last executing test programs: 18m25.825028615s ago: executing program 32 (id=6055): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x2d}, 0x18) 8m14.369940077s ago: executing program 33 (id=9692): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 8m9.899146844s ago: executing program 34 (id=9727): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000500)={0xf127, 0x1, 0x4, 0xffff, r1}, 0x10) 8m8.109626912s ago: executing program 35 (id=9736): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="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", 0x0, 0xdb2}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x80800) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x1, r2, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7m57.861844359s ago: executing program 36 (id=9761): mkdir(&(0x7f0000000400)='./file0\x00', 0x1f9) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000001b40)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) 7m52.011352201s ago: executing program 37 (id=9774): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x256f16877c9c3f29, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) writev(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)="943a1fcb24676066260d837c8a6bf0b9beecfdc4658c963ec2657e821760538c4816fa2c38ae206755a9fa86d7a322d0f6acde1d651d13bd821b76d0a9bdf18aa3", 0x41}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 7m51.384768518s ago: executing program 38 (id=9785): 7m30.870482273s ago: executing program 39 (id=10081): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd8}, 0x1, 0x0, 0x0, 0x80}, 0x800) 6m13.458596424s ago: executing program 40 (id=10561): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x6}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x1) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r3, 0x101, 0x1) getdents64(r3, &(0x7f0000000000)=""/48, 0x30) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) getdents(r3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = io_uring_setup(0x5b42, &(0x7f0000000640)={0x0, 0xfffffffe, 0x800, 0x103fc, 0x159}) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r8, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000000000000ce005785753af3aa9573f2c05ce80157e58a93870f4cbac4d79ae91879a4cf4b6c11bd2925dbfdcf2ebb3cea7c8d7df090e1c30600c065f8de34cf826a50d768e117b7a1794071e8c892de8e41dc7a7a93030520b8bfd45e0f27b16173738d47a62de18f573777c17c79729cf6f0930000000000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000", @ANYRESDEC=r1, @ANYRESDEC=r4, @ANYRESHEX=r3, @ANYRESDEC=r7], 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(r7, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0}, 0x94) 4m23.723578001s ago: executing program 41 (id=11348): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x101}}, './file0\x00'}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 64) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 64) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="a501dfec70f9aa718c75050ec6f1434121cd5ef1d6564f4ea3212c6e08d1a12299516d808e5bdaa2c37a4240a650b37c49af65833290f751499b272a3e18647dd43e212063858f5ceacab6a2cd684edfd340755fd52c52dff792a9f563fdb0dcbfe56e04dbc554d6972a2f882253a8d87dfa8d93fa18d9ca2a7de183619674c0f1e5accb7ff11cc95a9e84cbee456eceec2342185da76067e7ec5adca6ce5634fc9426a85fe135d0acaf3850012f6080ba38c43190cafa4c687a264ced68f703b6c576075fb6aec16a62bff8f050016167d7d4d31d298520c2836885f10b6ca3226e4d0585d52be1dcee8f151dcfdd3a377326e777c1", @ANYRES16=r4, @ANYBLOB="000426bd7000fcdbdf250000000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d7843060006004e240000140002007767320000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) (async) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r5, 0xc01864b0, &(0x7f0000000000)={r6, 0x0, 0x5, 0x10000, 0x80000000}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000000000/0x3000)=nil, 0x930, 0x1, 0x13, r9, 0x0) (async, rerun: 64) syz_open_dev$MSR(&(0x7f0000000280), 0xb9294a3, 0x0) (async, rerun: 64) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x2, 0xeeee0000, 0x2000, &(0x7f000000f000/0x2000)=nil}) (async) r11 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r11, 0xae80, 0x0) 4m17.871861516s ago: executing program 42 (id=11398): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0xfffffffffffffe64, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x3}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = dup(r2) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$TCFLSH(r5, 0x400455c8, 0x1) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)=0xdb) ioctl$TIOCSTI(r5, 0x5412, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r7 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x1, 0x39d}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000280)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x4000, 0x0, 0x6, 0x0, 0x0, {0x3}}) io_uring_enter(r7, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file1\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRESHEX=r10, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRES32=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) pselect6(0x40, &(0x7f0000000300)={0x0, 0x4000000000000000, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, &(0x7f0000000240)={0x18, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800000000, 0x8000000000000}, 0x0, 0x0, 0x0) 2m59.480180158s ago: executing program 43 (id=11909): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x6}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x1) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r3, 0x101, 0x1) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) getdents(r3, &(0x7f00000005c0)=""/203, 0xcb) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = io_uring_setup(0x5b42, &(0x7f0000000640)={0x0, 0xfffffffe, 0x800, 0x103fc, 0x159}) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r8, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000000000000ce005785753af3aa9573f2c05ce80157e58a93870f4cbac4d79ae91879a4cf4b6c11bd2925dbfdcf2ebb3cea7c8d7df090e1c30600c065f8de34cf826a50d768e117b7a1794071e8c892de8e41dc7a7a93030520b8bfd45e0f27b16173738d47a62de18f573777c17c79729cf6f0930000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000", @ANYRESDEC=r1, @ANYRESDEC=r4, @ANYRESHEX=r3, @ANYRESDEC=r7], 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(r7, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0}, 0x94) 2m56.201329132s ago: executing program 44 (id=11939): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020) (fail_nth: 2) 2m54.738909713s ago: executing program 45 (id=11952): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) lsm_set_self_attr(0x66, &(0x7f0000000240)=ANY=[], 0x20, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x5}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000140)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000100ffff0000000000000000850000007b00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000c000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$pmem0(0xffffff9c, &(0x7f0000000040), 0x100, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r7, 0xffffffff) connect$pppl2tp(r7, 0x0, 0x0) ioctl$BLKGETSIZE64(r6, 0x80041272, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001100)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) 2m54.002879865s ago: executing program 46 (id=11961): r0 = socket(0x1e, 0x4, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000002ec0)=[{{&(0x7f0000000000)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="1bf7b63f638e57376f47d4605ab8ca085e7710a7eb8e2daf9a3dfac02ab7117ffff44d202305550904468543a8ee660832de78f120b4185c4e9258de71084a99fe571aee5a585f50817979725ca4579f571ac52e52ee47ddab3d228428ef708c347219f9fdb41efd2445306c4372f91745eeeb29df2675c6330bc4d9766a5582708766d26124b6482fc878e02ce4526e7436e504ef94abed1a8fd832b3314b9c58340cbe901e3762f8b6ec61ea56c1d94a31c0746ba87ad7569696276ce6e5fad6dbddf03bdcb491b6ff00c09460c3e0d156a7bec0075dd4942d7413771a439d690f2cc97e4e19de60ea56ea5c99f1e5d135e8119b235919", 0xf8}, {&(0x7f0000000280)="d5f4a896605eb3057eb9ff7832c19620cf56bd54999ec58582d6f4ab757f3caa30bdbc92f25a939c3709cd2fb2543dfa162a0407baf93a80022d96564e987afa320d1c2674267d7ed69728b72ef0eb57ab99510daad18b902a5dc8c7a9f734bad7a29a2e9da7a58c020bdbd98531054a628dc853ada3461ef4d441864aea064a7250ef76b504ec3d0055360f1bb0e77e16f251f937a4d8bb65127e08055c5c030d9982e39b5fd1f7a66f071a56e0f68741a061dcb28563bab916dfe8f9d6da0e4cace86f6683bf", 0xc7}, {&(0x7f0000000080)="4a4d278cc0bb8d2bad09cbe6f22f66b328b94e4aac5c625cdf90092656b755728d2d8148e4adb4c6b5716b8f2173a84cd6109d6ad8af6998aeb7d06c3ac41c9216e25db80cb6c18ee4f7f7434b28843aa9727ae45e5843e67be11018c4fcd1ba4cfc9c5c7f366778e12b79ab3e238f0b5c6e9be6a40c4ee496537a", 0x7b}], 0x3}}, {{&(0x7f0000000380)=@in6={0xa, 0x4e21, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x80, &(0x7f0000001740)=[{&(0x7f0000000400)="ff37f1cb94158f6da28d14b84d7891388b74c22cc5741a9f4853a2f06641fa294b8b906f49f361b7f7a8937cde5eb46e925dae08c5ef1f3ceaf88fbec615be71ceb77ed5ce60b1f1223bb625ff4995b7e4c594027baf3010ed10259f5db86d34dc0d3f064651bfa6ffb5556ee8e673f1118033509932f8802f79534cc5908b6971e917c38d8947ae4e043f0c5ba7e91d7a4710211760e61251caa09bdf04c68339085357399abf598702012dae30c40ded39f34e34", 0xb5}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000004c0)="b1b347e8306ae8b66c6db79b996a93eae5c2ce0342a55adc40c79a1ede633ae468bc26ce167f7a8de56357f59958b0736af7015c08ef92736fec6f59c46ab1d258f6a9f5f2a7eacca0a95894e7431a3182f3d2cb437dcbb9a35e3a3c913e2000421d71ed0a35fdcaa1da5f4e", 0x6c}, {&(0x7f00000015c0)="513b4964df18f4a07d88d0510f43801ae8d79d49f7", 0x15}, {&(0x7f0000001600)="ca8f8365b207488eeb3d361201305d4ca2a1cd7b41bb6320e189b68ce1b5c8033dd58d6db880475dd1109f496c0246d246c00e7990f5973900af6952cfa8c1b5b44e8cbc79468d849bcfcfe45e92d0860e86ea652c844ebfe1eb4cdb0e16ec9c45af710eab5e97f39f5d6856312bbafe53b23369d70e4395785dd81af782c65c5b8c5e77cab258e6758879e6a1284fa196f2452202b5c3fdb8434c5c4de0420393c79d347aeb6538b7dc0a8e1c7108d30b6adbcbadae3d1a6c28823a7008c8b80d3b231642e632e55a70f1107f4f42e12c737c032a1a667513af016690280a32", 0xe0}, {&(0x7f0000001700)="293aaa91dcd96fdf3d", 0x9}], 0x6, &(0x7f0000002f40)=[{0xd8, 0x117, 0x7, "4b8bb4ad20378810b2ecc0f5518d527c93c148af69819f0e698d6e45bdeb08bbf18a16b153b0dcd9760bf237e43a3283abe0f7e50de517ca63ebe6dec1b2658af48fef33139c87a2b08118291fe9f22300000000000000927aeaea69fef6aad16d6fe9b4c0fc72f49b51936eb84f5f1a141ed0e37e201651e6ab12c92779fa3134fa290c04879f279938137385f7ad0c02adeffd9d6cc503b1db35c2d0f3023508c002f41b696e9c15d361081fdf0d9b858cca084f993ede6f29bb2ce9122be11f033d62b99fb5f960a2"}, {0x104, 0x10a, 0x1, "a0bfb2773ef965b520df88bd6b5b7a3672adef41d6811dc5bb653c0e5d5b1d670937cf15a0f538a0819a840b6cc3fd3463db496e6c2c58931d749b3f86e5456ddec90c3552ce383d57c99bcd9c64bf0c0272b963e0610829d1d1d03c347f9e960db7da41ea38f94d9a2b189d94ae515bd67e04a93582e6731d3e27089ee475449595ae53f52fe3662712f92957eb17296c4ce7bd9db2abf7fd224584600260aa723cb63b56544e40b7c1225688d81d8aafc3555a2e1e6a7f38b1488476053b74a157cccbe76354966a4f8136e69cf3ecca7c0838de93d76ed03ad3ca0e227a5188336051d28a9bfdf34e66c84500c9d988a570e9adabbd"}, {0x100c, 0x10a, 0x3, "965dcb3cb5dbf097e92cb4bd104025c39a707d54a45b299fc47d97038b356b5277de839ce2f6ec36ed9662e52704bf8be6c6085a2ba5e9803fea5f5a087108042b1ffad67a85a2d534fa38f05022eb71c1a1a91131dc1ce51c6a3c2a3dbc9587499b83941bf42710f45803908ccfeb92bc2dce60926694a732cbe4eb3816ae1052b9126ed69c514f24b2205cc93a4e42f2bfa76772573faca7bdef8655bfe61a13652cb6465cd09c83bc067d3780c1bcbbec3dbdfdebcd8b16537e6461750f8962ebf21552deaa54decc802269260e9afa4ebcdaa6113f777f2a286f66a48a5b90302457609e0e13d0e2c9d37198058a629424b34ebbba639e56c39a8a8534c1df830953d813a9033c78a694a32cc918e832e56ded36f319b6d31e0fa41029ea4a28780fce8f45939dc0276971fa1e20127451613734895bef3df57df946d5a3e82934e9f6f0de48d42583fb6a509aad4f207804b772256188ac3931550642cbf97e0c058b674ec9d45e40be480278fbc457f9deb282fe5ee009f9f9c92c508517c89a925ec6ca70f1a1381044cb3422ac913ff7b3447a1b5c5904ee95069218ddc05c0b267f59b2660a9e518f7f91b7eb5099ab55dd6a8776c4a63e76841becd45881eb0e59c24b8fbf89014bd4924eb06a89d68b9773400232c1b006cf4d209324a5a7f2cf7e8c5f3dc7db1a5ea1aca1149027b70b114ac90b381e22b150c6acb81cfcd0d86b7eb8f884e20509bde50964f90e8f4db400cf076009e93996199a1e198161d9016f22eeb1b2e612e063be14379a8a201779f3ef92b1056eee6d86daba512b10bc2ecbd8eaa13aaf3322c701cec4ad1b6aa588ded31fd54f24300b1a5d2ddfa7090f8e3c694a727bcadd3b77d3b160b50712466c61ccf3b454f0da48f3dcd49eb9ebf443ef20fd89b7374b1f23c6374747095a51fb40824dd05f42a668ba7c561aae16944a5511807853b986d18ee74264761da235db0e2507da536ee5b4a07cee5ee07a55320e6217d71aa2b81351a301f51674abc118f9e4e507c2d96072dce698f3228e8aeb54113fe03a8c17ff327c25494fc41d9b0179b511cdcbd68488a89507d089709ee36e0bb2e9751ae89e6481d2365de65714931fd0fc794cec3aa193cd5029c92ff8d3916756f8bf93a05181994a5d1856706e7093e26c97399834e75bbdc3044a0af95001aa8e080de6745a858f7374266e7112a5d154a7d7561ea61d2e73764c9e670d63f0874a64d2c0c0e2ac4c0e5a9b651405b486a240a648a4d26ed5d3c712d467652baa2b105efaa829eac0e866d32c9f60800919b6168f1c2edd4d65901cfa1f7fbaaa1f2ca2b8a25b4fc59f5b544c72d2c68c5cf6360c39d55e607dde8620cc314d4c97379edbce68d9731e5f5fe72ea0b53417da1c13f2964f85ef8d4c1c907647ba8da4ecf842f1f71124917d6ceeff3d46b39758e4e230e8a0539c2cb86405ab7921b4ee0f1f5aad0f00f4b9d0436433d58473aae9f4405c38a8baea63438a5ad304e4607ba4c58f0030997c1866b60cfeea8f112cb0be61267876f71d1085240a24a34be3fef394dbe5b69ad0a5091ea65fe178652d530972787ee4537b769fdfe4f48b57eeae7e385cb0e3b7022b7c72e8246542e3ae945f32213bff23293c4f11c3571f3c93651fdb41b5805a421f7cd53bcc8cc681138bfb9899f5f4a12f45b63421bb18fb02fd22b5b54d0639dce789c636b146dfc499371a253188eaa677ed12fd4853a6372a54313377fa1425292136f08ad01257f970a71696334dc37b6c5f21256e43928f073c5dab5e36de0237e3be9b0ed73b4d23a40ad02675d1cb2ef5fbcf028565c4af78a4060cd3ea60199ea24def99afe01d620c91ebe61d47272774a00068ec1d50a19fcf6b0664ba45e1caf86ec7541aeb84aabcf9a14224fd1d0c367600827ec179f0ac2fdd51fb8eac4be0eace7c047ac925a6838f7f388ffd45fa3764b1f0c98d11042477f0eccc1f951e253fd847675584741f59243c058875e6dc2d0cacb5a38fac930696d488a9f73e7bfa566a69e53a058205d02889bbb0271156f488b26a0aac9bc5f6d71c0d53c7d9466e7949c11dc3b0f6c1274c5b87f694f32bd3f4d3803a373c7048b8945aa11bc17c0af167069adc26be50397f3099b3bad2406043d4b6f7b457dd3282ee3d544b91f82024377d2b18e0fd2ed99b60f65e9cdba977f07da2ec022ec1640235a460e6e2a2369970385a208297b87971b5c80cce3f7c493a32a01b3421433b66364feddbab9cbd2f46b3c1f15f32da0dea66d978ac68f199bc37e7f5bc5601ee665ea0d51bed3255b2db5772af7dbc6a3a98dd7cf93499680ab76403ab3ae7393a939c59aab4f0558f7f4af5d02d9a3ae4b43f08e1e46eeb2b2b570fcc16b526a53d548523adc19f31b810ba78d38cf5320fd63c2104b6e00fa0ac30090220dd7b1bc86c0696be85233aa5dacba8654276587ecb292c791fee2d69a94bb19e6aa428525ef42fd2a364738b810c0fb3973581e0574ba6e761ddfca2938c060cf71ac746ced9fa39c85727f90e12533e07385648b4add6713db707006ac4648be240bbf8d4f6cea978674864ef40beac55dbdb8a3a14d5ad93845e8341b888424a830cc27d7656137d88f51c87934268a9aac8dff51809471c6624b5f8d41dcde8e426b3fc1db739180f8d0216ebb7260474cc22504ebff43f289d3b711052caab03ea78fbdf05c6844e27ff8c2b1fdae8a126b1ecfb49835c5bf33a90d79b26090139cf2b8d8ca0678c6d50552cd84d2b2627bc15fe135af07d82b39f67c3b477c3ae14500546aa3a708ed83b2e4efc58412c0b92fa189be3fd142672f961c68a814ea0e620aea1987812696e32c0987a98b1d5080284db65a9fa48142b034e2f918ceb4a3c86ac6966ad252c4f3c2d1e4d0f4ff838e3a7d48d4dff151b661b184ea7cf9275ca992134782e4dc54c5a1fd56b8eeca87609e0b5d8911c839b60c81757e67ca21b6f8aba43aebdc1e922f504554d23c14a0c0b31dfd34f0a8280bcf43cc10019508673354722e3d2707ec44781025d730e34db0411bcc47aeeedca645aafc486e72f2d99481fd32989c37f7410b9b8772940f825695c20cf668610378f025d88b979c90f1ce499c3b1a8106fdab27b947f255d9e74630cac2ec6b489c7fdd70331690dccd4f4631c232eee0fa12b0d859eafb5f1d4928375158837ecdd86b646eb6d2a62480af7a0949bab3fc15781ca8e99ccc4d0223685e7e63db8ec36f8b6c3230d1ebab5c0e8b8f9803e67c80d4ef266bc0912de2e2f7019a93a157c558ff668ca0f3328cabd81a89270cd73f9beefea884f9d227afe64b7ff4728c9831b7a1a6d54415a9d2b37329649f8ae3123897c4c875dd73bc3cde03dbc4a24261efa1364332bede5a24889b8133df06ed68a8e3e7a36b1e7485d53be7f3f56f82b1c879c246801fc822744c8a6ef95c49a347bb48c1c8ad85c6bd3468c378d2f0f8ba6c8ee41f0ef63380f31d917841b67d0d5e0eec415b9b6919a8d3723d6d032cd9735eba18a4fc4d2323a80ac174b97f77091aa074605b5e6ce32d9889c0a134b23fdddf161bda34ffd2a5e9ec981ffca47c81d9cd8e192c69d9de50fece40d6bf6253a15264e0ed3130c657402350c11b4a18fd1591c849c2fbd2f53b8cd53f92cd64ae24d0c7d2cc85ad545a7766d2ad966de36a5222b840c2ae010b393a76087639ab90c553a97de4fb11c31cc07f7e0c4679c5585a17a66c3223542eab8d0f3e2faac8a2677f1ec2d4c0c435c09c5cfa1b23241094bbe60d760e3cf66396facc2b6a9837733a37d28290e2bfe6e34fc3d74b6848597e3ef5b208c6b37df09be35f73ada4bc17e61d89cd95b4e7a1c97d8a8c190fb72e4f4046d9a179d6bee430a2811a8e72a3455e10f39804ade67a99c47a765053db29d96952f719d33c62509dac9db6f8e796643429240143453434867391130232a6035b961fb523a799456e502359b933bd70d78978a806333c9959a9e22d37cd5879dd4624c0566751e80768435763fb28b3e5e5b603d6c02af1eabdc66c3220663b4385bfcee61db543caee82d45b6c7304ceb37917e22412c4c34bcef913c21d5963ce715e78f2a04fe7e1c5d3d3e9afaa52bea4291dd1e8cfdf4d9dbb996919a2643c961d3527290ded4dafcff8af451d1a4d3dc8e5524f7fb60d82382dceaa3c551f391477988a2517ecf53b0bcca793954cebe8ec15b564692ce769d19a2bb1e23c00079498d80ca0496a73343fb9c08415e09ed27f92cbe41daf8f1457df2d5206631ac666604ce0548a4e82c827a44862af30bd1ae7ab12664a137db62bff37ad0c24fa0da1b318958297568335c3a4c3d7c63231059831afabbec2d2dc90e304f67bd4efb68b43724ede6a6ae0f0849ebaee3fcd707c888bc89eb5d0ee464c6fb6673888f008c0f0c9a09121f30c25301ddfbb8a9a472d887cabf0c5465155bd81c9fea196767615b0bfd65502e3a0b3e1c22f943cc94d0d839e2d96d582af8e3b8968b0af5d6df42e559e55fec706cea3fcffd2cd86f147afc2884971e31e1586784eedd8792b46d2d5e19ba3a54e282bf983e5a4d09eed355f52a238e9c6e97b9765eb43e51f21cf5ed8f05cf082a671d0a3e182e32fc45a0f2f2a4d3fdeb11c4435dd3bce268c4512c94c2a61ce44b65a0e163a379848acd3ccc1cdd9ad0f261d21590e472ec00af63b53d3b5ccdd61e3c6b37b3c4f21a539b595d38cad564dbe851661b8294c3e2e621820ed848b1994625f797af5c9c292b984445a438ba89e1a922e1e192632b1864c45127f707109ac7cbd767c6213dbe347355e9234e5418754dff89740e235dfae361ddade6597fd2b3ae0105832e87d2eced029d5743839717c44219054e789465acb785592024993a28a0b34505075f491424cb68d9a1ab5268865741c0b3f0b4e30a6973d789c61b29bc4fa3fe6a80ee51763cf76a4fc34359cb264c11938f25c8b987b1289695eab2322bced68b7f2a2b12d18c3a6f7ccef6030df9442be7437578d0c89f196755cf1dbb8c462e173887f8107693df2983b52248d73a8a06455531698f80232e6cd77640629ec805715b5e1dcd4f68caec01b75a9a4e9697f6657928de5103e27d255c5c8db4276313582f3f7a5d00ad29c59df7008556ad1388cbcf2bc55a9024d30745349a077b24b7ccf7b957b075e3fd61bfef96a5f190ada2279fb17728cfd01a8430fb508bc4f2922c14a3a77b3a68e526f36ad535e2f536ee4b3a405b9fe04cffa3f0ac8779c972b2eccda9b399c738ad4d4f18278f0b6726a964924a4fc4410e2201cc0756ca3ee28513c1a22d828b175aa164bbaf295db55919639390d829a45f2eeb00e84fc19d3f47b4a08ac191741027bbeb6c9a97fd115c379c553e0b7e0a22c8c2057557d1374d8ef6efe7838ae9eb5fe8518c697acf0ed239768da3f69dcc65ad94e2c4c82205dfd76cbec99335502eced57a86c53ad78e80f91ffefdfb8c403b6bf3508bec21afd69e608d20aeb949ea0a303c7ba41b3f6450a24a27c53c51728bae59bd31fedbeb7496c008f5975044b68084a216f5c2e728a7f07c128bef03295a8306038803dd445164de66161cd29a9d3a43c65bc99f13eac482501e03197b872df1772ce4623c8072af2bbb5570d9a1c079c38694748b018d59ea0b838b7c792eb67bc1d9df4ad839503180fcb0693377243b05e575512e870e46e27351a8b2c6b4f8dcb17b57d2f12ff3d8c350ad9fd51bbd64e1eec92b74d7"}], 0x11e8}}, {{&(0x7f0000002940)=@ieee802154={0x24, @none={0x0, 0xffff}}, 0x80, &(0x7f0000002a80)=[{&(0x7f00000029c0)="3ebe137da50fdecba8c113a920ab372789546b4e3ac8c861e51ed2159242b3ef07315c8a764d6975f1b89aca899fe99869c1cf58f9e84c13ffaa545d77fc2df841267383b1e3c4182a068904a6", 0x4d}, {&(0x7f0000002a40)="67dcd081710240b20e8344c21973ea22624f4297c8bd17e83e", 0x19}], 0x2, &(0x7f0000002ac0)=[{0x60, 0x118, 0xaf, "f27ec0afe8e0028acaa922e668a3826157066a8003a0adf2928d7a302bc9dcb4a1c608f265b0e2c507a6cc16a2465659b7d2bd093644c6a74a32377927a5987ad173fb7771ecc07df090fd13391fa1ce67f2"}], 0x60}}, {{0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f0000002b40)="4c810bc0a2fb608cc8e3811fdd37557b791b175546dea011ef3938515ba3d294209f5f3d1a1f52c1e966187ab602d8c2279240171066b70f6369fe574f47e9b84e0bc66947e4f264de6963402cabc392c8ed0f1b77977d217b49b162eebce6131df33244da38eba9bd", 0x69}, {&(0x7f0000002bc0)="8c1b14fac025ad3bf290e55d703746a99b827b371a0ae879f809b5fb65b9fd78ec29470504", 0x25}, {&(0x7f0000002c00)="0edb7d10c1e1bdbb4fbd6988eec7fdd7798c8639ee1e2c99058c7e0d73d58c723c", 0x21}, {&(0x7f0000002c40)="2a80ffb9cfe7ddfd160ae48dd9b92e6f8306dd09e090c15cabdc778460674581cfe02b5994afd7a701581958c4fc04875892bd31a0f64dbc3f9a76edf9ac48ae6f945a241f6169d308e093266ebc25a4566ad02dfa1443c3806854a65ddc3e27e79183940aa2b9a5997c3592dd73d0173ed49b74d2ce53fd50750f38dedb9915487edba37b445bc3cdaa1ebd903f1c32d03d48483088981a384bbc2f9dbf082e6ac4deb56fb4ba09743c3eb7cd3d4c76fe2dc40935dfecdaebe143dfe4b054a80e9e94235001f38e13472baccc5890bd1178c24c8531d0ba", 0xd8}], 0x4, &(0x7f0000002d80)=[{0x30, 0x107, 0x7, "2351d0597015ffead73d622f94f650fe03ac70b94b527325e30278f289e8b539ee25e8ce"}, {0xec, 0xff, 0x6, "77b6fcdf1e238a8e96719dd259760c0b83c5fca928387b5de986a11a540514a344cc7fd13af744efe115dbe542dc85d9801c7819f47bdc5c170397ff3b2d2f43430421ec337d2bc6fbcaf01e7daac0ebd3cea807d550fa997f703a91e0eef084e844ec67c04c6692d7d933cd87e9fbded2b999759e2f88ee37de76556a8844f64d903cc24c53cabe58dc320d8424bae6f8ae8df2e49c440b5e2afd4bd111ece3bcecc42f33258c9185966e4f3baf377e1fad07740d794b1e5dfe36713d0f26194b2529c31a20535e3b138468f3260fcf11936fe91ec6bc97d0727b3cb3"}], 0x11c}}], 0x4, 0x0) 2m52.261976396s ago: executing program 8 (id=11986): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="070000000400000008020000210000000000", @ANYRES32, @ANYRES32=0x0], 0x50) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x17, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000190000000000000000181200009f9cd3ce9be20d0b3227a8a6ab951471c94391098c4756a4b9074471f3122dff4a65175fe3ef7792e0d6dfdb0997a25af8380d96dfd876a7035e68954119f4910e1ca23204012b3a3f675fc3b06b027c0fe6d0df2cb1204b04d7a0e658a74e65856f63f91920dafb272b60211e615b653202f70c6a37c3b4c1b44a8544c10000000000000009fbf5ee0037c48c2eedaa125116814b1cda8fa675c35000000000000000", @ANYRES32=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r3, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000380)={0x0, 0x880, "e5637b644e6868de451cd6591d8bccf7bc21a598ec9d751802cd61b899ff7bc679aab859f2ae42f7b8407bd7d737fa70a14e1d72b98991481be26c448fc5957e09f0e9fed80f50c3db87586e7db0e482bf718bfc378d6c88a9806e43c264ef7510b95bf233ba559aa747862bf602fbd1bad29e4194f03f60f75d1118a0580942159d76f5d4402172c93a6293d50ecf151f0609b3ad0c0dad1c85b11a5c77d1ae60be12668565d38b27d6ecdee61cd3b6dccf04016f7039c579727b0a03ddec48abd0e27612a2596e3ac081e654032df4af099f129a7af415a2000d497c22e36d81aedeb1f5f8a9fb2f0480421e0d2b06a68caf2e97fe9c74638f9580e26164cde7369932eb7163ce76f897ce72974987880132665454ff2c0198bcedf64bbbd36dced1812b68817a5398a48d071ba013d5a6d65e861d5179d50340070bed8c6303753fd61c5db8183257565cbf9459d8c207a613f312d845c9b12d085486d0ed1fbc61717d0d1f43efa77fb56a1264ded5d3c35fe67d5998fc8f72a6fceac5dfe8ab387e4ca56116273ac1233e48ab5a32e3ed2c9ffc7f660cb45a0757855fdaef49c0aae7600ec90f5fde03384adab2754c0be1536e88b779e9177c28e3b82e7ce56508e85d674a6331a2d51876b0192d1827ef4b60b2c0f3b05d4d950cd1f4f076924ea7ca4b3b8c071ab9bc357d07d4996b10469df5968ff29c1c33c09ab5c202f1aa594836142599486be8899e6cec8efdfd0821e28f211e37aab64b20d345f355ce656d8d7b55246b1df7a9991b9b2d83b5cdeb6d8960b666eab32706925f6596052cd79a2e1ddc19b5f40f1633aee43476a0ceff8576674587d63aba3e3b3e6bf57b5cf11d61a00a4b94207e8c0ec5554d0ff3252210505f19b4e5d9de888e2db50d297512d978664addf65b662e061ef208deed7cf9937f51e8d3c7b44b1be1c53cefbf5bee6523d8b73c081f4c7a46f73853e8b7497ea3a16828c0ea6bd03f3e9ba8092ffe00150d7f23b572001a26faf928bd5fa8744a422e22b9c6b6a40efb2f6cd37cfa5644325b6522f1fafa2a405bb47868c13e2276318de4ddc6e6fff07619291c6d7cd0823907777684c703611a920eaf86a0a34b48d5d2493dce050fa0618f1d50a3058bade440d0dde405ef485982307b636ee73fda161ac97adf79ae77e79c8de1f885f8de2eac1f0f932d03c94bfebeb25dfc1658dcfd6a47161fe8039c757e0e36b71e20c243406ea5c04a7b89f2b61e8d01964ff4eb5ae04681b6906e79bab4dd673455f9ae845eecb3d35fa24b15197f72376a5a5fdc6ddc3b4fc0f620d44ff03ee642ac8abcf22fd5d81534890c1b6d775f872927dcadecc3055796d75fc9330db3cd0695be2f3026bcf54105bf70a611f844039e1e3998739f5a3ee59a6998888bd97ceca9a3d1adf8afd3df31555d9bb8bb40113bbaa412a0697d87c8a0415bc10b405a2ad1c8535ffed1a30684f8f866f135f35beacfecbf82dd71e12875bcc2f9ee006164be5070532283cdaef09a987fd931477033acba94950f37961c2a1dbce2ebb4348b2516a30e778e2afd2c459294f1af11b9ec763add7197061d4586b4c5c98b67451e41ca93be94b6b8ed033ff40736953c0a2dd7f6de17213b85aa306b8f18de96146c231ace2f219f908e3be859131a63198b6e8ec0272fce74814d9e084311e37d0a4f466c8719d7c778a080e8c928e7ab32c932952a17660198dd1438ec31fbfbb62a7aa727bee2e8f38cab8f24ebe53d4f32071a7d26bb840854ab31a43d2ba0518dd6387919bb805c528ec8088b690e9cb80ac145542d15d8c0da8c8c81b2dd658821c6066b42aa8382f6ab2a6a0f64fb682ecfa41c92771c1b64360d82e5c8147ce185e62b6ba3de7bbfa4a46f5fedbd43cf1cd911e04cffba71d32b72b08e6132fd574d590d4eb8019aa9d2b425013f40bf7cf35eac3633bc0818b8b372d47f85e963123b52661b58fe02979177e580d0e7e462994265d1430fd2ec3c858564af08724185097b60c14a340af757448c53c0a8b028a6976fbde70768a64867e2d76c4d72852ce5cc5e4b094f5930cc80a7c5c57abdd1f5e73ae3c1566ee83126bcbbe8b4b818fd518cc86f1933b2b28b24a4345c0525173ded3b30ed109eb99df27d1d34fd98f2ef62b3879f81787b6148aeab886958a1c308dd4aba37614123d14216ddb2cc8c9d01e7b73a7844b735fc6080903979f6778a17b4db5b90cc5a3d6eee404b2d8bbc20b9826fa6f5852353627bef7eb4f67d5b676848761d589d9023007237ad990840ccac8ed08450f8debac6f78fb4cf5af85bc57a9a07840010e4c601eb57122869b06303889f31575cf7cb8c87f7145f0959606655e2e738a254b5925334dbe5aa7457421fe93f1af9be40095eb0263843adfe69951c6ee79acb4ed2ad54eb2903ae96182293bea1bf48035390cab29a9127d770947872961466597c32abd434db411a57927915091d9ad20aef3dc32ebc1ce14eaf481fd6a6f3d355fb96b45225464f4a512a2a272bb2a54d03711a408d6af69883fe83caa8b436c45f30d04243f1a672a1e2930a56666c2d44b3656ab13ad4e83673fbe2afa4883f73216d8323193ba0c098e0fe6257ec14fbcf36df67515ebf9a474713f98cdb95abff10490b2370f4b184ba10a7516955a04c8559e2cc582d41ade9d919a5c0323939385151a4862f8aff02ed2fe088e29363742e8c9fbde6e951b4ae38e1def6f72bd6901faefdd0c5439f2b08bf2ec773a03495567ea0c9f3ae4b7217500c9a16ad6928d2ec7fb28e965cafa716bead7ee488a8311c66498bf712448b235a3fa6f7e50b9993be68e77af9427ef8c9f3be987c1844ae2e57dc18ddc5118fdc58136a9e8578f126d8a5f4d573964ea3fbfb9205713a2caff693b90d019378252a7ae93e788b97ba50c94f7f2a8f6e2ff49554170b260547155bd3094fc63e1b25464104f1322054089be8ff2086e3018d648a5f5abe53074c3e7935d37c7f8ce9adeebf9892eff0df3816a88fc1a41445ed4cc2192656dea755f3a78b52be2f1b222de987419906"}, &(0x7f0000000080)=0x888) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000300)={r4}, &(0x7f00000014c0)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x60938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) openat$6lowpan_enable(0xffffff9c, &(0x7f0000001500), 