last executing test programs: 3m15.642582202s ago: executing program 1 (id=2): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x2000008, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) futex(0x0, 0x109, 0x0, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r3, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036887fbd52a5e1fcea07"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=ANY=[@ANYBLOB="48000000110839042abde4000000008000100000", @ANYRES32=r4, @ANYBLOB="03000000c01006002800128008000100736974001c00028006000d000740000008000300ac1414bb08001400ff010000"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) r5 = openat$dir(0xffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x2) mount_setattr(r5, &(0x7f00000005c0)='./file0\x00', 0x1000, &(0x7f0000000600)={0x0, 0x0, 0x160000}, 0x20) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, 0x4}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x13, 0x8, 0x5, 0xffff, 0x10, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x1}, 0x50) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r10, r10, 0x1f) capget(&(0x7f0000000640)={0x20080522, r10}, &(0x7f0000000680)={0x5, 0x4, 0x0, 0x9b, 0x1, 0x401}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x4, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x0, 0x6, 0x2}}) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@int={0xd, 0x0, 0x0, 0x1, 0x0, 0xc, 0x0, 0x2}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000340)=""/33, 0x2c, 0x21, 0x1, 0x9, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x4, 0xb406, 0x7, 0x800, r9, 0x46, '\x00', r11, r12, 0x3, 0x4, 0x2, 0x1}, 0x50) ioctl$SIOCSIFHWADDR(r8, 0x89a1, 0x0) close(r7) 3m14.638139006s ago: executing program 1 (id=6): getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000001140)={{r2}, "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"}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000800)={0x0, @private, @multicast1}, &(0x7f0000000880)=0xc) ioctl$SNDCTL_SEQ_GETINCOUNT(r0, 0x80045105, &(0x7f0000000140)) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$ax25(0x3, 0x3, 0xc3) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r3 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r3, &(0x7f00000002c0)='./file1\x00', 0x6000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r3, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000240)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010101, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x8000000000002) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 3m13.496404335s ago: executing program 1 (id=8): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x100100, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000100)={0x0, 0x10}, 0x8) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000208000840000005003c0000000e0a01020000000000000000010000000900020073797a3200000000100003800600008008000180040002800900010073797a3000000000140000001000010000000000000000000000000a"], 0xc8}}, 0x0) recvmmsg(r2, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='selinux_audited\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) r6 = openat$ocfs2_control(0xffffff9c, &(0x7f00000001c0), 0x8000, 0x0) close(r6) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x27) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4c23, 0x0, @private1}], 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000780), 0x0, 0x3404c8d4) dup(0xffffffffffffffff) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000000)={0x0, 0x0, 0xd, 0xfffffffffffff9e4}) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000180), 0x4) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r7) 2m58.180692048s ago: executing program 32 (id=8): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x100100, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000100)={0x0, 0x10}, 0x8) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000208000840000005003c0000000e0a01020000000000000000010000000900020073797a3200000000100003800600008008000180040002800900010073797a3000000000140000001000010000000000000000000000000a"], 0xc8}}, 0x0) recvmmsg(r2, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='selinux_audited\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) r6 = openat$ocfs2_control(0xffffff9c, &(0x7f00000001c0), 0x8000, 0x0) close(r6) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x27) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4c23, 0x0, @private1}], 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000780), 0x0, 0x3404c8d4) dup(0xffffffffffffffff) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000000)={0x0, 0x0, 0xd, 0xfffffffffffff9e4}) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000180), 0x4) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r7) 49.580236676s ago: executing program 3 (id=400): getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000001140)={{r2}, "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"}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000800)={0x0, @private, @multicast1}, &(0x7f0000000880)=0xc) sendmmsg(r2, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="861c6018941173b57b5573e341a4de271a7702d35ca3de77894f4a58dabb", 0x1e}, {&(0x7f0000000500)="898f4cf4fdcc0b516167531815608f2877271d90f037fd59e8764f78f75f0381eac699272d5c2db1a9b7890bbd3ad5b5a857a29ef55fcdd5ad643c5849d64c0c8260169dcae2b7dbaa88abce8f66044f140af6f757d0f4baceccbdd17ee512846ffff54607286c6bc89df0071fcd8077a1e99b15a6c45b55b214f599b78451d5d23ef4fa3e6c8f2a9128bed4bfe0b89719c67bd803ef6ea2f110c187b94c40a76d1bf1", 0xa3}], 0x2, &(0x7f0000000640)=[{0xe4, 0x10b, 0xcf1e, "fa00f721c7ac20ceea2884c589982364c0ecca2397ec862dd13ebd8898b18ac8d9a7a3e9168f03597bfe4ca06a3cc763746e1f1b43f34d587607fa7993390cdb54b89b39a6d3936557f4c9d18f089ee9295fdcad99a49732431f2f16bfc5f05ba264a972a2c7f033f7695670b776ae30bec30a6b44940ef8dc4f40bba920691bf05c6dd3a4378e5c0a5cb8654f927dcc2dce2d4494eab022b128e4341fe2ceb79431b836124b73b6e3e0a6c3baafdc42df95bf0da69fbccce2cd3633d6ed7b10d3404edd1f06a22ada4655e86a49fba60a464b19363792"}, {0x84, 0x118, 0x2e2, "4a68403dde786f1dc50357e4603b3ecfea4fd6ab541eb8a2ee043594ebc77b7e923dabfc0a2a41d6dd3191197605d0cc85b196589577991ba619105c29c5d434016d61781473314efc0c0e42816315e465d4a94f8e0b532118d195f137ae638804b3a2ee17ec995d5769a4b5bdf58a2d28e724f3f27f"}], 0x168}}, {{&(0x7f0000000440)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x7fffffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000005c0)="f23021e8d0b9fafbd55d1cc2b57a8fa6d8c2478779333a31", 0x18}], 0x1}}, {{&(0x7f00000008c0)=@ll={0x11, 0xf7, r3, 0x1, 0x6, 0x6, @remote}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000940)="84f617b42ce54f21fa6f14a86c01f1f895a9115f65b0fbfd3f0ce8f106d81bf87e7290dcabf2794fdcbda84efe9c9c49fef637cfa4e3c78428bbfaaeb454f60c9ba821549166a228a1e44b3dbd5733441b8245caca8ba1e2bf784638ddd25a82e07a4b4ddde74d6b599b144ec8b9ef655dbf422058cc0b4b1577e51131f00607f5265c639bcfb2c13d0a07f0401d6c8d057683a960cdcedf7757419fb5b51751da49b50e1c7745", 0xa7}, {&(0x7f0000000a40)="3f9453b3c9632a6da01b348e366c906f21f95b2af33db013551fd7a28f441d773718bcf13c36246f4047c1f4756996289e0a332bdf7e96daecd12704020639050c18808752f121261e088bc8e08c33b4c77a302d1126e18e995cf26ce3c1939908ff908348333c93eef4036da1f841638b0505dad4962f23051bbb1d154a90bdd916bf331dafe32e95420490269932aa753c80b7d2af9572ad1bb04aa6823405fdd94474619cac58740322c89a78151df41f7d0c35534abdad20", 0xba}], 0x2, &(0x7f0000002140)=ANY=[@ANYBLOB="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"], 0x548}}], 0x3, 0x400d0) ioctl$SNDCTL_SEQ_GETINCOUNT(r0, 0x80045105, &(0x7f0000000140)) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$ax25(0x3, 0x3, 0xc3) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r4, &(0x7f00000002c0)='./file1\x00', 0x6000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r4, &(0x7f0000000100)='./file1\x00', r4, &(0x7f0000000240)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010101, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x8000000000002) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 48.258691026s ago: executing program 3 (id=404): r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000000)=0x1, 0x4) (async) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000000)=0x1, 0x4) (async) bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e20, 0x5, @private1, 0xe}, 0x1c) (async) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e20, 0x5, @private1, 0xe}, 0x1c) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003080)={0x28, r5, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) (async) syz_open_dev$sg(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) 48.087346066s ago: executing program 3 (id=405): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = fsopen(&(0x7f0000000000)='cifs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r2 = io_uring_setup(0x1694, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x11a}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x201, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0201}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 47.640873493s ago: executing program 3 (id=407): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000000000000000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mkdir(&(0x7f0000000000)='./file0/file0/file0\x00', 0x122) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000046d100180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000008208500000073000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x10000000, {0x40, 0xd08, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000440)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) setresgid(0xee01, 0x0, 0x0) r5 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r6) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r5, &(0x7f00000000c0)='auxv\x00') ioctl$TIOCGPTPEER(r4, 0x932, 0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) arch_prctl$ARCH_GET_GS(0x1004, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000002380)={{0x0, 0x1}, 0x0, 0xbf, 0x2, {0x4, 0x1}, 0x3, 0x800}) 47.133124292s ago: executing program 3 (id=409): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400040}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x0, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffffa, 0x32}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4000800) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 46.705428554s ago: executing program 3 (id=411): getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000001140)={{r2}, "02bc342a2a3ec03844512a628377df0034a83f7e5f215f4eba953944651687c56ef054c77e7d81e577f348b557ff03d7b6cc0f8e4aacf5369f7d224e881abe4958a5bab57fbb3636476b1ec7c9827e466e3a1d94ea22aa2de8fb2b891d635943f28323c059e626b7d141e3d65911812332f3aca2f5ef96c688c3fe630f9a3d1a2a897c7f350d900215212313b329e58ac4f33c52c84f5965baba712ec9f336ad60e8cb2e6ca1ea220f36ce0b96e2ce4c75934c9757d74dda281101e98566f270750d8110706642628b61d13b41349d2d8faead9e49e177335661df3736c5a3dbe0e613e4563a6870cee371946c4d4cfa409b43dfa7af7a5a827c813e98d083c6fcaf152b67d9f476173633240e1764524293307bef06e2f1b60f3a3b3e062ce8f1d5317f5f1af5a75be7cf68c48a005b2b75fc5af5d54208fbbcfa2cf31dab85cd40a6d530a706b4bd233bb5ee4420056e359893d716450a5a9abc836935d0771e6934788990f3681e073e69830727718895245bff79529a9dc16b94634945443ed99125d0916988f40315b9022240a2fa6ec89c14ba7ca6e59ff5bb921f0480c5e5ef9e4e8f833d4abd1cdcacbd474d87e5991f1223d9b1c54bca1622e5b92818847a16c9fab2eb06136aa33029a9846e3fe03d763ad51107a8cb7f0b8cb8bebcf42d0b407937626a8168adbf8adf25c85bcc08656390bb1406d53e7f6243bd530d8fb8b9eab5c985643edfe75c011b702f8a53a590b3ecfa8ad2e1f6ff97647291cafc5a12b1ee79b7013fc1539da33681195af5f55e331f9a2aa55cf9b1bbcd253ff6250ef8dc0bfc1a9500a13a00d90b37bc897e6be811f9e87f4fab0723c2a35fc2d2974e895b84fd40fb483504205de79399e9dfaefe574ca3800bcd9561dd5ca2d8815fc98ee676c2946621fc104e67dcd1c5c7090516519ed4c16b9847b52447574af0c4120366bf3d116673bbe27ad9c1f9bc6c3975473940060139d0aaa6f20539dbabf2a8212428a308ec1cc5266f0660c13aaf0476793d6d44d40debbf154a063deb322bbb7ea9f0177db2f947f65b99def11ddbaf31a0f537400d938938a950869ff2e2116b204dafb9519fa5e78f06c5ddda874dc445dacd7729f13ffbbae8f33f4dcbc61316932d27131f2f13ddd245084f59ee3705642e7e8a4a6670955e662c16902f97f2a8f4f1561004e6a59f687b598d3ab266836736afef379e967df5831e451df797b4fe4ab7f21e4fc9b489059995c03b46273127da52dd47ae8f903a96cdc0102e8066f80b5e3852781a895b8588136adf3fecef3db7239884d87a852c41cc40e2f5c7dacedf49fb5d9d554b5ece87cff40d8984dcef5b0469b561db7377dfca4167788acff405a66c57d3786c5d3d846e6ee847c6aeebf6006fe8b53ec4be799c7d103f43d687d3d0c7ad238a28e64e9ead70dc63a1989685dfd728af39b85cefe743be26a7b29c5c83014bebbdf93451da76c83dcbb66fe141f2cbf0442a7deeef5e3bb7092fb6358ff9fbe8184bd1a0ce52ea1b402b708c1434b089b706aec1e48af6d95652ccd325197a33ecceaffa366647ffe6c8bed15a68eedf976c210e689fd8663942dc2f4a69f00df02614f62e1970db81ef79617ba202bc9bd5828ee4cb68a8f4acd23c0dc3b0d5c0721d0adf3b331d4a545d6071f695579f1d130c1a3fc6fa7473ac17efc08b7f15c01cebea19897d2da21b92ac27b0cf5b0f83182912a9e2c482f5ed49635f33c01b5fd50efdd9672c97de27cb21615ee320d1eb8f6af9952e8abdbcc878eecc8f62933a071657f5671ddf1ec08bbf27f1e7245f04212bbfdd7b598f424b109ef673f863f0211369cd99b8d5372ef4f40ce121d759c6938e633abccfa27ca1cf67be67eb32c46c26761f7abd737b2c26a397f4c2b84c04e46337860a6b06528c39e9a6a4f925978a638ffc1c5ac50c5d4558effda9efb7e7a4cd58c5963843752c5bb2fbdcdfc8caa535fcc42289b7bbd4043ca724562c8f0b94cd4ba784f25babd3dae6bd6256b20e644230a33ad940045864c5fed192442231fafcc8ec5022915284977450efb531130a2a0d73dfd09c0c58d0ea34d07c9b7c6cd01bb1c046909655ab4950edfcbf0b31847e83fa2cf3d049e03c0708389f7e0ff8b127a7ea714eff11d77ea7b0b8c70e95374ea53098cf448801e1e4373e627b7c730bea8eafc0db32e888fe1b1ae1e50ef01ebf887dc0b460db7af1086e73050fa9b09b5231914f8fc0a18d42795a3b2cb858ba668de15ae5fb720742ae49ef416a9605540df235a23294afa67df9bd66e294b58b4595d88ee7b84c3e3dffec801ea5b0c95679a9c973722c839d13ae99b7612988a0aa49a25a1797d1f95c6a8cbe1e71d007a5a50bfa0f716dbb7c21e280580daa615995bf70b43bac05da38674a1d6dc60fb4529a2c45d1780de0025565b6cbe78fb361ec364cb728f80d425494fd81cff7b00387e95a10526b15dee8731e6d5b1b12253976b2f8e1a891483e472e59bb9f11db281b7025528cfcde80ef467e4608855a19519d791c2465defe56c2cdbaf1b4bb2fa18b5f12d959f528a323db469d32d90445926bc39e0fcf2e7250517fa3dc96c25db5e21e9f4c9bd1300b0f7f72037cdef9b936bbcc361704a5a7244ac8211b62fc53676f608e67b0cd29bef63b325239c35e538d21d68800b1f332abfe3ef9c9b0fb2119d8f5d423af129abdaa77510390070090be5ae351165930904708967c67c63e0df07319de08ea441567fb675d57fef4d4a441868ce8d2e4469308fd8ee4083e9e3c02f7922d567bb21efeb1fb8ae32c754565a5988ea82cf84342af3dccff165d5df4d265de4bb955d4335827dd16ea1be73860856c6579182ff5f8e29ccd640745ebc2eb78216f5e1303d7d9faaeb5478487f8a76d3f6910998c1dce6a4053ab2f2e8fec7235936ac64985a5637207fb8e462a11d9646a6bddf2dd2354328e2acecf944db26c7d4550edbdd3ca65ed819caf454cf8d7f581cd7214545da169ef82dbcc4e524ad8bc1a0da91d44e08ba5d2dc0bdabbb8b86db716643ac2c27a6d6f06e5791e707baf6cb39ed443a103908dde047ed44a65cb4ff90611a41d4979ebfa879ca9d1c0be71a2ed92ee6f08ed56dfb583750e3f52089c9d9af107a571cd62a868219e5d2adc6c96e54730477b9e28821538de1fd12cc7c8246eb767ca89f4ff5dfab731cca38de5095563d00fb9c88190834f1cc0fb793f53374f84a597081ae0dd790fda72c4b56996d87a6ae27d520c09e6e77e12659e031ecb26c22886dd5d5e3927f9c4fa79541a21694bb8718224eaf4058a1bc9d06f0073c473106c2e9d2f47c0857e022c54d54c1337bc170edc7b0b271c562b16d943efb87a7e7b2f3592771efd06278b65f2d7bd8d5461da22112005c971d53c4ba8a3f264ffc704affe97fe559f901aa9cd2d85187d3e3458ca6fef1f8c0276fb8a25bfa2dc28b03589e3c9d7ceccd800cadbd916b003fe2c43ce1b88df8d05e9e555de697bbe8f83ad33047a845ad661f94595c6485662595c53495c68d63547e0694a2070734c3128d29bc9487dcb592b6e4725246d4615b72b4778d439094cd09371c183d2a7897ac76583bc62d797512b2328e71e9503b2c2c0a3e270539972d576b66cd90f80628499067dc36128e74b416c27ce1f6b068a316a3b73374553317ec7408bd6606fa349d9be74f1ae85eb8fabab70f29a02a860ef7b76e5c821395458237e0286feeb693b202d041087f9373c0177239c74fb88b78924f6f6a64582ecbbe44e4d58a48bcb13f67ba0beb09f81ab29d9de136803db487cb36fdc5c5854e7128ce6c547b5400c49d6406077a75c522274a80d7e65964ae32035a234ca5bf17c5151771b8a359689aa49ca70fbb04587984b3b65a0bc91e894992373b305cc2ed080cad703b60f06ab78e9e3f9d7fe75f1217c8d9debc24f8e6f7775e8331fac09f0e677e9b91bc1cbf7bcd881c8a139561c97ba1a6d2059fdc99ef79df18a8f87b6a110ec9d0f79559acaba5015dfefef475e8155c5ce46e8cfdf4e15cb61262b1a223756d5f8207d8ca92340388fc11b59b08b644453fdc729fd099027b4c650cf141283d3b430e07ca09ba336d6758a0c6de6697ca0be3023dcadbb5fc3dfd581d59cf44cb2027811180f903b5e3e0838415d2ea695e4657b138323afeed9c60826d4ee81de75d089bcef94146bf5ee08f2ed630b6b22221a2f18f226d8815707202c7b6cbed549120d5fc21fbdcc9f62727de5fb0bd3d553edbdd5fb78493697e339bb3f4dac9262c7a88b304401869af0baf690b98501359ea986d6ffaeaa7a0546656cb79a50594b508b99361dd94dbe0200c94620abb14d9a41fd8631bc044f9c359ec7f6bbf60e34bde548ede9e30aeb6c547445c1350414dac1882c21171afa4b9e43999f143e27733a38a73ce3456ab02b0e016d4d201be5c40b374b9621160f20a72a941954213278454aca0392d5b6664307ca53511751100fe6f6ec9006ece73f01e6186e1d1ae22de34adc0b070730c0e948cb4297d6d1c6359e78db8a37ec1b8692eb66a22fcf20e074c9b187c469f8c33ef2c21048b7926e7cecf35b2883396f32aa136655f49dfb1ecc03a8e30590b5ccef588f4c7e040b1af707fd48f8f2877393048d3e8124512749ffe71504bc011b6ebf1ffc7343d0e84ce1a5fa03da8fc561ad4505d8f87457b8f86addaf4fd8d0f28e15ac7d16886f516948389753f16a7622494b86841e7df76af059c6875c8fdf6ac1398a13186db3bb0da17c5a1fbeaa19fdecd936794d9da5b7e50eeed2091789265a93e64297235a2f23cceddaf92926a2e386fd6153e2503c832f7aa4f33210f213bd08cd006b137e73c6e099a1950da22d31fffe2d546ee6ccba2d28d1c56683e97b0959fd6c1462dcff513d76f2ef83cf6692e18e4e0440cf8aeae2af8ff4f7c9e39671b089dc355a789ad940df8d66461e2d1d7ae9d25dd7c8416a930f57cec619d3737df468f8f5960808c7e4fee9caaabc0c435b5535a4dedc57038617273c2c5beb5a4e1eed68f3798d8ad85e5334686931d8da3945b06525fda9f57a9f6cdd5a4f7b78e473d69b8599ebdd5150356a49b5ebe1ce4e44446a29455833f844c4d0bab56131252fa7731abf5788f6f27d8b9ab25d6eb29e5a025b555c53a0d3eb87e1f352e30b249da93e2b546814c091b1bf8f55255bf96aec988b47c4689f69b8b966a37f85db4b26369b0267cdd85baaf1b00b5780d2e80ba1cfa6a9e864b55d2016474eb9840f54cd3d0fecd9bd2222453d42d6c58deb01bf8a970dd447da9ddd78b064136077b57efb04b127700f2e6074425f939c9e7f652c92f7df76560523090af0bf4417ca2882012d72b1f4fc1d4f88fb7028b58050d3097cd4ba90df5a851fe68c22bf646f426a2946f75c0ccfb50cd5e25761b7b77f4de8a60ac7d6e61ecc3561c9ead558a7bc5cd09409d9781b7e21c87866515288436d9ece397563adf2de174736cbddbd49e571796916f804b548462aeca88f897e778569354d74e6930268b578e9c8bd03a25978cc60df99ebbcc0ba74757930b96a1592d6192010f89e5ef24c5c570ead9010ee248835b0d093d84c63a8b61505c3a058eb7318a56c19f8fc2d07c94ce8a396c19a2eaabebcff34c772e15de4c736476ca464b9689771fa917ac5fae9b03af15b443cf1c0c8ede843db1ba9b10cf6c4e478dc2ecc87c0d3597c3721fa3a3524107555337878f1bc79"}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000800)={0x0, @private, @multicast1}, &(0x7f0000000880)=0xc) sendmmsg(r2, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="861c6018941173b57b5573e341a4de271a7702d35ca3de77894f4a58dabb", 0x1e}, {&(0x7f0000000500)="898f4cf4fdcc0b516167531815608f2877271d90f037fd59e8764f78f75f0381eac699272d5c2db1a9b7890bbd3ad5b5a857a29ef55fcdd5ad643c5849d64c0c8260169dcae2b7dbaa88abce8f66044f140af6f757d0f4baceccbdd17ee512846ffff54607286c6bc89df0071fcd8077a1e99b15a6c45b55b214f599b78451d5d23ef4fa3e6c8f2a9128bed4bfe0b89719c67bd803ef6ea2f110c187b94c40a76d1bf1", 0xa3}], 0x2, &(0x7f0000000640)=[{0xe4, 0x10b, 0xcf1e, "fa00f721c7ac20ceea2884c589982364c0ecca2397ec862dd13ebd8898b18ac8d9a7a3e9168f03597bfe4ca06a3cc763746e1f1b43f34d587607fa7993390cdb54b89b39a6d3936557f4c9d18f089ee9295fdcad99a49732431f2f16bfc5f05ba264a972a2c7f033f7695670b776ae30bec30a6b44940ef8dc4f40bba920691bf05c6dd3a4378e5c0a5cb8654f927dcc2dce2d4494eab022b128e4341fe2ceb79431b836124b73b6e3e0a6c3baafdc42df95bf0da69fbccce2cd3633d6ed7b10d3404edd1f06a22ada4655e86a49fba60a464b19363792"}, {0x84, 0x118, 0x2e2, "4a68403dde786f1dc50357e4603b3ecfea4fd6ab541eb8a2ee043594ebc77b7e923dabfc0a2a41d6dd3191197605d0cc85b196589577991ba619105c29c5d434016d61781473314efc0c0e42816315e465d4a94f8e0b532118d195f137ae638804b3a2ee17ec995d5769a4b5bdf58a2d28e724f3f27f"}], 0x168}}, {{&(0x7f0000000440)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x7fffffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000005c0)="f23021e8d0b9fafbd55d1cc2b57a8fa6d8c2478779333a3176306722ee20aba5", 0x20}], 0x1}}, {{&(0x7f00000008c0)=@ll={0x11, 0xf7, r3, 0x1, 0x6, 0x6, @remote}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000940)="84f617b42ce54f21fa6f14a86c01f1f895a9115f65b0fbfd3f0ce8f106d81bf87e7290dcabf2794fdcbda84efe9c9c49fef637cfa4e3c78428bbfaaeb454f60c9ba821549166a228a1e44b3dbd5733441b8245caca8ba1e2bf784638ddd25a82e07a4b4ddde74d6b599b144ec8b9ef655dbf422058cc0b4b1577e51131f00607f5265c639bcfb2c13d0a07f0401d6c8d057683a960cdcedf7757419fb5b51751da49b50e1c7745", 0xa7}, {&(0x7f0000000a40)="3f9453b3c9632a6da01b348e366c906f21f95b2af33db013551fd7a28f441d773718bcf13c36246f4047c1f4756996289e0a332bdf7e96daecd12704020639050c18808752f121261e088bc8e08c33b4c77a302d1126e18e995cf26ce3c1939908ff908348333c93eef4036da1f841638b0505dad4962f23051bbb1d154a90bdd916bf331dafe32e95420490269932aa753c80b7d2af9572ad1bb04aa6823405fdd94474619cac58740322c89a7815", 0xaf}], 0x2, &(0x7f0000002140)=ANY=[@ANYBLOB="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"], 0x548}}], 0x3, 0x400d0) ioctl$SNDCTL_SEQ_GETINCOUNT(r0, 0x80045105, &(0x7f0000000140)) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$ax25(0x3, 0x3, 0xc3) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r4, &(0x7f00000002c0)='./file1\x00', 0x6000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r4, &(0x7f0000000100)='./file1\x00', r4, &(0x7f0000000240)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010101, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x8000000000002) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 46.314416261s ago: executing program 33 (id=411): getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000001140)={{r2}, "02bc342a2a3ec03844512a628377df0034a83f7e5f215f4eba953944651687c56ef054c77e7d81e577f348b557ff03d7b6cc0f8e4aacf5369f7d224e881abe4958a5bab57fbb3636476b1ec7c9827e466e3a1d94ea22aa2de8fb2b891d635943f28323c059e626b7d141e3d65911812332f3aca2f5ef96c688c3fe630f9a3d1a2a897c7f350d900215212313b329e58ac4f33c52c84f5965baba712ec9f336ad60e8cb2e6ca1ea220f36ce0b96e2ce4c75934c9757d74dda281101e98566f270750d8110706642628b61d13b41349d2d8faead9e49e177335661df3736c5a3dbe0e613e4563a6870cee371946c4d4cfa409b43dfa7af7a5a827c813e98d083c6fcaf152b67d9f476173633240e1764524293307bef06e2f1b60f3a3b3e062ce8f1d5317f5f1af5a75be7cf68c48a005b2b75fc5af5d54208fbbcfa2cf31dab85cd40a6d530a706b4bd233bb5ee4420056e359893d716450a5a9abc836935d0771e6934788990f3681e073e69830727718895245bff79529a9dc16b94634945443ed99125d0916988f40315b9022240a2fa6ec89c14ba7ca6e59ff5bb921f0480c5e5ef9e4e8f833d4abd1cdcacbd474d87e5991f1223d9b1c54bca1622e5b92818847a16c9fab2eb06136aa33029a9846e3fe03d763ad51107a8cb7f0b8cb8bebcf42d0b407937626a8168adbf8adf25c85bcc08656390bb1406d53e7f6243bd530d8fb8b9eab5c985643edfe75c011b702f8a53a590b3ecfa8ad2e1f6ff97647291cafc5a12b1ee79b7013fc1539da33681195af5f55e331f9a2aa55cf9b1bbcd253ff6250ef8dc0bfc1a9500a13a00d90b37bc897e6be811f9e87f4fab0723c2a35fc2d2974e895b84fd40fb483504205de79399e9dfaefe574ca3800bcd9561dd5ca2d8815fc98ee676c2946621fc104e67dcd1c5c7090516519ed4c16b9847b52447574af0c4120366bf3d116673bbe27ad9c1f9bc6c3975473940060139d0aaa6f20539dbabf2a8212428a308ec1cc5266f0660c13aaf0476793d6d44d40debbf154a063deb322bbb7ea9f0177db2f947f65b99def11ddbaf31a0f537400d938938a950869ff2e2116b204dafb9519fa5e78f06c5ddda874dc445dacd7729f13ffbbae8f33f4dcbc61316932d27131f2f13ddd245084f59ee3705642e7e8a4a6670955e662c16902f97f2a8f4f1561004e6a59f687b598d3ab266836736afef379e967df5831e451df797b4fe4ab7f21e4fc9b489059995c03b46273127da52dd47ae8f903a96cdc0102e8066f80b5e3852781a895b8588136adf3fecef3db7239884d87a852c41cc40e2f5c7dacedf49fb5d9d554b5ece87cff40d8984dcef5b0469b561db7377dfca4167788acff405a66c57d3786c5d3d846e6ee847c6aeebf6006fe8b53ec4be799c7d103f43d687d3d0c7ad238a28e64e9ead70dc63a1989685dfd728af39b85cefe743be26a7b29c5c83014bebbdf93451da76c83dcbb66fe141f2cbf0442a7deeef5e3bb7092fb6358ff9fbe8184bd1a0ce52ea1b402b708c1434b089b706aec1e48af6d95652ccd325197a33ecceaffa366647ffe6c8bed15a68eedf976c210e689fd8663942dc2f4a69f00df02614f62e1970db81ef79617ba202bc9bd5828ee4cb68a8f4acd23c0dc3b0d5c0721d0adf3b331d4a545d6071f695579f1d130c1a3fc6fa7473ac17efc08b7f15c01cebea19897d2da21b92ac27b0cf5b0f83182912a9e2c482f5ed49635f33c01b5fd50efdd9672c97de27cb21615ee320d1eb8f6af9952e8abdbcc878eecc8f62933a071657f5671ddf1ec08bbf27f1e7245f04212bbfdd7b598f424b109ef673f863f0211369cd99b8d5372ef4f40ce121d759c6938e633abccfa27ca1cf67be67eb32c46c26761f7abd737b2c26a397f4c2b84c04e46337860a6b06528c39e9a6a4f925978a638ffc1c5ac50c5d4558effda9efb7e7a4cd58c5963843752c5bb2fbdcdfc8caa535fcc42289b7bbd4043ca724562c8f0b94cd4ba784f25babd3dae6bd6256b20e644230a33ad940045864c5fed192442231fafcc8ec5022915284977450efb531130a2a0d73dfd09c0c58d0ea34d07c9b7c6cd01bb1c046909655ab4950edfcbf0b31847e83fa2cf3d049e03c0708389f7e0ff8b127a7ea714eff11d77ea7b0b8c70e95374ea53098cf448801e1e4373e627b7c730bea8eafc0db32e888fe1b1ae1e50ef01ebf887dc0b460db7af1086e73050fa9b09b5231914f8fc0a18d42795a3b2cb858ba668de15ae5fb720742ae49ef416a9605540df235a23294afa67df9bd66e294b58b4595d88ee7b84c3e3dffec801ea5b0c95679a9c973722c839d13ae99b7612988a0aa49a25a1797d1f95c6a8cbe1e71d007a5a50bfa0f716dbb7c21e280580daa615995bf70b43bac05da38674a1d6dc60fb4529a2c45d1780de0025565b6cbe78fb361ec364cb728f80d425494fd81cff7b00387e95a10526b15dee8731e6d5b1b12253976b2f8e1a891483e472e59bb9f11db281b7025528cfcde80ef467e4608855a19519d791c2465defe56c2cdbaf1b4bb2fa18b5f12d959f528a323db469d32d90445926bc39e0fcf2e7250517fa3dc96c25db5e21e9f4c9bd1300b0f7f72037cdef9b936bbcc361704a5a7244ac8211b62fc53676f608e67b0cd29bef63b325239c35e538d21d68800b1f332abfe3ef9c9b0fb2119d8f5d423af129abdaa77510390070090be5ae351165930904708967c67c63e0df07319de08ea441567fb675d57fef4d4a441868ce8d2e4469308fd8ee4083e9e3c02f7922d567bb21efeb1fb8ae32c754565a5988ea82cf84342af3dccff165d5df4d265de4bb955d4335827dd16ea1be73860856c6579182ff5f8e29ccd640745ebc2eb78216f5e1303d7d9faaeb5478487f8a76d3f6910998c1dce6a4053ab2f2e8fec7235936ac64985a5637207fb8e462a11d9646a6bddf2dd2354328e2acecf944db26c7d4550edbdd3ca65ed819caf454cf8d7f581cd7214545da169ef82dbcc4e524ad8bc1a0da91d44e08ba5d2dc0bdabbb8b86db716643ac2c27a6d6f06e5791e707baf6cb39ed443a103908dde047ed44a65cb4ff90611a41d4979ebfa879ca9d1c0be71a2ed92ee6f08ed56dfb583750e3f52089c9d9af107a571cd62a868219e5d2adc6c96e54730477b9e28821538de1fd12cc7c8246eb767ca89f4ff5dfab731cca38de5095563d00fb9c88190834f1cc0fb793f53374f84a597081ae0dd790fda72c4b56996d87a6ae27d520c09e6e77e12659e031ecb26c22886dd5d5e3927f9c4fa79541a21694bb8718224eaf4058a1bc9d06f0073c473106c2e9d2f47c0857e022c54d54c1337bc170edc7b0b271c562b16d943efb87a7e7b2f3592771efd06278b65f2d7bd8d5461da22112005c971d53c4ba8a3f264ffc704affe97fe559f901aa9cd2d85187d3e3458ca6fef1f8c0276fb8a25bfa2dc28b03589e3c9d7ceccd800cadbd916b003fe2c43ce1b88df8d05e9e555de697bbe8f83ad33047a845ad661f94595c6485662595c53495c68d63547e0694a2070734c3128d29bc9487dcb592b6e4725246d4615b72b4778d439094cd09371c183d2a7897ac76583bc62d797512b2328e71e9503b2c2c0a3e270539972d576b66cd90f80628499067dc36128e74b416c27ce1f6b068a316a3b73374553317ec7408bd6606fa349d9be74f1ae85eb8fabab70f29a02a860ef7b76e5c821395458237e0286feeb693b202d041087f9373c0177239c74fb88b78924f6f6a64582ecbbe44e4d58a48bcb13f67ba0beb09f81ab29d9de136803db487cb36fdc5c5854e7128ce6c547b5400c49d6406077a75c522274a80d7e65964ae32035a234ca5bf17c5151771b8a359689aa49ca70fbb04587984b3b65a0bc91e894992373b305cc2ed080cad703b60f06ab78e9e3f9d7fe75f1217c8d9debc24f8e6f7775e8331fac09f0e677e9b91bc1cbf7bcd881c8a139561c97ba1a6d2059fdc99ef79df18a8f87b6a110ec9d0f79559acaba5015dfefef475e8155c5ce46e8cfdf4e15cb61262b1a223756d5f8207d8ca92340388fc11b59b08b644453fdc729fd099027b4c650cf141283d3b430e07ca09ba336d6758a0c6de6697ca0be3023dcadbb5fc3dfd581d59cf44cb2027811180f903b5e3e0838415d2ea695e4657b138323afeed9c60826d4ee81de75d089bcef94146bf5ee08f2ed630b6b22221a2f18f226d8815707202c7b6cbed549120d5fc21fbdcc9f62727de5fb0bd3d553edbdd5fb78493697e339bb3f4dac9262c7a88b304401869af0baf690b98501359ea986d6ffaeaa7a0546656cb79a50594b508b99361dd94dbe0200c94620abb14d9a41fd8631bc044f9c359ec7f6bbf60e34bde548ede9e30aeb6c547445c1350414dac1882c21171afa4b9e43999f143e27733a38a73ce3456ab02b0e016d4d201be5c40b374b9621160f20a72a941954213278454aca0392d5b6664307ca53511751100fe6f6ec9006ece73f01e6186e1d1ae22de34adc0b070730c0e948cb4297d6d1c6359e78db8a37ec1b8692eb66a22fcf20e074c9b187c469f8c33ef2c21048b7926e7cecf35b2883396f32aa136655f49dfb1ecc03a8e30590b5ccef588f4c7e040b1af707fd48f8f2877393048d3e8124512749ffe71504bc011b6ebf1ffc7343d0e84ce1a5fa03da8fc561ad4505d8f87457b8f86addaf4fd8d0f28e15ac7d16886f516948389753f16a7622494b86841e7df76af059c6875c8fdf6ac1398a13186db3bb0da17c5a1fbeaa19fdecd936794d9da5b7e50eeed2091789265a93e64297235a2f23cceddaf92926a2e386fd6153e2503c832f7aa4f33210f213bd08cd006b137e73c6e099a1950da22d31fffe2d546ee6ccba2d28d1c56683e97b0959fd6c1462dcff513d76f2ef83cf6692e18e4e0440cf8aeae2af8ff4f7c9e39671b089dc355a789ad940df8d66461e2d1d7ae9d25dd7c8416a930f57cec619d3737df468f8f5960808c7e4fee9caaabc0c435b5535a4dedc57038617273c2c5beb5a4e1eed68f3798d8ad85e5334686931d8da3945b06525fda9f57a9f6cdd5a4f7b78e473d69b8599ebdd5150356a49b5ebe1ce4e44446a29455833f844c4d0bab56131252fa7731abf5788f6f27d8b9ab25d6eb29e5a025b555c53a0d3eb87e1f352e30b249da93e2b546814c091b1bf8f55255bf96aec988b47c4689f69b8b966a37f85db4b26369b0267cdd85baaf1b00b5780d2e80ba1cfa6a9e864b55d2016474eb9840f54cd3d0fecd9bd2222453d42d6c58deb01bf8a970dd447da9ddd78b064136077b57efb04b127700f2e6074425f939c9e7f652c92f7df76560523090af0bf4417ca2882012d72b1f4fc1d4f88fb7028b58050d3097cd4ba90df5a851fe68c22bf646f426a2946f75c0ccfb50cd5e25761b7b77f4de8a60ac7d6e61ecc3561c9ead558a7bc5cd09409d9781b7e21c87866515288436d9ece397563adf2de174736cbddbd49e571796916f804b548462aeca88f897e778569354d74e6930268b578e9c8bd03a25978cc60df99ebbcc0ba74757930b96a1592d6192010f89e5ef24c5c570ead9010ee248835b0d093d84c63a8b61505c3a058eb7318a56c19f8fc2d07c94ce8a396c19a2eaabebcff34c772e15de4c736476ca464b9689771fa917ac5fae9b03af15b443cf1c0c8ede843db1ba9b10cf6c4e478dc2ecc87c0d3597c3721fa3a3524107555337878f1bc79"}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000800)={0x0, @private, @multicast1}, &(0x7f0000000880)=0xc) sendmmsg(r2, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="861c6018941173b57b5573e341a4de271a7702d35ca3de77894f4a58dabb", 