last executing test programs: 3m4.88252288s ago: executing program 0 (id=340): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e000030a08000a00", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r1 = fsopen(&(0x7f0000000140)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, 0x0) r3 = fsmount(r1, 0x0, 0x0) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x89901) r5 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r5, 0x0, 0x0) r6 = syz_open_dev$video4linux(&(0x7f00000005c0), 0x2, 0x40) ioctl$VIDIOC_S_STD(r6, 0x40085618, &(0x7f0000000600)=0xb000) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./sys\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x2, 0x0) write(r7, &(0x7f0000000480)='acpi_pm', 0x7) write(r7, &(0x7f00000004c0)='j', 0x1) move_mount(r4, &(0x7f0000000200)='.\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./bus\x00', 0x0) rename(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='./file0\x00') mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='zonefs\x00', 0x6, &(0x7f0000000100)='\x00') 3m4.728387781s ago: executing program 0 (id=335): r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000300)={0x11, 0x63dcbf62d8600606, 0x0, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0xf8ff, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe5}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6ff}, 0x94) 3m4.727423891s ago: executing program 0 (id=338): r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000380), 0x0, 0x20000) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000440)={0x6, @remote, 0x5000, 0x0, 'rr\x00', 0x4, 0x0, 0xffffffff}, 0x2c) r1 = syz_clone(0xa1c68400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r1, 0x0) sched_getparam(r1, &(0x7f0000000000)) syz_emit_ethernet(0x36, &(0x7f0000000580)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @remote}, {{0x1234, 0x5000, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, 0x1000}}}}}}, 0x0) 3m4.656826954s ago: executing program 0 (id=342): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000240), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000002c0)='./bus\x00') mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x5, 0x4, &(0x7f00000005c0)=@framed={{}, [@ldst={0x4, 0x0, 0x4}]}, &(0x7f0000000600)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x20}, 0x94) write(r0, &(0x7f00000003c0)='27', 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x30, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x30}}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBLED(r4, 0x560b, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="90000000000101060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c000280050001000600000006000200001500000600030004d20000080007000000012c0c00058008000100"], 0x90}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x210c, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing\x00', 0x1ff) 3m4.587917473s ago: executing program 0 (id=344): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @random="d976f308c05c"}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = dup3(r4, r3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, 0x0, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) landlock_create_ruleset(&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x504e53003982a49c, 0x6, 0x1}, 0x30, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x80}}, 0x0) (async) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0800080007030300020014000000ffffffff810065"], 0x36) 3m4.326372588s ago: executing program 0 (id=347): ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000100)={0xffffffff, 0x6e7, 0x6, 0x6, 0xc, "c7000000000900b016d5a900"}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x20, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x25a03, 0x6536d5ef40a93735}}, 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x5, 0x7, 0xa, 0x4000000000000e52, 0x800000000001, 0x5459, 0x1041, 0x200200000006, 0x0, 0x400000001, 0x4, 0x100000000, 0x4, 0x40000000009, 0x8000000000005, 0x800040068], 0x54000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 56) 3m4.265900458s ago: executing program 32 (id=347): ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000100)={0xffffffff, 0x6e7, 0x6, 0x6, 0xc, "c7000000000900b016d5a900"}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x20, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x25a03, 0x6536d5ef40a93735}}, 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x5, 0x7, 0xa, 0x4000000000000e52, 0x800000000001, 0x5459, 0x1041, 0x200200000006, 0x0, 0x400000001, 0x4, 0x100000000, 0x4, 0x40000000009, 0x8000000000005, 0x800040068], 0x54000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 56) 2m46.340420688s ago: executing program 3 (id=621): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x4f, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff028}, {0x6, 0x0, 0x4}]}, 0x10) 2m46.27854638s ago: executing program 3 (id=622): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x4001}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x6484c2, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000005c0)={'syzkaller0\x00', @remote}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000800)="600000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f0000000840)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 2m46.168419577s ago: executing program 3 (id=626): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f00000000c0)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'gre0\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x8, 0x20, 0x4c9, 0x7fffffff, {{0x23, 0x4, 0x1, 0x3, 0x8c, 0x64, 0x0, 0x4, 0x7f, 0x0, @local, @loopback, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x10, 0x8d, 0x0, 0xa, [0xa1, 0x2, 0x5]}, @timestamp_addr={0x44, 0xc, 0x7a, 0x1, 0x5, [{@local, 0x8}]}, @timestamp_addr={0x44, 0x2c, 0x72, 0x1, 0x7, [{@private=0xa010100, 0x9}, {@empty}, {@loopback, 0xc52c}, {@loopback}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x30}]}, @ssrr={0x89, 0x2b, 0x5a, [@multicast2, @rand_addr=0x64010102, @broadcast, @dev={0xac, 0x14, 0x14, 0x1e}, @rand_addr=0x64010102, @remote, @empty, @rand_addr=0x64010101, @loopback, @dev={0xac, 0x14, 0x14, 0x11}]}]}}}}}) sendmsg$nl_route_sched_retired(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=@delqdisc={0xb0, 0x25, 0x8, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x6, 0xffe0}, {0xfff1, 0x5}, {0x7, 0x6}}, [@q_dsmark={{0xb}, {0x34, 0x2, [@TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x12}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_INDICES={0x6}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xd}]}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x31}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x401}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0xb0}}, 0x1) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000140)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/11, 0xb}, 0x80000001}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x1c, r5, 0x209, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x20, r5, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x401, 0x37}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x8080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x14, 0x30, 0x1, 0x40000004}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x440c0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r8, &(0x7f0000005e00)=[{{&(0x7f0000002000)=@pppol2tpv3={0x18, 0x1, {0x0, r8, {0x2, 0x4e24, @remote}, 0x1, 0x2, 0x4, 0x3}}, 0x80, 0x0}}], 0x1, 0x4000000) 2m46.099397314s ago: executing program 3 (id=629): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="300000001800010000000000000200000a140000fd0104000000000014000500fe800000000000000000000000000001"], 0x30}}, 0x0) (async, rerun: 32) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000940)={0x2, &(0x7f0000000980)=[{0x64, 0x0, 0x3, 0x8000001}, {0x6, 0x0, 0x0, 0x7ffffffd}]}) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001c00357428bd7000fed3df2502000000", @ANYRES32=r1, @ANYBLOB="1000a204080001000000000008000f0004"], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0) (async) syz_open_dev$video4linux(&(0x7f0000000ac0), 0x0, 0x0) (async) mknodat$md(0xffffffffffffff9c, &(0x7f0000000000)='./md0\x00', 0x6180, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) (async, rerun: 64) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000080)={0xc}) (async, rerun: 64) ioctl$SET_ARRAY_INFO(0xffffffffffffffff, 0x40480923, &(0x7f00000000c0)={0x0, 0x5a, 0x0, 0x0, 0x5, 0x800800, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}) (rerun: 64) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) (rerun: 64) write(r3, 0x0, 0x1f) (async, rerun: 64) writev(r3, &(0x7f0000000600)=[{&(0x7f00000002c0)="ca463685e460bcac830410a980c1c1abd7aa174b393cfaac857dde3f82d97a586b5966e6b1ef8dc29fdfb932b8270c1e3a5d58077891b12c230794d852c1d57c5ac20a33734306eeba0b0091f2f32636a0dcc44efeee0faaa6cf023a5ee8502174a254cb06745a843e1853c1ab5db16e5156dfafe264416957799ee7bef5", 0x7e}, {&(0x7f0000000340)="5c2edfba0aaa080106bbfbd79b7badb144c572bce7f9c8090a5d1dc5782ec9256bbc849f7adac7a90a8d15da6f84f7d0b68d24af9053c5b37c04cf80cf7247d961df2e0cbb1de6d53a5b5b92d08d7a5c40775ea9951b911b812ec573dedef14abecbfb3312289aa05e4d7b828fc3c4e57245fb865615db6f954a0f57824293d502008ef665a4505c50438d32b609d36eb77947e9a4449efc7d32130e064a0b092ed3c4d3c375b8eef053d5eb224d937bfd145c37b8aec93e9bc5693f1d5c", 0xbe}, {&(0x7f0000000400)="01ebbe98c91093ae28534a6c1d77429bcec39c767869b72c1bd2b5793d1748e146c23f8bab7bf5416e52b7b94b7ce82e6f19d2", 0x33}, {&(0x7f0000000440)="57628091af4dbfc829c91044ea493d4db53f1011c08feba861a83f395c3eba14714484e31ff485938b99a28fb9d2036f4738521296417465f2282d860701e4384a420c5da5c494409f269843f9ff31aa17b77bbb8c41b320a2b7403bbdb953b6ca6f5c0c2c665edb78b4b7ee59a1c4ca4b50b05d6ec99939382f53628f5fcbba3bf70a5afdb80b3273dfe99a23e9d566f6f8ef708e04ece625a0ae159080f28243c51b3a3123e21817b8dc99db2f898f7fad989550e460c6d9565659ab79d102f5f68dde1b6b606ab3a79d56", 0xcc}, {&(0x7f0000000540)="a290", 0x2}, {&(0x7f0000000580)="83b69c616768de0e5e05e6b72e5ccf36d78aebe8be7820b3245923fb6ec8d69c94772414c2602d80ff3a3731f8d481f02b3112b6d54f1520095f7696ab109438b8bc6bfa2682d089d59c76", 0x4b}], 0x6) (rerun: 64) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/comedi1\x00', 0x143001, 0x0) write(r4, 0x0, 0x0) (async) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0xa0) (async) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000c00)=ANY=[], 0x20}}, 0x9) mount$bind(&(0x7f00000006c0)='.\x00', &(0x7f0000000700)='./file0/../file0\x00', 0x0, 0x138090, 0x0) (async, rerun: 64) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) (rerun: 64) ioctl$IOMMU_VFIO_IOAS$GET(r6, 0x3b88, &(0x7f0000000b00)={0xc}) chroot(&(0x7f0000000740)='./file0/../file0\x00') mount$bind(&(0x7f0000000780)='.\x00', &(0x7f00000007c0)='./file0\x00', 0x0, 0xd5848, 0x0) (async, rerun: 64) pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000800)='./file0/../file0\x00') (rerun: 64) 2m45.170676866s ago: executing program 3 (id=643): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0xa02, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000100)='1', 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000b00)={'syzkaller0\x00', 0x7001}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000b40)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=@newqdisc={0x44, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x0, 0x3e8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000081}, 0x84) sendmsg$nl_route_sched(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=@newtclass={0x44, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x4, 0x1}, {0x0, 0x1}}, [@tclass_kind_options=@c_hfsc={{0x9}, {0x14, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x0, 0x3e8}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)=@newtfilter={0x40, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0x4}}]}}]}, 0x40}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}, 0x80) pipe2(0x0, 0x0) syz_io_uring_setup(0x1b0a, &(0x7f0000000980)={0x0, 0x2621, 0x10000, 0x1, 0x7, 0x0, r11}, &(0x7f0000000a00)=0x0, &(0x7f0000000a40), &(0x7f0000000a80)) syz_ublk_add_dev(r13, r14, 0x0, 0x0, &(0x7f0000000280)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@new_dev={0x4, 0xad0, 0x0, 0x0, 0x1000, 0xffffffff, r9, 0x0, 0x84}}}, &(0x7f0000000340)=0x0) r16 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='comm\x00') write$binfmt_script(r16, 0x0, 0x0) r17 = socket$inet6_tcp(0xa, 0x1, 0x0) r18 = dup(r17) syz_ublk_setup_queues(r13, r15, &(0x7f0000000380)={0x0, 0x7590, 0x4000, 0x2, 0x128, 0x0, r12}, &(0x7f0000000400)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xad5b, 0x20000, 0x3, 0x2d9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8149, 0x20, 0x2, 0x13c}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd6d7, 0x200, 0x1, 0x1c7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4ce6, 0x0, 0x2, 0x19e, 0x0, r11}}], 0x4, 0x0, 0x0) syz_ublk_setup_queues(r18, r15, &(0x7f0000000680)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000700)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x3d6, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d, 0x0, r19}}], 0x1, 0x0, 0x0) read$FUSE(r1, &(0x7f00000196c0)={0x2020}, 0x2020) 2m44.964597908s ago: executing program 3 (id=652): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r0, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={r1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x11, &(0x7f0000000640)=ANY=[@ANYBLOB="180200000000000000000000020004008500000097000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x11, &(0x7f0000000640)=ANY=[@ANYBLOB="180200000000000000000000020004008500000097000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r2, 0x0, 0x1e, 0x0, &(0x7f0000001200)="b34715ecd045eb90c73e58a3ae319106348a50d3abc88653870f303c1695", 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket(0x10, 0x2, 0x7) (async) r3 = socket(0x10, 0x2, 0x7) syz_open_dev$vim2m(0x0, 0x3, 0x2) (async) syz_open_dev$vim2m(0x0, 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000800)={0x0, 0x6, 0x1, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x2, 0x2, 0xd20, 0x3, 0x7ffd, 0x1, 0x3, 0x2, 0x0, 0xec46, 0x9, 0x3, 0x1, 0xffffffdffffffff4, 0x200000004a, 0x400000000005, 0xf9, 0xd, 0xe1, 0x413, 0x1, 0x2a9, 0x8, 0xc39, 0x3, 0x8, 0xfffffffc, 0x2, 0xa51, 0x8, 0x401, 0x3, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x7e4, 0x8, 0x8, 0x6aa, 0x100, 0x40, 0x83, 0x538a, 0x9, 0xda, 0x2, 0x7, 0x0, 0x3, 0x7, 0x8000, 0x8000000000000000, 0x4, 0x0, 0x1000000000014, 0x5ba, 0x1, 0x7ffffffe, 0x3, 0x7ffc, 0xc9, 0x7, 0x6, 0xc, 0xffffffff, 0x7ff, 0xbbc, 0x1fcc, 0x6, 0xfffffffffffffffc, 0xd, 0x1f, 0xffffffffffffffff, 0x7, 0x1, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x8, 0x9, 0x100000002, 0x0, 0x4, 0x7, 0x9, 0x200000000007, 0x9, 0x1001, 0x16d, 0x6, 0x68e, 0xffffffffffff43b0, 0x0, 0x50000000000000, 0xe, 0x0, 0x0, 0x3000000003, 0x5, 0x7, 0x6, 0x3, 0x8, 0x2, 0x0, 0x3, 0x40, 0x0, 0x7, 0xe, 0x1000003]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000c40)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000cc0)={0xffffffffffffffff, 0x58, &(0x7f0000000d00)}, 0x10) r4 = io_uring_setup(0x89c, &(0x7f0000000d80)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x1c, 0x3, &(0x7f0000000ec0)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x1c, 0x3, &(0x7f0000000ec0)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) connect$bt_l2cap(r3, &(0x7f00000007c0)={0x1f, 0x4, @none, 0x81, 0x1}, 0xe) (async) connect$bt_l2cap(r3, &(0x7f00000007c0)={0x1f, 0x4, @none, 0x81, 0x1}, 0xe) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x9, 0x5, 0x81, 0xffffffff}) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x80002, 0x0) sendfile(r6, r6, 0x0, 0x2000006) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000001818110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007baaf8fe00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b5001c008200000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa20000000000000702000000feffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000400)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001180), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r9, 0xc018ae85, &(0x7f00000011c0)={0x0, 0xdddd0000, 0x2, 0x1c, 0x50}) recvmsg$can_j1939(r6, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001240)=""/31, 0x1f}, {&(0x7f0000001280)=""/103, 0x67}, {&(0x7f0000001300)=""/100, 0x64}, {&(0x7f0000001380)=""/26, 0x1a}, {&(0x7f00000013c0)=""/47, 0x2f}, {&(0x7f0000001400)=""/146, 0x92}, {&(0x7f00000014c0)=""/19, 0x13}, {&(0x7f0000001500)=""/134, 0x86}, {&(0x7f00000015c0)=""/2, 0x2}, {&(0x7f0000001600)=""/126, 0x7e}], 0xa, &(0x7f0000001740)=""/140, 0x8c}, 0x12000) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in=@multicast1, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x192, 0xffffffffffffff3a, 0x0, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0x9, 0x0, 0x20000001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0xfff}, 0x70bd2a, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) sendmsg$nl_xfrm(r10, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in=@multicast1, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x192, 0xffffffffffffff3a, 0x0, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0x9, 0x0, 0x20000001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0xfff}, 0x70bd2a, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) (async) sendmsg$nl_xfrm(r11, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x80, 0xfffffffc, 0xdc67}}) 2m44.857202483s ago: executing program 33 (id=652): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r0, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={r1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x11, &(0x7f0000000640)=ANY=[@ANYBLOB="180200000000000000000000020004008500000097000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x11, &(0x7f0000000640)=ANY=[@ANYBLOB="180200000000000000000000020004008500000097000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r2, 0x0, 0x1e, 0x0, &(0x7f0000001200)="b34715ecd045eb90c73e58a3ae319106348a50d3abc88653870f303c1695", 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket(0x10, 0x2, 0x7) (async) r3 = socket(0x10, 0x2, 0x7) syz_open_dev$vim2m(0x0, 0x3, 0x2) (async) syz_open_dev$vim2m(0x0, 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000800)={0x0, 0x6, 0x1, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x2, 0x2, 0xd20, 0x3, 0x7ffd, 0x1, 0x3, 0x2, 0x0, 0xec46, 0x9, 0x3, 0x1, 0xffffffdffffffff4, 0x200000004a, 0x400000000005, 0xf9, 0xd, 0xe1, 0x413, 0x1, 0x2a9, 0x8, 0xc39, 0x3, 0x8, 0xfffffffc, 0x2, 0xa51, 0x8, 0x401, 0x3, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x7e4, 0x8, 0x8, 0x6aa, 0x100, 0x40, 0x83, 0x538a, 0x9, 0xda, 0x2, 0x7, 0x0, 0x3, 0x7, 0x8000, 0x8000000000000000, 0x4, 0x0, 0x1000000000014, 0x5ba, 0x1, 0x7ffffffe, 0x3, 0x7ffc, 0xc9, 0x7, 0x6, 0xc, 0xffffffff, 0x7ff, 0xbbc, 0x1fcc, 0x6, 0xfffffffffffffffc, 0xd, 0x1f, 0xffffffffffffffff, 0x7, 0x1, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x8, 0x9, 0x100000002, 0x0, 0x4, 0x7, 0x9, 0x200000000007, 0x9, 0x1001, 0x16d, 0x6, 0x68e, 0xffffffffffff43b0, 0x0, 0x50000000000000, 0xe, 0x0, 0x0, 0x3000000003, 0x5, 0x7, 0x6, 0x3, 0x8, 0x2, 0x0, 0x3, 0x40, 0x0, 0x7, 0xe, 0x1000003]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000c40)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000cc0)={0xffffffffffffffff, 0x58, &(0x7f0000000d00)}, 0x10) r4 = io_uring_setup(0x89c, &(0x7f0000000d80)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x1c, 0x3, &(0x7f0000000ec0)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x1c, 0x3, &(0x7f0000000ec0)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) connect$bt_l2cap(r3, &(0x7f00000007c0)={0x1f, 0x4, @none, 0x81, 0x1}, 0xe) (async) connect$bt_l2cap(r3, &(0x7f00000007c0)={0x1f, 0x4, @none, 0x81, 0x1}, 0xe) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x9, 0x5, 0x81, 0xffffffff}) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x80002, 0x0) sendfile(r6, r6, 0x0, 0x2000006) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000001818110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007baaf8fe00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b5001c008200000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa20000000000000702000000feffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000400)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001180), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r9, 0xc018ae85, &(0x7f00000011c0)={0x0, 0xdddd0000, 0x2, 0x1c, 0x50}) recvmsg$can_j1939(r6, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001240)=""/31, 0x1f}, {&(0x7f0000001280)=""/103, 0x67}, {&(0x7f0000001300)=""/100, 0x64}, {&(0x7f0000001380)=""/26, 0x1a}, {&(0x7f00000013c0)=""/47, 0x2f}, {&(0x7f0000001400)=""/146, 0x92}, {&(0x7f00000014c0)=""/19, 0x13}, {&(0x7f0000001500)=""/134, 0x86}, {&(0x7f00000015c0)=""/2, 0x2}, {&(0x7f0000001600)=""/126, 0x7e}], 0xa, &(0x7f0000001740)=""/140, 0x8c}, 0x12000) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in=@multicast1, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x192, 0xffffffffffffff3a, 0x0, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0x9, 0x0, 0x20000001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0xfff}, 0x70bd2a, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) sendmsg$nl_xfrm(r10, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in=@multicast1, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x192, 0xffffffffffffff3a, 0x0, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0x9, 0x0, 0x20000001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0xfff}, 0x70bd2a, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) (async) sendmsg$nl_xfrm(r11, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x80, 0xfffffffc, 0xdc67}}) 2m35.860780933s ago: executing program 2 (id=816): bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x2, 0x0}, 0x8) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000001080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000010c0)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000001100)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000001140)={{@my=0x0}, 0x1, 0x0, 0x10001}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r1, 0x7a6, &(0x7f0000001180)={0xffffffffffffffff, 0x9, 0x200000, 0x3, 0x5, 0x9}) r2 = openat$binderfs_feature(0xffffffffffffff9c, &(0x7f0000000680)='./binderfs/features/extended_error\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000007c0)={@fallback=0xffffffffffffffff, 0x36, 0x1, 0x4, &(0x7f00000006c0)=[0x0], 0x1, 0x0, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0], 0x0}, 0x40) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'vxcan1\x00', 0x0}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000800)=ANY=[@ANYRES32=r5, @ANYRES32=r2, @ANYBLOB='V\x00'/12, @ANYRES32, @ANYBLOB, @ANYRES64=r4], 0x20) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r0}, 0x4) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x4, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r7, 0x0, 0x36, 0x0, &(0x7f0000000a80)="c1dfb080cd21d398098ee68886ddfc30d80ce5ed88f6e9b83601f444ac505655d702cb0e4881a9fb5fbebe8f1e17d613fe24c2021a97", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000f40), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000f80)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000fc0)={@my=0x0, 0x1}) close_range(r8, r8, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000bc0)={@ifindex=r5, 0x13, 0x1, 0x8, &(0x7f0000000ac0)=[0x0], 0x1, 0x0, &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0], &(0x7f0000000b80)=[0x0], 0x0}, 0x40) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x7, 0x16, &(0x7f0000000c40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7ff}, @exit, @map_val={0x18, 0xb, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x7a32}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x86}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000d00)='syzkaller\x00', 0x0, 0x40, &(0x7f0000000d40)=""/64, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, r3, 0x8, &(0x7f0000000d80)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000dc0)={0x5, 0x7, 0xfffffff9, 0x5}, 0x10, 0xffffffffffffffff, r2, 0x4, &(0x7f0000000e00)=[r2, r2, r3, r3, r2, r2, r3, r2], &(0x7f0000000e40)=[{0x3, 0x5, 0x9, 0x2}, {0x4, 0x5, 0x2, 0x3}, {0x3, 0x3, 0xe, 0xc}, {0x4, 0x1, 0xf, 0x4}], 0x10, 0xfffffffd}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000c00)={@map=r3, r7, 0x30, 0x1c, 0x0, @void, @value=r10, @void, @void, r9}, 0x20) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r0}, 0x4) syz_open_dev$ttys(0xc, 0x2, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x65) writev(r11, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$PNPIPE_HANDLE(r11, 0x113, 0x3, &(0x7f0000000200)=0x8, 0x4) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 2m35.760263163s ago: executing program 2 (id=818): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000440)='devtmpfs\x00', 0x4010, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000480)=ANY=[@ANYBLOB="12010002000000407b0603230001000000010902270001010080320904000003ff0000000705810240000007050202400000070583030a"], 0x0) r1 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x12) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev/ttyUSB0\x00', 0x12df00, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000019000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000240003006d04000082c0000004000000000000000600ff0901a101851075dd950609018102090191028511750895130901810209019102c0"], 0x13c) write$UHID_DESTROY(r0, &(0x7f0000000680), 0x4) r2 = socket(0x2, 0x80805, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0x1bf) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./config\x00', &(0x7f0000000740)='configfs\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r3, &(0x7f00000007c0)='1', 0x1) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0x24) mount(&(0x7f00000002c0)=@filename='./dev/sda1\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000340)='ext4\x00', 0x8410, 0x0) r4 = open$dir(&(0x7f0000000380)='./mnt\x00', 0x0, 0x2) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r4, 0xc0406619, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x2000) bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r6, 0x4) fcntl$lock(r2, 0x5, &(0x7f00000000c0)={0x7f669f036c1f2d61, 0x2, 0x6, 0x100000000, r5}) 2m34.4394689s ago: executing program 2 (id=826): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000180), 0x4) (async) r1 = socket$inet(0x2, 0x2, 0x1) close(0x3) socket(0x2, 0x3, 0xff) (async) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) (async) sendmsg$inet(r1, &(0x7f00000003c0)={&(0x7f0000000440)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0000000}, 0x1a92189d0dd42cd6) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000001c0), 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x109900, 0x0) ioctl$RNDADDENTROPY(r3, 0x5207, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa64fe9c"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r2}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0xfffffffffffffeca, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x4400}, {r4, 0x4007}, {r3, 0x282}, {r5, 0x4000}], 0x4, &(0x7f0000000340), &(0x7f0000000380)={[0x8]}, 0x8) 2m34.377601791s ago: executing program 2 (id=827): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount$bind(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(&(0x7f0000000840)='./file0/file0\x00', &(0x7f0000000880)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x14, 0x19, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x800) r2 = open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x395000, 0x1d) move_mount(r2, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000900)='./file0/file0\x00', 0x210) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r3, &(0x7f00000000c0)='27', 0x2) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x4040880) 2m34.377009083s ago: executing program 2 (id=829): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1fd) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0, &(0x7f0000000880)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000008c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1001, &(0x7f0000000940)={0x0, 0x989680}, 0x1, 0x4}) fstat(r1, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup2(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0), 0x1040, &(0x7f0000000bc0)={[{}], [{@hash}, {@subj_type={'subj_type', 0x3d, '\x00'}}, {@euid_lt={'euid<', r5}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@smackfshat={'smackfshat', 0x3d, 'sysfs\x00'}}, {@subj_user={'subj_user', 0x3d, 'ns/user\x00'}}, {@obj_role={'obj_role', 0x3d, '*{\\!