0x2, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000280)={0x0, 0x6}, 0x8) close_range(r1, 0xffffffffffffffff, 0x0) 2m52.154572908s ago: executing program 8 (id=11991): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x3, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000fc0), 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) mount$fuse(0x0, 0x0, 0x0, 0x408, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004300)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0xf4240, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) r2 = syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x101000, 0x0) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000040)=0x3, 0x4) socket$l2tp(0x2, 0x2, 0x73) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) gettid() r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r3) 2m50.662129026s ago: executing program 8 (id=12002): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) lsm_set_self_attr(0x66, &(0x7f0000000240)=ANY=[], 0x20, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x5}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000140)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000100ffff0000000000000000850000007b00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000c000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$pmem0(0xffffff9c, &(0x7f0000000040), 0x100, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r7, 0xffffffff) connect$pppl2tp(r7, 0x0, 0x0) ioctl$BLKGETSIZE64(r6, 0x80041272, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001100)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) 2m50.515738057s ago: executing program 47 (id=12004): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x13}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 2m49.747547929s ago: executing program 8 (id=12012): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x4) 2m49.734023237s ago: executing program 8 (id=12013): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x5}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x3, 0x2) ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000140)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000100ffff0000000000000000850000007b00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000c000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$pmem0(0xffffff9c, &(0x7f0000000040), 0x100, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r7, 0xffffffff) connect$pppl2tp(r7, 0x0, 0x0) ioctl$BLKGETSIZE64(r6, 0x80041272, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="38000000101401"], 0x38}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) 2m48.451570868s ago: executing program 8 (id=12016): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10001, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) writev(r0, &(0x7f0000001880)=[{&(0x7f0000001900)='P', 0x1}], 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x1, 0x30}, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) io_setup(0x1, &(0x7f0000000b80)=0x0) r3 = eventfd2(0x52, 0x1) io_submit(r2, 0x2, &(0x7f0000000380)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x101, r1, 0x0, 0x0, 0xd, 0x0, 0x1, r3}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x9, r1, 0x0, 0x0, 0x1, 0x0, 0x1, r1}]) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) 2m48.383980865s ago: executing program 48 (id=12016): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10001, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) writev(r0, &(0x7f0000001880)=[{&(0x7f0000001900)='P', 0x1}], 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x1, 0x30}, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) io_setup(0x1, &(0x7f0000000b80)=0x0) r3 = eventfd2(0x52, 0x1) io_submit(r2, 0x2, &(0x7f0000000380)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x101, r1, 0x0, 0x0, 0xd, 0x0, 0x1, r3}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x9, r1, 0x0, 0x0, 0x1, 0x0, 0x1, r1}]) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) 2m47.291181279s ago: executing program 2 (id=12036): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100013070000000000000000fc020000000000000000000000000000fe8000000000000000000000000000100004000000000000000000202c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe"], 0xf0}, 0x1, 0xe}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x1a, @void}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f000001c000)={0x2, 0x0, [{0x0, 0x73, &(0x7f00000006c0)=""/115}, {0xf000, 0xf1, &(0x7f00000009c0)=""/241}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 2m47.240571156s ago: executing program 2 (id=12037): r0 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000040)=0xefbe, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x41200003, @loopback}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x68000) 2m47.239792867s ago: executing program 2 (id=12038): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_open_dev$sg(0x0, 0x0, 0x38dd80) r0 = socket$inet6(0xa, 0xa, 0x400000) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x5c, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x5, 0x12, 0x400, 0x1, 0x200}}, {0x4}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44004}, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0xc8004) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ptrace$ARCH_SET_CPUID(0x1e, 0x0, 0x0, 0x1012) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24004080) syz_open_procfs$pagemap(0x0, 0x0) madvise(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x76) r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r5 = socket(0x18, 0x0, 0x1) sendfile(r5, r4, 0x0, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r6 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) socket$inet6_tcp(0xa, 0x1, 0x0) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x80000000, 0x3, 0xfffffffffffffffb, 0xfffffffffedfff83, 0x3, 0x1, {0xffffffffffffffff, 0x3ff, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3fb, 0x7fffffff, 0x6, 0x1000, 0x8, 0x0, 0x0, 0x3ff, 0x8ea2}}, {0x0, 0x12}}}, 0xa0) sendfile(r6, r6, &(0x7f0000000080), 0x7f04) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) 2m46.184422868s ago: executing program 2 (id=12048): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x4) 2m46.092556826s ago: executing program 2 (id=12049): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xe}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfc}}, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) (fail_nth: 1) 2m45.94690478s ago: executing program 2 (id=12050): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0xfffffffe}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000002ff0100000000000000000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, r1}, 0x94) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040), &(0x7f0000000540)={0x0, 0xfb, 0xfe, 0x4, 0x4, "2b7d38a09bb1d3da81b1e4323d7a8fa9", "1f3c6c8ac262ad420c9162da663be02bb3a91472c2504353a6bb3ea128fb195070d9eb152be995cf7bec092085c8cf735a22db52b25ea0722e16fbebdb2ffc6da9f679b49fba77be09c1ed9ec0bfeae3a5b3b1cf58185e3881f5182bbafc44c4bfc268f071096e2926c2c7e9ce03d0bcea927e79b7080de041b435342c77fa23285bc867d9bb9ebe6728bb4c310ce0253a5cf67f7fd4fb17c35bf01c32b07b2e48271ddbeb6ad7fdfee53a3da60726298e2ada4865826e7f79fb136c077a064c142a59c3b276c1ed5823da7a808f168c58f061af472e54b8397e9c91161e5fcfa9df7041718661e33c"}, 0xfe, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x31, 0x9c}, [@call={0x25}], {0x95, 0x0, 0xd00}}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x94) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2) 2m45.928638219s ago: executing program 49 (id=12050): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0xfffffffe}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000002ff0100000000000000000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, r1}, 0x94) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040), &(0x7f0000000540)={0x0, 0xfb, 0xfe, 0x4, 0x4, "2b7d38a09bb1d3da81b1e4323d7a8fa9", "1f3c6c8ac262ad420c9162da663be02bb3a91472c2504353a6bb3ea128fb195070d9eb152be995cf7bec092085c8cf735a22db52b25ea0722e16fbebdb2ffc6da9f679b49fba77be09c1ed9ec0bfeae3a5b3b1cf58185e3881f5182bbafc44c4bfc268f071096e2926c2c7e9ce03d0bcea927e79b7080de041b435342c77fa23285bc867d9bb9ebe6728bb4c310ce0253a5cf67f7fd4fb17c35bf01c32b07b2e48271ddbeb6ad7fdfee53a3da60726298e2ada4865826e7f79fb136c077a064c142a59c3b276c1ed5823da7a808f168c58f061af472e54b8397e9c91161e5fcfa9df7041718661e33c"}, 0xfe, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x31, 0x9c}, [@call={0x25}], {0x95, 0x0, 0xd00}}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x94) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2) 2m31.191949265s ago: executing program 1 (id=12210): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) lsm_set_self_attr(0x66, &(0x7f0000000240)=ANY=[], 0x20, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x5}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x3, 0x2) ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000140)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000100ffff0000000000000000850000007b00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000c000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$pmem0(0xffffff9c, &(0x7f0000000040), 0x100, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r7, 0xffffffff) connect$pppl2tp(r7, 0x0, 0x0) ioctl$BLKGETSIZE64(r6, 0x80041272, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="38000000101401"], 0x38}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) 2m30.37504795s ago: executing program 1 (id=12216): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[], 0xf0}, 0x1, 0xe}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x1a, @void}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f000001c000)={0x2, 0x0, [{0x0, 0x73, &(0x7f00000006c0)=""/115}, {0xf000, 0xf1, &(0x7f00000009c0)=""/241}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 2m30.248692143s ago: executing program 1 (id=12217): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000040)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb7, &(0x7f0000000140)=""/183, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xbcb5, 0x0, 0x5, 0x1000}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x3, r5, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r6, 0x3516, 0x3e44, 0x8, 0x0, 0x0) 2m30.09773771s ago: executing program 7 (id=12224): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(0x0, 0x800, 0x70) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x400, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') unlinkat(r0, &(0x7f0000000000)='./file1\x00', 0x0) unlink(&(0x7f0000000040)='./file1\x00') 2m30.0722669s ago: executing program 7 (id=12225): r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000002c40)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000300)={r1, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f00000000c0), 0x84800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, 0x0, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000015c0)={0xfea4, r4, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x57}, @val={0x8, 0x3, r5}, @void}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x8804) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='H\x00'/20, @ANYRES32=0x0, @ANYBLOB="a7ffa88800140000280012800b00010065727370616e0000180002800400120006000f0001010000060010004e200000"], 0x48}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0xffffffff, 0x89}, &(0x7f00000001c0)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000380)='./cgroup\x00', 0x2, 0x298f82}) io_uring_enter(r7, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a74000000060a01040000000000000008e1e437eb815547e8c7a5899091e3c00200000048000480440001800a0001006d61746368000000340002800900010074696d65000000001c00030007682c020b7b37f27f51010054d4077549f4e34e86f469eb08000240000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2m29.980459909s ago: executing program 7 (id=12226): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) lsm_set_self_attr(0x66, 0x0, 0x20, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x5}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x3, 0x2) ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000140)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000100ffff0000000000000000850000007b00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000c000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$pmem0(0xffffff9c, &(0x7f0000000040), 0x100, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r7, 0xffffffff) connect$pppl2tp(r7, 0x0, 0x0) ioctl$BLKGETSIZE64(r6, 0x80041272, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="38000000101401"], 0x38}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) 2m29.435030523s ago: executing program 1 (id=12229): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) umount2(0x0, 0x4) 2m29.371921914s ago: executing program 1 (id=12230): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000200000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a700000000000000000000400000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300c6a41d10f5ffffffffffffff02f5ffffff0000000a0001006f776e65720000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x98}}, 0x810) r4 = socket$alg(0x26, 0x5, 0x0) r5 = fsopen(&(0x7f0000000200)='fusectl\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) mq_timedreceive(r6, 0x0, 0x0, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000001800)) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001c00)={&(0x7f00000000c0)=@isdn={0x22, 0x7c, 0x6, 0x6, 0x37}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000240)="d8abc964637a1072f17ef45c9cc8e62dfa8c5d24b143c65e5891298377f1e5901ec479614b1286a1b6b4122c7e653cddf41ba2a244173289651c919dfb3461ee99c5a14cc9e4f43a6887a437565af56e2d182ffa7275447ad796199b08297456d16a14301603700ee254f40d0d7e9b914d33f45fdd938337bbb74246fb3f83bf50e79f79d249c35127586f29b8c1e0caa376a2052f84f9bc7f53f401fe0ffcec975e0c7b7e4a5113ffba6f894554cce244157b7761f928d94674b394c0601834242b5b79dcf167f56d7004a23b26e06ceb7ded5f01fe01ad574ca87cbf2b7e42947425d0e81cb286", 0xe8}, {&(0x7f0000000000)="0e57be5f25025e3c3c79385f7e8df0f2190f6ffe684f12c595a11ca7ec9de9", 0x1f}, {&(0x7f0000000140)="0dd06eb098fec9c17dd9d487bedc032975fa59fc9937b17dc5", 0x19}, {&(0x7f0000001940)="6991406f66b583e58f7f71d773ae767dd0bed186ff1456a8121810cbd898f3b09c2d23900674fba97d627bc647f1a81e0f27cb8e4691c24be8a1122c10fb19862d014d52156c6348299a3b206e3e50cd92278136cbecdd1be6ed3b8e857daf8738d1f11924150034e330b23dc077162926b4e9eb0880619483d31164cf00b5bbcc7f8031659d0cc0f9efa453d5eea6b39f2e3a8d712bd892e1324a441426d78774c410bb08b6f613847a67ee16e82a3b6388f3eb2b587c1267e4a5e54422682d0218586d725cb8fff5346decef5485355a32667acbceb5f1b6e638d3850d9aaca1f955f0c13783004a1749dc08f57217d1ed1d6500"/255, 0xff}, {&(0x7f0000000400)="80f6aa976b07dcdf2d25c5c5b1aa405829550f8a997afafcb6dfeda4ca22f9bc54328955a7ad6fe6ab69e66565a7068504fa4aa5f8e84864ad11b5eb4dfe32df47831cbda72dbc94842ea75bb1012a475206384c1bccbca1b11bc478d5087787754105da8548262f1b9eeee86f47d0ac5747e493832851cbc6f7b9c662c77dd4b9389d9c42c6fcf5845f330416e08be7f01f156b6ea75132da628bebbc0b39eb965ad5d94d2e5c6e5b8fd957a355a51f5c03d8a971f827447fcf8bca74ff7b73dd60705704fd98a1eb2157d484d6a4752a69740ea290fe50e361398b5a2e558c2eb84ec531f328045eceba4c0f", 0xed}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000000600)="e3b20105d7e104207802339600f82d97e257e6c5acc292196b6d9725d851dd328b9019dc4593125de58d814a8cbcc061f35bb5c4005cb510a8492fb17a048d239e29636f20d26262edb9f15a9141ebe011b57020c055ed60ad21daf2570eb8149e5b5a99afce5a6bba3803c280c6345304", 0x71}, {&(0x7f0000000580)="51948d37e05563719a78d80fb74916a3d9a546dc9ac8858bee047f46136a7e3a64e4a668830d65ce181682db9a0779a6a1e88d9c9d6ec2eb6be38f8cb38de5706491802f94309e24bcec7511a3c66a55a998cd15b77bc852e1d5f33ab099e6f60000", 0x62}, {&(0x7f0000000500)="3d0e9bb165a5f583c5e050cc7894abd3ecfe4aec1fad866e34d85646777609e94d8fd3521980b9f4013003e0ef4dc172", 0x30}, {&(0x7f0000001740)="cc8d71000000000000000ea0365f9fff95bec72acdddab80e065257b0c656f88ea0f96baaf0e6d9b326ccb3600ce9467191d9edad23faad4c07cc6d70065192fb1741df7d038906d341cdde6050000000000000079199f2c24cf6f1892a056dd978690e73d423d41f0075c819d0ec296b87fd1d1ab4092081eb934a6ba379d1822f4be648f9f02e9c73b54f4ea023830d4aa7b5df5aacd2abd3307d772c6d81a084c81831aad93342e789684f80a7eca8511d1e2", 0xb4}], 0xa, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], 0x3e4}, 0x80) r7 = openat$tun(0xffffff9c, &(0x7f0000001840), 0x410004, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000001880)={'nr0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}) pipe(&(0x7f0000000000)) prctl$PR_SET_NAME(0xf, &(0x7f0000000240)=')-/\x00') openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000540)="cfdd17b262", 0x5) 2m29.229559578s ago: executing program 1 (id=12233): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x2000000, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') open$dir(&(0x7f0000000200)='./file1\x00', 0x503200, 0x2c) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x10, 0x1) open(&(0x7f0000000180)='./file0\x00', 0x100, 0x2) 2m29.204738519s ago: executing program 50 (id=12233): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x2000000, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') open$dir(&(0x7f0000000200)='./file1\x00', 0x503200, 0x2c) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x10, 0x1) open(&(0x7f0000000180)='./file0\x00', 0x100, 0x2) 2m29.136708987s ago: executing program 7 (id=12238): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) umount2(0x0, 0x4) 2m29.13478449s ago: executing program 7 (id=12239): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000040)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb7, &(0x7f0000000140)=""/183, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xbcb5, 0x0, 0x5, 0x1000}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x3, r5, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r6, 0x3516, 0x3e44, 0x8, 0x0, 0x0) 2m28.855464207s ago: executing program 7 (id=12247): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) umount2(0x0, 0x4) 2m28.834485861s ago: executing program 51 (id=12247): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) umount2(0x0, 0x4) 1m21.079356731s ago: executing program 3 (id=12853): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000100)=0xc) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r0, &(0x7f0000000180), 0x4001) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x1b, &(0x7f00000000c0)=0x100000001, 0xffffffffffffffae) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, 0x0, &(0x7f0000000080)) 1m21.015854545s ago: executing program 3 (id=12854): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_open_dev$sg(0x0, 0x0, 0x38dd80) r0 = socket$inet6(0xa, 0xa, 0x400000) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x5c, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x5, 0x12, 0x400, 0x1, 0x200}}, {0x4}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44004}, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0xc8004) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ptrace$ARCH_SET_CPUID(0x1e, 0x0, 0x0, 0x1012) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24004080) syz_open_procfs$pagemap(0x0, 0x0) madvise(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x76) r4 = socket(0x18, 0x0, 0x1) sendfile(r4, 0xffffffffffffffff, 0x0, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r5 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) socket$inet6_tcp(0xa, 0x1, 0x0) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x80000000, 0x3, 0xfffffffffffffffb, 0xfffffffffedfff83, 0x3, 0x1, {0xffffffffffffffff, 0x3ff, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3fb, 0x7fffffff, 0x6, 0x1000, 0x8, 0x0, 0x0, 0x3ff, 0x8ea2}}, {0x0, 0x12}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080), 0x7f04) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) 1m19.704191876s ago: executing program 3 (id=12869): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) (fail_nth: 2) 1m19.523064089s ago: executing program 3 (id=12872): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x101100) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f00000001c0)={0x5, 0x2, 0xfffffeff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2b, &(0x7f0000024140)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x1d, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @echo={0x8, 0x0, 0x0, 0xf, 0x7, '>'}}}}}, 0x0) setpgid(r2, 0x0) setpgid(0x0, r2) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000000300)={0x0, 0x0, 0x5f22}) ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB="340020003e7c0000040042800c797b8006000600800a0000100002d3010014800800048004000280"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = openat$vmci(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f0000000100)={{@host, 0x6}, 0x0, 0x1, 0x3}) r5 = syz_open_dev$hiddev(&(0x7f0000000140), 0x7, 0x24000) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r5, &(0x7f0000000280)={r3, r4, 0x8}) 1m19.456630759s ago: executing program 3 (id=12874): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000040)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb7, &(0x7f0000000140)=""/183, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xbcb5, 0x0, 0x5, 0x1000}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x3, r5, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r6, 0x3516, 0x3e44, 0x8, 0x0, 0x0) 1m19.301161302s ago: executing program 3 (id=12875): socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$ethtool(&(0x7f0000007540), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080)=0x80000003) r4 = dup2(r3, r3) read$FUSE(r4, &(0x7f00000063c0)={0x2020}, 0x2020) 1m19.292239394s ago: executing program 52 (id=12875): socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$ethtool(&(0x7f0000007540), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080)=0x80000003) r4 = dup2(r3, r3) read$FUSE(r4, &(0x7f00000063c0)={0x2020}, 0x2020) 1m18.214899325s ago: executing program 9 (id=12881): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2, &(0x7f0000000180)=[&(0x7f000093a000/0x2000)=nil, &(0x7f00001ac000/0x4000)=nil], &(0x7f0000000340)=[0x0, 0x1], &(0x7f0000000380), 0x2) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x474) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, &(0x7f0000000100)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0xfffffffffffffe4f, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="042c1194c90000000000015bfc03fd0000050020"], 0x14) 1m18.130029923s ago: executing program 9 (id=12882): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000240)={0x23, 0x1, 0x2, 0x1, 0x0, 0x5, 0x0}) (fail_nth: 2) 1m17.994592816s ago: executing program 9 (id=12884): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2, &(0x7f0000000180)=[&(0x7f000093a000/0x2000)=nil, &(0x7f00001ac000/0x4000)=nil], &(0x7f0000000340)=[0x0, 0x1], &(0x7f0000000380), 0x2) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x474) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, &(0x7f0000000100)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0xfffffffffffffe4f, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000100001005726a34f80494295e9a2084f00000000000000000600becf000000000000050000000000000000000700000e09fdffff1100010000000000000000000500000a"], 0x498}}, 0x200000d0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000600)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffc}], 0x0, 0x0, 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x4d, &(0x7f0000000380)={&(0x7f0000000540)={0x2c, r9, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x48845}, 0x4040000) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="080025bd7000fbdbdf256300000008000300", @ANYRES32=r8, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4a850}, 0x8000) 1m17.833883475s ago: executing program 9 (id=12885): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x101100) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f00000001c0)={0x5, 0x2, 0xfffffeff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2b, &(0x7f0000024140)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x1d, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @echo={0x8, 0x0, 0x0, 0xf, 0x7, '>'}}}}}, 0x0) setpgid(r2, 0x0) setpgid(0x0, r2) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000000300)={0x0, 0x0, 0x5f22}) ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB="340020003e7c0000040042800c797b8006000600800a0000100002d3010014800800048004000280"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = openat$vmci(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f0000000100)={{@host, 0x6}, 0x0, 0x1, 0x3}) r5 = syz_open_dev$hiddev(&(0x7f0000000140), 0x7, 0x24000) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r5, &(0x7f0000000280)={r3, r4, 0x8}) 1m17.760112204s ago: executing program 9 (id=12887): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$pppl2tp(0x18, 0x1, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) connect$pppl2tp(r1, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2, 0x0, {0xa, 0x4e24, 0x7, @loopback, 0x9}}}, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = openat$vcsu(0xffffff9c, &(0x7f0000000980), 0x70800, 0x0) clock_gettime(0x0, &(0x7f0000000cc0)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc04c565d, &(0x7f0000000d00)=@mmap={0x7, 0xb, 0x4, 0x70000, 0x10, {r4, r5/1000+10000}, {0x5, 0xc, 0x7c, 0x8, 0x0, 0xa, "9536e1d9"}, 0x1, 0x1, {}, 0x3b6e4dfe}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYBLOB="d88fc87ec69c177d77b0a88d6784a3f3ba78cf8f89642796ad51b52144b8f5f2afb71c8b4f075ee7955a336cbb63b751bf51d2c5f7e3bf8f7aefe74136883c906070d01c05885e7f729e7554fe5a4c7eeb287fee9d9554e905026a5a63ed729611c7d880f7777bcc0b1e8015c728a626f9b48dad66271e77a4c9fa2b15899cdb8a389ebf1c135d62f484eb49be37af19a75ee217348e092ce048584ad1ba1ebbf89996c7ac12afa82b7d6b2ce73f675a68cfc350e9308d032860de3234c9fc14017e94cfc43ee7030285e471aaafc28ac5cc7acc", @ANYBLOB="310300000000000000000800000008000300", @ANYRES8=r2, @ANYBLOB="08000600", @ANYRES32=0x0, @ANYRES32=r6], 0x24}}, 0x0) r7 = socket$kcm(0x2d, 0x2, 0x0) openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x82, 0x0) sendmsg$IPSET_CMD_LIST(r7, &(0x7f00000000c0)={&(0x7f0000000280)={0x2d, 0x0, 0x1f}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000840}, 0x41) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500000080040000", @ANYRES32, @ANYBLOB="0000000000000000000000fd0c00000f00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x527d}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r9}, 0x18) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) r11 = getpid() r12 = gettid() rt_tgsigqueueinfo(r11, r12, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffa}) preadv2(r10, &(0x7f0000000c40)=[{&(0x7f0000000580)=""/132, 0x84}, {&(0x7f0000000640)=""/248, 0xf8}, {&(0x7f0000000740)=""/164, 0xa4}, {&(0x7f0000000800)=""/203, 0xcb}, {&(0x7f0000000900)=""/16, 0x10}, {&(0x7f0000000a40)=""/132, 0x84}, {&(0x7f0000000940)=""/29, 0x1d}, {&(0x7f0000000b00)=""/103, 0x67}, {&(0x7f0000000b80)=""/130, 0x82}], 0x9, 0x8, 0x8, 0x0) r13 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x2, 0x26, 0x7, 0xc}, {0x4, 0x9c, 0xa7, 0x6}, {0x101, 0x5, 0xfc, 0x2}, {0x0, 0x8, 0xf0, 0x8001}, {0x6, 0x6, 0x7, 0x9}, {0xe078, 0x2, 0x9, 0x1000}, {0xff, 0x0, 0x5, 0x1}]}) getpeername$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) sendto$packet(r13, &(0x7f00000003c0)="2d930b402885bdbb7a4ebbd05c3479654e8fe46ce1984616e7cbe45c120b392aae88419117542ddda0fe0274e3ed2ad4d7ef7dfa5e1164bac2153f379d820d707c388c735913f8a6097134180afe7338e059bcc5c4037f0f76713a865f18964a7c15aaf28f18a1d49f7af18892f7a1e98639d1b477b85fd6bd0ebcd06bb98f5a91c7072666f96102b04ee9817c024b99a25ebd6353af12d85cf117c9a4ca627252c8402fdeb3b81a9e2ab6fde72dbdecfa421908e8ea293dfa9b69904fb2f6ae826420cbf24f35d5507faba580", 0xcd, 0x8000, &(0x7f00000001c0)={0x11, 0x6, r14, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, 0x14) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000dc0)={0x0, 0x0}) setxattr(&(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000240)=@known='trusted.overlay.redirect\x00', 0x0, 0x0, 0x2) syz_open_procfs$userns(r15, &(0x7f0000000200)) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/user\x00') 1m15.99063548s ago: executing program 9 (id=12903): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="7f454c4604070003070000000000000002000300060000000903000038000000000000000e000000000020000100050000000000000000000300000008000000f30000007f00000026"], 0x58) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (fail_nth: 4) 1m15.934177855s ago: executing program 53 (id=12903): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="7f454c4604070003070000000000000002000300060000000903000038000000000000000e000000000020000100050000000000000000000300000008000000f30000007f00000026"], 0x58) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (fail_nth: 4) 6.773040133s ago: executing program 6 (id=13399): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2, &(0x7f0000000180)=[&(0x7f000093a000/0x2000)=nil, &(0x7f00001ac000/0x4000)=nil], &(0x7f0000000340)=[0x0, 0x1], &(0x7f0000000380), 0x2) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x474) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f0000000100)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0xfffffffffffffe4f, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000100001005726a34f80494295e9a2084f00000000000000000600becf000000000000050000000000000000000700000e09fdffff1100010000000000000000000500000a"], 0x498}}, 0x200000d0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000600)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffc}], 0x0, 0x0, 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x38, r5, 0x5, 0x1, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "941686f54c428e48193856257512280bf969b3ca75ea3f63"}]]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x4d, &(0x7f0000000380)={&(0x7f0000000540)={0x2c, r9, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x48845}, 0x4040000) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="080025bd7000fbdbdf256300000008000300", @ANYRES32=r8, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4a850}, 0x8000) 6.582266697s ago: executing program 6 (id=13400): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x42280, 0x0) close(r0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYRESOCT=r1], 0xb) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r2, &(0x7f0000000040)=[{0xf, 0x0, 0x0, 0xfd, @time, {}, {0xe}, @queue}], 0x1c) 6.515596083s ago: executing program 6 (id=13402): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) lsm_set_self_attr(0x66, &(0x7f0000000240)=ANY=[], 0x20, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x5}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x3, 0x2) ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000140)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000100ffff0000000000000000850000007b00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000c000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$pmem0(0xffffff9c, &(0x7f0000000040), 0x100, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r7, 0xffffffff) connect$pppl2tp(r7, 0x0, 0x0) ioctl$BLKGETSIZE64(r6, 0x80041272, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="38000000101401"], 0x38}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) 5.691818195s ago: executing program 6 (id=13407): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000fcffffff000000000000000095"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0x80045b10, &(0x7f0000000040)) 3.304422399s ago: executing program 5 (id=13412): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7ffff, &(0x7f0000006680)) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x800002, 0x10, 0xffffffffffffffff, 0x61083000) madvise(&(0x7f00006f2000/0x800000)=nil, 0x800000, 0x9) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x802) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000001c0)={'wg2\x00', 0x200}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) eventfd(0x1a52) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000800000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000032ce8500000004000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x66, &(0x7f00000009c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x8, 0x58, 0xe2, 0x0, 0x5, 0x2f, 0x0, @local, @multicast1}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x0, {{0x5, 0x1, 0xb, 0x3, 0x0, 0x0, 0x6, 0xb}, 0x1, {0x38}}}, {0x8, 0x22eb, 0x4, {{0x3, 0x2, 0x6, 0x1, 0x0, 0x1, 0x3, 0x6}, 0x2, {0x7, 0x200, 0x0, 0x5, 0x1, 0x1, 0x2}}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='global_dirty_state\x00', r5}, 0x10) capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)) open_tree(0xffffffffffffffff, 0x0, 0x89901) r6 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VDPA_GET_STATUS(r6, 0x8001af71, &(0x7f0000000180)) sendfile(r4, r4, 0x0, 0x200000) 3.304120732s ago: executing program 6 (id=13413): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_open_dev$sg(0x0, 0x0, 0x38dd80) r0 = socket$inet6(0xa, 0xa, 0x400000) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) sendmmsg$inet6(r0, 0x0, 0x0, 0xc8004) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ptrace$ARCH_SET_CPUID(0x1e, 0x0, 0x0, 0x1012) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24004080) syz_open_procfs$pagemap(0x0, 0x0) madvise(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x76) r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r4 = socket(0x18, 0x0, 0x1) sendfile(r4, r3, 0x0, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r5 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) socket$inet6_tcp(0xa, 0x1, 0x0) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x80000000, 0x3, 0xfffffffffffffffb, 0xfffffffffedfff83, 0x3, 0x1, {0xffffffffffffffff, 0x3ff, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3fb, 0x7fffffff, 0x6, 0x1000, 0x8, 0x0, 0x0, 0x3ff, 0x8ea2}}, {0x0, 0x12}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080), 0x7f04) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) 2.368826549s ago: executing program 5 (id=13417): syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x20, 0x1, 0x3e}, &(0x7f0000000180), &(0x7f00000001c0)) ioctl$I2C_TENBIT(0xffffffffffffffff, 0x704, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040), 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000340)="031f31b1f09d76af21e3b0224966a232dc1f5bfd8a29f730b10a53e756087a1df416fd804b636964220910b05962d95d7fb7873e8a0b7b62d7384dbd12b536f0e55e588092441663f9665e4b39f8eb3430840ac3c6ad014d6268fca6b3fc43da09b1d0a95d18e26a8e0ddd857f4911abb72ced02e4f1fe5ebb35042436374c7119229c019819a8491bdd74a299ca4fa71ee05f4c49c99de404b76d08fb1938674fa45fd06104cfcc08e9c017a2769a77e1a9e4da0e451353ca53b990500b18e4f4bb5cf1309fe4707c3f7200"/218, 0xda}, {&(0x7f0000000640)="ffb3ef96fd55310531a92b9d4b2ebcb168c3e90db153fe8bc3c9e2cfd50d22329495b92a7e12a948fff8e40f44798512135fd8fec900cca0c10e9e61d61cff5507f9298209ab8dd95ba0cb024a07dc20d07ac8940c729de29318e23818b2169da4374e8ec904573105b3dafbed9c3958b6570ec6117f2a8b7823b94056c0bcfd679f57db483bb7631bfd74f5f73cdebd19d4bd31a81d7c73c4428a65dc3820987e1ea1c45773112d4e2b1cc8064f220c7b2d673f84d4b1a5a9aedc2063b740198f57d0848358b2cf118bfcdc7c40303dee672f1ca6384e006460df438bde154a0c", 0xe1}, {&(0x7f0000000140)="74812905b8bd297a48dc5adfa4052d6e7cdd8c1615a231859ac522b4ae78d7f1b3619ed73f0e93cf3ccd30f4e58303dfd9d20af483a3406d486bad53698267735b", 0x41}, {&(0x7f0000000280)="7c73c1e117e291cb0100000000000000f9a19a5183aa91163ef7aa02ce433c1042f6ee70b4fc666ca104a44c8043dfc59c3a2b2fafeed98ad7ba6746cac942f20cf64423a5f0e115770de6db3543b33035d537c0dc7d922120640d775418ed784594e7b95cf7c9abcaadc7c177116160fe4717105675db", 0x77}, {&(0x7f00000008c0)="790f076461633e860315f3328f99377a0aa835675115acd2b7f10f5db17ec3fde9fbe7060f7025e4aeb974183c45cef27e5f95a42d5eee4f9c3ba0ef5c6601d08076576cddefe74f2b3b23c3b16076675cb1bcdede8d819967d59a7b7c2c34e76233d38be07bc9d91e27bfe688115bb226db5e1179a69c22357df381e6a73bd8b4132f610008d32103ebde594b4611450ab4bd7e97a51718c9e186ee8ae006e66ea2c6afbdfc76b2c4ba738000000021bfce27e702bb3159ac514b3b7141d184fc95a53e825dd7a264360483622d808bcc55ecdc58eaba26d65e8fb40c1446c7d56358b40a0632a44acdfd8232d2e421f97e40b190155087b0bab3d0d816eb3671842438c631384ca936a989ecb918492452a72e4c60592557ca046e36b047c4ca8a7a82b79e1bebf1d3668eceaf6899dc759640ba5fc108ada047d13471fc5aed0dcf3ba6ea78297ef956f42c6d5786f099da4e55771ad021baea2b99a7", 0x15e}], 0x5) r2 = syz_open_dev$sndpcmc(&(0x7f0000000240), 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001a40)=[&(0x7f00000017c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='inet_sk_error_report\x00', r3}, 0x18) socket$netlink(0x10, 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x40) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000440)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@any, 0x2}) 2.300985863s ago: executing program 0 (id=13418): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000fcffffff000000000000000095"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0x80045b10, &(0x7f0000000040)) 2.282222448s ago: executing program 5 (id=13420): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_int(r0, 0x29, 0x42, 0x0, &(0x7f0000002500)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2c, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x40, 0x3, "cd4b6abe42031763d02899c77f963d140d7a9d3ac869f3a860917523679abf4579f9cd6564e64066681fb945bfe585ab6933a6f6514a0eebad4e3537"}, @NFTA_TARGET_NAME={0xa, 0x1, 'HMARK\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xc0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x9}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./bus/../file0\x00', 0x68) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8918, &(0x7f0000000140)={'ip_vti0\x00', @random="0200ff7fffff"}) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100), 0x0, 0x0, 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r4, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 2.151563051s ago: executing program 5 (id=13422): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x5}}}}, @m_ife={0x48, 0x1d, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x2000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @empty}], 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0xc, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @mcast1}}}, 0x90) getsockname(r3, 0x0, &(0x7f0000000180)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x1, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), 0xffffffffffffffff) r4 = dup(r2) keyctl$clear(0x3, 0xfffffffffffffffc) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdedH\xe5+\xf0', 0xffffffffffffffff) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x7, 0x6, 0x81, '\x00', 0x3c}) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000000c0)=0xffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.782754265s ago: executing program 4 (id=13423): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/71, 0x47}], 0x1}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x2c, 0x17, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x8094) syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0xecb0, 0x0, 0x0, 0x0, 0x0, r1}, 0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) unshare(0x6a040000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r8 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r8, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8000, @multicast2}}, 0x24) sendmmsg(r8, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="5e0000e7ff00000000000000"], 0x10, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r8, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0xf000, 0x10002, 0x0) 1.25069269s ago: executing program 4 (id=13424): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.199276602s ago: executing program 4 (id=13425): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r1, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x5d6ee1ddeecfecc3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) (async) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000180)) ioctl$int_in(r0, 0x40000000af01, 0x0) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0xe39}, 0x8) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @local}], 0x20) (async) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x26) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r7, 0x2, 0x0) getdents64(r7, 0x0, 0x22) (async) rename(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00') (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x6, 0x9cbfdae031e5f7d8) 1.04323059s ago: executing program 5 (id=13426): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) lsm_set_self_attr(0x66, &(0x7f0000000240)=ANY=[], 0x20, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x5}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x3, 0x2) ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000140)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000100ffff0000000000000000850000007b00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000c000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$pmem0(0xffffff9c, 0x0, 0x100, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r7, 0xffffffff) connect$pppl2tp(r7, 0x0, 0x0) ioctl$BLKGETSIZE64(r6, 0x80041272, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="38000000101401"], 0x38}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) 1.041597176s ago: executing program 4 (id=13427): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280), 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000040)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb7, &(0x7f0000000140)=""/183, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xbcb5, 0x0, 0x5, 0x1000}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x3, r4, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r5, 0x3516, 0x3e44, 0x8, 0x0, 0x0) 806.024096ms ago: executing program 0 (id=13428): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/tty/ldiscs\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) sendfile(r1, r0, 0x0, 0x20000023893) 766.375171ms ago: executing program 0 (id=13429): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x42280, 0x0) close(r0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYRESOCT=r1], 0xb) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r2, &(0x7f0000000040)=[{0xf, 0x0, 0x0, 0xfd, @time, {}, {0xe}, @queue}], 0x1c) 724.982796ms ago: executing program 0 (id=13430): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r1 = memfd_create(&(0x7f00000000c0)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x02\x00\x00\x006w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\xf0\x8f\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYS', 0x0) write(r1, &(0x7f0000002140)="6963e65843ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba40", 0x21) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) readlinkat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000019240)=""/102393, 0x18ff9) 710.981877ms ago: executing program 6 (id=13431): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r1, 0x800c4151, 0x0) accept4(r0, 0x0, 0x0, 0x80000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) unshare(0x62040200) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r3, 0x5421, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$l2tp6(0xa, 0x2, 0x73) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) recvfrom$inet(r3, 0x0, 0x0, 0x2000, &(0x7f00000003c0)={0x2, 0x4e22, @private=0xa010101}, 0x10) r6 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) r9 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12) 662.621786ms ago: executing program 0 (id=13432): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r1 = memfd_create(&(0x7f00000000c0)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x02\x00\x00\x006w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\xf0\x8f\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYS', 0x0) write(r1, &(0x7f0000002140)="6963e65843ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba40", 0x21) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) readlinkat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000019240)=""/102393, 0x18ff9) 659.411539ms ago: executing program 0 (id=13433): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280), 0x0) sendmsg$inet_sctp(r0, 0x0, 0x881) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0xb7, &(0x7f0000000140)=""/183, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xbcb5, 0x0, 0x5, 0x1000}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r3, 0x3516, 0x3e44, 0x8, 0x0, 0x0) 174.908046ms ago: executing program 4 (id=13434): r0 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r0, &(0x7f0000005c40)=[{{&(0x7f00000001c0)={0xa, 0x4e24, 0x101, @private0, 0x28}, 0x1c, 0x0, 0x0, &(0x7f0000000840)=[@dontfrag={{0x10, 0x29, 0x3e, 0xbe}}], 0x10}}], 0x1, 0x4001c00) (fail_nth: 4) 51.240589ms ago: executing program 5 (id=13435): llistxattr(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/66, 0x42) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000100), 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0xfffffffc, 0x3}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES64=r4, @ANYRES64=r1, @ANYRESDEC=r3, @ANYRES8=r0, @ANYRES32=r2, @ANYBLOB="dd1207a1fe39048d7d1241204e05da1d0b201e9dcbf117dedff5824416c98e472c1c6b14b1623c6711acc16f75a08b16cb1753f6c1384a5a45bf4aaee76a09ad9509c1ae79ae66be71dd3adb71105d316adecc2efa512e769bb9da9da7b7fdecd70e129be52ed8c24851ec6fe87e9a8b5bc5b939fcbc9bc0072b28db3e5cdb7475d579b7edc62b9cb547e6f6ccf5cf4861c9c940e4b6730ffe6176f619578bbcef23b33f8d77687e1f8615d091ab222c0eb633f6e9f73c", @ANYRES8=r4], 0x14}, 0x1, 0x0, 0x0, 0x40840}, 0x0) recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r5 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) read$FUSE(r5, &(0x7f0000002a00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, r6, {{0x4, 0x3, 0x1, 0x6, 0x3, 0x1, {0x0, 0x3ff, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3fb, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080)=0xfffffffb, 0xd) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) io_setup(0x2e, &(0x7f0000000100)=0x0) io_submit(r7, 0x1, &(0x7f0000001480)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000140)='^', 0x1, 0xfffffffffffffff9}]) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c0000000800040001"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) 0s ago: executing program 4 (id=13436): prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) kernel console output (not intermixed with test programs): nce. Setting the MTU to 1560 would solve the problem. [ 2170.130072][T17573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2170.171448][T17573] hsr_slave_0: entered promiscuous mode [ 2170.175996][T17573] hsr_slave_1: entered promiscuous mode [ 2170.178269][T17573] debugfs: 'hsr0' already exists in 'hsr' [ 2170.180158][T17573] Cannot create hsr debugfs directory [ 2170.344207][T17588] usb usb8: usbfs: process 17588 (syz.4.12907) did not claim interface 0 before use [ 2170.347974][ T40] kauditd_printk_skb: 28 callbacks suppressed [ 2170.347984][ T40] audit: type=1326 audit(2000264156.502:14330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17584 comm="syz.4.12907" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 2170.357383][ T40] audit: type=1326 audit(2000264156.513:14331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17584 