0x1e}, {&(0x7f0000000500)="898f4cf4fdcc0b516167531815608f2877271d90f037fd59e8764f78f75f0381eac699272d5c2db1a9b7890bbd3ad5b5a857a29ef55fcdd5ad643c5849d64c0c8260169dcae2b7dbaa88abce8f66044f140af6f757d0f4baceccbdd17ee512846ffff54607286c6bc89df0071fcd8077a1e99b15a6c45b55b214f599b78451d5d23ef4fa3e6c8f2a9128bed4bfe0b89719c67bd803ef6ea2f110c187b94c40a76d1bf1", 0xa3}], 0x2, &(0x7f0000000640)=[{0xe4, 0x10b, 0xcf1e, "fa00f721c7ac20ceea2884c589982364c0ecca2397ec862dd13ebd8898b18ac8d9a7a3e9168f03597bfe4ca06a3cc763746e1f1b43f34d587607fa7993390cdb54b89b39a6d3936557f4c9d18f089ee9295fdcad99a49732431f2f16bfc5f05ba264a972a2c7f033f7695670b776ae30bec30a6b44940ef8dc4f40bba920691bf05c6dd3a4378e5c0a5cb8654f927dcc2dce2d4494eab022b128e4341fe2ceb79431b836124b73b6e3e0a6c3baafdc42df95bf0da69fbccce2cd3633d6ed7b10d3404edd1f06a22ada4655e86a49fba60a464b19363792"}, {0x84, 0x118, 0x2e2, "4a68403dde786f1dc50357e4603b3ecfea4fd6ab541eb8a2ee043594ebc77b7e923dabfc0a2a41d6dd3191197605d0cc85b196589577991ba619105c29c5d434016d61781473314efc0c0e42816315e465d4a94f8e0b532118d195f137ae638804b3a2ee17ec995d5769a4b5bdf58a2d28e724f3f27f"}], 0x168}}, {{&(0x7f0000000440)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x7fffffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000005c0)="f23021e8d0b9fafbd55d1cc2b57a8fa6d8c2478779333a3176306722ee20aba5", 0x20}], 0x1}}, {{&(0x7f00000008c0)=@ll={0x11, 0xf7, r3, 0x1, 0x6, 0x6, @remote}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000940)="84f617b42ce54f21fa6f14a86c01f1f895a9115f65b0fbfd3f0ce8f106d81bf87e7290dcabf2794fdcbda84efe9c9c49fef637cfa4e3c78428bbfaaeb454f60c9ba821549166a228a1e44b3dbd5733441b8245caca8ba1e2bf784638ddd25a82e07a4b4ddde74d6b599b144ec8b9ef655dbf422058cc0b4b1577e51131f00607f5265c639bcfb2c13d0a07f0401d6c8d057683a960cdcedf7757419fb5b51751da49b50e1c7745", 0xa7}, {&(0x7f0000000a40)="3f9453b3c9632a6da01b348e366c906f21f95b2af33db013551fd7a28f441d773718bcf13c36246f4047c1f4756996289e0a332bdf7e96daecd12704020639050c18808752f121261e088bc8e08c33b4c77a302d1126e18e995cf26ce3c1939908ff908348333c93eef4036da1f841638b0505dad4962f23051bbb1d154a90bdd916bf331dafe32e95420490269932aa753c80b7d2af9572ad1bb04aa6823405fdd94474619cac58740322c89a7815", 0xaf}], 0x2, &(0x7f0000002140)=ANY=[@ANYBLOB="c800000000000000090000007350f1baaa62f376deb8fa10672f3ace9dfd2198c8ead04e6d5b454d70bff057cbd2b0825472a1c5739ff2b8bb9bffcab0738ed3a1a3ab110970b8a486819c0370a24a86b592ebd1db16695927e8cad18ce5b48f66dd32799eb2a25d710f58115963e42a2ac4a816b2696ec61f7a40e9c75d58335b52ccd23bde5b00be580865bacedf50563799e10c6cf5be4cc539646b1cefb660a7c6e554674e83564e22228566ef4bcc4d939436e7da2083b4691c0d4ce8efd9cabdbbf7de00005c0000001501000006000000324e7c6d7fdd84bb16afab9ca89a2e0cd1feea050a76f9db04d17015f9fbc38fb968905be8f1a6776ab413894d408046ca840875d276b6331be693c40ca1e971e994e829c661206f04cafd5c1d13d00c1db31814ab252a9a216a034b000000c4000000080100000600000096acb12d31066da104604c138b491b109a437d5b9879206416257c138511b05c4aeb00b7810f7b3d197584622458424e8afe0862174fbe7f31d321ec87e52adf22498d468a13ac3d809ab1f3aa5fb0e4936479047f6dbdfeb4ddec01b21da2a98b32ac7fb76d70bd25023bc92414da9310171033511ac8ea57950d035420a1c0a988b0f0a60487517deccd3835064dc3797693fe3678a43d92db106a0bcb4fa3cb5cb9d9d85d540edd644260e6590112458b5c33f60a7a00640000000d01000003000000ee30727bfb2a637462fafe67587981b8100e8a6a2bf8732ecc3bf40534ee0278d931e557ae70f22b6b59474a0498998d548d09cd2ce8265bad6e695c46a0de221eecaae2811888235f84fce029b30d7d422db09e910000009400000008010000f8ffffff5d8d81b01d44a9c1777690c3d56740792a94c797cb3fdf3a4751845ce3883445056b6b006005a4fd545255d0d0521d3f53267eb175510f5a65273276302bfb445fc8ad4cd394cc7f1992b313a3f4654fa0e980dede6a89fbe89153817c8bb816b75a1f46d6e8a9ab3589cfa558995cce685683261c743a15c2459da3a035b588692f31159cc40000fc00000000000000010000006f56a9d1476c3ceeab66879eb34285061c08fd750f4d37659ea2ba7e060f32113d95e6af678366c56aa8e9d8482522d78ddaaad90f23dd4542c50b7f62c42d4e76e78208f3e7ac33c79a258bf4d3375f1f37b240da72409ba2b1d7543b3df6eaffd993a0e273edc0af66b4174586bbf7db509e6c493ba8924200987a409ac5c96ad45c99e0930e256423ad25d278b6f8f676e7f87fb562512938a6527ef6497b163f40d2aded49f1b73464cf3a04c325ae594665deb386ab6915b9e32ad2a415e3567e22f4ca6262739723c1d608c40849ac4576d7dd9529c939b1694dc9a686cc3c0fae8e4f12159711ab5458364400000100001701000003000000da8aa5f9562a7758c619e0d1e5ddb6af4160e27e3e3a35af18df59c1ee70c340285354d6e948d3ca957f907346c5dca3317dcbe811db82b409f1a0883fe0bbd4480d2c392f7f24ead366070c052e57c487154406e43ec6ab82f58adac5a25d5abe8783bd93a0bb054724dcf2d921968ad323525065a16b4df9d7faf95bf5a6d1bdf11f423ef9eac41744a3a0373e206b73e6f029b18cf034c31ba69d782d9c79f12d7a51bb9e12a664e0433e1f94856f16e389d3977f6cdb9a3b21fc61fbc633e4e503616b7ef35416d985b153e3b638c6a23b9448174ed65acc0ee6ca32a3db9e2bea59a147a44391fdc9d2bb66c96fcea41c006c0000001601000001000000a23055eb372a06cd88531a82ec7ae5f5810d5552a338f1cceaf6f67158cdf474d943054f2be1c15da8c43097aa32db3d7929daf783729badd1f17fff1f4e36cbdf22aa0c8701f105851597774e8f44297596433e773e42d5f33426ba71f90000"], 0x548}}], 0x3, 0x400d0) ioctl$SNDCTL_SEQ_GETINCOUNT(r0, 0x80045105, &(0x7f0000000140)) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$ax25(0x3, 0x3, 0xc3) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r4, &(0x7f00000002c0)='./file1\x00', 0x6000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r4, &(0x7f0000000100)='./file1\x00', r4, &(0x7f0000000240)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010101, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x8000000000002) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 13.759336679s ago: executing program 4 (id=482): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setregid(0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000000180c200000008004500001c00000000001190780800001cac1414aa000017c1d3f1f24375d100089078"], 0x0) close(r2) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x2a) 11.514083581s ago: executing program 5 (id=488): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000000c0)}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) shutdown(r0, 0x1) write$cgroup_int(r1, &(0x7f0000000280)=0x100000000, 0x12) 11.301291158s ago: executing program 5 (id=489): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@empty, @empty, 0x0, "daf86eed51d59c3b227a93fc7264db425e9d015e14f17c0900497e00b3bb00", 0x7, 0x6, 0xffffff9d, 0xffffe6df}, 0x3c) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, r5, 0x25, 0x0, @void}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=@getnexthop={0x24, 0x6a, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NHA_OIF={0x8, 0x5, r5}, @NHA_FDB={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x2004c845) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r6, r7}, 0x10) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r9, 0x84, 0xd, &(0x7f0000000380), &(0x7f00000003c0)=0x4) syz_emit_ethernet(0x86, &(0x7f0000000200)=ANY=[@ANYBLOB="a5050f0000ac0000009000000800450000780000000000019078ac1e0001ac1414aa05159078e00000e0470000c72a0d2a06c6800000000000001100f1914650dbafa941fc0f8bd1067ed800ac1414aaac1414aa0703408807cddaa0c8a1443c00030a01012f00000000e000000100000000ac14141f00000000ac1e0101000000460000000000000000ac4c01e416"], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r10, 0x400448cb, 0x0) 6.291461589s ago: executing program 2 (id=494): r0 = socket(0x2a, 0x803, 0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_usb_connect(0x6, 0x36, &(0x7f0000000000)=ANY=[@ANYRESDEC=r2], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x457}}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x10, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) write$dsp(r3, &(0x7f0000000100)="97", 0x1) ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f0000000040)={0x8}) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r5, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r5], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r7 = socket(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) 6.290500807s ago: executing program 4 (id=495): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000009500000000000000f4ce8a5b7abaac24aa6e380dbbfb42"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5a, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b40)={r0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0xa, 0x3, 0x3a) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) r3 = getpgid(0x0) syz_pidfd_open(r3, 0x0) rt_sigpending(0x0, 0x0) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) sendmmsg$inet6(r1, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}], 0x1, 0x1c000) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x2c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x90) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e04372720"], 0x7) openat$uhid(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) capset(&(0x7f0000002ffa)={0x20080522, 0xffffffffffffffff}, 0x0) 6.240376047s ago: executing program 5 (id=496): getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000001140)={{r2}, "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"}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000800)={0x0, @private, @multicast1}, &(0x7f0000000880)=0xc) sendmmsg(r2, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="861c6018941173b57b5573e341a4de271a7702d35ca3de77894f4a58dabb", 0x1e}, {&(0x7f0000000500)="898f4cf4fdcc0b516167531815608f2877271d90f037fd59e8764f78f75f0381eac699272d5c2db1a9b7890bbd3ad5b5a857a29ef55fcdd5ad643c5849d64c0c8260169dcae2b7dbaa88abce8f66044f140af6f757d0f4baceccbdd17ee512846ffff54607286c6bc89df0071fcd8077a1e99b15a6c45b55b214f599b78451d5d23ef4fa3e6c8f2a9128bed4bfe0b89719c67bd803ef6ea2f110c187b94c40a76d1bf1", 0xa3}], 0x2, &(0x7f0000000640)=[{0xe4, 0x10b, 0xcf1e, "fa00f721c7ac20ceea2884c589982364c0ecca2397ec862dd13ebd8898b18ac8d9a7a3e9168f03597bfe4ca06a3cc763746e1f1b43f34d587607fa7993390cdb54b89b39a6d3936557f4c9d18f089ee9295fdcad99a49732431f2f16bfc5f05ba264a972a2c7f033f7695670b776ae30bec30a6b44940ef8dc4f40bba920691bf05c6dd3a4378e5c0a5cb8654f927dcc2dce2d4494eab022b128e4341fe2ceb79431b836124b73b6e3e0a6c3baafdc42df95bf0da69fbccce2cd3633d6ed7b10d3404edd1f06a22ada4655e86a49fba60a464b19363792"}, {0x84, 0x118, 0x2e2, "4a68403dde786f1dc50357e4603b3ecfea4fd6ab541eb8a2ee043594ebc77b7e923dabfc0a2a41d6dd3191197605d0cc85b196589577991ba619105c29c5d434016d61781473314efc0c0e42816315e465d4a94f8e0b532118d195f137ae638804b3a2ee17ec995d5769a4b5bdf58a2d28e724f3f27f"}], 0x168}}, {{&(0x7f0000000440)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x7fffffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000005c0)="f23021e8d0b9fafbd55d1cc2b57a8fa6d8c2478779333a3176306722ee20ab", 0x1f}], 0x1}}, {{&(0x7f00000008c0)=@ll={0x11, 0xf7, r3, 0x1, 0x6, 0x6, @remote}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000940)="84f617b42ce54f21fa6f14a86c01f1f895a9115f65b0fbfd3f0ce8f106d81bf87e7290dcabf2794fdcbda84efe9c9c49fef637cfa4e3c78428bbfaaeb454f60c9ba821549166a228a1e44b3dbd5733441b8245caca8ba1e2bf784638ddd25a82e07a4b4ddde74d6b599b144ec8b9ef655dbf422058cc0b4b1577e51131f00607f5265c639bcfb2c13d0a07f0401d6c8d057683a960cdcedf7757419fb5b51751da49b50e1c7745", 0xa7}, {&(0x7f0000000a40)="3f9453b3c9632a6da01b348e366c906f21f95b2af33db013551fd7a28f441d773718bcf13c36246f4047c1f4756996289e0a332bdf7e96daecd12704020639050c18808752f121261e088bc8e08c33b4c77a302d1126e18e995cf26ce3c1939908ff908348333c93eef4036da1f841638b0505dad4962f23051bbb1d154a90bdd916bf331dafe32e95420490269932aa753c80b7d2af9572ad1bb04aa6823405fdd94474619cac58740322c89a78151df41f7d0c35534abdad20", 0xba}], 0x2, &(0x7f0000002140)=ANY=[@ANYBLOB="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"], 0x548}}], 0x3, 0x400d0) ioctl$SNDCTL_SEQ_GETINCOUNT(r0, 0x80045105, &(0x7f0000000140)) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$ax25(0x3, 0x3, 0xc3) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r4, &(0x7f00000002c0)='./file1\x00', 0x6000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r4, &(0x7f0000000100)='./file1\x00', r4, &(0x7f0000000240)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010101, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x8000000000002) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 5.299540965s ago: executing program 4 (id=499): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r3, &(0x7f0000000180)=[{0x0}], 0x1) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) ptrace$getenv(0x4201, r0, 0x10000, &(0x7f0000000100)) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, 0x0, 0x0) dup(r4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x5, @empty, 0xb055}}, 0xff80, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) bpf$LINK_DETACH(0x22, &(0x7f0000000300)=r5, 0x4) 5.042183998s ago: executing program 5 (id=500): landlock_create_ruleset(0x0, 0x0, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$vicodec0(0xffffff9c, &(0x7f0000001200), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0185648, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0x26, '\x00', @p_u32=&(0x7f0000000100)=0xfffffffe}}) r2 = io_uring_setup(0x4505, &(0x7f0000000840)={0x0, 0x9a3d, 0x40, 0x1, 0x151, 0x0, r0}) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(0x0, 0x3, 0x88c02) 4.473539872s ago: executing program 0 (id=501): sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) (async) r0 = socket(0xa, 0x3, 0x3a) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) fsetxattr$security_capability(r2, 0x0, 0x0, 0xfffffe04, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x141, 0x0, 0x4}, 0x18) (async) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x4}) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x85c68e8ab9c77084, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) r5 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000006200)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async) getgroups(0x3, &(0x7f0000008240)=[0x0, 0x0, 0xee00]) sendmmsg$unix(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)="825d42dd6266b40254c4f51357b6a85fed3cfb4bad2896161c1b3a35c645481ebe4f047ad33018b6a57273504df194a6b1d977c1d3e3f9222162423839caa2f1802a737156f9a4dd0a27c9e290b5841a897ea726de030cc3b18548215810171c88bdd1d1ef00b449e1e866b0b4f2e40f96ae9ef404dd24cfcc24829a8ddd1319e091416f570697c47511a681", 0x8c}, {&(0x7f0000000380)="107d4153b2fa9cd0b87d3bea92d28b66437bd59ec2d8db33b1c6d50c06c83d0807e49dfa2fc7a9fe32c53886d56ccf0c4a01adf9a9ba89c4321690752bac40437b9072ac6ccfb3a0444ec3e25efff6567883d4a500fbe6a0904b8139d04458a8f6b6a25ea458c5455b41a8fb49845009bb20339f2b1f5ef31b147026ffbadb6a4e40245d7cb67f897778167e218bc3353bee085caef5f311170949baffde940231", 0xa1}], 0x2, &(0x7f0000000440), 0x0, 0x80}}, {{&(0x7f0000000480)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000500)="be17cc464feb4e53bd6dfd740903341db30db8c8f8f0b79045d8a7ba5f148e72c169202469691e7286f665b70d7c5443dc669dc7f61ee2f82dc7d50c1ae9057a16b0f7d90bd3cfea4c856eed2a46c88a34c0e2e71def3b390768bde594e90cc7af88bc01d054dffe2424f164260c302b0f1f91ec9667c7e7dee723c571927a6d8dd34d3ca32a87b433cd5db6", 0x8c}], 0x1, &(0x7f0000000780)=[@rights={{0x2c, 0x1, 0x1, [r5, 0xffffffffffffffff, r0, r0, r5, r4, r4, r1]}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x74, 0x80}}, {{&(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000880)="0c81827ab75cf04996507468e0364a1b5adff2e057f3d60728b69cc5047536f2168438771812658cdcb937de5f785b58dd7321138b96e24073b43c985236f812d3438abc732b02bb6d15ebafcb9ca7dc0c4a2926188c066f04adf9cd8dcaec764d968b1f2761107309f6281a63d963b5af50a3e2608990a7550a8f79a8273453ee3c1a0a", 0x84}, {&(0x7f0000000940)="bf99283cef062ec3562698079d61b496a5faee685f24ccfc94226fbe52c6c5f7a87c5bbcd93bcced39dc3a17cdd0ceb14bfe16215ca129d3f4ad5363357eb49fa6bee74de5962587c50a370cba81bdc888de9eb8f00453cd52ea1e2d691837c143cd47626feffaefb91e8c9ebcbdcbbc4305ba32232a220aa9842efa95063e7214504531f7f93a1a0b9ab600aa3ef87c5c6539318a27adabcd0553cff106ad9014abb1304036eaae", 0xa8}, {&(0x7f0000000a00)="5ee1cb031c1947bc7ad3065a7159259bbadf8144434db1a373765c51a6d76ecfe902d59956a0005d46ec406380d1033a2130dc3322823b27476681a21bdbcb83b68238efda06d64e914bac634f5146fe606d6fac4ee70cb4cac598599ab14b29de9e233a807df7eedee788d0090118f237d12808a1e5ec806a1683280734323889c9136a7c63ef21bbafd2f96decbcde9410e8ed3c90d622f28bfc716fa5f300901de08af77dc44867fe3dae3610bd833caecc40644cc7cd179f689e2410b26695350bba1adafc64e6e78ffd6ce2", 0xce}, {&(0x7f0000000b00)="995f6ea2ac1b9e315c2762f8513f00b5a1cd8cb8500e61ccaa3e665698cc6fd020489e125600766dbb38ebc4317b472bcb3eefc5900e56fc090867663576d179bb6712cff07da0", 0x47}, {&(0x7f0000000b80)="f0a2ea96a16c4bd531fd85f96caa54071ed6b359f049a05ec6e2ecf175c527238b7edbb1f61b7824b23a4a38d8ed4bdcb795316004facf959d7bb6c00e2df0c307bc2cc56712ec0452edc19c494c1cfc906c6df5d6e652ca26f5ee93e39eaa8330ad154b41194f5d2f78a592e64df7e1709f55cabe57b02a23de865a183b1e8836af1c3d60c1f4", 0x87}, {&(0x7f0000000c40)="929a669c9bb230c45de10d0a8feb884991a500376e2d01045ca9c5209e6362e65e3a2f2c3c6b6532477f71b95bfb02639735b83d22b37c36491c9b1c176811baa0c23dfbd386fb57a5a5a23633556d3277375c4662cfc62c61cfd92952dd1126f0f4b867710e053daf4fa8b14303003393d871c6eb04f72084c1158d36872455d4aab0c3106f929a27189037728947454dca2a63a3", 0x95}, {&(0x7f0000000d00)="7069599b8899db2348262200edd4ce58842e80e72126b4c6e6fc691923368ba254ffbee6c6d3b1b7c3", 0x29}], 0x7, &(0x7f0000003380)=[@rights={{0x24, 0x1, 0x1, [r2, r1, r3, 0xffffffffffffffff, r3, r3]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [r3]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}], 0xa4, 0x4044010}}, {{&(0x7f0000003440)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004780)=[{&(0x7f00000034c0)="ebddadf7e2648f13806689aa9a41d629d06e23eb1f32299a5a1d0e5fdd95e8f1f56372b810acd50ebe350ad875c4c0dfac6b7f28035a30d82571dffa6d4b37f728ae0a9968e9687301b1c38be28955bf856ca45312e5486af9d352ba0d60eb7e7c1f8ce034790667aadb77723bf34986de6c4571c6f5edd4e644d479c762f4e3ee7f0f8a8bbf10c1a0c79fa204c0aed3d86c4d9c5c4cffd33b6f654a", 0x9c}, {&(0x7f0000003580)="e22d6f38c2e6ab25da2e951e7c7f0d25688ddf271d1217fd57256f3df218f3fb5f547de501287ea58294bdb8e888445ed71721c7270bf59179b81c30b354d46b508ff8a8c95ebab306c519b09ac3be28401a9c33b01aad696a61d58ac39b3f1493a26166b74bea49827e766d6fa6710f50044fe2f52523dd3c62b834b4", 0x7d}, {&(0x7f0000003600)="cef67ad06b9727180d9c776ed58b6bcc26682683e4d2e3d0906d2addf3409dbad75dba9079d4d23a5705f856652a3f33e962f9de18c1803f1d87b899176a7c33af50e59dfd3cfcee14734e482e3f63e05227ff7aff95b68284505c4d3d352d54d70b15116b614ee2e0a73c8f2d76790feb1c5262f2653d4239d999917d4a4bce7abded5266ba2759cb86a938a72bb24c49691609cd829118d32a7920b1ba350fcefc070941e4d102695358e10405c8239581a62811640583432fbfaf6b439fd64626586f050f231a149aa08bfe7bda94aaaa082572c07dac481cc913fe334780a3b78b2a9560043f023d16a32b684ff2b43c786e344604302125b6e67bc9cded27af487cbaa8a95347bb68842d2c1d6b3c308dc6ff50d311cb5fcb612d31452340e580110d74822c930148a23a59bd1ce8f0c9268a51ae5eb8dce7557fe5dcdb1ec710f1c07c5093c0831062345840a6041e73d0bd306597493181ae25c32854d5b69ab78aab6ac441b95a35c202f50c00438b3e14c6922708518736fd79ad70379926ebcbdcceb044eb9c257306a00a54e66141644b0292539fd96345071731c868f5f73d4789f9c2aea2eb5ca403bbee3a4278d037d2a5e8ae28d2a867faab12159030b4d175c6230acf62b42bf272afb273f4cc520ff65584ffea5a43f9bdc21ae3ca0b1de558dadd3b46930c58af0d82dfa93cad5e5c64727a09bc1e64ae4632227a96b2eb86c5dedd9e6fbf28a40449776f87b03a230c63eb1cd901986dfb35d95725b903d9d7e4106524eb5a853ddd18312cbbdeed8e698c0c3e796d50bf49568072759b31dd2e4957fcf0f42ce06ea90616e3598df678b8c45ed8150f9c7eeedf68e4497334c1a0573a90904ebcfc3a7e896d7cfb326b974e7560bdcc6abbd30412e701ea2d00a8ed603cac96d331773fad4b1ceb38fc85b48ff03a505a39845f7d613a1605a2e707a3a9e86959c8e2f48df4c90e491ffbdf2089f8dbc7044cadda1e19b24d243d55492176e5c765778396f114af9fbd9b4cadfffa6c2f9d05daaef4acda7dffbca7150c8f4226d823b14d9d36b98353fdec00c81c26ab158c208d0dafc7b0bd537f0f8442fa30ec5b34de9c362eb6858e49e20e966fcb5db97d7faacb4fbdacefea98b3954318035b4c18a3664bf5a1f80f996b6cfd3dc907ae9230fae02aa50cb8748e6b228d37b88ac677a6bc579314c521c9dd1cdc29eb64aec037a1485efde5f17b4352402a45ee2f3bf514d3ff22cd897fb4d1343d0e48f30c9a0ffd7b0ed1a7337da5bc34e25e56c146b9c6155627d23c18cb5de42237bcfddedc6f485eb90dd0973e6ecd0a4190e3f9834787500dcbcbfdbe20f37f6ca0f8b80ac8a454bee21696f91e524261746d462204d55b3acef792ae7fee51425f65a2589a3ce20f534d094e5391de6a25b086ff7a566202af2c3d58aa1cd060f8d696f867253f5a9004830a61ed8e5c575fb39875d890fce60a30550fc11d0f055462593985e74374d48146213f5185cf8ea121d3bd96492d9170575dfbcd676afdfc412831e78b1bf21b7a801c72445bf08c5f52a5aec9d7d93db254b0b24e3cb2fd6b9b35328485496ee26554987215e9e44305347bd6e689e93e8719826aa83315cdf9e36546b9e305f1ae4d6f3a03d1f928788a874d4b15843def12b455d4f1f324e8106c5317c669f83907ea391b168bd454270dbd9222df34bd5dac7325d9572d45e7de8a9e5c1ababb5a7209da1cf3eb755ff2ca1f9fe201b5f257544975577322acc2bb767b8d65e0f62efe8d7b51db541ff072008e9d6487d8f05ccb60c68ca1615d05ab979696208c115d54c1e5e01762055fe489df4a0ead9b697b711201bdb32eda1e5deff7ba8644b40119030216d5d294426f41b0e32719ff797b691e209064ac55bdd3973081ac1b04a0b67f94261de8533719c78f0c3d00520bb83c1da524bd4e1ad36d9fafe490eb73e1b4f02a7e14921bb83a3f1fd1171de038a1f0f41e138a7ccd0142e3659a0d0e7f0b6ef1f3ffb225e043bbb6fb016afdb124cd8542fcdbb7371275a79c7bcc7aad4ab8fdd58d1cf5e24621256c98fa52b8d333510cff38d5741f5e024bdcaf1bee2b2d67b5680a522d4ef8c9a26515742cf06784319afe9d449f359850ad168f2f1e8879d394f88e46eb49022deafc6c58c023b3d9fd4297cc0b3192198140c5e40e13f26f29d1a956b68aa0f9b2550dcbad856c21e8767b83fd9d510f10d6c19316d618edfcd1b00b6ee60bc9a41aa4719e3ef9e525e14cbd9542c1913fb0007be374829213d992157eb401e2a5f29b991ea5d481adecd7427ab41e69956005a32e15aea10bc77e6fe32fbdbfe9e44ecc1a39d86df3e91362da7991a4a0a6be020b5f863d4ca5fbd42afd104acf98094fa73c557c0ef1cd9f60602efa57f1f75d04c97b4f19d6186a8bc227f6d92ecae6497fea815ad78bd8489aba988181de96bd08af28f3882214fc39e06cf40fc4e8e70f93ae6e4b1044dc9c6703a5370f9ca57aefd17caf83da33b2eaee259f09b4172ef4cdea5b628780f3343c49018741ace831706b1f22cb8969de053f5a98f329f6f27d0d85eb641110fda9d3ce49f9410c78364087597c39eff4a658862d35b6c299d464785f16eb65140a57206b7fc6be2f6be5b37fb0456d321e5da0768c1c45d2883dab7029350bc65e3766d77bb181ab336637cb2251285087e407730660e14388bf68b7762a6a7471c003e850e3f00b6db0622ac4450193911e1c10dd229bc4339209799204acaa2b4e704f89e4ce593ed0450a942f6d9d2f4c62aa347aaaed399d34a986093ba7b8e14d0f7ed774fefe137690c518676bd2b562ba8086b227c3b270552357df9f7a7a038ecf56d9029261942c53009297696ea3e9336a2abdebad33e7954fdb4f66baa04c546c150482e9e03ea8a9a55fcc379bb95b75fdf530a84193422a8cb5bab45a48c32191ac5a8760b33a5cdab363bf47fb3a60c63d1235ddccf8b2d140a2bce8b54bbd30952dccf2be4b60ee93ff06c3782ca379972cae7d808be2d887b35e228485a00eb5fb59e60226b3d50478b4453284011da293aae1bac9bfa237615da69b89dd79ce40597074265c3633198b6475868fddd5314efd1fc0060792d3411f97f452a52ed70c251ff747068e4f1de9096d2fb850072aa88785494ed633905205d849284cf9011ba38cb6c7fa909d2f192ab8b0e2f1e827d86b3fa90c0c797464c6df0cef7368ad44802167296f138453360bac5610832e338cb42e8def5b6501edfde679d7c1c69e725877d12994858696d456965f5a75b88642643de14e153177642525e9b9cb568f7b0bf8a9c9794330d3b43f1aa698a48fd6c4de599acee4a0b44f97bac2b8b800ab9dbf6541c69ccd7ab2fd80882f7a3f3e942bdc008e052514d4e9024cd0480af4c0ddc70ef616ae7c938cc381444b1437b07fd747fe3e74917954e31b035ef3b8b44890e78bdc524c764d33b8b986608b70408a39f7e43b44bf49bbe5ceae652d3925ef73b8abb43a242d6b837c4e55020d65c6b6f565baeedaecb63ef6cad8ad9ad5bb3a035966b98db10c61b891cef62a39ba938580fd1ac41d935312ec1e6cd33a2b2989518661a33f827de140492ccc9277df620d370564ea26568ec363fa515ed951059a7b98eb1f160b6b4ca7adff2fb276a3035e0ad255aad5ea3ad0eeae36f3430995b7298be8d8590fefad6f1a8673ac57489909d546a0aed2eca5226e2d4cfc83024eca723b44eea94d08dbfa037a068e1a08e27e35e761c7d724e49e616277b9e97b2309059244e0127396a97a922257ba373f28ee1323347fa7eeeb133e1f42389f3acf8b89c1e7fc10c5f95605789dd69982e2a41a257704e64f1e70474eb22387b4dbebf7386559903db5ed8312f83d4cc3ef20865285a3022b0785190be97966d7916e9697f9bf8a7be5fb3362d58c36df88cd0a7cd6dfed042a43c51f090b10daf0f56c9073d2f225ffa67c4ac17da32b907b4ca89cd9874fbb1bb061e8cf3df0556c15cede130db1d185ee2c57dee3a4e4e42132aff8026fa790cce290cebc0eecc33dd2ae557a7afbbbaf67a7cf75c418fe50859d901014988999f7ff8e54465fe6cacfe25fa0d3af5d89b2fd71ff354449fd0a8c1ba67fac2497008c24ee5f79dd8f5c194e1a88227faf78a8314da048f2bf5d9a708e7e8f52440b65888deb7f4294acc8c3566ccd44ad0d04e2edefd2894d4179e7a7ad855f98cc156a514c80622d49a0b6437b7afa70d554d8375c9dde38c8816f4d501b7cfb7a28a7b9df4fb2a2cb9d9adbb3aadfcc184a5d0bdf2c74899af6ed773ec476e2be3e28d8ad2dbb86c403366a5e44b57dbc034450cf24abda3a3ed8002b4aef1a34f675b7c859fbfec8f7f2dc95b481d2a5c7a3be18dd0cab0b99b7c1a7878cbff185be987055f045dac37def2da8622451628de8802b801650becdc24db427e439b92d3118049b7c32c6e7bddca71069fb053793b931863d58924659f23289af8e4c7909ea555b54695734c9a5ae5f9a3b03eb2fc1b423b37997ea3cc9be15c2b80e605ad988214cce4c47dfa80402ff9c54ff91633220f166986de6c49a1941311053ad5f2b1778f78f81c2a2b0006526e61d4dcf8168c3f421c49be1dcdd722abecffb4161302319daf406f6cbad9e53345fe6e1cd63d5d64a4588c6c6e9fe0f50e998da6bb536709606b37195c9ee7f95d8aaba5147e1fdc8ea8589ce8c0330df8bf82bbb1be34093cf15b619ce0113714239a7e9df4e846cf91ee31bce8cbb1f2e7a4f8674a4a4ca2332a6a3bbef957ebb9e203e606d1bb9b18119706d822d5d7268d97597108923b0f2c1f43072a5b75d59c1935043190c4e3678f8577151ca4228e92546551b6ba0f82a7720b5076c2f1eeecf768d03615aa371367a412a09bff91c84f2f562cf116438846e7c6988832473d7d9a6e95e5d5c78329ef9ff2aa845f149fcefd4c53941952223cc3fa20f88f1a82821041235016ec64800f14bd57dc6ac11c5dd423c4cbd608b561b5b0c6f4334218dbd896973954910b904dbc24b6524610f9e9aa0b2560a74f703f13ed96a64b9f7b0573eb439d02d9603eae6242b1d7e9082b40b6500843f61570817e7960af3e465b0e120303215482aba2b2288598baaec1e47acc9c2e8e6d7192a0da7c4100e9a924262f61c85792dbd5669cbdcc42470522410c6ceee298571ad428c8450d24f6224dc3cb10f65681b6f26b2bd92193a0be8e3ebfacbfd39f4895a05f5d051eed22c477fb737113ac604a073de1450518050874bd45acca4b8f23f259c9b42b32f915e195f69a83697b99c290e540c6dd11b3903889b99ff36be6176778654821a1e2b731ed2b218b8acfade4dfd917938dcdbafce618304dd7b9632e9608a5cc77f050bd22344647bb6e5f76480efda056911779749ac0e036d257d8515c8a80c80654c704ba607569f9d0481dcb086311ae0653935547c2137b6a693e173b2464fec41def6692026035949c72d0cbf59b6d8ecded1687d8aa10defec2f61f532a70d73b2c1f737c1b104795cfa81a4a045b3f7c00b050f066811ba12bec2ed5ad7addf52d21e09116ad9fda76890651f77daf60bb222d7ab55160f920b17853329ccffb987861c676fd8e17999751c1205d3ea3aa6cd8ff66425dfd44b300903026af8b85687291720cbb5bdad2566642153524ad10e5f94f17a307a516d18bb0794325bfaed64415fa787bdcca2bf221249a393d4d91e48d79ac954db00f3d4dc4e11", 