\\\xb3=?\xe2\xff\x1aw\xa80\xd2v\xf2?\xac\a\x88t\x18A\xfbb\x14q\xc6+\xf0\x823\xf5i,p\x8ax\xc2\xd0\xd1fH\xd7t\xa9%{\xe8\n\xa9\x80\"\x85n\xce\x9c\xae\xb8G\x19\x88*\x88\xe3|fe\x90\xed\'\xb2\xf8\x96K\xb7\xb8\xa2\xdf\xcaN\x11\x8b]\xc8Rl<\xad\v\x1aW\xf4^\x82)\x142\x17\x8e\xf1[\x98\xa3\xa06$QG\x11\x89\x97^b\xdeh:\x95\x0f\xdc\xb57D\'o\x1a\x91\x16%\xffC\xfao\xde\x1f&\xc9\x89\xedR\xd3\n\n\xc4\xcf\xe7'}}, {@subj_user={'subj_user', 0x3d, '&/\'[!\'%/*'}}]}) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$alg(0x26, 0x5, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000b40)={'ip6_vti0\x00', 0x8000}) bind$alg(r6, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000340)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000b80)={0x3, 0x1, 0x8000000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r8 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="5308fe8e4c59ee609a5ab268afd855a0af46fd165c3e5d9682cbbf6e9668f0e92983a453b2148163ca78a8f3175179259f8a73fb28eecc49ac09149af80a1bc78c06a568003c63b463856b028f246c7796bf6fe12a23de95141e225d7b575139e6ef96648979cdbd1ea3de097a5726390f1063451b979150a3c829a7580c77629f6687f184d9db9d6789cbddf790504291218d8250e3fe4699643e61cdf7093fc1cf0c71b8ee61", 0xa7}], 0x1, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x80}], 0x1, 0x0) recvmmsg(r8, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)=""/166, 0xa6}], 0x1}, 0x60}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000009c0)=""/182, 0xb6}], 0x1}, 0x5}], 0x2, 0x102, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000006c0)={{0xa, 0x4e23, 0xe24, @loopback, 0x3}, {0xa, 0x4e20, 0xfffffff8, @loopback, 0x1}, 0x0, {[0x8, 0x4, 0x4, 0x4, 0x7fffffff, 0x9, 0x5, 0x6]}}, 0x5c) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') open_by_handle_at(r10, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r9], 0x0) io_uring_enter(r1, 0x2, 0x0, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000980)='sessname=s+ device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_SET_WIPHY(r8, &(0x7f0000000b00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r11, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'xfrm0\x00'}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x48001) 2m34.094373619s ago: executing program 2 (id=832): mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000ac0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000b00)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r1, 0x80044d76, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000b40)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000100)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}, {&(0x7f0000000f00)="8486d19164eb1f287c711c43082b65e92b7054f36deccb7f478221acde7319ff4ea62f91ac2fb78ef6e07d7909f9c4b5b0536baf4283b5f96155e9b44cc1c275fdbfabcca13b0b20b43a839fd2569f8936e87628268c37027bfb1ff7b6ca019c9c7a160373a03aa0dd72af6c80387547607376e9a5d18fdfce5d5717fb1fef706f3f44bb4d34d9e7d0c6cd52936a4228ecf70b4f26941eec6c6631dffe08403860e34af9e255ff9b1271a6d802bc230e89227ed55223c1dab634281552abad48829230f3f7589167b32b369a1f5aea1f2b69eef6a67cb5c51c277ca804b32d9339ccc8be188a7833bc54d731", 0xec}, {&(0x7f0000000b80)="500c890fd1d1a21bbefcd060526b995008c3fa9341aabd17bb7d7bd4335df00d2375a8158e497bd6e77e7c54422e48b8e4122e42d91e371c13a095d12bb7431c8a33e3f78dfe0077548b82dbeeaa3400c71079dfa02293290c5ea1397a8f7f2c134f8b470b7823c2b8eb84bb0c91200a049f7971445153b2b5c9d1d5d769120521071a7d3f73adbb06192a7c76252e417fc8d9334429eb5169b238f2e2ef838353d377746a432fa9a4f3c4070c795e631f5e8a993e6cacce06a48db002ba7dfc07636ed46584d4b7701eb2c160d342ca04d31add2c9bc76077438ab5e3e441a8c90531d381f4785e27f891e046fe9375ee1964", 0xf3}, {&(0x7f0000000c80)="00934f579cb829390c2b85ed3aa9875a2794856ed820631a1bb951ccc8a312352396614d9715d7043b1f0cf6f856b15c752d72708ff1521303819f1c4edfb5c7354d9fe1bf9943fb6d7b48b074bac1794890e3dcd1f30becc229db1e316aabcced4f6fc7446bb84ad9476bde716837f4a945b69a9355c27bd58e23e3f204c9bb2ab843f92a166735069871e6ccc4a1ee0534f4d8ada2ba85ff9f658a394c7de1a2489be4fb38d86b8b27edee19d9aaba94f2b9d5a6a86f6a7d034c0d8b0dbbbfeefd40a4e7e47406212fc6c35e4731d31cc8921548be6a6bfa3beead25757e", 0xdf}, {&(0x7f0000000d80)="437055591841a2e4053fd4d66354c6df733cd49f735c29a59285597281aac7bb7e7ba87f03f1ca55c228830850f0a428138b0965363d7b3c63823a056130050973cad62f38301b239bedd501d51a9fbfe9ea57bb9cc9e6674e64f352e8154ff014f149e03ae868fe96038e906facf464b17bb0aec39a486459c1bbcec56286e14e74bad151ace01236642e023c4de8ac4b402796d7519ae20a6671b213f40c65c2326ec7b3b389f903ccf8804d45911237bf4e6c45afedeaab9f28a6e2d80a19d589a9d85afda189d34882c64b7d59f7d31ebfe9e20d6c5337", 0xd9}], 0x5}, 0x48891) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000880)={0xc, 0x0, 0x0}) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000000300)=[{{&(0x7f00000003c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f00000005c0)=@assoc_value={0x0}, &(0x7f0000000600)=0x8) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000640)=@sack_info={r7, 0x0, 0x31e5}, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRESOCT=r2, @ANYRESDEC=r3, @ANYRES8=r3, @ANYRES8=r3, @ANYRESOCT=r6, @ANYRESDEC=r1, @ANYBLOB="fd4ccbb8a9abe2df45685717cd0008e29b08383108699b52880a2486f1e12b2e58fd5a9163f37ae67ed951499655fb156372418ff62d2e64", @ANYRES16], 0x48) pipe(&(0x7f0000000340)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r8, &(0x7f00000003c0), &(0x7f0000000400)=@udp=r9, 0x2}, 0x20) getsockname$packet(r0, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@bridge_getlink={0x30, 0x12, 0x400, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r10, 0x1000, 0x20}, [@IFLA_WEIGHT={0x8, 0xf, 0x100}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x1f59}]}, 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x4000010) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000008c0)={0x28, 0x3, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000900)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) r11 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x183042, 0x0) ioctl$DM_DEV_CREATE(r11, 0xc138fd03, &(0x7f0000001000)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x8800, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}, @uuid={'LVM-syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r11, 0xc138fd09, &(0x7f0000001140)={0x4, 0x0, 0x0, 0x1a8, 0x138, 0x1, 0x0, 0x28001, 0x0, 0x0, @by_dev={r12}, [@integrity={0x0, 0x48d8, 0x0, 0x70, 'integrity\x00', {{@ram_num={'1:', 0x1}, 0x20, '8'}, 0x20, '1', 0x20, 'B', ' 2 internal_hash:crc32c reset_recalculate'}}]}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1100, 0x1}) r13 = syz_open_dev$dmmidi(&(0x7f0000000180), 0x2, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r13, 0x810c5701, &(0x7f00000001c0)) 2m34.015441524s ago: executing program 34 (id=832): mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000ac0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000b00)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r1, 0x80044d76, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000b40)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000100)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}, {&(0x7f0000000f00)="8486d19164eb1f287c711c43082b65e92b7054f36deccb7f478221acde7319ff4ea62f91ac2fb78ef6e07d7909f9c4b5b0536baf4283b5f96155e9b44cc1c275fdbfabcca13b0b20b43a839fd2569f8936e87628268c37027bfb1ff7b6ca019c9c7a160373a03aa0dd72af6c80387547607376e9a5d18fdfce5d5717fb1fef706f3f44bb4d34d9e7d0c6cd52936a4228ecf70b4f26941eec6c6631dffe08403860e34af9e255ff9b1271a6d802bc230e89227ed55223c1dab634281552abad48829230f3f7589167b32b369a1f5aea1f2b69eef6a67cb5c51c277ca804b32d9339ccc8be188a7833bc54d731", 0xec}, {&(0x7f0000000b80)="500c890fd1d1a21bbefcd060526b995008c3fa9341aabd17bb7d7bd4335df00d2375a8158e497bd6e77e7c54422e48b8e4122e42d91e371c13a095d12bb7431c8a33e3f78dfe0077548b82dbeeaa3400c71079dfa02293290c5ea1397a8f7f2c134f8b470b7823c2b8eb84bb0c91200a049f7971445153b2b5c9d1d5d769120521071a7d3f73adbb06192a7c76252e417fc8d9334429eb5169b238f2e2ef838353d377746a432fa9a4f3c4070c795e631f5e8a993e6cacce06a48db002ba7dfc07636ed46584d4b7701eb2c160d342ca04d31add2c9bc76077438ab5e3e441a8c90531d381f4785e27f891e046fe9375ee1964", 0xf3}, {&(0x7f0000000c80)="00934f579cb829390c2b85ed3aa9875a2794856ed820631a1bb951ccc8a312352396614d9715d7043b1f0cf6f856b15c752d72708ff1521303819f1c4edfb5c7354d9fe1bf9943fb6d7b48b074bac1794890e3dcd1f30becc229db1e316aabcced4f6fc7446bb84ad9476bde716837f4a945b69a9355c27bd58e23e3f204c9bb2ab843f92a166735069871e6ccc4a1ee0534f4d8ada2ba85ff9f658a394c7de1a2489be4fb38d86b8b27edee19d9aaba94f2b9d5a6a86f6a7d034c0d8b0dbbbfeefd40a4e7e47406212fc6c35e4731d31cc8921548be6a6bfa3beead25757e", 0xdf}, {&(0x7f0000000d80)="437055591841a2e4053fd4d66354c6df733cd49f735c29a59285597281aac7bb7e7ba87f03f1ca55c228830850f0a428138b0965363d7b3c63823a056130050973cad62f38301b239bedd501d51a9fbfe9ea57bb9cc9e6674e64f352e8154ff014f149e03ae868fe96038e906facf464b17bb0aec39a486459c1bbcec56286e14e74bad151ace01236642e023c4de8ac4b402796d7519ae20a6671b213f40c65c2326ec7b3b389f903ccf8804d45911237bf4e6c45afedeaab9f28a6e2d80a19d589a9d85afda189d34882c64b7d59f7d31ebfe9e20d6c5337", 0xd9}], 0x5}, 0x48891) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000880)={0xc, 0x0, 0x0}) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000000300)=[{{&(0x7f00000003c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f00000005c0)=@assoc_value={0x0}, &(0x7f0000000600)=0x8) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000640)=@sack_info={r7, 0x0, 0x31e5}, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRESOCT=r2, @ANYRESDEC=r3, @ANYRES8=r3, @ANYRES8=r3, @ANYRESOCT=r6, @ANYRESDEC=r1, @ANYBLOB="fd4ccbb8a9abe2df45685717cd0008e29b08383108699b52880a2486f1e12b2e58fd5a9163f37ae67ed951499655fb156372418ff62d2e64", @ANYRES16], 0x48) pipe(&(0x7f0000000340)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r8, &(0x7f00000003c0), &(0x7f0000000400)=@udp=r9, 0x2}, 0x20) getsockname$packet(r0, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@bridge_getlink={0x30, 0x12, 0x400, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r10, 0x1000, 0x20}, [@IFLA_WEIGHT={0x8, 0xf, 0x100}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x1f59}]}, 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x4000010) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000008c0)={0x28, 0x3, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000900)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) r11 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x183042, 0x0) ioctl$DM_DEV_CREATE(r11, 0xc138fd03, &(0x7f0000001000)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x8800, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}, @uuid={'LVM-syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r11, 0xc138fd09, &(0x7f0000001140)={0x4, 0x0, 0x0, 0x1a8, 0x138, 0x1, 0x0, 0x28001, 0x0, 0x0, @by_dev={r12}, [@integrity={0x0, 0x48d8, 0x0, 0x70, 'integrity\x00', {{@ram_num={'1:', 0x1}, 0x20, '8'}, 0x20, '1', 0x20, 'B', ' 2 internal_hash:crc32c reset_recalculate'}}]}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1100, 0x1}) r13 = syz_open_dev$dmmidi(&(0x7f0000000180), 0x2, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r13, 0x810c5701, &(0x7f00000001c0)) 2m25.725505952s ago: executing program 4 (id=927): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r1) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], 0x0, 0x84, &(0x7f0000000380)=[{}, {}], 0x10, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x4b, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000040)=0x2, 0x4) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@newlink={0xe8, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x49811, 0x1d851}, [@IFLA_LINKINFO={0xc8, 0x12, 0x0, 0x1, @vti={{0x8}, {0xbc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0xb6}, @IFLA_VTI_OKEY={0x8, 0x3, 0x6}, @IFLA_VTI_LINK={0x8, 0x1, r3}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x513}], @IFLA_VTI_REMOTE={0x8, 0x5, @local}, @vti_common_policy=[@IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_LINK={0x8, 0x1, r2}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x3d9e}], @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x80800}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x4}, @IFLA_VTI_IKEY={0x8, 0x2, 0xfffffffa}, @IFLA_VTI_OKEY={0x8, 0x3, 0xe06e}], @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xfff}, @IFLA_VTI_OKEY={0x8, 0x3, 0x20000000}, @IFLA_VTI_IKEY={0x8, 0x2, 0x2c}, @IFLA_VTI_LINK={0x8, 0x1, r2}, @IFLA_VTI_IKEY={0x8, 0x2, 0x1}, @IFLA_VTI_IKEY={0x8, 0x2, 0xa}], @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r2}, @IFLA_VTI_IKEY={0x8, 0x2, 0x6}, @IFLA_VTI_FWMARK={0x8, 0x6, 0xd5a}, @IFLA_VTI_IKEY={0x8, 0x2, 0x5}, @IFLA_VTI_OKEY={0x8, 0x3, 0x5}]]}}}]}, 0xe8}}, 0x0) sendto$packet(r0, &(0x7f0000000240)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000280)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @random="fa45a86096b6"}, 0x14) socket$packet(0x11, 0x3, 0x300) (async) socket(0x10, 0x803, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r1) (async) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], 0x0, 0x84, &(0x7f0000000380)=[{}, {}], 0x10, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x4b, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) (async) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000040)=0x2, 0x4) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@newlink={0xe8, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x49811, 0x1d851}, [@IFLA_LINKINFO={0xc8, 0x12, 0x0, 0x1, @vti={{0x8}, {0xbc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0xb6}, @IFLA_VTI_OKEY={0x8, 0x3, 0x6}, @IFLA_VTI_LINK={0x8, 0x1, r3}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x513}], @IFLA_VTI_REMOTE={0x8, 0x5, @local}, @vti_common_policy=[@IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_LINK={0x8, 0x1, r2}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x3d9e}], @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x80800}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x4}, @IFLA_VTI_IKEY={0x8, 0x2, 0xfffffffa}, @IFLA_VTI_OKEY={0x8, 0x3, 0xe06e}], @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xfff}, @IFLA_VTI_OKEY={0x8, 0x3, 0x20000000}, @IFLA_VTI_IKEY={0x8, 0x2, 0x2c}, @IFLA_VTI_LINK={0x8, 0x1, r2}, @IFLA_VTI_IKEY={0x8, 0x2, 0x1}, @IFLA_VTI_IKEY={0x8, 0x2, 0xa}], @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r2}, @IFLA_VTI_IKEY={0x8, 0x2, 0x6}, @IFLA_VTI_FWMARK={0x8, 0x6, 0xd5a}, @IFLA_VTI_IKEY={0x8, 0x2, 0x5}, @IFLA_VTI_OKEY={0x8, 0x3, 0x5}]]}}}]}, 0xe8}}, 0x0) (async) sendto$packet(r0, &(0x7f0000000240)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000280)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @random="fa45a86096b6"}, 0x14) (async) 2m24.449552189s ago: executing program 4 (id=939): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000001240)=ANY=[@ANYBLOB="00001c0010001400060069f1bf15000c2ffe00000000000000000000ffff00000000ff0200000000000000000000000000013a"], 0xfca) (async) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) r3 = fsmount(r2, 0x0, 0x0) openat$cgroup_pressure(r3, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0xfffffffffffffd5e, r4, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0xff}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40090}, 0x81) 2m24.23938267s ago: executing program 4 (id=943): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x23c243) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000380)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x300000, 0x676e, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000e40)=@newtaction={0x78, 0x30, 0xffff, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ife={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0xfe38, 0x1, {{}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) r2 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x40, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000b40)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000b80)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=ANY=[@ANYBLOB="6000000054000500010000000000000007000000", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r5, @ANYBLOB="01fe0f00ef010101000000000000000000000000080000002800028005000300010000001c0002800c000180080001000a0000010c000180080001"], 0x60}}, 0x0) ioctl$DM_DEV_CREATE(r2, 0xc138fd03, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_DEV_WAIT(r2, 0xc138fd08, &(0x7f0000000540)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x8000, 0x390, 0x0, @by_dev={r6}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r7, &(0x7f0000000180)}, 0x20) r8 = shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffe000/0x2000)=nil) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x1ff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r9, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)={0x54, r10, 0x1, 0x70bd25, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0xff}, {0xc, 0x90, 0x6989}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004044}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000940)=ANY=[@ANYBLOB="09000000000000000800000000000000040000000000008009000000000000000000000000000000000000000000000008020000000000000000000000000000feffffffffffffffff7f0000000000000200000000000000000000000000000000000000000000000004000000000000000000000000000039751ab413c40855e38d9a47a553a3099ad7"]) sendmsg$NFT_BATCH(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000000) sendmsg$NFT_MSG_GETCHAIN(r11, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="2c000000040a010800007400000000000a0000030900010073797ac4d0e634000900030073797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4008820}, 0x40) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0), 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000200)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) readv(r13, &(0x7f0000000240)=[{&(0x7f0000000280)=""/244, 0xf4}], 0x1) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x20000000}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x3, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x2e, 0xfffd}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0) shmctl$SHM_INFO(r8, 0xe, &(0x7f0000000040)=""/164) 2m24.170785689s ago: executing program 4 (id=944): mkdir(&(0x7f0000000200)='dir0\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='dir0\x00', &(0x7f0000000500)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='dir0/tracing_on\x00', 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000580)='fd/3\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000009c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000a00)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000a40)) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000a80)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_clone(0x1100000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000740)='./dev\x00', &(0x7f0000000780)='devtmpfs\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000800)=@filename='./dev/sda1\x00', &(0x7f0000000840)='./mnt\x00', &(0x7f0000000880)='ext4\x00', 0x8410, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000008c0)={0x28, 0x0, 0x0, @local}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000900)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./file2\x00', 0x18d042, 0x15) pwrite64(r3, &(0x7f0000000980)="ff", 0x58200, 0x2200) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000640)=""/144, 0x90}], 0x1000000000000094) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'veth0_to_team\x00', &(0x7f0000000080)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x1ec, r5, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_NODE={0x198, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "a7b2e79ee8218b40ebafa0811c9986ef3fbc0d745df9efb6e9"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "0ec24922838845582cf9cd1a224347b40767cdd5b2380e"}}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "d20e559147e5ce5815093d92c7956ef7cdf79070"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x6d, 0x3, "9e50570cc7feb273348bc5a588fb4116c166e8a34b4681b19ddc1e762ba24b3b1a50124d9db8468d52cac81188e1bbf9c9b1604bf8d52da9c5e470c8fcdb7bebe6bc056613cb528e8d79925f188310cfef6f55d5145e858bbe3d4d529223e9b3e2b99495f08b01ba25"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x670}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "783bbf814862c63d8cebb5c360abe574519acceb916ea75bef69de"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x40001}, 0x3fd9f09e3e7c1df4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1804000000001eefa228cb9d6136aa098447a9000000000000000000007ab5fe"], &(0x7f00000005c0)='GPL\x00'}, 0x94) socket$inet6(0xa, 0x5, 0x7) 2m24.02724944s ago: executing program 4 (id=947): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001e80)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x28}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000040}, 0x8014) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000002040)={0x3}, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000002080)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000002100)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x7}}, 0x14}}, 0x20000000) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000001f40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}]}]}]}], {0x14, 0x10}}, 0xfc}}, 0x0) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x4a) (async) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x2401, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0]) r3 = syz_io_uring_setup(0x456d, &(0x7f0000000080)={0x0, 0x46dc, 0x40000, 0x2, 0xe3}, &(0x7f0000000b80), &(0x7f0000000bc0), &(0x7f0000000c00)) r4 = io_uring_setup(0x2e08, &(0x7f0000000b00)={0x0, 0xfffffffc, 0x0, 0xffffffff, 0x1, 0x0, r3}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) recvfrom$unix(r5, &(0x7f0000000200)=""/233, 0xe9, 0x20, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) (async) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000100), 0x0) lgetxattr(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00)=@known='trusted.overlay.upper\x00', &(0x7f0000000d40)=""/117, 0x75) r6 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40042, 0x1) (async, rerun: 64) close(0x3) (rerun: 64) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',X']) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000dc0)={0x0, 0x1, 0x401, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r6, 0xc400941d, &(0x7f00000011c0)={0x0, 0x3, 0xb, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(r7, 0xc4089434, &(0x7f00000015c0)={0x0, 0x3, 0x1, [0x100, 0x7f, 0x7, 0xa5b, 0x5], [0x7, 0x8, 0x0, 0x6, 0xfffffffffffffffa, 0x3, 0x4, 0x5, 0x8, 0x5, 0x7, 0x1, 0x5, 0x2, 0x1ff, 0x8000000000000000, 0x5, 0x9, 0x2, 0x0, 0x5, 0x2, 0x2, 0x3, 0xffffffffffffffff, 0x8000, 0xe1f, 0x0, 0xf56, 0x1, 0x8, 0x8, 0x4, 0x541, 0xa, 0x5, 0x4e7, 0xfffffffffffffff7, 0x7, 0xda, 0x8dde, 0x3, 0xc, 0x8, 0x1, 0xfffffffffffffffe, 0x0, 0xf3, 0x9, 0x1, 0x8, 0x8, 0x5, 0x51128d0b, 0x7f, 0x4, 0xfffffffffffffffa, 0x3, 0x0, 0x1ff, 0x20, 0xfffffffffffff800, 0x1, 0x6, 0x8000000000000000, 0xfffffffffffff673, 0x1, 0xd, 0x5dc, 0x2, 0x2, 0x2, 0xfffffffffffffff7, 0x8001, 0x6, 0xae66, 0x5, 0x4, 0x80000000, 0x3e56, 0x6, 0x2, 0x7ff, 0x6, 0x2, 0x8, 0x7, 0x100000000, 0x8000000000000001, 0x1, 0x8, 0x81, 0x8, 0x32, 0xa, 0x5, 0x80, 0x3, 0x1, 0xa, 0x100000000, 0x2, 0x0, 0x6, 0x1, 0x9, 0x8, 0x6fb0346f, 0x2b427b41, 0x6, 0x5, 0x6, 0x4b, 0x8001, 0xfffffffffffffff2, 0x7075fd84, 0x0, 0x7, 0x2, 0x4, 0x4]}) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000001a00)={0x6, 0x2, {0x7, @usage=0x2, r8, 0x2, 0x3, 0x4, 0x0, 0x6, 0x401, @struct={0x9, 0x4}, 0x0, 0x80000000, [0x9, 0xf400000000000000, 0x89, 0x4, 0x7, 0x7fff]}, {0x5, @struct={0x7ff, 0x7ad8}, r9, 0x6, 0x5, 0x9, 0x6, 0x22f, 0x1, @struct={0xd47, 0x1}, 0x5, 0x7, [0x0, 0xee, 0x6, 0x7, 0x1, 0x8]}, {0x1, @usage=0x2, r10, 0xfffffffffffffff8, 0x9, 0xbf, 0x9, 0x3aba, 0x20, @usage=0x7, 0x2, 0x5, [0x4cd, 0x7f, 0xffffffffffffffc4, 0xb9, 0x1, 0xfffffffffffff0a2]}, {0x7, 0x8001, 0x3ff}}) (async, rerun: 64) ioctl$FE_READ_SIGNAL_STRENGTH(r5, 0x80026f47, &(0x7f0000000c40)) (async, rerun: 64) ioctl$VFAT_IOCTL_READDIR_SHORT(r4, 0x82307202, &(0x7f0000000440)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r11, 0x0, 0x60, &(0x7f00000006c0)={'filter\x00', 0x6001, 0x4, 0x3f0, 0x0, 0x0, 0x1f8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@multicast2, @multicast2, 0xff, 0xff000000, 0x2, 0x7, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x7ff, 0x9d, 0xf9, 0xd, 0x0, 0x7, 'ip6tnl0\x00', 'hsr0\x00', {}, {0xfd}}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x308}}, {{@arp={@multicast2, @remote, 0x0, 0x0, 0x0, 0x8, {@empty, {[0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0xfffc, 0x7, 0x8000, 0x1, 'veth1_vlan\x00', 'team_slave_0\x00', {0x101}, {}, 0x0, 0xe2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast2, @private, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="f9bcdc63c0c8", @empty, @multicast2, @rand_addr=0x64010101, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) (async, rerun: 32) r12 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') (rerun: 32) read$FUSE(r12, &(0x7f0000003480)={0x2020}, 0x2020) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000c80), 0x117203, 0x0) 2m23.720658127s ago: executing program 4 (id=948): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000400)={{0x80, 0x4}, 'port0\x00', 0xb5, 0x60004, 0x3b, 0xfffffffc, 0x1, 0x4, 0x0, 0x0, 0x3}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000200)={{0x80, 0x9}, 'port0\x00', 0x57, 0x40800, 0xffffffff, 0x3, 0x0, 0xfff, 0x4, 0x0, 0x2, 0x7f}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000002100df4d2abd700000000000020010000000000000000000140011006e657464657673696d3000000000000008000200640101010c001400", @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000140)={{0x80, 0x2}, 'port0\x00', 0x80, 0x100816, 0x4, 0x9, 0x0, 0x5, 0x200000, 0x0, 0x4875c99660ff2b2d}) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14) accept$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) 2m23.68637248s ago: executing program 35 (id=948): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000400)={{0x80, 0x4}, 'port0\x00', 0xb5, 0x60004, 0x3b, 0xfffffffc, 0x1, 0x4, 0x0, 0x0, 0x3}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000200)={{0x80, 0x9}, 'port0\x00', 0x57, 0x40800, 0xffffffff, 0x3, 0x0, 0xfff, 0x4, 0x0, 0x2, 0x7f}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000002100df4d2abd700000000000020010000000000000000000140011006e657464657673696d3000000000000008000200640101010c001400", @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000140)={{0x80, 0x2}, 'port0\x00', 0x80, 0x100816, 0x4, 0x9, 0x0, 0x5, 0x200000, 0x0, 0x4875c99660ff2b2d}) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14) accept$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) 20.596198825s ago: executing program 1 (id=2778): r0 = syz_open_dev$video(&(0x7f0000001540), 0xa7, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r1, &(0x7f0000000040)="703a742d73742f6576656e7431202e2f66696c65303a30783020617267323d5ca78c15d892f2cb16bffa883f3f1a6b71a2799941fda9f8933a", 0x39) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0xebbdc0e92b9dda26}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000001580)={0x1, @pix={0x203, 0x807c2, 0x3132564e, 0x32315659, 0xffffffff, 0x9, 0xa, 0x807, 0xfeedcafe, 0x3, 0x2, 0x3}}) 20.595880734s ago: executing program 1 (id=2779): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r2, 0x4068aea3, &(0x7f0000000340)={0xa4, 0x0, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r3, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x1, 0x1100000000000000, 0x6, 0x109e93, 0xffffffffffffffff, 0x400000, 0xd, 0x0, 0x2, 0x7fffffffffffffff, 0x5, 0x401, 0x6, 0x5, 0x20000001, 0xfffffffffffffffc], 0xd5d5c004, 0x1354}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000480)=@arm64={0x8, 0x1, 0x7, '\x00', 0x79a}) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x11) ioctl$KVM_TDX_INIT_VM(r4, 0xc008aeba, &(0x7f0000000740)={0x1, 0x0, &(0x7f00000005c0)={0x8000000, 0x100, [0x100000001, 0x0, 0x9, 0x6, 0x8000, 0x2], [0x6, 0x800, 0x10000, 0x9, 0x8, 0x10000], [0x1, 0x2, 0x3, 0x8, 0x7fff], '\x00', {0x3, 0x0, [{0x80000001, 0x0, 0x1, 0x0, 0x10, 0xfffffffb, 0x5}, {0x80000008, 0xffffffff, 0x0, 0x8, 0x399, 0x2, 0xb31}, {0xc0000000, 0x4, 0x4, 0x4, 0x6, 0x5}]}}}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x5, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r0, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}}, 0x14}, 0x1, 0x0, 0x0, 