comm="syz.4.12907" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 2170.363025][T17588] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12907'. [ 2170.369227][ T40] audit: type=1326 audit(2000264156.513:14332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17584 comm="syz.4.12907" exe="/syz-executor" sig=0 arch=40000003 syscall=384 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 2170.376740][ T40] audit: type=1326 audit(2000264156.513:14333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17584 comm="syz.4.12907" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 2170.385786][ T40] audit: type=1326 audit(2000264156.513:14334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17584 comm="syz.4.12907" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 2170.394613][ T40] audit: type=1326 audit(2000264156.513:14335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17584 comm="syz.4.12907" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 2170.403273][ T40] audit: type=1326 audit(2000264156.513:14336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17584 comm="syz.4.12907" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 2170.412580][ T40] audit: type=1326 audit(2000264156.513:14337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17584 comm="syz.4.12907" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 2170.419847][ T40] audit: type=1326 audit(2000264156.513:14338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17584 comm="syz.4.12907" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 2170.427455][ T40] audit: type=1326 audit(2000264156.513:14339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17584 comm="syz.4.12907" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 2170.534596][T17573] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2170.538556][T17573] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2170.542826][T17573] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2170.546897][T17573] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2170.559560][T17573] bridge0: port 2(bridge_slave_1) entered blocking state [ 2170.561873][T17573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2170.564301][T17573] bridge0: port 1(bridge_slave_0) entered blocking state [ 2170.566550][T17573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2170.585536][T17573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2170.597669][ T9693] bridge0: port 1(bridge_slave_0) entered disabled state [ 2170.607091][ T9693] bridge0: port 2(bridge_slave_1) entered disabled state [ 2170.613146][T17573] 8021q: adding VLAN 0 to HW filter on device team0 [ 2170.635984][ T9692] bridge0: port 1(bridge_slave_0) entered blocking state [ 2170.638850][ T9692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2170.648915][ T9687] bridge0: port 2(bridge_slave_1) entered blocking state [ 2170.651256][ T9687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2170.754541][T17573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2170.833663][T17612] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12908'. [ 2170.865986][T17573] veth0_vlan: entered promiscuous mode [ 2170.870381][T17573] veth1_vlan: entered promiscuous mode [ 2170.881165][T17573] veth0_macvtap: entered promiscuous mode [ 2170.885192][T17573] veth1_macvtap: entered promiscuous mode [ 2170.891858][T17573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2170.896944][T17573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2170.901631][ T9694] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2170.904595][ T9694] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2170.907854][ T9694] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2170.910997][ T9694] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2170.934099][ T9693] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2170.936696][ T9693] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2170.944849][ T9693] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2170.947524][ T9693] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2171.174660][T17625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12912'. [ 2171.265743][ T1177] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2171.323295][ T1177] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2171.391860][ T1177] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2171.468035][ T1177] bridge_slave_1: left allmulticast mode [ 2171.470143][ T1177] bridge_slave_1: left promiscuous mode [ 2171.472170][ T1177] bridge0: port 2(bridge_slave_1) entered disabled state [ 2171.475456][ T1177] bridge_slave_0: left allmulticast mode [ 2171.477521][ T1177] bridge_slave_0: left promiscuous mode [ 2171.479432][ T1177] bridge0: port 1(bridge_slave_0) entered disabled state [ 2171.587017][ T1177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2171.593545][ T1177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2171.599149][ T1177] bond0 (unregistering): Released all slaves [ 2171.627663][T17629] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 2171.629721][T17629] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2171.632517][T17629] vhci_hcd vhci_hcd.0: Device attached [ 2171.661525][T17629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12913'. [ 2171.825080][T30877] Bluetooth: hci3: command tx timeout [ 2171.860860][ T1177] hsr_slave_0: left promiscuous mode [ 2171.863624][ T1177] hsr_slave_1: left promiscuous mode [ 2171.865574][ T1177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2171.867965][ T1177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2171.870736][ T1177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2171.874711][ T1177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2171.879448][ T1177] veth1_macvtap: left promiscuous mode [ 2171.881208][ T1177] veth0_macvtap: left promiscuous mode [ 2171.884711][ T1177] veth1_vlan: left promiscuous mode [ 2171.886416][ T1177] veth0_vlan: left promiscuous mode [ 2171.920934][ T4175] usb 38-1: SetAddress Request (7) to port 0 [ 2171.922940][ T4175] usb 38-1: new SuperSpeed USB device number 7 using vhci_hcd [ 2171.980562][ T1177] team0 (unregistering): Port device team_slave_1 removed [ 2171.986373][ T1177] team0 (unregistering): Port device team_slave_0 removed [ 2172.029222][T17638] binder: 17637:17638 ioctl 80489439 80000100 returned -22 [ 2172.147260][T17645] syz.4.12916 (17645): drop_caches: 2 [ 2172.163741][T17645] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12916'. [ 2172.264887][T17630] vhci_hcd: connection reset by peer [ 2172.266852][ T9691] vhci_hcd: stop threads [ 2172.268229][ T9691] vhci_hcd: release socket [ 2172.269793][ T9691] vhci_hcd: disconnect device [ 2172.867236][T17664] usb usb8: usbfs: process 17664 (syz.5.12920) did not claim interface 0 before use [ 2172.948363][T17664] netlink: 40 bytes leftover after parsing attributes in process `syz.5.12920'. [ 2172.977326][T17666] binder: 17665:17666 ioctl 80489439 80000100 returned -22 [ 2173.256171][T17684] usb usb8: usbfs: process 17684 (syz.0.12925) did not claim interface 0 before use [ 2173.282578][T17684] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12925'. [ 2173.314613][T17683] binder: 17682:17683 ioctl 80489439 80000100 returned -22 [ 2173.665472][T17694] binder: 17693:17694 ioctl 80489439 80000100 returned -22 [ 2173.668748][T30877] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 2173.806753][T30877] Bluetooth: hci3: command tx timeout [ 2174.370267][T17712] geneve2: entered promiscuous mode [ 2174.372712][ T1177] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2174.375496][ T1177] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2174.378228][ T1177] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2174.385300][ T1177] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2174.701630][T17724] binder: 17723:17724 ioctl 80489439 80000100 returned -22 [ 2174.948711][T17730] netlink: 40 bytes leftover after parsing attributes in process `syz.6.12938'. [ 2175.149893][ T4755] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 2175.292698][ T4755] usb 5-1: Using ep0 maxpacket: 8 [ 2175.296006][ T4755] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2175.299476][ T4755] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2175.309994][ T4755] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2175.328812][ T4755] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2175.341966][ T4755] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2175.349900][ T4755] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2175.557070][ T4755] usb 5-1: GET_CAPABILITIES returned 0 [ 2175.558885][ T4755] usbtmc 5-1:16.0: can't read capabilities [ 2175.564557][T30877] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 2175.739049][ T841] usb 5-1: USB disconnect, device number 24 [ 2175.797518][T30877] Bluetooth: hci3: command tx timeout [ 2176.583675][T17761] binder: 17760:17761 ioctl 80489439 80000100 returned -22 [ 2176.711236][T17775] geneve2: entered promiscuous mode [ 2176.778776][ T4175] usb 38-1: device descriptor read/8, error -110 [ 2176.794481][T17773] binder: 17772:17773 ioctl 80489439 80000100 returned -22 [ 2177.044659][T17784] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12955'. [ 2177.074391][T19022] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 2177.150542][ T4175] usb usb38-port1: attempt power cycle [ 2177.216770][T19022] usb 9-1: Using ep0 maxpacket: 8 [ 2177.219660][T19022] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2177.223186][T19022] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2177.226318][T19022] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2177.229465][T19022] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2177.233755][T19022] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2177.236717][T19022] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2177.405755][T17792] block device autoloading is deprecated and will be removed. [ 2177.438999][T19022] usb 9-1: GET_CAPABILITIES returned 0 [ 2177.440782][T19022] usbtmc 9-1:16.0: can't read capabilities [ 2177.635571][T19022] usb 9-1: USB disconnect, device number 53 [ 2177.693117][ T841] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 2177.693158][ T4175] usb usb38-port1: unable to enumerate USB device [ 2177.769290][T30877] Bluetooth: hci3: command tx timeout [ 2177.847337][ T841] usb 10-1: unable to get BOS descriptor or descriptor too short [ 2177.850589][ T841] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2177.856152][ T841] usb 10-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2177.860211][ T841] usb 10-1: config 1 interface 1 has no altsetting 0 [ 2177.866831][ T841] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2177.871155][ T841] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2177.874343][ T841] usb 10-1: Product: syz [ 2177.876611][ T841] usb 10-1: Manufacturer: syz [ 2177.878866][ T841] usb 10-1: SerialNumber: syz [ 2178.102008][ T841] usb 10-1: USB disconnect, device number 12 [ 2178.295109][T17803] binder: 17802:17803 ioctl 80489439 80000100 returned -22 [ 2178.369407][T17811] geneve2: entered promiscuous mode [ 2178.371959][ T9691] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2178.374995][ T9691] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2178.378029][ T9691] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2178.382378][ T9691] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2178.809740][T17828] usb usb8: usbfs: process 17828 (syz.5.12967) did not claim interface 0 before use [ 2178.815314][ T40] kauditd_printk_skb: 83 callbacks suppressed [ 2178.815326][ T40] audit: type=1326 audit(2000264165.384:14423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17820 comm="syz.5.12967" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 2178.828069][ T40] audit: type=1326 audit(2000264165.405:14424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17820 comm="syz.5.12967" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 2178.837304][ T40] audit: type=1326 audit(2000264165.405:14425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17820 comm="syz.5.12967" exe="/syz-executor" sig=0 arch=40000003 syscall=384 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 2178.844270][ T40] audit: type=1326 audit(2000264165.415:14426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17820 comm="syz.5.12967" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 2178.851184][ T40] audit: type=1326 audit(2000264165.415:14427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17820 comm="syz.5.12967" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 2178.858153][ T40] audit: type=1326 audit(2000264165.415:14428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17820 comm="syz.5.12967" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 2178.861797][T17828] netlink: 40 bytes leftover after parsing attributes in process `syz.5.12967'. [ 2178.865066][ T40] audit: type=1326 audit(2000264165.426:14429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17820 comm="syz.5.12967" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 2178.865092][ T40] audit: type=1326 audit(2000264165.426:14430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17820 comm="syz.5.12967" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 2178.881843][ T40] audit: type=1326 audit(2000264165.426:14431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17820 comm="syz.5.12967" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 2178.888712][ T40] audit: type=1326 audit(2000264165.426:14432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17820 comm="syz.5.12967" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 2178.903872][T17829] usb usb8: usbfs: process 17829 (syz.0.12968) did not claim interface 0 before use [ 2178.923576][T17829] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12968'. [ 2179.274333][T19022] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 2179.417410][T19022] usb 9-1: Using ep0 maxpacket: 8 [ 2179.420338][T19022] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2179.424496][T19022] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2179.428689][T19022] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2179.432852][T19022] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2179.438236][T19022] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2179.441477][T19022] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2179.638338][T19022] usb 9-1: GET_CAPABILITIES returned 0 [ 2179.640957][T19022] usbtmc 9-1:16.0: can't read capabilities [ 2179.835742][T19022] usb 9-1: USB disconnect, device number 54 [ 2181.272650][T17877] usb usb8: usbfs: process 17877 (syz.0.12980) did not claim interface 0 before use [ 2181.327208][T17877] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12980'. [ 2181.350088][T17879] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 2181.352646][T17879] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2181.357043][T17879] vhci_hcd vhci_hcd.0: Device attached [ 2181.372662][T17879] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12978'. [ 2181.607863][ T4175] usb 50-1: SetAddress Request (2) to port 0 [ 2181.609846][ T4175] usb 50-1: new SuperSpeed USB device number 2 using vhci_hcd [ 2181.667944][T17887] usb usb8: usbfs: process 17887 (syz.5.12981) did not claim interface 0 before use [ 2181.764761][T17887] netlink: 40 bytes leftover after parsing attributes in process `syz.5.12981'. [ 2182.011248][T17892] binder: 17891:17892 ioctl 80489439 80000100 returned -22 [ 2182.031512][T17880] vhci_hcd: connection reset by peer [ 2182.033657][ T9687] vhci_hcd: stop threads [ 2182.035276][ T9687] vhci_hcd: release socket [ 2182.036971][ T9687] vhci_hcd: disconnect device [ 2182.294134][T12326] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 2182.437050][T12326] usb 5-1: Using ep0 maxpacket: 8 [ 2182.439995][T12326] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2182.443793][T12326] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2182.447330][T12326] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2182.450526][T12326] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2182.454509][T12326] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2182.457988][T12326] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2182.656130][T12326] usb 5-1: GET_CAPABILITIES returned 0 [ 2182.657970][T12326] usbtmc 5-1:16.0: can't read capabilities [ 2182.853882][T12326] usb 5-1: USB disconnect, device number 25 [ 2183.214794][T17911] FAULT_INJECTION: forcing a failure. [ 2183.214794][T17911] name failslab, interval 1, probability 0, space 0, times 0 [ 2183.218982][T17911] CPU: 0 UID: 0 PID: 17911 Comm: syz.6.12989 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 2183.219013][T17911] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2183.219021][T17911] Call Trace: [ 2183.219025][T17911] [ 2183.219030][T17911] dump_stack_lvl+0x16c/0x1f0 [ 2183.219048][T17911] should_fail_ex+0x512/0x640 [ 2183.219066][T17911] should_failslab+0xc2/0x120 [ 2183.219081][T17911] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 2183.219095][T17911] ? skb_clone+0x190/0x3f0 [ 2183.219110][T17911] ? netlink_deliver_tap+0x103/0xd30 [ 2183.219125][T17911] skb_clone+0x190/0x3f0 [ 2183.219139][T17911] netlink_deliver_tap+0xabd/0xd30 [ 2183.219153][T17911] netlink_unicast+0x64c/0x870 [ 2183.219169][T17911] ? __pfx_netlink_unicast+0x10/0x10 [ 2183.219184][T17911] ? __pfx___might_resched+0x10/0x10 [ 2183.219197][T17911] netlink_sendmsg+0x8d1/0xdd0 [ 2183.219213][T17911] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2183.219228][T17911] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 2183.219241][T17911] ____sys_sendmsg+0xa95/0xc70 [ 2183.219259][T17911] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2183.219275][T17911] ? get_compat_msghdr+0x11a/0x170 [ 2183.219290][T17911] ? kstrtouint_from_user+0x13c/0x1d0 [ 2183.219305][T17911] ___sys_sendmsg+0x134/0x1d0 [ 2183.219318][T17911] ? get_pid_task+0xfc/0x250 [ 2183.219333][T17911] ? __pfx____sys_sendmsg+0x10/0x10 [ 2183.219349][T17911] ? rcu_is_watching+0x12/0xc0 [ 2183.219364][T17911] __sys_sendmsg+0x16d/0x220 [ 2183.219379][T17911] ? __pfx___sys_sendmsg+0x10/0x10 [ 2183.219395][T17911] ? rcu_is_watching+0x12/0xc0 [ 2183.219407][T17911] __do_fast_syscall_32+0x7c/0x3a0 [ 2183.219422][T17911] do_fast_syscall_32+0x32/0x80 [ 2183.219436][T17911] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2183.219451][T17911] RIP: 0023:0xf70be579 [ 2183.219459][T17911] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2183.219471][T17911] RSP: 002b:00000000f54ae55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 2183.219486][T17911] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 2183.219493][T17911] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2183.219500][T17911] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2183.219506][T17911] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2183.219513][T17911] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2183.219522][T17911] [ 2183.219658][T17911] xt_HMARK: proto mask must be zero with L3 mode [ 2183.534422][T17921] usb usb8: usbfs: process 17921 (syz.0.12990) did not claim interface 0 before use [ 2183.587704][ T40] kauditd_printk_skb: 134 callbacks suppressed [ 2183.587716][ T40] audit: type=1326 audit(2000264170.402:14567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17913 comm="syz.0.12990" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 2183.597046][ T40] audit: type=1326 audit(2000264170.402:14568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17913 comm="syz.0.12990" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 2183.605088][ T40] audit: type=1326 audit(2000264170.412:14569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17913 comm="syz.0.12990" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 2183.613836][ T40] audit: type=1326 audit(2000264170.412:14570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17913 comm="syz.0.12990" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 2183.623166][ T40] audit: type=1326 audit(2000264170.412:14571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17913 comm="syz.0.12990" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 2183.629015][T17921] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12990'. [ 2183.634631][ T40] audit: type=1326 audit(2000264170.412:14572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17913 comm="syz.0.12990" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 2183.645995][ T40] audit: type=1326 audit(2000264170.412:14573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17913 comm="syz.0.12990" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 2183.654432][ T40] audit: type=1326 audit(2000264170.412:14574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17913 comm="syz.0.12990" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 2183.665602][ T40] audit: type=1326 audit(2000264170.412:14575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17913 comm="syz.0.12990" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 2183.672733][ T40] audit: type=1326 audit(2000264170.412:14576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17913 comm="syz.0.12990" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 2183.675379][ T4210] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 2183.837035][ T4210] usb 11-1: Using ep0 maxpacket: 8 [ 2183.840391][ T4210] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2183.844321][ T4210] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2183.848267][ T4210] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2183.852230][ T4210] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2183.857565][ T4210] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2183.860548][ T4210] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2183.976662][T17929] usb usb8: usbfs: process 17929 (syz.4.12992) did not claim interface 0 before use [ 2183.990625][T17929] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12992'. [ 2184.060184][ T4210] usb 11-1: GET_CAPABILITIES returned 0 [ 2184.062270][ T4210] usbtmc 11-1:16.0: can't read capabilities [ 2184.252842][ T841] usb 11-1: USB disconnect, device number 3 [ 2184.294913][T17936] binder: 17935:17936 ioctl 80489439 80000100 returned -22 [ 2185.623216][T17968] tipc: Started in network mode [ 2185.625116][T17968] tipc: Node identity 62c517f90d1, cluster identity 4711 [ 2185.627765][T17968] tipc: Enabled bearer , priority 0 [ 2185.631561][T17968] syzkaller0: entered promiscuous mode [ 2185.633530][T17968] syzkaller0: entered allmulticast mode [ 2185.643839][T30877] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 2185.659969][T17968] tipc: Resetting bearer [ 2185.665895][T17967] tipc: Resetting bearer [ 2185.669092][T17967] tipc: Disabling bearer [ 2185.859405][T17981] binder: 17973:17981 ioctl 80489439 80000100 returned -22 [ 2185.871375][T17981] binder_alloc: 17973: binder_alloc_buf, no vma [ 2186.205462][T17987] usb usb8: usbfs: process 17987 (syz.5.13008) did not claim interface 0 before use [ 2186.275883][T17987] netlink: 40 bytes leftover after parsing attributes in process `syz.5.13008'. [ 2186.456647][ T4175] usb 50-1: device descriptor read/8, error -110 [ 2186.466112][T17991] afs: Unknown parameter 'dùn' [ 2186.667053][T14668] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 2186.711794][T17994] FAULT_INJECTION: forcing a failure. [ 2186.711794][T17994] name failslab, interval 1, probability 0, space 0, times 0 [ 2186.717163][T17994] CPU: 0 UID: 0 PID: 17994 Comm: syz.6.13012 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 2186.717182][T17994] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2186.717189][T17994] Call Trace: [ 2186.717194][T17994] [ 2186.717200][T17994] dump_stack_lvl+0x16c/0x1f0 [ 2186.717218][T17994] should_fail_ex+0x512/0x640 [ 2186.717235][T17994] should_failslab+0xc2/0x120 [ 2186.717250][T17994] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 2186.717264][T17994] ? skb_clone+0x190/0x3f0 [ 2186.717279][T17994] ? netlink_deliver_tap+0x103/0xd30 [ 2186.717293][T17994] skb_clone+0x190/0x3f0 [ 2186.717308][T17994] netlink_deliver_tap+0xabd/0xd30 [ 2186.717322][T17994] netlink_unicast+0x64c/0x870 [ 2186.717338][T17994] ? __pfx_netlink_unicast+0x10/0x10 [ 2186.717352][T17994] ? __pfx___might_resched+0x10/0x10 [ 2186.717367][T17994] netlink_sendmsg+0x8d1/0xdd0 [ 2186.717382][T17994] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2186.717397][T17994] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 2186.717410][T17994] ____sys_sendmsg+0xa95/0xc70 [ 2186.717433][T17994] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2186.717450][T17994] ? get_compat_msghdr+0x11a/0x170 [ 2186.717466][T17994] ? kstrtouint_from_user+0x13c/0x1d0 [ 2186.717481][T17994] ___sys_sendmsg+0x134/0x1d0 [ 2186.717494][T17994] ? get_pid_task+0xfc/0x250 [ 2186.717510][T17994] ? __pfx____sys_sendmsg+0x10/0x10 [ 2186.717526][T17994] ? rcu_is_watching+0x12/0xc0 [ 2186.717542][T17994] __sys_sendmsg+0x16d/0x220 [ 2186.717556][T17994] ? __pfx___sys_sendmsg+0x10/0x10 [ 2186.717572][T17994] ? rcu_is_watching+0x12/0xc0 [ 2186.717584][T17994] __do_fast_syscall_32+0x7c/0x3a0 [ 2186.717600][T17994] do_fast_syscall_32+0x32/0x80 [ 2186.717614][T17994] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2186.717629][T17994] RIP: 0023:0xf70be579 [ 2186.717639][T17994] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2186.717650][T17994] RSP: 002b:00000000f54ae55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 2186.717662][T17994] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 2186.717669][T17994] RDX: 000000000000c884 RSI: 0000000000000000 RDI: 0000000000000000 [ 2186.717676][T17994] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2186.717682][T17994] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2186.717689][T17994] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2186.717698][T17994] [ 2186.828458][T14668] usb 9-1: Using ep0 maxpacket: 8 [ 2186.835131][T14668] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2186.839153][T14668] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2186.842273][T14668] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2186.845454][T14668] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2186.847596][ T4175] usb usb50-port1: attempt power cycle [ 2186.849676][T14668] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2186.854117][T14668] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2186.940304][T18003] batman_adv: batadv0: Adding interface: gretap1 [ 2186.942991][T18003] batman_adv: batadv0: Interface activated: gretap1 [ 2187.050487][T14668] usb 9-1: GET_CAPABILITIES returned 0 [ 2187.056633][T14668] usbtmc 9-1:16.0: can't read capabilities [ 2187.242023][T14668] usb 9-1: USB disconnect, device number 55 [ 2187.304336][T30877] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 2187.411115][ T4175] usb usb50-port1: unable to enumerate USB device [ 2187.973753][T18039] usb usb8: usbfs: process 18039 (syz.6.13023) did not claim interface 0 before use [ 2188.088318][T18040] netlink: 40 bytes leftover after parsing attributes in process `syz.6.13023'. [ 2188.540588][T18042] FAULT_INJECTION: forcing a failure. [ 2188.540588][T18042] name failslab, interval 1, probability 0, space 0, times 0 [ 2188.545177][T18042] CPU: 3 UID: 0 PID: 18042 Comm: syz.0.13024 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 2188.545195][T18042] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2188.545202][T18042] Call Trace: [ 2188.545207][T18042] [ 2188.545211][T18042] dump_stack_lvl+0x16c/0x1f0 [ 2188.545230][T18042] should_fail_ex+0x512/0x640 [ 2188.545258][T18042] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 2188.545276][T18042] should_failslab+0xc2/0x120 [ 2188.545291][T18042] __kmalloc_noprof+0xd2/0x510 [ 2188.545306][T18042] tomoyo_realpath_from_path+0xc2/0x6e0 [ 2188.545322][T18042] ? tomoyo_profile+0x47/0x60 [ 2188.545332][T18042] tomoyo_path_number_perm+0x245/0x580 [ 2188.545345][T18042] ? tomoyo_path_number_perm+0x237/0x580 [ 2188.545359][T18042] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2188.545375][T18042] ? preempt_count_add+0x76/0x150 [ 2188.545394][T18042] ? rcu_is_watching+0x12/0xc0 [ 2188.545405][T18042] ? __fget_files+0x204/0x3c0 [ 2188.545423][T18042] ? hook_file_ioctl_common+0x145/0x410 [ 2188.545437][T18042] ? lock_release+0x201/0x2f0 [ 2188.545452][T18042] ? __fget_files+0x20e/0x3c0 [ 2188.545464][T18042] security_file_ioctl_compat+0x9b/0x240 [ 2188.545479][T18042] __ia32_compat_sys_ioctl+0xc3/0x370 [ 2188.545498][T18042] __do_fast_syscall_32+0x7c/0x3a0 [ 2188.545513][T18042] do_fast_syscall_32+0x32/0x80 [ 2188.545528][T18042] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2188.545542][T18042] RIP: 0023:0xf7f65579 [ 2188.545550][T18042] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2188.545561][T18042] RSP: 002b:00000000f548655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 2188.545572][T18042] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040247007 [ 2188.545579][T18042] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 2188.545585][T18042] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2188.545592][T18042] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2188.545598][T18042] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2188.545607][T18042] [ 2188.545623][T18042] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2188.802414][T30877] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 2188.933573][ T4210] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 2189.025069][T18059] binder: 18058:18059 ioctl 80489439 80000100 returned -22 [ 2189.033372][T18059] binder_alloc: 18058: binder_alloc_buf, no vma [ 2189.077851][ T4210] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2189.081244][ T4210] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2189.084772][ T4210] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2189.089077][ T4210] usb 5-1: config 1 interface 1 has no altsetting 0 [ 2189.094390][ T4210] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2189.101675][ T4210] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2189.106053][ T4210] usb 5-1: Product: syz [ 2189.107498][ T4210] usb 5-1: Manufacturer: syz [ 2189.108962][ T4210] usb 5-1: SerialNumber: syz [ 2189.321862][ T4210] usb 5-1: USB disconnect, device number 26 [ 2189.335073][ T6897] udevd[6897]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2189.857634][T12326] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 2190.000407][T12326] usb 10-1: Using ep0 maxpacket: 8 [ 2190.010971][T12326] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2190.014880][T12326] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2190.017953][T12326] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2190.021343][T12326] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2190.025260][T12326] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2190.029345][T12326] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2190.229527][T12326] usb 10-1: GET_CAPABILITIES returned 0 [ 2190.231514][T12326] usbtmc 10-1:16.0: can't read capabilities [ 2190.426275][T12326] usb 10-1: USB disconnect, device number 13 [ 2190.432706][T18094] tipc: Started in network mode [ 2190.434527][T18094] tipc: Node identity 3a44a55f4737, cluster identity 4711 [ 2190.437596][T18094] tipc: Enabled bearer , priority 0 [ 2190.441936][T18094] syzkaller0: entered promiscuous mode [ 2190.443758][T18094] syzkaller0: entered allmulticast mode [ 2190.454424][T18094] tipc: Resetting bearer [ 2190.461659][T18093] tipc: Resetting bearer [ 2190.466225][T18093] tipc: Disabling bearer [ 2190.782291][T18098] usb usb8: usbfs: process 18098 (syz.6.13040) did not claim interface 0 before use [ 2190.886385][ T40] kauditd_printk_skb: 120 callbacks suppressed [ 2190.886398][ T40] audit: type=1326 audit(2000264178.065:14697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18095 comm="syz.6.13040" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 2190.897428][ T40] audit: type=1326 audit(2000264178.076:14698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18095 comm="syz.6.13040" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 2190.905352][ T40] audit: type=1326 audit(2000264178.086:14699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18095 comm="syz.6.13040" exe="/syz-executor" sig=0 arch=40000003 syscall=384 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 2190.913918][ T40] audit: type=1326 audit(2000264178.086:14700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18095 comm="syz.6.13040" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 2190.931264][ T40] audit: type=1326 audit(2000264178.086:14701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18095 comm="syz.6.13040" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 2190.949698][ T40] audit: type=1326 audit(2000264178.086:14702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18095 comm="syz.6.13040" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 2190.959192][T18098] netlink: 40 bytes leftover after parsing attributes in process `syz.6.13040'. [ 2190.963408][ T40] audit: type=1326 audit(2000264178.086:14703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18095 comm="syz.6.13040" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 2190.971588][ T40] audit: type=1326 audit(2000264178.086:14704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18095 comm="syz.6.13040" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 2190.980172][ T40] audit: type=1326 audit(2000264178.097:14705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18095 comm="syz.6.13040" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 2190.989459][ T40] audit: type=1326 audit(2000264178.097:14706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18095 comm="syz.6.13040" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 2191.315684][T18104] binder: 18103:18104 ioctl 80489439 80000100 returned -22 [ 2191.319798][T18104] binder: 18103:18104 ioctl c0306201 80000240 returned -11 [ 2191.358715][T18107] random: crng reseeded on system resumption [ 2191.638892][T30877] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 2191.694081][T18122] 9pnet_virtio: no channels available for device syz [ 2191.857755][T18127] usb usb8: usbfs: process 18127 (syz.4.13048) did not claim interface 0 before use [ 2191.936671][T18127] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13048'. [ 2192.191005][T19022] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 2192.343184][T19022] usb 10-1: Using ep0 maxpacket: 8 [ 2192.345984][T19022] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2192.349747][T19022] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2192.353044][T19022] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2192.356130][T19022] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2192.360136][T19022] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2192.363006][T19022] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2192.571499][T19022] usb 10-1: GET_CAPABILITIES returned 0 [ 2192.573403][T19022] usbtmc 10-1:16.0: can't read capabilities [ 2192.609746][T30877] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 2192.730362][T18134] binder: 18133:18134 ioctl 80489439 80000100 returned -22 [ 2192.733890][T18134] binder: 18133:18134 ioctl c0306201 80000240 returned -11 [ 2192.755612][ T841] usb 10-1: USB disconnect, device number 14 [ 2192.896193][T18143] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2193.404389][T18148] FAULT_INJECTION: forcing a failure. [ 2193.404389][T18148] name failslab, interval 1, probability 0, space 0, times 0 [ 2193.408682][T18148] CPU: 1 UID: 0 PID: 18148 Comm: syz.5.13055 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 2193.408700][T18148] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2193.408707][T18148] Call Trace: [ 2193.408711][T18148] [ 2193.408717][T18148] dump_stack_lvl+0x16c/0x1f0 [ 2193.408734][T18148] should_fail_ex+0x512/0x640 [ 2193.408751][T18148] should_failslab+0xc2/0x120 [ 2193.408767][T18148] __kmalloc_cache_noprof+0x6a/0x3e0 [ 2193.408779][T18148] ? __inet_diag_dump_start+0x8f/0x7f0 [ 2193.408792][T18148] __inet_diag_dump_start+0x8f/0x7f0 [ 2193.408803][T18148] ? kasan_save_stack+0x42/0x60 [ 2193.408816][T18148] __netlink_dump_start+0x60b/0x990 [ 2193.408832][T18148] inet_diag_rcv_msg_compat+0x275/0x2d0 [ 2193.408845][T18148] ? __pfx_inet_diag_rcv_msg_compat+0x10/0x10 [ 2193.408857][T18148] ? __pfx_inet_diag_dump_start_compat+0x10/0x10 [ 2193.408869][T18148] ? __pfx_inet_diag_dump_compat+0x10/0x10 [ 2193.408880][T18148] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 2193.408892][T18148] ? sock_diag_rcv_msg+0x315/0x790 [ 2193.408904][T18148] ? rcu_is_watching+0x12/0xc0 [ 2193.408916][T18148] ? lock_release+0x201/0x2f0 [ 2193.408931][T18148] sock_diag_rcv_msg+0x34a/0x790 [ 2193.408944][T18148] netlink_rcv_skb+0x155/0x420 [ 2193.408959][T18148] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 2193.408972][T18148] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2193.408986][T18148] ? rcu_is_watching+0x12/0xc0 [ 2193.408999][T18148] ? netlink_deliver_tap+0x1ae/0xd30 [ 2193.409012][T18148] ? is_vmalloc_addr+0x86/0xa0 [ 2193.409026][T18148] netlink_unicast+0x5aa/0x870 [ 2193.409041][T18148] ? __pfx_netlink_unicast+0x10/0x10 [ 2193.409056][T18148] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 2193.409072][T18148] netlink_sendmsg+0x8d1/0xdd0 [ 2193.409087][T18148] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2193.409103][T18148] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 2193.409116][T18148] ____sys_sendmsg+0xa95/0xc70 [ 2193.409134][T18148] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2193.409151][T18148] ? get_compat_msghdr+0x11a/0x170 [ 2193.409166][T18148] ? kstrtouint_from_user+0x13c/0x1d0 [ 2193.409181][T18148] ___sys_sendmsg+0x134/0x1d0 [ 2193.409195][T18148] ? get_pid_task+0xfc/0x250 [ 2193.409211][T18148] ? __pfx____sys_sendmsg+0x10/0x10 [ 2193.409227][T18148] ? rcu_is_watching+0x12/0xc0 [ 2193.409241][T18148] __sys_sendmsg+0x16d/0x220 [ 2193.409256][T18148] ? __pfx___sys_sendmsg+0x10/0x10 [ 2193.409272][T18148] ? rcu_is_watching+0x12/0xc0 [ 2193.409284][T18148] __do_fast_syscall_32+0x7c/0x3a0 [ 2193.409299][T18148] do_fast_syscall_32+0x32/0x80 [ 2193.409314][T18148] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2193.409329][T18148] RIP: 0023:0xf709e579 [ 2193.409337][T18148] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2193.409349][T18148] RSP: 002b:00000000f548e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 2193.409360][T18148] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000080 [ 2193.409368][T18148] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2193.409374][T18148] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2193.409381][T18148] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2193.409388][T18148] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2193.409397][T18148] [ 2193.661510][T18157] Cache volume key already in use (9p,syz,) [ 2193.763649][T18165] FAULT_INJECTION: forcing a failure. [ 2193.763649][T18165] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2193.767828][T18165] CPU: 1 UID: 0 PID: 18165 Comm: syz.5.13061 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 2193.767848][T18165] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2193.767855][T18165] Call Trace: [ 2193.767871][T18165] [ 2193.767876][T18165] dump_stack_lvl+0x16c/0x1f0 [ 2193.767895][T18165] should_fail_ex+0x512/0x640 [ 2193.767913][T18165] _copy_from_user+0x2e/0xd0 [ 2193.767931][T18165] snd_pcm_oss_write2+0x1c2/0x410 [ 2193.767944][T18165] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 2193.767954][T18165] ? snd_pcm_kernel_ioctl+0x267/0x2e0 [ 2193.767968][T18165] ? snd_pcm_oss_prepare+0x11e/0x220 [ 2193.767986][T18165] snd_pcm_oss_write+0x711/0xa10 [ 2193.767998][T18165] ? security_file_permission+0x71/0x210 [ 2193.768015][T18165] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 2193.768026][T18165] vfs_write+0x2a0/0x11d0 [ 2193.768040][T18165] ? __pfx_vfs_write+0x10/0x10 [ 2193.768053][T18165] ? __fget_files+0x204/0x3c0 [ 2193.768065][T18165] ? rcu_is_watching+0x12/0xc0 [ 2193.768077][T18165] ? lock_release+0x201/0x2f0 [ 2193.768094][T18165] ? __fget_files+0x20e/0x3c0 [ 2193.768107][T18165] ksys_write+0x12a/0x250 [ 2193.768120][T18165] ? __pfx_ksys_write+0x10/0x10 [ 2193.768133][T18165] ? rcu_is_watching+0x12/0xc0 [ 2193.768145][T18165] __do_fast_syscall_32+0x7c/0x3a0 [ 2193.768162][T18165] do_fast_syscall_32+0x32/0x80 [ 2193.768177][T18165] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2193.768192][T18165] RIP: 0023:0xf709e579 [ 2193.768201][T18165] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2193.768212][T18165] RSP: 002b:00000000f548e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 2193.768223][T18165] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800012c0 [ 2193.768230][T18165] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2193.768237][T18165] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2193.768244][T18165] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2193.768250][T18165] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2193.768260][T18165] [ 2193.873508][T18166] usb usb8: usbfs: process 18166 (syz.0.13059) did not claim interface 0 before use [ 2193.916331][T18166] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13059'. [ 2194.017352][T18169] binder: 18168:18169 ioctl 80489439 80000100 returned -22 [ 2194.177867][T18176] /dev/nullb0: Can't lookup blockdev [ 2194.592186][T18186] FAULT_INJECTION: forcing a failure. [ 2194.592186][T18186] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2194.598070][T18186] CPU: 3 UID: 0 PID: 18186 Comm: syz.0.13069 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 2194.598087][T18186] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2194.598095][T18186] Call Trace: [ 2194.598099][T18186] [ 2194.598103][T18186] dump_stack_lvl+0x16c/0x1f0 [ 2194.598143][T18186] should_fail_ex+0x512/0x640 [ 2194.598162][T18186] _copy_from_user+0x2e/0xd0 [ 2194.598179][T18186] get_compat_msghdr+0xa7/0x170 [ 2194.598193][T18186] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2194.598207][T18186] ? kstrtouint_from_user+0x13c/0x1d0 [ 2194.598223][T18186] ___sys_sendmsg+0x1ae/0x1d0 [ 2194.598237][T18186] ? get_pid_task+0xfc/0x250 [ 2194.598253][T18186] ? __pfx____sys_sendmsg+0x10/0x10 [ 2194.598269][T18186] ? rcu_is_watching+0x12/0xc0 [ 2194.598284][T18186] __sys_sendmsg+0x16d/0x220 [ 2194.598298][T18186] ? __pfx___sys_sendmsg+0x10/0x10 [ 2194.598315][T18186] ? rcu_is_watching+0x12/0xc0 [ 2194.598326][T18186] __do_fast_syscall_32+0x7c/0x3a0 [ 2194.598342][T18186] do_fast_syscall_32+0x32/0x80 [ 2194.598356][T18186] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2194.598371][T18186] RIP: 0023:0xf7f65579 [ 2194.598380][T18186] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2194.598391][T18186] RSP: 002b:00000000f548655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 2194.598408][T18186] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000100 [ 2194.598415][T18186] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2194.598422][T18186] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2194.598428][T18186] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2194.598435][T18186] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2194.598445][T18186] [ 2194.791114][T18195] binder: 18194:18195 ioctl 80489439 80000100 returned -22 [ 2194.991627][T12326] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 2195.136611][T12326] usb 11-1: Using ep0 maxpacket: 32 [ 2195.142326][T12326] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2195.147892][T12326] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2195.151554][T12326] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2195.160230][T12326] usb 11-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 2195.164926][T12326] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2195.170833][T12326] usb 11-1: config 0 descriptor?? [ 2195.366667][T18234] random: crng reseeded on system resumption [ 2195.563458][T12326] input: HID 0458:5011 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/0003:0458:5011.0043/input/input106 [ 2195.621953][T12326] input: HID 0458:5011 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/0003:0458:5011.0043/input/input107 [ 2195.629019][T12326] kye 0003:0458:5011.0043: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.6-1/input0 [ 2195.647018][T18239] binder: 18237:18239 ioctl 80489439 80000100 returned -22 [ 2195.843974][ T4210] IPVS: starting estimator thread 0... [ 2195.850562][T12326] usb 11-1: USB disconnect, device number 4 [ 2195.926703][T18248] IPVS: using max 51 ests per chain, 122400 per kthread [ 2196.013803][T18256] FAULT_INJECTION: forcing a failure. [ 2196.013803][T18256] name failslab, interval 1, probability 0, space 0, times 0 [ 2196.019409][T18256] CPU: 3 UID: 0 PID: 18256 Comm: syz.0.13089 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 2196.019437][T18256] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2196.019448][T18256] Call Trace: [ 2196.019456][T18256] [ 2196.019466][T18256] dump_stack_lvl+0x16c/0x1f0 [ 2196.019492][T18256] should_fail_ex+0x512/0x640 [ 2196.019521][T18256] should_failslab+0xc2/0x120 [ 2196.019546][T18256] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 2196.019567][T18256] ? _copy_from_iter+0x15d/0x16f0 [ 2196.019603][T18256] ? __alloc_skb+0x2b2/0x380 [ 2196.019628][T18256] __alloc_skb+0x2b2/0x380 [ 2196.019649][T18256] ? __pfx___alloc_skb+0x10/0x10 [ 2196.019671][T18256] ? rcu_is_watching+0x12/0xc0 [ 2196.019689][T18256] ? rcu_is_watching+0x12/0xc0 [ 2196.019710][T18256] tipc_buf_acquire+0x26/0xe0 [ 2196.019726][T18256] tipc_msg_build+0x112/0x1150 [ 2196.019747][T18256] ? __pfx_tipc_msg_build+0x10/0x10 [ 2196.019767][T18256] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 2196.019794][T18256] __tipc_sendmsg+0xa30/0x19a0 [ 2196.019824][T18256] ? __pfx___tipc_sendmsg+0x10/0x10 [ 2196.019852][T18256] ? __pfx___might_resched+0x10/0x10 [ 2196.019872][T18256] ? rcu_is_watching+0x12/0xc0 [ 2196.019890][T18256] ? __pfx_woken_wake_function+0x10/0x10 [ 2196.019918][T18256] ? aa_sk_perm+0x2f4/0xb10 [ 2196.019943][T18256] ? tipc_sendmsg+0x41/0x70 [ 2196.019967][T18256] ? rcu_is_watching+0x12/0xc0 [ 2196.019985][T18256] ? tipc_sendmsg+0x41/0x70 [ 2196.020012][T18256] ? rcu_is_watching+0x12/0xc0 [ 2196.020027][T18256] ? tipc_sendmsg+0x41/0x70 [ 2196.020053][T18256] tipc_sendmsg+0x4f/0x70 [ 2196.020078][T18256] ____sys_sendmsg+0xa95/0xc70 [ 2196.020108][T18256] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2196.020134][T18256] ? get_compat_msghdr+0x11a/0x170 [ 2196.020157][T18256] ? __pfx__kstrtoull+0x10/0x10 [ 2196.020179][T18256] ___sys_sendmsg+0x134/0x1d0 [ 2196.020202][T18256] ? __pfx____sys_sendmsg+0x10/0x10 [ 2196.020225][T18256] ? __pfx_kstrtouint+0x10/0x10 [ 2196.020249][T18256] ? rcu_is_watching+0x12/0xc0 [ 2196.020272][T18256] ? __pfx___might_resched+0x10/0x10 [ 2196.020290][T18256] __sys_sendmmsg+0x2f9/0x420 [ 2196.020382][T18256] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2196.020425][T18256] ? lock_release+0x201/0x2f0 [ 2196.020453][T18256] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2196.020483][T18256] ? fput+0x9b/0xd0 [ 2196.020507][T18256] ? ksys_write+0x1ac/0x250 [ 2196.020527][T18256] ? __pfx_ksys_write+0x10/0x10 [ 2196.020550][T18256] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 2196.020572][T18256] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 2196.020597][T18256] __do_fast_syscall_32+0x7c/0x3a0 [ 2196.020623][T18256] do_fast_syscall_32+0x32/0x80 [ 2196.020645][T18256] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2196.020670][T18256] RIP: 0023:0xf7f65579 [ 2196.020686][T18256] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2196.020703][T18256] RSP: 002b:00000000f546555c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 2196.020722][T18256] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080001540 [ 2196.020734][T18256] RDX: 00000000040001b6 RSI: 0000000000000000 RDI: 0000000000000000 [ 2196.020747][T18256] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2196.020756][T18256] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2196.020766][T18256] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2196.020780][T18256] [ 2196.417400][T18267] tipc: Enabled bearer , priority 0 [ 2196.420124][T18267] syzkaller0: entered promiscuous mode [ 2196.423263][T18267] syzkaller0: entered allmulticast mode [ 2196.427974][T18266] tipc: Resetting bearer [ 2196.439037][T18266] tipc: Disabling bearer [ 2197.092946][T18286] usb usb8: usbfs: process 18286 (syz.5.13096) did not claim interface 0 before use [ 2197.102266][ T40] kauditd_printk_skb: 87 callbacks suppressed [ 2197.102283][ T40] audit: type=1326 audit(2000264184.584:14794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18276 comm="syz.5.13096" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 2197.120990][ T40] audit: type=1326 audit(2000264184.605:14795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18276 comm="syz.5.13096" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 2197.131501][ T40] audit: type=1326 audit(2000264184.616:14796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18276 comm="syz.5.13096" exe="/syz-executor" sig=0 arch=40000003 syscall=384 