last executing test programs: 20m42.616803571s ago: executing program 0 (id=312): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) close(r0) recvmsg(r1, &(0x7f0000002240)={0x0, 0x0, 0x0}, 0x0) 20m42.58902836s ago: executing program 0 (id=315): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560aff820fffff5bab00070000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000000000224e0000", 0x58}], 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) r3 = fanotify_init(0x8, 0x101000) fanotify_mark(r3, 0x90, 0x8100000, r2, 0x0) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101080, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x320) close_range(r5, 0xffffffffffffffff, 0x3f00000000000000) socket$unix(0x1, 0x1, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc8041, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000180)={@val={0x800e}, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}}, 0x2e) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) read$FUSE(r9, 0x0, 0x4447c686) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) 20m41.938665723s ago: executing program 0 (id=318): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0) landlock_restrict_self(r0, 0x4) landlock_restrict_self(0xffffffffffffffff, 0x4) syz_emit_ethernet(0x82, &(0x7f0000000080)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x4, 0x0, 0xfe, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x31}}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x1, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3, 0x10}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x4, [{@multicast1=0xe0000006, 0x1}, {@dev, 0x2}, {@dev, 0x20000000}, {@remote}, {@loopback, 0x1}, {@multicast1, 0x4}, {@empty, 0xffffff08}]}]}}}}}}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x238, 0x3a8, 0x3a8, 0x238, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [0x0, 0x0, 0xffffffff], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x104, 0x14c, 0x700, {}, [@inet=@rpfilter={{0x24}}, @common=@unspec=@limit={{0x3c}, {0x10000000, 0x8000001, 0x0, 0x0, 0x0, 0x0, 0x4}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xc8, 0xec, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @common=@unspec=@CONNSECMARK={0x24, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x35c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="44000000100001002abd70000000aa3cc681e5404c70ef02dee700005889ad2afbf2bad6b818efc52066a9d44522f8eec3d308b8f97e02e4c9868b3a463c4c04ee5ec2d75b88b1725c4956c6bac42010490b9be7f6753cedfd4de7967fa7ae6c10a7eccabdf73b7cd413dd06e62497f92b389218549d1043dd3538a4ce220ab71810a32626596512b1e97c0933e9dca91decfdf280df9794ce28c215698ff43222b3991ecc54f30bf8c95f4c762631e772ec169790294c7995a0ad0dd2ad6c8470380dc01aeed8250dc7f5cf7ad35475f1d9fe09706664a5034515ae1b611c322cff712c128632c55db77cb1a2bb3df68bbff4a91ed6d3e80ca70109926437faf048a9067c01e52e276a2f2cf4e934ffd1ac34455cbaa2cdec0eb2363d8fa8c766f8c0ef289472ac667bb9a8f629848b8a1f48257b0cd555b06ccd", @ANYRES32=0x0, @ANYBLOB="802104000000000008001b00000000001c0016801800018014000a00fbffffffffff000000000000"], 0x44}}, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x800, 0x1ac) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'batadv0\x00', &(0x7f00000000c0)=@ethtool_stats}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x4002, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x3d188, 0x21001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 20m41.297086973s ago: executing program 0 (id=319): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x17}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) dup2(r2, r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r3, 0x0, 0x4000}]) 20m41.279291667s ago: executing program 0 (id=323): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) close(r0) recvmsg(r1, &(0x7f0000002240)={0x0, 0x0, 0x0}, 0x0) 20m40.577162927s ago: executing program 0 (id=328): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2, r1}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r1, 0x0, 0x0}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r3}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xe, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x5a}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8b}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x3, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xc8}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xda760125a9afc63b, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @value=r5}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r8, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x6966f6dc4b45c8ce}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x40) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) shutdown(r0, 0x0) 20m40.543604331s ago: executing program 32 (id=328): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2, r1}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r1, 0x0, 0x0}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r3}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xe, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x5a}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8b}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x3, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xc8}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xda760125a9afc63b, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @value=r5}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r8, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x6966f6dc4b45c8ce}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x40) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) shutdown(r0, 0x0) 15m52.761285153s ago: executing program 4 (id=1342): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x101, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xffffffffffffff93, 0x2, {{0x4, 0x8001, 0x1000, 0xa5f5, 0x4}, 0xfa, 0x0, 0x1, 0x1, 0x6, 0xe, 0xf, 0x6, 0x7, 0x3, {0x8001, 0x4, 0x800, 0x2, 0x8, 0xc85}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x405c071}, 0x400c840) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {0x0, 0xc}, {0x8}}}, 0x24}}, 0x40004) 15m52.477209898s ago: executing program 4 (id=1344): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560aff820fffff5bab00070000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c1000000000", 0x53}], 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) r3 = fanotify_init(0x8, 0x101000) fanotify_mark(r3, 0x90, 0x8100000, r2, 0x0) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101080, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x320) close_range(r5, 0xffffffffffffffff, 0x3f00000000000000) socket$unix(0x1, 0x1, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc8041, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000180)={@val={0x800e}, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}}, 0x2e) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) mount$9p_virtio(0x0, 0x0, &(0x7f00000001c0), 0x2210088, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) read$FUSE(r9, 0x0, 0x4447c686) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) 15m52.207367569s ago: executing program 4 (id=1347): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x2000000000000013, &(0x7f0000000840)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000340)='GPL\x00', 0x2, 0xb8, &(0x7f0000000140)=""/184, 0x41100, 0x6b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000005000000fd0900008500000041000000", @ANYBLOB="00000000000000000000ffff0000000000000000", @ANYRES32=0x0, @ANYRES32], 0x50) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0x80000300, 0x0, 0x0) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) write$binfmt_elf64(r6, &(0x7f0000000e00)=ANY=[], 0x1820) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000180)="ff5fb99772024dca41", 0x800, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000040), &(0x7f00000000c0)=r0}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000bc0)={'syz1\x00', {0x8, 0xe, 0x1, 0x7ff}, 0x3, [0xfffff9a4, 0xe, 0xffffffff, 0x9, 0xb92, 0x7, 0x364, 0x9b, 0x8001, 0x1000, 0x2, 0x2, 0x10001, 0x6, 0x7, 0x4, 0x2, 0x1, 0x4, 0x3, 0x9, 0x4, 0x2, 0x0, 0x4, 0x4, 0x9, 0x5, 0xc720, 0x9, 0x3, 0xdf8, 0x7f, 0x5, 0xcc, 0x1, 0x7, 0xdb, 0x4, 0x7, 0x8, 0x7, 0xffffffe3, 0x80000001, 0x10, 0x7fff, 0xfac, 0x8, 0x8000, 0x6, 0x8, 0x2, 0x3ff, 0x6, 0x101, 0x8, 0xe, 0x4, 0x10001, 0x4, 0x87bfa347, 0x3, 0x6, 0x8], [0x8, 0x6f52, 0xfffffffa, 0x40ba8439, 0x6, 0x5, 0xfff, 0x1000, 0x8000, 0x2c5e, 0x6, 0xd, 0x51, 0x1, 0x5, 0xffff, 0x7, 0x9, 0x3, 0x4a24, 0x81ce, 0x41, 0x6, 0x7ff, 0xdc, 0xffff8000, 0xe76, 0x8, 0xffffff81, 0xe, 0x9, 0x0, 0xfff, 0x1, 0xbe08, 0x10000, 0x3, 0x80000001, 0x4, 0x7fff, 0xfff, 0x0, 0x575, 0x0, 0x1, 0x3, 0xe6, 0x6, 0xfffffe01, 0x0, 0x6, 0x9ea, 0x8, 0x8, 0x2, 0x3, 0x2, 0x4, 0x0, 0x7, 0x0, 0xf5, 0x620, 0x5], [0xce4, 0xfffffffb, 0x3, 0x7f, 0x6, 0xfffffffc, 0xa, 0x1, 0x6, 0x9, 0x5, 0x6, 0xa0, 0x6a9, 0x0, 0x1, 0x5, 0x2, 0x6, 0x4f46, 0xfffffff3, 0xf, 0x367, 0x4, 0x7, 0x81, 0x8, 0x4, 0x401, 0x0, 0x8, 0x6, 0x0, 0x80000000, 0x9, 0x0, 0xcb, 0x2, 0x0, 0x1, 0x100, 0x5, 0x93c3, 0x2, 0x4, 0x10, 0x401, 0xd, 0xffffffff, 0xfffffff7, 0x71, 0x2, 0x480, 0x6, 0x20000008, 0x6, 0x3, 0x2, 0x0, 0x4, 0x4, 0xffffc3b7, 0x2, 0x1fe], [0x7, 0x2, 0x7ff, 0x1, 0x5, 0x1, 0x8, 0x0, 0x200, 0x0, 0xc1d, 0xd, 0x7, 0x2, 0x1, 0xf1, 0x9, 0x5, 0xe56d, 0xd, 0xc6c0, 0x30000000, 0x5, 0x7, 0x6, 0x3, 0x7ec6, 0x6, 0x5, 0xd, 0x40, 0x1ff, 0x4, 0x2, 0xf7d6, 0xfd, 0x8, 0xffffffff, 0x8c3, 0xfffffffb, 0xfffffffd, 0x7, 0x7, 0x1, 0xeb0, 0x9, 0x1000, 0x2, 0x5, 0x8, 0x8, 0x874, 0x2, 0x3, 0xffffff7f, 0x401, 0x1c8, 0x176873ac, 0xffff5155, 0x2, 0xed20, 0x4, 0xfffffffd, 0x1]}, 0x45c) r7 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000280)) 15m49.288793063s ago: executing program 4 (id=1351): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x0, 0x100008f}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000280)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x1, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x0, 0x10001}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r3, 0x7a6, &(0x7f0000000040)={0x20000020064e, 0x6, 0x200000, 0x3, 0x5, 0x9}) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r2, &(0x7f000000a380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e48e435000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005a99e6a60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d7a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000120000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004b68d3810000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebff00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r2, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) write$FUSE_NOTIFY_RETRIEVE(r2, 0x0, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000240)={0x80000011}) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) 15m49.075522451s ago: executing program 4 (id=1352): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000001940)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0xa0181) writev(r3, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000003c0)="2e00000010008188040f80ec59acbc0413a1f848110000004e140602000000000e000a000f00000002800000121f1e753475fdf08f585bda67439d77ba13c33667c653ebe90fbdd861284dbe8afa5e6dcbc08b050d16d55d30a0918f091e854c12ef7a36a763ef5a6baee15a2541f64bbb010000000000008052a6daaafa0c12a7dc3e83e9d941e914b9daed65960652e634c770a980", 0x96}, {&(0x7f0000000540)="be5b94c50ca49cb1b4a7458f86762fbf27c101d6aae58e56800fff97484fa6619d1f529460b5c3315f35bdf719722158f7f54c42ae9a0e258d913a8fb5101a25114ef298913998fb5451cc82ff159b90be19a3ac0017293e36dd77127c49c52568963276f3539e4dbff3d957339ce587a929f8ab2d122d1c0930f7beb5f7ac9d6202e045c347f1a9c937ed8cd58dea51aa463959f0b5981395b2b84afb0587204fef4a1b9dd65e001921f2aed3a3774d21f9c9355b88c93ff0a54a82ca", 0xbd}, {&(0x7f0000000640)="5a843a5e9f2c76f6137e37781e71355179cb4f7371f10335668f1193e39c767fa0a2d2a6240b0da9faa22c0bfb570f9ed199628d32dcff2934dd438492c3af0b900b8576b8da987abc19cfd4a49758e2b5449ce9036d929fc14fe8e7d66a4ac5679a39a30c957c72cbd7e6e63cec99cce5cfe36a2c02e2b98e04951485d473c132c2e63bd2afce4c1e9fd79053712b0a8a2fe0a81550f4c97c7b5a4dfaded4277375a50afe98c19432672fbcaa72e12791f3174707414bbd371ea458d75cac8bdfd5fa418cc8f5ce55a75a02f844a781960f8e7a4cf259c9334bd1c92559d5a76a4bd1c730405d9758c31fc94d0f67", 0xef}, {&(0x7f0000000880)="b7c56f6ad762de38cc71b30a7566f98e930453f64309f96000ff355d7056801cd0258e834705343a5be02ee9651ef4ed4db102a871c20ae0c3299efbe9744b4ff08cee41a332ff780b51d47e47e48778fccb72aaf3f415becaf9b4a4812b18a9db9bed82", 0x64}, {&(0x7f0000000980)="15a68aa8742efe4c6b26509c907c2c4d69c8821ae96d403582574fe7e7dbc26f77ec54efcdaf3f2a65a3eec46f690c036dd990dc1084a3d8f32b6a922e88d4878d8c24b00bc569f6cc38f7689f4a9d16d9d8d2b3c3e42d0208f75ae051c3f85aa9e14b0eee0595221758e46cfeba198a183c64a51dba4d2a4fb37bdf8500af88099a933dbae6666867eb59aae70c2237208a813e1df4e8b032bc70a8ae6a29744dc8afb3e85c096618f669a0eeb1fca48b810ef43bc7c3d6cefead7014763b1fd1", 0xc1}], 0x5}, 0x8084) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x20, 0x8, @loopback}, 0x1c) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01002cbd7000ffdbdf251200000008000300", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x14) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000800)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000900)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r6, @ANYBLOB="080029bd7000fddbe6050500000008003a000000000008002c000200000008003b0022880000050029000000000008003400d30f000008003a001000000008000b000700000008003b000700000005002d0001000000"], 0x5c}, 0x1, 0x0, 0x0, 0x94}, 0x40040) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "12000000f7ffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9"}, 0x28) shutdown(r5, 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000080)=0x1, 0xfffffffffffffd5b) sendmsg$AUDIT_TTY_GET(r7, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f8, 0x8, 0x70bd2b, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x88}, 0x4000001) sendfile(r5, r7, 0x0, 0xffffffff004) 15m47.85818178s ago: executing program 4 (id=1357): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000072c0)=[{{0x0, 0x0, &(0x7f0000004240)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}, 0xe}], 0x1, 0x2020, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}, 0x57) sendto$inet(r1, &(0x7f0000000300)='2', 0x1, 0x200008d0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/135, 0x87}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}, {&(0x7f0000000b80)=""/143, 0x8f}], 0x4}, 0x2}], 0x400000000000300, 0x22, 0x0) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r2, &(0x7f0000004400), 0x400000000000203, 0x0) unshare(0x8040480) unshare(0x28000600) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x80) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000040)={@none, 0x9}) r4 = syz_open_dev$dri(&(0x7f00000005c0), 0x2, 0x0) ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f0000000040)={0x8}) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f00000001c0)={r7, 0x3, 0xe36, 0x1}, 0x10) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000001c0)={r7, 0x401}, &(0x7f0000000240)=0x8) write$dsp(r0, &(0x7f0000002000)='`', 0x3683b) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000000)=0xfffffffe) 15m31.776710196s ago: executing program 33 (id=1357): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000072c0)=[{{0x0, 0x0, &(0x7f0000004240)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}, 0xe}], 0x1, 0x2020, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}, 0x57) sendto$inet(r1, &(0x7f0000000300)='2', 0x1, 0x200008d0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/135, 0x87}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}, {&(0x7f0000000b80)=""/143, 0x8f}], 0x4}, 0x2}], 0x400000000000300, 0x22, 0x0) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r2, &(0x7f0000004400), 0x400000000000203, 0x0) unshare(0x8040480) unshare(0x28000600) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x80) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000040)={@none, 0x9}) r4 = syz_open_dev$dri(&(0x7f00000005c0), 0x2, 0x0) ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f0000000040)={0x8}) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f00000001c0)={r7, 0x3, 0xe36, 0x1}, 0x10) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000001c0)={r7, 0x401}, &(0x7f0000000240)=0x8) write$dsp(r0, &(0x7f0000002000)='`', 0x3683b) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000000)=0xfffffffe) 11m19.589876328s ago: executing program 2 (id=2324): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x20000) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000000)={0x2, {0x10, 0xb, 0x1f1, 0xa00}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000000c0)) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0xa8, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x78, 0x2, {{0x3, 0x4, 0x6361, 0x5, 0xffffffff, 0x1}, [@TCA_NETEM_DELAY_DIST={0x5a, 0x2, "ee26442849cbdee0431e9a383fbf514e6240b47e7128e2e6c7630ed8ce3d98f1c7fa91acb47f11101c4789b9cd217e0803a6395089905fde5c83918f378763c841ca08db3844b9c9e543d73b625a7adb669facc2e014"}]}}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r5, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x6c, 0xd, 0x6, 0x500, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x480c0}, 0x8844) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {0xfffd, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240440e1}, 0x200040d0) socket$kcm(0x23, 0x5, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x52d3, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, r12, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r9, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r13 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r14 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ipvlan0\x00'}) setsockopt$packet_int(r14, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r14, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r15, 0x1, 0x0, 0x6, @multicast}, 0x14) 11m19.139150206s ago: executing program 2 (id=2327): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x80241, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(&(0x7f0000000d80)=ANY=[@ANYBLOB="78132afe96afec4d7247d072a10f9db12d0b541653212ad43d9e61c27900df4328af91677711e460f504c6b7e3e9fa252a7305f581ebd68cd4614ee3d099fe21f7d444162e433aa4ac6335a293c7b21834725e43a212ae0eba97aae53dcd750687f8e4e1cce51c57fa119550ea88de023b0fe809834672d4ff1d2d03e798decd1e10104eb1acec31dab83c14319023d58e68b27049563ae1f01e2c98e5610bbfbcd27dbc771411"], 0x3) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/rt_cache\x00') pread64(r1, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c000010100003010000000001e60000008df55c8399000000", @ANYRES32=0x0, @ANYBLOB="61d9010000000000140012800800010067726500080002800400120008001f0007000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4024800}, 0x20008484) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000001bc0)=r1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24040040}, 0x8081) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000001ac0)={0x2, 0x9}, 0x2) setresuid(0x0, 0xee00, 0xffffffffffffffff) shmctl$IPC_STAT(0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101000000dd000000000a0000070900010073797a31000000000900030073597a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x40) sendmsg$NFT_BATCH(r3, 0x0, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x22}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000100001070000000000000600010017e3b0ef2d3741fc26a4cb26b61974d7e655740200000000000000b5779cd0c543ae5f67408a073f45198a3311727b384a1c5d9807ae5552079590fc7516455e793a1dc95038f942f3d1f8e4baaa6d088bc059e99d4f0c44ab1a87ecabde0986bd0eeef147d21dc880236786cf867560da38f5360f044db6010e4622b4db06a9f23182f6390667d7e953a29d5b5543d521292ca8979aa41603bfd03b8eb06a54f56685c80eb6abf9e1cbf76fb4446f0c923f81d0d92ae58eb31fb477bed78627255f19f8922e4974dc0ab018c354b027381f1053c86bf21f86e7f8d01dbb1aa01df91d4e8771b4bec1bbfce4642425132bdc9847024daa6e8bcfacfd73902c911a1c8709872bb4fbfcedb8d3b1c5aca90ad9cfcaf7dffe5d676455f47ae94af179d30f98e4cebe000000000000c7f08495fea9bbfa0cc632abec82ee3bf14796f420dd4cdd0889a6afc9e8ab77e82042142d6122fb0dcb97ddc85fbaab174fec88d4c9195323eaeee7b213b4a82abb18edaa966c7b51724cedaf994419df9d4bd7f9e28b39e21f404efe68f1e4dcc1d78ec976716ac2a565dd5a9687abf0781a19113e89fb1cdbe079388ae2e0a45caed4c0c2c35cd12fc5c56f8473580018560cc3be6d4a6b736200"/486], 0x1c}}, 0x20044841) prctl$PR_MCE_KILL(0x21, 0x1, 0x6f73b8ae13b4542) recvmsg(r6, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x20014020) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000001b80)=0x1, 0x4) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246) 11m18.210337651s ago: executing program 2 (id=2329): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) r6 = socket$inet(0x2, 0x801, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r6, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r6, 0x1) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98) splice(r2, 0x0, r4, 0x0, 0x80, 0xe) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@local, 0x2}, @host, 0x0, 0x0, 0x5e, 0x1000000001000005, 0x30, 0x2, 0xfffffffc}) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x21, 0x0, &(0x7f0000000900)="ffffdd014376ea94fe6f22446ab33726e5de05640000000000006929a72cd24065"}, 0x4c) sendmmsg$sock(r3, &(0x7f0000001300)=[{{&(0x7f00000002c0)=@in6={0xa, 0x4e20, 0x8001, @private1, 0x9}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000340)="aa1abd8a6ec04056cbe868cda4aca2ff77788ea5c08318bdbeea5230fc2287ac23ec83f87061e075b7de6f58b80a830c174c8f93d8f060e3cdab157dc0d851df7a315a03f7ebd6121257b3a6d612fe934a9dccff8a", 0x55}, {&(0x7f0000000400)="d9b0cd6e462c7bb7a827bf50f4f38dad890655662b8bcf1cfda56011137eee9c7d26cad13ecb25148d422b05d9de52088ecfe9b312e829bcc3b16500e7e466a9b69e0d86e6682ed0b105e42eb5a5ca31a6d7f1009a7cbd812dc5c75969a03b39b9c04707eb60735e84041d80e7e22c8b2c8f63cdac516e06d130bb8473c6010fb685a6a6c169c6e7a8a93a435110839e3e9d4ba54b7c72b442cf92ccefd9a58f42f20d6f946cfcb0db8c56b91bfb", 0xae}, {&(0x7f0000000640)="d89ec25d60bfdadcdf15eab1311ddf301f554e588ddcec573526b10692df973861c2d5759f6ebdb5a4d2dc288b0a25f3b33a1906456809b9df3e3f24af6d58e4d55e4881e35089c2945e8d50dcbddd2d5374cd115b675504edbeb7de54cebca39ec66c924e43aa35e44c", 0x6a}, {&(0x7f00000006c0)="545fe0c5ab25a407cfe9de3c6c9e3bd5506f49b23973d4de77f03464b9e491cbf237d24a689a24b92c9fa28bb1c8eea0466285773fa169fbdce5f0f61161be540f84b93243c4498e148cd92449d3b02babb1714750ef177319b575107f2e25c52605bc9e709d895fd52b40e393e80f488ff6a9fd30feca1085cbd30829fbae9484bb9a645888111e5862c168725449852af13c4b70d29fece07176c2f658df8761ec3e115d7cfc2470eee4e3968a63a3370a1f701fda16304907091d08e5625db167736a1c688e", 0xc7}, {&(0x7f0000000940)="3c4f2f4183b8f00a1a768282995b3c295a02eae78cce68312e791bb7179239faa37f1fcd4e913388c59620197ab35adfcd93927f3af7128ca6f5cfc38f19fa6797b8dcbc18ba3d0c3d501d632f2813e7356dcf448f9bb91d1b5e30f94c26bdf2228e67b1d067de048e85f03fad224d773d6e8b3c246b4f201253e586cde4b2850cb04605544b02998b0f996f4f19aa123139355d519fc728d83b198fba3d88a7f8a115580c77ceb5d5a6518385b31b98dca6e47acd75f14695b784", 0xbb}, {&(0x7f0000000a00)="e036d1b737dea078c62b938b64f204cfa0862888c2dbf484bfe3b284525c32134a65769442de3a0c138d7ca1df0acd6a2b421f9f680a5165b2ee8fc616e044dc18f1b043615af5e6fcf004bf0f67e501f8fe8ace1c1e1b294732fd27e517ef950b17b5b0bc05e2497cd209cd3c7817d76d16d9b969d0fe6c7063a81be578a657a0b115f44599111a8f4aed69cb4462fdd7af0b6a95044823e030bf786923a89831cdc674acf4f4fcf49df279a6b2dd9daf7f87801cb78d8d450b570253019a14775164fb256990f228f2bfd8bf78d4118fe769586620cda9abe35f36343d761f02894e9dd87033a10e11db11afee6d322ebc0bb185a724ff", 