0x8041}, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xac, r6, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8001}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x200}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x4}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000844) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@ldst={0x3, 0x0, 0xb, 0x0, 0x0, 0x9800}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) 20.418345701s ago: executing program 1 (id=2782): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x2, 0x0) (async) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x8502, 0x0) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async, rerun: 64) r1 = syz_create_resource$futex(&(0x7f0000000200)=0x2) (rerun: 64) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) (async, rerun: 64) futex(r1, 0x8c, 0x1, 0x0, 0x0, 0x0) (rerun: 64) write$sndseq(r0, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x7}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}], 0x70) (async) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/pci/devices/0000:00:1d.0/remove\x00', 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) (async, rerun: 32) write(r2, &(0x7f0000000100)='1', 0x1) (rerun: 32) 20.417834098s ago: executing program 1 (id=2784): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x44, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x50) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000080)={0x3b, 0x1}) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write(r3, &(0x7f0000000000)="af9062", 0x3) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000b80)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff0500000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc0003000500000014000027000089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a8700"/252, 0xfc) 20.277704948s ago: executing program 1 (id=2785): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@userxattr}]}) r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f0000000200)={0x1, 0x1, 0x1, 0xfffe}) ioctl(r0, 0x1, &(0x7f0000000300)="cbff112aa2a2a51359c8df133f29d1af14346f8e22aa794f4895cf4f6e8b3384883cd490e6044337bc1c45fb155d686bd3ecfe8af1e46ca689898e34ddd1cf6196464b1fd609b44e241691ca084602a30281fe6cb3f8cd96e715cec2c0304ee599e53b80eb9d2619314baf33052c42edc086f0cc1ae75f3265e7c9a61ae0f5ea0131cb1f3df696720072febad7a4ca8a084966f02d8cd8f7ef1b9eaa11a56a0761aadbc01f10df163f7dff704ab4ccebeb0e35ac7d8d0e34de6701315ab089b100a619a87bda2bf734f6997bfe8e293c3a2fd720edb884") r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(0x0, 0x200000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ptrace(0x10, r1) ptrace$poke(0x1, r1, &(0x7f00000002c0), 0x6) r2 = fsopen(&(0x7f0000000000)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='minorversion\x00', &(0x7f0000000140)='5\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') faccessat2(r0, &(0x7f0000000280)='./file0\x00', 0x188, 0x0) read$FUSE(r3, &(0x7f0000007100)={0x2020}, 0x2020) 20.219697362s ago: executing program 1 (id=2787): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb173, 0x2) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000080)) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x47, 0x1, 0x80, "b408754749573f7c17e6e724c609b9424f5a003870ac2600", 0x32314d4e}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000140)=0x1, 0x4) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$key(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x2, 0x10, 0x5, 0x2, 0x2, 0x0, 0x70bd2b, 0x25dfdbfc}, 0x10}}, 0x20000000) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async, rerun: 32) mlockall(0x3) (rerun: 32) 4.997560636s ago: executing program 36 (id=2787): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb173, 0x2) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000080)) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x47, 0x1, 0x80, "b408754749573f7c17e6e724c609b9424f5a003870ac2600", 0x32314d4e}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000140)=0x1, 0x4) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$key(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x2, 0x10, 0x5, 0x2, 0x2, 0x0, 0x70bd2b, 0x25dfdbfc}, 0x10}}, 0x20000000) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async, rerun: 32) mlockall(0x3) (rerun: 32) 1.398202433s ago: executing program 7 (id=2985): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./sys/class/scsi_host/host0/link_power_management_policy\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/scsi_host/host1/scan\x00', 0x1, 0x0) fcntl$setsig(r1, 0xa, 0x1f) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r4, &(0x7f0000000540)={0xa, 0x4e23, 0x3, @mcast1, 0x8}, 0x1c) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r5) getsockname$packet(r5, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f00000006c0)={@private0={0xfc, 0x0, '\x00', 0x1}, r6}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0xf, &(0x7f0000000540)=ANY=[], 0x0, 0x7, 0x5f, 0x0, 0x41100, 0x48, '\x00', r6}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x3e, &(0x7f0000000580)=0x8, 0x4) write(r7, &(0x7f00000005c0)="a94caf", 0x3) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/class/scsi_host/host0/link_power_management_policy\x00', 0x1, 0x0) write(r8, &(0x7f0000000280)='max_performance', 0xf) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000180), &(0x7f00000003c0)=r8}, 0x20) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$char_usb(r9, &(0x7f0000000300)='-0', 0x2) ioctl$KVM_DIRTY_TLB(r9, 0x4010aeaa, &(0x7f0000000340)={0x10, 0xf}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r2, 0x0) socket$kcm(0x29, 0xf, 0x0) r10 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)={'wg1\x00', 0x8, 0x6}) ioctl$SG_IO(r10, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x68, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)="1c3513000000", &(0x7f0000002240)=""/4103, 0x10000, 0x30520cf7f25f0c64, 0x0, 0x0}) 1.309007344s ago: executing program 7 (id=2987): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x4076cbba9945d516, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x15809, 0xa00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r5}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x40840) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001c00070c2ebd7000fedbdf250a000000", @ANYRES32=r5, @ANYBLOB="40002f32140001"], 0x30}}, 0x20024090) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000003c0)={0x48, r1, 0x1, 0x70bd27, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0x2010100}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0xffffffffffffffd5, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x48}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x90) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(r6, &(0x7f0000001500)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) listen(r7, 0xc) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000001540)={0x2, 0x4e22, @loopback}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, 0x0, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtfilter={0x6c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff2, 0xffff}, {0x3, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_ACT={0x38, 0x3, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001580), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001640)={0x28, r11, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 860.008586ms ago: executing program 8 (id=2941): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372"], 0x50}, 0x1, 0x0, 0x0, 0x4044080}, 0x8000) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x42101, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="b3", 0x1}], 0x1) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 739.456851ms ago: executing program 8 (id=2996): mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000c40)='devtmpfs\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mkdirat(r2, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000440)='proc\x00', 0xdb0fa6c75b05fc25, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000000000/0x400000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0xb, &(0x7f0000000380)=ANY=[@ANYRES8=r3], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(&(0x7f0000000cc0)=@filename='./dev/sda1\x00', &(0x7f0000000d00)='./mnt\x00', &(0x7f0000000d40)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000d80)='./mnt\x00') ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) rmdir(&(0x7f0000000140)='./mnt\x00') mknod$loop(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x1) rename(&(0x7f0000001340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 738.888911ms ago: executing program 5 (id=2997): timer_create(0x0, &(0x7f0000000140)={0x0, 0xf, 0x0, @thr={&(0x7f0000000000)="f7f46b9b540d0594b7d3e40dc9e12cd1ef47438a73f4649ab46fa5b3dd9e9ef5848824633077758ff51e", &(0x7f0000000040)="4dfd417b8847319c7005d7c2515c4f5bc776109a10f654a85648ced45df770a6db7f1d019b5fcbc2a5590540b07b25bd9c1baa185b98b4621a3c9543d7ecf6a97255ae3be56ca1f917a3804b378b1107e1763934e9ef7cbf5eae0a3d0fe7935d24addf90e6e53a024daededc05bd7d9c0e5e1483df0d90e3685ce6fdccebf028c63044bd9b85b0c8aaae67f64e1f230f503dc08aa86b26eeefdf1fd6ee116b240693ca866667b96aa5c1b3e4cd5e024cde93c985b635cf7b1142cc6d07959f6236be34184cb46894e95236a8a4cdd72431d73999dc36d6280a98dc1353e270aaf98dae63ecf8e35fb2e3e5e14118a38a7730f5"}}, &(0x7f0000000180)=0x0) timer_create(0x6, &(0x7f0000000280)={0x0, 0x2d, 0x2, @thr={&(0x7f00000001c0)="b46d8ff75f8ad534314de88697e91e5628d15cf0bf8df525fd3e083eb22847cec4badc2ed7b799a78222b7a9eda594bbcbafecfe4afddbaf1dbfa38589c07c872b5d", &(0x7f0000000240)="da32917a11481da1582836cbc6c7fc95abc215c7bd67d1e2af069ce8d18ed0129d67"}}, &(0x7f00000002c0)=0x0) timer_settime(r1, 0x1, &(0x7f0000000300)={{}, {0x0, 0x989680}}, &(0x7f0000000340)) r2 = creat(&(0x7f0000000380)='./file0\x00', 0x6) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={&(0x7f00000003c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_DELTABLE={0x90, 0x2, 0xa, 0x301, 0x0, 0x0, {0x19c121660359a4ed, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x74, 0x6, "d2b84efc5e5393ff4915679c5e970b8266ed23a9a199c4183dad705d12038ee5d2f849e9b1435e8ea746f2cb636324596db702f564846a8a013cd03d8afb386d054bd1c23078d1a8a4dc3e8223682a210967d1bd334687d1b44ed39e10574560cb8851c1565e28415422ecf723eadfa5"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xb8}, 0x1, 0x0, 0x0, 0x8000000}, 0x4) ppoll(&(0x7f0000000540)=[{r2, 0x9088}, {r2}, {r2, 0x41}, {r2, 0x200}, {r2, 0x300}, {r2, 0x2}, {r2, 0x5089}, {r2, 0x444a}, {r2, 0x40}, {r2, 0x8035}], 0xa, &(0x7f00000005c0)={0x0, 0x989680}, &(0x7f0000000600)={[0x2]}, 0x8) timer_gettime(r0, &(0x7f0000000640)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) r3 = syz_create_resource$futex(&(0x7f00000006c0)=0x2) futex$unlock_pi_list64(r3, 0x207, 0x6, &(0x7f0000000700), &(0x7f0000000740)=0x100000001, 0x4) r4 = socket$kcm(0x29, 0x0, 0x0) r5 = socket(0x27, 0x4, 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000800)={r4, r5, 0x4, 0x69, &(0x7f0000000780)="e5f0eee50e47476a2b547333f1fe1357a650f68ce481fb789bd2ecfcb659f5406fb0cb401603d102860d901966605dd9e6c5a2994cac6b8b78370a0660a8f240310d125642d134f99d8cf989d260cf05966e4834b67850de8f3f8784dd1b3dca37cb57a33210cf0dea", 0x4, 0x0, 0x9, 0x5, 0x9, 0x1, 0x2, 'syz1\x00'}) r6 = mmap$IORING_OFF_SQ_RING(0x0, 0x6, 0x1, 0x10010, r2, 0x0) syz_io_uring_setup(0x5fb7, &(0x7f00000008c0)={0x0, 0xcfcf, 0x10, 0x3, 0x3}, &(0x7f0000000940), &(0x7f0000000980), &(0x7f00000009c0)=0x0) syz_io_uring_submit(0x0, r6, r7, &(0x7f0000000a00)=@IORING_OP_NOP={0x0, 0x10, 0x0, r4, 0xf, 0x4, 0x1, 0x8, 0x1, {0x3}}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000000a80)={0x1, 0x3, 0x80000001}) timer_getoverrun(r0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ac0)={0x1b, 0x0, 0x0, 0x3, 0x0, r2, 0xffffe1ac, '\x00', 0x0, r2, 0x5, 0x2}, 0x50) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000e40)={'ip6tnl0\x00', &(0x7f0000000dc0)={'syztnl2\x00', 0x0, 0x29, 0xad, 0x3, 0x7, 0x5c, @empty, @dev={0xfe, 0x80, '\x00', 0x26}, 0x8000, 0x1, 0x6, 0x7}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f80)={0x6, 0x26, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x7, 0x0, 0x6, 0x4, 0x7, 0x1, 0x4}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0xb, 0x1, 0x0, r2}, @generic={0x4, 0x0, 0x3, 0xb, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000c80)='syzkaller\x00', 0x3, 0xc6, &(0x7f0000000cc0)=""/198, 0x41100, 0x14, '\x00', r9, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000e80)={0x2, 0x3, 0x10000, 0x9}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000ec0)=[r2, r2, r2, r2, r2], &(0x7f0000000f00)=[{0x1, 0x2, 0x8, 0x9}, {0x3, 0x5, 0x2, 0x1}, {0x4, 0x3, 0xc, 0x6}, {0x4, 0x4, 0xe, 0x9}, {0x2, 0x1, 0x7, 0x6}, {0x2, 0x4, 0x6, 0x7}], 0x10, 0x4}, 0x94) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0x9) timer_gettime(r0, &(0x7f0000001040)) r10 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r10, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000001080)="c1bdf35c15591d7fc23ad686c239079bf63cffa9696b0e026d8eaadd4d8232cfe3b4c0459811b3efd5eda5ac8f1167dcaf4a3d14d6774e37b4f7c0aa30d00a7bb348eb5d513c8a91b360221d7c445671da8e26dbf62007b5c4e00e39dd5065a9c814322dcde2cbb90dc32ee4ce482912cf4cb75b810ac4c53de68dadc4a794594c7c690685f6aa9e9fbafee3b0da278e81238008026a1d7f8b3fec293a79c925ee37449d495dd67f773b83fbbf8159ad87763025a5181e495aa25c80f2215320909e9c04f0e9a181", 0xc8}, {&(0x7f0000001180)="69ecbae07b6a41617b57e72be6bfd8c465c8761042fc87624b00cd9855e8d74dd019bda52a833d1d708c610b52a73d674f01c414f2b68e8dc9a93d2af61e8a567c38ce3db3dde716628267da664975e7e343fe6c9d05abe7d98294cb142157a1ed05187a06e35be06ed17edb11dda03f342851e4bf46066c5a9a117b832d79f3c266aea0adc433bce25e43d4626456789cfce97c3939b6274547b3d848c648227a7510790047af63d30aedfedf", 0xad}, {&(0x7f0000001240)="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", 0x1000}, {&(0x7f0000002240)="645bc21ba34e0db7ddeec272a73f320e5885065fcb555b406b002a15ceebe73687b492b5ce4c81ceb63e474ebb28cd23c9a512d1c7191465a43f5baa62b186be42a96d595d7b2f597516f5bd8a60790de859471220eb8da44a8c7cabeb6d47950f1a7d78a5ea25d56d39bb2f10d42abf2d18", 0x72}], 0x4, &(0x7f0000002300)=[{0xb8, 0x108, 0x200, "144c9c964ec03b8fe85b3d4c2d8b572f0527d31a66430d531058abc55a9645e9ab5a8d1c8a9d1a9c959056902326e0f6b118e0782f2cda2b9dcce8b93bf5c1851deebf01f9847537aad65ee52165dadce1b3706e1b50fb8a2b1d7c02eb18ffcb9ba99e274c73cbd6d05040146db45aa5d6c23e86fc1cf489ddadf85d9e5f5ff34fe59b3aa22464d8106880320515d3333c6d0f977cc779b481cb4e8bfc4fd9759b"}, {0x98, 0x281, 0x2, "254c08af5813e22f1514bf407946a271998c021b0c419ebe324996d04eaa39e02840a65a9ec51fd079e602908c1af1f4df11809d119b8ef26bb11d7cb08c070e73d3c810b42453598668195a58aecb2a9fed46397d583b4d7801339b98a8886a82061a3b35b00c22fc2abc1015f58d51b69383301be01dcb4c077b1a4aadb23d64e4ec"}, {0x108, 0x10c, 0x4, "ae3be0187ebc73412a46e1af4b4b38c9d6cca26b905aaa8c13a3998cf34125568677640d4ca3c899612005a493371823858fd2a6d13c6a9db971821cbab80ed07165e8f30596d772f190d426ec5109b455a27938ca6dd70f44560796fd3002eb384ca6be255e3593ac12d6a074dd8efc264e556a84c4458c132e8777e6a88b7ad24325766c672679ccca2e40584839cbcaa487300bf15ede28e4edccea268593c052781237982b61fe91752cba5203baa1e9dcdc16993530c66ada7439675cc3ff4730db969c6e2286ec6d6deb0c58b502117cb05d2fefa7d7b6b67cd27649905533e9e48fee738348d0f8b0a174488cc1"}, {0xa8, 0x0, 0x4, "8507f12175b5d579bd876723120586cf4a00949ec2c914c69c8cdc981fd0bfdec194a2eada33930623fa2ec2c060d25f2d0adc9946517e024cd2fb52354e22277daba2bf30cda97915b2f886c7ee837e31a1aff7e655dab92ba1deb48bb3c531f289599b23fcdf123bc3df12a64e8b80b2715892885c20673a37bebef0fade31d45f4a6c4baddf3c3abb09c52a9a07ca9a2ba3"}], 0x300}, 0x4000050) timer_delete(r1) ioctl$FS_IOC_GETFSLABEL(r5, 0x81009431, &(0x7f0000002640)) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000002780)={0x17, 0x1, &(0x7f0000002740)="82"}) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f00000027c0)={{{@in=@private, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6}}, &(0x7f00000028c0)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000002900)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x12}, 0x4e23, 0xb608, 0x4e22, 0x0, 0x2, 0x0, 0xc0, 0x5c, r9, r11}, {0xfffffffffffffff8, 0xd9d5, 0x7, 0x9, 0x7, 0x2, 0xffffe00000000000, 0xfffffffffffffffa}, {0x100000001, 0x6, 0xb, 0x3}, 0x47, 0x6e6bbc, 0x2, 0x0, 0x2, 0x3}, {{@in=@local, 0x4d3, 0x32}, 0x2, @in=@broadcast, 0x3501, 0x4, 0x1, 0x7f, 0x7, 0x4}}, 0xe8) 737.769012ms ago: executing program 5 (id=2998): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth0_to_bond\x00', &(0x7f0000000040)=@ethtool_drvinfo={0x3, "0bac4a5346dc0d56e21f94fa180f18a3d554087591b7dce7e89632a01bce77d3", "1403bbb2ea2ce55d8f2154debe507d3aca66db09ebd04d033f01a3e8f5a0b9c4", "b2536e1d83b778559e2e7cf678a6fa17e6150f3b4dc2d3f6254dd59b0f07966e", "e064d6882c0abcc474011ab06ab644af909b83887425c5a7327e76d8a8159dcf", "8a7a7006a89906aa59fb05eb6520ecde470a844d55553947e19ccf0c1267957a", "03134ea5fcb96711d68cfed5", 0x7f, 0x1, 0xfffffffa, 0x101, 0xbdff}}) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth0_to_bond\x00', &(0x7f0000000040)=@ethtool_drvinfo={0x3, "0bac4a5346dc0d56e21f94fa180f18a3d554087591b7dce7e89632a01bce77d3", "1403bbb2ea2ce55d8f2154debe507d3aca66db09ebd04d033f01a3e8f5a0b9c4", "b2536e1d83b778559e2e7cf678a6fa17e6150f3b4dc2d3f6254dd59b0f07966e", "e064d6882c0abcc474011ab06ab644af909b83887425c5a7327e76d8a8159dcf", "8a7a7006a89906aa59fb05eb6520ecde470a844d55553947e19ccf0c1267957a", "03134ea5fcb96711d68cfed5", 0x7f, 0x1, 0xfffffffa, 0x101, 0xbdff}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x13, r1, 0x800000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) write(r2, &(0x7f00000001c0)="38000000240001040100000000000000000000000100000000000100ffffffff0000000008000100657473000c0002800500010010000000", 0x38) (async) write(r2, &(0x7f00000001c0)="38000000240001040100000000000000000000000100000000000100ffffffff0000000008000100657473000c0002800500010010000000", 0x38) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000005c0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0xffffffff, 0x91, 0x4, 0x4, 0x16, 0x10, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x1, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x7, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x6, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x9e9, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf47, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0x2, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000380)={'dvmrp1\x00', 0x1}) ioctl$TUNSETOFFLOAD(r6, 0x400454d0, 0xa930bb9f3fd061f7) pwritev(r5, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="d4cc", 0x2}], 0x1, 0x2, 0x4a49) (async) pwritev(r5, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="d4cc", 0x2}], 0x1, 0x2, 0x4a49) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000b80)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000c40), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000c80)={0x1, 0x0, [{0xb, 0x5, 0x1, 0x400, 0x1, 0x2, 0x3}]}) (async) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000c80)={0x1, 0x0, [{0xb, 0x5, 0x1, 0x400, 0x1, 0x2, 0x3}]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000cc0)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000d00)=[@text32={0x20, &(0x7f0000000d40)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000d00)=[@text32={0x20, &(0x7f0000000d40)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000d80)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) ioctl$KVM_RUN(r10, 0xae80, 0x0) 640.639853ms ago: executing program 8 (id=3001): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000100)={{&(0x7f00005e3000/0x3000)=nil, 0x3000}, 0x1}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x7, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0xffffff0000200000) 607.082708ms ago: executing program 8 (id=3003): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000002180)=[{{&(0x7f0000000280)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}], 0x1, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4, @local}}, 0x9a, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) close(0x3) r3 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000000180), 0x4) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f00000001c0)=0xfffffffe, 0x4) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000080)={r1, 0x800}, 0x8) 599.055653ms ago: executing program 6 (id=3004): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_sctp(0x2, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x1c1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900), 0x80, &(0x7f0000000940)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000009c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000002a00)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000002a80)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r2, &(0x7f0000002ac0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000004ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004b80)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="04010000100001042cbd70000000002fac1e0101000000000000000000000000ac1414bb000000000000000000000002000000000000001a0a00000000000000f60fbe8c32e9961ff510b3111d8d856bc1fd3335173157e1df647563baf163e8bc3c246b7871159e8ef92a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000004d23c00000000000000000000000000ffff0a010100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff000000000000000000000000000000000000000001000000000000000000000000000000000000100000000000000000000000200a000400000000000000000014000e000a01010200"/188], 0x104}}, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/class/thermal/cooling_device0/type\x00', 0x0, 0x0) read(r5, &(0x7f0000000440)=""/1024, 0x400) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r4, 0xc0505510, &(0x7f0000000080)={0x10008, 0x3, 0x6, 0x1ff, &(0x7f00000001c0)=[{}, {}, {}]}) 528.789083ms ago: executing program 8 (id=3005): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=@newsa={0xf0, 0x1a, 0x633, 0x1, 0x25dfdbfd, {{@in=@multicast1, @in6=@loopback, 0x0, 0x4000, 0x4e24, 0x8001, 0x0, 0x80}, {@in6=@mcast1, 0x0, 0x32}, @in6=@loopback, {0x323, 0x80000001, 0x0, 0xc0, 0x4000, 0x0, 0x0, 0x8}, {}, {0x0, 0x6}, 0x70bd2a, 0x3503, 0xa, 0x6}}, 0xf0}, 0x1, 0x0, 0x0, 0x4000}, 0x200080d4) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x88002, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) (async) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000140)) (async) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000004c0)={'syzkaller1\x00', 0x1}) (async) r5 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000500)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000540)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x8, 0x0, 0x102}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x800) (async) write(r4, &(0x7f00000008c0)="00008847d100582a", 0x8) (async) socket$can_raw(0x1d, 0x3, 0x1) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) (async) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x40002, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) syz_open_dev$dvb_dvr(&(0x7f0000000600), 0x0, 0x4002) (async) ioctl$RFKILL_IOCTL_NOINPUT(r7, 0x5202) (async) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) 528.371207ms ago: executing program 6 (id=3006): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000240)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2a, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x8080) 419.330379ms ago: executing program 7 (id=3007): r0 = io_uring_setup(0x667, &(0x7f00000000c0)={0x0, 0xa14a, 0x400, 0x1, 0x235}) (async) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x1}) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0xffff, 0x4, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async) pwritev2(r3, &(0x7f0000000940)=[{&(0x7f00000009c0)="29dc8575b6694a66b6b618410c77605770509a7deedca167a068f458e9785aa9532e10507ca5bb2a564cd01d5270ba4b6c06ec49c80d9225a7e04d9ca0dd7fc449f5fda4b34e7b097a5b612e69aff8155db987a117a3c899d1d4bd3a9df4a57d8ba7151171462f1ba8a9492643c4462a432cb2730a9b9872d365b997547d2c80a059880bee9b2ae1fbcdee5776fd44f4c2515ddf7053980a0656c447f494a0d6e57976b4bd336e131df0f8b86e77c4c7a6a3ba2c9d86669d", 0xb8}, {&(0x7f0000000580)="82a2fae4c21b69e13f5f43b6e231f671e85f23654664b45444ef27c10ce95aa3ac25891c759852524a50b1de59b5e4bc67a34747916775807cb0c3fd0dc876b1248a144e71ae461fc87d41e59f008b942312ba26fad057cd67758d01c89ced0dcef0c233c8a2116d4268b8250ba9355ab5d2fb3612cb47f4cb86c948f15a6a0ff15cb417ceed5a35978bb48d37ad54d3369d4eca667b1ee17f7490103d11480b379ce9cf90df9de3465f28e350d539a5bbf0fad104ea95d4ba61a8ec537ccc7ce308e31c19f97f94af8b75e19ee48a751f5befdcef8392a12a16a9f2bf5ca1fc198b668af9936252f8d047a23f7325b1227bf947c4691988", 0xf8}, {&(0x7f0000000680)="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", 0xfe}, {&(0x7f0000000780)="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", 0xfa}, {&(0x7f0000000880)="38279c82485db9e5c636b9e7065c9e0a70d8c5cf2a60378f0755af4db5ea39d8ea05dc92b165fc0a8449326713e74d062e7c2780524b970ee6615cba080127b308ff5eea303fd62b7bb4dbb87b617a60c98dc785cb47ed7096b956741a52d22cc44f6b16cfbbf0cfeab5173a98af9904d50299", 0x73}, {&(0x7f0000000900)="85c7f8720d190c099e6f1b7bca8e323321afec9b089d465aa7317c3d56da1b977fd0ed9d4dd14fe267c74de2f04c2235767961a41eca", 0x36}], 0x6, 0x6, 0x5, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24040084) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xfff2}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004805d}, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x4, 0xa}, {}, {0xffe0, 0xffe0}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff2, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (async) close_range(r0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60000000001406fffe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c200009078f4e2"], 0x0) 414.220236ms ago: executing program 6 (id=3008): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r1, &(0x7f00000000c0)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000200)={0x2, 0x0, [{0x7, 0xfffffff8, 0x7, 0x703f4ebb, 0x1000001}, {0x1, 0x6, 0x6, 0xffffffff, 0x3}]}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0x72, 0x1, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x2}, &(0x7f0000001fee)='y\xa9rust\xe3c*s\xb8dn::e\x00\x00', r0) 413.009618ms ago: executing program 5 (id=3009): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtaction={0xeb4, 0x30, 0x1, 0x0, 0x0, {}, [{0xea0, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x3, 0x7}, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xfff, 0xffff, 0x6, 0x9, 0x1}, 0x0, 0x4}, [{0x400, 0x504d, 0x20ae, 0x7, 0x4, 0xb}, {0x8, 0x3, 0x7, 0x9, 0x4, 0x4}, {0x762, 0x1, 0x5000, 0x1, 0xfffffff7, 0x6ac5}, {0x85b5, 0x0, 0x5, 0xc3, 0x0, 0x7f}, {0x7, 0x523, 0x8, 0xd, 0x9, 0x6}, {0x120, 0xfff, 0x4, 0x80, 0x0, 0x5}, {0x7fff, 0x4, 0x2, 0x200, 0x8, 0x3}, {0x9, 0x101, 0x81, 0x8001, 0xfffffffe, 0x7f}, {0x6, 0x0, 0x5, 0x10, 0x7fff, 0x7}, {0xffffb215, 0x400, 0x6, 0x7ff, 0x0, 0x9}, {0x1, 0xffff, 0x10, 0x6, 0xffff, 0x5}, {0x6, 0x5, 0x6, 0x9, 0x8, 0x4}, {0x9, 0x0, 0x6, 0x8, 0x0, 0x2}, {0x7fff, 0x6, 0x7, 0x6, 0x4d2, 0xa}, {0x4, 0x8, 0xd, 0x4, 0x2eb, 0x9}, {0x2, 0x3, 0x100, 0x2, 0x3, 0xbbf}, {0x0, 0x3ff, 0x9, 0x1, 0xf, 0x4}, {0x7, 0xfff, 0xa, 0x6, 0x200, 0x25d}, {0x0, 0x6, 0x0, 0x1, 0x0, 0x2}, {0x5, 0x4fb5, 0x7, 0x2, 0x1}, {0x3, 0xfffffffd, 0x4, 0x80000000, 0x9a, 0x10001}, {0x2, 0x9, 0x7fffffff, 0x5, 0x5, 0x6}, {0x5, 0x8, 0x2, 0x400, 0x4}, {0x7, 0x4, 0x8273, 0x3ff, 0x6, 0xc}, {0x4006008c, 0x80000001, 0x5, 0x3, 0x6, 0xe}, {0x3d8, 0x4, 0x2, 0x400, 0x9, 0x1}, {0x2, 0x5, 0x101, 0xf, 0x5, 0x33}, {0x9, 0x0, 0x1, 0x2, 0x2, 0x1}, {0x8, 0xab, 0x400, 0x7, 0x7, 0x3fa33a2}, {0x7f, 0x1, 0x8000, 0x6, 0xffffffff, 0x5}, {0x6, 0x6, 0x1, 0x8, 0x1a000, 0x6}, {0x9, 0x7, 0x1f6f, 0x1, 0x5c6d, 0x2}, {0xfffffffb, 0xe104, 0x9, 0x400000, 0x9, 0x5}, {0xfffffff6, 0xe6df, 0x1, 0x4, 0x5, 0x4}, {0x7f, 0x1, 0x24000, 0x81, 0x3, 0x2}, {0x7f, 0x8, 0x7, 0x5, 0x0, 0x4}, {0x1, 0x401, 0x6, 0xe9, 0xffff, 0xe}, {0x1, 0x4438, 0x10000, 0x80, 0xff, 0xff}, {0x50c, 0x10, 0x2, 0x2, 0x3, 0x7}, {0x8, 0x4, 0x6, 0x4, 0x30000000, 0x6}, {0x1, 0x6, 0x9, 0x5, 0x3786, 0x7}, {0x2, 0x7fffffff, 0x3, 0xfffffff9, 0x1, 0x100}, {0xb3d2, 0x1c, 0xa, 0x5, 0x2, 0x4}, {0x0, 0x0, 0x1, 0x705bf47a, 0x6, 0x7}, {0x4, 0x85c, 0x7, 0x3, 0xffffffc0, 0x7}, {0x1ff, 0x6, 0x5, 0x1, 0x5, 0xa50}, {0x8, 0x3, 0x5, 0xfe, 0x8, 0x7}, {0x7, 0x80000001, 0xca8, 0x9, 0x1, 0x17d}, {0x4, 0x8, 0xa, 0x5, 0x7, 0x4}, {0x2, 0x8, 0xffff26df, 0x2, 0x1, 0xa}, {0xfffffff9, 0x8, 0x5, 0xf7, 0xf9, 0x10}, {0x82c0, 0x7, 0x200, 0x2674, 0x2}, {0x4, 0x5, 0x9, 0x3, 0x0, 0x6}, {0x1, 0xeea0, 0x4, 0x7fffffff, 0x2, 0x9}, {0x8, 0x4, 0x6, 0x6, 0x1c20000, 0xe}, {0x7, 0x3, 0x2, 0x9, 0x400, 0x3}, {0x9, 0x2, 0x2, 0x8, 0x0, 0x3}, {0xf, 0x1, 0x9, 0xffff0000, 0x9d, 0x9}, {0x1, 0x7, 0x4, 