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 2197.160683][T18286] netlink: 40 bytes leftover after parsing attributes in process `syz.5.13096'. [ 2197.168825][ T40] audit: type=1326 audit(2000264184.626:14797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18276 comm="syz.5.13096" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 2197.178058][ T40] audit: type=1326 audit(2000264184.626:14798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18276 comm="syz.5.13096" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 2197.186778][ T40] audit: type=1326 audit(2000264184.626:14799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18276 comm="syz.5.13096" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 2197.195103][ T40] audit: type=1326 audit(2000264184.637:14800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18276 comm="syz.5.13096" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 2197.210446][ T40] audit: type=1326 audit(2000264184.637:14801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18276 comm="syz.5.13096" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 2197.219504][ T40] audit: type=1326 audit(2000264184.637:14802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18276 comm="syz.5.13096" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 2197.228923][ T40] audit: type=1326 audit(2000264184.637:14803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18276 comm="syz.5.13096" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 2197.359985][T18291] random: crng reseeded on system resumption [ 2197.519990][T14653] Bluetooth: hci1: command 0x0406 tx timeout [ 2197.923290][T30877] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 2197.959473][T18306] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 2198.306222][T19022] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 2198.449215][T19022] usb 11-1: Using ep0 maxpacket: 8 [ 2198.452013][T19022] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2198.455607][T19022] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2198.459367][T19022] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2198.463469][T19022] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2198.468696][T19022] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2198.471550][T19022] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2198.575201][T18332] usb usb8: usbfs: process 18332 (syz.4.13107) did not claim interface 0 before use [ 2198.610604][T18332] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13107'. [ 2198.669826][T19022] usb 11-1: GET_CAPABILITIES returned 0 [ 2198.672024][T19022] usbtmc 11-1:16.0: can't read capabilities [ 2198.872030][T19022] usb 11-1: USB disconnect, device number 5 [ 2199.359463][T18343] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13114'. [ 2199.454986][T18353] Cache volume key already in use (9p,syz,) [ 2199.492238][T18342] netlink: 'syz.0.13112': attribute type 1 has an invalid length. [ 2199.507331][T18342] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2199.510653][T18342] bond3: (slave bond4): making interface the new active one [ 2199.513770][T18342] bond3: (slave bond4): Enslaving as an active interface with an up link [ 2199.519449][T18342] bridge0: Device is already in use. [ 2199.667860][T18368] usb usb8: usbfs: process 18368 (syz.4.13119) did not claim interface 0 before use [ 2199.789458][T18371] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13119'. [ 2200.107869][T12326] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 2200.168857][T18376] usb usb8: usbfs: process 18376 (syz.0.13122) did not claim interface 0 before use [ 2200.181889][T18376] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13122'. [ 2200.440378][T18383] usb usb8: usbfs: process 18383 (syz.5.13123) did not claim interface 0 before use [ 2200.521922][T18383] netlink: 40 bytes leftover after parsing attributes in process `syz.5.13123'. [ 2200.637131][ T841] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 2200.783270][ T841] usb 9-1: Using ep0 maxpacket: 8 [ 2200.789607][ T841] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2200.793370][ T841] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2200.797179][ T841] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2200.800280][ T841] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2200.808736][ T841] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2200.811687][ T841] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2201.016700][ T841] usb 9-1: GET_CAPABILITIES returned 0 [ 2201.018709][ T841] usbtmc 9-1:16.0: can't read capabilities [ 2201.213965][T19022] usb 9-1: USB disconnect, device number 56 [ 2201.776658][T19022] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 2201.906944][T19022] usb 5-1: device descriptor read/64, error -71 [ 2202.193110][T19022] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 2202.269782][T22285] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 2202.317014][T19022] usb 5-1: device descriptor read/64, error -71 [ 2202.421434][T19022] usb usb5-port1: attempt power cycle [ 2202.608871][T30877] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 2202.653409][T18427] 9pnet_virtio: no channels available for device syz [ 2202.745526][T19022] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 2202.748165][T18428] FAULT_INJECTION: forcing a failure. [ 2202.748165][T18428] name failslab, interval 1, probability 0, space 0, times 0 [ 2202.753179][T18428] CPU: 0 UID: 0 PID: 18428 Comm: syz.6.13139 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 2202.753206][T18428] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2202.753216][T18428] Call Trace: [ 2202.753223][T18428] [ 2202.753230][T18428] dump_stack_lvl+0x16c/0x1f0 [ 2202.753257][T18428] should_fail_ex+0x512/0x640 [ 2202.753288][T18428] ? acpi_ns_internalize_name+0x144/0x220 [ 2202.753307][T18428] should_failslab+0xc2/0x120 [ 2202.753330][T18428] __kmalloc_noprof+0xd2/0x510 [ 2202.753348][T18428] ? unwind_get_return_address+0x59/0xa0 [ 2202.753367][T18428] ? acpi_ns_get_internal_name_length+0x272/0x400 [ 2202.753386][T18428] acpi_ns_internalize_name+0x144/0x220 [ 2202.753404][T18428] ? __pfx_acpi_ns_internalize_name+0x10/0x10 [ 2202.753424][T18428] ? __pfx_stack_trace_save+0x10/0x10 [ 2202.753444][T18428] ? stack_depot_save_flags+0x29/0x9c0 [ 2202.753468][T18428] acpi_ns_get_node_unlocked+0x163/0x310 [ 2202.753488][T18428] ? __pfx_acpi_ns_get_node_unlocked+0x10/0x10 [ 2202.753507][T18428] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2202.753532][T18428] ? rcu_is_watching+0x12/0xc0 [ 2202.753552][T18428] ? down_timeout+0x6b/0x90 [ 2202.753574][T18428] ? acpi_os_wait_semaphore+0xcb/0xf0 [ 2202.753600][T18428] ? acpi_ns_get_node+0x4c/0x70 [ 2202.753617][T18428] acpi_ns_get_node+0x4c/0x70 [ 2202.753635][T18428] acpi_get_handle+0x105/0x270 [ 2202.753654][T18428] ? __pfx_acpi_get_handle+0x10/0x10 [ 2202.753674][T18428] ? rcu_is_watching+0x12/0xc0 [ 2202.753691][T18428] acpi_has_method+0x7a/0xc0 [ 2202.753716][T18428] ? __pfx_acpi_has_method+0x10/0x10 [ 2202.753741][T18428] ? rcu_is_watching+0x12/0xc0 [ 2202.753757][T18428] ? is_bpf_text_address+0x8a/0x1a0 [ 2202.753779][T18428] acpi_pci_set_power_state+0xa4/0x290 [ 2202.753821][T18428] pci_power_up+0x80/0x4b0 [ 2202.753839][T18428] ? __pfx_pci_power_up+0x10/0x10 [ 2202.753855][T18428] ? kernel_text_address+0x8d/0x100 [ 2202.753872][T18428] ? __kernel_text_address+0xd/0x40 [ 2202.753886][T18428] ? unwind_get_return_address+0x59/0xa0 [ 2202.753904][T18428] pci_pm_power_up_and_verify_state+0x6a/0x240 [ 2202.753923][T18428] ? __pfx_pci_pm_power_up_and_verify_state+0x10/0x10 [ 2202.753939][T18428] ? __rpm_callback+0x1e2/0x610 [ 2202.753954][T18428] ? rcu_is_watching+0x12/0xc0 [ 2202.753965][T18428] pci_pm_runtime_resume+0xa1/0x270 [ 2202.753977][T18428] ? __pfx_pci_pm_runtime_resume+0x10/0x10 [ 2202.753989][T18428] __rpm_callback+0xc8/0x610 [ 2202.754003][T18428] ? rcu_is_watching+0x12/0xc0 [ 2202.754014][T18428] ? __pfx_pci_pm_runtime_resume+0x10/0x10 [ 2202.754026][T18428] rpm_callback+0x1b7/0x200 [ 2202.754064][T18428] ? __pfx_pci_pm_runtime_resume+0x10/0x10 [ 2202.754081][T18428] rpm_resume+0xd0a/0x1310 [ 2202.754098][T18428] ? security_file_ioctl_compat+0x21/0x240 [ 2202.754114][T18428] ? __ia32_compat_sys_ioctl+0xc3/0x370 [ 2202.754133][T18428] ? __pfx_rpm_resume+0x10/0x10 [ 2202.754147][T18428] ? do_raw_spin_lock+0x12c/0x2b0 [ 2202.754164][T18428] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2202.754180][T18428] ? lock_acquire+0x2cd/0x350 [ 2202.754197][T18428] __pm_runtime_resume+0xb6/0x170 [ 2202.754213][T18428] i801_access+0x13a/0x2090 [ 2202.754229][T18428] ? __pfx_i801_access+0x10/0x10 [ 2202.754244][T18428] ? rcu_is_watching+0x12/0xc0 [ 2202.754255][T18428] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 2202.754278][T18428] __i2c_smbus_xfer+0x4f0/0x1020 [ 2202.754293][T18428] ? __pfx_i801_access+0x10/0x10 [ 2202.754308][T18428] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 2202.754324][T18428] ? rt_mutex_slowtrylock+0xc9/0x100 [ 2202.754341][T18428] i2c_smbus_xfer+0x200/0x3c0 [ 2202.754358][T18428] i2cdev_ioctl_smbus+0x237/0x960 [ 2202.754370][T18428] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 2202.754382][T18428] ? __might_fault+0x13b/0x190 [ 2202.754394][T18428] ? rcu_is_watching+0x12/0xc0 [ 2202.754408][T18428] compat_i2cdev_ioctl+0x434/0x530 [ 2202.754420][T18428] ? hook_file_ioctl_common+0x145/0x410 [ 2202.754436][T18428] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 2202.754449][T18428] ? __fget_files+0x20e/0x3c0 [ 2202.754461][T18428] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 2202.754474][T18428] __ia32_compat_sys_ioctl+0x242/0x370 [ 2202.754493][T18428] __do_fast_syscall_32+0x7c/0x3a0 [ 2202.754508][T18428] do_fast_syscall_32+0x32/0x80 [ 2202.754524][T18428] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2202.754539][T18428] RIP: 0023:0xf70be579 [ 2202.754548][T18428] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2202.754559][T18428] RSP: 002b:00000000f548d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 2202.754569][T18428] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000720 [ 2202.754576][T18428] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2202.754583][T18428] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2202.754589][T18428] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2202.754596][T18428] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2202.754605][T18428] [ 2202.764979][T19022] usb 5-1: device descriptor read/8, error -71 [ 2203.164521][T19022] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 2203.184423][T19022] usb 5-1: device descriptor read/8, error -71 [ 2203.241099][ T4210] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 2203.289000][T19022] usb usb5-port1: unable to enumerate USB device [ 2203.383867][ T4210] usb 10-1: Using ep0 maxpacket: 8 [ 2203.387003][ T4210] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2203.390495][ T4210] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2203.394605][ T4210] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2203.398126][ T4210] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2203.403606][ T4210] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2203.407336][ T4210] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2203.603287][ T4210] usb 10-1: GET_CAPABILITIES returned 0 [ 2203.605062][ T4210] usbtmc 10-1:16.0: can't read capabilities [ 2203.804846][ T4210] usb 10-1: USB disconnect, device number 15 [ 2203.807899][T30877] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 2204.562906][T18468] 9pnet_virtio: no channels available for device syz [ 2204.860667][T22285] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 2205.292564][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 2205.955744][ T4210] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 2206.184373][ T4210] usb 9-1: Using ep0 maxpacket: 8 [ 2206.710060][ T4210] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2207.178861][ T4210] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2207.182029][ T4210] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2207.187648][ T4210] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2207.192819][ T4210] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2207.196330][ T4210] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2207.396838][ T4210] usb 9-1: GET_CAPABILITIES returned 0 [ 2207.398603][ T4210] usbtmc 9-1:16.0: can't read capabilities [ 2207.499602][T12326] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 2207.591998][ T4210] usb 9-1: USB disconnect, device number 57 [ 2208.284053][T18547] usb usb8: usbfs: process 18547 (syz.5.13171) did not claim interface 0 before use [ 2208.290521][ T40] kauditd_printk_skb: 121 callbacks suppressed [ 2208.290533][ T40] audit: type=1326 audit(2000264196.342:14925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18538 comm="syz.5.13171" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 2208.293478][T18546] tipc: Enabled bearer , priority 0 [ 2208.300479][ T40] audit: type=1326 audit(2000264196.342:14926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18538 comm="syz.5.13171" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 2208.321253][T18545] tipc: Disabling bearer [ 2208.323837][ T40] audit: type=1326 audit(2000264196.363:14927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18538 comm="syz.5.13171" exe="/syz-executor" sig=0 arch=40000003 syscall=384 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 2208.328521][T18547] netlink: 40 bytes leftover after parsing attributes in process `syz.5.13171'. [ 2208.331946][ T40] audit: type=1326 audit(2000264196.363:14928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18538 comm="syz.5.13171" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 2208.344783][ T40] audit: type=1326 audit(2000264196.363:14929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18538 comm="syz.5.13171" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 2208.353221][ T40] audit: type=1326 audit(2000264196.363:14930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18538 comm="syz.5.13171" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 2208.364103][ T40] audit: type=1326 audit(2000264196.363:14931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18538 comm="syz.5.13171" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 2208.373515][ T40] audit: type=1326 audit(2000264196.363:14932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18538 comm="syz.5.13171" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 2208.381235][ T40] audit: type=1326 audit(2000264196.363:14933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18538 comm="syz.5.13171" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 2208.393790][ T40] audit: type=1326 audit(2000264196.363:14934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18538 comm="syz.5.13171" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 2208.679069][T18559] usb usb8: usbfs: process 18559 (syz.6.13176) did not claim interface 0 before use [ 2208.746823][T18561] netlink: 40 bytes leftover after parsing attributes in process `syz.6.13176'. [ 2211.071090][T18567] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 2211.072970][T30877] Bluetooth: hci1: command 0x0406 tx timeout [ 2211.074869][T18567] Bluetooth: hci1: Opcode 0x0406 failed: -110 [ 2211.946568][T18567] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2211.948624][T18567] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2211.950959][T18567] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2211.953271][T18567] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2211.955184][T18567] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2211.957928][T18567] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2211.960463][ T9695] Bluetooth: hci4: Frame reassembly failed (-84) [ 2212.032764][T18589] tipc: Enabled bearer , priority 0 [ 2212.037800][T18588] tipc: Disabling bearer [ 2212.213668][T22285] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 2212.250338][T18592] binder: 18591:18592 ioctl 80489439 80000100 returned -22 [ 2212.357057][T22285] usb 5-1: Using ep0 maxpacket: 8 [ 2212.360006][T22285] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2212.363598][T22285] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2212.367152][T22285] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2212.370637][T22285] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2212.374899][T22285] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2212.377808][T22285] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2212.395317][T22285] usb 5-1: can't set config #16, error -71 [ 2212.398763][T22285] usb 5-1: USB disconnect, device number 31 [ 2212.550153][T18604] usb usb8: usbfs: process 18604 (syz.6.13185) did not claim interface 0 before use [ 2212.636717][T18596] netlink: 40 bytes leftover after parsing attributes in process `syz.6.13185'. [ 2213.052068][T14653] Bluetooth: hci2: command 0x0c1a tx timeout [ 2213.052489][ T5499] Bluetooth: hci1: command 0x0406 tx timeout [ 2213.225683][T18617] fuse: Bad value for 'user_id' [ 2213.227354][T18617] fuse: Bad value for 'user_id' [ 2213.259960][T18619] input: syz0 as /devices/virtual/input/input108 [ 2213.890899][T30877] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 2213.893439][T30877] Bluetooth: hci3: command 0x0c1a tx timeout [ 2213.909452][T18628] tipc: Enabled bearer , priority 0 [ 2213.912861][T18627] tipc: Disabling bearer [ 2214.112389][T18634] binder: 18633:18634 ioctl 80489439 80000100 returned -22 [ 2214.373354][T18653] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.13196'. [ 2214.449098][T18649] binder: 18648:18649 ioctl 80489439 80000100 returned -22 [ 2214.500801][T18657] tipc: Started in network mode [ 2214.502452][T18657] tipc: Node identity ee1d27782f81, cluster identity 4711 [ 2214.504791][T18657] tipc: Enabled bearer , priority 0 [ 2214.507467][T18657] syzkaller0: entered promiscuous mode [ 2214.509395][T18657] syzkaller0: entered allmulticast mode [ 2214.512996][T18656] tipc: Resetting bearer [ 2214.516435][T18656] tipc: Disabling bearer [ 2214.621961][T18662] FAULT_INJECTION: forcing a failure. [ 2214.621961][T18662] name failslab, interval 1, probability 0, space 0, times 0 [ 2214.626660][T18662] CPU: 0 UID: 0 PID: 18662 Comm: syz.5.13203 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 2214.626679][T18662] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2214.626686][T18662] Call Trace: [ 2214.626690][T18662] [ 2214.626694][T18662] dump_stack_lvl+0x16c/0x1f0 [ 2214.626718][T18662] should_fail_ex+0x512/0x640 [ 2214.626736][T18662] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 2214.626753][T18662] should_failslab+0xc2/0x120 [ 2214.626768][T18662] __kmalloc_noprof+0xd2/0x510 [ 2214.626783][T18662] tomoyo_realpath_from_path+0xc2/0x6e0 [ 2214.626799][T18662] ? tomoyo_profile+0x47/0x60 [ 2214.626809][T18662] tomoyo_path_number_perm+0x245/0x580 [ 2214.626822][T18662] ? tomoyo_path_number_perm+0x237/0x580 [ 2214.626836][T18662] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2214.626852][T18662] ? preempt_count_add+0x76/0x150 [ 2214.626871][T18662] ? rcu_is_watching+0x12/0xc0 [ 2214.626883][T18662] ? __fget_files+0x204/0x3c0 [ 2214.626895][T18662] ? hook_file_ioctl_common+0x145/0x410 [ 2214.626910][T18662] ? lock_release+0x201/0x2f0 [ 2214.626925][T18662] ? __fget_files+0x20e/0x3c0 [ 2214.626937][T18662] security_file_ioctl_compat+0x9b/0x240 [ 2214.626952][T18662] __ia32_compat_sys_ioctl+0xc3/0x370 [ 2214.626971][T18662] __do_fast_syscall_32+0x7c/0x3a0 [ 2214.626986][T18662] do_fast_syscall_32+0x32/0x80 [ 2214.627001][T18662] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2214.627015][T18662] RIP: 0023:0xf709e579 [ 2214.627024][T18662] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2214.627035][T18662] RSP: 002b:00000000f548e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 2214.627047][T18662] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000004020ae46 [ 2214.627054][T18662] RDX: 0000000080000500 RSI: 0000000000000000 RDI: 0000000000000000 [ 2214.627061][T18662] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2214.627067][T18662] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2214.627074][T18662] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2214.627084][T18662] [ 2214.627088][T18662] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2214.848336][T18671] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2214.924053][T18669] binder: 18668:18669 ioctl 80489439 80000100 returned -22 [ 2214.964432][T18676] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13207'. [ 2214.986996][T18678] netlink: 52 bytes leftover after parsing attributes in process `syz.0.13209'. [ 2214.992642][T18678] FAULT_INJECTION: forcing a failure. [ 2214.992642][T18678] name failslab, interval 1, probability 0, space 0, times 0 [ 2214.997074][T18678] CPU: 0 UID: 0 PID: 18678 Comm: syz.0.13209 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 2214.997091][T18678] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2214.997098][T18678] Call Trace: [ 2214.997103][T18678] [ 2214.997107][T18678] dump_stack_lvl+0x16c/0x1f0 [ 2214.997124][T18678] should_fail_ex+0x512/0x640 [ 2214.997146][T18678] ? __crypto_alloc_tfmgfp+0xd1/0x400 [ 2214.997162][T18678] should_failslab+0xc2/0x120 [ 2214.997177][T18678] __kmalloc_noprof+0xd2/0x510 [ 2214.997190][T18678] ? __pfx___up_read+0x10/0x10 [ 2214.997207][T18678] ? crypto_spawn_alg+0xc4/0x210 [ 2214.997220][T18678] __crypto_alloc_tfmgfp+0xd1/0x400 [ 2214.997236][T18678] crypto_spawn_tfm+0x93/0x110 [ 2214.997247][T18678] ? __pfx_cbcmac_init_tfm+0x10/0x10 [ 2214.997262][T18678] cbcmac_init_tfm+0x43/0xc0 [ 2214.997276][T18678] ? __pfx_cbcmac_init_tfm+0x10/0x10 [ 2214.997290][T18678] crypto_create_tfm_node+0x1bd/0x350 [ 2214.997306][T18678] crypto_ahash_init_tfm+0x4bd/0x710 [ 2214.997320][T18678] crypto_create_tfm_node+0x127/0x350 [ 2214.997335][T18678] crypto_spawn_tfm2+0x62/0xb0 [ 2214.997347][T18678] crypto_ccm_init_tfm+0x41/0x260 [ 2214.997362][T18678] ? __pfx_crypto_ccm_init_tfm+0x10/0x10 [ 2214.997376][T18678] crypto_aead_init_tfm+0x149/0x1b0 [ 2214.997390][T18678] crypto_create_tfm_node+0x127/0x350 [ 2214.997405][T18678] crypto_alloc_tfm_node+0x102/0x260 [ 2214.997420][T18678] ? do_init_timer+0xc9/0x110 [ 2214.997433][T18678] tls_set_sw_offload+0xd73/0x16e0 [ 2214.997448][T18678] ? tls_setsockopt+0x271/0x19d0 [ 2214.997465][T18678] tls_setsockopt+0x12b0/0x19d0 [ 2214.997483][T18678] ? __pfx_tls_setsockopt+0x10/0x10 [ 2214.997500][T18678] ? __pfx_aa_sk_perm+0x10/0x10 [ 2214.997514][T18678] ? rcu_is_watching+0x12/0xc0 [ 2214.997527][T18678] ? aa_sock_opt_perm+0xfd/0x1c0 [ 2214.997537][T18678] ? sock_common_setsockopt+0x2e/0xf0 [ 2214.997554][T18678] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 2214.997572][T18678] do_sock_setsockopt+0xf3/0x1d0 [ 2214.997589][T18678] __sys_setsockopt+0x120/0x1a0 [ 2214.997603][T18678] __ia32_sys_setsockopt+0xbc/0x160 [ 2214.997617][T18678] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 2214.997633][T18678] __do_fast_syscall_32+0x7c/0x3a0 [ 2214.997648][T18678] do_fast_syscall_32+0x32/0x80 [ 2214.997663][T18678] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2214.997677][T18678] RIP: 0023:0xf7f65579 [ 2214.997686][T18678] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2214.997697][T18678] RSP: 002b:00000000f548655c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 2214.997708][T18678] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000011a [ 2214.997715][T18678] RDX: 0000000000000001 RSI: 0000000080000b00 RDI: 0000000000000028 [ 2214.997722][T18678] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2214.997729][T18678] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2214.997735][T18678] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2214.997745][T18678] [ 2215.076062][ T5499] Bluetooth: hci2: command 0x0c1a tx timeout [ 2215.112420][T18684] tipc: Enabled bearer , priority 0 [ 2215.114968][T18684] syzkaller0: entered promiscuous mode [ 2215.116841][T18684] syzkaller0: entered allmulticast mode [ 2215.120403][T18682] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13211'. [ 2215.123227][T18682] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13211'. [ 2215.126192][T18683] tipc: Resetting bearer [ 2215.129754][T18683] tipc: Disabling bearer [ 2215.189673][T18686] binder: 18685:18686 ioctl 80489439 80000100 returned -22 [ 2215.205897][T18692] netlink: 52 bytes leftover after parsing attributes in process `syz.4.13215'. [ 2215.225611][T18693] netlink: 'syz.5.13214': attribute type 8 has an invalid length. [ 2215.241004][T18693] batadv_slave_1: entered promiscuous mode [ 