0xf8}, {&(0x7f0000000b00)="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", 0xff}, {&(0x7f0000000c00)="fb142b25504b7262550f", 0xa}, {&(0x7f0000000c40)="26f07ded988929902cafca933e6a33e9caa35c26d2c5c8ea8173e86d41364a878ef6469fc72b2b8db3e0cfad12cec70e6c44922fa758f3c0618b4ecfdf72", 0x3e}, {&(0x7f0000000c80)="7d70c51c853b72120a2d55ed4327f11370d82ad9d2ff7aa231b8df88b5a43522b84f4df026c58c4228d816ea6429cc09d0ca2c984d347d161d8b43a9a0d1b25dc37116a3c8cae5f1627b963326240656eaa83ad8c1e10fee3178ce8df3b386c2c471b85b811b43e21c59c841046b2a228d58ea998b", 0x75}], 0xa, &(0x7f0000000d80)=[@timestamping={{0x10, 0x1, 0x25, 0x1}}, @txtime={{0x14, 0x1, 0x3d, 0x6}}, @mark={{0x10, 0x1, 0x24, 0x8}}], 0x34}}, {{&(0x7f0000000dc0)=@pptp={0x18, 0x2, {0x2, @remote}}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000e40)="2a908c7bf0ee6c38b3d2fd4c6a7e8491354a5da2ba3b74619da042fb9858ceaca312d7640189b2a216bee798c3aaacd1682af0e3540e5b417a", 0x39}, {&(0x7f0000000e80)="10", 0x1}, {&(0x7f0000000ec0)="52195b86665df2c28a1c303761ad3243e893b616ec19a9bdc334bdbfcab47a2b8c51024f20e0a31f1b33ff61d515ff72e73273cf8f131625b6f3ad7770435f0182dd4869c5bae5c76c5eeb6db7a42c5dbb26eb908535020d7267cf664c9f70fe9f9be0b6219555cf7d3a9a79610ea973d9852fa4bb70fd9f9c2cdbb93934f19879dbcd778f8210c61acb9a03", 0x8c}], 0x3, &(0x7f0000000fc0)=[@mark={{0x10, 0x1, 0x24, 0x7}}, @timestamping={{0x10, 0x1, 0x25, 0x1}}], 0x20}}, {{&(0x7f0000001000)=@qipcrtr={0x2a, 0x4, 0x7ffe}, 0x80, &(0x7f0000001240)=[{&(0x7f0000001080)="125bb9a00dd72344294480b8fa139e398c24cf5b0326e25236eb814e", 0x1c}, {&(0x7f00000010c0)="1c839ab18400762612d2884ffdf3a3750b0d5b1b057e7ebf3d4e0796cfb5e2b65da01f27bd24287f07dcd4339224a1c0d3d503fe3017a9531fd373b1f95fb0d35d48a70df555c08507b37afe053645815ed9aeffb0884d7858686ec1cbd64c2557279a48c602aa980ef35def0e4a50ae2a16472a86266071d53d4175d2cd3a06a2a38c36a10070", 0x87}, {&(0x7f0000001180)="1bb39dae8488239230b136a2259f46286821da0cc4", 0x15}, {&(0x7f00000011c0)="2efa92da5250ce4cadae7e2f019a62ace1", 0x11}, {&(0x7f0000001200)="7035c2a965a2bba2e67b10614960f5ac47fbc5cfc8119f8195809e45a56c03fb4f0c", 0x22}], 0x5, &(0x7f0000001280)=[@txtime={{0x14, 0x1, 0x3d, 0x5}}, @txtime={{0x14, 0x1, 0x3d, 0x9}}, @txtime={{0x14, 0x1, 0x3d, 0x3}}, @txtime={{0x14, 0x1, 0x3d, 0x2}}], 0x50}}], 0x3, 0x4000050) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000540)={{@local, 0x2}, @my=0x0, 0x0, 0x0, 0x5e}) 11m14.686113392s ago: executing program 2 (id=2338): socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x8000000000000000, 0x4, 0x100000001, 0x3, 0x24, 0x6, 0x6, 0xfffffffffffffffc, 0x100fff}) write$FUSE_GETXATTR(r2, &(0x7f0000002400)={0x18, 0x0, 0x0, {0xffff}}, 0x18) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, r6) setpgid(r6, r6) ioprio_get$pid(0x2, r6) write$RDMA_USER_CM_CMD_NOTIFY(r4, &(0x7f0000001740)={0xf, 0x8, 0xfa00, {r5, 0x13}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xe0b, 0xfefffffc, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r7, 0x4b67, &(0x7f0000000000)={0x1, &(0x7f0000001ac0)=[{0x0, 0x1000}]}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r11 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r9, r10, 0x25, 0x0, @val=@iter={0x0}}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={r11, 0x0, 0x0}, 0x10) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="39c394e534ece2617e0e9ca20800", 0xe, 0x0, &(0x7f00000001c0)={0x11, 0x1d, r3, 0x1, 0x95, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 11m14.490503418s ago: executing program 2 (id=2339): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) (async) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000440)) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_create(0xfffffff9, 0x0, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f00000001c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd0000000000002100000008000300", @ANYRES32=r6, @ANYBLOB='D\x00,'], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x22000000) (async) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r3) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r7, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x80) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8082, 0x0) ioctl$KVM_GET_MSRS_sys(r8, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x176, 0x0, 0x7}, {0x619, 0x0, 0x37a7}]}) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000036000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0xe, 0xfffffffffffffe5d, &(0x7f00000000c0)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x3c, 0x2e, 0x9, 0x70bd27, 0x25dfdbfe, {0x4}, [@nested={0x28, 0x1a, 0x0, 0x1, [@nested={0x24, 0x4, 0x0, 0x1, [@generic="2c15df715e35b879891a1e217a95a062833023b2bb2b10c498b1b134ebe31c8e"]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) (async) openat$mice(0xffffff9c, &(0x7f00000001c0), 0x200401) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r11, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x1e01, 0x90, [0x0, 0x0, 0x1e01, 0x1e01, 0xfffff9, 0x80000440], 0x0, 0x0, &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x6000000, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0xe0) (async) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) 11m14.171388705s ago: executing program 2 (id=2341): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7, &(0x7f0000006680)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xe, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000440)={0x1, 0x0, [{0x345, 0x0, 0x2000000}]}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000224e0000", 0x58}], 0x1) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r5, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r6, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1d08a225, 0x26}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xb}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xde}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}, @NL80211_ATTR_BANDS={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x800) madvise(&(0x7f000007a000/0x1000)=nil, 0x1000, 0x12) tkill(0x0, 0x4) ioctl$sock_SIOCGIFCONF(r0, 0x8940, &(0x7f0000000000)=@buf) 11m14.047135672s ago: executing program 34 (id=2341): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7, &(0x7f0000006680)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xe, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000440)={0x1, 0x0, [{0x345, 0x0, 0x2000000}]}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000224e0000", 0x58}], 0x1) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r5, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r6, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1d08a225, 0x26}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xb}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xde}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}, @NL80211_ATTR_BANDS={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x800) madvise(&(0x7f000007a000/0x1000)=nil, 0x1000, 0x12) tkill(0x0, 0x4) ioctl$sock_SIOCGIFCONF(r0, 0x8940, &(0x7f0000000000)=@buf) 4.277518528s ago: executing program 3 (id=5392): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x70bd28, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e21}}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x40804) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r4], 0x50}}, 0x0) r6 = openat$binderfs(0xffffff9c, &(0x7f0000000300)='./binderfs/custom0\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x8c35) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r9], 0x50}}, 0x2) r10 = openat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000340)={0x210281, 0x0, 0x3}, 0x18) ioctl$TCSETS2(r10, 0x402c542b, &(0x7f0000000380)={0x8, 0x8000, 0x8, 0x7f, 0x9, "bc70c1c2ee1db962bb817da5fbee0de5fe6393", 0x2, 0x7f}) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10, r8}, 0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x1a, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@map_idx={0x18, 0xa, 0x5, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000600)='GPL\x00', 0xe, 0xcd, &(0x7f00000006c0)=""/205, 0x40f00, 0x40, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0x3, 0xffffff3d, 0x7}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000840)=[{0x1, 0x2, 0x8, 0x2}, {0x1, 0x1, 0xc, 0xa}], 0x10, 0x878}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@newtfilter={0x128, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r12}, [@filter_kind_options=@f_bpf={{0x8}, {0xf4, 0x2, [@TCA_BPF_ACT={0xd4, 0x1, [@m_ct={0xd0, 0x11, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0xe}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private0}, @TCA_CT_ACTION={0x6}, @TCA_CT_ZONE={0x6, 0x4, 0x2}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0xc}}, @TCA_CT_LABELS={0x14, 0x7, "48adcf03ee0d4efcd4ef9d2b042f4455"}]}, {0x60, 0x6, "aba827770a2622051171fa0ffdbfd506e9900e110d9c797d8297d4b91c7cf5f2f266deedc8682913725556a559fb9bca34cd4ee407a50b763e4cd4ec47b8b9c1c308e5d7b00d251ef9109559a97567b0771283057c0e1cf3048caca0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_FD={0x8, 0x6, r13}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}, @TCA_CHAIN={0x8, 0xb, 0xcc2}]}, 0x128}, 0x1, 0xf0ffffffffffff}, 0x0) 4.017985387s ago: executing program 3 (id=5393): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000100)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x168, 0x41, 0x107, 0x70bd2d, 0x25dfdbfe, {0x2, 0x7c}, [@typed={0x4, 0xc9}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x20}]}, @nested={0x148, 0x27, 0x0, 0x1, [@typed={0x14, 0xb4, 0x0, 0x0, @ipv6=@empty}, @generic="b46021e524343eeb6f4bf370c5830bef4b7819dfa553f6a6d7cfe96fc8d1e9", @generic="3d38cf09b22c56d5fce1a1a19935c680de3d41d509818659b2362c5cb130e9482db40b6b763531651c295acb267bb7ffcdc0d1631e0716146cf4f6ccbeddabb9204b939898dfb4a8f52a166916632a6f42a0f3a8fca5eb121bcff2e62b4ace5dbe9eee2a9502ae057b11e7f1ae4890bd947a41ae8f403a6bb7a351da053b7f71a2a03413c2648696835298d5c01d16846170940a742230bc6401272b9d3c3bcd721c0e2a5f676769200e694b7fe5239ce96b1374bfd342cbab0b80385ef7f6cc145e4c77f18386d434b9b8a693a67c83b950a258bb968a39695a", @nested={0x4, 0xed}, @generic="39f3adf56e392762a87c8549bf59ffd1027647f7184bff17f346a3f43bc33d845702a980e29326c20d158c9d921b77a5a49cf4"]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r1 = openat$iommufd(0xffffff9c, &(0x7f0000000040), 0x465041, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000080)={0xc, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f00000000c0)={0x18, r2}) 3.957037687s ago: executing program 3 (id=5394): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) write$eventfd(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) setns(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 3.657764759s ago: executing program 3 (id=5395): syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000700001000000000000000000070000", @ANYRES32, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x8a4, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x30, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6bb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x100}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0xc, 0x7, 0x0, 0x40000005, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = openat$binderfs_ctrl(0xffffff9c, &(0x7f0000002800)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r5, 0xc1086201, &(0x7f00000005c0)={'binder0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000740)={0x0, 0xffffffffffffff06, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000d6330000000001000000300001800600040000000000060001000403000006000200"/62], 0x44}}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file1\x00', 0xe0002, 0x74) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f00000004c0)=""/98, &(0x7f0000000240)=0x62) 3.593816033s ago: executing program 3 (id=5397): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x1}, 0x18) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r0 = socket$inet(0x2, 0x800, 0xe) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYRESOCT=r1], 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x2c044093) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000001000ffff28bd7000fbdbdf2500000000845bf6d3a53cab3fe2147532518720b460012ad41ea2a8155f138352f7afe77851124d6f36a4f4aa42628c90573b91a8288a147e2e70b38945faec57454a73bef63fa047d7176be2e1ff25675604966cdc", @ANYRES32=0x0, @ANYBLOB="572000002120000014001280090001007663616e000000000400028014000300"/48], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) r6 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4", 0x38}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0x15}], 0x3}, 0xc854) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f0000000180)=0x10000, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendfile(0xffffffffffffffff, r3, 0x0, 0x2) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r5, 0x0, 0x40000) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r7, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r9, &(0x7f0000000200)={0x1f, @any, 0x2}, 0xa) 2.64248543s ago: executing program 3 (id=5410): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) recvfrom$inet(r2, &(0x7f0000000100)=""/83, 0x53, 0x10000, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003ec0)=ANY=[@ANYBLOB="3400000043000701fefffffffcdbdf25027c00001800458014000400070000000000000004000000000000aa080001"], 0x34}}, 0x2004c000) ioctl$EVIOCRMFF(r0, 0x5501, 0x0) 1.81683104s ago: executing program 6 (id=5412): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) write$eventfd(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) setns(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.713153414s ago: executing program 6 (id=5414): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='oom_adj\x00') writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)='0', 0x1}], 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1802000000000000000000000100000085000000300000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$packet(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 1.712803511s ago: executing program 6 (id=5415): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000000c0)="3b76210fb6150f209e440f20c0663503000000440f22c00fa2660fc7b2d42af30fa7d0440f20c066350d000000440f22c06767f2caab12bad004ec", 0x3b}], 0x1, 0xd, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x10583a, 0x5, 0xa, 0x8, 0x6, 0x2, 0x1041, 0x4, 0x9, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x9, 0x6, 0x6a], 0xeeee8000, 0x1000d6}) ioctl$KVM_RUN(r2, 0xae80, 0x300) syz_emit_ethernet(0x7a, &(0x7f00000000c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "f6ff01", 0x44, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8}, {}, {0xdd86, 0x88be, 0x3, {{0xc, 0x1, 0x8, 0x1, 0x1, 0x0, 0x4, 0x10}, 0x1, {0x7b43}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x5, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}}}}}}}, 0x0) 1.540745399s ago: executing program 6 (id=5417): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r1, 0x708, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0003000002000008877fbac141416e000030a89079f03b180ff83080520e0845013f2325f004408050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) symlink(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) read$msr(r4, 0x0, 0x0) readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) readlink(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000600)=""/198, 0xc6) socket(0x400000000010, 0x3, 0x0) 1.445229604s ago: executing program 1 (id=5418): socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = msgget$private(0x0, 0x193) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) msgsnd(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="03"], 0x3f9, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x2000) timer_create(0x6, &(0x7f0000000340)={0x0, 0x4, 0x2, @thr={&(0x7f0000000280)="093cf9dd1dee48399b647087642a0a544e43250af012a05329de8098c15cf47b2c90100751ecd76eac8b268d932ebab1a87938140eef15f6e06da83dfaed724f081264945c984fd9169b28bcf474e11d601f178a496486be7291135040251ada86a7ef2ecc4c16f3a7ff9d1b59122d3a59cbf0ca83158a0caf44bcf1", &(0x7f0000000300)="6a51764246433446e62038e0dde5c650e0329fba1eb429ba7fa4d6d4799655a97d8513684eea9c9f74619512034d8daf5aeb"}}, &(0x7f0000000380)) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r1) socket$inet(0x2b, 0x1, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_emit_vhci(0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x10b801, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='trusted.overlay.upper\x00', 0x0, 0x80000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0xa0181) writev(r3, 0x0, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000c00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000127bd7000fcdbdf256800000008000300", @ANYRES32=0x0, @ANYBLOB="1600c7000207800780059e0009017a0f5a41ac7a3e0200001c00c7003d07ff060505fec8d37a218177dd9506e691d62e74f766d71400c7000107080407050206d1f0ad75bd77817a0c00c700ca8e29a6c331e7e72400c70300000000000000050d02f90506017f075906ff0405050000cd601af62443e5c71e00c70080038104062700c66ae72405b8000c0603042a2f8efe9ae4268e0000"], 0xb4}, 0x1, 0x0, 0x0, 0x50}, 0x8808) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x1, 0x81) writev(r4, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000002c0)="94", 0x1}, {&(0x7f0000000080)="60ad176f0ccce6c4249babd3a76fa20062129d7b577ab672a80b578caba22447102c8034e60b6016f193ded731c33b3ebf7a25a90574b389616bc27c0c04cfc9b5616b7de3cf84d379f6c850724c57069ce3206b6e08ce65689bf5fe", 0x5c}, {&(0x7f0000000500)="dafbfcb2551133de23c35b1a79e17eb6ed0a0523ca25992a3290ec514c1b35122775eb167a07bbbdbfa7bef48670508c7cdb08212f4cc66c30b1adba62f99afa51d9191b93b0e4cbf7a22bd0dd255c03df84838628fae2279deec8fa3d435c73df2985fb134a191d3c276b5dc7758cd096896bef5b2d4f13939108b5fe4b7b70cba03ec3a0a61f6546769ada38af3888c0bcdd5f278e8f2107b2ce1b9bcb5ac9705cb4bd67e4ab70d11a5a4c5f7fa462dbd2a3f35ba453b207fc0578919af850d49f1d3152a512fa5a497d84ede2541fa95a787a6ad08680c2ab03962b64e11d27e398740b4f54", 0xe7}], 0x4) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0xa, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x1000001000, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0xff00, 0x9, 0x0, 0xf, 0x7ffffffe}, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000003c0)="2e00000010008188040f80ec59acbc0413a1f848110000004e140602000000000e000a000f00000002800000121f1e753475fdf08f585bda67439d77ba13c33667c653ebe90fbdd861284dbe8afa5e6dcbc08b050d16d55d30a0918f091e854c12ef7a36a763ef5a6baee15a2541f64bbb010000", 0x74}, {0x0}, {&(0x7f0000000640)="5a843a5e9f2c76f6137e37781e71355179cb4f7371f10335668f1193e39c767fa0a2d2a6240b0da9faa22c0bfb570f9ed199628d32dcff2934dd438492c3af0b900b8576b8da987abc19cfd4a49758e2b5449ce9036d929fc14fe8e7d66a4ac5679a39a30c957c72cbd7e6e63cec99cce5cfe36a2c02e2b98e04951485d473c132c2e63bd2afce4c1e9fd79053712b0a8a2fe0a81550f4c97c7b5a4dfaded4277375a50afe98c19432672fbcaa72e12791f3174707414bbd371ea458d75cac8bdfd5fa418cc8f5ce55a75a02f844a781960f8e7a4cf259c9334bd1c92559d5a76a4bd1c730405d9758c31fc9", 0xec}, {&(0x7f0000000740)="78d2b8f05d879fd2921dc8272761bf9e1ee79b1012e301e76796753d87b52899438291fdbe8e71075e9d83bdc3f882ebbf20571b0f2eff3292182c267d4177fc3e78deebb967577d65aa7bfcbfe60832ad5bfdeee5327f92dc333c85d479120d8724269969ae16f0aa11e598f375e50ee55ee4b274325ee408b8794d0f9c58", 0x7f}, {&(0x7f0000000880)="b7c56f6ad762de38cc71b30a7566f98e930453f64309f96000ff355d7056801cd0258e834705343a5be02ee9651ef4ed4db102a871c20ae0c3299efbe9744b4ff08cee41a332ff780b51d47e47e48778fccb72aaf3f415becaf9b4a4812b18a9db9bed82", 0x64}, {&(0x7f0000000980)="15a68aa8742efe4c6b26509c907c2c4d69c8821ae96d403582574fe7e7dbc26f77ec54efcdaf3f2a65a3eec46f690c036dd990dc1084a3d8f32b6a922e88d4878d8c24b00bc569f6cc38f7689f4a9d16d9d8d2b3c3e42d0208f75ae051c3f85aa9e14b0eee0595221758e46cfeba198a183c64a51dba4d2a4fb37bdf8500af88099a933dbae6666867eb59aae70c2237208a813e1df4e8b032bc70a8ae6a29744dc8afb3e85c096618f669a0eeb1fca48b810ef43bc7c3d6cefead7014763b1fd1022166398ea6", 0xc7}], 0x6}, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) 1.444127245s ago: executing program 6 (id=5419): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) close(r0) recvmsg(r1, &(0x7f0000002240)={0x0, 0x0, 0x0}, 0x0) (fail_nth: 2) 1.442904183s ago: executing program 5 (id=5420): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) (fail_nth: 4) 1.305659577s ago: executing program 6 (id=5421): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) r6 = socket$inet(0x2, 0x801, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r6, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r6, 0x1) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98) splice(r2, 0x0, r4, 0x0, 0x80, 0xe) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@local, 0x2}, @host, 0x0, 0x0, 0x5e, 0x1000000001000005, 0x30, 0x2, 0xfffffffc}) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x0, 0xfffffffffffffe27, 0x0, &(0x7f0000000540)="db759469e36512be2770717f865d62d16a0f65816b4e751fb46bf1acad2ef16e99c0983f1d6be8efb0c54032dee464512b026a166b9f04dd25ae53e6b96006d5bdb27c51b6a6713af0f1f5ad96f6fd99f2d0376554621887eb5fff02e90c8767504df59136214a9a8b419329905de0cb1720891d9ad8bdf4a39da1a367000b989b233c03df58a27c838042e4e7eebe0afb4b0efa5e4fa1f35b1e9fc12f4fd487370c8b44756a419502e142c5a0a5143181db5fa324444f0d0378a73870df271a1a69d64f401c758b8505926e54760ed0c246a8735badffe11cb685e8124aaf46750d740cd39e256757ac7cf892e4e2", 0x0, 0x2, 0x0, 0x0, 0x21, 0x0, &(0x7f0000000900)="ffffdd014376ea94fe6f22446ab33726e5de05640000000000006929a72cd24065"}, 0x3a) sendmmsg$sock(r3, &(0x7f0000001300)=[{{&(0x7f00000002c0)=@in6={0xa, 0x4e20, 0x8001, @private1, 0x9}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000340)="aa1abd8a6ec04056cbe868cda4aca2ff77788ea5c08318bdbeea5230fc2287ac23ec83f87061e075b7de6f58b80a830c174c8f93d8f060e3cdab157dc0d851df7a315a03f7ebd6121257b3a6d612fe934a9dccff8a", 0x55}, {&(0x7f0000000400)="d9b0cd6e462c7bb7a827bf50f4f38dad890655662b8bcf1cfda56011137eee9c7d26cad13ecb25148d422b05d9de52088ecfe9b312e829bcc3b16500e7e466a9b69e0d86e6682ed0b105e42eb5a5ca31a6d7f1009a7cbd812dc5c75969a03b39b9c04707eb60735e84041d80e7e22c8b2c8f63cdac516e06d130bb8473c6010fb685a6a6c169c6e7a8a93a435110839e3e9d4ba54b7c72b442cf92ccefd9a58f42f20d6f946cfcb0db8c56b91bfb", 0xae}, {&(0x7f0000000640)="d89ec25d60bfdadcdf15eab1311ddf301f554e588ddcec573526b10692df973861c2d5759f6ebdb5a4d2dc288b0a25f3b33a1906456809b9df3e3f24af6d58e4d55e4881e35089c2945e8d50dcbddd2d5374cd115b675504edbeb7de54cebca39ec66c924e43aa35e44c", 0x6a}, {&(0x7f00000006c0)="545fe0c5ab25a407cfe9de3c6c9e3bd5506f49b23973d4de77f03464b9e491cbf237d24a689a24b92c9fa28bb1c8eea0466285773fa169fbdce5f0f61161be540f84b93243c4498e148cd92449d3b02babb1714750ef177319b575107f2e25c52605bc9e709d895fd52b40e393e80f488ff6a9fd30feca1085cbd30829fbae9484bb9a645888111e5862c168725449852af13c4b70d29fece07176c2f658df8761ec3e115d7cfc2470eee4e3968a63a3370a1f701fda16304907091d08e5625db167736a1c688e", 0xc7}, {&(0x7f0000000940)="3c4f2f4183b8f00a1a768282995b3c295a02eae78cce68312e791bb7179239faa37f1fcd4e913388c59620197ab35adfcd93927f3af7128ca6f5cfc38f19fa6797b8dcbc18ba3d0c3d501d632f2813e7356dcf448f9bb91d1b5e30f94c26bdf2228e67b1d067de048e85f03fad224d773d6e8b3c246b4f201253e586cde4b2850cb04605544b02998b0f996f4f19aa123139355d519fc728d83b198fba3d88a7f8a115580c77ceb5d5a6518385b31b98dca6e47acd75f14695b784", 0xbb}, {&(0x7f0000000a00)="e036d1b737dea078c62b938b64f204cfa0862888c2dbf484bfe3b284525c32134a65769442de3a0c138d7ca1df0acd6a2b421f9f680a5165b2ee8fc616e044dc18f1b043615af5e6fcf004bf0f67e501f8fe8ace1c1e1b294732fd27e517ef950b17b5b0bc05e2497cd209cd3c7817d76d16d9b969d0fe6c7063a81be578a657a0b115f44599111a8f4aed69cb4462fdd7af0b6a95044823e030bf786923a89831cdc674acf4f4fcf49df279a6b2dd9daf7f87801cb78d8d450b570253019a14775164fb256990f228f2bfd8bf78d4118fe769586620cda9abe35f36343d761f02894e9dd87033a10e11db11afee6d322ebc0bb185a724ff", 