023:0xf707d579 [ 1013.313300][T22236] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1013.313311][T22236] RSP: 002b:00000000f546d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1013.313322][T22236] RAX: fffffffffffffffc RBX: 0000000000000006 RCX: 00000000400445a0 [ 1013.313329][T22236] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1013.313335][T22236] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1013.313342][T22236] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1013.313348][T22236] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1013.313362][T22236] [ 1466.398163][T19024] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1466.401549][T19024] CPU: 3 UID: 0 PID: 19024 Comm: kworker/u32:17 Not tainted syzkaller #0 PREEMPT(full) [ 1466.407056][T19024] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1466.410593][T19024] Workqueue: netns cleanup_net [ 1466.412173][T19024] Call Trace: [ 1466.413273][T19024] [ 1466.414260][T19024] dump_stack_lvl+0x3d/0x1f0 [ 1466.415828][T19024] vpanic+0x640/0x6f0 [ 1466.417167][T19024] ? xfrm6_tunnel_net_exit+0x9f/0x160 [ 1466.419231][T19024] panic+0xca/0xd0 [ 1466.420964][T19024] ? __pfx_panic+0x10/0x10 [ 1466.422930][T19024] ? check_panic_on_warn+0x1f/0xb0 [ 1466.425280][T19024] check_panic_on_warn+0xab/0xb0 [ 1466.427603][T19024] __warn+0xf6/0x3c0 [ 1466.429308][T19024] ? xfrm6_tunnel_net_exit+0x9f/0x160 [ 1466.431716][T19024] report_bug+0x3c3/0x580 [ 1466.433567][T19024] ? xfrm6_tunnel_net_exit+0x9f/0x160 [ 1466.435895][T19024] handle_bug+0x184/0x210 [ 1466.437747][T19024] exc_invalid_op+0x17/0x50 [ 1466.439593][T19024] asm_exc_invalid_op+0x1a/0x20 [ 1466.441192][T19024] RIP: 0010:xfrm6_tunnel_net_exit+0x9f/0x160 [ 1466.443176][T19024] Code: 00 00 00 49 8d 3c dc 48 89 f8 48 c1 e8 03 42 80 3c 28 00 0f 85 bd 00 00 00 89 e8 49 8b 04 c4 48 85 c0 74 ab e8 42 58 97 f7 90 <0f> 0b 90 eb a0 4d 8d ac 24 00 08 00 00 31 db 49 be 00 00 00 00 00 [ 1466.449531][T19024] RSP: 0018:ffffc9000750fa90 EFLAGS: 00010293 [ 1466.451541][T19024] RAX: 0000000000000000 RBX: 0000000000000000 RCX: fffff52000ea1f23 [ 1466.454064][T19024] RDX: ffff888021bb0000 RSI: ffffffff8a2561be RDI: ffff888024f4c000 [ 1466.456594][T19024] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 1466.459508][T19024] R10: ffffffff908370d7 R11: 0000000000000001 R12: ffff888024f4c000 [ 1466.462867][T19024] R13: dffffc0000000000 R14: fffffbfff2060ca8 R15: ffffffff90306520 [ 1466.466265][T19024] ? xfrm6_tunnel_net_exit+0x9e/0x160 [ 1466.468572][T19024] ? __pfx_xfrm6_tunnel_net_exit+0x10/0x10 [ 1466.471155][T19024] ops_undo_list+0x2ee/0xab0 [ 1466.473200][T19024] ? __pfx_ops_undo_list+0x10/0x10 [ 1466.475349][T19024] ? cleanup_net+0x347/0x8b0 [ 1466.477308][T19024] ? idr_destroy+0x62/0x2e0 [ 1466.479249][T19024] cleanup_net+0x41b/0x8b0 [ 1466.481184][T19024] ? __pfx_cleanup_net+0x10/0x10 [ 1466.483360][T19024] ? rcu_is_watching+0x12/0xc0 [ 1466.485763][T19024] process_one_work+0x9cf/0x1b70 [ 1466.487908][T19024] ? __pfx_rds_connect_worker+0x10/0x10 [ 1466.490250][T19024] ? __pfx_process_one_work+0x10/0x10 [ 1466.492543][T19024] ? assign_work+0x1a0/0x250 [ 1466.494456][T19024] worker_thread+0x6c8/0xf10 [ 1466.496435][T19024] ? __pfx_worker_thread+0x10/0x10 [ 1466.498512][T19024] kthread+0x3c5/0x780 [ 1466.500191][T19024] ? __pfx_kthread+0x10/0x10 [ 1466.502115][T19024] ? rcu_is_watching+0x12/0xc0 [ 1466.504112][T19024] ? __pfx_kthread+0x10/0x10 [ 1466.506072][T19024] ret_from_fork+0x675/0x7d0 [ 1466.508131][T19024] ? __pfx_kthread+0x10/0x10 [ 1466.509842][T19024] ret_from_fork_asm+0x1a/0x30 [ 1466.511796][T19024] [ 1466.513862][T19024] Kernel Offset: disabled [ 1466.515734][T19024] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:29:22 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000001 RBX=0000000000000009 RCX=0000000000000007 RDX=019f880fb455d200 RSI=ffff888023bfafb0 RDI=ffff888023bfa480 RBP=ffffc90003edf8c0 RSP=ffffc90003edf820 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffff888023bfafb0 R13=0000000000000200 R14=0000000000000000 R15=ffff888023bfa480 RIP=ffffffff81988676 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880977d8000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002d81aff8 CR3=0000000051e10000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a16b2e242f07626 6e9ba08b11a92034 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0c595d9835288ec6 0d37308ff3d1da9e ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e20a523564185670 098122635bee2d73 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d18f00a01f6f6402 4140df34c78a3c90 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000100 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000037a00000000 d394f14003d52d97 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000037a 000000000000037a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000037a18f52d04 ccc726b41a485348 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d39b75c007e60bcc 00000000ccc70108 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1cc18c5594904cd1 c8ff86cc510b58d8 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e3ba73a47d0951ba 8184140584da38cc ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000003546e8f RBX=0000000000000001 RCX=ffffffff8b64d2a9 RDX=ffffed1005666656 RSI=ffffffff8db035cd RDI=ffffffff8bf1e340 RBP=ffffed1003b5e490 RSP=ffffc9000046fde8 R8 =0000000000000001 R9 =ffffed1005666655 R10=ffff88802b3332ab R11=0000000000000001 R12=0000000000000001 R13=ffff88801daf2480 R14=ffffffff908370d0 R15=0000000000000000 RIP=ffffffff8b64bd5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880978d8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000033dc9ffc CR3=0000000051e10000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000012800000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 EAX=816df21f EBX=00000012 ECX=00000000 EDX=0000121f ESI=816df21e EDI=ffffffff EBP=f7430000 ESP=ffee3d58 EIP=f709e734 EFL=00000246 [---Z-P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0023 00000000 ffffffff 00c0fb00 DPL=3 CS32 [-RA] SS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 00000000 ffffffff 00c00000 GS =0063 56a77440 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 00000000 ffffffff 00c00000 TR =0040 00091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000312d6ff8 CR3=0000000078aca000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000057800000000 0000001400000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff852e2365 RDI=ffffffff9adfaec0 RBP=ffffffff9adfae80 RSP=ffffc9000750f2d8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000030 R14=ffffffff9adfae80 R15=ffffffff852e2300 RIP=ffffffff852e238f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097ad8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f1fccdd4 CR3=0000000078aca000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f73c5ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000