2215.425910][T18702] usb usb8: usbfs: process 18702 (syz.0.13216) did not claim interface 0 before use [ 2215.430544][ T40] kauditd_printk_skb: 95 callbacks suppressed [ 2215.430554][ T40] audit: type=1326 audit(2000264203.827:15030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18694 comm="syz.0.13216" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 2215.440370][ T40] audit: type=1326 audit(2000264203.838:15031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18694 comm="syz.0.13216" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 2215.449880][ T40] audit: type=1326 audit(2000264203.838:15032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18694 comm="syz.0.13216" exe="/syz-executor" sig=0 arch=40000003 syscall=384 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 2215.458814][ T40] audit: type=1326 audit(2000264203.838:15033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18694 comm="syz.0.13216" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 2215.465600][T18702] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13216'. [ 2215.467665][ T40] audit: type=1326 audit(2000264203.838:15034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18694 comm="syz.0.13216" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 2215.476511][T18703] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.13217'. [ 2215.479567][ T40] audit: type=1326 audit(2000264203.838:15035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18694 comm="syz.0.13216" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 2215.490528][ T40] audit: type=1326 audit(2000264203.838:15036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18694 comm="syz.0.13216" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 2215.499606][ T40] audit: type=1326 audit(2000264203.838:15037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18694 comm="syz.0.13216" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 2215.508570][ T40] audit: type=1326 audit(2000264203.838:15038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18694 comm="syz.0.13216" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 2215.516757][ T40] audit: type=1326 audit(2000264203.838:15039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18694 comm="syz.0.13216" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 2215.871734][ T5499] Bluetooth: hci3: command 0x0c1a tx timeout [ 2215.985766][T18688] batadv_slave_1: left promiscuous mode [ 2216.092326][T18715] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13221'. [ 2216.130905][T18722] tipc: Enabled bearer , priority 0 [ 2216.134011][T18722] syzkaller0: entered promiscuous mode [ 2216.136020][T18722] syzkaller0: entered allmulticast mode [ 2216.140154][T18720] tipc: Resetting bearer [ 2216.144406][T18720] tipc: Disabling bearer [ 2216.220000][T18729] usb usb8: usbfs: process 18729 (syz.5.13220) did not claim interface 0 before use [ 2216.245011][T18729] netlink: 40 bytes leftover after parsing attributes in process `syz.5.13220'. [ 2216.250210][T18726] binder: 18725:18726 ioctl 80489439 80000100 returned -22 [ 2216.255083][T18726] binder: 18725:18726 ioctl c0306201 80000240 returned -11 [ 2216.373265][T18735] usb usb8: usbfs: process 18735 (syz.4.13226) did not claim interface 0 before use [ 2216.887718][T18749] usb usb8: usbfs: process 18749 (syz.6.13230) did not claim interface 0 before use [ 2217.034919][ T5499] Bluetooth: hci2: command 0x0c1a tx timeout [ 2217.474065][T18768] syzkaller0: entered promiscuous mode [ 2217.475835][T18768] syzkaller0: entered allmulticast mode [ 2217.678023][T18776] 9pnet_virtio: no channels available for device syz [ 2217.852881][ T5499] Bluetooth: hci3: command 0x0c1a tx timeout [ 2218.267602][T18787] usb usb8: usbfs: process 18787 (syz.4.13240) did not claim interface 0 before use [ 2218.845988][T18802] usb usb8: usbfs: process 18802 (syz.5.13242) did not claim interface 0 before use [ 2219.447056][T18812] syzkaller0: entered promiscuous mode [ 2219.449306][T18812] syzkaller0: entered allmulticast mode [ 2219.631854][T18824] syzkaller0: entered promiscuous mode [ 2219.633743][T18824] syzkaller0: entered allmulticast mode [ 2219.861126][T18827] __nla_validate_parse: 5 callbacks suppressed [ 2219.861139][T18827] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.13251'. [ 2220.040838][T18834] binder: 18833:18834 ioctl 80489439 80000100 returned -22 [ 2220.045377][T18834] binder: 18833:18834 ioctl c0306201 80000240 returned -11 [ 2220.256841][T18840] usb usb8: usbfs: process 18840 (syz.0.13255) did not claim interface 0 before use [ 2220.268185][ T40] kauditd_printk_skb: 185 callbacks suppressed [ 2220.268198][ T40] audit: type=1326 audit(2000264208.908:15225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18836 comm="syz.0.13255" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 2220.276992][ T40] audit: type=1326 audit(2000264208.908:15226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18836 comm="syz.0.13255" exe="/syz-executor" sig=0 arch=40000003 syscall=384 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 2220.283858][ T40] audit: type=1326 audit(2000264208.908:15227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18836 comm="syz.0.13255" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 2220.290679][ T40] audit: type=1326 audit(2000264208.908:15228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18836 comm="syz.0.13255" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 2220.297493][ T40] audit: type=1326 audit(2000264208.919:15229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18836 comm="syz.0.13255" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 2220.304620][ T40] audit: type=1326 audit(2000264208.919:15230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18836 comm="syz.0.13255" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 2220.309011][T18840] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13255'. [ 2220.311466][ T40] audit: type=1326 audit(2000264208.919:15231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18836 comm="syz.0.13255" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 2220.321398][ T40] audit: type=1326 audit(2000264208.919:15232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18836 comm="syz.0.13255" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 2220.328395][ T40] audit: type=1326 audit(2000264208.919:15233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18836 comm="syz.0.13255" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 2220.337046][ T40] audit: type=1326 audit(2000264208.929:15234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18836 comm="syz.0.13255" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 2221.099588][T18856] usb usb8: usbfs: process 18856 (syz.0.13256) did not claim interface 0 before use [ 2221.104145][T18847] binder: 18845:18847 ioctl 80489439 80000100 returned -22 [ 2221.108926][T18847] binder: 18845:18847 ioctl c0306201 80000240 returned -11 [ 2221.125097][T18856] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13256'. [ 2221.444079][T14479] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 2221.523143][T18873] usb usb8: usbfs: process 18873 (syz.6.13266) did not claim interface 0 before use [ 2221.585667][T18874] netlink: 40 bytes leftover after parsing attributes in process `syz.6.13266'. [ 2221.596864][T14479] usb 10-1: Using ep0 maxpacket: 8 [ 2221.600831][T14479] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2221.605665][T14479] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2221.609285][T14479] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2221.613447][T14479] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2221.618226][T14479] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2221.621832][T14479] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2221.819304][T14479] usb 10-1: GET_CAPABILITIES returned 0 [ 2221.822338][T14479] usbtmc 10-1:16.0: can't read capabilities [ 2222.013299][ T841] usb 10-1: USB disconnect, device number 16 [ 2222.054429][T14479] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 2222.215557][T14479] usb 5-1: Using ep0 maxpacket: 8 [ 2222.218513][T14479] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 2222.221179][T14479] usb 5-1: config 0 has no interface number 0 [ 2222.223336][T14479] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2222.227081][T14479] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2222.229481][T18885] syzkaller0: entered promiscuous mode [ 2222.230669][T14479] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2222.232403][T18885] syzkaller0: entered allmulticast mode [ 2222.236046][T14479] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2222.241768][T14479] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2222.245319][T14479] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2222.248879][T14479] usb 5-1: config 0 descriptor?? [ 2222.252175][T14479] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2222.444830][T14479] usb 5-1: USB disconnect, device number 32 [ 2222.447747][T14479] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 2222.597525][T18898] netlink: 84 bytes leftover after parsing attributes in process `syz.5.13275'. [ 2222.682888][T18901] input: syz1 as /devices/virtual/input/input109 [ 2222.996805][T14479] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 2223.139575][T14479] usb 9-1: Using ep0 maxpacket: 8 [ 2223.144003][T14479] usb 9-1: config 0 has no interfaces? [ 2223.147231][T14479] usb 9-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 2223.150210][T14479] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2223.153471][T14479] usb 9-1: Product: syz [ 2223.155084][T14479] usb 9-1: Manufacturer: syz [ 2223.156598][T14479] usb 9-1: SerialNumber: syz [ 2223.164689][T14479] usb 9-1: config 0 descriptor?? [ 2223.365994][T14479] usb 9-1: USB disconnect, device number 58 [ 2223.526512][T18919] netlink: 'syz.5.13281': attribute type 1 has an invalid length. [ 2223.879764][T18926] binder: 18925:18926 ioctl 80489439 80000100 returned -22 [ 2223.889840][T18926] binder: 18925:18926 ioctl c0306201 80000240 returned -11 [ 2224.059863][T18937] 9pnet_virtio: no channels available for device syz [ 2225.033078][T18948] usb usb8: usbfs: process 18948 (syz.0.13289) did not claim interface 0 before use [ 2225.062756][ T40] kauditd_printk_skb: 90 callbacks suppressed [ 2225.062767][ T40] audit: type=1326 audit(2000264213.937:15325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18944 comm="syz.0.13289" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 2225.111661][T18948] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13289'. [ 2225.121290][ T40] audit: type=1326 audit(2000264213.958:15326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18944 comm="syz.0.13289" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 2225.129731][ T40] audit: type=1326 audit(2000264213.958:15327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18944 comm="syz.0.13289" exe="/syz-executor" sig=0 arch=40000003 syscall=384 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 2225.138795][ T40] audit: type=1326 audit(2000264213.958:15328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18944 comm="syz.0.13289" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 2225.145702][ T40] audit: type=1326 audit(2000264213.958:15329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18944 comm="syz.0.13289" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 2225.153112][ T40] audit: type=1326 audit(2000264213.968:15330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18944 comm="syz.0.13289" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 2225.161466][ T40] audit: type=1326 audit(2000264213.968:15331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18944 comm="syz.0.13289" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 2225.168740][ T40] audit: type=1326 audit(2000264213.968:15332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18944 comm="syz.0.13289" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 2225.175776][ T40] audit: type=1326 audit(2000264213.968:15333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18944 comm="syz.0.13289" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 2225.185381][ T40] audit: type=1326 audit(2000264213.968:15334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18944 comm="syz.0.13289" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 2225.243201][T18950] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13290'. [ 2226.430391][T18988] usb usb8: usbfs: process 18988 (syz.4.13299) did not claim interface 0 before use [ 2226.521246][T18988] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13299'. [ 2226.691801][T18996] binder: 18995:18996 ioctl 80489439 80000100 returned -22 [ 2226.702923][T18996] binder_alloc: 18995: binder_alloc_buf, no vma [ 2226.705630][T18996] binder: 18995:18996 ioctl c0306201 80000240 returned -11 [ 2226.980829][T19006] usb usb8: usbfs: process 19006 (syz.0.13304) did not claim interface 0 before use [ 2226.993164][T19006] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13304'. [ 2227.734751][T19030] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13311'. [ 2227.743117][T19027] FAULT_INJECTION: forcing a failure. [ 2227.743117][T19027] name failslab, interval 1, probability 0, space 0, times 0 [ 2227.747639][T19027] CPU: 3 UID: 0 PID: 19027 Comm: syz.0.13310 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 2227.747657][T19027] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2227.747664][T19027] Call Trace: [ 2227.747670][T19027] [ 2227.747675][T19027] dump_stack_lvl+0x16c/0x1f0 [ 2227.747693][T19027] should_fail_ex+0x512/0x640 [ 2227.747711][T19027] should_failslab+0xc2/0x120 [ 2227.747727][T19027] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 2227.747741][T19027] ? getname_flags.part.0+0x4c/0x550 [ 2227.747759][T19027] getname_flags.part.0+0x4c/0x550 [ 2227.747777][T19027] getname_flags+0x93/0xf0 [ 2227.747789][T19027] do_sys_openat2+0xb8/0x1d0 [ 2227.747806][T19027] ? __pfx_do_sys_openat2+0x10/0x10 [ 2227.747823][T19027] ? __fget_files+0x20e/0x3c0 [ 2227.747836][T19027] __ia32_compat_sys_openat+0x16d/0x210 [ 2227.747847][T19027] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 2227.747858][T19027] ? ksys_write+0x1ac/0x250 [ 2227.747871][T19027] ? rcu_is_watching+0x12/0xc0 [ 2227.747884][T19027] __do_fast_syscall_32+0x7c/0x3a0 [ 2227.747899][T19027] do_fast_syscall_32+0x32/0x80 [ 2227.747914][T19027] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2227.747929][T19027] RIP: 0023:0xf7f65579 [ 2227.747937][T19027] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2227.747949][T19027] RSP: 002b:00000000f548655c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 2227.747960][T19027] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000040 [ 2227.747968][T19027] RDX: 0000000000000600 RSI: 0000000000000000 RDI: 0000000000000000 [ 2227.747974][T19027] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2227.747980][T19027] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2227.747987][T19027] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2227.747997][T19027] [ 2227.960928][T19035] binder: 19034:19035 ioctl 80489439 80000100 returned -22 [ 2227.972947][T19035] binder_alloc: 19034: binder_alloc_buf, no vma [ 2227.977213][T19035] binder: 19034:19035 ioctl c0306201 80000240 returned -11 [ 2228.071981][T19041] 9pnet_virtio: no channels available for device syz [ 2228.167703][T19046] usb usb8: usbfs: process 19046 (syz.5.13315) did not claim interface 0 before use [ 2228.253784][T19046] netlink: 40 bytes leftover after parsing attributes in process `syz.5.13315'. [ 2229.023687][T19067] input: syz1 as /devices/virtual/input/input110 [ 2229.062571][T19070] usb usb8: usbfs: process 19070 (syz.5.13320) did not claim interface 0 before use [ 2229.089236][T19070] netlink: 40 bytes leftover after parsing attributes in process `syz.5.13320'. [ 2229.359949][ T841] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 2229.522156][ T841] usb 11-1: Using ep0 maxpacket: 8 [ 2229.537097][ T841] usb 11-1: config 0 has no interfaces? [ 2229.540870][T14668] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 2229.543262][ T841] usb 11-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 2229.547084][ T841] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2229.549748][ T841] usb 11-1: Product: syz [ 2229.551356][ T841] usb 11-1: Manufacturer: syz [ 2229.552937][ T841] usb 11-1: SerialNumber: syz [ 2229.555956][ T841] usb 11-1: config 0 descriptor?? [ 2229.702755][T14668] usb 9-1: Using ep0 maxpacket: 8 [ 2229.706213][T14668] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2229.712660][T14668] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2229.716540][T14668] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2229.719980][T14668] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2229.741315][T14668] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2229.744714][T14668] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2229.769879][ T841] usb 11-1: USB disconnect, device number 6 [ 2229.943518][T14668] usb 9-1: GET_CAPABILITIES returned 0 [ 2229.945368][T14668] usbtmc 9-1:16.0: can't read capabilities [ 2230.134946][ T841] usb 9-1: USB disconnect, device number 59 [ 2230.370040][T19093] usb usb8: usbfs: process 19093 (syz.0.13329) did not claim interface 0 before use [ 2230.380874][ T40] kauditd_printk_skb: 145 callbacks suppressed [ 2230.380885][ T40] audit: type=1326 audit(2000264219.532:15480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19086 comm="syz.0.13329" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 2230.390086][ T40] audit: type=1326 audit(2000264219.532:15481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19086 comm="syz.0.13329" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 2230.396946][ T40] audit: type=1326 audit(2000264219.532:15482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19086 comm="syz.0.13329" exe="/syz-executor" sig=0 arch=40000003 syscall=384 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 2230.403768][ T40] audit: type=1326 audit(2000264219.532:15483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19086 comm="syz.0.13329" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 2230.406312][T19093] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13329'. [ 2230.414067][ T40] audit: type=1326 audit(2000264219.532:15484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19086 comm="syz.0.13329" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 2230.421076][ T40] audit: type=1326 audit(2000264219.532:15485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19086 comm="syz.0.13329" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 2230.428935][ T40] audit: type=1326 audit(2000264219.532:15486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19086 comm="syz.0.13329" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 2230.436075][ T40] audit: type=1326 audit(2000264219.532:15487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19086 comm="syz.0.13329" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 2230.443679][ T40] audit: type=1326 audit(2000264219.532:15488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19086 comm="syz.0.13329" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 2230.450795][ T40] audit: type=1326 audit(2000264219.532:15489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19086 comm="syz.0.13329" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 2230.886034][T19106] 9pnet_virtio: no channels available for device syz [ 2231.528114][T19126] usb usb8: usbfs: process 19126 (syz.6.13341) did not claim interface 0 before use [ 2231.623490][T19128] netlink: 40 bytes leftover after parsing attributes in process `syz.6.13341'. [ 2232.404539][T19144] 9pnet_virtio: no channels available for device syz [ 2232.903904][T19157] block nbd0: server does not support multiple connections per device. [ 2232.907475][T19157] block nbd0: shutting down sockets [ 2232.986783][T19166] input: syz1 as /devices/virtual/input/input111 [ 2233.083319][T19173] binder: 19172:19173 ioctl 80489439 80000100 returned -22 [ 2233.251510][T19182] usb usb8: usbfs: process 19182 (syz.0.13360) did not claim interface 0 before use [ 2233.265727][T19182] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13360'. [ 2233.303663][ T4210] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 2233.446695][ T4210] usb 10-1: Using ep0 maxpacket: 8 [ 2233.450081][ T4210] usb 10-1: config 0 has no interfaces? [ 2233.453802][ T4210] usb 10-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 2233.457072][ T4210] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2233.459953][ T4210] usb 10-1: Product: syz [ 2233.461553][ T4210] usb 10-1: Manufacturer: syz [ 2233.463422][ T4210] usb 10-1: SerialNumber: syz [ 2233.466528][ T4210] usb 10-1: config 0 descriptor?? [ 2233.485182][T19022] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 2233.636797][T19022] usb 9-1: Using ep0 maxpacket: 8 [ 2233.639866][T19022] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2233.643773][T19022] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2233.647628][T19022] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2233.651259][T19022] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2233.655438][T19022] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2233.658527][T19022] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2233.662381][T19186] wg2: entered allmulticast mode [ 2233.666191][T14668] usb 10-1: USB disconnect, device number 17 [ 2233.860304][T19022] usb 9-1: GET_CAPABILITIES returned 0 [ 2233.862588][T19022] usbtmc 9-1:16.0: can't read capabilities [ 2234.055795][T19022] usb 9-1: USB disconnect, device number 60 [ 2234.438703][T19202] binder: 19201:19202 ioctl 80489439 80000100 returned -22 [ 2234.608436][T19211] 9pnet_virtio: no channels available for device syz [ 2234.720536][T19215] usb usb8: usbfs: process 19215 (syz.4.13373) did not claim interface 0 before use [ 2234.742301][T19215] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13373'. [ 2235.355793][T19227] wg2: entered allmulticast mode [ 2235.540147][T19230] binder: 19229:19230 ioctl 80489439 80000100 returned -22 [ 2235.809055][ T4175] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 2236.504123][ T4175] usb 9-1: Using ep0 maxpacket: 8 [ 2236.507300][ T4175] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2236.510757][ T4175] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2236.513927][ T4175] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2236.517014][ T4175] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2236.521136][ T4175] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2236.523988][ T4175] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2236.669721][T19246] FAULT_INJECTION: forcing a failure. [ 2236.669721][T19246] name failslab, interval 1, probability 0, space 0, times 0 [ 2236.674800][T19246] CPU: 2 UID: 0 PID: 19246 Comm: syz.5.13384 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 2236.674819][T19246] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2236.674826][T19246] Call Trace: [ 2236.674830][T19246] [ 2236.674835][T19246] dump_stack_lvl+0x16c/0x1f0 [ 2236.674853][T19246] should_fail_ex+0x512/0x640 [ 2236.674871][T19246] should_failslab+0xc2/0x120 [ 2236.674885][T19246] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 2236.674899][T19246] ? getname_flags.part.0+0x4c/0x550 [ 2236.674919][T19246] getname_flags.part.0+0x4c/0x550 [ 2236.674936][T19246] getname_flags+0x93/0xf0 [ 2236.674948][T19246] do_sys_openat2+0xb8/0x1d0 [ 2236.674967][T19246] ? __pfx_do_sys_openat2+0x10/0x10 [ 2236.674985][T19246] ? __fget_files+0x20e/0x3c0 [ 2236.674998][T19246] __ia32_compat_sys_openat+0x16d/0x210 [ 2236.675009][T19246] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 2236.675019][T19246] ? ksys_write+0x1ac/0x250 [ 2236.675032][T19246] ? rcu_is_watching+0x12/0xc0 [ 2236.675045][T19246] __do_fast_syscall_32+0x7c/0x3a0 [ 2236.675061][T19246] do_fast_syscall_32+0x32/0x80 [ 2236.675076][T19246] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2236.675090][T19246] RIP: 0023:0xf709e579 [ 2236.675099][T19246] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2236.675110][T19246] RSP: 002b:00000000f544c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 2236.675121][T19246] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000 [ 2236.675128][T19246] RDX: 0000000000042f82 RSI: 0000000000000000 RDI: 0000000000000000 [ 2236.675135][T19246] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2236.675141][T19246] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2236.675147][T19246] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2236.675157][T19246] [ 