0xf8}, {&(0x7f0000000b00)="3d40753cb253be248e6fd21b13d776bdd558ed1343ded12ce318f533b0fc7f5dd74fae80195c79aa725c72079f36302b027469d04cc8c075f5c267a46112cf2ced3f6969a2966c26b2887852e15c5becc0c4e0f1c9a8ebfad93f0fef79a296545c4821863e64ba66fc2265a4461a847e6dfa8503cf0782daac089c8d4336bbe46749389d88c651fa7044cd74357690d4c8f6fba9ef5eaacf1ed9a7f7c38202b509d259881db814ff3bac18bc382dfaa741fb037fe5c18bd0b15b38c25c2d23170e30be45169753ffa64d6b48c0160aa2781cceb5f5f345e5f77b6061a37ecfe88e9b4f92ce7826a046157fda0ab5e9337c9963668a0738f61ee2670cecbf29", 0xff}, {&(0x7f0000000c00)="fb142b25504b7262550f", 0xa}, {&(0x7f0000000c40)="26f07ded988929902cafca933e6a33e9caa35c26d2c5c8ea8173e86d41364a878ef6469fc72b2b8db3e0cfad12cec70e6c44922fa758f3c0618b4ecfdf72", 0x3e}, {&(0x7f0000000c80)="7d70c51c853b72120a2d55ed4327f11370d82ad9d2ff7aa231b8df88b5a43522b84f4df026c58c4228d816ea6429cc09d0ca2c984d347d161d8b43a9a0d1b25dc37116a3c8cae5f1627b963326240656eaa83ad8c1e10fee3178ce8df3b386c2c471b85b811b43e21c59c841046b2a228d58ea998b", 0x75}], 0xa, &(0x7f0000000d80)=[@timestamping={{0x10, 0x1, 0x25, 0x1}}, @txtime={{0x14, 0x1, 0x3d, 0x6}}, @mark={{0x10, 0x1, 0x24, 0x8}}], 0x34}}, {{&(0x7f0000000dc0)=@pptp={0x18, 0x2, {0x2, @remote}}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000e40)="2a908c7bf0ee6c38b3d2fd4c6a7e8491354a5da2ba3b74619da042fb9858ceaca312d7640189b2a216bee798c3aaacd1682af0e3540e5b417a", 0x39}, {&(0x7f0000000e80)="10", 0x1}, {&(0x7f0000000ec0)="52195b86665df2c28a1c303761ad3243e893b616ec19a9bdc334bdbfcab47a2b8c51024f20e0a31f1b33ff61d515ff72e73273cf8f131625b6f3ad7770435f0182dd4869c5bae5c76c5eeb6db7a42c5dbb26eb908535020d7267cf664c9f70fe9f9be0b6219555cf7d3a9a79610ea973d9852fa4bb70fd9f9c2cdbb93934f19879dbcd778f8210c61acb9a03", 0x8c}], 0x3, &(0x7f0000000fc0)=[@mark={{0x10, 0x1, 0x24, 0x7}}, @timestamping={{0x10, 0x1, 0x25, 0x1}}], 0x20}}, {{&(0x7f0000001000)=@qipcrtr={0x2a, 0x4, 0x7ffe}, 0x80, &(0x7f0000001240)=[{&(0x7f0000001080)="125bb9a00dd72344294480b8fa139e398c24cf5b0326e25236eb814e", 0x1c}, {&(0x7f00000010c0)="1c839ab18400762612d2884ffdf3a3750b0d5b1b057e7ebf3d4e0796cfb5e2b65da01f27bd24287f07dcd4339224a1c0d3d503fe3017a9531fd373b1f95fb0d35d48a70df555c08507b37afe053645815ed9aeffb0884d7858686ec1cbd64c2557279a48c602aa980ef35def0e4a50ae2a16472a86266071d53d4175d2cd3a06a2a38c36a10070", 0x87}, {&(0x7f0000001180)="1bb39dae8488239230b136a2259f4628", 0x10}, {&(0x7f00000011c0)="2efa92da5250ce4cadae7e2f019a62ace1", 0x11}, {&(0x7f0000001200)="7035c2a965a2bba2e67b10614960f5ac47fbc5cfc8119f8195809e45a56c03fb4f0c", 0x22}], 0x5, &(0x7f0000001280)=[@txtime={{0x14, 0x1, 0x3d, 0x5}}, @txtime={{0x14, 0x1, 0x3d, 0x9}}, @txtime={{0x14, 0x1, 0x3d, 0x3}}, @txtime={{0x14, 0x1, 0x3d, 0x2}}], 0x50}}], 0x3, 0x4000050) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000540)={{@local, 0x2}, @my=0x0, 0x0, 0x0, 0x5e}) 1.177767369s ago: executing program 5 (id=5422): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) write$eventfd(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) setns(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.082278681s ago: executing program 5 (id=5423): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, &(0x7f00000000c0)={0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x3, &(0x7f0000000300)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="600100001000010000000000000100fc0100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000cd0000001c00170000000000000000000000000000000000000000000000000055001400636d61632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004800000000000000b74a27a4f44bd05db8000000"], 0x160}}, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=r4, @ANYRES64=0x0, @ANYRES64=r5, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) 440.647421ms ago: executing program 1 (id=5424): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) (fail_nth: 4) 323.35919ms ago: executing program 1 (id=5425): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2b, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast1, '\x00'}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) (fail_nth: 4) 322.9594ms ago: executing program 1 (id=5426): syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000700001000000000000000000070000", @ANYRES32, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x8a4, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x30, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6bb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x100}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0xc, 0x7, 0x0, 0x40000005, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = openat$binderfs_ctrl(0xffffff9c, &(0x7f0000002800)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r5, 0xc1086201, &(0x7f00000005c0)={'binder0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000740)={0x0, 0xffffffffffffff06, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000d6330000000001000000300001800600040000000000060001000403000006000200"/62], 0x44}}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file1\x00', 0xe0002, 0x74) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f00000004c0)=""/98, &(0x7f0000000240)=0x62) 226.412789ms ago: executing program 1 (id=5427): socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) syz_io_uring_setup(0x45, &(0x7f0000000680)={0x0, 0xf20b, 0x0, 0x2, 0x1b}, 0x0, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0), 0x141400, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x1, 0xc95a, 0xf, 0x8, 0x80, 0x8, 0x3, 0x10007e, 0x20000006, 0x53, 0x6, 0x10000, 0x80005, 0x3, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0x10001, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xe661, 0x7, 0x7, 0x6, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x10001, 0x5, 0x6, 0x6, 0x5, 0x1, 0x40], [0x10000007, 0x9, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x205, 0x42f, 0xe, 0x6, 0x78, 0x1, 0x0, 0x2, 0x7, 0x7fff, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xfc, 0x5, 0x1000005, 0x5f31, 0xd, 0x40000101, 0x1, 0x4, 0xffff80f1, 0x8, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0x9, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0xb42a, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x5, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x2, 0x20000008, 0x2, 0x6d03, 0x6, 0xd, 0x800003, 0x200, 0x6a, 0x40000001, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x6, 0x0, 0x2, 0x21c, 0x120000, 0x3, 0x0, 0x80aaed, 0x4, 0x24], [0x9, 0x40bb33, 0x9db, 0xb, 0x5, 0x93a, 0x9, 0x1000006, 0x100, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x7ff, 0x4, 0x7fff, 0x1000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0xfffffffd, 0xfffff000, 0x0, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r3}) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000002100)=0x200) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f00000002c0)=0x3) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) syz_emit_ethernet(0x4e, &(0x7f0000000140)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x8, 0x2, 0x2, 0x9, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}]}}}}}, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r5, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) syz_emit_ethernet(0x5e, &(0x7f0000000880)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x28, 0x2c, 0x0, @remote, @local, {[@routing={0x89, 0x0, 0x2, 0x1}, @hopopts={0x0, 0x2, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x1, 0x8, [0x200]}}]}]}}}}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r8, 0x84, 0x6c, 0x0, &(0x7f0000000300)) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000012300)=@newtaction={0x144, 0x30, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{0x130, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_nat={0xfc, 0x16, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3a, 0x6, 0x10000000, 0x7fffffff, 0x2}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000}}]}, {0xab, 0x6, "bda3cd2dae607ec097e3b6c28d6417a0cb50b6c6526a23dd032e5561d84faaa1af2ff49aa5ae9420f13bd4c7b6f7b2a8d82ba19d56784d191415d3cb18c39a7c173091c8c62ceaf307feb9586ea13a67b19f3e9f2846645f64e505197d7538b635a93e067e43cb31a89b212f2214062598f632d67c6ce18c64a3c1414e60d75aca1f2f0ff321ec751d490b5374e699d892bc4985cd1b7a98bcb8a97746f390ea713a33f18af362"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x41c1}, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7201}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}}, 0x0) 77.185593ms ago: executing program 5 (id=5428): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r1, 0x708, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0003000002000008877fbac141416e000030a89079f03b180ff83080520e0845013f2325f004408050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) symlink(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) read$msr(r4, 0x0, 0x0) readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) readlink(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000600)=""/198, 0xc6) socket(0x400000000010, 0x3, 0x0) 76.659549ms ago: executing program 1 (id=5429): syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x31, &(0x7f00000000c0)=0xc23d, 0x4) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$cdrom(0xffffff9c, &(0x7f0000000180), 0x880, 0x0) ioctl$DVD_READ_STRUCT(r4, 0x2284, &(0x7f0000001540)=@type=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = syz_io_uring_setup(0x606a, &(0x7f0000001280)={0x0, 0x15d1, 0x20, 0x4, 0x244}, &(0x7f0000000000), &(0x7f0000001180), &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x7}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x1c) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) socket$phonet_pipe(0x23, 0x5, 0x2) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x6, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100) syz_open_procfs(0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, 0x0, &(0x7f0000000200), 0xa7c}, 0x38) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x28f, 0xfff, 0xa}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000340)={0x3, r7, 0xfffffffa, 0x4, 0xb, 0x1fd, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000001880)={0x3, r7, 0x2000000, 0x3ff, 0x2, 0x944, 0x22a7854d}) creat(0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) listen(0xffffffffffffffff, 0x0) 614.614µs ago: executing program 5 (id=5430): socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000440)='./file0\x00', 0x40) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x800042, 0x1}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000400)=[r3], &(0x7f0000000080)=[0x2], &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 0s ago: executing program 5 (id=5431): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000fcffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a0850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0806"], 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ppoll(&(0x7f0000000500)=[{r5, 0x4ec}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r5, 0x5646, 0x0) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x55af) inotify_init1(0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000080), &(0x7f0000000000)=0x8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): _write+0x190/0x250 [ 1321.048222][T31335] ? ksys_write+0x190/0x250 [ 1321.048257][T31335] ? fput+0x79/0x100 [ 1321.048280][T31335] ? __ia32_sys_bpf+0xcc/0x170 [ 1321.048305][T31335] __ia32_sys_bpf+0xcc/0x170 [ 1321.048326][T31335] ? __do_fast_syscall_32+0x98/0x970 [ 1321.048347][T31335] __do_fast_syscall_32+0xe7/0x970 [ 1321.048364][T31335] ? lockdep_hardirqs_on+0x78/0x100 [ 1321.048393][T31335] do_fast_syscall_32+0x32/0x70 [ 1321.048411][T31335] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1321.048435][T31335] RIP: 0023:0xf7fe4fec [ 1321.048457][T31335] Code: Unable to access opcode bytes at 0xf7fe4fc2. [ 1321.048465][T31335] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 1321.048484][T31335] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000080 [ 1321.048495][T31335] RDX: 000000000000004c RSI: 0000000000000000 RDI: 0000000000000000 [ 1321.048506][T31335] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1321.048516][T31335] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1321.048526][T31335] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1321.048550][T31335] [ 1321.069158][ C3] sit: Src spoofed 127.0.0.1/::ac14:14aa -> 127.255.255.254/::7fff:fffe [ 1321.615460][T31354] xt_bpf: check failed: parse error [ 1322.106696][T31402] [U]  [ 1322.108531][T31402] [U] [ 1322.109674][T31402] [U] [ 1322.110584][T31402] [U] A [ 1322.111535][T31402] [U] [ 1322.112476][T31402] [U]  [ 1322.113469][T31402] [U] l [ 1322.114463][T31402] [U]  [ 1322.115526][T31402] [U] [ 1322.116520][T31402] [U]  [ 1322.117563][T31402] [U]  [ 1322.118537][T31402] [U]  [ 1322.119496][T31402] [U] [ 1322.120509][T31402] [U] [ 1322.121408][T31402] [U] [ 1322.122300][T31402] [U] [ 1322.123805][T31402] [U] [ 1322.124998][T31402] [U] [ 1322.126031][T31402] [U] q [ 1322.127346][T31402] [U] [ 1322.128435][T31402] [U] 9y Cx{Fz [ 1322.130070][T31402] [U] .?|a|q ԏkPj؎s [ 1322.132904][T31402] [U] {9?j^w%ST'b3.' [ 1322.136397][T31402] [U] *2 ,ʲXMжU%(^5ti#;)! [ 1322.139696][T31402] [U] oO@iAc1A*FagK$-@G/dHEr>}?G\<Hu^âd@`Mo+S%,ʤk#\ [ 1322.144741][T31402] [U] {?KCֶ`'_@*3JǓ*X'M6ϑ|[d [ 1322.147994][T31402] [U] ZTfj]>!bzScD4+'[HAG3tKx 󁦆dFs_^MD [ 1322.152002][T31402] [U] %s"\<Ƥ> ^ 127.255.255.254/::7fff:fffe [ 1322.367760][T31402] [U] [ 1322.368963][T31402] [U] [ 1322.370221][T31402] [U] [ 1322.371596][T31402] [U] [ 1322.373067][T31402] [U] [ 1322.374310][T31402] [U] [ 1322.375591][T31402] [U] [ 1322.376832][T31402] [U] [ 1322.379338][T31402] [U] [ 1322.380573][T31402] [U] [ 1322.381680][T31402] [U] [ 1322.382602][T31402] [U] [ 1322.383563][T31402] [U] [ 1322.384446][T31402] [U] [ 1322.385632][T31402] [U] [ 1322.401218][T31401] [U] [ 1323.420201][ T5761] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1323.544978][T31424] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5097'. [ 1323.600012][ C3] sit: Src spoofed 127.0.0.1/::ac14:14aa -> 127.255.255.254/::7fff:fffe [ 1323.802418][T17657] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 1323.973302][T17657] usb 10-1: Using ep0 maxpacket: 8 [ 1324.032028][T17657] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1324.039718][T17657] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1324.046551][T17657] usb 10-1: can't read configurations, error -71 [ 1324.119040][T31437] --map-set only usable from mangle table [ 1324.288128][T31450] FAULT_INJECTION: forcing a failure. [ 1324.288128][T31450] name failslab, interval 1, probability 0, space 0, times 0 [ 1324.292512][T31450] CPU: 2 UID: 0 PID: 31450 Comm: syz.6.5102 Tainted: G L syzkaller #0 PREEMPT(full) [ 1324.292544][T31450] Tainted: [L]=SOFTLOCKUP [ 1324.292549][T31450] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1324.292556][T31450] Call Trace: [ 1324.292564][T31450] [ 1324.292572][T31450] dump_stack_lvl+0x100/0x190 [ 1324.292593][T31450] should_fail_ex.cold+0x5/0xa [ 1324.292610][T31450] should_failslab+0xc2/0x120 [ 1324.292628][T31450] __kmalloc_noprof+0xfc/0x820 [ 1324.292642][T31450] ? rcu_is_watching+0x12/0xc0 [ 1324.292657][T31450] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1324.292677][T31450] tomoyo_realpath_from_path+0xb6/0x690 [ 1324.292697][T31450] tomoyo_path_number_perm+0x23c/0x580 [ 1324.292710][T31450] ? tomoyo_path_number_perm+0x22e/0x580 [ 1324.292725][T31450] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1324.292741][T31450] ? find_held_lock+0x2b/0x80 [ 1324.292762][T31450] ? finish_task_switch.isra.0+0x2c0/0x10c0 [ 1324.292795][T31450] ? find_held_lock+0x2b/0x80 [ 1324.292814][T31450] ? __fget_files+0x215/0x3d0 [ 1324.292829][T31450] ? hook_file_ioctl_common+0x140/0x440 [ 1324.292847][T31450] ? __fget_files+0x215/0x3d0 [ 1324.292863][T31450] ? __fget_files+0x21f/0x3d0 [ 1324.292876][T31450] security_file_ioctl_compat+0xd3/0x230 [ 1324.292892][T31450] __ia32_compat_sys_ioctl+0xc2/0x360 [ 1324.292912][T31450] __do_fast_syscall_32+0xe7/0x970 [ 1324.292925][T31450] ? lockdep_hardirqs_on+0x78/0x100 [ 1324.292944][T31450] do_fast_syscall_32+0x32/0x70 [ 1324.292956][T31450] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1324.292971][T31450] RIP: 0023:0xf701efec [ 1324.292997][T31450] Code: Unable to access opcode bytes at 0xf701efc2. [ 1324.293003][T31450] RSP: 002b:00000000f53ec50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1324.293016][T31450] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000000007a6 [ 1324.293023][T31450] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 1324.293030][T31450] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1324.293037][T31450] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1324.293044][T31450] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1324.293058][T31450] [ 1324.293165][T31450] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1324.796563][ C0] sit: Src spoofed 127.0.0.1/::ac14:14aa -> 127.255.255.254/::7fff:fffe [ 1325.180848][T17657] usb 10-1: new low-speed USB device number 50 using dummy_hcd [ 1325.348934][T17657] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1325.358868][T17657] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1325.363876][T17657] usb 10-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 1325.376522][T17657] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1325.388427][T17657] usb 10-1: config 0 descriptor?? [ 1325.609499][T31498] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5113'. [ 1325.639171][T31464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1325.647536][T31464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1325.901000][T17657] usbhid 10-1:0.0: can't add hid device: -71 [ 1325.903216][T17657] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1325.914867][T17657] usb 10-1: USB disconnect, device number 50 [ 1325.918175][T22928] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1325.982767][ C2] sit: Src spoofed 127.0.0.1/::ac14:14aa -> 127.255.255.254/::7fff:fffe [ 1326.102344][T22928] usb 6-1: config 0 has no interfaces? [ 1326.107997][T22928] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1326.116473][T22928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.139506][T22928] usb 6-1: config 0 descriptor?? [ 1327.179726][ C0] sit: Src spoofed 127.0.0.1/::ac14:14aa -> 127.255.255.254/::7fff:fffe [ 1327.419943][T31565] netlink: 'syz.6.5122': attribute type 1 has an invalid length. [ 1327.423070][T31565] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5122'. [ 1327.427922][ T56] usb 6-1: USB disconnect, device number 89 [ 1328.479006][ C0] sit: Src spoofed 127.0.0.1/::ac14:14aa -> 127.255.255.254/::7fff:fffe [ 1328.616470][T31595] netlink: 'syz.1.5126': attribute type 1 has an invalid length. [ 1329.121433][T31615] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5134'. [ 1329.455314][ T50] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1329.515458][T31630] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5136'. [ 1329.521653][T31630] lo speed is unknown, defaulting to 1000 [ 1329.527851][T31630] lo speed is unknown, defaulting to 1000 [ 1329.530304][T31630] lo speed is unknown, defaulting to 1000 [ 1329.628543][ T50] usb 6-1: config 0 has no interfaces? [ 1329.631114][ T50] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1329.635036][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.642739][T31630] infiniband syz0: set down [ 1329.643146][ T50] usb 6-1: config 0 descriptor?? [ 1329.644473][T17657] lo speed is unknown, defaulting to 1000 [ 1329.651542][T31630] infiniband syz0: added lo [ 1329.677626][T31630] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1329.680566][ C0] sit: Src spoofed 127.0.0.1/::ac14:14aa -> 127.255.255.254/::7fff:fffe [ 1329.693113][T31630] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1329.702714][T31630] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1329.747564][T31630] RDS/IB: syz0: added [ 1329.749291][T31630] smc: adding ib device syz0 with port count 1 [ 1329.751577][T31630] smc: ib device syz0 port 1 has no pnetid [ 1329.753895][T17657] lo speed is unknown, defaulting to 1000 [ 1329.760062][T31630] lo speed is unknown, defaulting to 1000 [ 1329.878534][T31630] lo speed is unknown, defaulting to 1000 [ 1329.986108][T31630] lo speed is unknown, defaulting to 1000 [ 1330.077656][T31630] lo speed is unknown, defaulting to 1000 [ 1330.169268][T31630] lo speed is unknown, defaulting to 1000 [ 1330.417744][T31630] lo speed is unknown, defaulting to 1000 [ 1330.621535][ T24] usb 6-1: USB disconnect, device number 90 [ 1330.726123][T31630] lo speed is unknown, defaulting to 1000 [ 1330.869450][T31630] syz.5.5136 (31630) used greatest stack depth: 18528 bytes left [ 1330.950551][ C0] sit: Src spoofed 127.0.0.1/::ac14:14aa -> 127.255.255.254/::7fff:fffe [ 1331.079148][T31674] 9pnet_virtio: no channels available for device syz [ 1331.176993][ T42] audit: type=1326 audit(1782765032.506:4496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31664 comm="syz.3.5141" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe6fec code=0x0 [ 1331.543202][T31677] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5144'. [ 1332.127607][ C1] sit: Src spoofed 127.0.0.1/::ac14:14aa -> 127.255.255.254/::7fff:fffe [ 1332.389310][ T42] audit: type=1326 audit(1782765033.713:4497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31696 comm="syz.6.5149" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 1332.396859][ T42] audit: type=1326 audit(1782765033.713:4498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31696 comm="syz.6.5149" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 1332.405612][ T42] audit: type=1326 audit(1782765033.713:4499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31696 comm="syz.6.5149" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 1332.413067][ T42] audit: type=1326 audit(1782765033.713:4500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31696 comm="syz.6.5149" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 1332.421507][ T42] audit: type=1326 audit(1782765033.713:4501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31696 comm="syz.6.5149" exe="/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf701efec code=0x7ffc0000 [ 1332.429037][ T42] audit: type=1326 audit(1782765033.713:4502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31696 comm="syz.6.5149" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 1332.442681][ T42] audit: type=1326 audit(1782765033.713:4503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31696 comm="syz.6.5149" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 1332.449889][ T42] audit: type=1326 audit(1782765033.713:4504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31696 comm="syz.6.5149" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 1332.457079][ T42] audit: type=1326 audit(1782765033.713:4505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31696 comm="syz.6.5149" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 1332.542815][T31700] 9p: Bad value for 'rfdno' [ 1332.707385][T31713] FAULT_INJECTION: forcing a failure. [ 1332.707385][T31713] name failslab, interval 1, probability 0, space 0, times 0 [ 1332.712050][T31713] CPU: 2 UID: 0 PID: 31713 Comm: syz.6.5154 Tainted: G L syzkaller #0 PREEMPT(full) [ 1332.712074][T31713] Tainted: [L]=SOFTLOCKUP [ 1332.712079][T31713] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1332.712087][T31713] Call Trace: [ 1332.712094][T31713] [ 1332.712100][T31713] dump_stack_lvl+0x100/0x190 [ 1332.712123][T31713] should_fail_ex.cold+0x5/0xa [ 1332.712147][T31713] should_failslab+0xc2/0x120 [ 1332.712167][T31713] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 1332.712186][T31713] ? alloc_vmap_area+0x182f/0x2bb0 [ 1332.712207][T31713] alloc_vmap_area+0x182f/0x2bb0 [ 1332.712229][T31713] ? kasan_save_track+0x14/0x30 [ 1332.712245][T31713] ? __kasan_kmalloc+0xaa/0xb0 [ 1332.712261][T31713] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1332.712279][T31713] ? __get_vm_area_node+0x101/0x330 [ 1332.712299][T31713] __get_vm_area_node+0x1ca/0x330 [ 1332.712320][T31713] __vmalloc_node_range_noprof+0x228/0x1630 [ 1332.712340][T31713] ? kernel_clone+0x176/0x9d0 [ 1332.712362][T31713] ? kernel_clone+0x176/0x9d0 [ 1332.712380][T31713] ? __memcg_slab_post_alloc_hook+0x749/0x1160 [ 1332.712402][T31713] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1332.712426][T31713] ? trace_kmem_cache_alloc+0xdd/0x100 [ 1332.712446][T31713] ? kernel_clone+0x176/0x9d0 [ 1332.712460][T31713] __vmalloc_node_noprof+0xad/0xf0 [ 1332.712481][T31713] ? kernel_clone+0x176/0x9d0 [ 1332.712498][T31713] copy_process+0x7fb/0x8030 [ 1332.712516][T31713] ? __lock_acquire+0x49f/0x1a40 [ 1332.712533][T31713] ? __pfx_copy_process+0x10/0x10 [ 1332.712551][T31713] ? get_pid_task+0xfc/0x250 [ 1332.712568][T31713] ? get_pid_task+0xfc/0x250 [ 1332.712587][T31713] kernel_clone+0x176/0x9d0 [ 1332.712602][T31713] ? proc_fail_nth_write+0x9f/0x220 [ 1332.712621][T31713] ? __pfx_kernel_clone+0x10/0x10 [ 1332.712640][T31713] ? find_held_lock+0x2b/0x80 [ 1332.712656][T31713] ? ksys_write+0x190/0x250 [ 1332.712668][T31713] ? ksys_write+0x190/0x250 [ 1332.712682][T31713] __do_compat_sys_ia32_clone+0xd4/0x120 [ 1332.712699][T31713] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 1332.712720][T31713] ? fput+0x79/0x100 [ 1332.712735][T31713] ? ksys_write+0x1ac/0x250 [ 1332.712746][T31713] ? __pfx_ksys_write+0x10/0x10 [ 1332.712761][T31713] __do_fast_syscall_32+0xe7/0x970 [ 1332.712775][T31713] ? lockdep_hardirqs_on+0x78/0x100 [ 1332.712796][T31713] do_fast_syscall_32+0x32/0x70 [ 1332.712808][T31713] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1332.712826][T31713] RIP: 0023:0xf701efec [ 1332.712842][T31713] Code: Unable to access opcode bytes at 0xf701efc2. [ 1332.712848][T31713] RSP: 002b:00000000f540d4bc EFLAGS: 00000202 ORIG_RAX: 0000000000000078 [ 1332.712861][T31713] RAX: ffffffffffffffda RBX: 0000000000001000 RCX: 0000000000000000 [ 1332.712869][T31713] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1332.712876][T31713] RBP: 00000000f7414f80 R08: 0000000000000000 R09: 0000000000000000 [ 1332.712883][T31713] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1332.712891][T31713] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1332.712905][T31713] [ 1333.541586][ C3] sit: Src spoofed 127.0.0.1/::ac14:14aa -> 127.255.255.254/::7fff:fffe [ 1333.653039][ T5761] Bluetooth: hci4: unexpected event for opcode 0x2002 [ 1334.716260][ C0] sit: Src spoofed 127.0.0.1/::ac14:14aa -> 127.255.255.254/::7fff:fffe [ 1335.871490][T31823] netlink: 'syz.5.5171': attribute type 8 has an invalid length. [ 1335.920744][ C3] sit: Src spoofed 127.0.0.1/::ac14:14aa -> 127.255.255.254/::7fff:fffe [ 1336.067761][T31831] CIFS mount error: No usable UNC path provided in device string! [ 1336.067761][T31831] [ 1336.078280][T31831] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1336.140726][T31834] tipc: Started in network mode [ 1336.142529][T31834] tipc: Node identity 6297152f8757, cluster identity 4711 [ 1336.146665][T31834] tipc: Enabled bearer , priority 0 [ 1336.176080][T31834] syzkaller0: entered promiscuous mode [ 1336.178061][T31834] syzkaller0: entered allmulticast mode [ 1336.182883][T31834] tipc: Resetting bearer [ 1336.201132][T31833] tipc: Resetting bearer [ 1337.108564][ C3] sit: Src spoofed 127.0.0.1/::ac14:14aa -> 127.255.255.254/::7fff:fffe [ 1338.314595][ C2] sit: Src spoofed 127.0.0.1/::ac14:14aa -> 127.255.255.254/::7fff:fffe [ 1338.767997][T31866] netlink: 228 bytes leftover after parsing attributes in process `syz.6.5183'. [ 1338.771154][T31867] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1339.500984][ C0] sit: Src spoofed 127.0.0.1/::ac14:14aa -> 127.255.255.254/::7fff:fffe [ 1340.468411][T31879] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5186'. [ 1340.548168][T31881] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5186'. [ 1340.600739][T31833] tipc: Disabling bearer [ 1340.609089][ T50] tipc: Node number set to 3854570799 [ 1340.757620][T31896] wg2 speed is unknown, defaulting to 1000 [ 1340.763053][ C2] sit: Src spoofed 127.0.0.1/::ac14:14aa -> 127.255.255.254/::7fff:fffe [ 1340.781451][T31904] ip6tnl1: entered promiscuous mode [ 1340.880381][T31916] FAULT_INJECTION: forcing a failure. [ 1340.880381][T31916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1340.888233][T31916] CPU: 1 UID: 0 PID: 31916 Comm: syz.1.5192 Tainted: G L syzkaller #0 PREEMPT(full) [ 1340.888273][T31916] Tainted: [L]=SOFTLOCKUP [ 1340.888282][T31916] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1340.888297][T31916] Call Trace: [ 1340.888306][T31916] [ 1340.888317][T31916] dump_stack_lvl+0x100/0x190 [ 1340.888356][T31916] should_fail_ex.cold+0x5/0xa [ 1340.888390][T31916] _copy_from_iter+0x1f4/0x1690 [ 1340.888431][T31916] ? __asan_memset+0x23/0x50 [ 1340.888460][T31916] ? __pfx__copy_from_iter+0x10/0x10 [ 1340.888490][T31916] ? __pfx___alloc_skb+0x10/0x10 [ 1340.888530][T31916] netlink_sendmsg+0x808/0xda0 [ 1340.888572][T31916] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1340.888611][T31916] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1340.888642][T31916] ____sys_sendmsg+0xa4d/0xbe0 [ 1340.888675][T31916] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1340.888712][T31916] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1340.888760][T31916] ___sys_sendmsg+0x190/0x1e0 [ 1340.888796][T31916] ? __pfx____sys_sendmsg+0x10/0x10 [ 1340.888847][T31916] ? find_held_lock+0x2b/0x80 [ 1340.888898][T31916] __sys_sendmsg+0x160/0x210 [ 1340.888926][T31916] ? __pfx___sys_sendmsg+0x10/0x10 [ 1340.888962][T31916] ? __pfx_ksys_write+0x10/0x10 [ 1340.888992][T31916] __do_fast_syscall_32+0xe7/0x970 [ 1340.889016][T31916] ? lockdep_hardirqs_on+0x78/0x100 [ 1340.889053][T31916] do_fast_syscall_32+0x32/0x70 [ 1340.889086][T31916] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1340.889110][T31916] RIP: 0023:0xf7fe4fec [ 1340.889160][T31916] Code: Unable to access opcode bytes at 0xf7fe4fc2. [ 1340.889173][T31916] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1340.889198][T31916] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800013c0 [ 1340.889213][T31916] RDX: 0000000014008080 RSI: 0000000000000000 RDI: 0000000000000000 [ 1340.889228][T31916] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1340.889242][T31916] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1340.889256][T31916] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1340.889288][T31916] [ 1340.982365][T31919] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5194'. [ 1340.986754][T31896] lo speed is unknown, defaulting to 1000 [ 1341.046791][T31924] binder: 31923:31924 ioctl c0306201 800003c0 returned -14 [ 1341.136565][T31928] FAULT_INJECTION: forcing a failure. [ 1341.136565][T31928] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1341.142160][T31928] CPU: 3 UID: 0 PID: 31928 Comm: syz.6.5196 Tainted: G L syzkaller #0 PREEMPT(full) [ 1341.142185][T31928] Tainted: [L]=SOFTLOCKUP [ 1341.142190][T31928] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1341.142199][T31928] Call Trace: [ 1341.142204][T31928] [ 1341.142211][T31928] dump_stack_lvl+0x100/0x190 [ 1341.142237][T31928] should_fail_ex.cold+0x5/0xa [ 1341.142258][T31928] _copy_to_user+0x32/0xd0 [ 1341.142280][T31928] vcs_read+0x7a2/0xc00 [ 1341.142310][T31928] ? __pfx_vcs_read+0x10/0x10 [ 1341.142323][T31928] ? bpf_lsm_file_permission+0x9/0x10 [ 1341.142339][T31928] ? security_file_permission+0x76/0x210 [ 1341.142359][T31928] ? iov_iter_advance+0xac/0x6d0 [ 1341.142379][T31928] ? rw_verify_area+0xce/0x6d0 [ 1341.142403][T31928] ? __pfx_vcs_read+0x10/0x10 [ 1341.142417][T31928] vfs_readv+0x5d8/0x8d0 [ 1341.142443][T31928] ? __pfx_vfs_readv+0x10/0x10 [ 1341.142474][T31928] ? __fget_files+0x21f/0x3d0 [ 1341.142493][T31928] ? do_readv+0x13e/0x340 [ 1341.142512][T31928] do_readv+0x13e/0x340 [ 1341.142533][T31928] ? __pfx_do_readv+0x10/0x10 [ 1341.142553][T31928] ? ksys_write+0x1ac/0x250 [ 1341.142566][T31928] ? __pfx_ksys_write+0x10/0x10 [ 1341.142582][T31928] __do_fast_syscall_32+0xe7/0x970 [ 1341.142620][T31928] ? lockdep_hardirqs_on+0x78/0x100 [ 1341.142644][T31928] do_fast_syscall_32+0x32/0x70 [ 1341.142658][T31928] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1341.142678][T31928] RIP: 0023:0xf701efec [ 1341.142699][T31928] Code: Unable to access opcode bytes at 0xf701efc2. [ 1341.142705][T31928] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000091 [ 1341.142720][T31928] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001180 [ 1341.142729][T31928] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 1341.142737][T31928] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1341.142745][T31928] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1341.142753][T31928] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1341.142770][T31928] [ 1341.211045][T31929] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5194'. [ 1341.246170][T31931] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5197'. [ 1341.620442][T31961] random: crng reseeded on system resumption [ 1341.639216][T31961] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5200'. [ 1341.781373][T31963] overlay: filesystem on ./file0 not supported as upperdir [ 1341.993149][ C2] sit: Src spoofed 127.0.0.1/::ac14:14aa -> 127.255.255.254/::7fff:fffe [ 1342.247445][T31980] FAULT_INJECTION: forcing a failure. [ 1342.247445][T31980] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1342.258742][T31980] CPU: 2 UID: 0 PID: 31980 Comm: syz.5.5203 Tainted: G L syzkaller #0 PREEMPT(full) [ 1342.258777][T31980] Tainted: [L]=SOFTLOCKUP [ 1342.258784][T31980] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1342.258796][T31980] Call Trace: [ 1342.258804][T31980] [ 1342.258812][T31980] dump_stack_lvl+0x100/0x190 [ 1342.258845][T31980] should_fail_ex.cold+0x5/0xa [ 1342.258900][T31980] ? prepare_alloc_pages+0x16d/0x5f0 [ 1342.258930][T31980] should_fail_alloc_page+0xeb/0x140 [ 1342.258958][T31980] prepare_alloc_pages+0x1f0/0x5f0 [ 1342.258987][T31980] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 1342.259014][T31980] ? rcu_is_watching+0x12/0xc0 [ 1342.259037][T31980] ? trace_mm_page_alloc+0x164/0x1c0 [ 1342.259063][T31980] ? __alloc_frozen_pages_noprof+0x2d1/0x2dc0 [ 1342.259088][T31980] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1342.259110][T31980] ? is_bpf_text_address+0x8a/0x1a0 [ 1342.259138][T31980] ? bpf_ksym_find+0x124/0x1c0 [ 1342.259158][T31980] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1342.259188][T31980] ? is_bpf_text_address+0x94/0x1a0 [ 1342.259213][T31980] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1342.259235][T31980] ? __kernel_text_address+0xd/0x30 [ 1342.259278][T31980] alloc_pages_bulk_noprof+0x5de/0x13c0 [ 1342.259298][T31980] ? __lock_acquire+0x49f/0x1a40 [ 1342.259319][T31980] ? policy_nodemask+0xed/0x4f0 [ 1342.259348][T31980] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1342.259403][T31980] __kasan_populate_vmalloc+0xf0/0x210 [ 1342.259430][T31980] alloc_vmap_area+0x95d/0x2bb0 [ 1342.259461][T31980] ? kasan_save_track+0x14/0x30 [ 1342.259484][T31980] ? __kasan_kmalloc+0xaa/0xb0 [ 1342.259506][T31980] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1342.259531][T31980] ? __get_vm_area_node+0x101/0x330 [ 1342.259560][T31980] __get_vm_area_node+0x1ca/0x330 [ 1342.259595][T31980] __vmalloc_node_range_noprof+0x228/0x1630 [ 1342.259651][T31980] ? kernel_clone+0x176/0x9d0 [ 1342.259672][T31980] ? find_held_lock+0x2b/0x80 [ 1342.259702][T31980] ? kernel_clone+0x176/0x9d0 [ 1342.259728][T31980] ? __memcg_slab_post_alloc_hook+0x749/0x1160 [ 1342.259759][T31980] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1342.259791][T31980] ? trace_kmem_cache_alloc+0xdd/0x100 [ 1342.259820][T31980] ? kernel_clone+0x176/0x9d0 [ 1342.259840][T31980] __vmalloc_node_noprof+0xad/0xf0 [ 1342.259867][T31980] ? kernel_clone+0x176/0x9d0 [ 1342.259890][T31980] copy_process+0x7fb/0x8030 [ 1342.259916][T31980] ? __lock_acquire+0x49f/0x1a40 [ 1342.259940][T31980] ? __pfx_copy_process+0x10/0x10 [ 1342.259965][T31980] ? get_pid_task+0xfc/0x250 [ 1342.259986][T31980] ? get_pid_task+0xfc/0x250 [ 1342.260013][T31980] kernel_clone+0x176/0x9d0 [ 1342.260034][T31980] ? proc_fail_nth_write+0x9f/0x220 [ 1342.260061][T31980] ? __pfx_kernel_clone+0x10/0x10 [ 1342.260088][T31980] ? find_held_lock+0x2b/0x80 [ 1342.260106][T31980] ? ksys_write+0x190/0x250 [ 1342.260121][T31980] ? ksys_write+0x190/0x250 [ 1342.260138][T31980] __do_compat_sys_ia32_clone+0xd4/0x120 [ 1342.260169][T31980] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 1342.260195][T31980] ? fput+0x79/0x100 [ 1342.260213][T31980] ? ksys_write+0x1ac/0x250 [ 1342.260226][T31980] ? __pfx_ksys_write+0x10/0x10 [ 1342.260244][T31980] __do_fast_syscall_32+0xe7/0x970 [ 1342.260261][T31980] ? lockdep_hardirqs_on+0x78/0x100 [ 1342.260286][T31980] do_fast_syscall_32+0x32/0x70 [ 1342.260301][T31980] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1342.260322][T31980] RIP: 0023:0xf708efec [ 1342.260344][T31980] Code: Unable to access opcode bytes at 0xf708efc2. [ 1342.260351][T31980] RSP: 002b:00000000f545c4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 1342.260368][T31980] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 1342.260377][T31980] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1342.260386][T31980] RBP: 00000000f7485018 R08: 0000000000000000 R09: 0000000000000000 [ 1342.260395][T31980] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1342.260404][T31980] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1342.260423][T31980] [ 1342.260545][T31980] syz.5.5203: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1342.411948][T31980] CPU: 2 UID: 0 PID: 31980 Comm: syz.5.5203 Tainted: G L syzkaller #0 PREEMPT(full) [ 1342.411970][T31980] Tainted: [L]=SOFTLOCKUP [ 1342.411975][T31980] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1342.411983][T31980] Call Trace: [ 1342.411988][T31980] [ 1342.411994][T31980] dump_stack_lvl+0x100/0x190 [ 1342.412017][T31980] warn_alloc.cold+0x94/0xa8 [ 1342.412031][T31980] ? __pfx_warn_alloc+0x10/0x10 [ 1342.412046][T31980] ? lockdep_hardirqs_on+0x78/0x100 [ 1342.412068][T31980] ? __get_vm_area_node+0x2cd/0x330 [ 1342.412091][T31980] ? __get_vm_area_node+0x208/0x330 [ 1342.412111][T31980] __vmalloc_node_range_noprof+0xccd/0x1630 [ 1342.412131][T31980] ? find_held_lock+0x2b/0x80 [ 1342.412153][T31980] ? kernel_clone+0x176/0x9d0 [ 1342.412187][T31980] ? __memcg_slab_post_alloc_hook+0x749/0x1160 [ 1342.412211][T31980] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1342.412235][T31980] ? trace_kmem_cache_alloc+0xdd/0x100 [ 1342.412265][T31980] ? kernel_clone+0x176/0x9d0 [ 1342.412279][T31980] __vmalloc_node_noprof+0xad/0xf0 [ 1342.412299][T31980] ? kernel_clone+0x176/0x9d0 [ 1342.412319][T31980] copy_process+0x7fb/0x8030 [ 1342.412337][T31980] ? __lock_acquire+0x49f/0x1a40 [ 1342.412354][T31980] ? __pfx_copy_process+0x10/0x10 [ 1342.412373][T31980] ? get_pid_task+0xfc/0x250 [ 1342.412392][T31980] ? get_pid_task+0xfc/0x250 [ 1342.412411][T31980] kernel_clone+0x176/0x9d0 [ 1342.412426][T31980] ? proc_fail_nth_write+0x9f/0x220 [ 1342.412445][T31980] ? __pfx_kernel_clone+0x10/0x10 [ 1342.412464][T31980] ? find_held_lock+0x2b/0x80 [ 1342.412479][T31980] ? ksys_write+0x190/0x250 [ 1342.412491][T31980] ? ksys_write+0x190/0x250 [ 1342.412505][T31980] __do_compat_sys_ia32_clone+0xd4/0x120 [ 1342.412522][T31980] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 1342.412543][T31980] ? fput+0x79/0x100 [ 1342.412558][T31980] ? ksys_write+0x1ac/0x250 [ 1342.412574][T31980] ? __pfx_ksys_write+0x10/0x10 [ 1342.412589][T31980] __do_fast_syscall_32+0xe7/0x970 [ 1342.412601][T31980] ? lockdep_hardirqs_on+0x78/0x100 [ 1342.412622][T31980] do_fast_syscall_32+0x32/0x70 [ 1342.412635][T31980] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1342.412652][T31980] RIP: 0023:0xf708efec [ 1342.412669][T31980] Code: Unable to access opcode bytes at 0xf708efc2. [ 1342.412675][T31980] RSP: 002b:00000000f545c4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 1342.412688][T31980] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 1342.412697][T31980] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1342.412705][T31980] RBP: 00000000f7485018 R08: 0000000000000000 R09: 0000000000000000 [ 1342.412714][T31980] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1342.412722][T31980] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1342.412738][T31980] [ 1342.412839][T31980] Mem-Info: [ 1342.512939][T31980] active_anon:5873 inactive_anon:895 isolated_anon:0 [ 1342.512939][T31980] active_file:1096 inactive_file:16588 isolated_file:0 [ 1342.512939][T31980] unevictable:1768 dirty:327 writeback:0 [ 1342.512939][T31980] slab_reclaimable:7225 slab_unreclaimable:83314 [ 1342.512939][T31980] mapped:23349 shmem:1794 pagetables:1879 [ 1342.512939][T31980] sec_pagetables:320 bounce:0 [ 1342.512939][T31980] kernel_misc_reclaimable:0 [ 1342.512939][T31980] free:30589 free_pcp:12433 free_cma:0 [ 1342.529060][T31980] Node 0 active_anon:0kB inactive_anon:16kB active_file:396kB inactive_file:3008kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:172kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7820kB pagetables:1408kB sec_pagetables:1124kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1342.541073][T31980] Node 1 active_anon:23492kB inactive_anon:3564kB active_file:3988kB inactive_file:63344kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:93224kB dirty:1308kB writeback:0kB shmem:3640kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9228kB pagetables:6108kB sec_pagetables:156kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1342.552607][T31980] Node 0 DMA free:2196kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:192kB local_pcp:0kB free_cma:0kB [ 1342.564008][T31980] lowmem_reserve[]: 0 283 283 283 283 [ 1342.565779][T31980] Node 0 DMA32 free:24392kB boost:29380kB min:42440kB low:45704kB high:48968kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:16kB active_file:396kB inactive_file:3008kB unevictable:3536kB writepending:0kB zspages:3476kB present:1032196kB managed:290676kB mlocked:0kB bounce:0kB free_pcp:7452kB local_pcp:3772kB free_cma:0kB [ 1342.581586][T31980] lowmem_reserve[]: 0 0 0 0 0 [ 1342.583279][T31980] Node 1 DMA32 free:95768kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23492kB inactive_anon:3564kB active_file:3988kB inactive_file:63344kB unevictable:3536kB writepending:1308kB zspages:3988kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:43036kB local_pcp:10208kB free_cma:0kB [ 1342.594599][T31980] lowmem_reserve[]: 0 0 0 0 0 [ 1342.596486][T31980] Node 0 DMA: 29*4kB (UM) 16*8kB (UM) 6*16kB (UM) 4*32kB (UM) 3*64kB (M) 2*128kB (UM) 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2196kB [ 1342.601304][T31980] Node 0 DMA32: 974*4kB (UM) 240*8kB (UME) 157*16kB (UM) 212*32kB (UM) 53*64kB (UM) 16*128kB (UME) 3*256kB (M) 2*512kB (M) 2*1024kB (M) 0*2048kB 0*4096kB = 24392kB [ 1342.607092][T31980] Node 1 DMA32: 561*4kB (UME) 711*8kB (UME) 79*16kB (UME) 10*32kB (ME) 20*64kB (UE) 15*128kB (UE) 6*256kB (UE) 3*512kB (UE) 6*1024kB (M) 12*2048kB (UM) 12*4096kB (UM) = 95660kB [ 1342.615336][T31980] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1342.618411][T31980] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1342.621794][T31980] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1342.625325][T31980] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1342.628724][T31980] 20504 total pagecache pages [ 1342.630318][T31980] 1028 pages in swap cache [ 1342.639038][T31980] Free swap = 95344kB [ 1342.640632][T31980] Total swap = 124996kB [ 1342.656359][T31980] 524155 pages RAM [ 1342.657847][T31980] 0 pages HighMem/MovableOnly [ 1342.660933][T31980] 210593 pages reserved [ 1342.663718][T31980] 0 pages cma reserved [ 1342.896053][T32020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5213'. [ 1343.035443][T32030] FAULT_INJECTION: forcing a failure. [ 1343.035443][T32030] name failslab, interval 1, probability 0, space 0, times 0 [ 1343.040379][T32030] CPU: 3 UID: 0 PID: 32030 Comm: syz.6.5216 Tainted: G L syzkaller #0 PREEMPT(full) [ 1343.040403][T32030] Tainted: [L]=SOFTLOCKUP [ 1343.040409][T32030] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1343.040418][T32030] Call Trace: [ 1343.040424][T32030] [ 1343.040430][T32030] dump_stack_lvl+0x100/0x190 [ 1343.040455][T32030] should_fail_ex.cold+0x5/0xa [ 1343.040474][T32030] should_failslab+0xc2/0x120 [ 1343.040495][T32030] __kmalloc_cache_noprof+0x91/0x6c0 [ 1343.040510][T32030] ? stack_depot_save_flags+0x27/0x9d0 [ 1343.040532][T32030] ? drm_atomic_commit_alloc+0xb8/0x120 [ 1343.040554][T32030] drm_atomic_commit_alloc+0xb8/0x120 [ 1343.040571][T32030] drm_mode_atomic_ioctl+0x395/0x2680 [ 1343.040589][T32030] ? __ia32_compat_sys_ioctl+0xc2/0x360 [ 1343.040609][T32030] ? do_fast_syscall_32+0x32/0x70 [ 1343.040624][T32030] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1343.040649][T32030] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 1343.040667][T32030] ? __lock_acquire+0x49f/0x1a40 [ 1343.040688][T32030] ? drm_is_current_master+0x2c/0x40 [ 1343.040706][T32030] ? drm_is_current_master+0x2c/0x40 [ 1343.040724][T32030] ? do_raw_spin_unlock+0x145/0x1e0 [ 1343.040742][T32030] drm_ioctl_kernel+0x1f3/0x3e0 [ 1343.040759][T32030] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 1343.040778][T32030] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 1343.040798][T32030] drm_ioctl+0x5e6/0xc60 [ 1343.040817][T32030] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 1343.040836][T32030] ? __pfx_drm_ioctl+0x10/0x10 [ 1343.040870][T32030] drm_compat_ioctl+0x386/0x4c0 [ 1343.040893][T32030] ? __pfx_drm_compat_ioctl+0x10/0x10 [ 1343.040913][T32030] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1343.040936][T32030] __do_fast_syscall_32+0xe7/0x970 [ 1343.040949][T32030] ? lockdep_hardirqs_on+0x78/0x100 [ 1343.040971][T32030] do_fast_syscall_32+0x32/0x70 [ 1343.040986][T32030] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1343.041003][T32030] RIP: 0023:0xf701efec [ 1343.041022][T32030] Code: Unable to access opcode bytes at 0xf701efc2. [ 1343.041028][T32030] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1343.041042][T32030] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 00000000c03864bc [ 1343.041050][T32030] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 1343.041059][T32030] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1343.041066][T32030] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1343.041074][T32030] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1343.041090][T32030] [ 1343.048092][T32026] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5213'. [ 1343.220005][ C2] sit: Src spoofed 127.0.0.1/::ac14:14aa -> 127.255.255.254/::7fff:fffe [ 1343.828038][T24242] Bluetooth: hci0: command 0x0c1a tx timeout [ 1343.911220][ T5761] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1344.416143][ C2] sit: Src spoofed 127.0.0.1/::ac14:14aa -> 127.255.255.254/::7fff:fffe [ 1344.956400][T32099] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5230'. [ 