0x901e, 0x1, 0x7}, {0x101, 0x7, 0x9f, 0x3, 0x10, 0x323b}, {0x1000, 0xd, 0x6575, 0xfffffff9, 0x6, 0x9}, {0x1a, 0x9a, 0xff, 0xf, 0x0, 0x3}, {0x3, 0xed34, 0x2, 0x8, 0xfffffff7, 0x37b}, {0x9, 0x9, 0x45e3, 0xbecd, 0x7, 0x5}, {0x8, 0x2, 0x1, 0x6, 0x2, 0x40}, {0xffffb779, 0x4f8, 0x6, 0x8, 0x3, 0x7}, {0x3, 0x327d, 0x6, 0x5, 0x10001, 0xe7}, {0xfffffffc, 0x1e, 0x6000, 0x3, 0x8000, 0x4}, {0x0, 0x1, 0x0, 0x1, 0x3, 0x2}, {0x1, 0x401, 0x7fff, 0x3, 0xb966, 0x10001}, {0x0, 0x5, 0x1, 0x0, 0x5, 0xfffffffa}, {0x2e9, 0xde0b, 0x7f, 0x5, 0xfbb, 0x1}, {0xb2000000, 0x400, 0xffff0000, 0x2, 0x400, 0x2}, {0x3, 0x1, 0x4, 0x10001, 0x2, 0x2}, {0x7, 0x80000001, 0x0, 0x7, 0x8, 0x4}, {0x8001, 0x4, 0x7ff, 0x6, 0x3ff, 0x4a7e95ef}, {0x7, 0x1, 0x7, 0x8, 0x81, 0xfffffff8}, {0xe12f, 0x0, 0x8, 0x7, 0x9, 0x7ff}, {0x9, 0x9c, 0xffffffff, 0x6, 0x3, 0x1}, {0x3, 0x1000, 0x100, 0x2, 0x8, 0xe42e}, {0xd, 0x1995, 0x6, 0x7, 0x2, 0x5}, {0x6, 0x5, 0x2, 0x1, 0x100, 0x400}, {0x3, 0x4, 0x9, 0x43, 0x8000, 0x3}, {0x1000, 0x101, 0x6, 0x2, 0xfffffff9, 0xfffffffa}, {0x8, 0x6, 0x26000000, 0x8, 0x80000000, 0x8000}, {0x7f, 0x5, 0xf74e, 0x9, 0x6, 0x8108}, {0x3, 0x8, 0x0, 0x6044, 0x2, 0x6}, {0xfffffffd, 0x2, 0x3, 0xfc1, 0xf, 0xfff}, {0x0, 0x0, 0x7, 0x80000001, 0x2, 0x80000000}, {0x3, 0x1, 0x9, 0x70, 0x81, 0x21c5}, {0x40, 0x5, 0xf761, 0x2, 0x8, 0x1}, {0x8, 0x1, 0x9f44, 0x3, 0x1, 0x4}, {0x6, 0x3d, 0x8, 0x8, 0x10001, 0x4}, {0x6, 0x9, 0x30, 0x7, 0x4, 0x6}, {0x7fff, 0x10, 0xd8f, 0x38000, 0xff, 0x31ab}, {0x2, 0x3, 0x9, 0x5d10, 0x7f, 0x7}, {0x5, 0x200, 0x8, 0x3, 0x9, 0xb}, {0x5, 0x2, 0x2, 0x0, 0x8, 0x5}, {0x80000001, 0x1, 0x1, 0x6, 0xb7f, 0x6}, {0x7, 0x4, 0x6, 0x5, 0x3}, {0x9, 0x9, 0x0, 0x6, 0x8, 0x8}, {0xc82, 0x4, 0x0, 0x614, 0x5b025791, 0x4}, {0x400, 0x2, 0x6, 0x22404ff0, 0x8}, {0x4, 0x80000001, 0x400, 0x18000000, 0x80000001, 0x1}, {0x5, 0x5, 0x6, 0xfff, 0xfffffffe, 0x10001}, {0x5, 0x87, 0x1, 0x5aa, 0x1, 0x800}, {0x7, 0x7, 0x2, 0xed0, 0x2, 0x7f}, {0x2, 0x4, 0x5, 0xb9, 0x8, 0xfff}, {0x1, 0x9, 0xe, 0x1, 0xb}, {0xfffffff9, 0x7, 0x9, 0x9e, 0x76, 0x80000001}, {0x9, 0x5b, 0x101, 0x8, 0x2}, {0x2, 0x6d3f, 0x8000, 0x2353, 0x27a6, 0x766e17e}, {0x6, 0x9, 0xd, 0xffffffff, 0x4, 0xa7d2}, {0x8, 0x2, 0x8, 0x1, 0xfffffffa, 0x2}, {0x4, 0x81, 0x959, 0x39, 0x2, 0x8}, {0xbf0, 0xfff, 0x5, 0x1000, 0x1, 0x6cac}, {0x1ff, 0x1, 0x9, 0x9, 0x0, 0x7}, {0x80000000, 0x2f, 0xb, 0x0, 0x4, 0x4}, {0x6, 0x100, 0x116, 0xbc6, 0xfff, 0x3}, {0x8, 0x508, 0x7fffffff, 0x83bc, 0x7, 0x3}, {0x4, 0x2, 0x3, 0x10fd, 0x800, 0x8}, {0x8000, 0xbab, 0xffff0000, 0x8000, 0x6, 0xe5}, {0x10, 0x9, 0x1ff, 0x400, 0x1, 0x7}, {0x8, 0x64, 0x7, 0x1d2, 0xfffffffa, 0x8}, {0x3, 0x7, 0x4, 0x8, 0x1}, {0x9, 0x5, 0x800, 0xfffffffb, 0x4, 0xf}, {0x4f, 0x0, 0x8, 0x2, 0xfffffc00, 0x105}, {0x5, 0x7, 0xb, 0xe9, 0x4, 0xc00000}], [{0x1}, {}, {0x5}, {0x5, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x5}, {0x1}, {0x3, 0x1}, {}, {0x2}, {0x4, 0x1}, {0x1}, {}, {0x5}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x4}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x4}, {0x2}, {0x5, 0x1}, {}, {0x4}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x4, 0xf5ca9f525ddf3665}, {0x3}, {0x1}, {0x0, 0x1}, {0x5}, {0x4}, {0x4}, {0x2, 0x1}, {0x5}, {0x5}, {}, {}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x3}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x7, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x7, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x4}, {0x5, 0x1}, {}, {0x3}, {0x7}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb4}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) 358.692395ms ago: executing program 6 (id=3010): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x4, 0x103) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000040)={0xe00000, 0x9, @value=0x9}) sendmsg$NFT_BATCH(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe8}}, 0x4000840) 357.945672ms ago: executing program 5 (id=3011): open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000020100000000000002f7772f0000000000000000"], 0x513300) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='e', 0x1}], 0x1, 0x3) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [{{0x254, 0x1, {{0x3, 0x5}, 0xc, 0x3, 0xa000, 0x3, 0x10, 'syz0\x00', "3f5a4b4b07bb6dc6429ecc6c43cd068b28d2d2e51689a1d99c2d42a59fdc62b8", "fcd24d468918b853e8e0df8098bd105f3f60dfbdad018ac95bd5c7f2c26cb5d7", [{0x2, 0x9, {0x3, 0x4}}, {0x4002, 0x28, {0x2, 0x7}}, {0x78, 0x200, {0x1}}, {0x3ff, 0xb76, {0x3, 0x10}}, {0x2000, 0xb, {0x3}}, {0x5, 0x8e7, {0x1, 0x2}}, {0x4, 0x8000, {0x0, 0x5}}, {0xfffa, 0x0, {0x3, 0x80000001}}, {0x3, 0x7, {0x0, 0x722c}}, {0x4, 0x3ff, {0x0, 0x3d}}, {0x800, 0x5, {0x2, 0x523490a8}}, {0x7, 0xbd9, {0x3, 0x5}}, {0x7, 0x5, {0x1}}, {0x4, 0x4, {0x1, 0x8b8}}, {0xf74, 0x800, {0x0, 0x1}}, {0x5, 0x1, {0x3, 0x7}}, {0x1, 0xfff, {0x0, 0x1}}, {0x6, 0x2, {0x1}}, {0x7, 0x2, {0x0, 0x1}}, {0x9, 0xe5, {0x0, 0x5}}, {0x4, 0x6f, {0x3}}, {0x2, 0x802, {0x1, 0x45f}}, {0xfff9, 0x4, {0x0, 0xa}}, {0x1, 0x56ee, {0x3, 0xfffff5a5}}, {0x2, 0xfffb, {0x3, 0x3}}, {0x33, 0x6, {0x0, 0xf8f1}}, {0xfff2, 0x1, {0x0, 0x80d6b}}, {0x40, 0x7e5e, {0x1, 0xa0}}, {0x9, 0xb, {0x1, 0x800}}, {0x6, 0x7, {0x2}}, {0xfffd, 0x3, {0x3, 0x2}}, {0x2, 0x7, {0x3, 0x6a}}, {0x4, 0x0, {0x3, 0x3}}, {0x8000, 0x2, {0x2, 0x8001}}, {0x101, 0x6, {0x1, 0x10000}}, {0x5, 0x8000, {0x3, 0x36}}, {0x3ff, 0x81, {0x1}}, {0x4, 0x7f, {0x1, 0x89}}, {0x1, 0xfff5, {0x0, 0x9}}, {0x1, 0x7, {0x0, 0xa3}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x20001}, 0x44008) (async) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0xfffffffffffffefd, 0xa, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x800) (async) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x48, &(0x7f0000000580)=0xa, 0x4) (async) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) (async) request_key(&(0x7f0000000700)='ceph\x00', &(0x7f00000007c0)={'syz', 0x2}, &(0x7f0000000800)='V\\@[\x01\x00\x1b\x00\xaaJ&\xd0\xc5cC\xf4\x16NGY\x8c\x8dAt\x8e\x17iN\x1bd\xcc\xef\xec\x1a\']\x05\xec3\xdb=\xab\x13\xf2<]x\xca\xb30\xb7\xff~C_v\xca\xed\x12\x8d\x88\xc6\x02\x00\x00\x00\\$p\xa4\xe9x\\W\x00<#hyWF\a\x1a\xca9s\x97\x03\xf2\xf9\x9c?w}m\xb29w.#\xe4\xf0,|\xce\xa5\x8a<\x00\xba\x1c\x05\xc8\xe7R\x85\xf5+\xab_bo\x02\xcb\x17\x95C\x024?\x1cqJ?\xd3\x8d\x81', 0xfffffffffffffffe) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r5, @ANYBLOB="1c00238005000e000100000008001500f2000000080014002fffffffe1349550c131bd6ab60c61de653700ad7337371a813027cbff7461584aac7fb8c1475b0123aa4bfff0a594aac7734cf66df4054885986d76be1abf5a3e"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8090) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000008c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) (async) r6 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000a80), 0x1, 0x0) ioctl$OCFS2_IOC_RESVSP64(r6, 0x4030582a, &(0x7f0000000ac0)={0x2, 0x2, 0x71d96b51, 0x2, 0x10001, 0x3}) setns(0xc9, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) ioctl$TUNSETLINK(r7, 0x400454cd, 0x10f) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000b40)={'syzkaller0\x00', 0x1}) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) (async) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000900)={0xa, 0x4e22, 0x0, @loopback, 0x4}, 0x1c) listen(r8, 0xfffffffc) 357.517556ms ago: executing program 6 (id=3012): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000014020000000000000000a109bf8010000000000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xe000000, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) 357.339169ms ago: executing program 7 (id=3013): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0xe0881) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000180)={{0x0, 0x3}, {0x6, 0x81}, 0x6, 0x4, 0x1}) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x8040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x80b02, 0x0) 357.126655ms ago: executing program 5 (id=3014): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001a00b500000000000000000002004000fc80c8090000000005001b"], 0x24}}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000480)={0x0, "b500e2279c2996817bb959eb2b238deda525e1dbdeffafbf2500"}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000100)=""/243) 280.146314ms ago: executing program 6 (id=3015): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0) (async, rerun: 64) r2 = syz_open_dev$mtd(&(0x7f0000000300), 0x42e, 0x882) (rerun: 64) ioctl$MEMREADOOB64(r2, 0xc0184d16, &(0x7f0000000340)={0xe, 0x0, 0x0, 0x0}) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000200)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000280)={r3, 0x7fff, 0xa, 0xfffffff7}, 0x10) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000002c0)={r3, 0x200}, 0x8) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000640)={0x1f, 0x3}, 0x6) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x13, 0x0, 0x0, 0x0, 0xf9aa, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000680)=[{0x3, 0x5, 0xd}], 0x10, 0x7}, 0x94) (async) syz_emit_ethernet(0x56, &(0x7f0000000380)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @local, @void, {@canfd={0xd, {{}, 0x25, 0x1, 0x0, 0x0, "a6c32f1e2c5676d94ebb59a7012f7229f43d45c43d69df49d0928fa2fe215d5511958f27fd5ab262f0ec33eaa02a263dacf580857411ff1beec4db578f88e37c"}}}}, &(0x7f0000000400)={0x0, 0x4, [0x11, 0xb21, 0x30f, 0xf2b]}) (async) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000040)) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000080)=0x6f) (async, rerun: 64) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async, rerun: 64) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r4, 0x1040}], 0x1, 0x0, 0x0, 0x0) (async) write$dsp(r5, &(0x7f0000000140)="a5", 0x1) (async, rerun: 32) write$binfmt_misc(r4, &(0x7f0000000680), 0xd) (rerun: 32) 279.666631ms ago: executing program 7 (id=3016): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0xb4a}) setns(0xc9, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002940)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002a80), r2) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002b40)={&(0x7f0000002b80)={0x24, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, 0x8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}]}, 0x24}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000002980)={'wlan0\x00', @broadcast}) r5 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x438, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x368, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./proc\x00', &(0x7f0000000740)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./proc/net/xt_recent/syz0\x00', 0x2, 0x3) write$tun(r6, &(0x7f00000007c0)={@void, @void, @x25={0x1, 0x7f, 0x1f}}, 0x3) socket$netlink(0x10, 0x3, 0x8000000004) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000f01f00660000007f00000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000040)={r7, &(0x7f0000000080), &(0x7f0000000800)=""/227}, 0x20) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000000900)={0x2020}, 0x2020) r9 = openat(0xffffffffffffff9c, &(0x7f00000029c0)='./proc/thread-self/fail-nth\x00', 0x2, 0xc9) write(r9, &(0x7f0000002a00)='27', 0x2) ioctl$KVM_HAS_DEVICE_ATTR_vm(r9, 0x4018aee3, &(0x7f0000002ac0)=@attr_other={0x0, 0x0, 0x628cd348, &(0x7f0000002a40)=0x7}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002bc0), r10) sendmsg$TIPC_NL_MON_SET(r10, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000002c80)={0x20, r11, 0x1, 0x70bd21, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x404088c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 279.548549ms ago: executing program 5 (id=3017): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) (async) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="02c9001c00180005"], 0x21) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x2}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000780)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f00000005c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) (async) r3 = socket(0x10, 0x80002, 0x0) sendmsg(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)="24000000180003041dfffd946f6105000a0100000005fe060c10880008000f00fff3c00e140000", 0x27}], 0x1}, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000cc0)=""/200, 0xc8}], 0x1, 0x25, 0x7fff) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./dev\x00', 0x1ff) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) mount(0x0, &(0x7f0000000800)='./dev\x00', &(0x7f0000000840)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./mnt\x00', 0x0) (async) mount(&(0x7f00000008c0)=@filename='./dev/sda1\x00', &(0x7f0000000900)='./mnt\x00', &(0x7f0000000940)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) chdir(&(0x7f0000000980)='./file0\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x200000) symlink(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) unlink(&(0x7f00000000c0)='./file1\x00') (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000680)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) setgroups(0x0, 0x0) getuid() (async) fstat(r0, &(0x7f0000000540)) getuid() 0s ago: executing program 7 (id=3018): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001680), 0x0, 0x0) ioctl$CDROMPLAYMSF(r0, 0x5303, &(0x7f00000016c0)={0x5, 0x2, 0xd7, 0x6, 0x52, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1c0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000000640)={0x18, {"a2e3ad213dc70e0d8a267fd5d89dcd939b324d078b089b3b0838721a0890e0878f0e1ac6e7049b3d63959b509a240d5b67f3988f7ef319520055ffe8d178708c523c921b1b5b32320d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70d998ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f0000000c558cdc0a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5af098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000108000e0a37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62437264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d637545c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4953a9737d214060005ea6f1783e287b3bee96e3a726eafe2fd12a78d1f48c13b64df07847754b8010000009bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f577dcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b2fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2010891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d3a6df40babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57ccb938e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f794c9eee11987f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b4907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d847dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e7832b625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859add50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db87195301000000aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d0d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f39a9817139a206fc76957227ffff2de20a4b8e3737fbb4d600000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de4f8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3442bab515b0000348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de0000d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60559516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bdc8f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d8872fe174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62f46fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f980000000203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00", 0x1000}}, 0x1006) mkdirat(r1, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) unlink(&(0x7f0000000080)='./file0\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240), 0x220000, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@xino_off}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001700)='net/hci\x00') preadv(r4, &(0x7f0000001740)=[{0x0}], 0x1, 0x6, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001800)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) memfd_create(&(0x7f0000001880)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1[\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\x00\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0\xber\xa6\xec\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\xed\x91 )y\xb4\xba\xba\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\x13]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0\b\x00\x00\x00\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\r\xcd\xf0\xad\x97uh\xb2\xb8\x17S~R\x19\xa9\xc3x\xb8l\xed\xbdz#6\x9f\x94\xba[xC\xed\x12}f\x0f\xc5', 0x3) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140e000000208000a400000000205000300020000000900020073797a31000000000500010007000000fff69c0b257878e813cf402338aab0a65b6aa1"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r7, 0x1, 0x31, &(0x7f0000000280)=0x4, 0x4) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x500000f, 0x4008032, 0xffffffffffffffff, 0x97224000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) timer_create(0x7, 0x0, &(0x7f0000000340)) write$tun(0xffffffffffffffff, 0x0, 0xfdef) openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) kernel console output (not intermixed with test programs): [ 225.445156][T15059] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 225.445160][T15059] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 225.445167][T15059] Call Trace: [ 225.445183][T15059] [ 225.445188][T15059] dump_stack_lvl+0x100/0x190 [ 225.445247][T15059] should_fail_ex.cold+0x5/0xa [ 225.445274][T15059] get_futex_key+0x1c9/0x13e0 [ 225.445313][T15059] ? __pfx_get_futex_key+0x10/0x10 [ 225.445333][T15059] futex_wake+0xf4/0x5e0 [ 225.445348][T15059] ? __pfx_futex_wake+0x10/0x10 [ 225.445363][T15059] ? find_held_lock+0x2b/0x80 [ 225.445385][T15059] do_futex+0x2b2/0x440 [ 225.445398][T15059] ? __pfx_do_futex+0x10/0x10 [ 225.445412][T15059] __x64_sys_futex+0x34f/0x4d0 [ 225.445425][T15059] ? fdget_pos+0x2c0/0x380 [ 225.445444][T15059] ? __pfx___x64_sys_futex+0x10/0x10 [ 225.445455][T15059] ? ksys_write+0x1ac/0x250 [ 225.445469][T15059] ? __pfx_ksys_write+0x10/0x10 [ 225.445486][T15059] do_syscall_64+0x123/0x790 [ 225.445503][T15059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.445515][T15059] RIP: 0033:0x7f3606f9f559 [ 225.445525][T15059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.445536][T15059] RSP: 002b:00007f3607f340e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 225.445547][T15059] RAX: ffffffffffffffda RBX: 00007f3607225fa8 RCX: 00007f3606f9f559 [ 225.445554][T15059] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3607225fac [ 225.445560][T15059] RBP: 00007f3607225fa0 R08: 0000000000000001 R09: 0000000000000000 [ 225.445567][T15059] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 225.445574][T15059] R13: 00007f3607226038 R14: 00007ffd71a95fa0 R15: 00007ffd71a96088 [ 225.445587][T15059] [ 225.503979][T15068] FAULT_INJECTION: forcing a failure. [ 225.503979][T15068] name failslab, interval 1, probability 0, space 0, times 0 [ 225.504001][T15068] CPU: 2 UID: 0 PID: 15068 Comm: syz.5.2649 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 225.504017][T15068] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 225.504022][T15068] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 225.504028][T15068] Call Trace: [ 225.504033][T15068] [ 225.504038][T15068] dump_stack_lvl+0x100/0x190 [ 225.504057][T15068] should_fail_ex.cold+0x5/0xa [ 225.504075][T15068] should_failslab+0xc2/0x120 [ 225.504092][T15068] __kmalloc_cache_noprof+0x91/0x6d0 [ 225.504104][T15068] ? alloc_ucounts+0x13d/0x5c0 [ 225.504156][T15068] alloc_ucounts+0x13d/0x5c0 [ 225.504186][T15068] ? __pfx_alloc_ucounts+0x10/0x10 [ 225.504221][T15068] set_cred_ucounts+0xcd/0x200 [ 225.504247][T15068] __sys_setuid+0x29e/0x430 [ 225.504265][T15068] do_syscall_64+0x123/0x790 [ 225.504293][T15068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.504306][T15068] RIP: 0033:0x7f629e39f559 [ 225.504318][T15068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.504329][T15068] RSP: 002b:00007f629f255028 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 225.504342][T15068] RAX: ffffffffffffffda RBX: 00007f629e625fa0 RCX: 00007f629e39f559 [ 225.504350][T15068] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01 [ 225.504357][T15068] RBP: 00007f629e436b20 R08: 0000000000000000 R09: 0000000000000000 [ 225.504364][T15068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.504371][T15068] R13: 00007f629e626038 R14: 00007f629e625fa0 R15: 00007ffd52c0c7c8 [ 225.504386][T15068] [ 225.538133][T15070] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 225.538240][T15070] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 225.538251][T15070] UDF-fs: warning (device nbd6): udf_load_vrs: No anchor found [ 225.538258][T15070] UDF-fs: Scanning with blocksize 512 failed [ 225.540228][T15070] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 225.540290][T15070] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 225.540301][T15070] UDF-fs: warning (device nbd6): udf_load_vrs: No anchor found [ 225.540308][T15070] UDF-fs: Scanning with blocksize 1024 failed [ 225.540591][T15070] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 225.540642][T15070] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 225.540653][T15070] UDF-fs: warning (device nbd6): udf_load_vrs: No anchor found [ 225.540660][T15070] UDF-fs: Scanning with blocksize 2048 failed [ 225.541107][T15070] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 225.541153][T15070] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 225.541164][T15070] UDF-fs: warning (device nbd6): udf_load_vrs: No anchor found [ 225.541171][T15070] UDF-fs: Scanning with blocksize 4096 failed [ 225.541177][T15070] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1) [ 225.566475][T15074] program syz.5.2653 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 225.671926][T15089] overlayfs: failed to clone upperpath [ 225.868398][T15106] netlink: 'syz.5.2663': attribute type 1 has an invalid length. [ 226.055499][T15115] veth0_virt_wifi: entered promiscuous mode [ 226.108608][ T6209] rpcbind: server 127.0.0.1 not responding, timed out [ 226.139778][T15117] FAT-fs (nullb0): bogus number of reserved sectors [ 226.139800][T15117] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 226.177406][T15119] 8021q: adding VLAN 0 to HW filter on device bond1 [ 226.183306][T15119] bond0: (slave bond1): Enslaving as an active interface with an up link [ 226.410922][T15153] netlink: 'syz.6.2678': attribute type 12 has an invalid length. [ 226.883731][T15176] overlayfs: failed to clone upperpath [ 227.062690][T15194] overlayfs: failed to clone upperpath [ 227.135930][T15204] fuse: fd is not a fuse device [ 227.296500][T15224] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15224 comm=syz.7.2698 [ 227.695230][ T9] usb 11-1: Failed to early initialize device [ 227.701052][ T9] usb 11-1: USB disconnect, device number 4 [ 228.846115][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 228.846128][ T42] audit: type=1400 audit(228.740:32773): avc: denied { write } for pid=15241 comm="syz.1.2708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 228.846443][T15255] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 230.224142][ T42] audit: type=1400 audit(230.110:32774): avc: denied { rename } for pid=15275 comm="syz.7.2717" name="file0" dev="tmpfs" ino=2952 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 230.224577][ T42] audit: type=1804 audit(230.110:32775): pid=15276 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.7.2717" name="file0" dev="tmpfs" ino=2950 res=1 errno=0 [ 231.765811][T15242] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 231.848302][ T42] audit: type=1400 audit(231.740:32776): avc: denied { map } for pid=15287 comm="syz.6.2721" path="pipe:[54234]" dev="pipefs" ino=54234 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 231.848501][ T42] audit: type=1400 audit(231.740:32777): avc: denied { execute } for pid=15287 comm="syz.6.2721" path="pipe:[54234]" dev="pipefs" ino=54234 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 231.905875][T15286] __nla_validate_parse: 6 callbacks suppressed [ 231.905894][T15286] netlink: 116 bytes leftover after parsing attributes in process `syz.7.2720'. [ 231.966476][T15312] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2728'. [ 232.010095][ T42] audit: type=1400 audit(231.900:32778): avc: denied { create } for pid=15318 comm="syz.6.2731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 232.058408][T15327] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2734'. [ 232.107838][ T42] audit: type=1400 audit(232.000:32779): avc: denied { read } for pid=15330 comm="syz.7.2736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 232.109882][T15333] MTD: Couldn't look up '/dev/syzrnull6': -2 [ 232.199020][T15343] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 232.210208][ T42] audit: type=1400 audit(232.100:32780): avc: denied { read } for pid=15342 comm="syz.7.2741" lport=52441 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 232.249279][ T42] audit: type=1400 audit(232.140:32781): avc: denied { append } for pid=15344 comm="syz.6.2742" name="event1" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 232.259945][T15345] uhci_hcd 0000:00:1d.0: remove, state 4 [ 232.260016][T15345] usb usb2: USB disconnect, device number 1 [ 232.281680][T15345] uhci_hcd 0000:00:1d.0: USB bus 2 deregistered [ 232.448863][T15351] bond3: (slave .