0x1000}, {&(0x7f0000004600)="8cc4d6981b24dfc25a6e2cb78a7a4f8dcce8a029bdd00b6a4e3761e144159148d6b7495e6f7975e98de14d16876f3c8a4917df91462da3e1c3bc3389a7ad3926a0529ffd62b758bfb6ee930d4dcd3412c52d95478e6a54eb9628cc4b21fc98d54440d5073151fccdfc96e4fd18e7aac4e9759a1b693254abd9e2557e8325560ff0f62a942f39a34077f8bfd8", 0x8c}, {&(0x7f00000046c0)="292621f901e3f08bcd40473fa80c0b53dddd02cedd6f9a3df836cde0f28ee7a05ea04775179df28833075f74fbf070b4d48be65f2f02a4f9bc832d14c939e7e2dcf9d659ac4f058ffc878a415e0462af3a2acebaa437c2938c78019ff38efd5833e2ed9c649c570ebb75ec6a9100dba50e9f23e94a79dea52c81445c27226cf7b4447f04fc34b66793f1eccc4517f32285248584c93711dd793b6a716569e0af907f9518bfd6f6cef704ac0dc13459215443f511", 0xb4}], 0x5, 0x0, 0x0, 0x1}}, {{&(0x7f00000047c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000004b80)=[{&(0x7f0000004840)="44e36aa8a6d8b165528d4719a4da7cfb306d638db11b88139f9d45e2daddf3c3bab8b879d33128acd02811ac5587c7e500b62888d4502a7a42", 0x39}, {&(0x7f0000004880)="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", 0xfd}, {&(0x7f0000004980)="63441bd432cdeb3a4e01e67109ad1cfd9473f34241281fb3b8113c85410fc66cf8c90fdbf33b4f15c74eba6db520c8434c0f29cc9690120b67ba05882853e501deded6330d12d0352c0ee6649347e085d73c5ba77142bc946189b45d5463743b10e6a0955c864e7424bc106963706669d48a4176afc5817b341c63334b6c188192dc444ee73bc354edf7251099bf48de6357397043813f232c50d4ba3777d715f8f6d5378da21997b1016e43d9f78c5e0e7a84a8f68cfb17d364856509b9b7e6c5f64c1d0f16041bd93d06d6e8bb5d5a", 0xd0}, {&(0x7f0000004a80)="f904713cb5226405f8dce23b31b612d7b74a5f0a05321476e2e6cb9afa355394e9c7ddc2fe32ccdab9f79d8c5d40452ff2d3749a30e3350fa20dd1ca36579838bab4a3df84c8c914741d18084cee93ac3826abd0c68c69778f1389296b4674c5404957c901304f61590afb02a3203fd3e4844f0ae63d8f66d5b139003b88a5c4d7ea369ba5855689292da5452bacce5b872e4fb68efbe0997327f35fa767eec1f43bac6426947609feddfbe3933d229dad32ab3c455628147d750cd3fe98edb8386af241b04151a77b6452563efb62bc70dafb06c60aab359df17a51f1d69ac474e4a2268e3203c7ec210fc4b72c8839", 0xf0}], 0x4, &(0x7f0000004e40)=[@rights={{0x18, 0x1, 0x1, [r2, r4, r1]}}, @rights={{0x18, 0x1, 0x1, [r1, r3, r4]}}, @rights={{0x18, 0x1, 0x1, [r1, r1, r2]}}, @rights={{0x14, 0x1, 0x1, [r1, r2]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x18}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r0, r5, r2, r0, r5, 0xffffffffffffffff]}}, @rights={{0x10, 0x1, 0x1, [r4]}}], 0xc4, 0x24000000}}, {{&(0x7f0000004f40)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000006000)=[{&(0x7f0000004fc0)="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", 0x1000}, {&(0x7f0000005fc0)="60b3c59a467b43e8d7c3a4500f0ef4e6b2fd270e78b6fe03a21ab954b25cc1fff804824da726dee4352e83831f7144cabf45c023", 0x34}], 0x2, &(0x7f0000008280)=[@cred={{0x18, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x24, 0x1, 0x1, [r5, r2, r3, 0xffffffffffffffff, r5, r3]}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r4, r5, r2, r1, r3]}}, @cred={{0x18, 0x1, 0x2, {0x0, r6, r7}}}], 0x90, 0x20000001}}, {{&(0x7f0000008340)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000085c0)=[{&(0x7f00000083c0)="bf98aadcbb0c2aa89e2992e2ee7e306a90fe0040003dda41d541c2550bcbd3f011", 0x21}, {&(0x7f0000008400)="259208de7aa15a4d27e7bb2cf548785d6aa5cf70b63c0c9235cd1a4d4affd6cc0980a4037e6f2063d59bda9558c5fbb866de266521de7830a0175aa8fa47ec251e9c982eacfc3367ca41b39cae555ad8577ff3774e96bff4f6b5b00c6ee19130f872160f8fcecb1a767bfb172facab84e0740cd2e05cec4004e2ff2fefbd484abcca7eb352c8187f8ca4ecc3f6d20f11ae5476c65584a07c81021e048aad386f782c87790ffbe4598105ac", 0xab}, {&(0x7f00000084c0)="ed80d29799a2928a185cbf7297ccccc3a6b2d68e2ce2db363ac1f473faae4644e9e791a65199d5178c89485f6068b5b7", 0x30}, {&(0x7f0000008500)="97e44ffc2053d05da6487f6dba947ede7078d478b1df75785903a9cdcec93eff268ed035f1fbed39d84549a689d253101c30d3c2f8a93716391cbb9278a8d51bffee8b04450dfc2e690b9498fb3ea0efb33bbd2f7d3ba49966899a6ea944b9606c4479db64026da48dff98f624626c6ad5a38bc8b9f18a7f239546e821c50e9f32227519a642792b", 0x88}], 0x4, 0x0, 0x0, 0xa35ccceccd129f27}}], 0x7, 0x4) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) gettid() (async) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) (async) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) (async) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x40000002, 0x0) 3.160939211s ago: executing program 5 (id=502): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x60440) readv(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/168, 0xa8}], 0x1) (fail_nth: 3) 3.040725713s ago: executing program 0 (id=503): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c810) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x9}, {0x1, 0xfff1}, {0xfff3, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x5, 0xe4}]}, 0x8) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001280)="bb2d839f3bf337ccd0d8f3513ab30aba4b00b6f0ef506a60f4082ace5a8a10d80d8d595071f2ff529ff6996481ffc7e4de448343b85079722c4f1a1ce360836392283201a1a5ac0b6e24ccf9f075c64fe58b7a37d37019a49908876bc37c9f304eeefed8a6d8cae3ca0f81e900c8735b8b3063967b68a1567e30726f2c0edb6c85e78619700b0645b728a0c88b22d18366a6db2e391401feb630396bf42b987b102eb2d0a804e188648df6c8ddd79e0fde3893930e06e91c39cc01d239a1c20cb0cee84da924212382163c6638e798d66660c356195a56523456052c42aca7c8404e259561dfea5cbdc21a31b7e7eb73a710b68ba2ae2eff86d3d4fbda8b72014f5de839d48acbc9d217f7ac0b3362a66f3a7d04277cc4b918687ed082170f98dc54bd56f28ea3fecc4e86e1820ed811919dac4d09c18e27c4d839c7ac015d34522c7d87ae968dc872d97db81da9a4b6f631535348d9d44ca3fe846f6706fd3d3bd2f62f2d046a2973c9e8c6ccbf96fd0060d532433732627bf213a35870cea250f79ac773b8adba386e0ae960801b073646dcfe7c89f0cb410d22146cb3109bb9a12649e943104875c0272dfdfac5998854c0f62438909522fba45a4ac83b917a6d9a45704fefe035986b7ae676dd6b8094d2ce7ed64f0aaf138cc827553d74b2c04488d849df41fb98a6c966c07cbb1a9fe3ee5e41c3082c51b37f9df811461cf123830ee606c7b5816b6b86b21860177bfc3fd9aeb689dbb39963a55cee2afe7352200f719a", 0x227}], 0x1}}], 0x1, 0x40000d0) sendto$inet(r4, &(0x7f0000000300)="0906c422", 0x4, 0x40040011, 0x0, 0x0) 2.785720114s ago: executing program 2 (id=504): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40080) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3fff, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0x2e}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0xfffffffffffffff8, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0xa}, @TCA_SKBEDIT_PTYPE={0x6, 0x4, 0x2}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9, {0x47}}}}]}]}, 0x70}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x40014042, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000fc0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) lsetxattr$security_ima(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100), &(0x7f0000001080)=ANY=[@ANYBLOB="0302fe0000e79f00024a45450cd48636eccdd154ae25c1d366c19bc471a776f559332c0660fba9576709652c1520f5c1a54d80d4848dcecea19dd98b084616b09ce8d6b98f13addb716bc4537fa75edb328534057d656f71844cc462cf482438c457a7de0668"], 0xb, 0x1) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x2000, 0x0, 0x7, 0x0, 0x1, 0x0, {0x7}, {0x0, 0x6}, {}, {0x8}, 0x0, 0x0, 0x0, 0x9, 0x1, 0x4, 0xa, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x0, 0x202, 0x2, 0xc}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYBLOB="3daf16b65284fdfa341b29e6c273f9c1932062187be98b6548d6af06c1a76eb8453b4cd015f0dea9bd28fd22e43caf415ced46f93e2599a37bc37dbfe74e0f581e567eeed374b35d213d7deaa4ea0394f74ecf38c5c145b86be9ded4b778d8aefcf2806a6f8eecce6ac44dcc08f234e02ea13dc35d5dd6058d288c828e66a1b85e94366667b9a7b19a", @ANYRES32=r4, @ANYRES32=r1], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0500000000834984cc9cfb00000000001800000008000300", @ANYRES32=r8, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) 2.589579148s ago: executing program 0 (id=505): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@empty, @empty, 0x0, "daf86eed51d59c3b227a93fc7264db425e9d015e14f17c0900497e00b3bb00", 0x7, 0x6, 0xffffff9d, 0xffffe6df}, 0x3c) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, r5, 0x25, 0x0, @void}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=@getnexthop={0x24, 0x6a, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NHA_OIF={0x8, 0x5, r5}, @NHA_FDB={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x2004c845) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r6, r7}, 0x10) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r9, 0x84, 0xd, &(0x7f0000000380), &(0x7f00000003c0)=0x4) syz_emit_ethernet(0x86, &(0x7f0000000200)=ANY=[@ANYBLOB="a5050f0000ac0000009000000800450000780000000000019078ac1e0001ac1414aa05159078e00000e0470000c72a0d2a06c6800000000000001100f1914650dbafa941fc0f8bd1067ed800ac1414aaac1414aa0703408807cddaa0c8a1443c00030a01012f00000000e000000100000000ac14141f00000000ac1e0101000000460000000000000000ac4c01e416"], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r10, 0x400448cb, 0x0) 1.97162422s ago: executing program 4 (id=506): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140), 0xffffffffffffff2f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r1, 0x0, 0x4048043) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) shutdown(r1, 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.891083854s ago: executing program 2 (id=507): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000009500000000000000f4ce8a5b7abaac24aa6e380dbbfb42"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5a, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b40)={r0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet6(0xa, 0x2, 0x0) r1 = socket(0xa, 0x3, 0x3a) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) r2 = getpgid(0x0) syz_pidfd_open(r2, 0x0) rt_sigpending(0x0, 0x0) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x2c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x90) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e04372720"], 0x7) openat$uhid(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) capset(&(0x7f0000002ffa)={0x20080522, 0xffffffffffffffff}, 0x0) 1.762280303s ago: executing program 0 (id=508): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) (fail_nth: 2) 1.761494736s ago: executing program 4 (id=509): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @mcast2}, 0x78) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@rand_addr=0x64010100, @in6=@mcast2, 0x0, 0x7ff, 0x0, 0x0, 0x2}, {0x2e6, 0x0, 0x1, 0x5}, {0x2, 0x0, 0x0, 0x2000000002}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x14}, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x3, 0x1, 0x0, 0xf800000, 0x8000000}}, 0xe4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0xc, &(0x7f0000000000)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r1 = openat$kvm(0xffffff9c, &(0x7f00000005c0), 0x549b83, 0x0) (rerun: 64) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xb, 0xfffffffffffffffe, 0xfffffffc}, 0x0) (async) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x8, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000900000018120000606aa48ff66b85f23806", @ANYRES32=r4, @ANYBLOB="00cd49204e45d125cc39e2281a470b3200000000000000b703000000000000850000001b000000b700000000cd14136e20e4a934f24b6b8e7d00000000000000a775878d35b4e558f29ec6c86fe05bbf07772b8a505c5d9e6592dcf7d5699fda5ebf675712472c4a5c246169f4876036a71b1b5d90e239d024e290"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000900)={'bridge0\x00', @random="000000000100"}) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0xd) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$SIOCSIFHWADDR(r6, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1001004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x8000000e51, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) listen(r0, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000280000000000069078000000000000000000004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5010000090780000f9660dd7d93b0205f9a6570d7741272cb78a2123ee7650376d10405ba882cf4b694bbc284c90959e8f6f8317555d53443659a99987763e6919edae6aa14890dc907f7d7fe4447480bc72e18a439520"], 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) 1.667539043s ago: executing program 4 (id=510): landlock_create_ruleset(0x0, 0x0, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$vicodec0(0xffffff9c, &(0x7f0000001200), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0185648, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0x26, '\x00', @p_u32=&(0x7f0000000100)=0xfffffffe}}) r2 = io_uring_setup(0x4505, &(0x7f0000000840)={0x0, 0x9a3d, 0x40, 0x1, 0x151, 0x0, r0}) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(0x0, 0x3, 0x88c02) 1.44985926s ago: executing program 0 (id=511): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000ffdbdf2507000000050013008100000014000800000000000000000000110000000000000500140005000000"], 0x38}}, 0x2) syz_emit_ethernet(0x4c, &(0x7f0000000a80)=ANY=[@ANYBLOB="0180c2000000ebe65fbcee5586dd600101d3a149166c77f6cb36721d0000161100fe8000000000000000000000000000bb950a0a62e7b7cfa4aac60000000000aa00030e2200169078020300e3cf50267888094f0bc929dcf9fa9625c6fc94ce84e89f45b26fa48c6d91fc316603348158d17ce9dd8c016e1ac88270c11d1a0b2e8780d79245863cf01a67bc2b36049ca7f4ff48046173f798072969c07cc763fc607af2308bac349a54257435236354102308c1d0bbcd773c44e1aa093104d632515f17a09e3438ff684f6dfdcecdaf8f91f765fcaf268874bcdc8105f5f626aae6f239"], 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f0000004200)=[{{&(0x7f00000001c0)=@tipc, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/55, 0x47}, {&(0x7f0000000380)=""/70, 0x46}], 0x2, &(0x7f0000000500)=""/250, 0xfa}, 0x5}, {{&(0x7f0000000600)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000680)=""/139, 0x8b}, {&(0x7f00000042c0)=""/4106, 0x100a}, {&(0x7f0000000940)=""/73, 0x35}, {&(0x7f00000017c0)=""/254, 0xfe}, {&(0x7f00000009c0)=""/191, 0xbf}, {&(0x7f0000000740)=""/169, 0x49}], 0x6}, 0xb5}, {{&(0x7f0000001a40), 0x80, &(0x7f0000000800)=[{&(0x7f0000001ac0)=""/133, 0x85}], 0x1, &(0x7f0000002e80)=""/4096, 0x1000}, 0x1340}, {{0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/13, 0xd}, {&(0x7f00000008c0)=""/123, 0x7b}, {&(0x7f0000002c40)=""/66, 0x42}, {&(0x7f0000002cc0)=""/67, 0x43}], 0x4, &(0x7f0000002d80)=""/68, 0x44}, 0x7ff}, {{0x0, 0x0, &(0x7f0000003e80), 0x0, &(0x7f0000003ec0)=""/114, 0x72}, 0xfffffff8}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003f40)=""/16, 0x10}, {&(0x7f0000003f80)=""/87, 0x57}, {&(0x7f0000004000)=""/212, 0xd4}, {&(0x7f0000000840)=""/66, 0x42}], 0x4, &(0x7f0000000480)=""/46, 0x2e}, 0x2}], 0x6, 0x10040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8500, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4040aea0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000000000)={'dummy0\x00', @random="0100c82700"}) ioctl$KVM_SET_GUEST_DEBUG(r9, 0x4048ae9b, &(0x7f0000000000)={0x1a0000, 0x0, [0xd, 0xf429, 0x2, 0x1, 0x100, 0x2, 0x400, 0x7fffffffffffffff]}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x5, 0xe4}]}, 0x8) 1.379421159s ago: executing program 5 (id=512): r0 = socket(0x2a, 0x803, 0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_usb_connect(0x6, 0x36, &(0x7f0000000000)=ANY=[@ANYRESDEC=r2], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x10, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) write$dsp(r3, &(0x7f0000000100)="97", 0x1) ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f0000000040)={0x8}) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r5, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r5], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r7 = socket(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) 1.087207324s ago: executing program 2 (id=513): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) writev(r0, &(0x7f00000007c0)=[{&(0x7f0000001440)='d', 0x1}], 0x1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r4 = dup(r2) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000100)={0xfffd, 0x16, 0x800c, 0x7fffffff, 0xf, 0x7, 0x0, 0x1, 0x0}, &(0x7f0000000300)=0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000003c0)={0x7, 0x2, 0x200, 0xa2, 0x1, 0x6, 0x400, 0x800, r5}, 0x20) sendmsg$nl_route_sched(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_emit_ethernet(0x53, &(0x7f00000006c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x45, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x2}, {"97baa5f79e0a48afb8a098ed47cc5ac95ddc4c7d9b5690b8407dffe780"}}}}}}, 0x0) syz_emit_ethernet(0x37, &(0x7f0000000400)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1000}, {'+'}}}}}}, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x40010, r0, 0x200) ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f0000000280)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r4, 0xc02064a4, &(0x7f0000000580)={r7, 0x6, &(0x7f0000000440)=[0x3, 0x800, 0x1, 0x0, 0x9, 0x56b], &(0x7f0000000500)=[0x2f, 0x7, 0x8, 0x4], &(0x7f0000000540)=[0x1, 0xfffb]}) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740), 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x6}, [@map_val={0x18, 0xb, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0xb, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_COMPAT_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc40}, 0x20000040) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8923, &(0x7f00000000c0)={'rose0\x00', @local}) 377.887203ms ago: executing program 0 (id=514): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c"]) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) (fail_nth: 5) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) dup(r3) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000740)='team_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x5, @empty, 0xb055}}, 0xff80, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) 289.410787ms ago: executing program 2 (id=515): socket$l2tp(0x2, 0x2, 0x73) (async) r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000000)={'nat\x00', 0x0, 0x0, 0x0, [0x1fd149a4, 0xb6, 0x2f, 0x7fff, 0x8, 0x3]}, &(0x7f0000000080)=0x50) syz_clone(0x4000000, &(0x7f00000000c0)="896da0badbf7b60f48282fe9c3f5a8949a63b854acd963775cd482d15591a857ca88e3c2f40e1df93e1a1dd054fafed279175126753900af8969ea8c0adf7db9a09e059f3b1f2658f28c51b656651579c7ca7f718ea8c21b7022b56c7c00ae01aa3ba24c71ae56f7417721cf307b3d4fc829aba921e3df5ae3e3e97943276c53f90c2602f729064c3f5e4fb6a672bbb9fc54146eda0af9ca3d2215ab5aae14dae7ca6505ba5d76c9208853195440e9c5ea58ecce97390933ef1a16b46096d2de3e484b50c79c815d883b7093ec7cf07744dc24a3dabd3943176fd18665646e4f", 0xe0, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="ec0a5fc14186b628d5f891596b8ed8f8e761315f6645f38f1c71343ced1f52593c76b3b66548de1d4d7ad0e2ec42ebf58df9eeea97722f16fb007d7412e78132e04d4c6df720219440e5ac33d86d50c2a45fc8f0fc53e3b1725da46aa0407ae5") (async) r1 = syz_clone(0x4000000, &(0x7f00000000c0)="896da0badbf7b60f48282fe9c3f5a8949a63b854acd963775cd482d15591a857ca88e3c2f40e1df93e1a1dd054fafed279175126753900af8969ea8c0adf7db9a09e059f3b1f2658f28c51b656651579c7ca7f718ea8c21b7022b56c7c00ae01aa3ba24c71ae56f7417721cf307b3d4fc829aba921e3df5ae3e3e97943276c53f90c2602f729064c3f5e4fb6a672bbb9fc54146eda0af9ca3d2215ab5aae14dae7ca6505ba5d76c9208853195440e9c5ea58ecce97390933ef1a16b46096d2de3e484b50c79c815d883b7093ec7cf07744dc24a3dabd3943176fd18665646e4f", 0xe0, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="ec0a5fc14186b628d5f891596b8ed8f8e761315f6645f38f1c71343ced1f52593c76b3b66548de1d4d7ad0e2ec42ebf58df9eeea97722f16fb007d7412e78132e04d4c6df720219440e5ac33d86d50c2a45fc8f0fc53e3b1725da46aa0407ae5") ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x200}) syz_open_dev$loop(&(0x7f0000000300), 0x3, 0x40) r2 = socket(0x29, 0x0, 0xc08) openat$misdntimer(0xffffff9c, &(0x7f0000000340), 0x200, 0x0) r3 = socket$netlink(0x10, 0x3, 0x13) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x16c, 0x1, 0x2, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_EXPECT_MASK={0x6c, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1d}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}, @CTA_EXPECT_TUPLE={0xac, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x14a}, @CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7fffffff}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'irc-20000\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) (async) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x16c, 0x1, 0x2, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_EXPECT_MASK={0x6c, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1d}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}, @CTA_EXPECT_TUPLE={0xac, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x14a}, @CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7fffffff}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'irc-20000\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) prctl$PR_GET_THP_DISABLE(0x2a) (async) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f00000005c0)=0x21, 0x4) prctl$PR_GET_THP_DISABLE(0x2a) socket$kcm(0x29, 0x0, 0x0) (async) r4 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000980)={&(0x7f0000000600)=@ax25={{0x3, @default, 0x2}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000680)="f3f172b3b80d", 0x6}], 0x1, &(0x7f0000000700)=[{0x8c, 0x101, 0x8001, "5e48415e0e37f2e5f98ad523d12704af38c7270d992517a15087b19f2dab0f8a7a4328f8f20dc78cf577fbbc9160787022f9a4eedadc95abbd505a4d4a5250e554fa622770c351fd5dccc6b83d615ae9593a653609bd29a72c042e1698fcc6e2ff7d22be6ffa46fa6d53e175d984d7fbc7b7818a02ffd56940d9c8948da38d6a"}, {0x54, 0xff, 0xa, "54a4b8a756ebf0801a39637a698f29f2c6d61d3a15219e3bbd096666b08adffe67ba81553beadd2e799fa9e15e522993f1f0007b8bfd8be061d48f9533a90c20ef60b05d0d"}, {0x70, 0x107, 0x6, "7f86c9ec66f516ed50871897cb3c7c753aa5913f3fcbf35eba2d4165e833dab801e663cdf2a2a7ee3585967df9798b57743f89fbbbec281630360cc47e8e300b60d43a8dedbcbd43d3d3ee943612b4dde2d0e69c82eb1d1648162d435435729f4d"}, {0x80, 0x10d, 0x1ff, "a1656e7744b4fb3790e12a5bd10b6c1435ff4065817c073594765d4670866ad69b91eec3b650f0a5a6881f8e032fe55d091e867facc3f1a7cabd0004b41fe52ddc2df1bb7e2e04f8b03e825fb35464076b2c6dbc3af51ed5bf1223cbbc7f7a731b87383b2136a78561d213236fcff58866d817"}, {0x9c, 0x102, 0x101, "c0049417dc24089595e07dcf7ad502448c338d4b6cb1c06ec353da30661201a27ff71b66971f5d15c5129725c4e9997af80bb7dd0c6a0fb97da8c8faf210df790f5873ce203e52f7f860077ea4eef1a986559313939db1aa64a9805f37191a325302616dd92be4f2ab7d3bfe787cee5771308d12fd5123b63950fbd4c25000cf809b3c6590c09bae6133b9be8ff814"}], 0x26c}, 0x4080) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000009c0)=@assoc_value, &(0x7f0000000a00)=0x8) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000009c0)=@assoc_value={0x0}, &(0x7f0000000a00)=0x8) syz_open_dev$usbmon(&(0x7f0000000a40), 0x8, 0x140) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a80)={'syz0\x00', {0x5, 0x0, 0xfff6, 0x2}, 0x4a, [0x7, 0x0, 0x8000, 0x97, 0x7, 0xc, 0xe, 0x5, 0x2, 0x1, 0xffffffc0, 0xffffffff, 0x3, 0xa, 0x6, 0x2, 0x6, 0xbc, 0xa5, 0x10000, 0x101, 0x0, 0x4, 0x0, 0x8, 0x3ff, 0x2, 0xffffffb3, 0x7, 0x8, 0x1, 0x7, 0x2, 0x2, 0x4, 0x2, 0xfffffffb, 0x46b, 0xcd, 0xffff, 0x7, 0x0, 0x10000, 0x10001, 0x10, 0x6, 0xfffffff9, 0x2, 0x6, 0x9, 0x6, 0x5, 0xcd, 0x9, 0x1, 0x7, 0x2, 0x9, 0x5, 0x7, 0x1, 0x7f, 0x5, 0x5], [0x1, 0x7fffffff, 0x2, 0x6850, 0x4, 0x3, 0x0, 0x4, 0x6, 0x5, 0x100, 0x200, 0x7, 0x4, 0x6, 0x5, 0x3, 0x3, 0x596, 0x2, 0x81, 0x6, 0x8, 0x2, 0x1, 0x1, 0x9, 0x2, 0x5, 0xb7, 0x8, 0x72, 0x9, 0xd02a, 0x7ff, 0x60c, 0x0, 0x9, 0x6, 0x0, 0xfffffffd, 0x200, 0x1, 0x7fffffff, 0x7, 0x8001, 0x6, 0x7, 0x80, 0xffffff51, 0x5, 0x0, 0x9, 0x8, 0x8, 0x0, 0x400, 0x7, 0x10, 0x8, 0xbac, 0x100, 0x3, 0xffff6cb1], [0x1000, 0x3, 0xb, 0x6, 0x7, 0x2, 0x1000, 0xfffffffe, 0x8, 0x2, 0x7f0, 0x5, 0xfffffffa, 0x8, 0xf, 0x9, 0x1ff, 0x4, 0x7, 0x2, 0x10, 0x3, 0x81, 0xfd, 0x1, 0x4, 0x2, 0x7fffffff, 0x9, 0x7, 0x1c9, 0x5, 0x8, 0x5, 0x568, 0xfffffff8, 0x0, 0x86dc, 0x1, 0xa9, 0x987, 0x10000, 0xfffffffd, 0xf, 0x9, 0x1, 0x10000000, 0x81, 0x2, 0xfd, 0x40, 0xffffffff, 0x1, 0x1000, 0x80000001, 0x2, 0x4, 0x7, 0x8, 0x1, 0xf, 0x1000, 