2237.040846][ T4175] usb 9-1: GET_CAPABILITIES returned 0 [ 2237.180643][ T4175] usbtmc 9-1:16.0: can't read capabilities [ 2237.371046][ T4175] usb 9-1: USB disconnect, device number 61 [ 2237.496877][T19257] binder: BINDER_SET_CONTEXT_MGR already set [ 2237.498777][T19257] binder: 19256:19257 ioctl 4018620d 800002c0 returned -16 [ 2237.501360][T19257] binder: 19256:19257 ioctl 80489439 80000100 returned -22 [ 2237.505544][T19257] binder: 19256:19257 ioctl c0306201 80000240 returned -11 [ 2237.739455][T19273] usb usb8: usbfs: process 19273 (syz.5.13390) did not claim interface 0 before use [ 2237.752237][ T40] kauditd_printk_skb: 128 callbacks suppressed [ 2237.752279][ T40] audit: type=1326 audit(2000264227.259:15618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19263 comm="syz.5.13390" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 2237.772768][T19273] netlink: 40 bytes leftover after parsing attributes in process `syz.5.13390'. [ 2237.775218][T19274] usb usb8: usbfs: process 19274 (syz.4.13391) did not claim interface 0 before use [ 2237.775626][ T40] audit: type=1326 audit(2000264227.280:15619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19263 comm="syz.5.13390" exe="/syz-executor" sig=0 arch=40000003 syscall=384 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 2237.785365][ T40] audit: type=1326 audit(2000264227.280:15620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19263 comm="syz.5.13390" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 2237.785524][T19274] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13391'. [ 2237.792354][ T40] audit: type=1326 audit(2000264227.280:15621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19263 comm="syz.5.13390" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 2237.803446][ T40] audit: type=1326 audit(2000264227.280:15622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19263 comm="syz.5.13390" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 2237.811107][ T40] audit: type=1326 audit(2000264227.280:15623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19263 comm="syz.5.13390" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 2237.818911][ T40] audit: type=1326 audit(2000264227.280:15624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19263 comm="syz.5.13390" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 2237.819100][ T841] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 2237.828642][ T40] audit: type=1326 audit(2000264227.280:15625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19263 comm="syz.5.13390" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 2237.835290][ T40] audit: type=1326 audit(2000264227.280:15626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19263 comm="syz.5.13390" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 2237.842402][ T40] audit: type=1326 audit(2000264227.280:15627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19263 comm="syz.5.13390" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 2237.961866][ T841] usb 5-1: Using ep0 maxpacket: 8 [ 2237.964586][ T841] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2237.968216][ T841] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2237.972113][ T841] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2237.975505][ T841] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2237.980011][ T841] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2237.983347][ T841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2238.180955][ T841] usb 5-1: GET_CAPABILITIES returned 0 [ 2238.183448][ T841] usbtmc 5-1:16.0: can't read capabilities [ 2238.378942][ T4175] usb 5-1: USB disconnect, device number 33 [ 2238.454487][T19278] batadv_slave_1: entered promiscuous mode [ 2238.457802][T19278] batadv_slave_1: left promiscuous mode [ 2238.523109][T19286] wg2: entered allmulticast mode [ 2239.035227][T19294] binder: BINDER_SET_CONTEXT_MGR already set [ 2239.037092][T19294] binder: 19293:19294 ioctl 4018620d 800002c0 returned -16 [ 2239.040123][T19294] binder: 19293:19294 ioctl 80489439 80000100 returned -22 [ 2239.044654][T19294] binder: 19293:19294 ioctl c0306201 80000240 returned -11 [ 2239.302692][T19306] usb usb8: usbfs: process 19306 (syz.6.13402) did not claim interface 0 before use [ 2239.367389][T19305] 9pnet_virtio: no channels available for device syz [ 2239.407590][T19307] netlink: 40 bytes leftover after parsing attributes in process `syz.6.13402'. [ 2239.666770][T19022] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 2239.809777][T19022] usb 10-1: Using ep0 maxpacket: 8 [ 2239.812527][T19022] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2239.815931][T19022] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2239.819028][T19022] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2239.822151][T19022] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2239.826163][T19022] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2239.828965][T19022] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2240.031541][T19022] usb 10-1: GET_CAPABILITIES returned 0 [ 2240.033300][T19022] usbtmc 10-1:16.0: can't read capabilities [ 2240.219529][ T4210] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 2240.302174][T19323] binder: BINDER_SET_CONTEXT_MGR already set [ 2240.304089][T19323] binder: 19322:19323 ioctl 4018620d 800002c0 returned -16 [ 2240.307092][T19323] binder: 19322:19323 ioctl 80489439 80000100 returned -22 [ 2240.310737][T19323] binder: 19322:19323 ioctl c0306201 80000240 returned -11 [ 2240.362354][ T4210] usb 11-1: Using ep0 maxpacket: 8 [ 2240.367006][ T4210] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2240.371984][ T4210] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2240.375051][ T4210] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2240.378358][ T4210] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2240.383151][ T4210] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2240.385931][ T4210] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2240.582891][ T4210] usb 11-1: GET_CAPABILITIES returned 0 [ 2240.584560][ T4210] usbtmc 11-1:16.0: can't read capabilities [ 2240.777259][ T4175] usb 11-1: USB disconnect, device number 7 [ 2242.370966][ T4175] usb 10-1: USB disconnect, device number 18 [ 2242.502842][T19345] wg2: entered allmulticast mode [ 2242.668472][T19351] usb usb8: usbfs: process 19351 (syz.0.13416) did not claim interface 0 before use [ 2242.705488][ T40] kauditd_printk_skb: 78 callbacks suppressed [ 2242.705529][ T40] audit: type=1326 audit(2000264232.455:15706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19341 comm="syz.0.13416" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 2242.716740][T19349] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13416'. [ 2242.731505][ T40] audit: type=1326 audit(2000264232.455:15707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19341 comm="syz.0.13416" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 2243.286664][ T40] audit: type=1326 audit(2000264232.466:15708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19341 comm="syz.0.13416" exe="/syz-executor" sig=0 arch=40000003 syscall=384 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 2243.295205][ T40] audit: type=1326 audit(2000264232.466:15709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19341 comm="syz.0.13416" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 2243.316516][ T40] audit: type=1326 audit(2000264232.466:15710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19341 comm="syz.0.13416" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 2243.324967][ T40] audit: type=1326 audit(2000264232.466:15711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19341 comm="syz.0.13416" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 2243.331993][ T40] audit: type=1326 audit(2000264232.466:15712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19341 comm="syz.0.13416" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 2243.340108][ T40] audit: type=1326 audit(2000264232.466:15713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19341 comm="syz.0.13416" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 2243.350384][ T40] audit: type=1326 audit(2000264232.466:15714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19341 comm="syz.0.13416" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 2243.357140][ T40] audit: type=1326 audit(2000264232.466:15715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19341 comm="syz.0.13416" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 2243.446785][T19361] batadv_slave_1: entered promiscuous mode [ 2243.449817][T19361] batadv_slave_1: left promiscuous mode [ 2243.479947][T19364] overlayfs: failed to resolve './file1': -2 [ 2243.544960][T19366] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 2243.601120][ T4175] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 2243.743865][ T4175] usb 5-1: Using ep0 maxpacket: 8 [ 2243.748836][ T4175] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2243.752153][ T4175] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2243.755380][ T4175] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2243.758296][ T4175] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2243.763460][ T4175] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2243.766880][ T4175] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2244.202480][ T4175] usb 5-1: GET_CAPABILITIES returned 0 [ 2244.204740][ T4175] usbtmc 5-1:16.0: can't read capabilities [ 2244.370722][T22285] usb 5-1: USB disconnect, device number 34 [ 2244.894646][T19393] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2244.906343][T19391] usb usb8: usbfs: process 19391 (syz.5.13426) did not claim interface 0 before use [ 2244.952642][T19391] netlink: 40 bytes leftover after parsing attributes in process `syz.5.13426'. [ 2245.518411][T19415] FAULT_INJECTION: forcing a failure. [ 2245.518411][T19415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2245.523875][T19415] CPU: 3 UID: 0 PID: 19415 Comm: syz.4.13434 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 2245.523904][T19415] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2245.523916][T19415] Call Trace: [ 2245.523923][T19415] [ 2245.523932][T19415] dump_stack_lvl+0x16c/0x1f0 [ 2245.523958][T19415] should_fail_ex+0x512/0x640 [ 2245.523983][T19415] _copy_from_user+0x2e/0xd0 [ 2245.524010][T19415] cmsghdr_from_user_compat_to_kern+0x4ec/0x7d0 [ 2245.524038][T19415] ? __pfx_cmsghdr_from_user_compat_to_kern+0x10/0x10 [ 2245.524063][T19415] ____sys_sendmsg+0x488/0xc70 [ 2245.524090][T19415] ? tree_mod_log_rewind+0x930/0xdc0 [ 2245.524117][T19415] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2245.524142][T19415] ? get_compat_msghdr+0x11a/0x170 [ 2245.524165][T19415] ? __pfx__kstrtoull+0x10/0x10 [ 2245.524187][T19415] ___sys_sendmsg+0x134/0x1d0 [ 2245.524210][T19415] ? __pfx____sys_sendmsg+0x10/0x10 [ 2245.524232][T19415] ? __pfx_kstrtouint+0x10/0x10 [ 2245.524257][T19415] ? rcu_is_watching+0x12/0xc0 [ 2245.524284][T19415] __sys_sendmmsg+0x2f9/0x420 [ 2245.524307][T19415] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2245.524328][T19415] ? lock_release+0x201/0x2f0 [ 2245.524354][T19415] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2245.524382][T19415] ? fput+0x9b/0xd0 [ 2245.524406][T19415] ? ksys_write+0x1ac/0x250 [ 2245.524426][T19415] ? __pfx_ksys_write+0x10/0x10 [ 2245.524448][T19415] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 2245.524470][T19415] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 2245.524493][T19415] __do_fast_syscall_32+0x7c/0x3a0 [ 2245.524518][T19415] do_fast_syscall_32+0x32/0x80 [ 2245.524541][T19415] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2245.524563][T19415] RIP: 0023:0xf70ee579 [ 2245.524577][T19415] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2245.524593][T19415] RSP: 002b:00000000f54de55c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 2245.524612][T19415] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080005c40 [ 2245.524624][T19415] RDX: 0000000000000001 RSI: 0000000004001c00 RDI: 0000000000000000 [ 2245.524636][T19415] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2245.524647][T19415] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2245.524658][T19415] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2245.524674][T19415] [ 2245.750751][T19402] BUG: sleeping function called from invalid context at mm/vmalloc.c:3409 [ 2245.753569][T19402] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 19402, name: syz.0.13433 [ 2245.759224][T19402] preempt_count: 1, expected: 0 [ 2245.760855][T19402] RCU nest depth: 0, expected: 0 [ 2245.762613][T19402] INFO: lockdep is turned off. [ 2245.764637][T19402] Preemption disabled at: [ 2245.764645][T19402] [] schedule+0xe0/0x3a0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2245.768339][T19402] CPU: 0 UID: 0 PID: 19402 Comm: syz.0.13433 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 2245.768358][T19402] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2245.768366][T19402] Call Trace: [ 2245.768371][T19402] [ 2245.768376][T19402] dump_stack_lvl+0x16c/0x1f0 [ 2245.768395][T19402] __might_resched+0x3c0/0x5e0 [ 2245.768409][T19402] ? __pfx___might_resched+0x10/0x10 [ 2245.768421][T19402] ? pcpu_block_update+0x562/0x660 [ 2245.768441][T19402] ? pcpu_chunk_relocate+0x126/0x190 [ 2245.768455][T19402] vfree+0x75/0xb50 [ 2245.768474][T19402] ? rcu_is_watching+0x12/0xc0 [ 2245.768487][T19402] ? kfree+0x24f/0x4d0 [ 2245.768499][T19402] ? free_percpu+0x6db/0x13c0 [ 2245.768513][T19402] futex_hash_free+0x98/0xc0 [ 2245.768529][T19402] __mmdrop+0x33f/0x580 [ 2245.768543][T19402] ? rcu_is_watching+0x12/0xc0 [ 2245.768555][T19402] finish_task_switch.isra.0+0x7a4/0xc10 [ 2245.768568][T19402] ? __switch_to+0x7a5/0x11a0 [ 2245.768585][T19402] __schedule+0x1198/0x5de0 [ 2245.768598][T19402] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2245.768613][T19402] ? debug_object_activate+0x2ec/0x4c0 [ 2245.768628][T19402] ? __pfx_debug_object_activate+0x10/0x10 [ 2245.768644][T19402] ? __pfx___schedule+0x10/0x10 [ 2245.768659][T19402] ? schedule+0x2d7/0x3a0 [ 2245.768672][T19402] ? rcu_is_watching+0x12/0xc0 [ 2245.768684][T19402] ? lock_release+0x201/0x2f0 [ 2245.768700][T19402] schedule+0xe7/0x3a0 [ 2245.768713][T19402] do_nanosleep+0x21a/0x570 [ 2245.768725][T19402] ? __pfx_do_nanosleep+0x10/0x10 [ 2245.768737][T19402] ? __asan_memset+0x23/0x50 [ 2245.768749][T19402] ? __hrtimer_setup+0x176/0x280 [ 2245.768769][T19402] hrtimer_nanosleep+0x155/0x380 [ 2245.768781][T19402] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 2245.768795][T19402] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 2245.768814][T19402] ? get_old_timespec32+0xda/0x130 [ 2245.768830][T19402] ? __pfx_get_old_timespec32+0x10/0x10 [ 2245.768846][T19402] common_nsleep+0xa1/0xd0 [ 2245.768862][T19402] __ia32_sys_clock_nanosleep_time32+0x340/0x4f0 [ 2245.768875][T19402] ? __pfx___ia32_sys_clock_nanosleep_time32+0x10/0x10 [ 2245.768893][T19402] ? rcu_is_watching+0x12/0xc0 [ 2245.768907][T19402] __do_fast_syscall_32+0x7c/0x3a0 [ 2245.768925][T19402] do_fast_syscall_32+0x32/0x80 [ 2245.768942][T19402] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2245.768958][T19402] RIP: 0023:0xf7f65579 [ 2245.768968][T19402] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2245.768980][T19402] RSP: 002b:00000000ff925d40 EFLAGS: 00000293 ORIG_RAX: 000000000000010b [ 2245.768993][T19402] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 2245.769000][T19402] RDX: 00000000ff925d74 RSI: 00000000ff925d6c RDI: 00000000ff925d74 [ 2245.769008][T19402] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2245.769016][T19402] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2245.769023][T19402] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2245.769034][T19402] [ 2246.084171][ T1177] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2246.259175][ T1177] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2246.317880][ T1177] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2246.365328][ T1177] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2246.522543][ T1177] bond0 (unregistering): Released all slaves [ 2246.597339][ T1177] tipc: Disabling bearer [ 2246.599196][ T1177] tipc: Left network mode [ 2246.768060][ T1177] hsr_slave_0: left promiscuous mode [ 2246.770165][ T1177] hsr_slave_1: left promiscuous mode [ 2247.176504][ T1177] IPVS: stop unused estimator thread 0... [ 2247.530576][ T1177] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2247.585573][ T1177] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2247.633889][ T1177] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2247.671080][ T1177] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2247.731577][ T1177] bridge_slave_1: left allmulticast mode [ 2247.733423][ T1177] bridge_slave_1: left promiscuous mode [ 2247.735352][ T1177] bridge0: port 2(bridge_slave_1) entered disabled state [ 2247.738134][ T1177] bridge_slave_0: left allmulticast mode [ 2247.739847][ T1177] bridge_slave_0: left promiscuous mode [ 2247.741624][ T1177] bridge0: port 1(bridge_slave_0) entered disabled state [ 2247.745414][ T1177] bridge_slave_1: left allmulticast mode [ 2247.747246][ T1177] bridge_slave_1: left promiscuous mode [ 2247.748993][ T1177] bridge0: port 2(bridge_slave_1) entered disabled state [ 2247.752278][ T1177] bridge_slave_0: left allmulticast mode [ 2247.754304][ T1177] bridge_slave_0: left promiscuous mode [ 2247.756105][ T1177] bridge0: port 1(bridge_slave_0) entered disabled state [ 2247.759410][ T1177] batman_adv: batadv0: Interface deactivated: gretap1 [ 2247.785976][ T1177] batman_adv: batadv0: Removing interface: gretap1 [ 2247.976237][ T1177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2247.979540][ T1177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2247.982838][ T1177] bond0 (unregistering): Released all slaves [ 2247.986648][ T1177] bond1 (unregistering): Released all slaves [ 2248.072801][ T1177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2248.076599][ T1177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2248.080084][ T1177] bond0 (unregistering): Released all slaves [ 2248.179086][ T1177] tipc: Left network mode [ 2248.180743][ T1177] tipc: Left network mode [ 2248.522026][ T1177] hsr_slave_0: left promiscuous mode [ 2248.524474][ T1177] hsr_slave_1: left promiscuous mode [ 2248.526470][ T1177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2248.528984][ T1177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2248.532923][ T1177] hsr_slave_0: left promiscuous mode [ 2248.534924][ T1177] hsr_slave_1: left promiscuous mode [ 2248.536933][ T1177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2248.539230][ T1177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2248.541779][ T1177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2248.544143][ T1177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2248.548399][ T1177] veth1_macvtap: left promiscuous mode [ 2248.550161][ T1177] veth0_macvtap: left promiscuous mode [ 2248.551902][ T1177] veth1_vlan: left promiscuous mode [ 2248.553915][ T1177] veth0_vlan: left promiscuous mode [ 2248.615056][ T1177] team0 (unregistering): Port device team_slave_1 removed [ 2248.624309][ T1177] team0 (unregistering): Port device team_slave_0 removed [ 2248.700676][ T1177] team0 (unregistering): Port device team_slave_1 removed [ 2248.706612][ T1177] team0 (unregistering): Port device team_slave_0 removed [ 2249.371808][ T1177] IPVS: stop unused estimator thread 0... [ 2249.374629][ T1177] IPVS: stop unused estimator thread 0... [ 2255.736717][T19022] sched: DL replenish lagged too much VM DIAGNOSIS: 01:29:04 Registers: info registers vcpu 0 CPU#0 RAX=000000000000006e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85616c45 RDI=ffffffff9b0f8680 RBP=ffffffff9b0f8640 RSP=ffffc90007fdf3f8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=696d6f74615f6e69 R12=0000000000000000 R13=000000000000006e R14=ffffffff9b0f8640 R15=ffffffff85616be0 RIP=ffffffff85616c6f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880974c4000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000034121ff8 CR3=0000000059532000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000064766f4 RBX=0000000000000001 RCX=ffffffff8b908bf9 RDX=ffffed1005666656 RSI=ffffffff8c162c80 RDI=ffffffff8190cd41 RBP=ffffed1003bdf488 RSP=ffffc9000046fdf8 R8 =0000000000000000 R9 =ffffed1005666655 R10=ffff88802b3332ab R11=0000000000000001 R12=0000000000000001 R13=ffff88801defa440 R14=ffffffff90ab7590 R15=0000000000000000 RIP=ffffffff8b90775f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880975c4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000031ef9ff8 CR3=0000000055bdb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=ffff888027319c00 RCX=0000000000000100 RDX=0000000000000001 RSI=0000000000000002 RDI=ffff888027319c02 RBP=dffffc0000000000 RSP=ffffc9000314efc0 R8 =0000000000000001 R9 =ffff88802b43b3d4 R10=ffff888027319c03 R11=0000000000000012 R12=0000000000007b9a R13=0000000000000000 R14=ffff88802b43b3c0 R15=ffffed1004e63380 RIP=ffffffff8b934b38 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f74487bd300 ffffffff 00c00000 GS =0000 ffff8880976c4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055ab7bbaaf40 CR3=0000000049a44000 CR4=00352ef0 DR0=0000040000000000 DR1=000000000000064f DR2=0000000000000006 DR3=0000000000000006 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=e955c277c160b191 9438939d107c0358 e955c277c160b191 9438939d107c0358 e955c277c160b191 9438939d107c0358 e955c277c160b191 9438939d107c0358 ZMM18=170833d98245c74d f6f29e2d116398b4 170833d98245c74d f6f29e2d116398b4 170833d98245c74d f6f29e2d116398b4 170833d98245c74d f6f29e2d116398b4 ZMM19=dc61000000000000 0000000000000004 dc61000000000000 0000000000000003 dc61000000000000 0000000000000002 dc61000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8808000208001408 00060270ea228208 000fffffffff0201 0000000806060168 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ac2008000a800201 c808000288080001 00000008060a016e d40ff08080820488 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000a880302b8c204 84000a8403040400 0a80030288080002 0800040800060070 ZMM24=b6afaf94b6afaf94 b6afaf94b6afaf94 b6afaf94b6afaf94 b6afaf94b6afaf94 b6afaf94b6afaf94 b6afaf94b6afaf94 b6afaf94b6afaf94 b6afaf94b6afaf94 ZMM25=39a9a58c39a9a58c 39a9a58c39a9a58c 39a9a58c39a9a58c 39a9a58c39a9a58c 39a9a58c39a9a58c 39a9a58c39a9a58c 39a9a58c39a9a58c 39a9a58c39a9a58c ZMM26=2a3b06282a3b0628 2a3b06282a3b0628 2a3b06282a3b0628 2a3b06282a3b0628 2a3b06282a3b0628 2a3b06282a3b0628 2a3b06282a3b0628 2a3b06282a3b0628 ZMM27=0e53e5850e53e585 0e53e5850e53e585 0e53e5850e53e585 0e53e5850e53e585 0e53e5850e53e585 0e53e5850e53e585 0e53e5850e53e585 0e53e5850e53e585 ZMM28=000000a00000009f 0000009e0000009d 0000009c0000009b 0000009a00000099 0000009800000097 0000009600000095 0000009400000093 0000009200000091 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=caa10000caa10000 caa10000caa10000 caa10000caa10000 caa10000caa10000 caa10000caa10000 caa10000caa10000 caa10000caa10000 caa10000caa10000 info registers vcpu 3 CPU#3 RAX=00000000023622e4 RBX=0000000000000003 RCX=ffffffff8b908bf9 RDX=ffffed10056a6656 RSI=ffffffff8c162c80 RDI=ffffffff8190cd41 RBP=ffffed1003867000 RSP=ffffc9000048fdf8 R8 =0000000000000000 R9 =ffffed10056a6655 R10=ffff88802b5332ab R11=0000000000000001 R12=0000000000000003 R13=ffff88801c338000 R14=ffffffff90ab7590 R15=0000000000000000 RIP=ffffffff8b90775f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977c4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000005825b99c CR3=0000000066874000 CR4=00352ef0 DR0=0000040000000000 DR1=000000000000064f DR2=0000000000000006 DR3=0000000000000006 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4538138773f04dff dc5fc9739beac06a ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5d92646a2e276261 fcdffddfc2547f7d ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ce2330bf2281d985 db12aaaf12aa3b7b ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6147992e7fca09b7 e08eaa63579f27f0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000004480 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2280c2002515e700 00000000000550ac ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 cb86a80072cab800 800100008de85600 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 67b5f800000550ac 000550ab000550a4 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000550ae 470260000005509d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e813973045c860df d45ed04ef2cf0b1f ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a14c9e3c4c85dbce f6261b15b3cf8aad ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000