1345.126601][T32101] FAULT_INJECTION: forcing a failure. [ 1345.126601][T32101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1345.136496][T32101] CPU: 1 UID: 0 PID: 32101 Comm: syz.6.5231 Tainted: G L syzkaller #0 PREEMPT(full) [ 1345.136517][T32101] Tainted: [L]=SOFTLOCKUP [ 1345.136522][T32101] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1345.136545][T32101] Call Trace: [ 1345.136550][T32101] [ 1345.136556][T32101] dump_stack_lvl+0x100/0x190 [ 1345.136578][T32101] should_fail_ex.cold+0x5/0xa [ 1345.136597][T32101] _copy_to_user+0x32/0xd0 [ 1345.136617][T32101] simple_read_from_buffer+0xcb/0x170 [ 1345.136639][T32101] proc_fail_nth_read+0x1af/0x230 [ 1345.136656][T32101] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1345.136673][T32101] ? rw_verify_area+0xce/0x6d0 [ 1345.136690][T32101] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1345.136706][T32101] vfs_read+0x1e4/0xb40 [ 1345.136718][T32101] ? __pfx_vfs_read+0x10/0x10 [ 1345.136728][T32101] ? find_held_lock+0x2b/0x80 [ 1345.136744][T32101] ? __fget_files+0x215/0x3d0 [ 1345.136758][T32101] ? __fget_files+0x21f/0x3d0 [ 1345.136772][T32101] ksys_read+0x12a/0x250 [ 1345.136782][T32101] ? __pfx_ksys_read+0x10/0x10 [ 1345.136797][T32101] do_int80_emulation+0x14b/0x720 [ 1345.136812][T32101] asm_int80_emulation+0x1a/0x20 [ 1345.136824][T32101] RIP: 0023:0xf71571eb [ 1345.136834][T32101] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1345.136845][T32101] RSP: 002b:00000000f540d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1345.136858][T32101] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f540d5d0 [ 1345.136865][T32101] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1345.136872][T32101] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1345.136878][T32101] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1345.136885][T32101] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1345.136899][T32101] [ 1345.146321][T32105] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5230'. [ 1345.447083][T32112] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5233'. [ 1345.451886][T32112] netlink: 'syz.6.5233': attribute type 10 has an invalid length. [ 1345.634421][ C2] sit: Src spoofed 127.0.0.1/::ac14:14aa -> 127.255.255.254/::7fff:fffe [ 1345.764107][T32118] FAULT_INJECTION: forcing a failure. [ 1345.764107][T32118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1345.769390][T32118] CPU: 3 UID: 0 PID: 32118 Comm: syz.1.5235 Tainted: G L syzkaller #0 PREEMPT(full) [ 1345.769410][T32118] Tainted: [L]=SOFTLOCKUP [ 1345.769415][T32118] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1345.769422][T32118] Call Trace: [ 1345.769430][T32118] [ 1345.769436][T32118] dump_stack_lvl+0x100/0x190 [ 1345.769457][T32118] should_fail_ex.cold+0x5/0xa [ 1345.769474][T32118] _copy_from_iter+0x1f4/0x1690 [ 1345.769494][T32118] ? __asan_memset+0x23/0x50 [ 1345.769509][T32118] ? __pfx__copy_from_iter+0x10/0x10 [ 1345.769526][T32118] ? __pfx___alloc_skb+0x10/0x10 [ 1345.769545][T32118] netlink_sendmsg+0x808/0xda0 [ 1345.769567][T32118] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1345.769587][T32118] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1345.769601][T32118] ____sys_sendmsg+0xa4d/0xbe0 [ 1345.769620][T32118] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1345.769640][T32118] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1345.769663][T32118] ___sys_sendmsg+0x190/0x1e0 [ 1345.769681][T32118] ? __pfx____sys_sendmsg+0x10/0x10 [ 1345.769705][T32118] ? find_held_lock+0x2b/0x80 [ 1345.769729][T32118] __sys_sendmsg+0x160/0x210 [ 1345.769743][T32118] ? __pfx___sys_sendmsg+0x10/0x10 [ 1345.769761][T32118] ? __pfx_ksys_write+0x10/0x10 [ 1345.769775][T32118] __do_fast_syscall_32+0xe7/0x970 [ 1345.769789][T32118] ? lockdep_hardirqs_on+0x78/0x100 [ 1345.769807][T32118] do_fast_syscall_32+0x32/0x70 [ 1345.769819][T32118] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1345.769835][T32118] RIP: 0023:0xf7fe4fec [ 1345.769851][T32118] Code: Unable to access opcode bytes at 0xf7fe4fc2. [ 1345.769860][T32118] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1345.769872][T32118] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800006c0 [ 1345.769879][T32118] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1345.769886][T32118] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1345.769893][T32118] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1345.769900][T32118] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1345.769914][T32118] [ 1346.215363][T32125] FAULT_INJECTION: forcing a failure. [ 1346.215363][T32125] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1346.220670][T32125] CPU: 0 UID: 0 PID: 32125 Comm: syz.3.5237 Tainted: G L syzkaller #0 PREEMPT(full) [ 1346.220690][T32125] Tainted: [L]=SOFTLOCKUP [ 1346.220695][T32125] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1346.220702][T32125] Call Trace: [ 1346.220708][T32125] [ 1346.220713][T32125] dump_stack_lvl+0x100/0x190 [ 1346.220735][T32125] should_fail_ex.cold+0x5/0xa [ 1346.220752][T32125] _copy_from_user+0x2e/0xd0 [ 1346.220770][T32125] binder_thread_write+0x12a0/0x4db0 [ 1346.220790][T32125] ? kasan_save_track+0x14/0x30 [ 1346.220805][T32125] ? kasan_save_free_info+0x3b/0x70 [ 1346.220819][T32125] ? __pfx_binder_thread_write+0x10/0x10 [ 1346.220836][T32125] ? binder_debug+0xe0/0x190 [ 1346.220849][T32125] ? __pfx_binder_debug+0x10/0x10 [ 1346.220863][T32125] ? binder_debug+0xe0/0x190 [ 1346.220875][T32125] ? __pfx_binder_debug+0x10/0x10 [ 1346.220902][T32125] ? __pfx_binder_ioctl+0x10/0x10 [ 1346.220928][T32125] binder_ioctl+0x28ca/0x74a0 [ 1346.220951][T32125] ? tomoyo_path_number_perm+0x28f/0x580 [ 1346.220972][T32125] ? tomoyo_path_number_perm+0x28f/0x580 [ 1346.220995][T32125] ? tomoyo_path_number_perm+0x188/0x580 [ 1346.221012][T32125] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1346.221026][T32125] ? __pfx_binder_ioctl+0x10/0x10 [ 1346.221044][T32125] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1346.221063][T32125] ? do_vfs_ioctl+0x226/0x13e0 [ 1346.221081][T32125] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1346.221101][T32125] ? find_held_lock+0x2b/0x80 [ 1346.221117][T32125] ? __fget_files+0x215/0x3d0 [ 1346.221127][T32125] ? hook_file_ioctl_common+0x140/0x440 [ 1346.221145][T32125] ? __fget_files+0x21f/0x3d0 [ 1346.221157][T32125] ? __pfx_binder_ioctl+0x10/0x10 [ 1346.221172][T32125] compat_ptr_ioctl+0x6e/0xa0 [ 1346.221188][T32125] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 1346.221204][T32125] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1346.221222][T32125] __do_fast_syscall_32+0xe7/0x970 [ 1346.221235][T32125] ? lockdep_hardirqs_on+0x78/0x100 [ 1346.221254][T32125] do_fast_syscall_32+0x32/0x70 [ 1346.221266][T32125] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1346.221281][T32125] RIP: 0023:0xf7fe6fec [ 1346.221297][T32125] Code: Unable to access opcode bytes at 0xf7fe6fc2. [ 1346.221303][T32125] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1346.221315][T32125] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0306201 [ 1346.221323][T32125] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 1346.221330][T32125] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1346.221337][T32125] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1346.221344][T32125] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1346.221358][T32125] [ 1346.221366][T32125] binder: 32124:32125 ioctl c0306201 80000180 returned -14 [ 1346.387175][T32135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5240'. [ 1346.548222][T32146] input: syz1 as /devices/virtual/input/input192 [ 1346.570887][T32146] FAULT_INJECTION: forcing a failure. [ 1346.570887][T32146] name failslab, interval 1, probability 0, space 0, times 0 [ 1346.581086][T32146] CPU: 0 UID: 0 PID: 32146 Comm: syz.6.5234 Tainted: G L syzkaller #0 PREEMPT(full) [ 1346.581110][T32146] Tainted: [L]=SOFTLOCKUP [ 1346.581115][T32146] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1346.581123][T32146] Call Trace: [ 1346.581128][T32146] [ 1346.581134][T32146] dump_stack_lvl+0x100/0x190 [ 1346.581155][T32146] should_fail_ex.cold+0x5/0xa [ 1346.581174][T32146] should_failslab+0xc2/0x120 [ 1346.581193][T32146] __kmalloc_noprof+0xfc/0x820 [ 1346.581210][T32146] ? kobject_get_path+0xcf/0x2c0 [ 1346.581229][T32146] kobject_get_path+0xcf/0x2c0 [ 1346.581246][T32146] input_devices_seq_show+0x8d/0x1130 [ 1346.581299][T32146] ? __pfx_input_devices_seq_show+0x10/0x10 [ 1346.581319][T32146] ? seq_list_start+0x7a/0xc0 [ 1346.581339][T32146] seq_read_iter+0xbce/0x1270 [ 1346.581365][T32146] seq_read+0x344/0x4d0 [ 1346.581385][T32146] ? __pfx_seq_read+0x10/0x10 [ 1346.581406][T32146] ? lock_acquire+0x1b9/0x370 [ 1346.581427][T32146] ? __pfx_seq_read+0x10/0x10 [ 1346.581446][T32146] proc_reg_read+0x240/0x330 [ 1346.581458][T32146] ? __pfx_proc_reg_read+0x10/0x10 [ 1346.581470][T32146] vfs_read+0x1e4/0xb40 [ 1346.581485][T32146] ? __pfx_vfs_read+0x10/0x10 [ 1346.581495][T32146] ? find_held_lock+0x2b/0x80 [ 1346.581512][T32146] ? __fget_files+0x215/0x3d0 [ 1346.581527][T32146] ? __fget_files+0x21f/0x3d0 [ 1346.581543][T32146] ksys_read+0x12a/0x250 [ 1346.581555][T32146] ? __pfx_ksys_read+0x10/0x10 [ 1346.581565][T32146] ? ksys_write+0x1ac/0x250 [ 1346.581576][T32146] ? __pfx_ksys_write+0x10/0x10 [ 1346.581591][T32146] __do_fast_syscall_32+0xe7/0x970 [ 1346.581604][T32146] ? lockdep_hardirqs_on+0x78/0x100 [ 1346.581624][T32146] do_fast_syscall_32+0x32/0x70 [ 1346.581637][T32146] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1346.581653][T32146] RIP: 0023:0xf701efec [ 1346.581670][T32146] Code: Unable to access opcode bytes at 0xf701efc2. [ 1346.581675][T32146] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 1346.581688][T32146] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080002fc0 [ 1346.581696][T32146] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000 [ 1346.581703][T32146] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1346.581710][T32146] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1346.581717][T32146] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1346.581733][T32146] [ 1346.669547][T32153] FAULT_INJECTION: forcing a failure. [ 1346.669547][T32153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1346.677126][T32153] CPU: 2 UID: 0 PID: 32153 Comm: syz.3.5242 Tainted: G L syzkaller #0 PREEMPT(full) [ 1346.677148][T32153] Tainted: [L]=SOFTLOCKUP [ 1346.677152][T32153] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1346.677160][T32153] Call Trace: [ 1346.677165][T32153] [ 1346.677170][T32153] dump_stack_lvl+0x100/0x190 [ 1346.677193][T32153] should_fail_ex.cold+0x5/0xa [ 1346.677212][T32153] _copy_to_user+0x32/0xd0 [ 1346.677231][T32153] simple_read_from_buffer+0xcb/0x170 [ 1346.677254][T32153] proc_fail_nth_read+0x1af/0x230 [ 1346.677272][T32153] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1346.677289][T32153] ? rw_verify_area+0xce/0x6d0 [ 1346.677307][T32153] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1346.677324][T32153] vfs_read+0x1e4/0xb40 [ 1346.677337][T32153] ? __pfx_vfs_read+0x10/0x10 [ 1346.677346][T32153] ? find_held_lock+0x2b/0x80 [ 1346.677362][T32153] ? __fget_files+0x215/0x3d0 [ 1346.677376][T32153] ? __fget_files+0x21f/0x3d0 [ 1346.677391][T32153] ksys_read+0x12a/0x250 [ 1346.677401][T32153] ? __pfx_ksys_read+0x10/0x10 [ 1346.677416][T32153] do_int80_emulation+0x14b/0x720 [ 1346.677431][T32153] asm_int80_emulation+0x1a/0x20 [ 1346.677464][T32153] RIP: 0023:0xf71e71eb [ 1346.677475][T32153] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1346.677487][T32153] RSP: 002b:00000000f54a64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1346.677500][T32153] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f54a65d0 [ 1346.677507][T32153] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1346.677514][T32153] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1346.677523][T32153] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1346.677529][T32153] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1346.677544][T32153] [ 1346.885250][ C2] sit: Src spoofed 127.0.0.1/::ac14:14aa -> 127.255.255.254/::7fff:fffe [ 1346.963285][T32169] loop6: detected capacity change from 0 to 2640 [ 1346.975673][T32169] buffer_io_error: 10 callbacks suppressed [ 1346.975695][T32169] Buffer I/O error on dev loop6, logical block 0, async page read [ 1346.983952][T32169] Buffer I/O error on dev loop6, logical block 0, async page read [ 1346.990733][T32169] Buffer I/O error on dev loop6, logical block 0, async page read [ 1346.994380][T32169] Buffer I/O error on dev loop6, logical block 0, async page read [ 1346.997363][T32169] Buffer I/O error on dev loop6, logical block 0, async page read [ 1347.000908][T32169] Buffer I/O error on dev loop6, logical block 0, async page read [ 1347.004606][T32169] Buffer I/O error on dev loop6, logical block 0, async page read [ 1347.008527][T32169] Buffer I/O error on dev loop6, logical block 0, async page read [ 1347.013010][T32169] ldm_validate_partition_table(): Disk read failed. [ 1347.016458][T32169] Buffer I/O error on dev loop6, logical block 0, async page read [ 1347.019411][T32169] Buffer I/O error on dev loop6, logical block 0, async page read [ 1347.024916][T32169] Dev loop6: unable to read RDB block 0 [ 1347.067034][T32172] loop6: detected capacity change from 2640 to 524288000 [ 1347.067865][T32169] loop6: unable to read partition table [ 1347.073375][T32169] loop_reread_partitions: partition scan of loop6 (irc VUXGZtM<I i8NL W@Q6%) failed (rc=-5) [ 1347.229664][T32184] pimreg: tun_chr_ioctl cmd 1074025678 [ 1347.232192][T32184] pimreg: group set to 768 [ 1347.244952][T32190] FAULT_INJECTION: forcing a failure. [ 1347.244952][T32190] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1347.250440][T32190] CPU: 0 UID: 0 PID: 32190 Comm: syz.1.5249 Tainted: G L syzkaller #0 PREEMPT(full) [ 1347.250496][T32190] Tainted: [L]=SOFTLOCKUP [ 1347.250503][T32190] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1347.250514][T32190] Call Trace: [ 1347.250521][T32190] [ 1347.250527][T32190] dump_stack_lvl+0x100/0x190 [ 1347.250549][T32190] should_fail_ex.cold+0x5/0xa [ 1347.250567][T32190] __kvm_read_guest_page+0x186/0x250 [ 1347.250582][T32190] kvm_fetch_guest_virt+0x128/0x1a0 [ 1347.250598][T32190] __do_insn_fetch_bytes+0x5e2/0x7b0 [ 1347.250617][T32190] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 1347.250635][T32190] ? __lock_acquire+0x49f/0x1a40 [ 1347.250650][T32190] x86_decode_insn+0x3ca/0x6da0 [ 1347.250669][T32190] ? __pfx_x86_decode_insn+0x10/0x10 [ 1347.250681][T32190] ? vmx_cache_reg+0x54f/0x7b0 [ 1347.250696][T32190] ? init_decode_cache+0xd/0x2b0 [ 1347.250708][T32190] ? init_emulate_ctxt+0x43c/0x700 [ 1347.250721][T32190] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 1347.250735][T32190] ? kvm_multiple_exception+0x5b0/0x710 [ 1347.250749][T32190] x86_emulate_instruction+0x1052/0x1df0 [ 1347.250768][T32190] ? __pfx_emulator_get_segment+0x10/0x10 [ 1347.250807][T32190] handle_ud+0x100/0x5b0 [ 1347.250831][T32190] ? __pfx_handle_ud+0x10/0x10 [ 1347.250852][T32190] ? rcu_qs+0x2a/0xe0 [ 1347.250868][T32190] ? rcu_note_context_switch+0x174/0x19c0 [ 1347.250884][T32190] ? __lock_acquire+0x49f/0x1a40 [ 1347.250895][T32190] ? __vmx_complete_interrupts+0x129/0x570 [ 1347.250915][T32190] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1347.250936][T32190] handle_exception_nmi+0xd0c/0x1af0 [ 1347.250955][T32190] ? __pfx_handle_exception_nmi+0x10/0x10 [ 1347.250971][T32190] vmx_handle_exit+0x4d6/0x1ef0 [ 1347.250991][T32190] vcpu_run+0x3558/0x5d50 [ 1347.251007][T32190] ? vmx_vcpu_load_vmcs+0x21d/0x760 [ 1347.251023][T32190] ? __pfx_vcpu_run+0x10/0x10 [ 1347.251044][T32190] ? complete_emulated_mmio+0x102/0x710 [ 1347.251064][T32190] ? kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 1347.251081][T32190] kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 1347.251102][T32190] kvm_vcpu_ioctl+0x730/0x1700 [ 1347.251118][T32190] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1347.251134][T32190] ? tomoyo_path_number_perm+0x188/0x580 [ 1347.251153][T32190] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1347.251170][T32190] ? get_pid_task+0x106/0x250 [ 1347.251192][T32190] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1347.251213][T32190] ? do_vfs_ioctl+0x226/0x13e0 [ 1347.251233][T32190] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1347.251260][T32190] kvm_vcpu_compat_ioctl+0x20f/0x3c0 [ 1347.251276][T32190] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 1347.251292][T32190] ? __fget_files+0x21f/0x3d0 [ 1347.251308][T32190] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 1347.251324][T32190] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1347.251347][T32190] __do_fast_syscall_32+0xe7/0x970 [ 1347.251361][T32190] ? lockdep_hardirqs_on+0x78/0x100 [ 1347.251383][T32190] do_fast_syscall_32+0x32/0x70 [ 1347.251397][T32190] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1347.251420][T32190] RIP: 0023:0xf7fe4fec [ 1347.251437][T32190] Code: Unable to access opcode bytes at 0xf7fe4fc2. [ 1347.251443][T32190] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1347.251456][T32190] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 1347.251465][T32190] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1347.251473][T32190] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1347.251482][T32190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1347.251490][T32190] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1347.251513][T32190] [ 1347.459206][T32199] FAULT_INJECTION: forcing a failure. [ 1347.459206][T32199] name failslab, interval 1, probability 0, space 0, times 0 [ 1347.463897][T32199] CPU: 2 UID: 0 PID: 32199 Comm: syz.5.5250 Tainted: G L syzkaller #0 PREEMPT(full) [ 1347.463921][T32199] Tainted: [L]=SOFTLOCKUP [ 1347.463925][T32199] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1347.463933][T32199] Call Trace: [ 1347.463940][T32199] [ 1347.463946][T32199] dump_stack_lvl+0x100/0x190 [ 1347.463967][T32199] should_fail_ex.cold+0x5/0xa [ 1347.463985][T32199] should_failslab+0xc2/0x120 [ 1347.464003][T32199] __kmalloc_noprof+0xfc/0x820 [ 1347.464017][T32199] ? __kernel_text_address+0xd/0x30 [ 1347.464036][T32199] ? unwind_get_return_address+0x59/0xa0 [ 1347.464061][T32199] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 1347.464086][T32199] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 1347.464109][T32199] genl_family_rcv_msg_doit+0xc7/0x300 [ 1347.464123][T32199] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1347.464135][T32199] ? genl_get_cmd+0x3e7/0x760 [ 1347.464149][T32199] ? bpf_lsm_capable+0x9/0x10 [ 1347.464163][T32199] ? security_capable+0x80/0x260 [ 1347.464176][T32199] ? ns_capable+0xd2/0xf0 [ 1347.464190][T32199] genl_rcv_msg+0x560/0x800 [ 1347.464204][T32199] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1347.464216][T32199] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1347.464233][T32199] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 1347.464253][T32199] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1347.464275][T32199] ? __lock_acquire+0x49f/0x1a40 [ 1347.464292][T32199] netlink_rcv_skb+0x159/0x420 [ 1347.464311][T32199] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1347.464339][T32199] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1347.464364][T32199] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1347.464383][T32199] genl_rcv+0x28/0x40 [ 1347.464394][T32199] netlink_unicast+0x585/0x850 [ 1347.464415][T32199] ? __pfx_netlink_unicast+0x10/0x10 [ 1347.464437][T32199] netlink_sendmsg+0x8b0/0xda0 [ 1347.464458][T32199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1347.464478][T32199] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1347.464493][T32199] ____sys_sendmsg+0xa4d/0xbe0 [ 1347.464510][T32199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1347.464529][T32199] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1347.464552][T32199] ___sys_sendmsg+0x190/0x1e0 [ 1347.464571][T32199] ? __pfx____sys_sendmsg+0x10/0x10 [ 1347.464599][T32199] ? find_held_lock+0x2b/0x80 [ 1347.464624][T32199] __sys_sendmsg+0x160/0x210 [ 1347.464639][T32199] ? __pfx___sys_sendmsg+0x10/0x10 [ 1347.464656][T32199] ? __pfx_ksys_write+0x10/0x10 [ 1347.464671][T32199] __do_fast_syscall_32+0xe7/0x970 [ 1347.464684][T32199] ? lockdep_hardirqs_on+0x78/0x100 [ 1347.464704][T32199] do_fast_syscall_32+0x32/0x70 [ 1347.464716][T32199] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1347.464732][T32199] RIP: 0023:0xf708efec [ 1347.464749][T32199] Code: Unable to access opcode bytes at 0xf708efc2. [ 1347.464754][T32199] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1347.464767][T32199] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 1347.464775][T32199] RDX: 0000000000028000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1347.464782][T32199] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1347.464788][T32199] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1347.464795][T32199] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1347.464809][T32199] [ 1347.518309][T32205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5252'. [ 1347.553178][T32207] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5253'. [ 1347.837649][T32229] FAULT_INJECTION: forcing a failure. [ 1347.837649][T32229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1347.841910][T32229] CPU: 0 UID: 0 PID: 32229 Comm: syz.6.5258 Tainted: G L syzkaller #0 PREEMPT(full) [ 1347.841930][T32229] Tainted: [L]=SOFTLOCKUP [ 1347.841934][T32229] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1347.841942][T32229] Call Trace: [ 1347.841947][T32229] [ 1347.841953][T32229] dump_stack_lvl+0x100/0x190 [ 1347.841975][T32229] should_fail_ex.cold+0x5/0xa [ 1347.841993][T32229] __kvm_read_guest_page+0x186/0x250 [ 1347.842008][T32229] kvm_fetch_guest_virt+0x128/0x1a0 [ 1347.842024][T32229] __do_insn_fetch_bytes+0x5e2/0x7b0 [ 1347.842043][T32229] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 1347.842061][T32229] ? __lock_acquire+0x49f/0x1a40 [ 1347.842076][T32229] x86_decode_insn+0x3ca/0x6da0 [ 1347.842095][T32229] ? __pfx_x86_decode_insn+0x10/0x10 [ 1347.842108][T32229] ? vmx_cache_reg+0x54f/0x7b0 [ 1347.842123][T32229] ? init_decode_cache+0xd/0x2b0 [ 1347.842134][T32229] ? init_emulate_ctxt+0x43c/0x700 [ 1347.842147][T32229] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 1347.842162][T32229] ? kvm_multiple_exception+0x5b0/0x710 [ 1347.842175][T32229] x86_emulate_instruction+0x1052/0x1df0 [ 1347.842194][T32229] ? __pfx_emulator_get_segment+0x10/0x10 [ 1347.842209][T32229] handle_ud+0x100/0x5b0 [ 1347.842226][T32229] ? __pfx_handle_ud+0x10/0x10 [ 1347.842241][T32229] ? rcu_qs+0x2a/0xe0 [ 1347.842254][T32229] ? rcu_note_context_switch+0x174/0x19c0 [ 1347.842270][T32229] ? __lock_acquire+0x49f/0x1a40 [ 1347.842281][T32229] ? __vmx_complete_interrupts+0x129/0x570 [ 1347.842299][T32229] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1347.842322][T32229] handle_exception_nmi+0xd0c/0x1af0 [ 1347.842340][T32229] ? __pfx_handle_exception_nmi+0x10/0x10 [ 1347.842357][T32229] vmx_handle_exit+0x4d6/0x1ef0 [ 1347.842377][T32229] vcpu_run+0x3558/0x5d50 [ 1347.842392][T32229] ? vmx_vcpu_load_vmcs+0x21d/0x760 [ 1347.842409][T32229] ? __pfx_vcpu_run+0x10/0x10 [ 1347.842435][T32229] ? complete_emulated_mmio+0x102/0x710 [ 1347.842455][T32229] ? kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 1347.842472][T32229] kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 1347.842493][T32229] kvm_vcpu_ioctl+0x730/0x1700 [ 