0x6, 0x2], [0x4, 0x81, 0x8, 0x200, 0x8, 0x7, 0xa, 0x1, 0x3, 0x6, 0x1, 0x3, 0xe, 0x5a, 0x5, 0x4, 0x7, 0xfffffffc, 0xe2, 0x4, 0xffffffff, 0x4, 0x7f, 0x4, 0x60e5, 0x5, 0x4, 0x7fff, 0x40, 0x20c4, 0x3, 0xfb, 0xbe7, 0x0, 0xffff, 0x6, 0x1ff, 0x0, 0x2, 0x6b, 0x3, 0x672, 0xd, 0x9, 0xc872, 0xe6, 0x1, 0x7ff, 0x3, 0xfff, 0x6, 0x9, 0xfff, 0x9, 0x5, 0x1, 0xf0a, 0x54, 0x9, 0xd6fc, 0x7232, 0x7, 0x1a0000, 0x741010d4]}, 0x45c) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000f00)={0x1, 0x3}, 0x8) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(r6, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x1c, r7, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_LBT_MODE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x91) r8 = openat(0xffffffffffffffff, &(0x7f0000001080)='./file0\x00', 0x200800, 0xa0) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000001100)={{{@in6=@mcast2, @in6=@ipv4={""/10, ""/2, @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@private1}}, &(0x7f0000001200)=0xe4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001240)={0x0, 0x0, 0x0}, &(0x7f0000001280)=0xc) fchownat(r8, &(0x7f00000010c0)='./file0\x00', r9, r10, 0x400) (async) fchownat(r8, &(0x7f00000010c0)='./file0\x00', r9, r10, 0x400) prctl$PR_GET_THP_DISABLE(0x2a) r11 = getpid() setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f00000012c0)={0xb, 0x4e, 0x0, 0x88, 0x2, 0x1, 0xffffffff, 0x0, r5}, 0x20) (async) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f00000012c0)={0xb, 0x4e, 0x0, 0x88, 0x2, 0x1, 0xffffffff, 0x0, r5}, 0x20) sched_setscheduler(r1, 0x3, &(0x7f0000001300)=0x1) (async) sched_setscheduler(r1, 0x3, &(0x7f0000001300)=0x1) syz_open_procfs(r11, &(0x7f0000001340)='net/nf_conntrack_expect\x00') (async) syz_open_procfs(r11, &(0x7f0000001340)='net/nf_conntrack_expect\x00') 0s ago: executing program 2 (id=516): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r3, &(0x7f0000000180)=[{0x0}], 0x1) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, 0x0, 0x0) dup(r4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x5, @empty, 0xb055}}, 0xff80, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) (fail_nth: 5) kernel console output (not intermixed with test programs): netdevsim4 netdevsim2: renamed from eth2 [ 69.829078][ T6257] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.045606][ T6257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.114651][ T6257] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.147963][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.150791][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.186843][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.194033][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.279038][ T6257] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.299853][ T6257] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.931186][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.950356][ T5988] Bluetooth: hci4: command tx timeout [ 70.963174][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.230272][ T6257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.040162][ T6307] warning: `syz.3.40' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 72.233381][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.335843][ T6257] veth0_vlan: entered promiscuous mode [ 72.386820][ T6257] veth1_vlan: entered promiscuous mode [ 72.606099][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.782879][ T6257] veth0_macvtap: entered promiscuous mode [ 72.933619][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.956583][ T6257] veth1_macvtap: entered promiscuous mode [ 72.995808][ T6257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.014762][ T6257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.039711][ T5988] Bluetooth: hci4: command tx timeout [ 73.147399][ T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.220469][ T60] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.226672][ T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.241875][ T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.381404][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.544561][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.559383][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.619922][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.637946][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.647371][ T53] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 73.815222][ T53] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 73.822807][ T53] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.841819][ T53] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 73.846005][ T53] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 73.852809][ T53] usb 7-1: Manufacturer: syz [ 73.868023][ T53] usb 7-1: config 0 descriptor?? [ 73.885655][ T6329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.42'. [ 73.948865][ T13] bridge_slave_1: left allmulticast mode [ 73.969269][ T13] bridge_slave_1: left promiscuous mode [ 73.977792][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.013752][ T13] bridge_slave_0: left allmulticast mode [ 74.018617][ T13] bridge_slave_0: left promiscuous mode [ 74.040485][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.093639][ T53] rc_core: IR keymap rc-hauppauge not found [ 74.098139][ T53] Registered IR keymap rc-empty [ 74.120311][ T53] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 74.141449][ T53] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input5 [ 74.838285][ T6338] netlink: 3 bytes leftover after parsing attributes in process `syz.2.43'. [ 74.897730][ T6339] input: syz1 as /devices/virtual/input/input6 [ 75.122746][ T5988] Bluetooth: hci4: command tx timeout [ 75.173299][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.198360][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.214569][ T13] bond0 (unregistering): Released all slaves [ 75.320283][ T6338] batadv1: entered allmulticast mode [ 76.113641][ T13] hsr_slave_0: left promiscuous mode [ 76.152583][ T13] hsr_slave_1: left promiscuous mode [ 76.172325][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.176505][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.215994][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.221032][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.287888][ T13] veth1_macvtap: left promiscuous mode [ 76.290980][ T13] veth0_macvtap: left promiscuous mode [ 76.294297][ T13] veth1_vlan: left promiscuous mode [ 76.296869][ T13] veth0_vlan: left promiscuous mode [ 77.171933][ T6355] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.310862][ T40] audit: type=1804 audit(2000000028.059:3): pid=6355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.44" name="/newroot/13/bus" dev="tmpfs" ino=104 res=1 errno=0 [ 77.457284][ T6357] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 78.115602][ T6038] usb 7-1: USB disconnect, device number 2 [ 78.623652][ T6362] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 79.055479][ T6364] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 80.654253][ T6373] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 80.862442][ T6037] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 81.084193][ T6037] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.089128][ T6037] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.108023][ T6037] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 81.143011][ T54] cfg80211: failed to load regulatory.db [ 81.169141][ T6037] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 81.174547][ T6037] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.237961][ T6037] usb 7-1: config 0 descriptor?? [ 81.897622][ T6037] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 82.133669][ T6387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.51'. [ 82.145856][ T6386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.50'. [ 82.195601][ T6386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.50'. [ 82.210833][ T6386] netlink: 'syz.2.50': attribute type 18 has an invalid length. [ 83.236735][ T61] usb 7-1: reset high-speed USB device number 3 using dummy_hcd [ 83.380289][ T61] usb 7-1: device descriptor read/64, error -32 [ 83.591070][ T6394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.53'. [ 83.626303][ T13] team0 (unregistering): Port device team_slave_1 removed [ 83.650710][ T61] usb 7-1: reset high-speed USB device number 3 using dummy_hcd [ 83.784677][ T61] usb 7-1: device descriptor read/64, error -32 [ 83.802188][ T13] team0 (unregistering): Port device team_slave_0 removed [ 84.028213][ T61] usb 7-1: reset high-speed USB device number 3 using dummy_hcd [ 84.070977][ T61] usb 7-1: device descriptor read/8, error -32 [ 84.355341][ T61] usb 7-1: reset high-speed USB device number 3 using dummy_hcd [ 84.382935][ T61] usb 7-1: device descriptor read/8, error -32 [ 84.503753][ T61] raw-gadget.0 gadget.2: failed to queue suspend event [ 84.513990][ T6038] usb 7-1: USB disconnect, device number 3 [ 84.621623][ T6038] raw-gadget.0 gadget.2: failed to queue reset event [ 84.729174][ T6038] raw-gadget.0 gadget.2: failed to queue resume event [ 84.800782][ T6038] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 84.805542][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 84.829262][ T6038] raw-gadget.0 gadget.2: failed to queue reset event [ 84.921127][ T6038] raw-gadget.0 gadget.2: failed to queue resume event [ 84.991502][ T6038] usb 7-1: device descriptor read/64, error -32 [ 85.110214][ T6038] raw-gadget.0 gadget.2: failed to queue suspend event [ 85.117097][ T6038] raw-gadget.0 gadget.2: failed to queue reset event [ 85.219225][ T6038] raw-gadget.0 gadget.2: failed to queue resume event [ 85.280264][ T6038] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 85.283743][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 85.299523][ T6038] raw-gadget.0 gadget.2: failed to queue reset event [ 85.405565][ T6038] raw-gadget.0 gadget.2: failed to queue resume event [ 85.428436][ T6386] Zero length message leads to an empty skb [ 85.464090][ T1140] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.483950][ T6386] raw-gadget.0 gadget.2: failed to queue suspend event [ 85.488988][ T6386] raw-gadget.0 gadget.2: failed to queue disconnect event [ 85.490327][ T1140] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.526900][ T1140] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.535082][ T1140] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.540574][ T6038] usb 7-1: device descriptor read/64, error -32 [ 85.819063][ T6038] usb usb7-port1: attempt power cycle [ 85.973630][ T6411] overlayfs: failed to resolve './file1': -2 [ 86.376188][ T6410] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 87.828917][ T6436] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 87.921470][ T6437] overlayfs: failed to resolve './file1': -2 [ 88.104824][ C2] vkms_vblank_simulate: vblank timer overrun [ 88.329948][ C2] vkms_vblank_simulate: vblank timer overrun [ 88.475156][ C2] vkms_vblank_simulate: vblank timer overrun [ 88.508228][ C2] vkms_vblank_simulate: vblank timer overrun [ 88.772338][ T6449] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 88.804586][ C2] vkms_vblank_simulate: vblank timer overrun [ 88.940723][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 89.152961][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.158739][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.170457][ T6462] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 89.294530][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 89.339943][ T10] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 89.349970][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.398037][ T10] usb 8-1: config 0 descriptor?? [ 89.585382][ C2] vkms_vblank_simulate: vblank timer overrun [ 89.882797][ T6470] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 89.950306][ T10] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 90.200584][ T6483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.63'. [ 90.204240][ T6483] netlink: 12 bytes leftover after parsing attributes in process `syz.3.63'. [ 90.208006][ T6483] netlink: 'syz.3.63': attribute type 18 has an invalid length. [ 90.239963][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.245996][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.250972][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.255586][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.519347][ C2] vkms_vblank_simulate: vblank timer overrun [ 91.144207][ C2] vkms_vblank_simulate: vblank timer overrun [ 91.569815][ T6496] FAULT_INJECTION: forcing a failure. [ 91.569815][ T6496] name failslab, interval 1, probability 0, space 0, times 0 [ 91.580616][ T6496] CPU: 3 UID: 0 PID: 6496 Comm: syz.2.72 Not tainted syzkaller #0 PREEMPT(full) [ 91.580641][ T6496] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 91.580651][ T6496] Call Trace: [ 91.580657][ T6496] [ 91.580663][ T6496] dump_stack_lvl+0x16c/0x1f0 [ 91.580694][ T6496] should_fail_ex+0x512/0x640 [ 91.580724][ T6496] ? io_cache_alloc_new+0x45/0xf0 [ 91.580738][ T6496] should_failslab+0xc2/0x120 [ 91.580759][ T6496] __kmalloc_noprof+0xd2/0x510 [ 91.580783][ T6496] io_cache_alloc_new+0x45/0xf0 [ 91.580799][ T6496] io_arm_apoll+0x88e/0xa60 [ 91.580822][ T6496] ? __pfx_io_arm_apoll+0x10/0x10 [ 91.580842][ T6496] ? __fget_files+0x204/0x3c0 [ 91.580869][ T6496] io_arm_poll_handler+0x223/0x2b0 [ 91.580894][ T6496] io_queue_async+0xaf/0x330 [ 91.580917][ T6496] io_submit_sqes+0x1746/0x25c0 [ 91.580954][ T6496] __do_sys_io_uring_enter+0xd6a/0x1630 [ 91.580981][ T6496] ? __fget_files+0x20e/0x3c0 [ 91.580998][ T6496] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 91.581023][ T6496] ? fput+0x9b/0xd0 [ 91.581140][ T6496] ? ksys_write+0x1ac/0x250 [ 91.581160][ T6496] ? __pfx_ksys_write+0x10/0x10 [ 91.581181][ T6496] ? rcu_is_watching+0x12/0xc0 [ 91.581203][ T6496] __do_fast_syscall_32+0x7c/0x3a0 [ 91.581232][ T6496] do_fast_syscall_32+0x32/0x80 [ 91.581256][ T6496] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 91.581276][ T6496] RIP: 0023:0xf7f77579 [ 91.581289][ T6496] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 91.581304][ T6496] RSP: 002b:00000000f546555c EFLAGS: 00000296 ORIG_RAX: 00000000000001aa [ 91.581320][ T6496] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000000068be [ 91.581330][ T6496] RDX: 0000000000005002 RSI: 0000000000000004 RDI: 0000000000000000 [ 91.581339][ T6496] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 91.581348][ T6496] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 91.581357][ T6496] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 91.581381][ T6496] [ 91.947640][ T5836] usb 8-1: USB disconnect, device number 2 [ 91.980666][ T6504] overlayfs: failed to resolve './file1': -2 [ 92.171516][ C2] vkms_vblank_simulate: vblank timer overrun [ 92.492148][ C2] vkms_vblank_simulate: vblank timer overrun [ 92.746183][ T6515] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 92.850196][ T40] audit: type=1804 audit(2000000043.589:4): pid=6514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.74" name="/newroot/25/bus" dev="tmpfs" ino=210 res=1 errno=0 [ 92.883170][ C2] vkms_vblank_simulate: vblank timer overrun [ 92.910808][ C2] vkms_vblank_simulate: vblank timer overrun [ 93.274113][ C2] vkms_vblank_simulate: vblank timer overrun [ 94.053387][ T6527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.77'. [ 94.073970][ T6526] FAULT_INJECTION: forcing a failure. [ 94.073970][ T6526] name failslab, interval 1, probability 0, space 0, times 0 [ 94.118008][ T6526] CPU: 3 UID: 0 PID: 6526 Comm: syz.3.78 Not tainted syzkaller #0 PREEMPT(full) [ 94.118035][ T6526] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 94.118047][ T6526] Call Trace: [ 94.118053][ T6526] [ 94.118060][ T6526] dump_stack_lvl+0x16c/0x1f0 [ 94.118090][ T6526] should_fail_ex+0x512/0x640 [ 94.118119][ T6526] should_failslab+0xc2/0x120 [ 94.118142][ T6526] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 94.118162][ T6526] ? skb_clone+0x190/0x3f0 [ 94.118191][ T6526] skb_clone+0x190/0x3f0 [ 94.118216][ T6526] netlink_deliver_tap+0xabd/0xd30 [ 94.118246][ T6526] netlink_unicast+0x64c/0x870 [ 94.118275][ T6526] ? __pfx_netlink_unicast+0x10/0x10 [ 94.118301][ T6526] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 94.118332][ T6526] netlink_sendmsg+0x8d1/0xdd0 [ 94.118362][ T6526] ? __pfx_netlink_sendmsg+0x10/0x10 [ 94.118389][ T6526] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 94.118413][ T6526] ____sys_sendmsg+0xa95/0xc70 [ 94.118434][ T6526] ? __pfx_____sys_sendmsg+0x10/0x10 [ 94.118463][ T6526] ? get_compat_msghdr+0x11a/0x170 [ 94.118497][ T6526] ___sys_sendmsg+0x134/0x1d0 [ 94.118524][ T6526] ? __pfx____sys_sendmsg+0x10/0x10 [ 94.118559][ T6526] ? find_held_lock+0x2b/0x80 [ 94.118592][ T6526] __sys_sendmsg+0x16d/0x220 [ 94.118618][ T6526] ? __pfx___sys_sendmsg+0x10/0x10 [ 94.118653][ T6526] ? rcu_is_watching+0x12/0xc0 [ 94.118673][ T6526] __do_fast_syscall_32+0x7c/0x3a0 [ 94.118701][ T6526] do_fast_syscall_32+0x32/0x80 [ 94.118727][ T6526] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 94.118748][ T6526] RIP: 0023:0xf707e579 [ 94.118762][ T6526] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 94.118778][ T6526] RSP: 002b:00000000f546e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 94.118795][ T6526] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000540 [ 94.118806][ T6526] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 94.118815][ T6526] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 94.118825][ T6526] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 94.118833][ T6526] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 94.118855][ T6526] [ 94.504171][ C2] vkms_vblank_simulate: vblank timer overrun [ 94.524324][ T6536] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 94.777460][ T6538] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 95.571909][ C2] vkms_vblank_simulate: vblank timer overrun [ 97.287338][ T6566] netlink: 'syz.0.86': attribute type 1 has an invalid length. [ 97.301229][ T6566] netlink: 224 bytes leftover after parsing attributes in process `syz.0.86'. [ 100.422438][ T6037] IPVS: starting estimator thread 0... [ 100.532175][ T6612] IPVS: using max 26 ests per chain, 62400 per kthread [ 103.379452][ T34] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 103.424873][ T6628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.96'. [ 103.543994][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 103.566015][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.571473][ T34] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 103.586981][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.597609][ T34] usb 5-1: config 0 descriptor?? [ 104.086646][ T34] usbhid 5-1:0.0: can't add hid device: -71 [ 104.089898][ T34] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 104.551982][ T34] usb 5-1: USB disconnect, device number 2 [ 106.234361][ T6658] netlink: 24 bytes leftover after parsing attributes in process `syz.3.106'. [ 106.602247][ T6668] syz_tun: entered allmulticast mode [ 107.091632][ T5988] Bluetooth: hci3: Malformed Event: 0x02 [ 107.715191][ T6681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.108'. [ 107.733367][ T6681] netlink: 'syz.3.108': attribute type 5 has an invalid length. [ 107.736182][ T6681] netlink: 20 bytes leftover after parsing attributes in process `syz.3.108'. [ 107.869203][ T6681] geneve2: entered promiscuous mode [ 107.876135][ T6681] geneve2: entered allmulticast mode [ 107.893391][ T46] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 107.922573][ T46] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 107.940615][ T46] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 107.944641][ T46] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 108.340805][ T6702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.113'. [ 108.373300][ T6667] syz_tun: left allmulticast mode [ 108.379463][ T6701] syz.4.116 uses obsolete (PF_INET,SOCK_PACKET) [ 108.890736][ T54] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 109.123682][ T54] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 109.128523][ T54] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 109.147076][ T54] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 109.166401][ T6716] FAULT_INJECTION: forcing a failure. [ 109.166401][ T6716] name failslab, interval 1, probability 0, space 0, times 0 [ 109.166434][ T6716] CPU: 0 UID: 0 PID: 6716 Comm: syz.4.121 Not tainted syzkaller #0 PREEMPT(full) [ 109.166454][ T6716] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 109.166463][ T6716] Call Trace: [ 109.166469][ T6716] [ 109.166476][ T6716] dump_stack_lvl+0x16c/0x1f0 [ 109.166507][ T6716] should_fail_ex+0x512/0x640 [ 109.166538][ T6716] should_failslab+0xc2/0x120 [ 109.166562][ T6716] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 109.166584][ T6716] ? skb_clone+0x190/0x3f0 [ 109.166611][ T6716] skb_clone+0x190/0x3f0 [ 109.166634][ T6716] netlink_deliver_tap+0xabd/0xd30 [ 109.166663][ T6716] netlink_unicast+0x64c/0x870 [ 109.166693][ T6716] ? __pfx_netlink_unicast+0x10/0x10 [ 109.166718][ T6716] ? __pfx___might_resched+0x10/0x10 [ 109.166747][ T6716] netlink_sendmsg+0x8d1/0xdd0 [ 109.166779][ T6716] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.166810][ T6716] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 109.166835][ T6716] ____sys_sendmsg+0xa95/0xc70 [ 109.166859][ T6716] ? __pfx_____sys_sendmsg+0x10/0x10 [ 109.166879][ T6716] ? get_compat_msghdr+0x11a/0x170 [ 109.166915][ T6716] ___sys_sendmsg+0x134/0x1d0 [ 109.166944][ T6716] ? __pfx____sys_sendmsg+0x10/0x10 [ 109.166984][ T6716] ? find_held_lock+0x2b/0x80 [ 109.167018][ T6716] __sys_sendmsg+0x16d/0x220 [ 109.167047][ T6716] ? __pfx___sys_sendmsg+0x10/0x10 [ 109.167084][ T6716] ? rcu_is_watching+0x12/0xc0 [ 109.167108][ T6716] __do_fast_syscall_32+0x7c/0x3a0 [ 109.167139][ T6716] do_fast_syscall_32+0x32/0x80 [ 109.167166][ T6716] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 109.167187][ T6716] RIP: 0023:0xf7fe3579 [ 109.167204][ T6716] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 109.167220][ T6716] RSP: 002b:00000000f54f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 109.167239][ T6716] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800003c0 [ 109.167252][ T6716] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 109.167262][ T6716] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 109.167271][ T6716] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 109.167281][ T6716] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 109.167311][ T6716] [ 109.366632][ T54] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.378606][ T6704] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 109.409154][ T54] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 109.593339][ T54] usb 5-1: USB disconnect, device number 3 [ 111.594583][ T6746] syz_tun: entered allmulticast mode [ 111.907242][ T6751] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 112.788695][ T6753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.127'. [ 112.880213][ T6753] netlink: 'syz.0.127': attribute type 5 has an invalid length. [ 112.883234][ T6753] netlink: 20 bytes leftover after parsing attributes in process `syz.0.127'. [ 112.908056][ T6753] geneve2: entered promiscuous mode [ 112.911822][ T6753] geneve2: entered allmulticast mode [ 112.916275][ T71] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 112.947346][ T60] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 112.954607][ T60] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 112.972665][ T60] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 113.454450][ T6745] syz_tun: left allmulticast mode [ 114.375337][ T6767] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 114.825283][ T6769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.134'. [ 115.389493][ T6772] FAULT_INJECTION: forcing a failure. [ 115.389493][ T6772] name failslab, interval 1, probability 0, space 0, times 0 [ 115.399578][ T6772] CPU: 2 UID: 0 PID: 6772 Comm: syz.0.135 Not tainted syzkaller #0 PREEMPT(full) [ 115.399603][ T6772] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 115.399613][ T6772] Call Trace: [ 115.399619][ T6772] [ 115.399626][ T6772] dump_stack_lvl+0x16c/0x1f0 [ 115.399656][ T6772] should_fail_ex+0x512/0x640 [ 115.399682][ T6772] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 115.399701][ T6772] should_failslab+0xc2/0x120 [ 115.399723][ T6772] __kmalloc_cache_noprof+0x6a/0x3e0 [ 115.399739][ T6772] ? __lock_sock+0x1f4/0x260 [ 115.399761][ T6772] ? __genradix_ptr_alloc+0x214/0x5f0 [ 115.399783][ T6772] __genradix_ptr_alloc+0x214/0x5f0 [ 115.399807][ T6772] __genradix_prealloc+0x5c/0x90 [ 115.399851][ T6772] sctp_send_add_streams+0x3eb/0x540 [ 115.399881][ T6772] sctp_setsockopt+0x44c7/0xb870 [ 115.399898][ T6772] ? ksys_write+0x190/0x250 [ 115.399922][ T6772] ? __pfx_sctp_setsockopt+0x10/0x10 [ 115.399939][ T6772] ? find_held_lock+0x2b/0x80 [ 115.399960][ T6772] ? aa_sock_opt_perm+0xfd/0x1c0 [ 115.399977][ T6772] ? sock_common_setsockopt+0x2e/0xf0 [ 115.400026][ T6772] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 115.400047][ T6772] do_sock_setsockopt+0xf3/0x1d0 [ 115.400068][ T6772] __sys_setsockopt+0x120/0x1a0 [ 115.400096][ T6772] __ia32_sys_setsockopt+0xbc/0x160 [ 115.400119][ T6772] ? lockdep_hardirqs_on+0x7c/0x110 [ 115.400142][ T6772] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 115.400168][ T6772] __do_fast_syscall_32+0x7c/0x3a0 [ 115.400196][ T6772] do_fast_syscall_32+0x32/0x80 [ 115.400220][ T6772] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 115.400240][ T6772] RIP: 0023:0xf702e579 [ 115.400259][ T6772] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 115.400274][ T6772] RSP: 002b:00000000f53fd55c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 115.400292][ T6772] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000084 [ 115.400301][ T6772] RDX: 0000000000000079 RSI: 00000000800001c0 RDI: 0000000000000008 [ 115.400311][ T6772] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 115.400319][ T6772] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 115.400329][ T6772] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 115.400349][ T6772] [ 116.001188][ T5988] Bluetooth: hci4: Malformed Event: 0x02 [ 117.189578][ T6790] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 117.789080][ T6802] fuse: Bad value for 'fd' [ 117.791469][ T6803] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 118.947737][ T6817] netlink: 28 bytes leftover after parsing attributes in process `syz.2.149'. [ 120.482510][ T6846] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 120.697570][ T6849] loop6: detected