`): Releasing backup interface [ 232.453942][T15351] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 232.478111][T15351] tipc: Started in network mode [ 232.478127][T15351] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 232.478211][T15351] tipc: Enabled bearer , priority 22 [ 232.697009][ T42] audit: type=1326 audit(232.590:32782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15298 comm="syz.1.2724" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639f39f559 code=0x7fc00000 [ 232.878637][ T65] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 232.880444][ T65] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 232.881218][ T65] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 232.883597][ T65] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 232.884019][ T65] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 233.090240][T15397] wg0 speed is unknown, defaulting to 1000 [ 233.090959][T15397] wg0 speed is unknown, defaulting to 1000 [ 233.091429][T15397] wg0 speed is unknown, defaulting to 1000 [ 233.097282][T15376] rxe_eth0 speed is unknown, defaulting to 1000 [ 233.227764][T15397] infiniband syz0: set active [ 233.227782][T15397] infiniband syz0: added wg0 [ 233.238475][T15397] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 233.238497][T15397] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 233.238518][T15397] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 233.251414][T15397] RDS/IB: syz0: added [ 233.251442][T15397] smc: adding ib device syz0 with port count 1 [ 233.251460][T15397] smc: ib device syz0 port 1 has no pnetid [ 233.258656][ T2219] wg0 speed is unknown, defaulting to 1000 [ 233.263793][ T71] wg0 speed is unknown, defaulting to 1000 [ 233.269433][T15397] wg0 speed is unknown, defaulting to 1000 [ 233.315176][ T34] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 233.332117][T15376] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.332201][T15376] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.332264][T15376] bridge_slave_0: entered allmulticast mode [ 233.332943][T15376] bridge_slave_0: entered promiscuous mode [ 233.334511][T15376] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.334581][T15376] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.334769][T15376] bridge_slave_1: entered allmulticast mode [ 233.335482][T15376] bridge_slave_1: entered promiscuous mode [ 233.347694][T15376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.349004][T15376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.359425][T15397] wg0 speed is unknown, defaulting to 1000 [ 233.360709][T15376] team0: Port device team_slave_0 added [ 233.361968][T15376] team0: Port device team_slave_1 added [ 233.372907][T15376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.372917][T15376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.372930][T15376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.373706][T15376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.373714][T15376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.373727][T15376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.392434][T15376] hsr_slave_0: entered promiscuous mode [ 233.392848][T15376] hsr_slave_1: entered promiscuous mode [ 233.393139][T15376] debugfs: 'hsr0' already exists in 'hsr' [ 233.393151][T15376] Cannot create hsr debugfs directory [ 233.439394][T15397] wg0 speed is unknown, defaulting to 1000 [ 233.475812][ T34] usb 11-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 233.483484][ T34] usb 11-1: config index 0 descriptor too short (expected 65445, got 45) [ 233.483824][T15376] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.486241][ T34] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.486254][ T34] usb 11-1: Product: syz [ 233.486262][ T34] usb 11-1: Manufacturer: syz [ 233.486270][ T34] usb 11-1: SerialNumber: syz [ 233.521377][ T71] tipc: Node number set to 11578026 [ 233.541637][T15397] wg0 speed is unknown, defaulting to 1000 [ 233.579207][T15376] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.615872][T15397] wg0 speed is unknown, defaulting to 1000 [ 233.687234][T15397] wg0 speed is unknown, defaulting to 1000 [ 233.697338][T15375] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 233.697360][T15375] [U] J"—e:ÀÆ" [ 233.781179][T15376] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.789637][T15397] wg0 speed is unknown, defaulting to 1000 [ 233.848846][T15376] bridge0: port 3(netdevsim0) entered disabled state [ 233.858253][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 233.858269][ T42] audit: type=1800 audit(233.750:32784): pid=15399 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2754" name="file1" dev="fuse" ino=68719476738 res=0 errno=-4 [ 233.880758][T15376] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 233.880776][T15376] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 233.885346][T15376] bridge0: port 3(netdevsim0) entered disabled state [ 233.926960][T15376] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.963305][T15429] netlink: 'syz.7.2759': attribute type 20 has an invalid length. [ 233.963918][T15429] netlink: 'syz.7.2759': attribute type 9 has an invalid length. [ 234.021061][ T34] rtl8150 11-1:1.0: couldn't reset the device [ 234.021198][ T34] rtl8150 11-1:1.0: probe with driver rtl8150 failed with error -5 [ 234.045190][ T34] usb 11-1: USB disconnect, device number 5 [ 234.098267][T15376] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 234.101155][T15376] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 234.101524][T15376] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 234.103113][T15376] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 234.103506][T15376] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 234.105725][T15376] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 234.106768][T15376] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 234.111572][T15376] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 234.122385][T15446] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2765'. [ 234.194148][T15376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.205918][T15376] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.210382][ T6217] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.210425][ T6217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.216758][ T6217] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.216801][ T6217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.267978][T15464] overlayfs: failed lookup in lower (newroot/50, name='bus', err=-40): overlapping layers [ 234.268662][T15465] overlayfs: failed lookup in lower (newroot/50, name='file1', err=-40): overlapping layers [ 234.268973][T15466] overlayfs: failed lookup in lower (newroot/50, name='bus', err=-40): overlapping layers [ 234.269052][T15459] overlayfs: failed lookup in lower (newroot/50, name='file1', err=-40): overlapping layers [ 234.269205][T15464] overlayfs: failed lookup in lower (newroot/50, name='file1', err=-40): overlapping layers [ 234.269657][T15465] overlayfs: failed lookup in lower (newroot/50, name='bus', err=-40): overlapping layers [ 234.437595][ T42] audit: type=1400 audit(234.330:32785): avc: denied { map } for pid=15482 comm="syz.5.2770" path="socket:[57438]" dev="sockfs" ino=57438 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 234.438169][ T42] audit: type=1400 audit(234.330:32786): avc: denied { read } for pid=15482 comm="syz.5.2770" path="socket:[57438]" dev="sockfs" ino=57438 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 234.461967][T15376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.487956][T15376] veth0_vlan: entered promiscuous mode [ 234.497791][T15376] veth1_vlan: entered promiscuous mode [ 234.511477][T15486] overlayfs: missing 'workdir' [ 234.521823][T15376] veth0_macvtap: entered promiscuous mode [ 234.523767][T15376] veth1_macvtap: entered promiscuous mode [ 234.525924][ T42] audit: type=1400 audit(234.420:32787): avc: denied { bind } for pid=15487 comm="syz.6.2772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 234.528286][T15488] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2772'. [ 234.540772][T15376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.543731][T15376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.580555][T10572] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.580583][T10572] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.580601][T10572] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.580618][T10572] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.650620][ T6214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.650635][ T6214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.676676][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.676690][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.760264][T15499] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15499 comm=syz.1.2750 [ 234.804652][T15499] kvm [15498]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 234.805426][T15499] kvm [15498]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 234.841653][T15499] kvm [15498]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x817f [ 234.842054][T15499] kvm [15498]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x817e [ 234.875363][ T9] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 234.895238][ T5790] Bluetooth: hci3: command tx timeout [ 235.025595][ T9] usb 11-1: New USB device found: idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 235.026447][ T9] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 235.026462][ T9] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 235.026474][ T9] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 235.026486][ T9] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 235.028182][ T9] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.028195][ T9] usb 11-1: Product: syz [ 235.028202][ T9] usb 11-1: Manufacturer: syz [ 235.028209][ T9] usb 11-1: SerialNumber: syz [ 235.030691][ T9] usb 11-1: config 0 descriptor?? [ 235.200118][ T42] audit: type=1400 audit(235.090:32788): avc: denied { search } for pid=15509 comm="getty" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.200154][ T42] audit: type=1400 audit(235.090:32789): avc: denied { read write } for pid=15509 comm="getty" name="utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 235.200578][ T42] audit: type=1400 audit(235.090:32790): avc: denied { open } for pid=15509 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 235.200602][ T42] audit: type=1400 audit(235.090:32791): avc: denied { lock } for pid=15509 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 235.202586][ T42] audit: type=1400 audit(235.090:32792): avc: denied { read } for pid=15509 comm="getty" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 235.240930][ T9] adutux 11-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 syzkaller syzkaller login: [ 235.439122][T15490] usb 11-1: Couldn't submit interrupt_out_urb -90 [ 235.447853][ T42] audit: type=1400 audit(235.340:32793): avc: denied { watch_mount } for pid=15527 comm="syz.5.2781" path="/54/file0" dev="tmpfs" ino=324 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 235.561902][T15537] ieee802154 phy0 wpan0: encryption failed: -22 [ 235.562351][T15537] netlink: 'syz.1.2784': attribute type 3 has an invalid length. [ 235.640909][T15542] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 235.747158][T15546] tipc: Started in network mode [ 235.747176][T15546] tipc: Node identity 1001001, cluster identity 4711 [ 235.747186][T15546] tipc: Node number set to 16781313 [ 235.748382][T15546] tipc: Enabled bearer , priority 10 [ 235.748800][T15546] tipc: Duplicate 1001001 using ib(00:00:12:67:01:02:03:04:05:06:07:08:09:0a:0b:0c:0d:0e:0f:10) seen on [ 235.829755][T15551] netlink: 'syz.5.2790': attribute type 5 has an invalid length. [ 235.864555][T15551] bridge_slave_0: left allmulticast mode [ 235.864573][T15551] bridge_slave_0: left promiscuous mode [ 235.864690][T15551] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.872332][T15551] bridge_slave_1: left allmulticast mode [ 235.872346][T15551] bridge_slave_1: left promiscuous mode [ 235.872505][T15551] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.884370][T15551] bond0: (slave bond_slave_0): Releasing backup interface [ 235.891021][T15551] bond0: (slave bond_slave_1): Releasing backup interface [ 235.902527][T15551] team0: Port device team_slave_0 removed [ 235.907687][T15551] team0: Port device team_slave_1 removed [ 235.908399][T15551] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.908411][T15551] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.911723][T15551] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.911734][T15551] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.914400][T15551] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 236.018751][T15555] FAULT_INJECTION: forcing a failure. [ 236.018751][T15555] name failslab, interval 1, probability 0, space 0, times 0 [ 236.018773][T15555] CPU: 1 UID: 0 PID: 15555 Comm: syz.5.2791 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 236.018790][T15555] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 236.018795][T15555] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 236.018801][T15555] Call Trace: [ 236.018805][T15555] [ 236.018810][T15555] dump_stack_lvl+0x100/0x190 [ 236.018830][T15555] should_fail_ex.cold+0x5/0xa [ 236.018847][T15555] should_failslab+0xc2/0x120 [ 236.018864][T15555] kmem_cache_alloc_noprof+0x92/0x6a0 [ 236.018877][T15555] ? alloc_empty_file+0x5b/0x1c0 [ 236.018891][T15555] alloc_empty_file+0x5b/0x1c0 [ 236.018902][T15555] alloc_file_clone+0x5a/0x100 [ 236.018914][T15555] create_pipe_files+0x3e8/0x930 [ 236.018932][T15555] do_pipe2+0xbd/0x1e0 [ 236.018947][T15555] ? __pfx_do_pipe2+0x10/0x10 [ 236.018968][T15555] __x64_sys_pipe+0x33/0x50 [ 236.018983][T15555] do_syscall_64+0x123/0x790 [ 236.018996][T15555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.019007][T15555] RIP: 0033:0x7f629e39f559 [ 236.019016][T15555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.019027][T15555] RSP: 002b:00007f629f234028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 236.019038][T15555] RAX: ffffffffffffffda RBX: 00007f629e626090 RCX: 00007f629e39f559 [ 236.019045][T15555] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 236.019052][T15555] RBP: 00007f629e436b20 R08: 0000000000000000 R09: 0000000000000000 [ 236.019059][T15555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.019065][T15555] R13: 00007f629e626128 R14: 00007f629e626090 R15: 00007ffd52c0c7c8 [ 236.019079][T15555] [ 236.223622][T15563] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 236.223622][T15563] [ 236.223918][T15563] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 236.223972][T15563] CIFS: Attempting to mount //172.20.20.170/share [ 236.975620][ T5790] Bluetooth: hci3: command tx timeout [ 237.051606][T15563] CIFS: VFS: Error connecting to socket. Aborting operation. [ 237.051648][T15563] CIFS: VFS: cifs_mount failed w/return code = -4 [ 237.450650][T15597] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=5 sclass=netlink_xfrm_socket pid=15597 comm=syz.7.2803 [ 237.514981][T15597] sctp: [Deprecated]: syz.7.2803 (pid 15597) Use of struct sctp_assoc_value in delayed_ack socket option. [ 237.514981][T15597] Use struct sctp_sack_info instead [ 237.547233][T15602] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 237.578460][ T10] usb 11-1: USB disconnect, device number 6 [ 237.785555][ T9] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 237.936552][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 237.939660][ T9] usb 10-1: unable to get BOS descriptor or descriptor too short [ 237.939685][ T9] usb 10-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 237.940610][ T9] usb 10-1: config 14 has an invalid interface number: 57 but max is 1 [ 237.940623][ T9] usb 10-1: config 14 has an invalid interface number: 228 but max is 1 [ 237.940634][ T9] usb 10-1: config 14 has no interface number 0 [ 237.940642][ T9] usb 10-1: config 14 has no interface number 1 [ 237.940668][ T9] usb 10-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 237.940680][ T9] usb 10-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 237.940692][ T9] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 237.940705][ T9] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 237.940718][ T9] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 237.940731][ T9] usb 10-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 237.940745][ T9] usb 10-1: config 14 interface 57 has no altsetting 0 [ 237.940754][ T9] usb 10-1: config 14 interface 228 has no altsetting 0 [ 237.942632][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.942644][ T9] usb 10-1: Product: syz [ 237.942651][ T9] usb 10-1: Manufacturer: syz [ 237.942659][ T9] usb 10-1: SerialNumber: syz [ 237.984893][T15641] tipc: Publication distribution failure [ 238.028881][T15648] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 238.350741][ T9] legousbtower 10-1:14.57: interrupt endpoints not found [ 238.419284][T15678] ip6t_rpfilter: unknown options [ 238.638548][T15698] xt_bpf: check failed: parse error [ 238.752161][ T9] legousbtower 10-1:14.228: get version request failed: -121 [ 238.752238][ T9] legousbtower 10-1:14.228: probe with driver legousbtower failed with error -121 [ 239.055142][ T5790] Bluetooth: hci3: command tx timeout [ 240.204414][T15738] ecryptfs_verify_version: Minor version number mismatch. Expected [4]; got [0] [ 240.204434][T15738] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 240.204447][T15738] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 240.204456][T15738] One or more global auth toks could not properly register; rc = [-22] [ 240.204472][T15738] Error validating options; rc = [-22] [ 240.381089][T15743] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 240.417736][T15754] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2832'. [ 240.426095][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 240.426131][ T42] audit: type=1400 audit(240.320:32798): avc: denied { audit_write } for pid=15753 comm="syz.7.2831" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 240.569477][ T71] usb 10-1: USB disconnect, device number 4 [ 240.671569][T15781] fuse: fd is not a fuse device [ 240.689715][T15784] netlink: 'syz.6.2843': attribute type 15 has an invalid length. [ 240.695724][T15784] vxlan1: entered promiscuous mode [ 240.695745][T15784] vxlan1: entered allmulticast mode [ 240.702184][ T42] audit: type=1400 audit(240.590:32799): avc: denied { map } for pid=15782 comm="syz.6.2843" path="socket:[59677]" dev="sockfs" ino=59677 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 240.702559][ T42] audit: type=1400 audit(240.590:32800): avc: denied { read } for pid=15782 comm="syz.6.2843" path="socket:[59677]" dev="sockfs" ino=59677 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 240.782746][T15797] netlink: del zone limit has 4 unknown bytes [ 240.834987][ T42] audit: type=1400 audit(240.720:32801): avc: denied { load_policy } for pid=15785 comm="syz.5.2844" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 240.835299][T15787] SELinux: policydb string does not match my string SE Linux [ 240.835579][T15787] SELinux: failed to load policy [ 240.992860][T15808] futex_wake_op: syz.5.2850 tries to shift op by 144; fix this program [ 241.087051][T15813] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2852'. [ 241.135211][ T5790] Bluetooth: hci3: command tx timeout [ 241.416763][T15819] netlink: 'syz.6.2854': attribute type 5 has an invalid length. [ 241.422306][T15827] netlink: 'syz.6.2854': attribute type 5 has an invalid length. [ 241.530270][T15836] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2857'. [ 241.550128][T15836] 8021q: adding VLAN 0 to HW filter on device bond9 [ 241.555786][T15836] bond9: (slave hsr0): The slave device specified does not support setting the MAC address [ 241.556142][T15836] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 241.556155][T15836] bond9: (slave hsr0): Error -22 calling dev_set_mtu [ 241.601487][T15843] xt_CT: You must specify a L4 protocol and not use inversions on it [ 241.805938][T15858] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 241.806105][ T10] wg0 speed is unknown, defaulting to 1000 [ 241.816814][T15860] IPv6: NLM_F_CREATE should be specified when creating new route [ 241.820432][T15858] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 241.862267][T15863] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 241.867911][T15863] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2865'. [ 241.951364][T15869] openvswitch: netlink: Duplicate key (type 3). [ 242.003810][T15877] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2871'. [ 242.143382][T15894] overlayfs: failed to clone upperpath [ 242.220456][T15898] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2877'. [ 242.220981][T15898] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2877'. [ 242.220996][T15898] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2877'. [ 242.230566][T15898] team0: Mode changed to "activebackup" [ 242.485429][T15906] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 242.485447][T15906] overlayfs: failed to set xattr on upper [ 242.485451][T15906] overlayfs: ...falling back to redirect_dir=nofollow. [ 242.485456][T15906] overlayfs: ...falling back to index=off. [ 242.485460][T15906] overlayfs: ...falling back to uuid=null. [ 242.490288][T15906] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 242.591215][T15908] SET target dimension over the limit! [ 242.685439][ T10] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 242.732993][T15916] ip_tables: iptables: counters copy to user failed while replacing table [ 242.776419][ T42] audit: type=1400 audit(242.670:32802): avc: denied { lock } for pid=15917 comm="syz.7.2886" path="socket:[58048]" dev="sockfs" ino=58048 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 242.776694][ T42] audit: type=1400 audit(242.670:32803): avc: denied { setattr } for pid=15917 comm="syz.7.2886" path="socket:[58048]" dev="sockfs" ino=58048 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 242.808403][T15923] ip_tables: iptables: counters copy to user failed while replacing table [ 242.836692][ T10] usb 10-1: unable to get BOS descriptor or descriptor too short [ 242.836717][ T10] usb 10-1: New USB device found: idVendor=21b4, idProduct=0081, bcdDevice=0.40 [ 242.837487][ T10] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.837498][ T10] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 242.837518][ T10] usb 10-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 242.837535][ T10] usb 10-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 242.837553][ T10] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 242.837565][ T10] usb 10-1: config 1 interface 1 has no altsetting 0 [ 242.840012][ T10] usb 10-1: string descriptor 0 read error: -22 [ 242.840127][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.653958][ T10] usb 10-1: 2:0: broken mixer GET_CUR (0/207/1 => 12855) [ 243.673576][T15945] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2893'. [ 243.848572][ T10] usb 10-1: Warning! Unlikely small volume range (=207), linear volume or custom curve? [ 243.848592][ T10] usb 10-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/207/1 [ 245.393375][T16018] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2899'. [ 245.482876][ T10] usb 10-1: USB disconnect, device number 5 [ 246.152386][T16044] vhci_hcd: not connected 4 [ 246.500133][ T42] audit: type=1400 audit(246.390:32804): avc: denied { map } for pid=16061 comm="syz.6.2914" path="socket:[59279]" dev="sockfs" ino=59279 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 246.500170][ T42] audit: type=1400 audit(246.390:32805): avc: denied { accept } for pid=16061 comm="syz.6.2914" path="socket:[59279]" dev="sockfs" ino=59279 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 247.202869][T16004] syz.7.2897 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 247.202893][T16004] CPU: 2 UID: 0 PID: 16004 Comm: syz.7.2897 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 247.202909][T16004] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 247.202914][T16004] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 247.202921][T16004] Call Trace: [ 247.202925][T16004] [ 247.202931][T16004] dump_stack_lvl+0x100/0x190 [ 247.202951][T16004] dump_header+0xfb/0x606 [ 247.202965][T16004] oom_kill_process.cold+0xd/0x380 [ 247.202979][T16004] out_of_memory+0x343/0x14c0 [ 247.202997][T16004] ? __pfx_out_of_memory+0x10/0x10 [ 247.203014][T16004] mem_cgroup_out_of_memory+0xc6/0x130 [ 247.203029][T16004] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 247.203041][T16004] ? find_held_lock+0x2b/0x80 [ 247.203055][T16004] ? do_raw_spin_unlock+0x145/0x1e0 [ 247.203071][T16004] ? _raw_spin_unlock+0x28/0x50 [ 247.203089][T16004] try_charge_memcg+0x76f/0xfd0 [ 247.203109][T16004] ? __pfx_try_charge_memcg+0x10/0x10 [ 247.203125][T16004] ? find_held_lock+0x2b/0x80 [ 247.203134][T16004] ? rcu_read_unlock+0x17/0x60 [ 247.203144][T16004] ? rcu_read_unlock+0x17/0x60 [ 247.203155][T16004] ? find_held_lock+0x2b/0x80 [ 247.203165][T16004] ? rcu_read_unlock+0x17/0x60 [ 247.203178][T16004] charge_memcg+0x1ae/0x210 [ 247.203196][T16004] __mem_cgroup_charge+0x2b/0x1c0 [ 247.203208][T16004] shmem_alloc_and_add_folio+0x451/0xd40 [ 247.203228][T16004] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 247.203257][T16004] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 247.203278][T16004] shmem_get_folio_gfp+0x758/0x1af0 [ 247.203297][T16004] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 247.203314][T16004] ? vm_normal_page+0x1d1/0x380 [ 247.203326][T16004] ? __pfx_vm_normal_page+0x10/0x10 [ 247.203342][T16004] shmem_write_begin+0x1a4/0x420 [ 247.203359][T16004] ? __pfx_shmem_write_begin+0x10/0x10 [ 247.203376][T16004] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 247.203396][T16004] generic_perform_write+0x292/0xa40 [ 247.203410][T16004] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 247.203425][T16004] ? __pfx_generic_perform_write+0x10/0x10 [ 247.203440][T16004] ? file_update_time_flags+0x38c/0x520 [ 247.203455][T16004] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 247.203465][T16004] shmem_file_write_iter+0x10e/0x140 [ 247.203477][T16004] __kernel_write_iter+0x2ac/0x930 [ 247.203492][T16004] ? __pfx___kernel_write_iter+0x10/0x10 [ 247.203506][T16004] ? __up_read+0x333/0x980 [ 247.203522][T16004] ? dump_user_range+0x7e0/0xe90 [ 247.203536][T16004] ? kasan_check_range+0x12/0x1e0 [ 247.203556][T16004] dump_user_range+0xa0d/0xe90 [ 247.203574][T16004] ? __pfx_dump_user_range+0x10/0x10 [ 247.203592][T16004] ? elf_coredump_extra_notes_write+0xbb/0x450 [ 247.203607][T16004] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 247.203622][T16004] ? __pfx_writenote+0x10/0x10 [ 247.203641][T16004] elf_core_dump+0x2d97/0x3d60 [ 247.203665][T16004] ? __pfx_elf_core_dump+0x10/0x10 [ 247.203679][T16004] ? kasan_save_stack+0x3f/0x50 [ 247.203691][T16004] ? kasan_save_stack+0x30/0x50 [ 247.203704][T16004] ? kasan_save_track+0x14/0x30 [ 247.203716][T16004] ? __kasan_kmalloc+0xaa/0xb0 [ 247.203729][T16004] ? __kvmalloc_node_noprof+0x35b/0x9b0 [ 247.203742][T16004] ? get_signal+0x1f20/0x21d0 [ 247.203753][T16004] ? arch_do_signal_or_restart+0x91/0x7e0 [ 247.203769][T16004] ? irqentry_exit+0x542/0xab0 [ 247.203786][T16004] ? 0xffffffffff600000 [ 247.203812][T16004] ? lock_acquire+0x1d1/0x380 [ 247.203825][T16004] ? get_signal+0x1f20/0x21d0 [ 247.203842][T16004] ? vfs_coredump+0x2606/0x58c0 [ 247.203855][T16004] vfs_coredump+0x2606/0x58c0 [ 247.203876][T16004] ? __pfx_vfs_coredump+0x10/0x10 [ 247.203893][T16004] ? __lock_acquire+0x5c0/0x1f40 [ 247.203908][T16004] ? lock_acquire+0x1d1/0x380 [ 247.203921][T16004] ? unwind_next_frame+0xbd/0x2090 [ 247.203940][T16004] ? lock_acquire+0x1d1/0x380 [ 247.203953][T16004] ? is_bpf_text_address+0x25/0x1a0 [ 247.203965][T16004] ? find_held_lock+0x2b/0x80 [ 247.203975][T16004] ? is_bpf_text_address+0x8a/0x1a0 [ 247.203986][T16004] ? is_bpf_text_address+0x8a/0x1a0 [ 247.203997][T16004] ? bpf_ksym_find+0x128/0x1c0 [ 247.204011][T16004] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 247.204045][T16004] ? is_bpf_text_address+0x94/0x1a0 [ 247.204067][T16004] ? __sigqueue_free+0xbe/0x2a0 [ 247.204081][T16004] ? stack_trace_save+0x8e/0xc0 [ 247.204099][T16004] ? kasan_save_stack+0x3f/0x50 [ 247.204112][T16004] ? kasan_save_stack+0x30/0x50 [ 247.204124][T16004] ? kasan_save_track+0x14/0x30 [ 247.204137][T16004] ? kasan_save_free_info+0x3b/0x70 [ 247.204147][T16004] ? __kasan_slab_free+0x5f/0x80 [ 247.204161][T16004] ? kmem_cache_free+0x127/0x6c0 [ 247.204171][T16004] ? __sigqueue_free+0xbe/0x2a0 [ 247.204184][T16004] ? get_signal+0xb02/0x21d0 [ 247.204195][T16004] ? arch_do_signal_or_restart+0x91/0x7e0 [ 247.204211][T16004] ? irqentry_exit+0x542/0xab0 [ 247.204223][T16004] ? asm_exc_page_fault+0x26/0x30 [ 247.204258][T16004] ? rcu_is_watching+0x13/0xc0 [ 247.204271][T16004] get_signal+0x1f20/0x21d0 [ 247.204289][T16004] ? __pfx_get_signal+0x10/0x10 [ 247.204301][T16004] ? __pfx_force_sig_fault+0x10/0x10 [ 247.204316][T16004] arch_do_signal_or_restart+0x91/0x7e0 [ 247.204334][T16004] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 247.204360][T16004] irqentry_exit+0x542/0xab0 [ 247.204373][T16004] asm_exc_page_fault+0x26/0x30 [ 247.204384][T16004] RIP: 0033:0x0 [ 247.204393][T16004] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 247.204398][T16004] RSP: 002b:0000200000000808 EFLAGS: 00010217 [ 247.204407][T16004] RAX: 0000000000000000 RBX: 00007f6d23626360 RCX: 00007f6d2339f559 [ 247.204414][T16004] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 0000000000000200 [ 247.204421][T16004] RBP: 00007f6d23436b20 R08: 0000000000000000 R09: 0000000000000000 [ 247.204428][T16004] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 247.204434][T16004] R13: 00007f6d236263f8 R14: 00007f6d23626360 R15: 00007fff5a866d68 [ 247.204449][T16004] [ 247.213939][T16004] memory: usage 307200kB, limit 307200kB, failcnt 47947 [ 247.213952][T16004] memory+swap: usage 413568kB, limit 9007199254740988kB, failcnt 0 [ 247.213959][T16004] kmem: usage 11844kB, limit 9007199254740988kB, failcnt 0 [ 247.213966][T16004] Memory cgroup stats for /syz7: [ 247.214056][T16004] cache 302211072 [ 247.214061][T16004] rss 233472 [ 247.214065][T16004] rss_huge 0 [ 247.214069][T16004] shmem 302211072 [ 247.214073][T16004] mapped_file 2097152 [ 247.214077][T16004] dirty 0 [ 247.214081][T16004] writeback 0 [ 247.214085][T16004] workingset_refault_anon 530 [ 247.214089][T16004] workingset_refault_file 40070 [ 247.214093][T16004] swap 108920832 [ 247.214097][T16004] swapcached 0 [ 247.214101][T16004] pgpgin 410936 [ 247.214105][T16004] pgpgout 340163 [ 247.214109][T16004] pgfault 189811 [ 247.214113][T16004] pgmajfault 246 [ 247.214116][T16004] inactive_anon 273047552 [ 247.214121][T16004] active_anon 29396992 [ 247.214125][T16004] inactive_file 0 [ 247.214129][T16004] active_file 0 [ 247.214133][T16004] unevictable 0 [ 247.214136][T16004] hierarchical_memory_limit 314572800 [ 247.214141][T16004] hierarchical_memsw_limit 9223372036854771712 [ 247.214146][T16004] total_cache 302211072 [ 247.214150][T16004] total_rss 233472 [ 247.214154][T16004] total_rss_huge 0 [ 247.214158][T16004] total_shmem 302211072 [ 247.214162][T16004] total_mapped_file 2097152 [ 247.214166][T16004] total_dirty 0 [ 247.214170][T16004] total_writeback 0 [ 247.214174][T16004] total_workingset_refault_anon 530 [ 247.214178][T16004] total_workingset_refault_file 40070 [ 247.214183][T16004] total_swap 108920832 [ 247.214187][T16004] total_swapcached 0 [ 247.214191][T16004] total_pgpgin 410936 [ 247.214195][T16004] total_pgpgout 340163 [ 247.214199][T16004] total_pgfault 189811 [ 247.214203][T16004] total_pgmajfault 246 [ 247.214207][T16004] total_inactive_anon 273047552 [ 247.214211][T16004] total_active_anon 29396992 [ 247.214215][T16004] total_inactive_file 0 [ 247.214219][T16004] total_active_file 0 [ 247.214223][T16004] total_unevictable 0 [ 247.214228][T16004] anon_cost 0 [ 247.214231][T16004] file_cost 0 [ 247.214236][T16004] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.1762,pid=12218,uid=0 [ 247.216194][T16004] Memory cgroup out of memory: Killed process 12218 (syz.7.1762) total-vm:102280kB, anon-rss:940kB, file-rss:20868kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 247.224920][T16001] syz.7.2897 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 247.224942][T16001] CPU: 2 UID: 0 PID: 16001 Comm: syz.7.2897 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 247.224959][T16001] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 247.224963][T16001] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 247.224970][T16001] Call Trace: [ 247.224975][T16001] [ 247.224980][T16001] dump_stack_lvl+0x100/0x190 [ 247.225000][T16001] dump_header+0xfb/0x606 [ 247.225014][T16001] oom_kill_process.cold+0xd/0x380 [ 247.225047][T16001] out_of_memory+0x343/0x14c0 [ 247.225066][T16001] ? __pfx_out_of_memory+0x10/0x10 [ 247.225084][T16001] mem_cgroup_out_of_memory+0xc6/0x130 [ 247.225098][T16001] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 247.225111][T16001] ? find_held_lock+0x2b/0x80 [ 247.225124][T16001] ? do_raw_spin_unlock+0x145/0x1e0 [ 247.225141][T16001] ? _raw_spin_unlock+0x28/0x50 [ 247.225158][T16001] try_charge_memcg+0x76f/0xfd0 [ 247.225178][T16001] ? __pfx_try_charge_memcg+0x10/0x10 [ 247.225193][T16001] ? find_held_lock+0x2b/0x80 [ 247.225203][T16001] ? rcu_read_unlock+0x17/0x60 [ 247.225213][T16001] ? rcu_read_unlock+0x17/0x60 [ 247.225224][T16001] ? find_held_lock+0x2b/0x80 [ 247.225234][T16001] ? rcu_read_unlock+0x17/0x60 [ 247.225247][T16001] charge_memcg+0x1ae/0x210 [ 247.225265][T16001] __mem_cgroup_charge+0x2b/0x1c0 [ 247.225277][T16001] shmem_alloc_and_add_folio+0x451/0xd40 [ 247.225297][T16001] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 247.225314][T16001] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 247.225333][T16001] shmem_get_folio_gfp+0x758/0x1af0 [ 247.225353][T16001] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 247.225369][T16001] ? vm_normal_page+0x1d1/0x380 [ 247.225383][T16001] ? __pfx_vm_normal_page+0x10/0x10 [ 247.225398][T16001] shmem_write_begin+0x1a4/0x420 [ 247.225415][T16001] ? __pfx_shmem_write_begin+0x10/0x10 [ 247.225432][T16001] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 247.225452][T16001] generic_perform_write+0x292/0xa40 [ 247.225465][T16001] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 247.225480][T16001] ? __pfx_generic_perform_write+0x10/0x10 [ 247.225494][T16001] ? file_update_time_flags+0x38c/0x520 [ 247.225509][T16001] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 247.225519][T16001] shmem_file_write_iter+0x10e/0x140 [ 247.225531][T16001] __kernel_write_iter+0x2ac/0x930 [ 247.225546][T16001] ? __pfx___kernel_write_iter+0x10/0x10 [ 247.225560][T16001] ? __up_read+0x333/0x980 [ 247.225576][T16001] ? dump_user_range+0x7e0/0xe90 [ 247.225590][T16001] ? copy_mc_enhanced_fast_string+0x6/0xf [ 247.225608][T16001] dump_user_range+0xa0d/0xe90 [ 247.225626][T16001] ? __pfx_dump_user_range+0x10/0x10 [ 247.225645][T16001] ? elf_coredump_extra_notes_write+0xbb/0x450 [ 247.225659][T16001] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 247.225674][T16001] ? __pfx_writenote+0x10/0x10 [ 247.225693][T16001] elf_core_dump+0x2d97/0x3d60 [ 247.225717][T16001] ? __pfx_elf_core_dump+0x10/0x10 [ 247.225731][T16001] ? kasan_save_stack+0x3f/0x50 [ 247.225744][T16001] ? kasan_save_stack+0x30/0x50 [ 247.225756][T16001] ? kasan_save_track+0x14/0x30 [ 247.225768][T16001] ? __kasan_kmalloc+0xaa/0xb0 [ 247.225785][T16001] ? __kvmalloc_node_noprof+0x35b/0x9b0 [ 247.225798][T16001] ? get_signal+0x1f20/0x21d0 [ 247.225809][T16001] ? arch_do_signal_or_restart+0x91/0x7e0 [ 247.225826][T16001] ? irqentry_exit+0x542/0xab0 [ 247.225839][T16001] ? 