1347.842508][T32229] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1347.842521][T32229] ? tomoyo_path_number_perm+0x188/0x580 [ 1347.842537][T32229] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1347.842552][T32229] ? get_pid_task+0x106/0x250 [ 1347.842572][T32229] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1347.842590][T32229] ? do_vfs_ioctl+0x226/0x13e0 [ 1347.842608][T32229] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1347.842631][T32229] kvm_vcpu_compat_ioctl+0x20f/0x3c0 [ 1347.842644][T32229] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 1347.842658][T32229] ? __fget_files+0x21f/0x3d0 [ 1347.842672][T32229] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 1347.842686][T32229] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1347.842705][T32229] __do_fast_syscall_32+0xe7/0x970 [ 1347.842719][T32229] ? lockdep_hardirqs_on+0x78/0x100 [ 1347.842738][T32229] do_fast_syscall_32+0x32/0x70 [ 1347.842750][T32229] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1347.842765][T32229] RIP: 0023:0xf701efec [ 1347.842807][T32229] Code: Unable to access opcode bytes at 0xf701efc2. [ 1347.842814][T32229] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1347.842826][T32229] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000ae80 [ 1347.842833][T32229] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1347.842840][T32229] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1347.842847][T32229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1347.842853][T32229] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1347.842868][T32229] [ 1348.114493][ C3] sit: Src spoofed 127.0.0.1/::ac14:14aa -> 127.255.255.254/::7fff:fffe [ 1348.376553][T32226] tipc: Started in network mode [ 1348.378559][T32226] tipc: Node identity b608c31d3c8b, cluster identity 4711 [ 1348.385754][T32226] tipc: Enabled bearer , priority 0 [ 1348.431842][T32226] tipc: Disabling bearer [ 1348.637800][T32254] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5261'. [ 1348.678398][T32233] 9pnet_fd: p9_fd_create_tcp (32233): problem connecting socket to 127.0.0.1 [ 1348.849505][ T42] kauditd_printk_skb: 207 callbacks suppressed [ 1348.849521][ T42] audit: type=1326 audit(1782765049.116:4713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32253 comm="syz.6.5261" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf701efec code=0x0 [ 1349.021345][T15905] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 1349.203300][T15905] usb 10-1: Using ep0 maxpacket: 32 [ 1349.224337][T15905] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1349.229869][T15905] usb 10-1: config 14 has an invalid interface number: 57 but max is 1 [ 1349.233508][T15905] usb 10-1: config 14 has an invalid interface number: 228 but max is 1 [ 1349.238448][T15905] usb 10-1: config 14 has no interface number 0 [ 1349.241059][T15905] usb 10-1: config 14 has no interface number 1 [ 1349.243350][T15905] usb 10-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1349.248569][T15905] usb 10-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1349.252354][T15905] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1349.257391][T15905] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1349.262160][T15905] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1349.265807][T15905] usb 10-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1349.270270][T15905] usb 10-1: config 14 interface 57 has no altsetting 0 [ 1349.272846][T15905] usb 10-1: config 14 interface 228 has no altsetting 0 [ 1349.277533][T15905] usb 10-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1349.281206][T15905] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1349.284518][T15905] usb 10-1: Product: syz [ 1349.286141][T15905] usb 10-1: Manufacturer: syz [ 1349.287791][T15905] usb 10-1: SerialNumber: syz [ 1349.332020][ C0] sit: Src spoofed 127.0.0.1/::ac14:14aa -> 127.255.255.254/::7fff:fffe [ 1349.558489][T32278] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5266'. [ 1349.781087][T15905] legousbtower 10-1:14.57: interrupt endpoints not found [ 1349.792906][T15905] legousbtower 10-1:14.228: get version request failed: -71 [ 1349.796939][T15905] legousbtower 10-1:14.228: probe with driver legousbtower failed with error -71 [ 1349.807855][T15905] usb 10-1: USB disconnect, device number 51 [ 1349.876251][T15906] usb 11-1: new high-speed USB device number 25 using dummy_hcd [ 1350.188113][T15906] usb 11-1: config 0 has no interfaces? [ 1350.191135][T15906] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1350.195661][T15906] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1350.201956][T15906] usb 11-1: config 0 descriptor?? [ 1350.317575][T32306] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5269'. [ 1350.528953][ C1] sit: Src spoofed 127.0.0.1/::ac14:14aa -> 127.255.255.254/::7fff:fffe [ 1351.768281][ C3] sit: Src spoofed 127.0.0.1/::ac14:14aa -> 127.255.255.254/::7fff:fffe [ 1351.810616][T32310] syz.6.5266 (32310) used greatest stack depth: 18432 bytes left [ 1351.816198][T22928] usb 11-1: USB disconnect, device number 25 [ 1352.638000][T32326] x_tables: duplicate underflow at hook 2 [ 1352.816701][T18434] block nbd1: Receive control failed (result -32) [ 1352.976426][ C3] sit: Src spoofed 127.0.0.1/::ac14:14aa -> 127.255.255.254/::7fff:fffe [ 1353.150959][T32345] sch_fq: defrate 2147483649 ignored. [ 1353.375789][T32355] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 1353.378505][T32355] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1353.386517][T32355] vhci_hcd vhci_hcd.0: Device attached [ 1353.406359][T32355] random: crng reseeded on system resumption [ 1353.424672][T32355] Restarting kernel threads ... [ 1353.427692][T32355] Done restarting kernel threads. [ 1353.611119][T32359] vhci_hcd: connection closed [ 1353.611353][T24031] vhci_hcd vhci_hcd.6: stop threads [ 1353.615185][T24031] vhci_hcd vhci_hcd.6: release socket [ 1353.618900][T24031] vhci_hcd vhci_hcd.6: disconnect device [ 1353.619495][T32352] wg2 speed is unknown, defaulting to 1000 [ 1353.669912][T22928] usb 49-1: new low-speed USB device number 14 using vhci_hcd [ 1353.674764][T22928] usb 49-1: enqueue for inactive port 0 [ 1353.725987][T32363] ptrace attach of ""[32366] was attempted by "/syz-executor exec"[32363] [ 1353.755443][T22928] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1353.760987][ T42] audit: type=1800 audit(1782765053.720:4714): pid=32363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5278" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1354.050885][T32352] lo speed is unknown, defaulting to 1000 [ 1354.311726][ C3] sit: Src spoofed 127.0.0.1/::ac14:14aa -> 127.255.255.254/::7fff:fffe [ 1354.666832][T32417] input: syz1 as /devices/virtual/input/input193 [ 1354.674748][T32417] input: failed to attach handler leds to device input193, error: -6 [ 1354.697774][T32412] FAULT_INJECTION: forcing a failure. [ 1354.697774][T32412] name failslab, interval 1, probability 0, space 0, times 0 [ 1354.712105][T32412] CPU: 2 UID: 0 PID: 32412 Comm: syz.6.5280 Tainted: G L syzkaller #0 PREEMPT(full) [ 1354.712128][T32412] Tainted: [L]=SOFTLOCKUP [ 1354.712132][T32412] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1354.712139][T32412] Call Trace: [ 1354.712144][T32412] [ 1354.712150][T32412] dump_stack_lvl+0x100/0x190 [ 1354.712173][T32412] should_fail_ex.cold+0x5/0xa [ 1354.712191][T32412] should_failslab+0xc2/0x120 [ 1354.712210][T32412] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1354.712227][T32412] ? fuse_request_alloc+0x22/0x200 [ 1354.712250][T32412] fuse_request_alloc+0x22/0x200 [ 1354.712264][T32412] fuse_get_req+0x20a/0x400 [ 1354.712277][T32412] ? __pfx_fuse_get_req+0x10/0x10 [ 1354.712292][T32412] ? from_kgid+0x8f/0xd0 [ 1354.712311][T32412] ? __pfx_from_kgid+0x10/0x10 [ 1354.712331][T32412] fuse_chan_send+0x257/0x9a0 [ 1354.712352][T32412] __fuse_simple_request+0x18e/0x1e0 [ 1354.712370][T32412] fuse_readdir_uncached+0x5d6/0x1c30 [ 1354.712389][T32412] ? __lock_acquire+0x49f/0x1a40 [ 1354.712403][T32412] ? _parse_integer_limit+0x1ac/0x220 [ 1354.712417][T32412] ? __pfx_fuse_readdir_uncached+0x10/0x10 [ 1354.712439][T32412] ? _kstrtoull+0x13c/0x1f0 [ 1354.712453][T32412] ? __lock_acquire+0x49f/0x1a40 [ 1354.712477][T32412] ? look_up_lock_class+0x55/0x120 [ 1354.712498][T32412] ? register_lock_class+0x40/0x560 [ 1354.712509][T32412] ? look_up_lock_class+0x64/0x120 [ 1354.712538][T32412] ? find_held_lock+0x2b/0x80 [ 1354.712554][T32412] ? fuse_readdir+0x9a7/0x1f20 [ 1354.712567][T32412] ? fuse_readdir+0x9a7/0x1f20 [ 1354.712585][T32412] fuse_readdir+0x9bb/0x1f20 [ 1354.712604][T32412] ? apparmor_file_permission+0x13f/0x1c0 [ 1354.712622][T32412] iterate_dir+0x296/0xae0 [ 1354.712642][T32412] __ia32_compat_sys_getdents+0x13a/0x2b0 [ 1354.712661][T32412] ? __pfx___ia32_compat_sys_getdents+0x10/0x10 [ 1354.712682][T32412] ? __pfx_compat_filldir+0x10/0x10 [ 1354.712700][T32412] ? ksys_write+0x1ac/0x250 [ 1354.712713][T32412] ? __pfx_ksys_write+0x10/0x10 [ 1354.712727][T32412] __do_fast_syscall_32+0xe7/0x970 [ 1354.712740][T32412] ? lockdep_hardirqs_on+0x78/0x100 [ 1354.712760][T32412] do_fast_syscall_32+0x32/0x70 [ 1354.712773][T32412] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1354.712789][T32412] RIP: 0023:0xf701efec [ 1354.712807][T32412] Code: Unable to access opcode bytes at 0xf701efc2. [ 1354.712813][T32412] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 000000000000008d [ 1354.712825][T32412] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 1354.712833][T32412] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1354.712840][T32412] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1354.712847][T32412] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1354.712854][T32412] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1354.712869][T32412] [ 1355.754307][ C0] sit: Src spoofed 127.0.0.1/::ac14:14aa -> 127.255.255.254/::7fff:fffe [ 1356.946156][T32451] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1356.952720][ C3] sit: Src spoofed 127.0.0.1/::ac14:14aa -> 127.255.255.254/::7fff:fffe [ 1358.152614][ C3] sit: Src spoofed 127.0.0.1/::ac14:14aa -> 127.255.255.254/::7fff:fffe [ 1358.782439][T32513] FAULT_INJECTION: forcing a failure. [ 1358.782439][T32513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1358.787698][T32513] CPU: 1 UID: 0 PID: 32513 Comm: syz.6.5288 Tainted: G L syzkaller #0 PREEMPT(full) [ 1358.787734][T32513] Tainted: [L]=SOFTLOCKUP [ 1358.787742][T32513] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1358.787754][T32513] Call Trace: [ 1358.787764][T32513] [ 1358.787774][T32513] dump_stack_lvl+0x100/0x190 [ 1358.787807][T32513] should_fail_ex.cold+0x5/0xa [ 1358.787833][T32513] _copy_to_user+0x32/0xd0 [ 1358.787865][T32513] video_usercopy+0xcad/0x14c0 [ 1358.787895][T32513] ? __pfx___video_do_ioctl+0x10/0x10 [ 1358.787922][T32513] ? __pfx_video_usercopy+0x10/0x10 [ 1358.787954][T32513] ? __fget_files+0x215/0x3d0 [ 1358.787972][T32513] ? hook_file_ioctl_common+0x140/0x440 [ 1358.788003][T32513] v4l2_ioctl+0x1bd/0x250 [ 1358.788033][T32513] v4l2_compat_ioctl32+0x20f/0x2d0 [ 1358.788055][T32513] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 1358.788076][T32513] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1358.788109][T32513] __do_fast_syscall_32+0xe7/0x970 [ 1358.788129][T32513] ? lockdep_hardirqs_on+0x78/0x100 [ 1358.788161][T32513] do_fast_syscall_32+0x32/0x70 [ 1358.788181][T32513] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1358.788216][T32513] RIP: 0023:0xf701efec [ 1358.788242][T32513] Code: Unable to access opcode bytes at 0xf701efc2. [ 1358.788273][T32513] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1358.788294][T32513] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c008561c [ 1358.788308][T32513] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 1358.788321][T32513] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1358.788333][T32513] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1358.788345][T32513] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1358.788373][T32513] [ 1359.379822][ C2] sit: Src spoofed 127.0.0.1/::ac14:14aa -> 127.255.255.254/::7fff:fffe [ 1359.998723][T32525] FAULT_INJECTION: forcing a failure. [ 1359.998723][T32525] name failslab, interval 1, probability 0, space 0, times 0 [ 1360.017708][T32525] CPU: 3 UID: 0 PID: 32525 Comm: syz.6.5291 Tainted: G L syzkaller #0 PREEMPT(full) [ 1360.017732][T32525] Tainted: [L]=SOFTLOCKUP [ 1360.017738][T32525] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1360.017749][T32525] Call Trace: [ 1360.017757][T32525] [ 1360.017765][T32525] dump_stack_lvl+0x100/0x190 [ 1360.017796][T32525] should_fail_ex.cold+0x5/0xa [ 1360.017823][T32525] ? __skb_get_hash_net+0x153/0x560 [ 1360.017858][T32525] should_failslab+0xc2/0x120 [ 1360.017881][T32525] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1360.017913][T32525] ? lock_acquire+0x1b9/0x370 [ 1360.017927][T32525] ? skb_clone+0x190/0x400 [ 1360.017945][T32525] skb_clone+0x190/0x400 [ 1360.017961][T32525] dev_queue_xmit_nit+0x255/0xa60 [ 1360.017982][T32525] dev_hard_start_xmit+0x2f5/0x760 [ 1360.018007][T32525] __dev_queue_xmit+0x1b9d/0x4940 [ 1360.018034][T32525] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1360.018062][T32525] ? rcu_is_watching+0x12/0xc0 [ 1360.018086][T32525] ? trace_kmem_cache_alloc+0xdd/0x100 [ 1360.018117][T32525] ? __kasan_slab_alloc+0x89/0x90 [ 1360.018147][T32525] ? __asan_memcpy+0x3c/0x60 [ 1360.018168][T32525] ? __asan_memcpy+0x3c/0x60 [ 1360.018190][T32525] ? __skb_clone+0x570/0x760 [ 1360.018216][T32525] netlink_deliver_tap+0xa4d/0xcc0 [ 1360.018255][T32525] netlink_unicast+0x62b/0x850 [ 1360.018290][T32525] ? __pfx_netlink_unicast+0x10/0x10 [ 1360.018319][T32525] ? __build_skb_around+0x278/0x390 [ 1360.018353][T32525] ? is_vmalloc_addr+0x86/0xa0 [ 1360.018381][T32525] netlink_sendmsg+0x8b0/0xda0 [ 1360.018417][T32525] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1360.018454][T32525] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1360.018482][T32525] sock_sendmsg+0x394/0x410 [ 1360.018511][T32525] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1360.018542][T32525] ? __pfx_sock_sendmsg+0x10/0x10 [ 1360.018569][T32525] ? is_bpf_text_address+0x8a/0x1a0 [ 1360.018652][T32525] splice_to_socket+0xb3c/0x11a0 [ 1360.018679][T32525] ? __lock_acquire+0x49f/0x1a40 [ 1360.018711][T32525] ? __pfx_splice_to_socket+0x10/0x10 [ 1360.018783][T32525] ? apparmor_file_permission+0x13f/0x1c0 [ 1360.018811][T32525] ? bpf_lsm_file_permission+0x9/0x10 [ 1360.018832][T32525] ? security_file_permission+0x76/0x210 [ 1360.018862][T32525] ? __pfx_splice_to_socket+0x10/0x10 [ 1360.018887][T32525] do_splice+0x109c/0x1f90 [ 1360.018912][T32525] ? __lock_acquire+0x49f/0x1a40 [ 1360.018932][T32525] ? rcu_read_lock_any_held+0x6a/0xa0 [ 1360.018969][T32525] ? __pfx_do_splice+0x10/0x10 [ 1360.018989][T32525] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 1360.019012][T32525] ? find_held_lock+0x2b/0x80 [ 1360.019043][T32525] __do_splice+0x33b/0x370 [ 1360.019067][T32525] ? __pfx___do_splice+0x10/0x10 [ 1360.019099][T32525] __ia32_sys_splice+0x189/0x250 [ 1360.019132][T32525] __do_fast_syscall_32+0xe7/0x970 [ 1360.019155][T32525] ? lockdep_hardirqs_on+0x78/0x100 [ 1360.019188][T32525] do_fast_syscall_32+0x32/0x70 [ 1360.019210][T32525] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1360.019237][T32525] RIP: 0023:0xf701efec [ 1360.019264][T32525] Code: Unable to access opcode bytes at 0xf701efc2. [ 1360.019275][T32525] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000139 [ 1360.019297][T32525] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 1360.019311][T32525] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000010d00 [ 1360.019323][T32525] RBP: 000000000000000f R08: 0000000000000000 R09: 0000000000000000 [ 1360.019336][T32525] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1360.019347][T32525] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1360.019394][T32525] [ 1360.672076][ C0] sit: Src spoofed 127.0.0.1/::ac14:14aa -> 127.255.255.254/::7fff:fffe [ 1361.909212][ C2] sit: Src spoofed 127.0.0.1/::ac14:14aa -> 127.255.255.254/::7fff:fffe [ 1363.105924][ C3] sit: Src spoofed 127.0.0.1/::ac14:14aa -> 127.255.255.254/::7fff:fffe [ 1363.172466][T32470] syzkaller0: entered promiscuous mode [ 1363.175002][T32470] syzkaller0: entered allmulticast mode [ 1363.533591][T32509] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1363.546370][T32509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1363.556313][T32525] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5291'. [ 1363.636623][T15906] wg2 speed is unknown, defaulting to 1000 [ 1363.703001][T32557] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5295'. [ 1363.854014][T32562] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5295'. [ 1364.313436][ C3] sit: Src spoofed 127.0.0.1/::ac14:14aa -> 127.255.255.254/::7fff:fffe [ 1364.941543][T32589] FAULT_INJECTION: forcing a failure. [ 1364.941543][T32589] name failslab, interval 1, probability 0, space 0, times 0 [ 1364.946316][T32589] CPU: 3 UID: 0 PID: 32589 Comm: syz.1.5302 Tainted: G L syzkaller #0 PREEMPT(full) [ 1364.946338][T32589] Tainted: [L]=SOFTLOCKUP [ 1364.946342][T32589] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1364.946349][T32589] Call Trace: [ 1364.946354][T32589] [ 1364.946359][T32589] dump_stack_lvl+0x100/0x190 [ 1364.946383][T32589] should_fail_ex.cold+0x5/0xa [ 1364.946403][T32589] should_failslab+0xc2/0x120 [ 1364.946422][T32589] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1364.946439][T32589] ? __pfx_map_id_range_down+0x10/0x10 [ 1364.946460][T32589] ? security_inode_alloc+0x3b/0x2c0 [ 1364.946478][T32589] security_inode_alloc+0x3b/0x2c0 [ 1364.946495][T32589] inode_init_always_gfp+0xc77/0xfb0 [ 1364.946512][T32589] alloc_inode+0x8e/0x250 [ 1364.946568][T32589] sock_alloc+0x44/0x280 [ 1364.946594][T32589] do_accept+0xf9/0x530 [ 1364.946613][T32589] ? do_raw_spin_lock+0x128/0x260 [ 1364.946637][T32589] ? __pfx_do_accept+0x10/0x10 [ 1364.946661][T32589] __sys_accept4+0x108/0x200 [ 1364.946680][T32589] ? __pfx___sys_accept4+0x10/0x10 [ 1364.946694][T32589] ? ksys_write+0x1ac/0x250 [ 1364.946709][T32589] __ia32_sys_accept4+0x94/0x100 [ 1364.946722][T32589] ? lockdep_hardirqs_on+0x78/0x100 [ 1364.946744][T32589] __do_fast_syscall_32+0xe7/0x970 [ 1364.946757][T32589] ? lockdep_hardirqs_on+0x78/0x100 [ 1364.946778][T32589] do_fast_syscall_32+0x32/0x70 [ 1364.946792][T32589] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1364.946809][T32589] RIP: 0023:0xf7fe4fec [ 1364.946825][T32589] Code: Unable to access opcode bytes at 0xf7fe4fc2. [ 1364.946832][T32589] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 000000000000016c [ 1364.946845][T32589] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 1364.946853][T32589] RDX: 0000000000000000 RSI: 0000000000080800 RDI: 0000000000000000 [ 1364.946862][T32589] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1364.946869][T32589] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1364.946877][T32589] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1364.946893][T32589] [ 1365.289393][T32598] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5304'. [ 1365.426623][T32598] wg2 speed is unknown, defaulting to 1000 [ 1365.553095][ C1] sit: Src spoofed 127.0.0.1/::ac14:14aa -> 127.255.255.254/::7fff:fffe [ 1365.707060][T32598] lo speed is unknown, defaulting to 1000 [ 1366.368537][ T42] audit: type=1326 audit(1782765065.521:4715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32635 comm="syz.1.5308" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4fec code=0x7ffc0000 [ 1366.381372][ T42] audit: type=1326 audit(1782765065.530:4716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32635 comm="syz.1.5308" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4fec code=0x7ffc0000 [ 1366.394973][ T42] audit: type=1326 audit(1782765065.539:4717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32635 comm="syz.1.5308" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fe4fec code=0x7ffc0000 [ 1366.408104][ T42] audit: type=1326 audit(1782765065.558:4718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32635 comm="syz.1.5308" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4fec code=0x7ffc0000 [ 1366.419312][ T42] audit: type=1326 audit(1782765065.567:4719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32635 comm="syz.1.5308" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fe4fec code=0x7ffc0000 [ 1366.561589][T32642] netlink: 'syz.1.5308': attribute type 1 has an invalid length. [ 1366.636332][T32642] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1366.775638][T32702] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5309'. [ 1366.782198][ C1] sit: Src spoofed 127.0.0.1/::ac14:14aa -> 127.255.255.254/::7fff:fffe [ 1366.988213][T32739] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5309'. [ 1367.022649][T32745] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5310'. [ 1367.352713][T32747] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5310'. [ 1368.043053][ C3] sit: Src spoofed 127.0.0.1/::ac14:14aa -> 127.255.255.254/::7fff:fffe [ 1368.047513][T32759] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5313'. [ 1368.416784][ T5823] usb 11-1: new high-speed USB device number 26 using dummy_hcd [ 1368.636013][ T5823] usb 11-1: config 0 has no interfaces? [ 1368.639115][ T5823] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1368.643567][ T5823] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1368.652558][ T5823] usb 11-1: config 0 descriptor?? [ 1368.790731][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 1369.389906][ C3] sit: Src spoofed 127.0.0.1/::ac14:14aa -> 127.255.255.254/::7fff:fffe [ 1369.683864][ T344] Process accounting resumed [ 1369.945477][ T5761] Bluetooth: hci0: unexpected event for opcode 0x0403 [ 1370.044338][ T365] : renamed from bridge_slave_0 (while UP) [ 1370.107202][ T5823] usb 11-1: USB disconnect, device number 26 [ 1370.790321][ C0] sit: Src spoofed 127.0.0.1/::ac14:14aa -> 127.255.255.254/::7fff:fffe [ 1372.040054][ C1] sit: Src spoofed 127.0.0.1/::ac14:14aa -> 127.255.255.254/::7fff:fffe [ 1372.138451][ T394] overlayfs: overlapping lowerdir path [ 1372.308954][ T394] overlayfs: overlapping lowerdir path [ 1372.352474][ T406] FAULT_INJECTION: forcing a failure. [ 1372.352474][ T406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1372.368074][ T406] CPU: 2 UID: 0 PID: 406 Comm: syz.6.5335 Tainted: G L syzkaller #0 PREEMPT(full) [ 1372.368107][ T406] Tainted: [L]=SOFTLOCKUP [ 1372.368115][ T406] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1372.368126][ T406] Call Trace: [ 1372.368134][ T406] [ 1372.368142][ T406] dump_stack_lvl+0x100/0x190 [ 1372.368178][ T406] should_fail_ex.cold+0x5/0xa [ 1372.368207][ T406] _copy_to_user+0x32/0xd0 [ 1372.368241][ T406] simple_read_from_buffer+0xcb/0x170 [ 1372.368276][ T406] proc_fail_nth_read+0x1af/0x230 [ 1372.368305][ T406] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1372.368332][ T406] ? rw_verify_area+0xce/0x6d0 [ 1372.368360][ T406] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1372.368385][ T406] vfs_read+0x1e4/0xb40 [ 1372.368406][ T406] ? __pfx_vfs_read+0x10/0x10 [ 1372.368421][ T406] ? find_held_lock+0x2b/0x80 [ 1372.368449][ T406] ? __fget_files+0x215/0x3d0 [ 1372.368473][ T406] ? __fget_files+0x21f/0x3d0 [ 1372.368498][ T406] ksys_read+0x12a/0x250 [ 1372.368516][ T406] ? __pfx_ksys_read+0x10/0x10 [ 1372.368540][ T406] do_int80_emulation+0x14b/0x720 [ 1372.368564][ T406] asm_int80_emulation+0x1a/0x20 [ 1372.368584][ T406] RIP: 0023:0xf71571eb [ 1372.368600][ T406] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1372.368619][ T406] RSP: 002b:00000000f540d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1372.368638][ T406] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f540d5d0 [ 1372.368651][ T406] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1372.368661][ T406] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1372.368671][ T406] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1372.368682][ T406] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1372.368706][ T406] [ 1372.426942][ T414] FAULT_INJECTION: forcing a failure. [ 1372.426942][ T414] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1372.459898][ T414] CPU: 3 UID: 0 PID: 414 Comm: syz.3.5337 Tainted: G L syzkaller #0 PREEMPT(full) [ 1372.459926][ T414] Tainted: [L]=SOFTLOCKUP [ 1372.459931][ T414] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1372.459941][ T414] Call Trace: [ 1372.459947][ T414] [ 1372.459954][ T414] dump_stack_lvl+0x100/0x190 [ 1372.459991][ T414] should_fail_ex.cold+0x5/0xa [ 1372.460013][ T414] _copy_from_iter+0x1f4/0x1690 [ 1372.460038][ T414] ? __asan_memset+0x23/0x50 [ 1372.460057][ T414] ? __pfx__copy_from_iter+0x10/0x10 [ 1372.460077][ T414] ? __pfx___alloc_skb+0x10/0x10 [ 1372.460103][ T414] netlink_sendmsg+0x808/0xda0 [ 1372.460130][ T414] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1372.460155][ T414] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1372.460176][ T414] ____sys_sendmsg+0xa4d/0xbe0 [ 1372.460198][ T414] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1372.460223][ T414] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1372.460253][ T414] ___sys_sendmsg+0x190/0x1e0 [ 1372.460277][ T414] ? __pfx____sys_sendmsg+0x10/0x10 [ 1372.460309][ T414] ? find_held_lock+0x2b/0x80 [ 1372.460343][ T414] __sys_sendmsg+0x160/0x210 [ 1372.460362][ T414] ? __pfx___sys_sendmsg+0x10/0x10 [ 1372.460384][ T414] ? __pfx_ksys_write+0x10/0x10 [ 1372.460404][ T414] __do_fast_syscall_32+0xe7/0x970 [ 1372.460421][ T414] ? lockdep_hardirqs_on+0x78/0x100 [ 1372.460445][ T414] do_fast_syscall_32+0x32/0x70 [ 1372.460461][ T414] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1372.460482][ T414] RIP: 0023:0xf7fe6fec [ 1372.460503][ T414] Code: Unable to access opcode bytes at 0xf7fe6fc2. [ 1372.460510][ T414] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1372.460527][ T414] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000400 [ 1372.460536][ T414] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1372.460545][ T414] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1372.460554][ T414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1372.460562][ T414] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1372.460582][ T414] [ 1372.672143][ T6173] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1372.829897][ T6173] usb 6-1: Using ep0 maxpacket: 8 [ 1372.834363][ T6173] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1372.838679][ T6173] usb 6-1: config 42 has an invalid interface number: 170 but max is 0 [ 1372.842297][ T6173] usb 6-1: config 42 has no interface number 0 [ 1372.844843][ T6173] usb 6-1: config 42 interface 170 has no altsetting 0 [ 1372.849587][ T6173] usb 6-1: New USB device found, idVendor=17ef, idProduct=7205, bcdDevice=8b.61 [ 1372.853383][ T6173] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.856607][ T6173] usb 6-1: Product: syz [ 1372.858295][ T6173] usb 6-1: Manufacturer: syz [ 1372.860148][ T6173] usb 6-1: SerialNumber: syz [ 1372.867394][ T6173] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1372.899540][ T436] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5339'. [ 1373.095298][ T6173] r8152-cfgselector 6-1: USB disconnect, device number 91 [ 1373.225711][ C2] sit: Src spoofed 127.0.0.1/::ac14:14aa -> 127.255.255.254/::7fff:fffe [ 1373.740735][ T450] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5341'. [ 1373.943895][ T5761] Bluetooth: hci2: unexpected event for opcode 0x2007 [ 1374.154966][T21311] usb 11-1: new high-speed USB device number 27 using dummy_hcd [ 1374.317533][T21311] usb 11-1: config 0 has no interfaces? [ 1374.320627][T21311] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1374.327952][T21311] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1374.342423][T21311] usb 11-1: config 0 descriptor?? [ 1374.422776][ C3] sit: Src spoofed 127.0.0.1/::ac14:14aa -> 127.255.255.254/::7fff:fffe [ 1374.791542][ T478] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1375.226142][ T6173] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 1375.405210][ T6173] usb 10-1: Using ep0 maxpacket: 8 [ 1375.416856][ T6173] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1375.423343][ T6173] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1375.438502][ T6173] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1375.442554][ T6173] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1375.446945][ T6173] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1375.452778][T22928] usb 11-1: USB disconnect, device number 27 [ 1375.457649][ T6173] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1375.475174][ T6173] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1375.544360][T16816] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1375.619577][ C2] sit: Src spoofed 127.0.0.1/::ac14:14aa -> 127.255.255.254/::7fff:fffe [ 1375.697926][ T6173] usb 10-1: GET_CAPABILITIES returned 0 [ 1375.700017][ T6173] usbtmc 10-1:16.0: can't read capabilities [ 1375.716029][T16816] usb 6-1: Using ep0 maxpacket: 8 [ 1375.723438][T16816] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1375.727492][T16816] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1375.732462][T16816] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1375.737059][T16816] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1375.740555][T16816] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1375.745361][T16816] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1375.749378][T16816] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1375.913179][ C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1375.916442][ C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1375.920199][ C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1375.925336][ C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1375.928751][ C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1375.931891][ C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1375.935389][ C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1375.939977][ C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1375.943969][ C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1375.947633][ C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1375.950684][ C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1375.954908][ C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1375.958092][ C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1375.962232][ C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1375.967062][ C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1375.970966][ C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1375.981797][T22928] usb 10-1: USB disconnect, device number 52 [ 1375.998959][T16816] usb 6-1: GET_CAPABILITIES returned 0 [ 1376.001851][T16816] usbtmc 6-1:16.0: can't read capabilities [ 1376.199390][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1376.203458][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1376.207390][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1376.212802][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1376.217012][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1376.224607][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1376.228763][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1376.233300][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1376.238155][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1376.242432][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1376.248169][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1376.252139][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1376.256129][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1376.261112][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1376.268237][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1376.272166][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1376.283650][T22928] usb 6-1: USB disconnect, device number 92 [ 1376.392987][ T536] Bluetooth: hci3: Frame reassembly failed (-84) [ 1376.400819][ T536] input: syz1 as /devices/virtual/input/input194 [ 1376.412563][T31037] Bluetooth: hci3: Frame reassembly failed (-84) [ 1376.735097][ T562] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input195 [ 1376.785082][ T565] FAULT_INJECTION: forcing a failure. [ 1376.785082][ T565] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1376.792838][ T565] CPU: 2 UID: 0 PID: 565 Comm: syz.5.5354 Tainted: G L syzkaller #0 PREEMPT(full) [ 1376.792858][ T565] Tainted: [L]=SOFTLOCKUP [ 1376.792863][ T565] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1376.792870][ T565] Call Trace: [ 1376.792875][ T565] [ 1376.792882][ T565] dump_stack_lvl+0x100/0x190 [ 1376.792903][ T565] should_fail_ex.cold+0x5/0xa [ 1376.792918][ T565] ? prepare_alloc_pages+0x16d/0x5f0 [ 1376.792939][ T565] should_fail_alloc_page+0xeb/0x140 [ 1376.792958][ T565] prepare_alloc_pages+0x1f0/0x5f0 [ 1376.792976][ T565] ? __pfx_try_to_wake_up+0x10/0x10 [ 1376.792994][ T565] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 1376.793019][ T565] ? __lock_acquire+0x49f/0x1a40 [ 1376.793031][ T565] ? __bfs+0x150/0x2a0 [ 1376.793048][ T565] ? rcu_is_watching+0x12/0xc0 [ 1376.793065][ T565] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1376.793081][ T565] ? __bfs+0x150/0x2a0 [ 1376.793096][ T565] ? rcu_is_watching+0x12/0xc0 [ 1376.793113][ T565] ? check_noncircular+0x97/0x160 [ 1376.793131][ T565] ? __pv_queued_spin_unlock_slowpath+0x15b/0x2e0 [ 1376.793156][ T565] ? __raw_callee_save___pv_queued_spin_unlock_slowpath+0x15/0x40 [ 1376.793177][ T565] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1376.793197][ T565] ? policy_nodemask+0xed/0x4f0 [ 1376.793216][ T565] alloc_pages_mpol+0x1fb/0x540 [ 1376.793234][ T565] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1376.793255][ T565] folio_alloc_mpol_noprof+0x36/0x260 [ 1376.793276][ T565] vma_alloc_folio_noprof+0xed/0x1d0 [ 1376.793295][ T565] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1376.793319][ T565] do_anonymous_page+0xb2b/0x2080 [ 1376.793333][ T565] ? rcu_read_unlock+0x2d/0xb0 [ 1376.793349][ T565] __handle_mm_fault+0x1d2c/0x2a00 [ 1376.793364][ T565] ? mt_find+0x45e/0x8e0 [ 1376.793378][ T565] ? __pfx___handle_mm_fault+0x10/0x10 [ 1376.793389][ T565] ? __pfx_mt_find+0x10/0x10 [ 1376.793409][ T565] ? find_vma+0xbf/0x140 [ 1376.793443][ T565] ? __pfx_find_vma+0x10/0x10 [ 1376.793459][ T565] handle_mm_fault+0x37b/0xa30 [ 1376.793474][ T565] do_user_addr_fault+0x74c/0x12f0 [ 1376.793497][ T565] exc_page_fault+0x6f/0xd0 [ 1376.793517][ T565] asm_exc_page_fault+0x26/0x30 [ 1376.793529][ T565] RIP: 0010:_copy_to_user+0x9f/0xd0 [ 1376.793548][ T565] Code: 89 ee 48 89 ef e8 e1 6f 09 fd 4d 85 ff 75 26 e8 f7 75 09 fd 89 de 4c 89 e7 e8 5d f4 78 fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 e6 a4 0f 1f 00 0f 01 ca 48 89 cb e8 d1 75 09 fd 48 89 d8 5b 5d 41 [ 1376.793560][ T565] RSP: 0018:ffffc90003ae7948 EFLAGS: 00050297 [ 1376.793571][ T565] RAX: 0000000000000001 RBX: 0000000000000094 RCX: 0000000000000094 [ 1376.793578][ T565] RDX: 0000000000000001 RSI: ffffc90003ae79c8 RDI: 0000000080001080 [ 1376.793585][ T565] RBP: 0000000080001080 R08: 0000000000000000 R09: fffff5200075cf4b [ 1376.793593][ T565] R10: 0000000000000003 R11: 0000000000000000 R12: ffffc90003ae79c8 [ 1376.793600][ T565] R13: 0000000080001114 R14: 00007ffffffff000 R15: 0000000000000000 [ 1376.793614][ T565] ? _copy_to_user+0x93/0xd0 [ 1376.793632][ T565] hidp_get_connlist+0x197/0x2f0 [ 1376.793646][ T565] ? __pfx_hidp_get_connlist+0x10/0x10 [ 1376.793671][ T565] ? __might_fault+0xc5/0x140 [ 1376.793683][ T565] ? __might_fault+0xc5/0x140 [ 1376.793700][ T565] hidp_sock_compat_ioctl+0x278/0x4e0 [ 1376.793712][ T565] ? __pfx_hidp_sock_compat_ioctl+0x10/0x10 [ 1376.793726][ T565] ? kasan_quarantine_put+0x104/0x240 [ 1376.793739][ T565] ? lockdep_hardirqs_on+0x78/0x100 [ 1376.793758][ T565] ? find_held_lock+0x2b/0x80 [ 1376.793772][ T565] ? tomoyo_path_number_perm+0x28f/0x580 [ 1376.793788][ T565] ? tomoyo_path_number_perm+0x28f/0x580 [ 1376.793804][ T565] ? tomoyo_path_number_perm+0x188/0x580 [ 1376.793819][ T565] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1376.793835][ T565] ? get_pid_task+0x106/0x250 [ 1376.793854][ T565] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1376.793872][ T565] ? do_vfs_ioctl+0x226/0x13e0 [ 1376.793890][ T565] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1376.793908][ T565] ? __pfx_hidp_sock_compat_ioctl+0x10/0x10 [ 1376.793920][ T565] compat_sock_ioctl+0x179/0x760 [ 1376.793943][ T565] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 1376.793961][ T565] ? hook_file_ioctl_common+0x140/0x440 [ 1376.793981][ T565] ? __fget_files+0x21f/0x3d0 [ 1376.793995][ T565] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 1376.794019][ T565] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1376.794038][ T565] __do_fast_syscall_32+0xe7/0x970 [ 1376.794050][ T565] ? lockdep_hardirqs_on+0x78/0x100 [ 1376.794069][ T565] do_fast_syscall_32+0x32/0x70 [ 1376.794081][ T565] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1376.794096][ T565] RIP: 0023:0xf708efec [ 1376.794113][ T565] Code: Unable to access opcode bytes at 0xf708efc2. [ 1376.794118][ T565] RSP: 002b:00000000f545c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1376.794142][ T565] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800448d2 [ 1376.794150][ T565] RDX: 00000000800005c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1376.794156][ T565] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1376.794163][ T565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1376.794170][ T565] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1376.794186][ T565] [ 1377.012773][ C0] sit: Src spoofed 127.0.0.1/::ac14:14aa -> 127.255.255.254/::7fff:fffe [ 1377.127755][ T574] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5356'. [ 1377.412149][ T577] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5356'. [ 1377.463462][ T583] FAULT_INJECTION: forcing a failure. [ 1377.463462][ T583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1377.485188][ T583] CPU: 3 UID: 0 PID: 583 Comm: syz.3.5357 Tainted: G L syzkaller #0 PREEMPT(full) [ 1377.485223][ T583] Tainted: [L]=SOFTLOCKUP [ 1377.485231][ T583] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1377.485242][ T583] Call Trace: [ 1377.485250][ T583] [ 1377.485260][ T583] dump_stack_lvl+0x100/0x190 [ 1377.485294][ T583] should_fail_ex.cold+0x5/0xa [ 1377.485321][ T583] __kvm_read_guest_page+0x186/0x250 [ 1377.485347][ T583] kvm_fetch_guest_virt+0x128/0x1a0 [ 1377.485371][ T583] __do_insn_fetch_bytes+0x5e2/0x7b0 [ 1377.485399][ T583] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 1377.485426][ T583] ? lockdep_hardirqs_on+0x78/0x100 [ 1377.485454][ T583] ? irqentry_exit+0x24d/0xa00 [ 1377.485483][ T583] x86_decode_insn+0x3ca/0x6da0 [ 1377.485520][ T583] ? vmx_read_guest_seg_ar+0x99/0x1b0 [ 1377.485549][ T583] ? __pfx_x86_decode_insn+0x10/0x10 [ 1377.485568][ T583] ? vmx_cache_reg+0x54f/0x7b0 [ 1377.485588][ T583] ? init_decode_cache+0xd/0x2b0 [ 1377.485606][ T583] ? init_emulate_ctxt+0x43c/0x700 [ 1377.485624][ T583] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 1377.485641][ T583] ? kvm_mmu_do_page_fault+0x3c3/0x6c0 [ 1377.485666][ T583] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 1377.485693][ T583] x86_emulate_instruction+0x1052/0x1df0 [ 1377.485730][ T583] kvm_mmu_page_fault+0xb9b/0x1a60 [ 1377.485767][ T583] ? __pfx_kvm_mmu_page_fault+0x10/0x10 [ 1377.485807][ T583] handle_ept_misconfig+0x11e/0x3f0 [ 1377.485835][ T583] vmx_handle_exit+0x1b1c/0x1ef0 [ 1377.485867][ T583] vcpu_run+0x3558/0x5d50 [ 1377.485891][ T583] ? vmx_vcpu_load_vmcs+0x21d/0x760 [ 1377.485917][ T583] ? __pfx_vcpu_run+0x10/0x10 [ 1377.485949][ T583] ? complete_emulated_mmio+0x102/0x710 [ 1377.485979][ T583] ? kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 1377.486005][ T583] kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 1377.486039][ T583] kvm_vcpu_ioctl+0x730/0x1700 [ 1377.486062][ T583] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1377.486082][ T583] ? tomoyo_path_number_perm+0x188/0x580 [ 1377.486126][ T583] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1377.486149][ T583] ? get_pid_task+0x106/0x250 [ 1377.486179][ T583] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1377.486209][ T583] ? do_vfs_ioctl+0x226/0x13e0 [ 1377.486238][ T583] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1377.486274][ T583] kvm_vcpu_compat_ioctl+0x20f/0x3c0 [ 1377.486296][ T583] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 1377.486318][ T583] ? __fget_files+0x21f/0x3d0 [ 1377.486370][ T583] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 1377.486393][ T583] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1377.486425][ T583] __do_fast_syscall_32+0xe7/0x970 [ 1377.486444][ T583] ? lockdep_hardirqs_on+0x78/0x100 [ 1377.486474][ T583] do_fast_syscall_32+0x32/0x70 [ 1377.486498][ T583] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1377.486523][ T583] RIP: 0023:0xf7fe6fec [ 1377.486546][ T583] Code: Unable to access opcode bytes at 0xf7fe6fc2. [ 1377.486555][ T583] RSP: 002b:00000000f548550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1377.486572][ T583] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 1377.486584][ T583] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1377.486593][ T583] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1377.486604][ T583] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1377.486614][ T583] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1377.486639][ T583] [ 1377.793684][ T588] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5358'. [ 1378.344499][ C2] sit: Src spoofed 127.0.0.1/::ac14:14aa -> 127.255.255.254/::7fff:fffe [ 1378.621902][T24242] Bluetooth: hci3: command 0x1003 tx timeout [ 1378.640251][ T5761] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1379.136840][ T620] trusted_key: encrypted_key: master key parameter 'd' is invalid [ 1379.142140][ T620] trusted_key: encrypted_key: master key parameter 'd' is invalid [ 1379.541333][ C2] sit: Src spoofed 127.0.0.1/::ac14:14aa -> 127.255.255.254/::7fff:fffe [ 1379.858153][ T625] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5365'. [ 1379.864069][ T630] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5365'. [ 1380.427107][ T647] FAULT_INJECTION: forcing a failure. [ 1380.427107][ T647] name failslab, interval 1, probability 0, space 0, times 0 [ 1380.435321][ T647] CPU: 2 UID: 0 PID: 647 Comm: syz.6.5371 Tainted: G L syzkaller #0 PREEMPT(full) [ 1380.435355][ T647] Tainted: [L]=SOFTLOCKUP [ 1380.435361][ T647] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1380.435372][ T647] Call Trace: [ 1380.435380][ T647] [ 1380.435388][ T647] dump_stack_lvl+0x100/0x190 [ 1380.435420][ T647] should_fail_ex.cold+0x5/0xa [ 1380.435447][ T647] should_failslab+0xc2/0x120 [ 1380.435474][ T647] __kmalloc_cache_noprof+0x91/0x6c0 [ 1380.435496][ T647] ? copy_mount_options+0x55/0x190 [ 1380.435528][ T647] copy_mount_options+0x55/0x190 [ 1380.435554][ T647] __ia32_sys_mount+0x1ab/0x310 [ 1380.435579][ T647] ? __pfx___ia32_sys_mount+0x10/0x10 [ 1380.435601][ T647] ? ksys_write+0x1ac/0x250 [ 1380.435620][ T647] ? __pfx_ksys_write+0x10/0x10 [ 1380.435643][ T647] __do_fast_syscall_32+0xe7/0x970 [ 1380.435663][ T647] ? lockdep_hardirqs_on+0x78/0x100 [ 1380.435694][ T647] do_fast_syscall_32+0x32/0x70 [ 1380.435714][ T647] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1380.435740][ T647] RIP: 0023:0xf701efec [ 1380.435763][ T647] Code: Unable to access opcode bytes at 0xf701efc2. [ 1380.435772][ T647] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 1380.435792][ T647] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000040 [ 1380.435804][ T647] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000080000400 [ 1380.435815][ T647] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1380.435825][ T647] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1380.435836][ T647] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1380.435861][ T647] [ 1380.607640][ T656] FAULT_INJECTION: forcing a failure. [ 1380.607640][ T656] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1380.613028][ T656] CPU: 0 UID: 0 PID: 656 Comm: syz.6.5372 Tainted: G L syzkaller #0 PREEMPT(full) [ 1380.613092][ T656] Tainted: [L]=SOFTLOCKUP [ 1380.613099][ T656] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1380.613110][ T656] Call Trace: [ 1380.613117][ T656] [ 1380.613125][ T656] dump_stack_lvl+0x100/0x190 [ 1380.613154][ T656] should_fail_ex.cold+0x5/0xa [ 1380.613180][ T656] _copy_from_iter+0x1f4/0x1690 [ 1380.613210][ T656] ? __asan_memset+0x23/0x50 [ 1380.613232][ T656] ? __pfx__copy_from_iter+0x10/0x10 [ 1380.613259][ T656] ? __pfx___alloc_skb+0x10/0x10 [ 1380.613290][ T656] netlink_sendmsg+0x808/0xda0 [ 1380.613322][ T656] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1380.613353][ T656] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1380.613377][ T656] ____sys_sendmsg+0xa4d/0xbe0 [ 1380.613403][ T656] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1380.613431][ T656] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1380.613468][ T656] ___sys_sendmsg+0x190/0x1e0 [ 1380.613498][ T656] ? __pfx____sys_sendmsg+0x10/0x10 [ 1380.613538][ T656] ? find_held_lock+0x2b/0x80 [ 1380.613577][ T656] __sys_sendmsg+0x160/0x210 [ 1380.613600][ T656] ? __pfx___sys_sendmsg+0x10/0x10 [ 1380.613627][ T656] ? __pfx_ksys_write+0x10/0x10 [ 1380.613651][ T656] __do_fast_syscall_32+0xe7/0x970 [ 1380.613670][ T656] ? lockdep_hardirqs_on+0x78/0x100 [ 1380.613700][ T656] do_fast_syscall_32+0x32/0x70 [ 1380.613720][ T656] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1380.613743][ T656] RIP: 0023:0xf701efec [ 1380.613766][ T656] Code: Unable to access opcode bytes at 0xf701efc2. [ 1380.613775][ T656] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1380.613793][ T656] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000080 [ 1380.613807][ T656] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1380.613817][ T656] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1380.613828][ T656] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1380.613839][ T656] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1380.613862][ T656] [ 1380.825099][ C2] sit: Src spoofed 127.0.0.1/::ac14:14aa -> 127.255.255.254/::7fff:fffe [ 1381.109726][ T5761] Bluetooth: hci0: command 0x0c1a tx timeout [ 1382.022868][ C0] sit: Src spoofed 127.0.0.1/::ac14:14aa -> 127.255.255.254/::7fff:fffe [ 1383.260069][ C3] sit: Src spoofed 127.0.0.1/::ac14:14aa -> 127.255.255.254/::7fff:fffe [ 1383.617010][ T709] bridge0: port 1(bridge_slave_0) entered disabled state [ 1384.457066][ C3] sit: Src spoofed 127.0.0.1/::ac14:14aa -> 127.255.255.254/::7fff:fffe [ 1385.163695][ T730] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5385'. [ 1385.330458][ T749] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5390'. [ 1385.663608][ T761] vlan2: entered promiscuous mode [ 1385.667049][ T761] hsr0: entered promiscuous mode [ 1385.669595][ T761] vlan2: entered allmulticast mode [ 1385.672009][ T761] hsr0: entered