capacity change from 0 to 524287999 [ 120.711589][ T6850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.154'. [ 121.146349][ T6853] netlink: 512 bytes leftover after parsing attributes in process `syz.3.159'. [ 121.599255][ T6860] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 121.989317][ T6864] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 122.535664][ T6867] tipc: Started in network mode [ 122.537777][ T6867] tipc: Node identity , cluster identity 4711 [ 122.540623][ T6867] tipc: Failed to obtain node identity [ 122.543143][ T6867] tipc: Enabling of bearer rejected, failed to enable media [ 122.549502][ T6867] syzkaller0: entered promiscuous mode [ 122.571579][ T6867] syzkaller0: entered allmulticast mode [ 122.594603][ T6867] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1500) ! [ 122.815907][ T6869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.165'. [ 124.359804][ T6892] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 124.625030][ T6895] FAULT_INJECTION: forcing a failure. [ 124.625030][ T6895] name failslab, interval 1, probability 0, space 0, times 0 [ 124.638800][ T6895] CPU: 3 UID: 0 PID: 6895 Comm: syz.2.171 Not tainted syzkaller #0 PREEMPT(full) [ 124.638904][ T6895] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 124.638916][ T6895] Call Trace: [ 124.638964][ T6895] [ 124.639009][ T6895] dump_stack_lvl+0x16c/0x1f0 [ 124.639077][ T6895] should_fail_ex+0x512/0x640 [ 124.639231][ T6895] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 124.639297][ T6895] should_failslab+0xc2/0x120 [ 124.639411][ T6895] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 124.639513][ T6895] ? __pfx_stack_trace_save+0x10/0x10 [ 124.639622][ T6895] ? __d_alloc+0x32/0xae0 [ 124.639728][ T6895] __d_alloc+0x32/0xae0 [ 124.639851][ T6895] d_alloc_parallel+0x111/0x1480 [ 124.639968][ T6895] ? lockdep_unlock+0x64/0xe0 [ 124.640027][ T6895] ? mark_lock+0x32d/0x610 [ 124.640142][ T6895] ? __pfx_d_alloc_parallel+0x10/0x10 [ 124.640259][ T6895] ? lockdep_init_map_type+0x5c/0x280 [ 124.640362][ T6895] ? lockdep_init_map_type+0x5c/0x280 [ 124.640432][ T6895] __lookup_slow+0x193/0x460 [ 124.640540][ T6895] ? __pfx___lookup_slow+0x10/0x10 [ 124.640663][ T6895] ? lookup_fast+0x156/0x610 [ 124.640781][ T6895] walk_component+0x353/0x5b0 [ 124.640804][ T6895] path_lookupat+0x142/0x6d0 [ 124.640826][ T6895] filename_lookup+0x224/0x5f0 [ 124.640844][ T6895] ? __do_fast_syscall_32+0x7c/0x3a0 [ 124.640873][ T6895] ? __pfx_filename_lookup+0x10/0x10 [ 124.640920][ T6895] ? find_held_lock+0x2b/0x80 [ 124.640939][ T6895] do_linkat+0x14c/0x5a0 [ 124.640965][ T6895] ? __pfx_do_linkat+0x10/0x10 [ 124.640987][ T6895] ? strncpy_from_user+0x203/0x2e0 [ 124.641017][ T6895] ? getname_flags.part.0+0x1c5/0x550 [ 124.641048][ T6895] __ia32_sys_link+0x7c/0xa0 [ 124.641071][ T6895] __do_fast_syscall_32+0x7c/0x3a0 [ 124.641100][ T6895] do_fast_syscall_32+0x32/0x80 [ 124.641127][ T6895] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 124.641148][ T6895] RIP: 0023:0xf7f77579 [ 124.641167][ T6895] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 124.641183][ T6895] RSP: 002b:00000000f546555c EFLAGS: 00000296 ORIG_RAX: 0000000000000009 [ 124.641200][ T6895] RAX: ffffffffffffffda RBX: 0000000080000280 RCX: 0000000080000400 [ 124.641211][ T6895] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 124.641221][ T6895] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 124.641230][ T6895] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 124.641241][ T6895] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 124.641264][ T6895] [ 125.048917][ T6891] netlink: 36 bytes leftover after parsing attributes in process `syz.4.170'. [ 125.076604][ T6891] netlink: 12 bytes leftover after parsing attributes in process `syz.4.170'. [ 125.124826][ T6891] bridge0: port 3(vlan2) entered blocking state [ 125.127712][ T6891] bridge0: port 3(vlan2) entered disabled state [ 125.170901][ T6891] vlan2: entered allmulticast mode [ 125.173017][ T6891] bridge0: entered allmulticast mode [ 125.206887][ T6891] vlan2: left allmulticast mode [ 125.221968][ T6891] bridge0: left allmulticast mode [ 125.594285][ T6916] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 126.673545][ T6919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.178'. [ 126.857678][ T6912] netlink: 'syz.3.176': attribute type 4 has an invalid length. [ 127.006467][ T6929] tipc: Started in network mode [ 127.023260][ T6929] tipc: Node identity , cluster identity 4711 [ 127.026106][ T6929] tipc: Failed to obtain node identity [ 127.054097][ T6929] tipc: Enabling of bearer rejected, failed to enable media [ 127.084276][ T6930] syzkaller0: entered promiscuous mode [ 127.088077][ T6930] syzkaller0: entered allmulticast mode [ 127.093337][ T6929] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1500) ! [ 127.144660][ T6934] FAULT_INJECTION: forcing a failure. [ 127.144660][ T6934] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 127.153037][ T6934] CPU: 3 UID: 0 PID: 6934 Comm: syz.0.182 Not tainted syzkaller #0 PREEMPT(full) [ 127.153064][ T6934] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 127.153075][ T6934] Call Trace: [ 127.153122][ T6934] [ 127.153132][ T6934] dump_stack_lvl+0x16c/0x1f0 [ 127.153164][ T6934] should_fail_ex+0x512/0x640 [ 127.153243][ T6934] should_fail_alloc_page+0xe7/0x130 [ 127.153308][ T6934] prepare_alloc_pages+0x3c2/0x610 [ 127.153342][ T6934] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 127.153403][ T6934] ? arch_stack_walk+0xa6/0x100 [ 127.153434][ T6934] ? stack_trace_save+0x8e/0xc0 [ 127.153493][ T6934] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 127.153516][ T6934] ? rcu_is_watching+0x12/0xc0 [ 127.153542][ T6934] ? kasan_save_track+0x14/0x30 [ 127.153602][ T6934] ? __kasan_slab_alloc+0x89/0x90 [ 127.153621][ T6934] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 127.153695][ T6934] ? __pmd_alloc+0xbf/0x930 [ 127.153721][ T6934] ? __handle_mm_fault+0xa06/0x2a50 [ 127.153778][ T6934] ? handle_mm_fault+0x589/0xd10 [ 127.153793][ T6934] ? do_user_addr_fault+0x7a6/0x1370 [ 127.153819][ T6934] ? exc_page_fault+0x5c/0xb0 [ 127.153885][ T6934] ? asm_exc_page_fault+0x26/0x30 [ 127.153900][ T6934] ? __put_user_2+0xd/0x20 [ 127.153966][ T6934] ? __ia32_sys_getresuid16+0x2fd/0x5a0 [ 127.153985][ T6934] ? __do_fast_syscall_32+0x7c/0x3a0 [ 127.154052][ T6934] ? do_fast_syscall_32+0x32/0x80 [ 127.154077][ T6934] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 127.154146][ T6934] ? policy_nodemask+0xea/0x4e0 [ 127.154173][ T6934] alloc_pages_mpol+0x1fb/0x550 [ 127.154246][ T6934] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 127.154278][ T6934] alloc_pages_noprof+0x131/0x390 [ 127.154344][ T6934] pte_alloc_one+0x1c/0x3a0 [ 127.154364][ T6934] __pte_alloc+0x6d/0x3c0 [ 127.154428][ T6934] ? __pfx___pte_alloc+0x10/0x10 [ 127.154454][ T6934] ? do_raw_spin_lock+0x12c/0x2b0 [ 127.154524][ T6934] do_pte_missing+0x285a/0x3ba0 [ 127.154545][ T6934] ? do_raw_spin_unlock+0x172/0x230 [ 127.154612][ T6934] ? _raw_spin_unlock+0x28/0x50 [ 127.154635][ T6934] ? __pmd_alloc+0x3fb/0x930 [ 127.154702][ T6934] __handle_mm_fault+0x152a/0x2a50 [ 127.154723][ T6934] ? mt_find+0x3ef/0xa30 [ 127.154740][ T6934] ? __pfx___handle_mm_fault+0x10/0x10 [ 127.154795][ T6934] ? __pfx_mt_find+0x10/0x10 [ 127.154826][ T6934] ? find_vma+0xbf/0x140 [ 127.154887][ T6934] ? __pfx_find_vma+0x10/0x10 [ 127.154912][ T6934] handle_mm_fault+0x589/0xd10 [ 127.154970][ T6934] ? trace_raw_output_exceptions+0x131/0x150 [ 127.155000][ T6934] do_user_addr_fault+0x7a6/0x1370 [ 127.155068][ T6934] ? rcu_is_watching+0x12/0xc0 [ 127.155090][ T6934] exc_page_fault+0x5c/0xb0 [ 127.155156][ T6934] asm_exc_page_fault+0x26/0x30 [ 127.155174][ T6934] RIP: 0010:__put_user_2+0xd/0x20 [ 127.155246][ T6934] Code: 88 01 31 c9 0f 01 ca e9 81 69 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <66> 89 01 31 c9 0f 01 ca e9 56 69 03 00 66 0f 1f 44 00 00 90 90 90 [ 127.155263][ T6934] RSP: 0018:ffffc90007197eb8 EFLAGS: 00050202 [ 127.155278][ T6934] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000080000040 [ 127.155289][ T6934] RDX: ffff888024a1a440 RSI: ffffffff81af4f22 RDI: ffffffff8c163180 [ 127.155341][ T6934] RBP: 0000000080000040 R08: 2cfb7b1ab8be5804 R09: 0000000000000001 [ 127.155352][ T6934] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880274bd700 [ 127.155362][ T6934] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 127.155378][ T6934] ? __ia32_sys_getresuid16+0x2f2/0x5a0 [ 127.155438][ T6934] __ia32_sys_getresuid16+0x2fd/0x5a0 [ 127.155460][ T6934] __do_fast_syscall_32+0x7c/0x3a0 [ 127.155522][ T6934] do_fast_syscall_32+0x32/0x80 [ 127.155547][ T6934] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 127.155565][ T6934] RIP: 0023:0xf702e579 [ 127.155615][ T6934] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 127.155630][ T6934] RSP: 002b:00000000f541e55c EFLAGS: 00000296 ORIG_RAX: 00000000000000a5 [ 127.155644][ T6934] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 0000000080000080 [ 127.155654][ T6934] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 127.155701][ T6934] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 127.155710][ T6934] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 127.155765][ T6934] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 127.156012][ T6934] [ 127.819622][ T6938] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 128.430111][ T61] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 128.630156][ T61] usb 8-1: Using ep0 maxpacket: 8 [ 128.641995][ T61] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 128.647298][ T61] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 128.656179][ T61] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 128.661939][ T61] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 128.674489][ T61] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 128.680466][ T61] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.762224][ T6955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.189'. [ 128.898457][ T6955] netlink: 88 bytes leftover after parsing attributes in process `syz.4.189'. [ 128.901232][ T61] usb 8-1: GET_CAPABILITIES returned 0 [ 128.901263][ T61] usbtmc 8-1:16.0: can't read capabilities [ 129.602448][ T6946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.608980][ T6946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.127188][ T5836] usb 8-1: USB disconnect, device number 3 [ 130.151834][ T7012] tunl0: entered promiscuous mode [ 130.156117][ T7012] netlink: 'syz.4.191': attribute type 4 has an invalid length. [ 130.170113][ T7012] netlink: 9 bytes leftover after parsing attributes in process `syz.4.191'. [ 130.966366][ T7023] netlink: 4 bytes leftover after parsing attributes in process `syz.3.194'. [ 131.216107][ T7026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.195'. [ 131.275132][ T7033] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 131.457240][ T7038] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 132.319989][ T5335] Bluetooth: hci4: command 0x0405 tx timeout [ 132.346606][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.448589][ T7059] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 133.746894][ T7063] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 133.752028][ T7063] team0: Device ipvlan2 is already an upper device of the team interface [ 134.242512][ T7071] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 134.575005][ T6059] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 134.598418][ T7083] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 134.930196][ T6059] usb 7-1: Using ep0 maxpacket: 16 [ 134.945109][ T6059] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.975878][ T6059] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.980792][ T6059] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 135.040224][ T6059] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 135.048041][ T6059] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.117063][ T6059] usb 7-1: config 0 descriptor?? [ 135.525598][ T5335] Bluetooth: hci4: unexpected event for opcode 0x2027 [ 135.589689][ T6059] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 135.616068][ T6059] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 135.619844][ T6059] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 135.624224][ T6059] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 135.633487][ T6059] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 135.649874][ T6059] input: HID 0955:7214 Haptics as /devices/virtual/input/input9 [ 135.771394][ T6059] shield 0003:0955:7214.0004: Registered Thunderstrike controller [ 135.809700][ T6059] shield 0003:0955:7214.0004: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 135.877627][ T841] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 135.890450][ T6059] usb 7-1: USB disconnect, device number 7 [ 135.911943][ T841] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 135.956748][ T841] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 135.974317][ T841] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 138.085828][ T7125] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 138.334879][ T7128] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 139.196918][ T7134] netlink: 4 bytes leftover after parsing attributes in process `syz.3.226'. [ 139.299594][ T40] audit: type=1326 audit(2000000000.289:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7139 comm="syz.3.227" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 139.361704][ T40] audit: type=1326 audit(2000000000.299:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7139 comm="syz.3.227" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 139.410666][ T40] audit: type=1326 audit(2000000000.299:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7139 comm="syz.3.227" exe="/syz-executor" sig=0 arch=40000003 syscall=138 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 139.486001][ T40] audit: type=1326 audit(2000000000.299:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7139 comm="syz.3.227" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 139.521504][ T40] audit: type=1326 audit(2000000000.299:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7139 comm="syz.3.227" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 139.528989][ T40] audit: type=1326 audit(2000000000.299:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7139 comm="syz.3.227" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 139.570613][ T40] audit: type=1326 audit(2000000000.299:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7139 comm="syz.3.227" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 140.068579][ T5335] Bluetooth: hci4: unexpected event for opcode 0x2027 [ 141.044927][ T7170] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 141.222561][ T7171] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 141.966433][ T7180] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 143.205497][ T7181] block device autoloading is deprecated and will be removed. [ 143.689050][ T7212] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 143.734826][ T7213] syz.4.244 (7213): /proc/7213/oom_adj is deprecated, please use /proc/7213/oom_score_adj instead. [ 144.255948][ T7218] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 144.882664][ T7222] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 146.185120][ T7240] FAULT_INJECTION: forcing a failure. [ 146.185120][ T7240] name failslab, interval 1, probability 0, space 0, times 0 [ 146.226311][ T7242] »»»»»»×[SRëåWß: renamed from lo [ 146.256435][ T7240] CPU: 3 UID: 0 PID: 7240 Comm: syz.0.251 Not tainted syzkaller #0 PREEMPT(full) [ 146.256459][ T7240] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 146.256469][ T7240] Call Trace: [ 146.256475][ T7240] [ 146.256482][ T7240] dump_stack_lvl+0x16c/0x1f0 [ 146.256510][ T7240] should_fail_ex+0x512/0x640 [ 146.256538][ T7240] should_failslab+0xc2/0x120 [ 146.256559][ T7240] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 146.256578][ T7240] ? skb_clone+0x190/0x3f0 [ 146.256605][ T7240] skb_clone+0x190/0x3f0 [ 146.256628][ T7240] netlink_deliver_tap+0xabd/0xd30 [ 146.256657][ T7240] netlink_unicast+0x64c/0x870 [ 146.256683][ T7240] ? __pfx_netlink_unicast+0x10/0x10 [ 146.256706][ T7240] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 146.256735][ T7240] netlink_sendmsg+0x8d1/0xdd0 [ 146.256760][ T7240] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.256785][ T7240] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 146.256806][ T7240] ____sys_sendmsg+0xa95/0xc70 [ 146.256824][ T7240] ? __pfx_____sys_sendmsg+0x10/0x10 [ 146.256839][ T7240] ? get_compat_msghdr+0x11a/0x170 [ 146.256870][ T7240] ___sys_sendmsg+0x134/0x1d0 [ 146.256893][ T7240] ? __pfx____sys_sendmsg+0x10/0x10 [ 146.256934][ T7240] ? find_held_lock+0x2b/0x80 [ 146.256964][ T7240] __sys_sendmsg+0x16d/0x220 [ 146.256986][ T7240] ? __pfx___sys_sendmsg+0x10/0x10 [ 146.257018][ T7240] ? rcu_is_watching+0x12/0xc0 [ 146.257037][ T7240] __do_fast_syscall_32+0x7c/0x3a0 [ 146.257063][ T7240] do_fast_syscall_32+0x32/0x80 [ 146.257086][ T7240] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 146.257105][ T7240] RIP: 0023:0xf702e579 [ 146.257117][ T7240] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 146.257131][ T7240] RSP: 002b:00000000f541e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 146.257146][ T7240] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 146.257156][ T7240] RDX: 000000000000c000 RSI: 0000000000000000 RDI: 0000000000000000 [ 146.257164][ T7240] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 146.257173][ T7240] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 146.257181][ T7240] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 146.257200][ T7240] [ 146.258219][ T7240] openvswitch: netlink: EtherType 0 is less than min 600 [ 147.675644][ C0] vkms_vblank_simulate: vblank timer overrun [ 147.735644][ C0] vkms_vblank_simulate: vblank timer overrun [ 147.803666][ C0] vkms_vblank_simulate: vblank timer overrun [ 147.899669][ C0] vkms_vblank_simulate: vblank timer overrun [ 148.087625][ C0] vkms_vblank_simulate: vblank timer overrun [ 148.410809][ T7256] rtc_cmos 00:05: Alarms can be up to one day in the future [ 148.483060][ T5836] rtc_cmos 00:05: Alarms can be up to one day in the future [ 148.489843][ T5836] rtc_cmos 00:05: Alarms can be up to one day in the future [ 148.514344][ T5836] rtc_cmos 00:05: Alarms can be up to one day in the future [ 148.550128][ T5836] rtc_cmos 00:05: Alarms can be up to one day in the future [ 148.554248][ T5836] rtc rtc0: __rtc_set_alarm: err=-22 [ 148.659623][ C0] vkms_vblank_simulate: vblank timer overrun [ 148.791906][ T10] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 148.930862][ T6059] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 148.944288][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 148.962042][ T10] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 148.965368][ T10] usb 7-1: config 0 has no interface number 0 [ 148.981483][ T10] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 148.990310][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.002267][ T10] usb 7-1: Product: syz [ 149.004102][ T10] usb 7-1: Manufacturer: syz [ 149.005918][ T10] usb 7-1: SerialNumber: syz [ 149.007820][ T7277] netlink: 'syz.4.264': attribute type 9 has an invalid length. [ 149.029063][ T7277] netlink: 'syz.4.264': attribute type 7 has an invalid length. [ 149.033688][ T7277] netlink: 'syz.4.264': attribute type 8 has an invalid length. [ 149.040557][ T10] usb 7-1: config 0 descriptor?? [ 149.048034][ T10] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 149.066688][ T10] usb 7-1: selecting invalid altsetting 1 [ 149.069678][ T10] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 149.110302][ T10] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 149.120251][ T6059] usb 5-1: Using ep0 maxpacket: 32 [ 149.133943][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 149.139361][ T10] usb 7-1: media controller created [ 149.147901][ T6059] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 149.171897][ T6059] usb 5-1: config 0 has no interface number 0 [ 149.178893][ T6059] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 149.206669][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 149.212390][ T6059] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.244947][ C0] vkms_vblank_simulate: vblank timer overrun [ 149.267374][ T6059] usb 5-1: Product: syz [ 149.277470][ T7270] FAULT_INJECTION: forcing a failure. [ 149.277470][ T7270] name failslab, interval 1, probability 0, space 0, times 0 [ 149.285544][ T7270] CPU: 0 UID: 0 PID: 7270 Comm: syz.2.261 Not tainted syzkaller #0 PREEMPT(full) [ 149.285570][ T7270] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 149.285580][ T7270] Call Trace: [ 149.285586][ T7270] [ 149.285593][ T7270] dump_stack_lvl+0x16c/0x1f0 [ 149.285624][ T7270] should_fail_ex+0x512/0x640 [ 149.285651][ T7270] ? fs_reclaim_acquire+0xae/0x150 [ 149.285679][ T7270] ? usb_alloc_urb+0x66/0xa0 [ 149.285700][ T7270] should_failslab+0xc2/0x120 [ 149.285723][ T7270] __kmalloc_noprof+0xd2/0x510 [ 149.285749][ T7270] usb_alloc_urb+0x66/0xa0 [ 149.285772][ T7270] usb_control_msg+0x1d3/0x4a0 [ 149.285799][ T7270] ? __pfx_usb_control_msg+0x10/0x10 [ 149.285821][ T7270] ? rcu_is_watching+0x12/0xc0 [ 149.285840][ T7270] ? trace_kmalloc+0x2b/0xd0 [ 149.285862][ T7270] ? __kmalloc_noprof+0x242/0x510 [ 149.285894][ T7270] ce6230_ctrl_msg+0x578/0x820 [ 149.285925][ T7270] ce6230_i2c_master_xfer+0x40c/0x610 [ 149.285949][ T7270] ? __pfx_ce6230_i2c_master_xfer+0x10/0x10 [ 149.285977][ T7270] __i2c_transfer+0x6b6/0x2190 [ 149.286005][ T7270] ? lockdep_hardirqs_on+0x7c/0x110 [ 149.286030][ T7270] ? __pfx___i2c_transfer+0x10/0x10 [ 149.286052][ T7270] ? rt_mutex_slowtrylock+0xc9/0x100 [ 149.286075][ T7270] i2c_transfer+0x1da/0x380 [ 149.286099][ T7270] i2c_transfer_buffer_flags+0x10c/0x190 [ 149.286123][ T7270] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 149.286148][ T7270] ? common_file_perm+0x1a9/0x340 [ 149.286176][ T7270] i2cdev_read+0x111/0x280 [ 149.286199][ T7270] ? __pfx_i2cdev_read+0x10/0x10 [ 149.286220][ T7270] vfs_readv+0x5c1/0x8b0 [ 149.286246][ T7270] ? __pfx_vfs_readv+0x10/0x10 [ 149.286264][ T7270] ? find_held_lock+0x2b/0x80 [ 149.286301][ T7270] ? __fget_files+0x20e/0x3c0 [ 149.286318][ T7270] ? __fget_files+0x130/0x3c0 [ 149.286343][ T7270] ? do_readv+0x132/0x340 [ 149.286359][ T7270] do_readv+0x132/0x340 [ 149.286377][ T7270] ? __pfx_do_readv+0x10/0x10 [ 149.286398][ T7270] ? rcu_is_watching+0x12/0xc0 [ 149.286420][ T7270] __do_fast_syscall_32+0x7c/0x3a0 [ 149.286449][ T7270] do_fast_syscall_32+0x32/0x80 [ 149.286476][ T7270] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 149.286497][ T7270] RIP: 0023:0xf7f77579 [ 149.286511][ T7270] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 149.286526][ T7270] RSP: 002b:00000000f548655c EFLAGS: 00000296 ORIG_RAX: 0000000000000091 [ 149.286543][ T7270] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 149.286553][ T7270] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 149.286563][ T7270] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 149.286573][ T7270] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 149.286583][ T7270] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 149.286607][ T7270] [ 149.287186][ T7270] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-12 [ 149.537098][ C0] vkms_vblank_simulate: vblank timer overrun [ 149.569722][ C0] vkms_vblank_simulate: vblank timer overrun [ 149.618707][ T6059] usb 5-1: Manufacturer: syz [ 149.626795][ T6059] usb 5-1: SerialNumber: syz [ 149.657189][ C0] vkms_vblank_simulate: vblank timer overrun [ 149.672003][ T10] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 149.693465][ T10] zl10353_read_register: readreg error (reg=127, ret==-71) [ 149.702686][ T10] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 149.732799][ T6059] usb 5-1: config 0 descriptor?? [ 149.755758][ T6059] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 149.790542][ T6059] usb 5-1: selecting invalid altsetting 1 [ 149.810770][ T6059] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 149.827897][ T7280] FAULT_INJECTION: forcing a failure. [ 149.827897][ T7280] name failslab, interval 1, probability 0, space 0, times 0 [ 149.828895][ T6059] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 149.833968][ T7280] CPU: 3 UID: 0 PID: 7280 Comm: syz.3.265 Not tainted syzkaller #0 PREEMPT(full) [ 149.833994][ T7280] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 149.834004][ T7280] Call Trace: [ 149.834010][ T7280] [ 149.834018][ T7280] dump_stack_lvl+0x16c/0x1f0 [ 149.834049][ T7280] should_fail_ex+0x512/0x640 [ 149.834092][ T7280] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 149.834118][ T7280] should_failslab+0xc2/0x120 [ 149.834142][ T7280] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 149.834163][ T7280] ? __alloc_skb+0x2b2/0x380 [ 149.834192][ T7280] __alloc_skb+0x2b2/0x380 [ 149.834221][ T7280] ? __pfx___alloc_skb+0x10/0x10 [ 149.834248][ T7280] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 149.834280][ T7280] netlink_alloc_large_skb+0x69/0x130 [ 149.834309][ T7280] netlink_sendmsg+0x6a1/0xdd0 [ 149.834339][ T7280] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.834369][ T7280] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 149.834393][ T7280] ____sys_sendmsg+0xa95/0xc70 [ 149.834416][ T7280] ? __pfx_____sys_sendmsg+0x10/0x10 [ 149.834434][ T7280] ? get_compat_msghdr+0x11a/0x170 [ 149.834471][ T7280] ___sys_sendmsg+0x134/0x1d0 [ 149.834497][ T7280] ? __pfx____sys_sendmsg+0x10/0x10 [ 149.834535][ T7280] ? find_held_lock+0x2b/0x80 [ 149.834569][ T7280] __sys_sendmsg+0x16d/0x220 [ 149.834596][ T7280] ? __pfx___sys_sendmsg+0x10/0x10 [ 149.834633][ T7280] ? rcu_is_watching+0x12/0xc0 [ 149.834654][ T7280] __do_fast_syscall_32+0x7c/0x3a0 [ 149.834684][ T7280] do_fast_syscall_32+0x32/0x80 [ 149.834710][ T7280] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 149.834731][ T7280] RIP: 0023:0xf707e579 [ 149.834745][ T7280] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 149.834762][ T7280] RSP: 002b:00000000f546e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 149.834779][ T7280] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 149.834789][ T7280] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 149.834799][ T7280] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 149.834809][ T7280] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 149.834819][ T7280] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 149.834842][ T7280] [ 149.901413][ T7284] FAULT_INJECTION: forcing a failure. [ 149.901413][ T7284] name failslab, interval 1, probability 0, space 0, times 0 [ 149.915091][ T10] usb 7-1: USB disconnect, device number 8 [ 149.916239][ T7284] CPU: 3 UID: 0 PID: 7284 Comm: syz.3.267 Not tainted syzkaller #0 PREEMPT(full) [ 149.916264][ T7284] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 149.916275][ T7284] Call Trace: [ 149.916281][ T7284] [ 149.916287][ T7284] dump_stack_lvl+0x16c/0x1f0 [ 149.916318][ T7284] should_fail_ex+0x512/0x640 [ 149.916351][ T7284] should_failslab+0xc2/0x120 [ 149.916373][ T7284] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 149.916395][ T7284] ? skb_clone+0x190/0x3f0 [ 149.916423][ T7284] skb_clone+0x190/0x3f0 [ 149.916457][ T7284] netlink_deliver_tap+0xabd/0xd30 [ 149.916492][ T7284] netlink_unicast+0x64c/0x870 [ 149.916525][ T7284] ? __pfx_netlink_unicast+0x10/0x10 [ 149.916552][ T7284] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 149.916585][ T7284] netlink_sendmsg+0x8d1/0xdd0 [ 149.916617][ T7284] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.916648][ T7284] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 149.916673][ T7284] ____sys_sendmsg+0xa95/0xc70 [ 149.916697][ T7284] ? __pfx_____sys_sendmsg+0x10/0x10 [ 149.916717][ T7284] ? get_compat_msghdr+0x11a/0x170 [ 149.916754][ T7284] ___sys_sendmsg+0x134/0x1d0 [ 149.916783][ T7284] ? __pfx____sys_sendmsg+0x10/0x10 [ 149.916823][ T7284] ? find_held_lock+0x2b/0x80 [ 149.916855][ T7284] __sys_sendmsg+0x16d/0x220 [ 149.916881][ T7284] ? __pfx___sys_sendmsg+0x10/0x10 [ 149.916917][ T7284] ? rcu_is_watching+0x12/0xc0 [ 149.916939][ T7284] __do_fast_syscall_32+0x7c/0x3a0 [ 149.916969][ T7284] do_fast_syscall_32+0x32/0x80 [ 149.916996][ T7284] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 149.917019][ T7284] RIP: 0023:0xf707e579 [ 149.917033][ T7284] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 149.917048][ T7284] RSP: 002b:00000000f546e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 149.917067][ T7284] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000380 [ 149.917076][ T7284] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 0000000000000000 [ 149.917086][ T7284] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 149.917095][ T7284] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 149.917106][ T7284] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 149.917129][ T7284] [ 149.959723][ T7273] 9pnet_fd: Insufficient options for proto=fd [ 149.966294][ T6059] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 149.971210][ T7286] FAULT_INJECTION: forcing a failure. [ 149.971210][ T7286] name failslab, interval 1, probability 0, space 0, times 0 [ 149.973477][ T6059] usb 5-1: media controller created [ 149.976161][ T7286] CPU: 3 UID: 0 PID: 7286 Comm: syz.3.268 Not tainted syzkaller #0 PREEMPT(full) [ 149.976183][ T7286] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 149.976194][ T7286] Call Trace: [ 149.976206][ T7286] [ 149.976213][ T7286] dump_stack_lvl+0x16c/0x1f0 [ 149.976243][ T7286] should_fail_ex+0x512/0x640 [ 149.976270][ T7286] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 149.976291][ T7286] should_failslab+0xc2/0x120 [ 149.976315][ T7286] __kmalloc_cache_noprof+0x6a/0x3e0 [ 149.976332][ T7286] ? __genradix_ptr_alloc+0x340/0x5f0 [ 149.976350][ T7286] ? sctp_auth_shkey_create+0x9e/0x210 [ 149.976379][ T7286] sctp_auth_shkey_create+0x9e/0x210 [ 149.976405][ T7286] sctp_auth_asoc_copy_shkeys+0x1f2/0x360 [ 149.976434][ T7286] sctp_association_new+0x19ad/0x2a00 [ 149.976467][ T7286] sctp_connect_new_asoc+0x1a8/0x770 [ 149.976483][ T7286] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 149.976500][ T7286] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 149.976525][ T7286] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 149.976553][ T7286] sctp_sendmsg+0x1560/0x1e10 [ 149.976572][ T7286] ? __lock_acquire+0xb97/0x1ce0 [ 149.976593][ T7286] ? __pfx_sctp_sendmsg+0x10/0x10 [ 149.976608][ T7286] ? __pfx___might_resched+0x10/0x10 [ 149.976628][ T7286] ? aa_sk_perm+0x2f4/0xb10 [ 149.976652][ T7286] ? __pfx_aa_sk_perm+0x10/0x10 [ 149.976672][ T7286] ? find_held_lock+0x2b/0x80 [ 149.976695][ T7286] ? __pfx_sctp_sendmsg+0x10/0x10 [ 149.976712][ T7286] inet_sendmsg+0x119/0x140 [ 149.976733][ T7286] ____sys_sendmsg+0x973/0xc70 [ 149.976755][ T7286] ? __pfx_____sys_sendmsg+0x10/0x10 [ 149.976773][ T7286] ? get_compat_msghdr+0x11a/0x170 [ 149.976806][ T7286] ___sys_sendmsg+0x134/0x1d0 [ 149.976831][ T7286] ? __pfx____sys_sendmsg+0x10/0x10 [ 149.976867][ T7286] ? find_held_lock+0x2b/0x80 [ 149.976898][ T7286] __sys_sendmsg+0x16d/0x220 [ 149.976924][ T7286] ? __pfx___sys_sendmsg+0x10/0x10 [ 149.976958][ T7286] ? rcu_is_watching+0x12/0xc0 [ 149.976976][ T7286] __do_fast_syscall_32+0x7c/0x3a0 [ 149.977001][ T7286] do_fast_syscall_32+0x32/0x80 [ 149.977025][ T7286] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 149.977044][ T7286] RIP: 0023:0xf707e579 [ 149.977056][ T7286] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 149.977071][ T7286] RSP: 002b:00000000f546e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 149.977087][ T7286] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001640 [ 149.977098][ T7286] RDX: 0000000020000041 RSI: 0000000000000000 RDI: 0000000000000000 [ 149.977108][ T7286] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 149.977118][ T7286] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 149.977127][ T7286] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 149.977149][ T7286] [ 150.451667][ C0] vkms_vblank_simulate: vblank timer overrun [ 150.513338][ T6059] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 150.531273][ T7289] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 150.550431][ T6059] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 150.554580][ T6059] zl10353_read_register: readreg error (reg=127, ret==-71) [ 150.558895][ T6059] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 150.650996][ T7289] team0: Device ipvlan2 is already an upper device of the team interface [ 150.771665][ C0] vkms_vblank_simulate: vblank timer overrun [ 150.830502][ T6059] usb 5-1: USB disconnect, device number 4 [ 151.566621][ C0] vkms_vblank_simulate: vblank timer overrun [ 151.665264][ T7308] netlink: 'syz.0.273': attribute type 1 has an invalid length. [ 151.668505][ T7308] netlink: 224 bytes leftover after parsing attributes in process `syz.0.273'. [ 151.871654][ C0] vkms_vblank_simulate: vblank timer overrun [ 152.505436][ T7320] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 152.533386][ T7320] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 153.428432][ T7334] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 155.098733][ T7346] pim6reg: entered allmulticast mode [ 155.177225][ T7346] pim6reg: left allmulticast mode [ 155.284780][ T7358] FAULT_INJECTION: forcing a failure. [ 155.284780][ T7358] name failslab, interval 1, probability 0, space 0, times 0 [ 155.291731][ T7358] CPU: 1 UID: 0 PID: 7358 Comm: syz.2.285 Not tainted syzkaller #0 PREEMPT(full) [ 155.291752][ T7358] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 155.291761][ T7358] Call Trace: [ 155.291767][ T7358] [ 155.291773][ T7358] dump_stack_lvl+0x16c/0x1f0 [ 155.291801][ T7358] should_fail_ex+0x512/0x640 [ 155.291824][ T7358] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 155.291841][ T7358] should_failslab+0xc2/0x120 [ 155.291860][ T7358] __kmalloc_cache_noprof+0x6a/0x3e0 [ 155.291874][ T7358] ? __asan_memcpy+0x3c/0x60 [ 155.291887][ T7358] ? sctp_association_new+0xbb/0x2a00 [ 155.291918][ T7358] sctp_association_new+0xbb/0x2a00 [ 155.291941][ T7358] ? sctp_v4_scope+0x183/0x1a0 [ 155.291960][ T7358] sctp_connect_new_asoc+0x1a8/0x770 [ 155.291976][ T7358] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 155.291994][ T7358] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 155.292018][ T7358] sctp_sendmsg+0x1560/0x1e10 [ 155.292036][ T7358] ? __lock_acquire+0xb97/0x1ce0 [ 155.292055][ T7358] ? __pfx_sctp_sendmsg+0x10/0x10 [ 155.292067][ T7358] ? __pfx___might_resched+0x10/0x10 [ 155.292086][ T7358] ? aa_sk_perm+0x2f4/0xb10 [ 155.292107][ T7358] ? __pfx_aa_sk_perm+0x10/0x10 [ 155.292124][ T7358] ? find_held_lock+0x2b/0x80 [ 155.292143][ T7358] ? __pfx_sctp_sendmsg+0x10/0x10 [ 155.292158][ T7358] inet_sendmsg+0x119/0x140 [ 155.292176][ T7358] ____sys_sendmsg+0x973/0xc70 [ 155.292192][ T7358] ? btrfs_reset_unused_block_groups+0xa43/0xff0 [ 155.292214][ T7358] ? __pfx_____sys_sendmsg+0x10/0x10 [ 155.292228][ T7358] ? get_compat_msghdr+0x11a/0x170 [ 155.292258][ T7358] ___sys_sendmsg+0x134/0x1d0 [ 155.292279][ T7358] ? __pfx____sys_sendmsg+0x10/0x10 [ 155.292310][ T7358] ? find_held_lock+0x2b/0x80 [ 155.292337][ T7358] __sys_sendmsg+0x16d/0x220 [ 155.292358][ T7358] ? __pfx___sys_sendmsg+0x10/0x10 [ 155.292388][ T7358] ? rcu_is_watching+0x12/0xc0 [ 155.292405][ T7358] __do_fast_syscall_32+0x7c/0x3a0 [ 155.292429][ T7358] do_fast_syscall_32+0x32/0x80 [ 155.292450][ T7358] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 155.292467][ T7358] RIP: 0023:0xf7f77579 [ 155.292479][ T7358] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 155.292493][ T7358] RSP: 002b:00000000f544455c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 155.292507][ T7358] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000800 [ 155.292515][ T7358] RDX: 0000000004048043 RSI: 0000000000000000 RDI: 0000000000000000 [ 155.292523][ T7358] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 155.292531][ T7358] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 155.292538][ T7358] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 155.292556][ T7358] [ 156.181382][ T7363] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 157.892950][ T7385] Bluetooth: MGMT ver 1.23 [ 159.268058][ T7408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.293'. [ 159.515802][ T7419] FAULT_INJECTION: forcing a failure. [ 159.515802][ T7419] name failslab, interval 1, probability 0, space 0, times 0 [ 159.524553][ T7419] CPU: 1 UID: 0 PID: 7419 Comm: syz.0.303 Not tainted syzkaller #0 PREEMPT(full) [ 159.524580][ T7419] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 159.524592][ T7419] Call Trace: [ 159.524598][ T7419] [ 159.524606][ T7419] dump_stack_lvl+0x16c/0x1f0 [ 159.524641][ T7419] should_fail_ex+0x512/0x640 [ 159.524672][ T7419] ? fs_reclaim_acquire+0xae/0x150 [ 159.524704][ T7419] ? tomoyo_encode2+0x100/0x3e0 [ 159.524731][ T7419] should_failslab+0xc2/0x120 [ 159.524758][ T7419] __kmalloc_noprof+0xd2/0x510 [ 159.524781][ T7419] ? d_absolute_path+0x136/0x1a0 [ 159.524815][ T7419] tomoyo_encode2+0x100/0x3e0 [ 159.524847][ T7419] tomoyo_encode+0x29/0x50 [ 159.524883][ T7419] tomoyo_realpath_from_path+0x18f/0x6e0 [ 159.524921][ T7419] tomoyo_path_number_perm+0x245/0x580 [ 159.524944][ T7419] ? tomoyo_path_number_perm+0x237/0x580 [ 159.524970][ T7419] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 159.525025][ T7419] ? find_held_lock+0x2b/0x80 [ 159.525046][ T7419] ? hook_file_ioctl_common+0x145/0x410 [ 159.525079][ T7419] ? __fget_files+0x20e/0x3c0 [ 159.525106][ T7419] security_file_ioctl_compat+0x9b/0x240 [ 159.525134][ T7419] __ia32_compat_sys_ioctl+0xc3/0x370 [ 159.525169][ T7419] __do_fast_syscall_32+0x7c/0x3a0 [ 159.525203][ T7419] do_fast_syscall_32+0x32/0x80 [ 159.525233][ T7419] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 159.525258][ T7419] RIP: 0023:0xf702e579 [ 159.525275][ T7419] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 159.525294][ T7419] RSP: 002b:00000000f541e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 159.525313][ T7419] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000402c5342 [ 159.525325][ T7419] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 159.525337][ T7419] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 159.525348][ T7419] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 159.525359][ T7419] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 159.525384][ T7419] [ 159.526149][ T7419] ERROR: Out of memory at tomoyo_realpath_from_path. [ 159.544732][ T7413] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 160.140104][ T61] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 160.292913][ T61] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 160.311182][ T61] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 160.315068][ T61] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 160.328411][ T61] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 160.340540][ T61] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 160.400648][ T61] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 160.420802][ T61] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 160.426655][ T61] usb 5-1: Product: syz [ 160.429195][ T61] usb 5-1: Manufacturer: syz [ 160.456317][ T61] cdc_wdm 5-1:1.0: skipping garbage [ 160.461563][ T61] cdc_wdm 5-1:1.0: skipping garbage [ 160.500707][ T61] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 160.503432][ T61] cdc_wdm 5-1:1.0: Unknown control protocol [ 160.682209][ T7436] netlink: 10 bytes leftover after parsing attributes in process `syz.2.309'. [ 161.104496][ T7441] FAULT_INJECTION: forcing a failure. [ 161.104496][ T7441] name failslab, interval 1, probability 0, space 0, times 0 [ 161.110190][ T7441] CPU: 1 UID: 0 PID: 7441 Comm: syz.2.310 Not tainted syzkaller #0 PREEMPT(full) [ 161.110216][ T7441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 161.110227][ T7441] Call Trace: [ 161.110234][ T7441] [ 161.110242][ T7441] dump_stack_lvl+0x16c/0x1f0 [ 161.110273][ T7441] should_fail_ex+0x512/0x640 [ 161.110321][ T7441] ? fs_reclaim_acquire+0xae/0x150 [ 161.110350][ T7441] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 161.110376][ T7441] should_failslab+0xc2/0x120 [ 161.110400][ T7441] __kmalloc_noprof+0xd2/0x510 [ 161.110429][ T7441] tomoyo_realpath_from_path+0xc2/0x6e0 [ 161.110457][ T7441] ? tomoyo_profile+0x47/0x60 [ 161.110477][ T7441] tomoyo_path_number_perm+0x245/0x580 [ 161.110498][ T7441] ? tomoyo_path_number_perm+0x237/0x580 [ 161.110527][ T7441] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 161.110579][ T7441] ? find_held_lock+0x2b/0x80 [ 161.110598][ T7441] ? hook_file_ioctl_common+0x145/0x410 [ 161.110630][ T7441] ? __fget_files+0x20e/0x3c0 [ 161.110654][ T7441] security_file_ioctl_compat+0x9b/0x240 [ 161.110680][ T7441] __ia32_compat_sys_ioctl+0xc3/0x370 [ 161.110713][ T7441] __do_fast_syscall_32+0x7c/0x3a0 [ 161.110745][ T7441] do_fast_syscall_32+0x32/0x80 [ 161.110774][ T7441] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 161.110797][ T7441] RIP: 0023:0xf7f77579 [ 161.110814][ T7441] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 161.110830][ T7441] RSP: 002b:00000000f544455c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 161.110849][ T7441] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0605345 [ 161.110861][ T7441] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 161.110872][ T7441] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 161.110882][ T7441] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 161.110893][ T7441] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 161.110918][ T7441] [ 161.110989][ T7441] ERROR: Out of memory at tomoyo_realpath_from_path. [ 162.270274][ C3] vkms_vblank_simulate: vblank timer overrun [ 162.277470][ T53] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 162.358246][ T5836] usb 5-1: USB disconnect, device number 5 [ 162.471969][ T53] usb 9-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 162.492885][ T53] usb 9-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 162.498444][ T53] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 162.502390][ T53] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.764773][ T53] usb 9-1: USB disconnect, device number 2 [ 162.796576][ C3] vkms_vblank_simulate: vblank timer overrun [ 163.451505][ C3] vkms_vblank_simulate: vblank timer overrun [ 163.452697][ T7466] FAULT_INJECTION: forcing a failure. [ 163.452697][ T7466] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 163.459830][ T7466] CPU: 2 UID: 0 PID: 7466 Comm: syz.4.318 Not tainted syzkaller #0 PREEMPT(full) [ 163.459856][ T7466] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 163.459867][ T7466] Call Trace: [ 163.459875][ T7466] [ 163.459884][ T7466] dump_stack_lvl+0x16c/0x1f0 [ 163.459920][ T7466] should_fail_ex+0x512/0x640 [ 163.459955][ T7466] _copy_from_user+0x2e/0xd0 [ 163.459978][ T7466] copy_from_sockptr_offset.constprop.0+0x153/0x1a0 [ 163.460024][ T7466] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 163.460053][ T7466] ? __local_bh_enable_ip+0xa4/0x120 [ 163.460076][ T7466] ? lockdep_hardirqs_on+0x7c/0x110 [ 163.460117][ T7466] do_ipv6_setsockopt+0x276e/0x4350 [ 163.460149][ T7466] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 163.460174][ T7466] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 163.460208][ T7466] ? find_held_lock+0x2b/0x80 [ 163.460229][ T7466] ? get_pid_task+0xfc/0x250 [ 163.460267][ T7466] ? __pfx___might_resched+0x10/0x10 [ 163.460288][ T7466] ? __lock_acquire+0x62e/0x1ce0 [ 163.460316][ T7466] ? aa_sk_perm+0x2f4/0xb10 [ 163.460340][ T7466] ? ksys_write+0x190/0x250 [ 163.460390][ T7466] ? __pfx_aa_sk_perm+0x10/0x10 [ 163.460418][ T7466] ? ipv6_setsockopt+0xcb/0x170 [ 163.460442][ T7466] ipv6_setsockopt+0xcb/0x170 [ 163.460470][ T7466] udpv6_setsockopt+0x7d/0xd0 [ 163.460499][ T7466] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 163.460525][ T7466] do_sock_setsockopt+0xf3/0x1d0 [ 163.460549][ T7466] __sys_setsockopt+0x120/0x1a0 [ 163.460583][ T7466] __ia32_sys_setsockopt+0xbc/0x160 [ 163.460611][ T7466] ? lockdep_hardirqs_on+0x7c/0x110 [ 163.460640][ T7466] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 163.460671][ T7466] __do_fast_syscall_32+0x7c/0x3a0 [ 163.460706][ T7466] do_fast_syscall_32+0x32/0x80 [ 163.460739][ T7466] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 163.460765][ T7466] RIP: 0023:0xf7fe3579 [ 163.460783][ T7466] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 163.460802][ T7466] RSP: 002b:00000000f54f655c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 163.460823][ T7466] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 163.460836][ T7466] RDX: 0000000000000032 RSI: 0000000080000280 RDI: 0000000000000014 [ 163.460848][ T7466] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 163.460859][ T7466] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 163.460870][ T7466] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 163.460898][ T7466] [ 165.163708][ C3] vkms_vblank_simulate: vblank timer overrun [ 165.619515][ C3] vkms_vblank_simulate: vblank timer overrun [ 165.667529][ C3] vkms_vblank_simulate: vblank timer overrun [ 166.065423][ C3] vkms_vblank_simulate: vblank timer overrun [ 166.703545][ T7492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.321'. [ 168.002142][ T7479] pim6reg: entered allmulticast mode [ 168.011160][ T7483] pim6reg: left allmulticast mode [ 169.327441][ T838] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 169.465861][ T7523] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 169.519729][ T838] usb 9-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 169.526263][ T838] usb 9-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 169.537648][ T838] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 169.552588][ T838] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.870527][ T10] usb 9-1: USB disconnect, device number 3 [ 170.242599][ T63] Bluetooth: hci0: command 0x0406 tx timeout [ 170.246655][ T5975] Bluetooth: hci3: command 0x0406 tx timeout [ 171.807713][ T7551] pim6reg: entered allmulticast mode [ 171.877195][ T7544] pim6reg: entered allmulticast mode [ 171.892351][ T7544] pim6reg: left allmulticast mode [ 172.484645][ T7563] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 172.841157][ T6040] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 173.009647][ T7569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.340'. [ 173.160434][ T6040] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 173.189171][ T6040] usb 8-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 173.193936][ T6040] usb 8-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 173.211643][ T6040] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 173.215532][ T6040] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.248995][ T6040] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 173.465611][ T5988] Bluetooth: hci4: unexpected event for opcode 0x2027 [ 173.523988][ T7571] tipc: Started in network mode [ 173.526626][ T7571] tipc: Node identity ac1414aa, cluster identity 4711 [ 173.541893][ T6040] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 173.564674][ T7571] tipc: Enabled bearer , priority 10 [ 173.589449][ T7571] tipc: Enabled bearer , priority 0 [ 173.880475][ T7575] binder: BINDER_SET_CONTEXT_MGR already set [ 173.887826][ T7575] binder: 7570:7575 ioctl 4018620d 80000040 returned -16 [ 174.613388][ T6396] tipc: Node number set to 2886997162 [ 175.397086][ T34] usb 8-1: USB disconnect, device number 4 [ 176.571729][ T7593] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 176.758592][ T7596] pim6reg: entered allmulticast mode [ 176.785462][ T7596] pim6reg: left allmulticast mode [ 177.165552][ T7606] FAULT_INJECTION: forcing a failure. [ 177.165552][ T7606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.174683][ T7606] CPU: 3 UID: 0 PID: 7606 Comm: syz.4.354 Not tainted syzkaller #0 PREEMPT(full) [ 177.174710][ T7606] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 177.174723][ T7606] Call Trace: [ 177.174730][ T7606] [ 177.174737][ T7606] dump_stack_lvl+0x16c/0x1f0 [ 177.174770][ T7606] should_fail_ex+0x512/0x640 [ 177.174804][ T7606] _copy_to_user+0x32/0xd0 [ 177.174825][ T7606] binder_ioctl+0x24f6/0x71f0 [ 177.174862][ T7606] ? tomoyo_path_number_perm+0x18d/0x580 [ 177.174891][ T7606] ? __pfx_binder_ioctl+0x10/0x10 [ 177.174918][ T7606] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 177.174948][ T7606] ? do_vfs_ioctl+0x128/0x14f0 [ 177.174976][ T7606] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 177.175011][ T7606] ? find_held_lock+0x2b/0x80 [ 177.175037][ T7606] ? __fget_files+0x20e/0x3c0 [ 177.175060][ T7606] ? __pfx_binder_ioctl+0x10/0x10 [ 177.175081][ T7606] compat_ptr_ioctl+0x6e/0xa0 [ 177.175109][ T7606] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 177.175135][ T7606] __ia32_compat_sys_ioctl+0x242/0x370 [ 177.175166][ T7606] __do_fast_syscall_32+0x7c/0x3a0 [ 177.175197][ T7606] do_fast_syscall_32+0x32/0x80 [ 177.175224][ T7606] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 177.175248][ T7606] RIP: 0023:0xf7fe3579 [ 177.175365][ T7606] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 177.175384][ T7606] RSP: 002b:00000000f54f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 177.175402][ T7606] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c0306201 [ 177.175415][ T7606] RDX: 0000000080000440 RSI: 0000000000000000 RDI: 0000000000000000 [ 177.175426][ T7606] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 177.175436][ T7606] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 177.175448][ T7606] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 177.175471][ T7606] [ 177.175479][ T7606] binder: 7605:7606 ioctl c0306201 80000440 returned -14 [ 177.185117][ T7607] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 177.988810][ T7622] FAULT_INJECTION: forcing a failure. [ 177.988810][ T7622] name failslab, interval 1, probability 0, space 0, times 0 [ 177.996637][ T7622] CPU: 1 UID: 0 PID: 7622 Comm: syz.4.357 Not tainted syzkaller #0 PREEMPT(full) [ 177.996674][ T7622] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 177.996684][ T7622] Call Trace: [ 177.996692][ T7622] [ 177.996699][ T7622] dump_stack_lvl+0x16c/0x1f0 [ 177.996735][ T7622] should_fail_ex+0x512/0x640 [ 177.996767][ T7622] should_failslab+0xc2/0x120 [ 177.996793][ T7622] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 177.996816][ T7622] ? sctp_chunkify+0x51/0x2d0 [ 177.996840][ T7622] sctp_chunkify+0x51/0x2d0 [ 177.996861][ T7622] _sctp_make_chunk+0x148/0x270 [ 177.996882][ T7622] sctp_make_control+0x2f/0x2d0 [ 177.996903][ T7622] sctp_make_heartbeat+0xa7/0x2e0 [ 177.996926][ T7622] ? __pfx_sctp_make_heartbeat+0x10/0x10 [ 177.996953][ T7622] ? sctp_sm_lookup_event+0x15b/0x570 [ 177.996974][ T7622] ? __pfx_sctp_sm_lookup_event+0x10/0x10 [ 177.996996][ T7622] ? __pfx_sctp_pname+0x10/0x10 [ 177.997017][ T7622] sctp_sf_do_prm_requestheartbeat+0x27/0x220 [ 177.997041][ T7622] ? __pfx_sctp_pname+0x10/0x10 [ 177.997065][ T7622] sctp_do_sm+0x181/0x5c80 [ 177.997094][ T7622] ? __pfx_sctp_do_sm+0x10/0x10 [ 177.997110][ T7622] ? kasan_save_stack+0x42/0x60 [ 177.997130][ T7622] ? kasan_save_track+0x14/0x30 [ 177.997147][ T7622] ? __kasan_kmalloc+0xaa/0xb0 [ 177.997165][ T7622] ? __kmalloc_node_track_caller_noprof+0x221/0x510 [ 177.997185][ T7622] ? sctp_setsockopt+0x4ce/0xb870 [ 177.997201][ T7622] ? do_sock_setsockopt+0xf3/0x1d0 [ 177.997256][ T7622] sctp_primitive_REQUESTHEARTBEAT+0x9f/0xd0 [ 177.997280][ T7622] sctp_apply_peer_addr_params+0x113/0x3400 [ 177.997311][ T7622] sctp_setsockopt+0x143b/0xb870 [ 177.997329][ T7622] ? ksys_write+0x190/0x250 [ 177.997354][ T7622] ? __pfx_sctp_setsockopt+0x10/0x10 [ 177.997371][ T7622] ? find_held_lock+0x2b/0x80 [ 177.997392][ T7622] ? aa_sock_opt_perm+0xfd/0x1c0 [ 177.997410][ T7622] ? sock_common_setsockopt+0x2e/0xf0 [ 177.997428][ T7622] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 177.997449][ T7622] do_sock_setsockopt+0xf3/0x1d0 [ 177.997470][ T7622] __sys_setsockopt+0x120/0x1a0 [ 177.997500][ T7622] __ia32_sys_setsockopt+0xbc/0x160 [ 177.997523][ T7622] ? lockdep_hardirqs_on+0x7c/0x110 [ 177.997548][ T7622] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 177.997574][ T7622] __do_fast_syscall_32+0x7c/0x3a0 [ 177.997604][ T7622] do_fast_syscall_32+0x32/0x80 [ 177.997630][ T7622] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 177.997651][ T7622] RIP: 0023:0xf7fe3579 [ 177.997665][ T7622] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 177.997682][ T7622] RSP: 002b:00000000f54b455c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 177.997705][ T7622] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000084 [ 177.997716][ T7622] RDX: 0000000000000009 RSI: 0000000080000200 RDI: 000000000000009c [ 177.997726][ T7622] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 177.997736][ T7622] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 177.997746][ T7622] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 177.997768][ T7622] [ 178.436458][ T7623] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 179.053064][ T7629] tmpfs: Bad value for 'mpol' [ 179.787293][ T7636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.361'. [ 