0xffffffffff600000 [ 247.225865][T16001] ? lock_acquire+0x1d1/0x380 [ 247.225878][T16001] ? get_signal+0x1f20/0x21d0 [ 247.225894][T16001] ? vfs_coredump+0x2606/0x58c0 [ 247.225907][T16001] vfs_coredump+0x2606/0x58c0 [ 247.225928][T16001] ? __pfx_vfs_coredump+0x10/0x10 [ 247.225945][T16001] ? __lock_acquire+0x5c0/0x1f40 [ 247.225960][T16001] ? lock_acquire+0x1d1/0x380 [ 247.225973][T16001] ? unwind_next_frame+0xbd/0x2090 [ 247.225992][T16001] ? lock_acquire+0x1d1/0x380 [ 247.226004][T16001] ? is_bpf_text_address+0x25/0x1a0 [ 247.226017][T16001] ? find_held_lock+0x2b/0x80 [ 247.226027][T16001] ? is_bpf_text_address+0x8a/0x1a0 [ 247.226038][T16001] ? is_bpf_text_address+0x8a/0x1a0 [ 247.226049][T16001] ? bpf_ksym_find+0x128/0x1c0 [ 247.226062][T16001] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 247.226077][T16001] ? is_bpf_text_address+0x94/0x1a0 [ 247.226097][T16001] ? __sigqueue_free+0xbe/0x2a0 [ 247.226111][T16001] ? stack_trace_save+0x8e/0xc0 [ 247.226129][T16001] ? kasan_save_stack+0x3f/0x50 [ 247.226142][T16001] ? kasan_save_stack+0x30/0x50 [ 247.226154][T16001] ? kasan_save_track+0x14/0x30 [ 247.226166][T16001] ? kasan_save_free_info+0x3b/0x70 [ 247.226177][T16001] ? __kasan_slab_free+0x5f/0x80 [ 247.226190][T16001] ? kmem_cache_free+0x127/0x6c0 [ 247.226199][T16001] ? __sigqueue_free+0xbe/0x2a0 [ 247.226213][T16001] ? get_signal+0xb02/0x21d0 [ 247.226223][T16001] ? arch_do_signal_or_restart+0x91/0x7e0 [ 247.226239][T16001] ? irqentry_exit+0x542/0xab0 [ 247.226248][T16001] ? asm_exc_page_fault+0x26/0x30 [ 247.226283][T16001] ? rcu_is_watching+0x13/0xc0 [ 247.226296][T16001] get_signal+0x1f20/0x21d0 [ 247.226313][T16001] ? __pfx_get_signal+0x10/0x10 [ 247.226324][T16001] ? __pfx_force_sig_fault+0x10/0x10 [ 247.226339][T16001] arch_do_signal_or_restart+0x91/0x7e0 [ 247.226356][T16001] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 247.226382][T16001] irqentry_exit+0x542/0xab0 [ 247.226394][T16001] asm_exc_page_fault+0x26/0x30 [ 247.226405][T16001] RIP: 0033:0x0 [ 247.226413][T16001] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 247.226418][T16001] RSP: 002b:0000200000000808 EFLAGS: 00010217 [ 247.226427][T16001] RAX: 0000000000000000 RBX: 00007f6d23626360 RCX: 00007f6d2339f559 [ 247.226435][T16001] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 0000000000000200 [ 247.226441][T16001] RBP: 00007f6d23436b20 R08: 0000000000000000 R09: 0000000000000000 [ 247.226448][T16001] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 247.226454][T16001] R13: 00007f6d236263f8 R14: 00007f6d23626360 R15: 00007fff5a866d68 [ 247.226469][T16001] [ 247.234171][T16001] memory: usage 307200kB, limit 307200kB, failcnt 48013 [ 247.234184][T16001] memory+swap: usage 413548kB, limit 9007199254740988kB, failcnt 0 [ 247.234190][T16001] kmem: usage 11844kB, limit 9007199254740988kB, failcnt 0 [ 247.234197][T16001] Memory cgroup stats for /syz7: [ 247.234265][T16001] cache 302211072 [ 247.234270][T16001] rss 233472 [ 247.234274][T16001] rss_huge 0 [ 247.234277][T16001] shmem 302211072 [ 247.234281][T16001] mapped_file 2097152 [ 247.234285][T16001] dirty 0 [ 247.234289][T16001] writeback 0 [ 247.234293][T16001] workingset_refault_anon 530 [ 247.234297][T16001] workingset_refault_file 40070 [ 247.234302][T16001] swap 108920832 [ 247.234305][T16001] swapcached 0 [ 247.234309][T16001] pgpgin 410936 [ 247.234313][T16001] pgpgout 340163 [ 247.234317][T16001] pgfault 189811 [ 247.234320][T16001] pgmajfault 246 [ 247.234324][T16001] inactive_anon 273047552 [ 247.234328][T16001] active_anon 29396992 [ 247.234332][T16001] inactive_file 0 [ 247.234336][T16001] active_file 0 [ 247.234340][T16001] unevictable 0 [ 247.234344][T16001] hierarchical_memory_limit 314572800 [ 247.234348][T16001] hierarchical_memsw_limit 9223372036854771712 [ 247.234353][T16001] total_cache 302211072 [ 247.234357][T16001] total_rss 233472 [ 247.234361][T16001] total_rss_huge 0 [ 247.234365][T16001] total_shmem 302211072 [ 247.234369][T16001] total_mapped_file 2097152 [ 247.234373][T16001] total_dirty 0 [ 247.234377][T16001] total_writeback 0 [ 247.234381][T16001] total_workingset_refault_anon 530 [ 247.234386][T16001] total_workingset_refault_file 40070 [ 247.234390][T16001] total_swap 108920832 [ 247.234394][T16001] total_swapcached 0 [ 247.234398][T16001] total_pgpgin 410936 [ 247.234402][T16001] total_pgpgout 340163 [ 247.234406][T16001] total_pgfault 189811 [ 247.234410][T16001] total_pgmajfault 246 [ 247.234414][T16001] total_inactive_anon 273047552 [ 247.234418][T16001] total_active_anon 29396992 [ 247.234422][T16001] total_inactive_file 0 [ 247.234426][T16001] total_active_file 0 [ 247.234430][T16001] total_unevictable 0 [ 247.234434][T16001] anon_cost 0 [ 247.234438][T16001] file_cost 0 [ 247.234442][T16001] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.2897,pid=15981,uid=0 [ 247.234788][T16001] Memory cgroup out of memory: Killed process 15981 (syz.7.2897) total-vm:230172kB, anon-rss:984kB, file-rss:28216kB, shmem-rss:2048kB, UID:0 pgtables:176kB oom_score_adj:0 [ 247.400548][T15973] syz.7.2897 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 247.400572][T15973] CPU: 0 UID: 0 PID: 15973 Comm: syz.7.2897 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 247.400589][T15973] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 247.400593][T15973] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 247.400600][T15973] Call Trace: [ 247.400605][T15973] [ 247.400610][T15973] dump_stack_lvl+0x100/0x190 [ 247.400630][T15973] dump_header+0xfb/0x606 [ 247.400644][T15973] oom_kill_process.cold+0xd/0x380 [ 247.400659][T15973] out_of_memory+0x343/0x14c0 [ 247.400677][T15973] ? __pfx_out_of_memory+0x10/0x10 [ 247.400694][T15973] mem_cgroup_out_of_memory+0xc6/0x130 [ 247.400709][T15973] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 247.400721][T15973] ? find_held_lock+0x2b/0x80 [ 247.400735][T15973] ? do_raw_spin_unlock+0x145/0x1e0 [ 247.400755][T15973] ? _raw_spin_unlock+0x28/0x50 [ 247.400773][T15973] try_charge_memcg+0x76f/0xfd0 [ 247.400792][T15973] ? __pfx_try_charge_memcg+0x10/0x10 [ 247.400809][T15973] ? find_held_lock+0x2b/0x80 [ 247.400819][T15973] ? rcu_read_unlock+0x17/0x60 [ 247.400829][T15973] ? rcu_read_unlock+0x17/0x60 [ 247.400839][T15973] ? find_held_lock+0x2b/0x80 [ 247.400849][T15973] ? rcu_read_unlock+0x17/0x60 [ 247.400863][T15973] charge_memcg+0x1ae/0x210 [ 247.400880][T15973] __mem_cgroup_charge+0x2b/0x1c0 [ 247.400893][T15973] shmem_alloc_and_add_folio+0x451/0xd40 [ 247.400913][T15973] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 247.400929][T15973] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 247.400949][T15973] shmem_get_folio_gfp+0x758/0x1af0 [ 247.400968][T15973] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 247.400985][T15973] ? vm_normal_page+0x1d1/0x380 [ 247.400998][T15973] ? __pfx_vm_normal_page+0x10/0x10 [ 247.401013][T15973] shmem_write_begin+0x1a4/0x420 [ 247.401043][T15973] ? __pfx_shmem_write_begin+0x10/0x10 [ 247.401060][T15973] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 247.401080][T15973] generic_perform_write+0x292/0xa40 [ 247.401093][T15973] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 247.401107][T15973] ? __pfx_generic_perform_write+0x10/0x10 [ 247.401122][T15973] ? file_update_time_flags+0x38c/0x520 [ 247.401136][T15973] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 247.401146][T15973] shmem_file_write_iter+0x10e/0x140 [ 247.401158][T15973] __kernel_write_iter+0x2ac/0x930 [ 247.401173][T15973] ? __pfx___kernel_write_iter+0x10/0x10 [ 247.401187][T15973] ? __up_read+0x333/0x980 [ 247.401203][T15973] ? dump_user_range+0x7e0/0xe90 [ 247.401218][T15973] ? copy_mc_enhanced_fast_string+0x6/0xf [ 247.401235][T15973] dump_user_range+0xa0d/0xe90 [ 247.401253][T15973] ? __pfx_dump_user_range+0x10/0x10 [ 247.401271][T15973] ? elf_coredump_extra_notes_write+0xbb/0x450 [ 247.401286][T15973] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 247.401300][T15973] ? __pfx_writenote+0x10/0x10 [ 247.401319][T15973] elf_core_dump+0x2d97/0x3d60 [ 247.401343][T15973] ? __pfx_elf_core_dump+0x10/0x10 [ 247.401357][T15973] ? kasan_save_stack+0x3f/0x50 [ 247.401369][T15973] ? kasan_save_stack+0x30/0x50 [ 247.401382][T15973] ? kasan_save_track+0x14/0x30 [ 247.401394][T15973] ? __kasan_kmalloc+0xaa/0xb0 [ 247.401406][T15973] ? __kvmalloc_node_noprof+0x35b/0x9b0 [ 247.401419][T15973] ? get_signal+0x1f20/0x21d0 [ 247.401431][T15973] ? arch_do_signal_or_restart+0x91/0x7e0 [ 247.401447][T15973] ? irqentry_exit+0x542/0xab0 [ 247.401460][T15973] ? 0xffffffffff600000 [ 247.401486][T15973] ? lock_acquire+0x1d1/0x380 [ 247.401499][T15973] ? get_signal+0x1f20/0x21d0 [ 247.401516][T15973] ? vfs_coredump+0x2606/0x58c0 [ 247.401528][T15973] vfs_coredump+0x2606/0x58c0 [ 247.401549][T15973] ? __pfx_vfs_coredump+0x10/0x10 [ 247.401571][T15973] ? __lock_acquire+0x5c0/0x1f40 [ 247.401592][T15973] ? lock_acquire+0x1d1/0x380 [ 247.401608][T15973] ? unwind_next_frame+0xbd/0x2090 [ 247.401636][T15973] ? lock_acquire+0x1d1/0x380 [ 247.401650][T15973] ? is_bpf_text_address+0x25/0x1a0 [ 247.401662][T15973] ? find_held_lock+0x2b/0x80 [ 247.401672][T15973] ? is_bpf_text_address+0x8a/0x1a0 [ 247.401683][T15973] ? is_bpf_text_address+0x8a/0x1a0 [ 247.401694][T15973] ? bpf_ksym_find+0x128/0x1c0 [ 247.401707][T15973] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 247.401723][T15973] ? is_bpf_text_address+0x94/0x1a0 [ 247.401743][T15973] ? __sigqueue_free+0xbe/0x2a0 [ 247.401761][T15973] ? stack_trace_save+0x8e/0xc0 [ 247.401779][T15973] ? kasan_save_stack+0x3f/0x50 [ 247.401791][T15973] ? kasan_save_stack+0x30/0x50 [ 247.401804][T15973] ? kasan_save_track+0x14/0x30 [ 247.401816][T15973] ? kasan_save_free_info+0x3b/0x70 [ 247.401826][T15973] ? __kasan_slab_free+0x5f/0x80 [ 247.401840][T15973] ? kmem_cache_free+0x127/0x6c0 [ 247.401849][T15973] ? __sigqueue_free+0xbe/0x2a0 [ 247.401863][T15973] ? get_signal+0xb02/0x21d0 [ 247.401873][T15973] ? arch_do_signal_or_restart+0x91/0x7e0 [ 247.401889][T15973] ? irqentry_exit+0x542/0xab0 [ 247.401898][T15973] ? asm_exc_page_fault+0x26/0x30 [ 247.401933][T15973] ? rcu_is_watching+0x13/0xc0 [ 247.401946][T15973] get_signal+0x1f20/0x21d0 [ 247.401964][T15973] ? __pfx_get_signal+0x10/0x10 [ 247.401976][T15973] ? __pfx_force_sig_fault+0x10/0x10 [ 247.401991][T15973] arch_do_signal_or_restart+0x91/0x7e0 [ 247.402008][T15973] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 247.402035][T15973] irqentry_exit+0x542/0xab0 [ 247.402047][T15973] asm_exc_page_fault+0x26/0x30 [ 247.402058][T15973] RIP: 0033:0x0 [ 247.402067][T15973] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 247.402072][T15973] RSP: 002b:0000200000000808 EFLAGS: 00010217 [ 247.402081][T15973] RAX: 0000000000000000 RBX: 00007f6d23626360 RCX: 00007f6d2339f559 [ 247.402088][T15973] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 0000000000000200 [ 247.402095][T15973] RBP: 00007f6d23436b20 R08: 0000000000000000 R09: 0000000000000000 [ 247.402102][T15973] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 247.402108][T15973] R13: 00007f6d236263f8 R14: 00007f6d23626360 R15: 00007fff5a866d68 [ 247.402122][T15973] [ 247.433822][T15973] memory: usage 307200kB, limit 307200kB, failcnt 49291 [ 247.433836][T15973] memory+swap: usage 413388kB, limit 9007199254740988kB, failcnt 0 [ 247.433843][T15973] kmem: usage 11672kB, limit 9007199254740988kB, failcnt 0 [ 247.433849][T15973] Memory cgroup stats for /syz7: [ 247.433911][T15973] cache 302211072 [ 247.433916][T15973] rss 233472 [ 247.433920][T15973] rss_huge 0 [ 247.433923][T15973] shmem 302211072 [ 247.433927][T15973] mapped_file 2097152 [ 247.433931][T15973] dirty 0 [ 247.433935][T15973] writeback 0 [ 247.433939][T15973] workingset_refault_anon 530 [ 247.433943][T15973] workingset_refault_file 40070 [ 247.433948][T15973] swap 108920832 [ 247.433951][T15973] swapcached 0 [ 247.433955][T15973] pgpgin 410936 [ 247.433959][T15973] pgpgout 340163 [ 247.433963][T15973] pgfault 189811 [ 247.433967][T15973] pgmajfault 246 [ 247.433971][T15973] inactive_anon 273047552 [ 247.433975][T15973] active_anon 29396992 [ 247.433979][T15973] inactive_file 0 [ 247.433983][T15973] active_file 0 [ 247.433986][T15973] unevictable 0 [ 247.433990][T15973] hierarchical_memory_limit 314572800 [ 247.433995][T15973] hierarchical_memsw_limit 9223372036854771712 [ 247.434000][T15973] total_cache 302211072 [ 247.434004][T15973] total_rss 233472 [ 247.434007][T15973] total_rss_huge 0 [ 247.434011][T15973] total_shmem 302211072 [ 247.434015][T15973] total_mapped_file 2097152 [ 247.434020][T15973] total_dirty 0 [ 247.434062][T15973] total_writeback 0 [ 247.434067][T15973] total_workingset_refault_anon 530 [ 247.434072][T15973] total_workingset_refault_file 40070 [ 247.434076][T15973] total_swap 108920832 [ 247.434080][T15973] total_swapcached 0 [ 247.434084][T15973] total_pgpgin 410936 [ 247.434088][T15973] total_pgpgout 340163 [ 247.434092][T15973] total_pgfault 189811 [ 247.434096][T15973] total_pgmajfault 246 [ 247.434100][T15973] total_inactive_anon 273047552 [ 247.434105][T15973] total_active_anon 29396992 [ 247.434109][T15973] total_inactive_file 0 [ 247.434113][T15973] total_active_file 0 [ 247.434117][T15973] total_unevictable 0 [ 247.434121][T15973] anon_cost 0 [ 247.434124][T15973] file_cost 0 [ 247.434129][T15973] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.2897,pid=15980,uid=0 [ 247.434204][T15973] Memory cgroup out of memory: Killed process 15980 (syz.7.2897) total-vm:230172kB, anon-rss:980kB, file-rss:28168kB, shmem-rss:2048kB, UID:0 pgtables:176kB oom_score_adj:0 [ 247.508316][T15999] syz.7.2897 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 247.508339][T15999] CPU: 2 UID: 0 PID: 15999 Comm: syz.7.2897 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 247.508355][T15999] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 247.508360][T15999] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 247.508366][T15999] Call Trace: [ 247.508371][T15999] [ 247.508376][T15999] dump_stack_lvl+0x100/0x190 [ 247.508396][T15999] dump_header+0xfb/0x606 [ 247.508410][T15999] oom_kill_process.cold+0xd/0x380 [ 247.508424][T15999] out_of_memory+0x343/0x14c0 [ 247.508442][T15999] ? __pfx_out_of_memory+0x10/0x10 [ 247.508460][T15999] mem_cgroup_out_of_memory+0xc6/0x130 [ 247.508474][T15999] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 247.508486][T15999] ? find_held_lock+0x2b/0x80 [ 247.508500][T15999] ? do_raw_spin_unlock+0x145/0x1e0 [ 247.508516][T15999] ? _raw_spin_unlock+0x28/0x50 [ 247.508533][T15999] try_charge_memcg+0x76f/0xfd0 [ 247.508553][T15999] ? __pfx_try_charge_memcg+0x10/0x10 [ 247.508569][T15999] ? find_held_lock+0x2b/0x80 [ 247.508578][T15999] ? rcu_read_unlock+0x17/0x60 [ 247.508588][T15999] ? rcu_read_unlock+0x17/0x60 [ 247.508598][T15999] ? find_held_lock+0x2b/0x80 [ 247.508608][T15999] ? rcu_read_unlock+0x17/0x60 [ 247.508622][T15999] charge_memcg+0x1ae/0x210 [ 247.508639][T15999] __mem_cgroup_charge+0x2b/0x1c0 [ 247.508652][T15999] shmem_alloc_and_add_folio+0x451/0xd40 [ 247.508671][T15999] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 247.508688][T15999] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 247.508707][T15999] shmem_get_folio_gfp+0x758/0x1af0 [ 247.508727][T15999] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 247.508743][T15999] ? vm_normal_page+0x1d1/0x380 [ 247.508755][T15999] ? __pfx_vm_normal_page+0x10/0x10 [ 247.508771][T15999] shmem_write_begin+0x1a4/0x420 [ 247.508792][T15999] ? __pfx_shmem_write_begin+0x10/0x10 [ 247.508809][T15999] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 247.508828][T15999] generic_perform_write+0x292/0xa40 [ 247.508841][T15999] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 247.508855][T15999] ? __pfx_generic_perform_write+0x10/0x10 [ 247.508869][T15999] ? file_update_time_flags+0x38c/0x520 [ 247.508884][T15999] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 247.508894][T15999] shmem_file_write_iter+0x10e/0x140 [ 247.508905][T15999] __kernel_write_iter+0x2ac/0x930 [ 247.508920][T15999] ? __pfx___kernel_write_iter+0x10/0x10 [ 247.508933][T15999] ? __up_read+0x333/0x980 [ 247.508950][T15999] ? dump_user_range+0x7e0/0xe90 [ 247.508964][T15999] ? copy_mc_enhanced_fast_string+0x6/0xf [ 247.508981][T15999] dump_user_range+0xa0d/0xe90 [ 247.508999][T15999] ? __pfx_dump_user_range+0x10/0x10 [ 247.509017][T15999] ? elf_coredump_extra_notes_write+0xbb/0x450 [ 247.509034][T15999] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 247.509048][T15999] ? __pfx_writenote+0x10/0x10 [ 247.509066][T15999] elf_core_dump+0x2d97/0x3d60 [ 247.509089][T15999] ? __pfx_elf_core_dump+0x10/0x10 [ 247.509103][T15999] ? kasan_save_stack+0x3f/0x50 [ 247.509116][T15999] ? kasan_save_stack+0x30/0x50 [ 247.509129][T15999] ? kasan_save_track+0x14/0x30 [ 247.509141][T15999] ? __kasan_kmalloc+0xaa/0xb0 [ 247.509153][T15999] ? __kvmalloc_node_noprof+0x35b/0x9b0 [ 247.509166][T15999] ? get_signal+0x1f20/0x21d0 [ 247.509177][T15999] ? arch_do_signal_or_restart+0x91/0x7e0 [ 247.509193][T15999] ? irqentry_exit+0x542/0xab0 [ 247.509206][T15999] ? 0xffffffffff600000 [ 247.509231][T15999] ? lock_acquire+0x1d1/0x380 [ 247.509244][T15999] ? get_signal+0x1f20/0x21d0 [ 247.509260][T15999] ? vfs_coredump+0x2606/0x58c0 [ 247.509273][T15999] vfs_coredump+0x2606/0x58c0 [ 247.509293][T15999] ? __pfx_vfs_coredump+0x10/0x10 [ 247.509310][T15999] ? __lock_acquire+0x5c0/0x1f40 [ 247.509325][T15999] ? lock_acquire+0x1d1/0x380 [ 247.509338][T15999] ? unwind_next_frame+0xbd/0x2090 [ 247.509357][T15999] ? lock_acquire+0x1d1/0x380 [ 247.509369][T15999] ? is_bpf_text_address+0x25/0x1a0 [ 247.509381][T15999] ? find_held_lock+0x2b/0x80 [ 247.509391][T15999] ? is_bpf_text_address+0x8a/0x1a0 [ 247.509402][T15999] ? is_bpf_text_address+0x8a/0x1a0 [ 247.509413][T15999] ? bpf_ksym_find+0x128/0x1c0 [ 247.509426][T15999] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 247.509441][T15999] ? is_bpf_text_address+0x94/0x1a0 [ 247.509460][T15999] ? __sigqueue_free+0xbe/0x2a0 [ 247.509474][T15999] ? stack_trace_save+0x8e/0xc0 [ 247.509492][T15999] ? kasan_save_stack+0x3f/0x50 [ 247.509504][T15999] ? kasan_save_stack+0x30/0x50 [ 247.509516][T15999] ? kasan_save_track+0x14/0x30 [ 247.509529][T15999] ? kasan_save_free_info+0x3b/0x70 [ 247.509538][T15999] ? __kasan_slab_free+0x5f/0x80 [ 247.509551][T15999] ? kmem_cache_free+0x127/0x6c0 [ 247.509561][T15999] ? __sigqueue_free+0xbe/0x2a0 [ 247.509574][T15999] ? get_signal+0xb02/0x21d0 [ 247.509584][T15999] ? arch_do_signal_or_restart+0x91/0x7e0 [ 247.509600][T15999] ? irqentry_exit+0x542/0xab0 [ 247.509609][T15999] ? asm_exc_page_fault+0x26/0x30 [ 247.509642][T15999] ? rcu_is_watching+0x13/0xc0 [ 247.509655][T15999] get_signal+0x1f20/0x21d0 [ 247.509672][T15999] ? __pfx_get_signal+0x10/0x10 [ 247.509683][T15999] ? __pfx_force_sig_fault+0x10/0x10 [ 247.509698][T15999] arch_do_signal_or_restart+0x91/0x7e0 [ 247.509715][T15999] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 247.509740][T15999] irqentry_exit+0x542/0xab0 [ 247.509752][T15999] asm_exc_page_fault+0x26/0x30 [ 247.509763][T15999] RIP: 0033:0x0 [ 247.509771][T15999] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 247.509779][T15999] RSP: 002b:0000200000000808 EFLAGS: 00010217 [ 247.509788][T15999] RAX: 0000000000000000 RBX: 00007f6d23626360 RCX: 00007f6d2339f559 [ 247.509795][T15999] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 0000000000000200 [ 247.509802][T15999] RBP: 00007f6d23436b20 R08: 0000000000000000 R09: 0000000000000000 [ 247.509808][T15999] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 247.509814][T15999] R13: 00007f6d236263f8 R14: 00007f6d23626360 R15: 00007fff5a866d68 [ 247.509829][T15999] [ 247.509834][T15999] memory: usage 307200kB, limit 307200kB, failcnt 50175 [ 247.509845][T15999] memory+swap: usage 413344kB, limit 9007199254740988kB, failcnt 0 [ 247.509854][T15999] kmem: usage 11512kB, limit 9007199254740988kB, failcnt 0 [ 247.509863][T15999] Memory cgroup stats for /syz7: [ 247.509977][T15999] cache 302497792 [ 247.509986][T15999] rss 233472 [ 247.509992][T15999] rss_huge 0 [ 247.509999][T15999] shmem 302497792 [ 247.510006][T15999] mapped_file 2097152 [ 247.510013][T15999] dirty 0 [ 247.510018][T15999] writeback 0 [ 247.510024][T15999] workingset_refault_anon 530 [ 247.510030][T15999] workingset_refault_file 40070 [ 247.510035][T15999] swap 108691456 [ 247.510038][T15999] swapcached 4096 [ 247.510042][T15999] pgpgin 413651 [ 247.510046][T15999] pgpgout 342795 [ 247.510050][T15999] pgfault 189982 [ 247.510054][T15999] pgmajfault 246 [ 247.510058][T15999] inactive_anon 262242304 [ 247.510062][T15999] active_anon 40517632 [ 247.510066][T15999] inactive_file 0 [ 247.510070][T15999] active_file 0 [ 247.510074][T15999] unevictable 0 [ 247.510077][T15999] hierarchical_memory_limit 314572800 [ 247.510082][T15999] hierarchical_memsw_limit 9223372036854771712 [ 247.510087][T15999] total_cache 302497792 [ 247.510091][T15999] total_rss 233472 [ 247.510095][T15999] total_rss_huge 0 [ 247.510099][T15999] total_shmem 302497792 [ 247.510102][T15999] total_mapped_file 2097152 [ 247.510107][T15999] total_dirty 0 [ 247.510110][T15999] total_writeback 0 [ 247.510114][T15999] total_workingset_refault_anon 530 [ 247.510119][T15999] total_workingset_refault_file 40070 [ 247.510123][T15999] total_swap 108691456 [ 247.510127][T15999] total_swapcached 4096 [ 247.510131][T15999] total_pgpgin 413651 [ 247.510135][T15999] total_pgpgout 342795 [ 247.510139][T15999] total_pgfault 189982 [ 247.510143][T15999] total_pgmajfault 246 [ 247.510147][T15999] total_inactive_anon 262242304 [ 247.510151][T15999] total_active_anon 40517632 [ 247.510156][T15999] total_inactive_file 0 [ 247.510160][T15999] total_active_file 0 [ 247.510164][T15999] total_unevictable 0 [ 247.510167][T15999] anon_cost 0 [ 247.510171][T15999] file_cost 0 [ 247.510176][T15999] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.2897,pid=15970,uid=0 [ 247.510227][T15999] Memory cgroup out of memory: Killed process 15970 (syz.7.2897) total-vm:230040kB, anon-rss:984kB, file-rss:29452kB, shmem-rss:2048kB, UID:0 pgtables:184kB oom_score_adj:0 [ 247.836156][T15981] syz.7.2897 (15981) used greatest stack depth: 17992 bytes left [ 248.163995][T16091] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 248.197702][T15997] syz.7.2897 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 248.197725][T15997] CPU: 1 UID: 0 PID: 15997 Comm: syz.7.2897 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 248.197743][T15997] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 248.197747][T15997] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 248.197753][T15997] Call Trace: [ 248.197758][T15997] [ 248.197763][T15997] dump_stack_lvl+0x100/0x190 [ 248.197783][T15997] dump_header+0xfb/0x606 [ 248.197797][T15997] oom_kill_process.cold+0xd/0x380 [ 248.197811][T15997] out_of_memory+0x343/0x14c0 [ 248.197828][T15997] ? __pfx_out_of_memory+0x10/0x10 [ 248.197846][T15997] mem_cgroup_out_of_memory+0xc6/0x130 [ 248.197860][T15997] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 248.197873][T15997] ? find_held_lock+0x2b/0x80 [ 248.197887][T15997] ? do_raw_spin_unlock+0x145/0x1e0 [ 248.197903][T15997] ? _raw_spin_unlock+0x28/0x50 [ 248.197920][T15997] try_charge_memcg+0x76f/0xfd0 [ 248.197940][T15997] ? __pfx_try_charge_memcg+0x10/0x10 [ 248.197956][T15997] ? find_held_lock+0x2b/0x80 [ 248.197965][T15997] ? rcu_read_unlock+0x17/0x60 [ 248.197989][T15997] ? rcu_read_unlock+0x17/0x60 [ 248.198000][T15997] ? find_held_lock+0x2b/0x80 [ 248.198010][T15997] ? rcu_read_unlock+0x17/0x60 [ 248.198024][T15997] charge_memcg+0x1ae/0x210 [ 248.198041][T15997] __mem_cgroup_charge+0x2b/0x1c0 [ 248.198054][T15997] shmem_alloc_and_add_folio+0x451/0xd40 [ 248.198073][T15997] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 248.198090][T15997] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 248.198110][T15997] shmem_get_folio_gfp+0x758/0x1af0 [ 248.198129][T15997] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 248.198145][T15997] ? vm_normal_page+0x1d1/0x380 [ 248.198158][T15997] ? __pfx_vm_normal_page+0x10/0x10 [ 248.198173][T15997] shmem_write_begin+0x1a4/0x420 [ 248.198190][T15997] ? __pfx_shmem_write_begin+0x10/0x10 [ 248.198207][T15997] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 248.198227][T15997] generic_perform_write+0x292/0xa40 [ 248.198239][T15997] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 248.198254][T15997] ? __pfx_generic_perform_write+0x10/0x10 [ 248.198268][T15997] ? file_update_time_flags+0x38c/0x520 [ 248.198283][T15997] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 248.198293][T15997] shmem_file_write_iter+0x10e/0x140 [ 248.198304][T15997] __kernel_write_iter+0x2ac/0x930 [ 248.198319][T15997] ? __pfx___kernel_write_iter+0x10/0x10 [ 248.198333][T15997] ? __up_read+0x333/0x980 [ 248.198349][T15997] ? dump_user_range+0x7e0/0xe90 [ 248.198363][T15997] ? copy_mc_enhanced_fast_string+0x6/0xf [ 248.198380][T15997] dump_user_range+0xa0d/0xe90 [ 248.198399][T15997] ? __pfx_dump_user_range+0x10/0x10 [ 248.198417][T15997] ? elf_coredump_extra_notes_write+0xbb/0x450 [ 248.198431][T15997] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 248.198445][T15997] ? __pfx_writenote+0x10/0x10 [ 248.198464][T15997] elf_core_dump+0x2d97/0x3d60 [ 248.198488][T15997] ? __pfx_elf_core_dump+0x10/0x10 [ 248.198502][T15997] ? kasan_save_stack+0x3f/0x50 [ 248.198514][T15997] ? kasan_save_stack+0x30/0x50 [ 248.198527][T15997] ? kasan_save_track+0x14/0x30 [ 248.198539][T15997] ? __kasan_kmalloc+0xaa/0xb0 [ 248.198551][T15997] ? __kvmalloc_node_noprof+0x35b/0x9b0 [ 248.198568][T15997] ? get_signal+0x1f20/0x21d0 [ 248.198579][T15997] ? arch_do_signal_or_restart+0x91/0x7e0 [ 248.198595][T15997] ? irqentry_exit+0x542/0xab0 [ 248.198608][T15997] ? 