allmulticast mode [ 1385.674180][ T761] hsr_slave_0: entered allmulticast mode [ 1385.677215][ T761] hsr_slave_1: entered allmulticast mode [ 1385.708610][ T761] netlink: 264 bytes leftover after parsing attributes in process `syz.3.5392'. [ 1385.714252][ T761] hsr_slave_0: left promiscuous mode [ 1385.717470][ T761] hsr_slave_1: left promiscuous mode [ 1385.882249][ C1] sit: Src spoofed 127.0.0.1/::ac14:14aa -> 127.255.255.254/::7fff:fffe [ 1385.906533][ T778] openvswitch: netlink: Key 32 has unexpected len 0 expected 2 [ 1386.252003][ T784] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5395'. [ 1386.267954][ T784] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5395'. [ 1386.364119][ T792] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5397'. [ 1386.697226][ T810] tipc: Started in network mode [ 1386.698900][ T810] tipc: Node identity 7ae23a471c75, cluster identity 4711 [ 1386.702913][ T810] tipc: Enabled bearer , priority 0 [ 1386.707499][ T810] syzkaller0: entered promiscuous mode [ 1386.709574][ T810] syzkaller0: entered allmulticast mode [ 1386.739597][ T810] syzkaller0: mtu less than device minimum [ 1386.742738][ T809] tipc: Resetting bearer [ 1386.764181][ T809] tipc: Disabling bearer [ 1386.888480][ T826] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5405'. [ 1386.911323][ T826] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5405'. [ 1387.061998][ T839] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5408'. [ 1387.096102][ C2] sit: Src spoofed 127.0.0.1/::ac14:14aa -> 127.255.255.254/::7fff:fffe [ 1388.273182][ C2] sit: Src spoofed 127.0.0.1/::ac14:14aa -> 127.255.255.254/::7fff:fffe [ 1388.376654][ T879] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5416'. [ 1388.412251][ T879] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5416'. [ 1388.502054][ T890] FAULT_INJECTION: forcing a failure. [ 1388.502054][ T890] name failslab, interval 1, probability 0, space 0, times 0 [ 1388.508722][ T890] CPU: 0 UID: 0 PID: 890 Comm: syz.6.5419 Tainted: G L syzkaller #0 PREEMPT(full) [ 1388.508756][ T890] Tainted: [L]=SOFTLOCKUP [ 1388.508764][ T890] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1388.508777][ T890] Call Trace: [ 1388.508783][ T890] [ 1388.508792][ T890] dump_stack_lvl+0x100/0x190 [ 1388.508824][ T890] should_fail_ex.cold+0x5/0xa [ 1388.508853][ T890] should_failslab+0xc2/0x120 [ 1388.508882][ T890] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 1388.508908][ T890] ? __alloc_skb+0x140/0x710 [ 1388.508945][ T890] __alloc_skb+0x140/0x710 [ 1388.508965][ T890] ? __alloc_skb+0x5b7/0x710 [ 1388.508987][ T890] ? __pfx___alloc_skb+0x10/0x10 [ 1388.509022][ T890] netlink_dump+0x194/0xd00 [ 1388.509061][ T890] ? __pfx_netlink_dump+0x10/0x10 [ 1388.509091][ T890] ? kasan_quarantine_put+0x104/0x240 [ 1388.509134][ T890] ? kfree_skbmem+0x19f/0x210 [ 1388.509172][ T890] netlink_recvmsg+0x7dc/0xa90 [ 1388.509207][ T890] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1388.509246][ T890] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1388.509275][ T890] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1388.509311][ T890] sock_recvmsg+0x1d5/0x220 [ 1388.509347][ T890] ____sys_recvmsg+0x21e/0x670 [ 1388.509387][ T890] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1388.509433][ T890] ? __lock_acquire+0x49f/0x1a40 [ 1388.509464][ T890] ___sys_recvmsg+0x16a/0x1a0 [ 1388.509501][ T890] ? __pfx____sys_recvmsg+0x10/0x10 [ 1388.509540][ T890] ? find_held_lock+0x2b/0x80 [ 1388.509590][ T890] __sys_recvmsg+0x15d/0x210 [ 1388.509621][ T890] ? __pfx___sys_recvmsg+0x10/0x10 [ 1388.509660][ T890] ? __pfx_ksys_write+0x10/0x10 [ 1388.509691][ T890] __do_fast_syscall_32+0xe7/0x970 [ 1388.509716][ T890] ? lockdep_hardirqs_on+0x78/0x100 [ 1388.509754][ T890] do_fast_syscall_32+0x32/0x70 [ 1388.509778][ T890] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1388.509808][ T890] RIP: 0023:0xf701efec [ 1388.509836][ T890] Code: Unable to access opcode bytes at 0xf701efc2. [ 1388.509848][ T890] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000174 [ 1388.509872][ T890] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080002240 [ 1388.509889][ T890] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1388.509903][ T890] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1388.509924][ T890] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1388.509938][ T890] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1388.509969][ T890] [ 1388.518156][ T892] FAULT_INJECTION: forcing a failure. [ 1388.518156][ T892] name failslab, interval 1, probability 0, space 0, times 0 [ 1388.616149][ T892] CPU: 2 UID: 0 PID: 892 Comm: syz.5.5420 Tainted: G L syzkaller #0 PREEMPT(full) [ 1388.616172][ T892] Tainted: [L]=SOFTLOCKUP [ 1388.616176][ T892] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1388.616184][ T892] Call Trace: [ 1388.616188][ T892] [ 1388.616193][ T892] dump_stack_lvl+0x100/0x190 [ 1388.616215][ T892] should_fail_ex.cold+0x5/0xa [ 1388.616234][ T892] should_failslab+0xc2/0x120 [ 1388.616253][ T892] __kmalloc_noprof+0xfc/0x820 [ 1388.616268][ T892] ? __kernel_text_address+0xd/0x30 [ 1388.616287][ T892] ? unwind_get_return_address+0x59/0xa0 [ 1388.616306][ T892] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 1388.616324][ T892] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 1388.616340][ T892] genl_family_rcv_msg_doit+0xc7/0x300 [ 1388.616354][ T892] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1388.616366][ T892] ? genl_get_cmd+0x3e7/0x760 [ 1388.616381][ T892] ? bpf_lsm_capable+0x9/0x10 [ 1388.616395][ T892] ? security_capable+0x80/0x260 [ 1388.616414][ T892] ? ns_capable+0xd2/0xf0 [ 1388.616428][ T892] genl_rcv_msg+0x560/0x800 [ 1388.616441][ T892] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1388.616453][ T892] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1388.616466][ T892] ? __pfx_nl80211_new_mpath+0x10/0x10 [ 1388.616484][ T892] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1388.616498][ T892] ? __lock_acquire+0x49f/0x1a40 [ 1388.616512][ T892] netlink_rcv_skb+0x159/0x420 [ 1388.616530][ T892] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1388.616543][ T892] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1388.616567][ T892] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1388.616586][ T892] genl_rcv+0x28/0x40 [ 1388.616596][ T892] netlink_unicast+0x585/0x850 [ 1388.616616][ T892] ? __pfx_netlink_unicast+0x10/0x10 [ 1388.616638][ T892] netlink_sendmsg+0x8b0/0xda0 [ 1388.616658][ T892] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1388.616678][ T892] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1388.616693][ T892] ____sys_sendmsg+0xa4d/0xbe0 [ 1388.616710][ T892] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1388.616728][ T892] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1388.616752][ T892] ___sys_sendmsg+0x190/0x1e0 [ 1388.616772][ T892] ? __pfx____sys_sendmsg+0x10/0x10 [ 1388.616799][ T892] ? find_held_lock+0x2b/0x80 [ 1388.616825][ T892] __sys_sendmsg+0x160/0x210 [ 1388.616841][ T892] ? __pfx___sys_sendmsg+0x10/0x10 [ 1388.616861][ T892] ? __pfx_ksys_write+0x10/0x10 [ 1388.616877][ T892] __do_fast_syscall_32+0xe7/0x970 [ 1388.616890][ T892] ? lockdep_hardirqs_on+0x78/0x100 [ 1388.616911][ T892] do_fast_syscall_32+0x32/0x70 [ 1388.616924][ T892] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1388.616940][ T892] RIP: 0023:0xf708efec [ 1388.616957][ T892] Code: Unable to access opcode bytes at 0xf708efc2. [ 1388.616963][ T892] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1388.616976][ T892] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000580 [ 1388.616984][ T892] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 1388.616991][ T892] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1388.616998][ T892] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1388.617005][ T892] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1388.617021][ T892] [ 1388.743570][ T896] netlink: 'syz.1.5418': attribute type 10 has an invalid length. [ 1389.222763][ T5761] Bluetooth: hci2: command 0x0406 tx timeout [ 1389.466358][ T909] FAULT_INJECTION: forcing a failure. [ 1389.466358][ T909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1389.471035][ T909] CPU: 3 UID: 0 PID: 909 Comm: syz.1.5424 Tainted: G L syzkaller #0 PREEMPT(full) [ 1389.471056][ T909] Tainted: [L]=SOFTLOCKUP [ 1389.471072][ T909] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1389.471079][ T909] Call Trace: [ 1389.471084][ T909] [ 1389.471089][ T909] dump_stack_lvl+0x100/0x190 [ 1389.471111][ T909] should_fail_ex.cold+0x5/0xa [ 1389.471129][ T909] _copy_from_iter+0x1f4/0x1690 [ 1389.471148][ T909] ? __asan_memset+0x23/0x50 [ 1389.471166][ T909] ? __pfx__copy_from_iter+0x10/0x10 [ 1389.471184][ T909] ? __pfx___alloc_skb+0x10/0x10 [ 1389.471203][ T909] netlink_sendmsg+0x808/0xda0 [ 1389.471225][ T909] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1389.471245][ T909] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1389.471265][ T909] ____sys_sendmsg+0xa4d/0xbe0 [ 1389.471281][ T909] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1389.471300][ T909] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1389.471324][ T909] ___sys_sendmsg+0x190/0x1e0 [ 1389.471343][ T909] ? __pfx____sys_sendmsg+0x10/0x10 [ 1389.471368][ T909] ? find_held_lock+0x2b/0x80 [ 1389.471393][ T909] __sys_sendmsg+0x160/0x210 [ 1389.471407][ T909] ? __pfx___sys_sendmsg+0x10/0x10 [ 1389.471424][ T909] ? __pfx_ksys_write+0x10/0x10 [ 1389.471439][ T909] __do_fast_syscall_32+0xe7/0x970 [ 1389.471451][ T909] ? lockdep_hardirqs_on+0x78/0x100 [ 1389.471472][ T909] do_fast_syscall_32+0x32/0x70 [ 1389.471483][ T909] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1389.471498][ T909] RIP: 0023:0xf7fe4fec [ 1389.471514][ T909] Code: Unable to access opcode bytes at 0xf7fe4fc2. [ 1389.471519][ T909] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1389.471532][ T909] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 1389.471539][ T909] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 1389.471546][ T909] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1389.471553][ T909] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1389.471559][ T909] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1389.471574][ T909] [ 1389.597655][ C3] sit: Src spoofed 127.0.0.1/::ac14:14aa -> 127.255.255.254/::7fff:fffe [ 1389.749826][ T919] gtp0: entered allmulticast mode [ 1390.335808][ T941] ================================================================== [ 1390.339467][ T941] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x209a/0x4160 [ 1390.344557][ T941] Write of size 5120 at addr ffffc9000c723c40 by task vivid-000-vid-c/941 [ 1390.350899][ T941] [ 1390.352145][ T941] CPU: 0 UID: 0 PID: 941 Comm: vivid-000-vid-c Tainted: G L syzkaller #0 PREEMPT(full) [ 1390.352171][ T941] Tainted: [L]=SOFTLOCKUP [ 1390.352177][ T941] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1390.352188][ T941] Call Trace: [ 1390.352195][ T941] [ 1390.352201][ T941] dump_stack_lvl+0x100/0x190 [ 1390.352231][ T941] print_report+0x13d/0x4b0 [ 1390.352257][ T941] ? _raw_spin_lock_irqsave+0x52/0x60 [ 1390.352282][ T941] ? tpg_fill_plane_buffer+0x209a/0x4160 [ 1390.352305][ T941] kasan_report+0xdf/0x1c0 [ 1390.352329][ T941] ? tpg_fill_plane_buffer+0x209a/0x4160 [ 1390.352354][ T941] kasan_check_range+0x10f/0x1e0 [ 1390.352381][ T941] __asan_memcpy+0x3c/0x60 [ 1390.352398][ T941] tpg_fill_plane_buffer+0x209a/0x4160 [ 1390.352423][ T941] vivid_fillbuff+0x963/0x3ff0 [ 1390.352465][ T941] ? __pfx_vivid_fillbuff+0x10/0x10 [ 1390.352478][ T941] ? __lock_acquire+0x49f/0x1a40 [ 1390.352493][ T941] ? v4l2_ctrl_request_setup+0x45a/0xa60 [ 1390.352507][ T941] ? lockdep_hardirqs_on+0x78/0x100 [ 1390.352527][ T941] ? vivid_thread_vid_cap_tick+0x81b/0x1470 [ 1390.352539][ T941] vivid_thread_vid_cap_tick+0x81b/0x1470 [ 1390.352554][ T941] vivid_thread_vid_cap+0x454/0xd70 [ 1390.352569][ T941] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1390.352582][ T941] ? do_raw_spin_lock+0x128/0x260 [ 1390.352595][ T941] ? find_held_lock+0x2b/0x80 [ 1390.352610][ T941] ? __kthread_parkme+0xbb/0x230 [ 1390.352625][ T941] ? rcu_is_watching+0x12/0xc0 [ 1390.352640][ T941] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1390.352657][ T941] ? lockdep_hardirqs_on+0x78/0x100 [ 1390.352675][ T941] ? __kthread_parkme+0x18c/0x230 [ 1390.352689][ T941] ? kthread+0x13a/0x450 [ 1390.352709][ T941] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1390.352721][ T941] kthread+0x370/0x450 [ 1390.352736][ T941] ? __pfx_kthread+0x10/0x10 [ 1390.352752][ T941] ret_from_fork+0x72b/0xd50 [ 1390.352770][ T941] ? __pfx_ret_from_fork+0x10/0x10 [ 1390.352785][ T941] ? __switch_to+0x800/0x10f0 [ 1390.352797][ T941] ? __pfx_kthread+0x10/0x10 [ 1390.352817][ T941] ret_from_fork_asm+0x1a/0x30 [ 1390.352839][ T941] [ 1390.352843][ T941] [ 1390.437593][ T941] The buggy address belongs to a vmalloc virtual mapping [ 1390.441229][ T941] The buggy address belongs to the physical page: [ 1390.443921][ T941] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888062206000 pfn:0x62206 [ 1390.447692][ T941] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 1390.450665][ T941] raw: 04fff00000000000 0000000000000000 ffffea0001888190 0000000000000000 [ 1390.454200][ T941] raw: ffff888062206000 0000000000000000 00000001ffffffff 0000000000000000 [ 1390.458339][ T941] page dumped because: kasan: bad access detected [ 1390.460784][ T941] page_owner tracks the page as allocated [ 1390.463030][ T941] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 940, tgid 935 (syz.5.5431), ts 1390316124792, free_ts 1388542294617 [ 1390.470501][ T941] post_alloc_hook+0xfd/0x120 [ 1390.472845][ T941] get_page_from_freelist+0xf48/0x3530 [ 1390.475887][ T941] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 1390.478470][ T941] alloc_pages_mpol+0x1fb/0x540 [ 1390.480468][ T941] alloc_pages_noprof+0x1a/0x160 [ 1390.482386][ T941] __vmalloc_node_range_noprof+0xf9a/0x1630 [ 1390.484840][ T941] vmalloc_user_noprof+0x9e/0xe0 [ 1390.486745][ T941] vb2_vmalloc_alloc+0x135/0x410 [ 1390.488691][ T941] __vb2_queue_alloc+0x8d5/0x1160 [ 1390.490924][ T941] vb2_core_reqbufs+0x899/0xf30 [ 1390.493160][ T941] __vb2_init_fileio+0x32d/0x1000 [ 1390.495548][ T941] vb2_core_poll+0x611/0x740 [ 1390.497513][ T941] vb2_poll+0x4b/0xe0 [ 1390.499222][ T941] vb2_fop_poll+0x10e/0x350 [ 1390.501108][ T941] v4l2_poll+0x15f/0x220 [ 1390.502929][ T941] do_sys_poll+0x6e5/0xe90 [ 1390.504909][ T941] page last free pid 27200 tgid 27200 stack trace: [ 1390.507558][ T941] __free_frozen_pages+0x79f/0x1090 [ 1390.509891][ T941] qlist_free_all+0x47/0xf0 [ 1390.512112][ T941] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1390.514441][ T941] __kasan_slab_alloc+0x69/0x90 [ 1390.516414][ T941] __kmalloc_cache_node_noprof+0x27f/0x6c0 [ 1390.518846][ T941] __get_vm_area_node+0x101/0x330 [ 1390.520954][ T941] __vmalloc_node_range_noprof+0x228/0x1630 [ 1390.523399][ T941] __vmalloc_node_noprof+0xad/0xf0 [ 1390.525710][ T941] xt_compat_init_offsets+0xe2/0x1f0 [ 1390.528507][ T941] compat_table_info+0x11b/0x870 [ 1390.531073][ T941] compat_do_ebt_get_ctl+0x270/0xbb0 [ 1390.533131][ T941] do_ebt_get_ctl+0x243/0x7a0 [ 1390.534729][ T941] nf_getsockopt+0x7c/0xe0 [ 1390.536346][ T941] ip_getsockopt+0x192/0x1e0 [ 1390.537888][ T941] tcp_getsockopt+0xa1/0x110 [ 1390.539419][ T941] do_sock_getsockopt+0x50a/0x6e0 [ 1390.541055][ T941] [ 1390.541879][ T941] Memory state around the buggy address: [ 1390.544436][ T941] ffffc9000c724f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1390.548561][ T941] ffffc9000c724f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1390.551901][ T941] >ffffc9000c725000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1390.554725][ T941] ^ [ 1390.555969][ T941] ffffc9000c725080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1390.559106][ T941] ffffc9000c725100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1390.562475][ T941] ================================================================== [ 1390.610427][ T941] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1390.613280][ T941] CPU: 0 UID: 0 PID: 941 Comm: vivid-000-vid-c Tainted: G L syzkaller #0 PREEMPT(full) [ 1390.617826][ T941] Tainted: [L]=SOFTLOCKUP [ 1390.619619][ T941] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1390.624469][ T941] Call Trace: [ 1390.626345][ T941] [ 1390.627706][ T941] dump_stack_lvl+0x100/0x190 [ 1390.629749][ T941] vpanic+0x552/0x970 [ 1390.631545][ T941] ? __pfx_vpanic+0x10/0x10 [ 1390.633592][ T941] ? tpg_fill_plane_buffer+0x209a/0x4160 [ 1390.635639][ T941] panic+0xd1/0xe0 [ 1390.637338][ T941] ? __pfx_panic+0x10/0x10 [ 1390.639599][ T941] ? tpg_fill_plane_buffer+0x209a/0x4160 [ 1390.642277][ T941] ? preempt_schedule_common+0x42/0xc0 [ 1390.644509][ T941] ? check_panic_on_warn+0x1f/0x90 [ 1390.646710][ T941] check_panic_on_warn.cold+0x19/0x34 [ 1390.648967][ T941] end_report.part.0+0x3a/0x90 [ 1390.651287][ T941] kasan_report.cold+0xe/0x18 [ 1390.653994][ T941] ? tpg_fill_plane_buffer+0x209a/0x4160 [ 1390.656590][ T941] kasan_check_range+0x10f/0x1e0 [ 1390.658519][ T941] __asan_memcpy+0x3c/0x60 [ 1390.660396][ T941] tpg_fill_plane_buffer+0x209a/0x4160 [ 1390.662777][ T941] vivid_fillbuff+0x963/0x3ff0 [ 1390.664839][ T941] ? __pfx_vivid_fillbuff+0x10/0x10 [ 1390.667224][ T941] ? __lock_acquire+0x49f/0x1a40 [ 1390.669834][ T941] ? v4l2_ctrl_request_setup+0x45a/0xa60 [ 1390.672753][ T941] ? lockdep_hardirqs_on+0x78/0x100 [ 1390.675112][ T941] ? vivid_thread_vid_cap_tick+0x81b/0x1470 [ 1390.677711][ T941] vivid_thread_vid_cap_tick+0x81b/0x1470 [ 1390.680214][ T941] vivid_thread_vid_cap+0x454/0xd70 [ 1390.682415][ T941] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1390.684979][ T941] ? do_raw_spin_lock+0x128/0x260 [ 1390.687657][ T941] ? find_held_lock+0x2b/0x80 [ 1390.689982][ T941] ? __kthread_parkme+0xbb/0x230 [ 1390.691861][ T941] ? rcu_is_watching+0x12/0xc0 [ 1390.693408][ T941] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1390.695320][ T941] ? lockdep_hardirqs_on+0x78/0x100 [ 1390.697072][ T941] ? __kthread_parkme+0x18c/0x230 [ 1390.699277][ T941] ? kthread+0x13a/0x450 [ 1390.701408][ T941] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1390.704325][ T941] kthread+0x370/0x450 [ 1390.706225][ T941] ? __pfx_kthread+0x10/0x10 [ 1390.708200][ T941] ret_from_fork+0x72b/0xd50 [ 1390.710182][ T941] ? __pfx_ret_from_fork+0x10/0x10 [ 1390.712303][ T941] ? __switch_to+0x800/0x10f0 [ 1390.714286][ T941] ? __pfx_kthread+0x10/0x10 [ 1390.716630][ T941] ret_from_fork_asm+0x1a/0x30 [ 1390.719272][ T941] [ 1390.721761][ T941] Kernel Offset: disabled [ 1390.723643][ T941] Rebooting in 86400 seconds.. VM DIAGNOSIS: 20:32:37 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8584b945 RDI=ffffffff9b4eeca0 RBP=ffffffff9b4eec60 RSP=ffffc9000c73f188 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000074697257 R12=0000000000000000 R13=0000000000000037 R14=ffffffff9b1ef21c R15=ffffffff8584b8e0 RIP=ffffffff8584b96f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880970e7000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005559c72ae000 CR3=0000000050273000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffffffff8e7e5ec0 RCX=ffffffff91873b01 RDX=0000000000000000 RSI=0000000000000001 RDI=ffffffff8c1e8f80 RBP=ffffffff81b736ae RSP=ffffc90003d16f38 R8 =0000000000000001 R9 =0000000000000007 R10=0000000000000200 R11=0000000000014574 R12=ffff888021c5a540 R13=ffffc90003d16ff0 R14=0000000000000202 R15=ffffc90003d17024 RIP=ffffffff81e48f27 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fd335543300 ffffffff 00c00000 GS =0000 ffff8880971e7000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555991592f40 CR3=00000000517af000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=d31cc77ae43c6343 aeff182d0e0d6b9d d31cc77ae43c6343 aeff182d0e0d6b9d d31cc77ae43c6343 aeff182d0e0d6b9d d31cc77ae43c6343 aeff182d0e0d6b9d ZMM18=182dcc7cd69d3d4a 80bc80e213ea4c31 182dcc7cd69d3d4a 80bc80e213ea4c31 182dcc7cd69d3d4a 80bc80e213ea4c31 182dcc7cd69d3d4a 80bc80e213ea4c31 ZMM19=6628000000000000 0000000000000004 6628000000000000 0000000000000003 6628000000000000 0000000000000002 6628000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 030c080001fba1e8 0307b8b2080001fb a1e0030e080001fb a1d80312080001fb ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a1d0033ffe080001 fba1c8030e080001 fba1c00306080001 fba1b80301fe0800 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01fba1b0031e0800 01fba1a803120800 01fba1a0030a0800 01fba19803020800 ZMM24=13ea4c3113ea4c31 13ea4c3113ea4c31 13ea4c3113ea4c31 13ea4c3113ea4c31 13ea4c3113ea4c31 13ea4c3113ea4c31 13ea4c3113ea4c31 13ea4c3113ea4c31 ZMM25=80bc80e280bc80e2 80bc80e280bc80e2 80bc80e280bc80e2 80bc80e280bc80e2 80bc80e280bc80e2 80bc80e280bc80e2 80bc80e280bc80e2 80bc80e280bc80e2 ZMM26=d69d3d4ad69d3d4a d69d3d4ad69d3d4a d69d3d4ad69d3d4a d69d3d4ad69d3d4a d69d3d4ad69d3d4a d69d3d4ad69d3d4a d69d3d4ad69d3d4a d69d3d4ad69d3d4a ZMM27=182dcc7c182dcc7c 182dcc7c182dcc7c 182dcc7c182dcc7c 182dcc7c182dcc7c 182dcc7c182dcc7c 182dcc7c182dcc7c 182dcc7c182dcc7c 182dcc7c182dcc7c ZMM28=000001100000010f 0000010e0000010d 0000010c0000010b 0000010a00000109 0000010800000107 0000010600000105 0000010400000103 0000010200000101 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=6428000064280000 6428000064280000 6428000064280000 6428000064280000 6428000064280000 6428000064280000 6428000064280000 6428000064280000 info registers vcpu 2 CPU#2 RAX=0000000000000002 RBX=ffffffff8e7e5ec0 RCX=ffffc90029801000 RDX=0000000000000000 RSI=0000000000000001 RDI=ffffffff8c1e8f80 RBP=ffffffff8282e592 RSP=ffffc9000c6be740 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffff8880275ca540 R13=dffffc0000000000 R14=0000000000000202 R15=0000000000000001 RIP=ffffffff81e48f17 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880972e7000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000004cac8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000011400000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000003 RBX=ffff88802b4284c0 RCX=ffffc9002883c000 RDX=0000000000000000 RSI=ffffffff81f46062 RDI=ffff88802b43c3c0 RBP=ffff88802b4284d0 RSP=ffffc900006ff4b8 R8 =ffff88802b43b600 R9 =fffffbfff21b7b6f R10=ffffffff90dbdb7f R11=ffff88802b43b6f8 R12=ffff88802b43c3c0 R13=00000000003062fc R14=dffffc0000000000 R15=0000000000000000 RIP=ffffffff81f4609d RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880973e7000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000008014c018 CR3=000000004cac8000 CR4=00352ef0 DR0=0000000000000008 DR1=0000000000000007 DR2=0000000000000004 DR3=0000000000000008 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f2b6e68d7b73f7ba 97cc9ddec39491fb ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3731919f85548898 5fc2155e263662f6 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ac315655dced4c2d fde7db5a4c5ddafa ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 466e07a5fd326023 5f9524db99ce129d ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000016c0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 034afda8034b0f0f 01000000034b0f12 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 034afe5f39a40080 c63c0080034b0f2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 034b0a61d8600000 5e140000c9800000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7c38008001000000 0100000092360000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9cbff4e8a746338a 70064fd5addfc36b ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b152a57511bec2ad 4ad94bd5938c906e ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000