179.906424][ T7635] pim6reg: entered allmulticast mode [ 179.919767][ T7635] pim6reg: left allmulticast mode [ 181.015086][ T7640] binder: BINDER_SET_CONTEXT_MGR already set [ 181.019680][ T7640] binder: 7639:7640 ioctl 4018620d 80000040 returned -16 [ 181.025746][ T7640] binder: 7639:7640 ioctl c0306201 80000440 returned -14 [ 181.280484][ T7651] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 181.596832][ T7656] netlink: 'syz.3.365': attribute type 1 has an invalid length. [ 181.603576][ T7656] netlink: 'syz.3.365': attribute type 1 has an invalid length. [ 181.608075][ T7656] netlink: 'syz.3.365': attribute type 1 has an invalid length. [ 181.622867][ T7656] netlink: 'syz.3.365': attribute type 1 has an invalid length. [ 181.637906][ T7656] netlink: 'syz.3.365': attribute type 1 has an invalid length. [ 181.649793][ T7656] netlink: 'syz.3.365': attribute type 1 has an invalid length. [ 181.723931][ T7656] netlink: 'syz.3.365': attribute type 1 has an invalid length. [ 181.729124][ T7656] netlink: 'syz.3.365': attribute type 1 has an invalid length. [ 181.749452][ T7656] netlink: 'syz.3.365': attribute type 1 has an invalid length. [ 181.752838][ T7656] netlink: 'syz.3.365': attribute type 1 has an invalid length. [ 182.256446][ T7665] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 182.604824][ T7666] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 183.345400][ T7673] binder: BINDER_SET_CONTEXT_MGR already set [ 183.349274][ T7673] binder: 7672:7673 ioctl 4018620d 80000040 returned -16 [ 183.354226][ T7673] binder: 7672:7673 ioctl c0306201 80000440 returned -11 [ 184.286076][ T7688] FAULT_INJECTION: forcing a failure. [ 184.286076][ T7688] name failslab, interval 1, probability 0, space 0, times 0 [ 184.306917][ T7688] CPU: 1 UID: 0 PID: 7688 Comm: syz.0.374 Not tainted syzkaller #0 PREEMPT(full) [ 184.306945][ T7688] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 184.306956][ T7688] Call Trace: [ 184.306963][ T7688] [ 184.306971][ T7688] dump_stack_lvl+0x16c/0x1f0 [ 184.307003][ T7688] should_fail_ex+0x512/0x640 [ 184.307032][ T7688] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 184.307057][ T7688] should_failslab+0xc2/0x120 [ 184.307083][ T7688] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 184.307105][ T7688] ? __alloc_skb+0x2b2/0x380 [ 184.307135][ T7688] __alloc_skb+0x2b2/0x380 [ 184.307160][ T7688] ? __pfx___alloc_skb+0x10/0x10 [ 184.307237][ T7688] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 184.307273][ T7688] netlink_alloc_large_skb+0x69/0x130 [ 184.307303][ T7688] netlink_sendmsg+0x6a1/0xdd0 [ 184.307333][ T7688] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.307362][ T7688] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 184.307386][ T7688] ____sys_sendmsg+0xa95/0xc70 [ 184.307408][ T7688] ? __pfx_____sys_sendmsg+0x10/0x10 [ 184.307427][ T7688] ? get_compat_msghdr+0x11a/0x170 [ 184.307463][ T7688] ___sys_sendmsg+0x134/0x1d0 [ 184.307492][ T7688] ? __pfx____sys_sendmsg+0x10/0x10 [ 184.307530][ T7688] ? find_held_lock+0x2b/0x80 [ 184.307567][ T7688] __sys_sendmsg+0x16d/0x220 [ 184.307595][ T7688] ? __pfx___sys_sendmsg+0x10/0x10 [ 184.307634][ T7688] ? rcu_is_watching+0x12/0xc0 [ 184.307658][ T7688] __do_fast_syscall_32+0x7c/0x3a0 [ 184.307690][ T7688] do_fast_syscall_32+0x32/0x80 [ 184.307719][ T7688] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 184.307743][ T7688] RIP: 0023:0xf702e579 [ 184.307758][ T7688] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 184.307777][ T7688] RSP: 002b:00000000f541e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 184.307795][ T7688] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080002880 [ 184.307807][ T7688] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 184.307817][ T7688] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 184.307828][ T7688] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 184.307846][ T7688] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 184.307871][ T7688] [ 185.807084][ T7701] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 186.286803][ T7709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.379'. [ 186.573380][ T7708] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 186.972424][ T7716] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 187.064164][ T7719] FAULT_INJECTION: forcing a failure. [ 187.064164][ T7719] name failslab, interval 1, probability 0, space 0, times 0 [ 187.082129][ T7719] CPU: 1 UID: 0 PID: 7719 Comm: syz.0.382 Not tainted syzkaller #0 PREEMPT(full) [ 187.082180][ T7719] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 187.082194][ T7719] Call Trace: [ 187.082203][ T7719] [ 187.082212][ T7719] dump_stack_lvl+0x16c/0x1f0 [ 187.082251][ T7719] should_fail_ex+0x512/0x640 [ 187.082284][ T7719] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 187.082308][ T7719] should_failslab+0xc2/0x120 [ 187.082332][ T7719] __kmalloc_cache_noprof+0x6a/0x3e0 [ 187.082351][ T7719] ? __asan_memcpy+0x3c/0x60 [ 187.082370][ T7719] ? sctp_association_new+0xbb/0x2a00 [ 187.082404][ T7719] sctp_association_new+0xbb/0x2a00 [ 187.082435][ T7719] ? sctp_v4_scope+0x183/0x1a0 [ 187.082459][ T7719] sctp_connect_new_asoc+0x1a8/0x770 [ 187.082480][ T7719] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 187.082505][ T7719] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 187.082558][ T7719] sctp_sendmsg+0x1560/0x1e10 [ 187.082583][ T7719] ? __lock_acquire+0xb97/0x1ce0 [ 187.082607][ T7719] ? __pfx_sctp_sendmsg+0x10/0x10 [ 187.082622][ T7719] ? __pfx___might_resched+0x10/0x10 [ 187.082648][ T7719] ? aa_sk_perm+0x2f4/0xb10 [ 187.082675][ T7719] ? __pfx_aa_sk_perm+0x10/0x10 [ 187.082696][ T7719] ? find_held_lock+0x2b/0x80 [ 187.082721][ T7719] ? __pfx_sctp_sendmsg+0x10/0x10 [ 187.082740][ T7719] inet_sendmsg+0x119/0x140 [ 187.082764][ T7719] ____sys_sendmsg+0x973/0xc70 [ 187.082785][ T7719] ? btrfs_reset_unused_block_groups+0xa43/0xff0 [ 187.082814][ T7719] ? __pfx_____sys_sendmsg+0x10/0x10 [ 187.082833][ T7719] ? get_compat_msghdr+0x11a/0x170 [ 187.082876][ T7719] ___sys_sendmsg+0x134/0x1d0 [ 187.082905][ T7719] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.082945][ T7719] ? find_held_lock+0x2b/0x80 [ 187.082981][ T7719] __sys_sendmsg+0x16d/0x220 [ 187.083008][ T7719] ? __pfx___sys_sendmsg+0x10/0x10 [ 187.083048][ T7719] ? rcu_is_watching+0x12/0xc0 [ 187.083071][ T7719] __do_fast_syscall_32+0x7c/0x3a0 [ 187.083101][ T7719] do_fast_syscall_32+0x32/0x80 [ 187.083128][ T7719] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 187.083151][ T7719] RIP: 0023:0xf702e579 [ 187.083185][ T7719] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 187.083200][ T7719] RSP: 002b:00000000f53dc55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 187.083215][ T7719] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000800 [ 187.083224][ T7719] RDX: 0000000004048043 RSI: 0000000000000000 RDI: 0000000000000000 [ 187.083233][ T7719] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 187.083241][ T7719] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 187.083250][ T7719] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 187.083270][ T7719] [ 192.320256][ T7747] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 192.839589][ T7749] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 193.375680][ T7766] dlm: non-version read from control device 8224 [ 193.550881][ T7761] pim6reg: entered allmulticast mode [ 193.763141][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.289092][ T7781] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 195.432298][ T7791] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 195.454932][ T7794] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 197.116005][ T7816] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 197.128908][ T7816] block device autoloading is deprecated and will be removed. [ 197.254197][ T7815] md: md2 stopped. [ 197.435703][ T7822] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 198.284280][ T1145] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.350147][ T1145] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.354494][ T1145] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 198.600939][ T7832] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 199.169496][ T1145] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.176556][ T1145] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.185016][ T1145] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 199.572755][ T5335] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 199.595231][ T5335] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 199.599725][ T5335] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 199.612499][ T5335] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 199.616275][ T5335] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 199.749443][ T1145] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.760966][ T1145] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.778816][ T1145] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 199.816000][ T7837] pim6reg: entered allmulticast mode [ 199.932684][ T1145] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.936997][ T1145] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.945869][ T1145] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 200.690475][ T1145] bridge_slave_1: left allmulticast mode [ 200.705537][ T1145] bridge_slave_1: left promiscuous mode [ 200.709162][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.772313][ T1145] bridge_slave_0: left allmulticast mode [ 200.776275][ T1145] bridge_slave_0: left promiscuous mode [ 200.779215][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.742214][ T7876] netlink: 12 bytes leftover after parsing attributes in process `syz.2.422'. [ 201.756290][ T5335] Bluetooth: hci1: command tx timeout [ 202.294044][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.337458][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.377119][ T1145] bond0 (unregistering): Released all slaves [ 202.521080][ T7838] chnl_net:caif_netlink_parms(): no params data found [ 203.844347][ T5335] Bluetooth: hci1: command tx timeout [ 204.124504][ T7838] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.127817][ T7838] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.163871][ T7838] bridge_slave_0: entered allmulticast mode [ 204.168673][ T7838] bridge_slave_0: entered promiscuous mode [ 204.190970][ T7838] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.193583][ T7838] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.196290][ T7838] bridge_slave_1: entered allmulticast mode [ 204.204242][ T7838] bridge_slave_1: entered promiscuous mode [ 204.235060][ T7894] pim6reg: entered allmulticast mode [ 204.672825][ T7838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.690299][ T7838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.990872][ T1145] hsr_slave_0: left promiscuous mode [ 205.009383][ T1145] hsr_slave_1: left promiscuous mode [ 205.013154][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.018203][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.033531][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.038119][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.146313][ T1145] veth1_macvtap: left promiscuous mode [ 205.148411][ T1145] veth0_macvtap: left promiscuous mode [ 205.150803][ T1145] veth1_vlan: left promiscuous mode [ 205.153182][ T1145] veth0_vlan: left promiscuous mode [ 205.464055][ T1145] pim6reg (unregistering): left allmulticast mode [ 205.910217][ T5335] Bluetooth: hci1: command tx timeout [ 208.010363][ T5335] Bluetooth: hci1: command tx timeout [ 208.259019][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 208.465743][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 210.241490][ T7838] team0: Port device team_slave_0 added [ 210.269864][ T7838] team0: Port device team_slave_1 added [ 210.663273][ T7838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.666363][ T7838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.694901][ T7838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.723280][ T7838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.726233][ T7838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.810098][ T7838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.150619][ T7838] hsr_slave_0: entered promiscuous mode [ 211.155909][ T7838] hsr_slave_1: entered promiscuous mode [ 211.181896][ T7838] debugfs: 'hsr0' already exists in 'hsr' [ 211.184253][ T7838] Cannot create hsr debugfs directory [ 211.476851][ T7958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.436'. [ 212.384671][ T1145] IPVS: stop unused estimator thread 0... [ 212.416775][ T7838] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 212.582554][ T7838] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 212.731423][ T7838] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 212.765390][ T7838] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 212.999562][ T7838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.035193][ T7838] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.070477][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.074806][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.079840][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.084127][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.137499][ T7838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 213.361957][ T7997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.443'. [ 213.567929][ T7838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.087398][ T8011] futex_wake_op: syz.0.448 tries to shift op by -1; fix this program [ 214.244175][ T7838] veth0_vlan: entered promiscuous mode [ 214.287581][ T7838] veth1_vlan: entered promiscuous mode [ 214.354473][ T7838] veth0_macvtap: entered promiscuous mode [ 214.361636][ T7838] veth1_macvtap: entered promiscuous mode [ 214.394301][ T7838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.424502][ T7838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.441769][ T1149] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.445290][ T1149] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.459520][ T1149] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.466182][ T1149] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.655370][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.661211][ T8019] FAULT_INJECTION: forcing a failure. [ 214.661211][ T8019] name failslab, interval 1, probability 0, space 0, times 0 [ 214.662383][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.667818][ T8019] CPU: 1 UID: 0 PID: 8019 Comm: syz.4.450 Not tainted syzkaller #0 PREEMPT(full) [ 214.667845][ T8019] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 214.667857][ T8019] Call Trace: [ 214.667865][ T8019] [ 214.667873][ T8019] dump_stack_lvl+0x16c/0x1f0 [ 214.667905][ T8019] should_fail_ex+0x512/0x640 [ 214.667934][ T8019] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 214.667958][ T8019] should_failslab+0xc2/0x120 [ 214.667982][ T8019] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 214.668003][ T8019] ? __might_fault+0xe3/0x190 [ 214.668022][ T8019] ? __might_fault+0x13b/0x190 [ 214.668040][ T8019] ? getname_flags.part.0+0x4c/0x550 [ 214.668072][ T8019] getname_flags.part.0+0x4c/0x550 [ 214.668102][ T8019] getname_flags+0x93/0xf0 [ 214.668122][ T8019] user_path_at+0x24/0x60 [ 214.668143][ T8019] __ia32_sys_mount+0x1fb/0x310 [ 214.668167][ T8019] ? __pfx___ia32_sys_mount+0x10/0x10 [ 214.668189][ T8019] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 214.668217][ T8019] ? rcu_is_watching+0x12/0xc0 [ 214.668240][ T8019] __do_fast_syscall_32+0x7c/0x3a0 [ 214.668270][ T8019] do_fast_syscall_32+0x32/0x80 [ 214.668297][ T8019] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 214.668318][ T8019] RIP: 0023:0xf7fe3579 [ 214.668332][ T8019] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 214.668349][ T8019] RSP: 002b:00000000f54d555c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 214.668367][ T8019] RAX: ffffffffffffffda RBX: 00000000800001c0 RCX: 0000000080000480 [ 214.668379][ T8019] RDX: 0000000000000000 RSI: 000000000000008c RDI: 0000000080000c00 [ 214.668389][ T8019] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 214.668399][ T8019] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 214.668409][ T8019] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 214.668433][ T8019] [ 214.941598][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.946339][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.432519][ T8024] FAULT_INJECTION: forcing a failure. [ 215.432519][ T8024] name failslab, interval 1, probability 0, space 0, times 0 [ 215.464818][ T8024] CPU: 1 UID: 0 PID: 8024 Comm: syz.5.412 Not tainted syzkaller #0 PREEMPT(full) [ 215.464860][ T8024] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 215.464872][ T8024] Call Trace: [ 215.464878][ T8024] [ 215.464885][ T8024] dump_stack_lvl+0x16c/0x1f0 [ 215.464913][ T8024] should_fail_ex+0x512/0x640 [ 215.464939][ T8024] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 215.464959][ T8024] should_failslab+0xc2/0x120 [ 215.464981][ T8024] __kmalloc_cache_noprof+0x6a/0x3e0 [ 215.464997][ T8024] ? __genradix_ptr_alloc+0x340/0x5f0 [ 215.465015][ T8024] ? sctp_auth_shkey_create+0x9e/0x210 [ 215.465042][ T8024] sctp_auth_shkey_create+0x9e/0x210 [ 215.465066][ T8024] sctp_auth_asoc_copy_shkeys+0x1f2/0x360 [ 215.465096][ T8024] sctp_association_new+0x19ad/0x2a00 [ 215.465129][ T8024] sctp_connect_new_asoc+0x1a8/0x770 [ 215.465148][ T8024] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 215.465166][ T8024] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 215.465193][ T8024] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 215.465219][ T8024] sctp_sendmsg+0x1560/0x1e10 [ 215.465239][ T8024] ? __pfx___schedule+0x10/0x10 [ 215.465261][ T8024] ? __lock_acquire+0xb97/0x1ce0 [ 215.465283][ T8024] ? __pfx_sctp_sendmsg+0x10/0x10 [ 215.465310][ T8024] ? lockdep_hardirqs_on+0x7c/0x110 [ 215.465356][ T8024] ? __pfx_sctp_sendmsg+0x10/0x10 [ 215.465377][ T8024] inet_sendmsg+0x119/0x140 [ 215.465403][ T8024] ____sys_sendmsg+0x973/0xc70 [ 215.465423][ T8024] ? btrfs_reset_unused_block_groups+0xa43/0xff0 [ 215.465453][ T8024] ? __pfx_____sys_sendmsg+0x10/0x10 [ 215.465473][ T8024] ? get_compat_msghdr+0x11a/0x170 [ 215.465512][ T8024] ___sys_sendmsg+0x134/0x1d0 [ 215.465542][ T8024] ? __pfx____sys_sendmsg+0x10/0x10 [ 215.465583][ T8024] ? find_held_lock+0x2b/0x80 [ 215.465618][ T8024] __sys_sendmsg+0x16d/0x220 [ 215.465647][ T8024] ? __pfx___sys_sendmsg+0x10/0x10 [ 215.465687][ T8024] ? rcu_is_watching+0x12/0xc0 [ 215.465712][ T8024] __do_fast_syscall_32+0x7c/0x3a0 [ 215.465744][ T8024] do_fast_syscall_32+0x32/0x80 [ 215.465772][ T8024] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 215.465796][ T8024] RIP: 0023:0xf708e579 [ 215.465812][ T8024] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 215.465830][ T8024] RSP: 002b:00000000f543c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 215.465850][ T8024] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000800 [ 215.465861][ T8024] RDX: 0000000004048043 RSI: 0000000000000000 RDI: 0000000000000000 [ 215.465873][ T8024] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 215.465883][ T8024] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 215.465894][ T8024] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 215.465918][ T8024] [ 218.421577][ T61] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 218.603278][ T61] usb 5-1: Using ep0 maxpacket: 8 [ 218.774796][ T61] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 218.788354][ T61] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 218.795752][ T61] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 218.799683][ T61] usb 5-1: config 250 has no interface number 0 [ 218.840122][ T61] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 218.883260][ T61] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 218.928160][ T61] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 26 [ 218.965066][ T61] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 219.020125][ T61] usb 5-1: config 250 interface 228 has no altsetting 0 [ 219.152872][ T61] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 219.195963][ T61] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 219.210640][ T61] usb 5-1: Product: syz [ 219.212492][ T61] usb 5-1: SerialNumber: syz [ 219.237365][ T61] hub 5-1:250.228: bad descriptor, ignoring hub [ 219.243277][ T61] hub 5-1:250.228: probe with driver hub failed with error -5 [ 219.461096][ T61] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 6 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 219.750197][ C0] usblp0: nonzero read bulk status received: -71 [ 220.410972][ T8085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.464'. [ 220.490920][ T6059] usb 5-1: USB disconnect, device number 6 [ 222.410081][ T5836] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 222.880701][ T8041] usblp0: removed [ 225.400385][ T8145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.472'. [ 226.843879][ T40] audit: type=1326 audit(2000000084.569:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8153 comm="syz.0.475" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e579 code=0x7ffc0000 [ 226.853559][ T40] audit: type=1326 audit(2000000084.569:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8153 comm="syz.0.475" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e579 code=0x7ffc0000 [ 226.881480][ T40] audit: type=1326 audit(2000000084.589:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8153 comm="syz.0.475" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702e579 code=0x7ffc0000 [ 226.912037][ T40] audit: type=1326 audit(2000000084.589:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8153 comm="syz.0.475" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e579 code=0x7ffc0000 [ 226.951881][ T40] audit: type=1326 audit(2000000084.589:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8153 comm="syz.0.475" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e579 code=0x7ffc0000 [ 226.975523][ T40] audit: type=1326 audit(2000000084.589:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8153 comm="syz.0.475" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf702e579 code=0x7ffc0000 [ 227.003830][ T40] audit: type=1326 audit(2000000084.589:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8153 comm="syz.0.475" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e579 code=0x7ffc0000 [ 227.057648][ T40] audit: type=1326 audit(2000000084.589:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8153 comm="syz.0.475" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf702e579 code=0x7ffc0000 [ 227.084686][ T40] audit: type=1326 audit(2000000084.589:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8153 comm="syz.0.475" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e579 code=0x7ffc0000 [ 227.109982][ T40] audit: type=1326 audit(2000000084.589:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8153 comm="syz.0.475" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf702e579 code=0x7ffc0000 [ 228.713597][ T8168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.477'. [ 229.020616][ T8173] netlink: 8 bytes leftover after parsing attributes in process `syz.5.479'. [ 229.057730][ T8174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.487'. [ 231.892085][ T8186] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 232.800897][ T5836] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 233.214283][ T5836] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 233.220347][ T5836] usb 7-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 233.236110][ T5836] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 233.286615][ T5836] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.408969][ T5836] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 233.413919][ T5836] usb 7-1: invalid MIDI out EP 0 [ 233.536148][ T8201] sctp: [Deprecated]: syz.5.489 (pid 8201) Use of int in maxseg socket option. [ 233.536148][ T8201] Use struct sctp_assoc_value instead [ 233.555242][ T54] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 233.764234][ T54] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 233.909557][ T5836] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 233.916751][ T54] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 233.934057][ T54] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 233.968162][ T54] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 233.973559][ T54] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.053705][ T54] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 234.378348][ T54] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 234.401807][ T54] usb 5-1: USB disconnect, device number 8 [ 235.236244][ T34] usb 7-1: USB disconnect, device number 9 [ 235.594642][ T8212] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 238.661915][ T5335] Bluetooth: hci4: unexpected event for opcode 0x2027 [ 238.918086][ T8236] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 239.158603][ T8240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.494'. [ 240.241862][ T6059] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 240.424464][ T6059] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 240.429068][ T6059] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 240.449746][ T6059] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 240.456743][ T6059] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.493532][ T8247] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 240.542942][ T6059] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 240.754756][ T6059] usb 10-1: USB disconnect, device number 2 [ 241.701004][ T6059] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 242.151910][ T6059] usb 10-1: Using ep0 maxpacket: 32 [ 242.155650][ T6059] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 242.159268][ T6059] usb 10-1: config 0 has no interface number 0 [ 242.191002][ T6059] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 242.194996][ T6059] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.210637][ T6059] usb 10-1: Product: syz [ 242.212541][ T6059] usb 10-1: Manufacturer: syz [ 242.214793][ T6059] usb 10-1: SerialNumber: syz [ 242.257968][ T6059] usb 10-1: config 0 descriptor?? [ 242.276802][ T6059] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 242.290193][ T6059] usb 10-1: selecting invalid altsetting 1 [ 242.293895][ T6059] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 242.303631][ T6059] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 242.320820][ T6059] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 242.327686][ T6059] usb 