0xffffffffff600000 [ 248.198635][T15997] ? lock_acquire+0x1d1/0x380 [ 248.198648][T15997] ? get_signal+0x1f20/0x21d0 [ 248.198664][T15997] ? vfs_coredump+0x2606/0x58c0 [ 248.198677][T15997] vfs_coredump+0x2606/0x58c0 [ 248.198698][T15997] ? __pfx_vfs_coredump+0x10/0x10 [ 248.198715][T15997] ? __lock_acquire+0x5c0/0x1f40 [ 248.198730][T15997] ? lock_acquire+0x1d1/0x380 [ 248.198742][T15997] ? unwind_next_frame+0xbd/0x2090 [ 248.198761][T15997] ? lock_acquire+0x1d1/0x380 [ 248.198774][T15997] ? is_bpf_text_address+0x25/0x1a0 [ 248.198786][T15997] ? find_held_lock+0x2b/0x80 [ 248.198796][T15997] ? is_bpf_text_address+0x8a/0x1a0 [ 248.198806][T15997] ? is_bpf_text_address+0x8a/0x1a0 [ 248.198817][T15997] ? bpf_ksym_find+0x128/0x1c0 [ 248.198830][T15997] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 248.198845][T15997] ? is_bpf_text_address+0x94/0x1a0 [ 248.198865][T15997] ? __sigqueue_free+0xbe/0x2a0 [ 248.198880][T15997] ? stack_trace_save+0x8e/0xc0 [ 248.198898][T15997] ? kasan_save_stack+0x3f/0x50 [ 248.198910][T15997] ? kasan_save_stack+0x30/0x50 [ 248.198923][T15997] ? kasan_save_track+0x14/0x30 [ 248.198935][T15997] ? kasan_save_free_info+0x3b/0x70 [ 248.198945][T15997] ? __kasan_slab_free+0x5f/0x80 [ 248.198958][T15997] ? kmem_cache_free+0x127/0x6c0 [ 248.198968][T15997] ? __sigqueue_free+0xbe/0x2a0 [ 248.198981][T15997] ? get_signal+0xb02/0x21d0 [ 248.198991][T15997] ? arch_do_signal_or_restart+0x91/0x7e0 [ 248.199007][T15997] ? irqentry_exit+0x542/0xab0 [ 248.199016][T15997] ? asm_exc_page_fault+0x26/0x30 [ 248.199051][T15997] ? rcu_is_watching+0x13/0xc0 [ 248.199064][T15997] get_signal+0x1f20/0x21d0 [ 248.199081][T15997] ? __pfx_get_signal+0x10/0x10 [ 248.199092][T15997] ? __pfx_force_sig_fault+0x10/0x10 [ 248.199107][T15997] arch_do_signal_or_restart+0x91/0x7e0 [ 248.199125][T15997] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 248.199150][T15997] irqentry_exit+0x542/0xab0 [ 248.199162][T15997] asm_exc_page_fault+0x26/0x30 [ 248.199173][T15997] RIP: 0033:0x0 [ 248.199181][T15997] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 248.199187][T15997] RSP: 002b:0000200000000808 EFLAGS: 00010217 [ 248.199196][T15997] RAX: 0000000000000000 RBX: 00007f6d23626360 RCX: 00007f6d2339f559 [ 248.199203][T15997] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 0000000000000200 [ 248.199210][T15997] RBP: 00007f6d23436b20 R08: 0000000000000000 R09: 0000000000000000 [ 248.199216][T15997] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 248.199222][T15997] R13: 00007f6d236263f8 R14: 00007f6d23626360 R15: 00007fff5a866d68 [ 248.199238][T15997] [ 248.232439][T15997] memory: usage 307200kB, limit 307200kB, failcnt 55075 [ 248.232451][T15997] memory+swap: usage 412836kB, limit 9007199254740988kB, failcnt 0 [ 248.232458][T15997] kmem: usage 11124kB, limit 9007199254740988kB, failcnt 0 [ 248.232465][T15997] Memory cgroup stats for /syz7: [ 248.232541][T15997] cache 300851200 [ 248.232546][T15997] rss 2330624 [ 248.232550][T15997] rss_huge 0 [ 248.232558][T15997] shmem 300847104 [ 248.232562][T15997] mapped_file 0 [ 248.232567][T15997] dirty 0 [ 248.232570][T15997] writeback 0 [ 248.232574][T15997] workingset_refault_anon 530 [ 248.232578][T15997] workingset_refault_file 40815 [ 248.232583][T15997] swap 108171264 [ 248.232586][T15997] swapcached 0 [ 248.232590][T15997] pgpgin 432348 [ 248.232594][T15997] pgpgout 361395 [ 248.232598][T15997] pgfault 191538 [ 248.232602][T15997] pgmajfault 261 [ 248.232606][T15997] inactive_anon 144736256 [ 248.232610][T15997] active_anon 156082176 [ 248.232614][T15997] inactive_file 0 [ 248.232618][T15997] active_file 4096 [ 248.232622][T15997] unevictable 2097152 [ 248.232626][T15997] hierarchical_memory_limit 314572800 [ 248.232630][T15997] hierarchical_memsw_limit 9223372036854771712 [ 248.232635][T15997] total_cache 300851200 [ 248.232639][T15997] total_rss 2330624 [ 248.232643][T15997] total_rss_huge 0 [ 248.232647][T15997] total_shmem 300847104 [ 248.232651][T15997] total_mapped_file 0 [ 248.232655][T15997] total_dirty 0 [ 248.232659][T15997] total_writeback 0 [ 248.232662][T15997] total_workingset_refault_anon 530 [ 248.232667][T15997] total_workingset_refault_file 40815 [ 248.232671][T15997] total_swap 108171264 [ 248.232675][T15997] total_swapcached 0 [ 248.232679][T15997] total_pgpgin 432348 [ 248.232683][T15997] total_pgpgout 361395 [ 248.232687][T15997] total_pgfault 191538 [ 248.232691][T15997] total_pgmajfault 261 [ 248.232695][T15997] total_inactive_anon 144736256 [ 248.232699][T15997] total_active_anon 156082176 [ 248.232704][T15997] total_inactive_file 0 [ 248.232708][T15997] total_active_file 4096 [ 248.232712][T15997] total_unevictable 2097152 [ 248.232716][T15997] anon_cost 0 [ 248.232720][T15997] file_cost 0 [ 248.232724][T15997] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.2897,pid=15976,uid=0 [ 248.232777][T15997] Memory cgroup out of memory: Killed process 15976 (syz.7.2897) total-vm:230040kB, anon-rss:912kB, file-rss:36616kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:0 [ 248.295857][T15969] syz.7.2897 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 248.295880][T15969] CPU: 2 UID: 0 PID: 15969 Comm: syz.7.2897 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 248.295911][T15969] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 248.295915][T15969] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 248.295922][T15969] Call Trace: [ 248.295927][T15969] [ 248.295932][T15969] dump_stack_lvl+0x100/0x190 [ 248.295952][T15969] dump_header+0xfb/0x606 [ 248.295966][T15969] oom_kill_process.cold+0xd/0x380 [ 248.295981][T15969] out_of_memory+0x343/0x14c0 [ 248.295998][T15969] ? __pfx_out_of_memory+0x10/0x10 [ 248.296032][T15969] mem_cgroup_out_of_memory+0xc6/0x130 [ 248.296049][T15969] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 248.296062][T15969] ? find_held_lock+0x2b/0x80 [ 248.296076][T15969] ? do_raw_spin_unlock+0x145/0x1e0 [ 248.296092][T15969] ? _raw_spin_unlock+0x28/0x50 [ 248.296109][T15969] try_charge_memcg+0x76f/0xfd0 [ 248.296130][T15969] ? __pfx_try_charge_memcg+0x10/0x10 [ 248.296146][T15969] ? find_held_lock+0x2b/0x80 [ 248.296156][T15969] ? rcu_read_unlock+0x17/0x60 [ 248.296166][T15969] ? rcu_read_unlock+0x17/0x60 [ 248.296176][T15969] ? find_held_lock+0x2b/0x80 [ 248.296186][T15969] ? rcu_read_unlock+0x17/0x60 [ 248.296200][T15969] charge_memcg+0x1ae/0x210 [ 248.296217][T15969] __mem_cgroup_charge+0x2b/0x1c0 [ 248.296230][T15969] filemap_add_folio+0xe7/0x640 [ 248.296246][T15969] ? __pfx_filemap_add_folio+0x10/0x10 [ 248.296265][T15969] __filemap_get_folio_mpol+0x57f/0x1230 [ 248.296284][T15969] filemap_fault+0x871/0x3140 [ 248.296302][T15969] ? __pfx_filemap_fault+0x10/0x10 [ 248.296316][T15969] ? __pte_offset_map+0x9a/0x470 [ 248.296333][T15969] ? find_held_lock+0x2b/0x80 [ 248.296344][T15969] ? __pfx_filemap_map_pages+0x10/0x10 [ 248.296357][T15969] __do_fault+0x10b/0x440 [ 248.296370][T15969] do_fault+0xb3f/0x1890 [ 248.296385][T15969] ? __pfx_do_fault+0x10/0x10 [ 248.296398][T15969] ? rcu_read_unlock+0x2d/0xb0 [ 248.296414][T15969] ? rcu_read_unlock+0x2d/0xb0 [ 248.296434][T15969] __handle_mm_fault+0x150b/0x2f60 [ 248.296467][T15969] ? __pfx___handle_mm_fault+0x10/0x10 [ 248.296483][T15969] ? pte_offset_map_lock+0x174/0x320 [ 248.296496][T15969] ? find_held_lock+0x2b/0x80 [ 248.296506][T15969] ? find_held_lock+0x2b/0x80 [ 248.296515][T15969] ? follow_page_pte+0x536/0x1050 [ 248.296536][T15969] handle_mm_fault+0x363/0xa20 [ 248.296555][T15969] __get_user_pages+0x8a9/0x2c20 [ 248.296573][T15969] ? lock_acquire+0x1d1/0x380 [ 248.296586][T15969] ? __pfx___get_user_pages+0x10/0x10 [ 248.296603][T15969] ? __pfx___might_resched+0x10/0x10 [ 248.296619][T15969] get_dump_page+0x27e/0x3d0 [ 248.296632][T15969] ? __pfx_get_dump_page+0x10/0x10 [ 248.296645][T15969] ? dump_user_range+0x7e0/0xe90 [ 248.296663][T15969] dump_user_range+0x19c/0xe90 [ 248.296681][T15969] ? __pfx_dump_user_range+0x10/0x10 [ 248.296699][T15969] ? elf_coredump_extra_notes_write+0xbb/0x450 [ 248.296713][T15969] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 248.296728][T15969] ? __pfx_writenote+0x10/0x10 [ 248.296746][T15969] elf_core_dump+0x2d97/0x3d60 [ 248.296770][T15969] ? __pfx_elf_core_dump+0x10/0x10 [ 248.296784][T15969] ? kasan_save_stack+0x3f/0x50 [ 248.296797][T15969] ? kasan_save_stack+0x30/0x50 [ 248.296809][T15969] ? kasan_save_track+0x14/0x30 [ 248.296822][T15969] ? __kasan_kmalloc+0xaa/0xb0 [ 248.296833][T15969] ? __kvmalloc_node_noprof+0x35b/0x9b0 [ 248.296846][T15969] ? get_signal+0x1f20/0x21d0 [ 248.296857][T15969] ? arch_do_signal_or_restart+0x91/0x7e0 [ 248.296873][T15969] ? irqentry_exit+0x542/0xab0 [ 248.296887][T15969] ? 0xffffffffff600000 [ 248.296913][T15969] ? lock_acquire+0x1d1/0x380 [ 248.296926][T15969] ? get_signal+0x1f20/0x21d0 [ 248.296943][T15969] ? vfs_coredump+0x2606/0x58c0 [ 248.296956][T15969] vfs_coredump+0x2606/0x58c0 [ 248.296976][T15969] ? __pfx_vfs_coredump+0x10/0x10 [ 248.296994][T15969] ? __lock_acquire+0x5c0/0x1f40 [ 248.297009][T15969] ? lock_acquire+0x1d1/0x380 [ 248.297021][T15969] ? unwind_next_frame+0xbd/0x2090 [ 248.297040][T15969] ? lock_acquire+0x1d1/0x380 [ 248.297053][T15969] ? is_bpf_text_address+0x25/0x1a0 [ 248.297065][T15969] ? find_held_lock+0x2b/0x80 [ 248.297075][T15969] ? is_bpf_text_address+0x8a/0x1a0 [ 248.297086][T15969] ? is_bpf_text_address+0x8a/0x1a0 [ 248.297097][T15969] ? bpf_ksym_find+0x128/0x1c0 [ 248.297110][T15969] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 248.297125][T15969] ? is_bpf_text_address+0x94/0x1a0 [ 248.297145][T15969] ? __sigqueue_free+0xbe/0x2a0 [ 248.297160][T15969] ? stack_trace_save+0x8e/0xc0 [ 248.297178][T15969] ? kasan_save_stack+0x3f/0x50 [ 248.297190][T15969] ? kasan_save_stack+0x30/0x50 [ 248.297203][T15969] ? kasan_save_track+0x14/0x30 [ 248.297215][T15969] ? kasan_save_free_info+0x3b/0x70 [ 248.297225][T15969] ? __kasan_slab_free+0x5f/0x80 [ 248.297238][T15969] ? kmem_cache_free+0x127/0x6c0 [ 248.297248][T15969] ? __sigqueue_free+0xbe/0x2a0 [ 248.297261][T15969] ? get_signal+0xb02/0x21d0 [ 248.297271][T15969] ? arch_do_signal_or_restart+0x91/0x7e0 [ 248.297287][T15969] ? irqentry_exit+0x542/0xab0 [ 248.297296][T15969] ? asm_exc_page_fault+0x26/0x30 [ 248.297331][T15969] ? rcu_is_watching+0x13/0xc0 [ 248.297344][T15969] get_signal+0x1f20/0x21d0 [ 248.297361][T15969] ? __pfx_get_signal+0x10/0x10 [ 248.297373][T15969] ? __pfx_force_sig_fault+0x10/0x10 [ 248.297388][T15969] arch_do_signal_or_restart+0x91/0x7e0 [ 248.297405][T15969] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 248.297431][T15969] irqentry_exit+0x542/0xab0 [ 248.297443][T15969] asm_exc_page_fault+0x26/0x30 [ 248.297454][T15969] RIP: 0033:0x0 [ 248.297462][T15969] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 248.297467][T15969] RSP: 002b:0000200000000808 EFLAGS: 00010217 [ 248.297476][T15969] RAX: 0000000000000000 RBX: 00007f6d23626360 RCX: 00007f6d2339f559 [ 248.297483][T15969] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 0000000000000200 [ 248.297489][T15969] RBP: 00007f6d23436b20 R08: 0000000000000000 R09: 0000000000000000 [ 248.297496][T15969] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 248.297502][T15969] R13: 00007f6d236263f8 R14: 00007f6d23626360 R15: 00007fff5a866d68 [ 248.297517][T15969] [ 248.312930][T15969] memory: usage 307200kB, limit 307200kB, failcnt 55549 [ 248.312942][T15969] memory+swap: usage 412840kB, limit 9007199254740988kB, failcnt 0 [ 248.312949][T15969] kmem: usage 11124kB, limit 9007199254740988kB, failcnt 0 [ 248.312956][T15969] Memory cgroup stats for /syz7: [ 248.313091][T15969] cache 300851200 [ 248.313096][T15969] rss 2330624 [ 248.313100][T15969] rss_huge 0 [ 248.313104][T15969] shmem 300851200 [ 248.313108][T15969] mapped_file 0 [ 248.313112][T15969] dirty 0 [ 248.313115][T15969] writeback 0 [ 248.313119][T15969] workingset_refault_anon 530 [ 248.313124][T15969] workingset_refault_file 40815 [ 248.313128][T15969] swap 108175360 [ 248.313132][T15969] swapcached 0 [ 248.313136][T15969] pgpgin 432350 [ 248.313139][T15969] pgpgout 361397 [ 248.313143][T15969] pgfault 191538 [ 248.313147][T15969] pgmajfault 261 [ 248.313151][T15969] inactive_anon 146169856 [ 248.313155][T15969] active_anon 154652672 [ 248.313159][T15969] inactive_file 0 [ 248.313163][T15969] active_file 0 [ 248.313167][T15969] unevictable 2097152 [ 248.313171][T15969] hierarchical_memory_limit 314572800 [ 248.313176][T15969] hierarchical_memsw_limit 9223372036854771712 [ 248.313180][T15969] total_cache 300851200 [ 248.313185][T15969] total_rss 2330624 [ 248.313189][T15969] total_rss_huge 0 [ 248.313217][T15969] total_shmem 300851200 [ 248.313223][T15969] total_mapped_file 0 [ 248.313227][T15969] total_dirty 0 [ 248.313231][T15969] total_writeback 0 [ 248.313234][T15969] total_workingset_refault_anon 530 [ 248.313239][T15969] total_workingset_refault_file 40815 [ 248.313243][T15969] total_swap 108175360 [ 248.313247][T15969] total_swapcached 0 [ 248.313251][T15969] total_pgpgin 432350 [ 248.313255][T15969] total_pgpgout 361397 [ 248.313259][T15969] total_pgfault 191538 [ 248.313263][T15969] total_pgmajfault 261 [ 248.313267][T15969] total_inactive_anon 146169856 [ 248.313271][T15969] total_active_anon 154652672 [ 248.313276][T15969] total_inactive_file 0 [ 248.313280][T15969] total_active_file 0 [ 248.313284][T15969] total_unevictable 2097152 [ 248.313288][T15969] anon_cost 0 [ 248.313292][T15969] file_cost 0 [ 248.313296][T15969] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.2897,pid=15969,uid=0 [ 248.313708][T15969] Memory cgroup out of memory: Killed process 15969 (syz.7.2897) total-vm:230040kB, anon-rss:916kB, file-rss:36296kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:0 [ 248.415533][T15997] syz.7.2897 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 248.415556][T15997] CPU: 1 UID: 0 PID: 15997 Comm: syz.7.2897 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 248.415572][T15997] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 248.415577][T15997] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 248.415583][T15997] Call Trace: [ 248.415588][T15997] [ 248.415593][T15997] dump_stack_lvl+0x100/0x190 [ 248.415613][T15997] dump_header+0xfb/0x606 [ 248.415627][T15997] oom_kill_process.cold+0xd/0x380 [ 248.415641][T15997] out_of_memory+0x343/0x14c0 [ 248.415659][T15997] ? __pfx_out_of_memory+0x10/0x10 [ 248.415681][T15997] mem_cgroup_out_of_memory+0xc6/0x130 [ 248.415695][T15997] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 248.415707][T15997] ? find_held_lock+0x2b/0x80 [ 248.415721][T15997] ? do_raw_spin_unlock+0x145/0x1e0 [ 248.415738][T15997] ? _raw_spin_unlock+0x28/0x50 [ 248.415766][T15997] try_charge_memcg+0x76f/0xfd0 [ 248.415789][T15997] ? __pfx_try_charge_memcg+0x10/0x10 [ 248.415805][T15997] ? find_held_lock+0x2b/0x80 [ 248.415814][T15997] ? rcu_read_unlock+0x17/0x60 [ 248.415825][T15997] ? rcu_read_unlock+0x17/0x60 [ 248.415835][T15997] ? find_held_lock+0x2b/0x80 [ 248.415845][T15997] ? rcu_read_unlock+0x17/0x60 [ 248.415859][T15997] charge_memcg+0x1ae/0x210 [ 248.415881][T15997] __mem_cgroup_charge+0x2b/0x1c0 [ 248.415896][T15997] shmem_alloc_and_add_folio+0x451/0xd40 [ 248.415916][T15997] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 248.415933][T15997] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 248.415952][T15997] shmem_get_folio_gfp+0x758/0x1af0 [ 248.415972][T15997] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 248.415989][T15997] ? vm_normal_page+0x1d1/0x380 [ 248.416002][T15997] ? __pfx_vm_normal_page+0x10/0x10 [ 248.416035][T15997] shmem_write_begin+0x1a4/0x420 [ 248.416055][T15997] ? __pfx_shmem_write_begin+0x10/0x10 [ 248.416072][T15997] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 248.416092][T15997] generic_perform_write+0x292/0xa40 [ 248.416104][T15997] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 248.416119][T15997] ? __pfx_generic_perform_write+0x10/0x10 [ 248.416134][T15997] ? file_update_time_flags+0x38c/0x520 [ 248.416148][T15997] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 248.416158][T15997] shmem_file_write_iter+0x10e/0x140 [ 248.416170][T15997] __kernel_write_iter+0x2ac/0x930 [ 248.416185][T15997] ? __pfx___kernel_write_iter+0x10/0x10 [ 248.416198][T15997] ? __up_read+0x333/0x980 [ 248.416214][T15997] ? dump_user_range+0x7e0/0xe90 [ 248.416229][T15997] ? copy_mc_enhanced_fast_string+0x6/0xf [ 248.416246][T15997] dump_user_range+0xa0d/0xe90 [ 248.416265][T15997] ? __pfx_dump_user_range+0x10/0x10 [ 248.416283][T15997] ? elf_coredump_extra_notes_write+0xbb/0x450 [ 248.416297][T15997] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 248.416312][T15997] ? __pfx_writenote+0x10/0x10 [ 248.416330][T15997] elf_core_dump+0x2d97/0x3d60 [ 248.416354][T15997] ? __pfx_elf_core_dump+0x10/0x10 [ 248.416368][T15997] ? kasan_save_stack+0x3f/0x50 [ 248.416381][T15997] ? kasan_save_stack+0x30/0x50 [ 248.416393][T15997] ? kasan_save_track+0x14/0x30 [ 248.416405][T15997] ? __kasan_kmalloc+0xaa/0xb0 [ 248.416417][T15997] ? __kvmalloc_node_noprof+0x35b/0x9b0 [ 248.416431][T15997] ? get_signal+0x1f20/0x21d0 [ 248.416442][T15997] ? arch_do_signal_or_restart+0x91/0x7e0 [ 248.416458][T15997] ? irqentry_exit+0x542/0xab0 [ 248.416472][T15997] ? 0xffffffffff600000 [ 248.416498][T15997] ? lock_acquire+0x1d1/0x380 [ 248.416511][T15997] ? get_signal+0x1f20/0x21d0 [ 248.416527][T15997] ? vfs_coredump+0x2606/0x58c0 [ 248.416540][T15997] vfs_coredump+0x2606/0x58c0 [ 248.416561][T15997] ? __pfx_vfs_coredump+0x10/0x10 [ 248.416578][T15997] ? __lock_acquire+0x5c0/0x1f40 [ 248.416593][T15997] ? lock_acquire+0x1d1/0x380 [ 248.416605][T15997] ? unwind_next_frame+0xbd/0x2090 [ 248.416624][T15997] ? lock_acquire+0x1d1/0x380 [ 248.416637][T15997] ? is_bpf_text_address+0x25/0x1a0 [ 248.416649][T15997] ? find_held_lock+0x2b/0x80 [ 248.416659][T15997] ? is_bpf_text_address+0x8a/0x1a0 [ 248.416673][T15997] ? is_bpf_text_address+0x8a/0x1a0 [ 248.416684][T15997] ? bpf_ksym_find+0x128/0x1c0 [ 248.416698][T15997] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 248.416712][T15997] ? is_bpf_text_address+0x94/0x1a0 [ 248.416732][T15997] ? __sigqueue_free+0xbe/0x2a0 [ 248.416746][T15997] ? stack_trace_save+0x8e/0xc0 [ 248.416764][T15997] ? kasan_save_stack+0x3f/0x50 [ 248.416777][T15997] ? kasan_save_stack+0x30/0x50 [ 248.416789][T15997] ? kasan_save_track+0x14/0x30 [ 248.416801][T15997] ? kasan_save_free_info+0x3b/0x70 [ 248.416811][T15997] ? __kasan_slab_free+0x5f/0x80 [ 248.416824][T15997] ? kmem_cache_free+0x127/0x6c0 [ 248.416834][T15997] ? __sigqueue_free+0xbe/0x2a0 [ 248.416847][T15997] ? get_signal+0xb02/0x21d0 [ 248.416857][T15997] ? arch_do_signal_or_restart+0x91/0x7e0 [ 248.416873][T15997] ? irqentry_exit+0x542/0xab0 [ 248.416882][T15997] ? asm_exc_page_fault+0x26/0x30 [ 248.416917][T15997] ? rcu_is_watching+0x13/0xc0 [ 248.416930][T15997] get_signal+0x1f20/0x21d0 [ 248.416947][T15997] ? __pfx_get_signal+0x10/0x10 [ 248.416958][T15997] ? __pfx_force_sig_fault+0x10/0x10 [ 248.416973][T15997] arch_do_signal_or_restart+0x91/0x7e0 [ 248.416991][T15997] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 248.417016][T15997] irqentry_exit+0x542/0xab0 [ 248.417029][T15997] asm_exc_page_fault+0x26/0x30 [ 248.417039][T15997] RIP: 0033:0x0 [ 248.417047][T15997] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 248.417053][T15997] RSP: 002b:0000200000000808 EFLAGS: 00010217 [ 248.417063][T15997] RAX: 0000000000000000 RBX: 00007f6d23626360 RCX: 00007f6d2339f559 [ 248.417070][T15997] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 0000000000000200 [ 248.417076][T15997] RBP: 00007f6d23436b20 R08: 0000000000000000 R09: 0000000000000000 [ 248.417083][T15997] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 248.417089][T15997] R13: 00007f6d236263f8 R14: 00007f6d23626360 R15: 00007fff5a866d68 [ 248.417104][T15997] [ 248.431979][T15997] memory: usage 307200kB, limit 307200kB, failcnt 56337 [ 248.431990][T15997] memory+swap: usage 412804kB, limit 9007199254740988kB, failcnt 0 [ 248.431998][T15997] kmem: usage 11104kB, limit 9007199254740988kB, failcnt 0 [ 248.432004][T15997] Memory cgroup stats for /syz7: [ 248.432101][T15997] cache 300777472 [ 248.432106][T15997] rss 2334720 [ 248.432110][T15997] rss_huge 0 [ 248.432114][T15997] shmem 300777472 [ 248.432118][T15997] mapped_file 0 [ 248.432122][T15997] dirty 0 [ 248.432126][T15997] writeback 0 [ 248.432129][T15997] workingset_refault_anon 530 [ 248.432166][T15997] workingset_refault_file 40820 [ 248.432171][T15997] swap 108138496 [ 248.432175][T15997] swapcached 4096 [ 248.432179][T15997] pgpgin 432436 [ 248.432183][T15997] pgpgout 361478 [ 248.432187][T15997] pgfault 191547 [ 248.432191][T15997] pgmajfault 262 [ 248.432194][T15997] inactive_anon 137785344 [ 248.432198][T15997] active_anon 163110912 [ 248.432203][T15997] inactive_file 0 [ 248.432206][T15997] active_file 0 [ 248.432210][T15997] unevictable 2101248 [ 248.432214][T15997] hierarchical_memory_limit 314572800 [ 248.432219][T15997] hierarchical_memsw_limit 9223372036854771712 [ 248.432223][T15997] total_cache 300777472 [ 248.432227][T15997] total_rss 2334720 [ 248.432231][T15997] total_rss_huge 0 [ 248.432235][T15997] total_shmem 300777472 [ 248.432239][T15997] total_mapped_file 0 [ 248.432243][T15997] total_dirty 0 [ 248.432247][T15997] total_writeback 0 [ 248.432251][T15997] total_workingset_refault_anon 530 [ 248.432255][T15997] total_workingset_refault_file 40820 [ 248.432260][T15997] total_swap 108138496 [ 248.432264][T15997] total_swapcached 4096 [ 248.432268][T15997] total_pgpgin 432436 [ 248.432272][T15997] total_pgpgout 361478 [ 248.432276][T15997] total_pgfault 191547 [ 248.432280][T15997] total_pgmajfault 262 [ 248.432284][T15997] total_inactive_anon 137785344 [ 248.432288][T15997] total_active_anon 163110912 [ 248.432292][T15997] total_inactive_file 0 [ 248.432296][T15997] total_active_file 0 [ 248.432300][T15997] total_unevictable 2101248 [ 248.432305][T15997] anon_cost 0 [ 248.432308][T15997] file_cost 0 [ 248.432312][T15997] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.2897,pid=15973,uid=0 [ 248.432365][T15997] Memory cgroup out of memory: Killed process 15973 (syz.7.2897) total-vm:230040kB, anon-rss:916kB, file-rss:36168kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:0 [ 248.485375][ T41] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 248.657100][ T41] usb 10-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 248.658239][ T41] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 248.658253][ T41] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 248.658272][ T41] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.659476][ T41] usb 10-1: config 0 descriptor?? [ 248.661171][ T41] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 248.912705][T16093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.912900][T16093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.944691][ T41] usb 10-1: USB disconnect, device number 6 [ 249.084189][ T65] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 249.095634][ T65] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 249.097295][ T65] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 249.100077][ T65] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 249.100565][ T65] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 249.339148][T16106] rxe_eth0 speed is unknown, defaulting to 1000 [ 249.455853][T16106] wg0 speed is unknown, defaulting to 1000 [ 249.499985][T15971] tipc: Resetting bearer [ 249.514521][T15971] syz_tun (unregistering): left allmulticast mode [ 249.514992][T15971] tipc: Disabling bearer [ 249.672539][T16106] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.672608][T16106] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.672672][T16106] bridge_slave_0: entered allmulticast mode [ 249.673336][T16106] bridge_slave_0: entered promiscuous mode [ 249.674833][T16106] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.674874][T16106] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.674984][T16106] bridge_slave_1: entered allmulticast mode [ 249.675875][T16106] bridge_slave_1: entered promiscuous mode [ 249.690554][T16106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.691858][T16106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.705640][T16106] team0: Port device team_slave_0 added [ 249.706848][T16106] team0: Port device team_slave_1 added [ 249.717639][T16106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.717649][T16106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.717662][T16106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.718271][T16106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.718279][T16106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.718291][T16106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.720730][ T42] audit: type=1400 audit(249.610:32806): avc: denied { listen } for pid=16129 comm="syz.6.2932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 249.742620][T16106] hsr_slave_0: entered promiscuous mode [ 249.743178][T16106] hsr_slave_1: entered promiscuous mode [ 249.743488][T16106] debugfs: 'hsr0' already exists in 'hsr' [ 249.743500][T16106] Cannot create hsr debugfs directory [ 249.769556][T16134] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2933'. [ 249.769579][T16134] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2933'. [ 249.797188][T16134] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2933'. [ 249.797213][T16134] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2933'. [ 249.837192][T16134] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2933'. [ 249.837217][T16134] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2933'. [ 249.888439][T16106] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 31488 - 0 [ 249.888464][T16106] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.991785][T16106] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 31488 - 0 [ 249.991807][T16106] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.051120][T16155] netlink: 'syz.5.2939': attribute type 4 has an invalid length. [ 250.072272][T16106] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 31488 - 0 [ 250.072294][T16106] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.139659][T16106] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 31488 - 0 [ 250.139681][T16106] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.242156][T16106] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 250.244559][T16106] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 250.244972][T16106] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 250.263104][T16106] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 250.263606][T16106] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 250.273035][T16106] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 250.273445][T16106] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 250.276031][T16106] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 250.292577][T16106] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.292625][T16106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.292725][T16106] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.292769][T16106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.330264][T16106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.338999][T16106] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.340896][ T6214] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.341378][ T6214] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.351192][ T6214] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.351237][ T6214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.354989][ T6214] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.355087][ T6214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.576154][T16106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.701817][T16106] veth0_vlan: entered promiscuous mode [ 250.705019][T16106] veth1_vlan: entered promiscuous mode [ 250.716994][T16106] veth0_macvtap: entered promiscuous mode [ 250.719017][T16106] veth1_macvtap: entered promiscuous mode [ 250.729738][T16106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.733401][T16106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.771053][T10578] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.771698][T10578] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.795836][ T8331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.795851][ T8331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.820285][ T8331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.820305][ T8331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.855410][T10578] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.855450][T10578] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.000287][T16197] tmpfs: Bad value for 'mpol' [ 251.028389][ T65] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 251.047289][ T65] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 251.053492][ T65] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 251.054304][ T65] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 251.068847][ T65] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 251.217760][ T5790] Bluetooth: hci1: command tx timeout [ 251.268462][T10572] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.288376][T16198] rxe_eth0 speed is unknown, defaulting to 1000 [ 251.339909][T16229] syzkaller0: entered promiscuous mode [ 251.339926][T16229] syzkaller0: entered allmulticast mode [ 251.347075][ T42] audit: type=1400 audit(251.240:32807): avc: denied { bind } for pid=16226 comm="syz.5.2951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 251.348410][ T42] audit: type=1400 audit(251.240:32808): avc: denied { read } for pid=16226 comm="syz.5.2951" path="socket:[58344]" dev="sockfs" ino=58344 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 251.384152][T10572] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.398627][T16198] wg0 speed is unknown, defaulting to 1000 [ 252.969398][T10572] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.039312][T10572] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.064447][T16260] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2960'. [ 253.145184][ T5790] Bluetooth: hci0: command tx timeout [ 253.178053][T10572] bridge_slave_1: left allmulticast mode [ 253.178071][T10572] bridge_slave_1: left promiscuous mode [ 253.178257][T10572] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.182104][T10572] bridge_slave_0: left allmulticast mode [ 253.182119][T10572] bridge_slave_0: left promiscuous mode [ 253.182246][T10572] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.229022][T16279] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2963'. [ 253.255735][T16281] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2967'. [ 253.255755][T16281] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2967'. [ 253.295123][ T5790] Bluetooth: hci1: command tx timeout [ 253.298769][T10572] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.300531][T10572] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.301298][T10572] bond0 (unregistering): Released all slaves [ 253.313180][T16281] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16281 comm=syz.6.2967 [ 253.354949][T16198] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.355110][T16198] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.355176][T16198] bridge_slave_0: entered allmulticast mode [ 253.356095][T16198] bridge_slave_0: entered promiscuous mode [ 253.357502][T16198] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.357569][T16198] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.357630][T16198] bridge_slave_1: entered allmulticast mode [ 253.358326][T16198] bridge_slave_1: entered promiscuous mode [ 253.385638][T16198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.386982][T16198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.421903][ T42] audit: type=1400 audit(253.310:32809): avc: denied { write } for pid=16290 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.442582][T16198] team0: Port device team_slave_0 added [ 253.453412][T16198] team0: Port device team_slave_1 added [ 253.460999][T16297] ALSA: seq fatal error: cannot create timer (-19) [ 253.492595][ T42] audit: type=1400 audit(253.380:32810): avc: denied { write } for pid=16301 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.494219][T16198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.494233][T16198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 253.494256][T16198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.510966][T16198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.510982][T16198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 253.511003][T16198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.554644][ T5491] 8021q: adding VLAN 0 to HW filter on device eth10 [ 253.582182][T16198] hsr_slave_0: entered promiscuous mode [ 253.582791][T16198] hsr_slave_1: entered promiscuous mode [ 253.583196][T16198] debugfs: 'hsr0' already exists in 'hsr' [ 253.583209][T16198] Cannot create hsr debugfs directory [ 253.683153][ T42] audit: type=1400 audit(253.570:32811): avc: denied { write } for pid=16311 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.735784][ T42] audit: type=1400 audit(253.620:32812): avc: denied { write } for pid=16324 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.747759][T16322] FAULT_INJECTION: forcing a failure. [ 253.747759][T16322] name failslab, interval 1, probability 0, space 0, times 0 [ 253.747781][T16322] CPU: 1 UID: 0 PID: 16322 Comm: syz.5.2976 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 253.747798][T16322] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 253.747802][T16322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 253.747809][T16322] Call Trace: [ 253.747822][T16322] [ 253.747828][T16322] dump_stack_lvl+0x100/0x190 [ 253.747869][T16322] should_fail_ex.cold+0x5/0xa [ 253.747896][T16322] should_failslab+0xc2/0x120 [ 253.747926][T16322] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 253.747958][T16322] ? kernel_text_address+0x8d/0x100 [ 253.747985][T16322] ? kstrdup_const+0x63/0x80 [ 253.748023][T16322] kstrdup+0x51/0xe0 [ 253.748040][T16322] kstrdup_const+0x63/0x80 [ 253.748056][T16322] __kernfs_new_node+0x9b/0xa10 [ 253.748069][T16322] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 253.748087][T16322] ? __pfx___kernfs_new_node+0x10/0x10 [ 253.748102][T16322] ? lock_acquire+0x1d1/0x380 [ 253.748116][T16322] ? kernfs_root+0x23/0x2a0 [ 253.748127][T16322] ? find_held_lock+0x2b/0x80 [ 253.748137][T16322] ? kernfs_root+0xee/0x2a0 [ 253.748147][T16322] ? kernfs_root+0xee/0x2a0 [ 253.748161][T16322] kernfs_create_dir_ns+0xa4/0x2b0 [ 253.748178][T16322] sysfs_create_dir_ns+0x13a/0x2b0 [ 253.748189][T16322] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 253.748200][T16322] ? find_held_lock+0x2b/0x80 [ 253.748209][T16322] ? kobject_add_internal+0x25f/0x930 [ 253.748224][T16322] ? kobject_add_internal+0x25f/0x930 [ 253.748239][T16322] ? do_raw_spin_unlock+0x145/0x1e0 [ 253.748256][T16322] kobject_add_internal+0x2c8/0x930 [ 253.748273][T16322] kobject_add+0x16a/0x1e0 [ 253.748287][T16322] ? __pfx_kobject_add+0x10/0x10 [ 253.748300][T16322] ? class_to_subsys+0x10f/0x150 [ 253.748316][T16322] ? kobject_put+0xb9/0x640 [ 253.748329][T16322] ? _raw_spin_unlock+0x28/0x50 [ 253.748347][T16322] device_add+0x294/0x1970 [ 253.748361][T16322] ? __pfx_device_add+0x10/0x10 [ 253.748377][T16322] ? kobject_get+0xbb/0x150 [ 253.748391][T16322] cdev_device_add+0x12b/0x270 [ 253.748408][T16322] nvme_add_ctrl+0x15c/0x320 [ 253.748424][T16322] nvme_loop_create_ctrl+0x201/0xee0 [ 253.748439][T16322] nvmf_dev_write+0x4ee/0xb60 [ 253.748456][T16322] vfs_write+0x2aa/0x1050 [ 253.748470][T16322] ? __pfx_nvmf_dev_write+0x10/0x10 [ 253.748482][T16322] ? lock_acquire+0x1d1/0x380 [ 253.748495][T16322] ? __fget_files+0x34/0x3d0 [ 253.748510][T16322] ? __pfx_vfs_write+0x10/0x10 [ 253.748522][T16322] ? find_held_lock+0x2b/0x80 [ 253.748532][T16322] ? __fget_files+0x215/0x3d0 [ 253.748547][T16322] ? __fget_files+0x215/0x3d0 [ 253.748565][T16322] ? __fget_files+0x21f/0x3d0 [ 253.748584][T16322] ksys_write+0x12a/0x250 [ 253.748597][T16322] ? __pfx_ksys_write+0x10/0x10 [ 253.748615][T16322] do_syscall_64+0x123/0x790 [ 253.748627][T16322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.748639][T16322] RIP: 0033:0x7f629e39f559 [ 253.748650][T16322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.748660][T16322] RSP: 002b:00007f629f255028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 253.748672][T16322] RAX: ffffffffffffffda RBX: 00007f629e625fa0 RCX: 00007f629e39f559 [ 253.748679][T16322] RDX: 0000000000000015 RSI: 0000200000000480 RDI: 0000000000000005 [ 253.748686][T16322] RBP: 00007f629e436b20 R08: 0000000000000000 R09: 0000000000000000 [ 253.748692][T16322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.748699][T16322] R13: 00007f629e626038 R14: 00007f629e625fa0 R15: 00007ffd52c0c7c8 [ 253.748713][T16322] [ 253.748745][T16322] kobject: kobject_add_internal failed for nvme0 (error: -12 parent: ctl) [ 253.771837][T16332] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_team, syncid = 0, id = 0 [ 253.796164][ T5491] 8021q: adding VLAN 0 to HW filter on device eth11 [ 253.804104][T16334] ptrace attach of "/syz-executor exec"[16106] was attempted by "/syz-executor exec"[16334] [ 253.847638][ T42] audit: type=1400 audit(253.730:32813): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=44608 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 253.847667][ T42] audit: type=1400 audit(253.740:32814): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=44608 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 253.878128][ T42] audit: type=1400 audit(253.770:32815): avc: denied { write } for pid=16339 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.928410][T10572] hsr_slave_0: left promiscuous mode [ 253.929375][T10572] hsr_slave_1: left promiscuous mode [ 253.929743][T10572] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.929754][T10572] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.930430][T10572] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.930440][T10572] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.933521][ T42] audit: type=1400 audit(253.820:32816): avc: denied { write } for pid=16345 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.943309][T16348] ip_tables: iptables: counters copy to user failed while replacing table [ 253.948619][T10572] veth1_macvtap: left promiscuous mode [ 253.949182][T10572] veth0_macvtap: left promiscuous mode [ 253.949254][T10572] veth1_vlan: left promiscuous mode [ 253.949298][T10572] veth0_vlan: left promiscuous mode [ 254.037951][ T5790] Bluetooth: hci5: unexpected event for opcode 0x0c38 [ 254.130625][T10572] team0 (unregistering): Port device team_slave_1 removed [ 254.135515][T10572] team0 (unregistering): Port device team_slave_0 removed [ 254.223434][ T5491] 8021q: adding VLAN 0 to HW filter on device eth12 [ 254.314894][T16198] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 254.323342][T16198] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 254.323794][T16198] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 254.340100][T16198] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 254.341118][T16198] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 254.344503][T16198] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 254.347730][T16198] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 254.367093][ T42] audit: type=1400 audit(254.260:32817): avc: denied { write } for pid=16357 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.367847][T16198] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 254.394241][T16367] ip_tables: iptables: counters copy to user failed while replacing table [ 254.420941][ T42] audit: type=1400 audit(254.310:32818): avc: denied { write } for pid=16368 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.457110][T16198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.460421][ T5491] 8021q: adding VLAN 0 to HW filter on device eth13 [ 254.464280][T16198] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.467739][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.467783][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.472584][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.472647][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.488116][T16372] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16372 comm=syz.7.2985 [ 254.689976][T16385] batman_adv: batadv0: Adding interface: syz_tun [ 254.689987][T16385] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 254.690135][T16385] batman_adv: batadv0: Interface activated: syz_tun [ 254.705519][T16198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.806782][T16406] bridge2: entered allmulticast mode [ 254.808186][T16406] __nla_validate_parse: 6 callbacks suppressed [ 254.808197][T16406] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2990'. [ 254.808228][T16406] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2990'. [ 254.808774][T16406] netlink: 'syz.6.2990': attribute type 5 has an invalid length. [ 254.809989][T16407] ip_tables: iptables: counters copy to user failed while replacing table [ 254.811773][T16408] ip_tables: iptables: counters copy to user failed while replacing table [ 254.813451][T16406] netlink: 'syz.6.2990': attribute type 4 has an invalid length. [ 254.813461][T16406] netlink: 17 bytes leftover after parsing attributes in process `syz.6.2990'. [ 254.846809][T16198] veth0_vlan: entered promiscuous mode [ 254.849876][T16198] veth1_vlan: entered promiscuous mode [ 254.862940][T16198] veth0_macvtap: entered promiscuous mode [ 254.865998][T16198] veth1_macvtap: entered promiscuous mode [ 254.872728][T16198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.879357][T16198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.936011][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.937262][ T8331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.937273][ T8331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.980452][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.980466][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.995154][ T5852] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.995322][ T5852] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.995342][ T5852] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.104053][T16424] random: crng reseeded on system resumption [ 255.113667][T16424] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2941'. [ 255.225215][ T5790] Bluetooth: hci0: command tx timeout [ 255.326533][T16447] fuse: Bad value for 'fd' [ 255.327224][T16447] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3004'. [ 255.375572][ T5790] Bluetooth: hci1: command tx timeout [ 255.537642][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.537719][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.634400][ T5790] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 255.634863][T16492] 8021q: VLANs not supported on syzkaller0 [ 255.634959][T16490] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 255.644535][T16490] xt_recent: Need "+ip", "-ip" or "/" [ 255.659179][T16490] FAULT_INJECTION: forcing a failure. [ 255.659179][T16490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.659202][T16490] CPU: 2 UID: 0 PID: 16490 Comm: syz.7.3016 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 255.659218][T16490] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 255.659223][T16490] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 255.659231][T16490] Call Trace: [ 255.659245][T16490] [ 255.659250][T16490] dump_stack_lvl+0x100/0x190 [ 255.659306][T16490] should_fail_ex.cold+0x5/0xa [ 255.659330][T16490] _copy_to_iter+0x1f3/0x1720 [ 255.659347][T16490] ? __pfx___skb_try_recv_datagram+0x10/0x10 [ 255.659368][T16490] ? lock_acquire+0x1d1/0x380 [ 255.659402][T16490] ? __pfx__copy_to_iter+0x10/0x10 [ 255.659412][T16490] ? find_held_lock+0x2b/0x80 [ 255.659424][T16490] ? __skb_recv_datagram+0x1b2/0x220 [ 255.659444][T16490] simple_copy_to_iter+0x46/0x90 [ 255.659460][T16490] __skb_datagram_iter+0x129/0x8f0 [ 255.659476][T16490] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 255.659493][T16490] ? skb_recv_datagram+0x88/0xc0 [ 255.659526][T16490] skb_copy_datagram_iter+0xa1/0x250 [ 255.659544][T16490] netlink_recvmsg+0x2b5/0xb60 [ 255.659558][T16490] ? __pfx_netlink_recvmsg+0x10/0x10 [ 255.659571][T16490] ? __fget_files+0x215/0x3d0 [ 255.659597][T16490] ? __pfx_netlink_recvmsg+0x10/0x10 [ 255.659610][T16490] sock_recvmsg+0x1d5/0x220 [ 255.659624][T16490] __sys_recvfrom+0x1f2/0x2f0 [ 255.659637][T16490] ? __pfx___sys_recvfrom+0x10/0x10 [ 255.659651][T16490] ? fd_install+0x223/0x580 [ 255.659675][T16490] ? xfd_validate_state+0x129/0x190 [ 255.659692][T16490] __x64_sys_recvfrom+0xe0/0x1c0 [ 255.659703][T16490] ? do_syscall_64+0xae/0x790 [ 255.659717][T16490] ? lockdep_hardirqs_on+0x7d/0x110 [ 255.659733][T16490] do_syscall_64+0x123/0x790 [ 255.659745][T16490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.659757][T16490] RIP: 0033:0x7fee8e95fd8e [ 255.659767][T16490] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 255.659778][T16490] RSP: 002b:00007fee8f8d3ee8 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 255.659789][T16490] RAX: ffffffffffffffda RBX: 00007fee8f8d56c0 RCX: 00007fee8e95fd8e [ 255.659796][T16490] RDX: 0000000000001000 RSI: 00007fee8f8d4000 RDI: 000000000000000e [ 255.659803][T16490] RBP: 000000000000000e R08: 0000000000000000 R09: 0000000000000000 [ 255.659810][T16490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000002bc0 [ 255.659817][T16490] R13: 00007fee8f8d3fb0 R14: 000000000000000b R15: 0000000000000000 [ 255.659831][T16490] [ 255.937648][T16498] BUG: unable to handle page fault for address: fffff52004b8b400 [ 255.940100][T16498] #PF: supervisor read access in kernel mode [ 255.941994][T16498] #PF: error_code(0x0000) - not-present page [ 255.945089][T16498] PGD 17fff5067 P4D 17fff5067 PUD 1eaaf067 PMD 2504d067 PTE 0 [ 255.947429][T16498] Oops: Oops: 0000 [#1] SMP KASAN NOPTI [ 255.949196][T16498] CPU: 2 UID: 0 PID: 16498 Comm: syz.7.3018 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 255.952550][T16498] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 255.954342][T16498] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 255.957517][T16498] RIP: 0010:sys_fillrect+0xc77/0x1910 [ 255.959233][T16498] Code: 00 00 48 8d 3c f5 00 00 00 00 48 89 44 24 20 48 89 7c 24 10 48 89 74 24 30 eb 03 45 89 ef e8 d0 02 8a fc 4c 89 e1 48 c1 e9 03 <42> 80 3c 31 00 0f 85 c0 0a 00 00 48 8b 44 24 08 49 89 2c 24 49 8d [ 255.965799][T16498] RSP: 0018:ffffc90003b7f5d8 EFLAGS: 00010a06 [ 255.967683][T16498] RAX: 00000000000099ea RBX: 0000000000000190 RCX: 1ffff92004b8b400 [ 255.970171][T16498] RDX: 0000000000080000 RSI: ffffffff85841840 RDI: 0000000000000010 [ 255.972623][T16498] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000004 [ 255.975109][T16498] R10: 0000000000000190 R11: 0000000000000000 R12: ffffc90025c5a000 [ 255.977612][T16498] R13: ffffc90025c5a000 R14: dffffc0000000000 R15: 0000000000000004 [ 255.980097][T16498] FS: 00007fee8f8d56c0(0000) GS:ffff8880d46b4000(0000) knlGS:0000000000000000 [ 255.982848][T16498] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 255.984902][T16498] CR2: fffff52004b8b400 CR3: 000000002e912000 CR4: 0000000000352ef0 [ 255.987370][T16498] Call Trace: [ 255.988466][T16498] [ 255.989638][T16498] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 255.992138][T16498] bit_clear+0x17d/0x220 [ 255.993949][T16498] ? __pfx_bit_clear+0x10/0x10 [ 255.995820][T16498] ? fb_get_color_depth+0x120/0x250 [ 255.997471][T16498] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 255.999318][T16498] __fbcon_clear+0x633/0x760 [ 256.000814][T16498] ? __pfx_bit_clear+0x10/0x10 [ 256.002311][T16498] fbcon_scroll+0x48b/0x650 [ 256.003785][T16498] con_scroll+0x464/0x690 [ 256.005192][T16498] csi_ECMA.constprop.0+0x1238/0x3b60 [ 256.006867][T16498] ? find_held_lock+0x2b/0x80 [ 256.008349][T16498] ? __pfx_csi_ECMA.constprop.0+0x10/0x10 [ 256.010126][T16498] do_con_write+0x366b/0x4ae0 [ 256.011635][T16498] ? __pfx_do_con_write+0x10/0x10 [ 256.013227][T16498] con_write+0x23/0xb0 [ 256.014518][T16498] n_tty_write+0x440/0x1200 [ 256.016249][T16498] ? __pfx_n_tty_write+0x10/0x10 [ 256.018257][T16498] ? __kasan_kmalloc+0xaa/0xb0 [ 256.019802][T16498] ? __pfx_woken_wake_function+0x10/0x10 [ 256.021595][T16498] ? rcu_is_watching+0x13/0xc0 [ 256.023095][T16498] ? file_tty_write.isra.0+0x6ed/0x8f0 [ 256.024799][T16498] ? kfree+0x1e5/0x6d0 [ 256.026107][T16498] ? __pfx_n_tty_write+0x10/0x10 [ 256.027654][T16498] file_tty_write.isra.0+0x4ca/0x8f0 [ 256.029336][T16498] vfs_write+0x6af/0x1050 [ 256.030701][T16498] ? __pfx_tty_write+0x10/0x10 [ 256.032237][T16498] ? __pfx_vfs_write+0x10/0x10 [ 256.033738][T16498] ? find_held_lock+0x2b/0x80 [ 256.035279][T16498] ksys_write+0x12a/0x250 [ 256.036647][T16498] ? __pfx_ksys_write+0x10/0x10 [ 256.038195][T16498] do_syscall_64+0x123/0x790 [ 256.039665][T16498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.041539][T16498] RIP: 0033:0x7fee8e99f559 [ 256.043076][T16498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.049460][T16498] RSP: 002b:00007fee8f8d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 256.052138][T16498] RAX: ffffffffffffffda RBX: 00007fee8ec25fa0 RCX: 00007fee8e99f559 [ 256.054662][T16498] RDX: 0000000000001006 RSI: 0000200000000640 RDI: 0000000000000006 [ 256.057178][T16498] RBP: 00007fee8ea36b20 R08: 0000000000000000 R09: 0000000000000000 [ 256.059729][T16498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.062252][T16498] R13: 00007fee8ec26038 R14: 00007fee8ec25fa0 R15: 00007fffc2caa3b8 [ 256.064771][T16498] [ 256.065806][T16498] Modules linked in: [ 256.067073][T16498] CR2: fffff52004b8b400 [ 256.068414][T16498] ---[ end trace 0000000000000000 ]--- [ 256.070157][T16498] RIP: 0010:sys_fillrect+0xc77/0x1910 [ 256.070178][T16498] Code: 00 00 48 8d 3c f5 00 00 00 00 48 89 44 24 20 48 89 7c 24 10 48 89 74 24 30 eb 03 45 89 ef e8 d0 02 8a fc 4c 89 e1 48 c1 e9 03 <42> 80 3c 31 00 0f 85 c0 0a 00 00 48 8b 44 24 08 49 89 2c 24 49 8d [ 256.070192][T16498] RSP: 0018:ffffc90003b7f5d8 EFLAGS: 00010a06 [ 256.070203][T16498] RAX: 00000000000099ea RBX: 0000000000000190 RCX: 1ffff92004b8b400 [ 256.070210][T16498] RDX: 0000000000080000 RSI: ffffffff85841840 RDI: 0000000000000010 [ 256.070218][T16498] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000004 [ 256.070225][T16498] R10: 0000000000000190 R11: 0000000000000000 R12: ffffc90025c5a000 [ 256.070232][T16498] R13: ffffc90025c5a000 R14: dffffc0000000000 R15: 0000000000000004 [ 256.070240][T16498] FS: 00007fee8f8d56c0(0000) GS:ffff8880d46b4000(0000) knlGS:0000000000000000 [ 256.070263][T16498] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 256.070272][T16498] CR2: fffff52004b8b400 CR3: 000000002e912000 CR4: 0000000000352ef0 [ 256.070281][T16498] Kernel panic - not syncing: Fatal exception [ 256.102560][T16498] Kernel Offset: disabled [ 256.103924][T16498] Rebooting in 86400 seconds.. VM DIAGNOSIS: 11:12:06 Registers: info registers vcpu 0 CPU#0 RAX=00000000002c200c RBX=ffffffff8fc91580 RCX=ffffffff8be65325 RDX=0000000000000001 RSI=ffffffff8c831600 RDI=ffffffff81e2379e RBP=fffffbfff1f922b0 RSP=ffffffff8fc07cf0 R8 =0000000000000000 R9 =ffffed100d406825 R10=ffff88806a03412b R11=ffffffff81d8f069 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1f80fa2 R15=dffffc0000000000 RIP=ffffffff8be637bf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d44b4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f629e3ecc40 CR3=0000000037867000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000008000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000fe82fefe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 387a79732f74656e 2f70756f7267637a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff3c109836 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff3c109836 00007fff3c10983c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd31ce3714a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd31ce37184 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd31ce372e8 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd31ce37176 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000048 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000048 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000001abb84 RBX=ffff888020692580 RCX=ffffffff8be65325 RDX=0000000000000001 RSI=ffffffff8c831600 RDI=ffffffff81e2379e RBP=ffffed10040d24b0 RSP=ffffc90000177e00 R8 =0000000000000000 R9 =ffffed100d426825 R10=ffff88806a13412b R11=ffffffff81d8f069 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200002efc4 R15=dffffc0000000000 RIP=ffffffff8be637bf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d45b4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c266643 CR3=0000000059d07000 CR4=00352ef0 DR0=0000000000000009 DR1=00000000000000c9 DR2=00000000000000f3 DR3=00000000000000c0 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd71a96576 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd71a96576 00007ffd71a9657c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f360703714a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3607037184 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36070372e8 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3607037176 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7ce3888f57dbc4ee 1bff11748580f5ac 3d262aa0ea33ecf0 62b25afd278f9511 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004000b000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36071f95f8 00007f36071f95c8 00007f36071f9600 00007f36071f95e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85bc8f45 RDI=ffffffff9cf11f80 RBP=ffffffff9cf11f40 RSP=ffffc90003b7ece8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=727265203a465023 R12=0000000000000000 R13=000000000000002d R14=0000000000000004 R15=ffffc90003b7f000 RIP=ffffffff85bc8f6f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fee8f8d56c0 ffffffff 00c00000 GS =0000 ffff8880d46b4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=fffff52004b8b400 CR3=000000002e912000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000020100001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee8f8d4be0 0000003000000010 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffc2caa8a6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffc2caa8a6 00007fffc2caa8ac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee8ea3714a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee8ea37184 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee8ea372e8 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee8ea37176 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a732520656c6261 7462650064656c69 61662029736e7465 6e28736e74657300 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1f56000540494744 514740004140494c 4443050c564b5140 4b0d564b51405600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee8ebf95f8 00007fee8ebf95c8 00007fee8ebf9600 00007fee8ebf95e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000160d6c RBX=ffff8880206fa580 RCX=ffffffff8be65325 RDX=0000000000000001 RSI=ffffffff8c831600 RDI=ffffffff81e2379e RBP=ffffed10040df4b0 RSP=ffffc90000197e00 R8 =0000000000000000 R9 =ffffed100d466825 R10=ffff88806a33412b R11=ffffffff81d8f069 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000032fc4 R15=dffffc0000000000 RIP=ffffffff8be637bf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d47b4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fee8f75da08 CR3=0000000030f67000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 656d69745f746961 775f6f692e716662 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffc2caa8a6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffc2caa8a6 00007fffc2caa8ac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee8ea3714a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee8ea37184 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee8ea372e8 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee8ea37176 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000