10-1: media controller created [ 242.374936][ T6059] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 242.431919][ T8264] sctp: [Deprecated]: syz.0.505 (pid 8264) Use of int in maxseg socket option. [ 242.431919][ T8264] Use struct sctp_assoc_value instead [ 242.559456][ T6059] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 242.570224][ T6059] zl10353_read_register: readreg error (reg=127, ret==-71) [ 242.575845][ T6059] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 242.686929][ T6059] usb 10-1: USB disconnect, device number 3 [ 242.787426][ T8272] FAULT_INJECTION: forcing a failure. [ 242.787426][ T8272] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.816759][ T8272] CPU: 3 UID: 0 PID: 8272 Comm: syz.0.508 Not tainted syzkaller #0 PREEMPT(full) [ 242.816787][ T8272] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 242.816798][ T8272] Call Trace: [ 242.816805][ T8272] [ 242.816813][ T8272] dump_stack_lvl+0x16c/0x1f0 [ 242.816848][ T8272] should_fail_ex+0x512/0x640 [ 242.816883][ T8272] _copy_from_user+0x2e/0xd0 [ 242.816904][ T8272] move_addr_to_kernel+0x65/0x170 [ 242.816928][ T8272] __sys_sendto+0x1be/0x520 [ 242.816953][ T8272] ? __pfx___sys_sendto+0x10/0x10 [ 242.816975][ T8272] ? __lock_acquire+0xb97/0x1ce0 [ 242.817029][ T8272] __ia32_compat_sys_socketcall+0x625/0x770 [ 242.817059][ T8272] ? __fget_files+0x20e/0x3c0 [ 242.817079][ T8272] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 242.817110][ T8272] ? fput+0x9b/0xd0 [ 242.817142][ T8272] ? rcu_is_watching+0x12/0xc0 [ 242.817165][ T8272] __do_fast_syscall_32+0x7c/0x3a0 [ 242.817197][ T8272] do_fast_syscall_32+0x32/0x80 [ 242.817225][ T8272] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 242.817249][ T8272] RIP: 0023:0xf702e579 [ 242.817265][ T8272] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 242.817284][ T8272] RSP: 002b:00000000f541d430 EFLAGS: 00000293 ORIG_RAX: 0000000000000066 [ 242.817303][ T8272] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f541d444 [ 242.817315][ T8272] RDX: 0000000000000000 RSI: 00000000f541d560 RDI: 00000000f73a4ff4 [ 242.817325][ T8272] RBP: 00000000f541d560 R08: 0000000000000000 R09: 0000000000000000 [ 242.817336][ T8272] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 242.817346][ T8272] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 242.817378][ T8272] [ 243.268508][ T5335] Bluetooth: hci0: unexpected event for opcode 0x2027 [ 243.309645][ T6059] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 243.540097][ T6059] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 243.548072][ T6059] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 243.572145][ T6059] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 243.578381][ T6059] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.587922][ T8278] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 243.617538][ T6059] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 243.767014][ T8291] netlink: 8 bytes leftover after parsing attributes in process `syz.5.512'. [ 243.818382][ T6059] usb 9-1: USB disconnect, device number 4 [ 244.484586][ T8304] FAULT_INJECTION: forcing a failure. [ 244.484586][ T8304] name failslab, interval 1, probability 0, space 0, times 0 [ 244.499285][ T8304] CPU: 1 UID: 0 PID: 8304 Comm: syz.0.514 Not tainted syzkaller #0 PREEMPT(full) [ 244.499312][ T8304] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 244.499322][ T8304] Call Trace: [ 244.499329][ T8304] [ 244.499336][ T8304] dump_stack_lvl+0x16c/0x1f0 [ 244.499365][ T8304] should_fail_ex+0x512/0x640 [ 244.499388][ T8304] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 244.499402][ T8304] should_failslab+0xc2/0x120 [ 244.499416][ T8304] __kmalloc_cache_noprof+0x6a/0x3e0 [ 244.499427][ T8304] ? __genradix_ptr_alloc+0x340/0x5f0 [ 244.499439][ T8304] ? sctp_auth_shkey_create+0x9e/0x210 [ 244.499458][ T8304] sctp_auth_shkey_create+0x9e/0x210 [ 244.499474][ T8304] sctp_auth_asoc_copy_shkeys+0x1f2/0x360 [ 244.499493][ T8304] sctp_association_new+0x19ad/0x2a00 [ 244.499516][ T8304] sctp_connect_new_asoc+0x1a8/0x770 [ 244.499529][ T8304] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 244.499540][ T8304] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 244.499558][ T8304] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 244.499577][ T8304] sctp_sendmsg+0x1560/0x1e10 [ 244.499591][ T8304] ? __lock_acquire+0xb97/0x1ce0 [ 244.499605][ T8304] ? __pfx_sctp_sendmsg+0x10/0x10 [ 244.499615][ T8304] ? __pfx___might_resched+0x10/0x10 [ 244.499630][ T8304] ? aa_sk_perm+0x2f4/0xb10 [ 244.499645][ T8304] ? __pfx_aa_sk_perm+0x10/0x10 [ 244.499658][ T8304] ? find_held_lock+0x2b/0x80 [ 244.499672][ T8304] ? __pfx_sctp_sendmsg+0x10/0x10 [ 244.499684][ T8304] inet_sendmsg+0x119/0x140 [ 244.499698][ T8304] ____sys_sendmsg+0x973/0xc70 [ 244.499711][ T8304] ? btrfs_reset_unused_block_groups+0xa43/0xff0 [ 244.499728][ T8304] ? __pfx_____sys_sendmsg+0x10/0x10 [ 244.499740][ T8304] ? get_compat_msghdr+0x11a/0x170 [ 244.499761][ T8304] ___sys_sendmsg+0x134/0x1d0 [ 244.499779][ T8304] ? __pfx____sys_sendmsg+0x10/0x10 [ 244.499802][ T8304] ? find_held_lock+0x2b/0x80 [ 244.499821][ T8304] __sys_sendmsg+0x16d/0x220 [ 244.499838][ T8304] ? __pfx___sys_sendmsg+0x10/0x10 [ 244.499860][ T8304] ? rcu_is_watching+0x12/0xc0 [ 244.499874][ T8304] __do_fast_syscall_32+0x7c/0x3a0 [ 244.499893][ T8304] do_fast_syscall_32+0x32/0x80 [ 244.499909][ T8304] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 244.499924][ T8304] RIP: 0023:0xf702e579 [ 244.499933][ T8304] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 244.499944][ T8304] RSP: 002b:00000000f53dc55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 244.499955][ T8304] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000800 [ 244.499961][ T8304] RDX: 0000000004048043 RSI: 0000000000000000 RDI: 0000000000000000 [ 244.499968][ T8304] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 244.499974][ T8304] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 244.499980][ T8304] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 244.500007][ T8304] [ 244.506698][ C0] ================================================================== [ 244.796425][ C0] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x3a/0x60 [ 244.806144][ C0] Read of size 1 at addr ffff8880232d9418 by task syz-executor/7838 [ 244.816367][ C0] [ 244.817593][ C0] CPU: 0 UID: 0 PID: 7838 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 244.817620][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 244.817632][ C0] Call Trace: [ 244.817640][ C0] [ 244.817648][ C0] dump_stack_lvl+0x116/0x1f0 [ 244.817681][ C0] print_report+0xcd/0x630 [ 244.817705][ C0] ? __virt_addr_valid+0x81/0x610 [ 244.817728][ C0] ? __phys_addr+0xe8/0x180 [ 244.817752][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 244.817775][ C0] kasan_report+0xe0/0x110 [ 244.817795][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 244.817818][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 244.817840][ C0] __kasan_check_byte+0x36/0x50 [ 244.817861][ C0] lock_acquire+0xfc/0x350 [ 244.817885][ C0] ? do_raw_spin_unlock+0x53/0x230 [ 244.817908][ C0] ? .slowpath+0x9/0x18 [ 244.817932][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 244.817954][ C0] ? p9_req_put+0xaf/0x250 [ 244.817979][ C0] p9_req_put+0xaf/0x250 [ 244.818004][ C0] req_done+0x1dc/0x2e0 [ 244.818027][ C0] ? __pfx_req_done+0x10/0x10 [ 244.818050][ C0] ? debug_object_activate+0x2ec/0x4c0 [ 244.818080][ C0] ? __pfx_req_done+0x10/0x10 [ 244.818099][ C0] vring_interrupt+0x31b/0x400 [ 244.818121][ C0] ? __pfx_vring_interrupt+0x10/0x10 [ 244.818143][ C0] __handle_irq_event_percpu+0x22c/0x7d0 [ 244.818168][ C0] handle_irq_event+0xab/0x1e0 [ 244.818188][ C0] handle_edge_irq+0x3ca/0x9e0 [ 244.818209][ C0] __common_interrupt+0xcd/0x2f0 [ 244.818234][ C0] common_interrupt+0x61/0xe0 [ 244.818256][ C0] asm_common_interrupt+0x26/0x40 [ 244.818277][ C0] RIP: 0010:handle_softirqs+0x1dd/0x8e0 [ 244.818301][ C0] Code: 88 6c 24 26 4c 89 7c 24 18 48 c7 c7 60 a6 ab 8b e8 38 47 15 0a 65 66 c7 05 c6 32 5a 12 00 00 e8 79 f3 46 00 fb bb ff ff ff ff <49> c7 c7 c0 c0 20 8e 41 0f bc dc 83 c3 01 0f 85 a4 00 00 00 e9 b1 [ 244.818320][ C0] RSP: 0018:ffffc90000007f28 EFLAGS: 00000206 [ 244.818338][ C0] RAX: 000000000003baaa RBX: 00000000ffffffff RCX: ffffffff81c2efef [ 244.818352][ C0] RDX: 0000000000000000 RSI: ffffffff8de4eb79 RDI: ffffffff8c163180 [ 244.818365][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 244.818376][ C0] R10: ffffffff90aba197 R11: 0000000000000000 R12: 0000000000000282 [ 244.818389][ C0] R13: 000000000000000a R14: 1ffff92000000fed R15: ffffed1004e0c000 [ 244.818405][ C0] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 244.818438][ C0] ? handle_softirqs+0x1d7/0x8e0 [ 244.818458][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 244.818486][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 244.818511][ C0] __irq_exit_rcu+0x109/0x170 [ 244.818533][ C0] irq_exit_rcu+0x9/0x30 [ 244.818554][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 244.818580][ C0] [ 244.818587][ C0] [ 244.818594][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 244.818615][ C0] RIP: 0010:finish_task_switch.isra.0+0x22a/0xc10 [ 244.818666][ C0] Code: fb 09 00 00 44 8b 05 19 2f 23 0f 45 85 c0 0f 85 be 01 00 00 4c 89 e7 e8 a4 f6 ff ff e8 bf 4c 3a 00 fb 65 48 8b 1d de 8b 4d 12 <48> 8d bb 18 16 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 [ 244.818684][ C0] RSP: 0018:ffffc90003257a18 EFLAGS: 00000206 [ 244.818701][ C0] RAX: 000000000003baa5 RBX: ffff888027060000 RCX: ffffffff81c2efef [ 244.818712][ C0] RDX: 0000000000000000 RSI: ffffffff8de4eb79 RDI: ffffffff8c163180 [ 244.818725][ C0] RBP: ffffc90003257a60 R08: 0000000000000001 R09: 0000000000000001 [ 244.818738][ C0] R10: ffffffff90aba197 R11: 0000000000000000 R12: ffff88802b23a440 [ 244.818752][ C0] R13: ffff8880207f4880 R14: ffff88802b23a440 R15: ffff88802b23b2b0 [ 244.818770][ C0] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 244.818802][ C0] ? finish_task_switch.isra.0+0x221/0xc10 [ 244.818822][ C0] ? __switch_to+0x7a5/0x11a0 [ 244.818847][ C0] __schedule+0x1198/0x5de0 [ 244.818872][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 244.818897][ C0] ? debug_object_activate+0x2ec/0x4c0 [ 244.818924][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 244.818950][ C0] ? __pfx___schedule+0x10/0x10 [ 244.818978][ C0] ? find_held_lock+0x2b/0x80 [ 244.818997][ C0] ? schedule+0x2d7/0x3a0 [ 244.819022][ C0] schedule+0xe7/0x3a0 [ 244.819047][ C0] do_nanosleep+0x21a/0x570 [ 244.819076][ C0] ? __pfx_do_nanosleep+0x10/0x10 [ 244.819097][ C0] ? __asan_memset+0x23/0x50 [ 244.819116][ C0] ? __hrtimer_setup+0x176/0x280 [ 244.819144][ C0] hrtimer_nanosleep+0x155/0x380 [ 244.819164][ C0] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 244.819185][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 244.819214][ C0] ? get_old_timespec32+0xda/0x130 [ 244.819238][ C0] ? __pfx_get_old_timespec32+0x10/0x10 [ 244.819263][ C0] common_nsleep+0xa1/0xd0 [ 244.819288][ C0] __ia32_sys_clock_nanosleep_time32+0x33d/0x4f0 [ 244.819311][ C0] ? __pfx___ia32_sys_clock_nanosleep_time32+0x10/0x10 [ 244.819334][ C0] ? rcu_is_watching+0x12/0xc0 [ 244.819356][ C0] __do_fast_syscall_32+0x7c/0x3a0 [ 244.819387][ C0] do_fast_syscall_32+0x32/0x80 [ 244.819416][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 244.819441][ C0] RIP: 0023:0xf708e579 [ 244.819459][ C0] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 244.819477][ C0] RSP: 002b:00000000ffa5a080 EFLAGS: 00000293 ORIG_RAX: 000000000000010b [ 244.819497][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 244.819510][ C0] RDX: 00000000ffa5a0b4 RSI: 00000000ffa5a0ac RDI: 00000000ffa5a0b4 [ 244.819522][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 244.819534][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 244.819544][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 244.819562][ C0] [ 244.819569][ C0] [ 245.272571][ C0] Allocated by task 8304: [ 245.274649][ C0] kasan_save_stack+0x33/0x60 [ 245.277941][ C0] kasan_save_track+0x14/0x30 [ 245.280678][ C0] __kasan_kmalloc+0xaa/0xb0 [ 245.282797][ C0] p9_client_create+0xc7/0x11c0 [ 245.285186][ C0] v9fs_session_init+0x1f7/0x1a80 [ 245.287812][ C0] v9fs_mount+0xc5/0xa90 [ 245.290575][ C0] legacy_get_tree+0x109/0x220 [ 245.293063][ C0] vfs_get_tree+0x8b/0x340 [ 245.296007][ C0] path_mount+0x1513/0x2000 [ 245.298987][ C0] __ia32_sys_mount+0x28b/0x310 [ 245.302836][ C0] __do_fast_syscall_32+0x7c/0x3a0 [ 245.305766][ C0] do_fast_syscall_32+0x32/0x80 [ 245.308045][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 245.311849][ C0] [ 245.313812][ C0] Freed by task 8304: [ 245.317177][ C0] kasan_save_stack+0x33/0x60 [ 245.320428][ C0] kasan_save_track+0x14/0x30 [ 245.323516][ C0] kasan_save_free_info+0x3b/0x60 [ 245.326290][ C0] __kasan_slab_free+0x60/0x70 [ 245.329069][ C0] kfree+0x2b4/0x4d0 [ 245.330895][ C0] p9_client_create+0xa28/0x11c0 [ 245.332836][ C0] v9fs_session_init+0x1f7/0x1a80 [ 245.335590][ C0] v9fs_mount+0xc5/0xa90 [ 245.338659][ C0] legacy_get_tree+0x109/0x220 [ 245.341625][ C0] vfs_get_tree+0x8b/0x340 [ 245.344398][ C0] path_mount+0x1513/0x2000 [ 245.347195][ C0] __ia32_sys_mount+0x28b/0x310 [ 245.351203][ C0] __do_fast_syscall_32+0x7c/0x3a0 [ 245.353897][ C0] do_fast_syscall_32+0x32/0x80 [ 245.357243][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 245.360837][ C0] [ 245.362327][ C0] The buggy address belongs to the object at ffff8880232d9400 [ 245.362327][ C0] which belongs to the cache kmalloc-512 of size 512 [ 245.372044][ C0] The buggy address is located 24 bytes inside of [ 245.372044][ C0] freed 512-byte region [ffff8880232d9400, ffff8880232d9600) [ 245.379778][ C0] [ 245.380910][ C0] The buggy address belongs to the physical page: [ 245.383829][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x232d8 [ 245.388648][ C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 245.394744][ C0] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 245.399783][ C0] page_type: f5(slab) [ 245.403286][ C0] raw: 00fff00000000040 ffff88801b842c80 0000000000000000 dead000000000001 [ 245.409415][ C0] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 245.431780][ C0] head: 00fff00000000040 ffff88801b842c80 0000000000000000 dead000000000001 [ 245.435484][ C0] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 245.440620][ C0] head: 00fff00000000002 ffffea00008cb601 00000000ffffffff 00000000ffffffff [ 245.444269][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 245.458979][ C0] page dumped because: kasan: bad access detected [ 245.463216][ C0] page_owner tracks the page as allocated [ 245.465340][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 8094, tgid 8094 (dhcpcd-run-hook), ts 222379020467, free_ts 220745719452 [ 245.475690][ C0] post_alloc_hook+0x1c0/0x230 [ 245.489920][ C0] get_page_from_freelist+0x132b/0x38e0 [ 245.492505][ C0] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 245.495221][ C0] new_slab+0x94/0x330 [ 245.497432][ C0] ___slab_alloc+0xcf2/0x1750 [ 245.509902][ C0] __slab_alloc.constprop.0+0x56/0xb0 [ 245.512605][ C0] __kmalloc_node_noprof+0x2ed/0x500 [ 245.515213][ C0] alloc_slab_obj_exts+0x41/0xa0 [ 245.518119][ C0] new_slab+0x27d/0x330 [ 245.528755][ C0] ___slab_alloc+0xcf2/0x1750 [ 245.531477][ C0] __slab_alloc.constprop.0+0x56/0xb0 [ 245.534648][ C0] kmem_cache_alloc_noprof+0xef/0x3b0 [ 245.537050][ C0] anon_vma_fork+0x200/0x620 [ 245.549158][ C0] dup_mmap+0x152e/0x21d0 [ 245.551220][ C0] copy_process+0x4081/0x7690 [ 245.553246][ C0] kernel_clone+0xfc/0x930 [ 245.555486][ C0] page last free pid 5972 tgid 5972 stack trace: [ 245.565720][ C0] __free_frozen_pages+0x7d5/0x10f0 [ 245.568639][ C0] __put_partials+0x165/0x1c0 [ 245.583625][ C0] qlist_free_all+0x4d/0x120 [ 245.586008][ C0] kasan_quarantine_reduce+0x195/0x1e0 [ 245.588968][ C0] __kasan_slab_alloc+0x69/0x90 [ 245.591262][ C0] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 245.593979][ C0] getname_flags.part.0+0x4c/0x550 [ 245.596485][ C0] getname_flags+0x93/0xf0 [ 245.610967][ C0] user_path_at+0x24/0x60 [ 245.613503][ C0] __ia32_sys_umount+0x109/0x190 [ 245.616371][ C0] __do_fast_syscall_32+0x7c/0x3a0 [ 245.627654][ C0] do_fast_syscall_32+0x32/0x80 [ 245.630673][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 245.633972][ C0] [ 245.635046][ C0] Memory state around the buggy address: [ 245.637750][ C0] ffff8880232d9300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 245.653845][ C0] ffff8880232d9380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 245.657960][ C0] >ffff8880232d9400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 245.660976][ C0] ^ [ 245.662888][ C0] ffff8880232d9480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 245.666004][ C0] ffff8880232d9500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 245.678516][ C0] ================================================================== [ 245.682936][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 245.685643][ C0] CPU: 0 UID: 0 PID: 7838 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 245.704777][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 245.711812][ C0] Call Trace: [ 245.714209][ C0] [ 245.716170][ C0] dump_stack_lvl+0x3d/0x1f0 [ 245.731684][ C0] vpanic+0x6e8/0x7a0 [ 245.733917][ C0] ? __pfx_vpanic+0x10/0x10 [ 245.736686][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 245.739464][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 245.742605][ C0] panic+0xca/0xd0 [ 245.744777][ C0] ? __pfx_panic+0x10/0x10 [ 245.754136][ C0] ? end_report+0x4c/0x170 [ 245.756147][ C0] ? rcu_is_watching+0x12/0xc0 [ 245.770827][ C0] ? lock_release+0x201/0x2f0 [ 245.772922][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 245.775443][ C0] check_panic_on_warn+0xab/0xb0 [ 245.777822][ C0] end_report+0x107/0x170 [ 245.779917][ C0] kasan_report+0xee/0x110 [ 245.782098][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 245.785866][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 245.793113][ C0] __kasan_check_byte+0x36/0x50 [ 245.796231][ C0] lock_acquire+0xfc/0x350 [ 245.803104][ C0] ? do_raw_spin_unlock+0x53/0x230 [ 245.809386][ C0] ? .slowpath+0x9/0x18 [ 245.811652][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 245.820097][ C0] ? p9_req_put+0xaf/0x250 [ 245.822236][ C0] p9_req_put+0xaf/0x250 [ 245.824290][ C0] req_done+0x1dc/0x2e0 [ 245.835650][ C0] ? __pfx_req_done+0x10/0x10 [ 245.838414][ C0] ? debug_object_activate+0x2ec/0x4c0 [ 245.841349][ C0] ? __pfx_req_done+0x10/0x10 [ 245.844045][ C0] vring_interrupt+0x31b/0x400 [ 245.850993][ C0] ? __pfx_vring_interrupt+0x10/0x10 [ 245.858845][ C0] __handle_irq_event_percpu+0x22c/0x7d0 [ 245.861364][ C0] handle_irq_event+0xab/0x1e0 [ 245.879597][ C0] handle_edge_irq+0x3ca/0x9e0 [ 245.883118][ C0] __common_interrupt+0xcd/0x2f0 [ 245.886553][ C0] common_interrupt+0x61/0xe0 [ 245.889373][ C0] asm_common_interrupt+0x26/0x40 [ 245.892392][ C0] RIP: 0010:handle_softirqs+0x1dd/0x8e0 [ 245.896063][ C0] Code: 88 6c 24 26 4c 89 7c 24 18 48 c7 c7 60 a6 ab 8b e8 38 47 15 0a 65 66 c7 05 c6 32 5a 12 00 00 e8 79 f3 46 00 fb bb ff ff ff ff <49> c7 c7 c0 c0 20 8e 41 0f bc dc 83 c3 01 0f 85 a4 00 00 00 e9 b1 [ 245.911387][ C0] RSP: 0018:ffffc90000007f28 EFLAGS: 00000206 [ 245.918964][ C0] RAX: 000000000003baaa RBX: 00000000ffffffff RCX: ffffffff81c2efef [ 245.922792][ C0] RDX: 0000000000000000 RSI: ffffffff8de4eb79 RDI: ffffffff8c163180 [ 245.934854][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 245.950432][ C0] R10: ffffffff90aba197 R11: 0000000000000000 R12: 0000000000000282 [ 245.955322][ C0] R13: 000000000000000a R14: 1ffff92000000fed R15: ffffed1004e0c000 [ 245.968551][ C0] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 245.972611][ C0] ? handle_softirqs+0x1d7/0x8e0 [ 245.975143][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 245.977510][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 245.989204][ C0] __irq_exit_rcu+0x109/0x170 [ 245.991532][ C0] irq_exit_rcu+0x9/0x30 [ 245.993505][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 245.996313][ C0] [ 245.998033][ C0] [ 246.011980][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 246.014403][ C0] RIP: 0010:finish_task_switch.isra.0+0x22a/0xc10 [ 246.016999][ C0] Code: fb 09 00 00 44 8b 05 19 2f 23 0f 45 85 c0 0f 85 be 01 00 00 4c 89 e7 e8 a4 f6 ff ff e8 bf 4c 3a 00 fb 65 48 8b 1d de 8b 4d 12 <48> 8d bb 18 16 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 [ 246.040320][ C0] RSP: 0018:ffffc90003257a18 EFLAGS: 00000206 [ 246.043685][ C0] RAX: 000000000003baa5 RBX: ffff888027060000 RCX: ffffffff81c2efef [ 246.047191][ C0] RDX: 0000000000000000 RSI: ffffffff8de4eb79 RDI: ffffffff8c163180 [ 246.060123][ C0] RBP: ffffc90003257a60 R08: 0000000000000001 R09: 0000000000000001 [ 246.064351][ C0] R10: ffffffff90aba197 R11: 0000000000000000 R12: ffff88802b23a440 [ 246.068753][ C0] R13: ffff8880207f4880 R14: ffff88802b23a440 R15: ffff88802b23b2b0 [ 246.072489][ C0] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 246.080640][ C0] ? finish_task_switch.isra.0+0x221/0xc10 [ 246.084963][ C0] ? __switch_to+0x7a5/0x11a0 [ 246.091207][ C0] __schedule+0x1198/0x5de0 [ 246.100501][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 246.104927][ C0] ? debug_object_activate+0x2ec/0x4c0 [ 246.110279][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 246.120166][ C0] ? __pfx___schedule+0x10/0x10 [ 246.122409][ C0] ? find_held_lock+0x2b/0x80 [ 246.133675][ C0] ? schedule+0x2d7/0x3a0 [ 246.136412][ C0] schedule+0xe7/0x3a0 [ 246.139438][ C0] do_nanosleep+0x21a/0x570 [ 246.141719][ C0] ? __pfx_do_nanosleep+0x10/0x10 [ 246.148830][ C0] ? __asan_memset+0x23/0x50 [ 246.151198][ C0] ? __hrtimer_setup+0x176/0x280 [ 246.158981][ C0] hrtimer_nanosleep+0x155/0x380 [ 246.161501][ C0] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 246.180307][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 246.182728][ C0] ? get_old_timespec32+0xda/0x130 [ 246.185112][ C0] ? __pfx_get_old_timespec32+0x10/0x10 [ 246.187972][ C0] common_nsleep+0xa1/0xd0 [ 246.191139][ C0] __ia32_sys_clock_nanosleep_time32+0x33d/0x4f0 [ 246.195013][ C0] ? __pfx___ia32_sys_clock_nanosleep_time32+0x10/0x10 [ 246.198711][ C0] ? rcu_is_watching+0x12/0xc0 [ 246.209592][ C0] __do_fast_syscall_32+0x7c/0x3a0 [ 246.211794][ C0] do_fast_syscall_32+0x32/0x80 [ 246.213896][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 246.217365][ C0] RIP: 0023:0xf708e579 [ 246.232660][ C0] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 246.241018][ C0] RSP: 002b:00000000ffa5a080 EFLAGS: 00000293 ORIG_RAX: 000000000000010b [ 246.244514][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 246.264359][ C0] RDX: 00000000ffa5a0b4 RSI: 00000000ffa5a0ac RDI: 00000000ffa5a0b4 [ 246.268543][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 246.273055][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.277173][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 246.296606][ C0] [ 246.299436][ C0] Kernel Offset: disabled [ 246.301382][ C0] Rebooting in 86400 seconds.. VM DIAGNOSIS: 15:58:46 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000064 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85619cf5 RDI=ffffffff9b0ff700 RBP=ffffffff9b0ff6c0 RSP=ffffc900000075b8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3332303838386652 R12=0000000000000000 R13=0000000000000064 R14=ffffffff9b0ff6c0 R15=ffffffff85619c90 RIP=ffffffff85619d1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880974bd000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000ffe3cd40 CR3=000000005dec9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000002 RBX=ffffed100bb441e3 RCX=ffffffff8a36b432 RDX=ffff888023174880 RSI=ffffffff8a36b441 RDI=0000000000000003 RBP=ffffc900044f7948 RSP=ffffc900044f78a0 R8 =0000000000000003 R9 =0000000000000005 R10=0000000000000002 R11=0000000000000000 R12=ffff88805da20f18 R13=ffff88805da25500 R14=0000000000000000 R15=ffff88805da20880 RIP=ffffffff81bb0b00 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880975bd000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0fec29ae9c CR3=000000004bb43000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000001433af RBX=0000000000000002 RCX=ffffffff8b913bf9 RDX=0000000000000000 RSI=ffffffff8de4eb79 RDI=ffffffff8c163180 RBP=ffffed1003bdd910 RSP=ffffc9000047fdf8 R8 =0000000000000001 R9 =ffffed1005686655 R10=ffff88802b4332ab R11=0000000000000000 R12=0000000000000002 R13=ffff88801deec880 R14=ffffffff90aba190 R15=0000000000000000 RIP=ffffffff8b91275f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00000000 FS =0000 0000000000000000 ffffffff 00000000 GS =0000 ffff8880976bd000 ffffffff 00000000 LDT=0000 0000000000000000 ffffffff 00000000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f01ab2b6d00 CR3=000000004a2a5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000002c00000012 0004000000080024 0000000000280030 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000020c 0000001000000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01499a0004000008 000fffffffff0201 c7080008014b8e3c 000005af00000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f001800202d0c608 0001000000080606 0127be2208000180 0304800202d0c608 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001000000080606 0127be2a08000480 0300040000080000 0201c7080008004b ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 880033537974742f 7665642f01ffffff ffffffffffe90800 030fffffffff0218 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8285a88008000108 00060128ac000400 05b68408000fffff ffff0201c7080008 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000030656c69662f ZMM25=368f5ada368f5ada 368f5ada368f5ada 368f5ada368f5ada 368f5ada368f5ada 368f5ada368f5ada 368f5ada368f5ada 368f5ada368f5ada 368f5ada368f5ada ZMM26=3714be8d3714be8d 3714be8d3714be8d 3714be8d3714be8d 3714be8d3714be8d 3714be8d3714be8d 3714be8d3714be8d 3714be8d3714be8d 3714be8d3714be8d ZMM27=0a76fc310a76fc31 0a76fc310a76fc31 0a76fc310a76fc31 0a76fc310a76fc31 0a76fc310a76fc31 0a76fc310a76fc31 0a76fc310a76fc31 0a76fc310a76fc31 ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=2105000021050000 2105000021050000 2105000021050000 2105000021050000 2105000021050000 2105000021050000 2105000021050000 2105000021050000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88802b241d80 RCX=ffffffff81af1411 RDX=ffff88806f882440 RSI=ffffffff81af13eb RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc9000741f888 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=dffffc0000000000 R13=ffffed10056483b1 R14=0000000000000001 R15=0000000000000000 RIP=ffffffff81af13ed RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977bd000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f655c0 CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000