last executing test programs: 2m25.352613277s ago: executing program 0 (id=1650): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = io_uring_setup(0x6ecd, &(0x7f0000000240)={0x0, 0x4a00, 0x1, 0x3, 0x185}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 2m25.259153147s ago: executing program 0 (id=1652): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x1e0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpu.max\x00', 0x2, 0x0) io_setup(0x1, &(0x7f0000002500)=0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0xe, r1, &(0x7f0000000000), 0x0, 0x1000}]) 2m25.153337565s ago: executing program 0 (id=1656): ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000180), 0x0, 0x0, 0x0}) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0) prlimit64(0x0, 0x7, &(0x7f00000001c0), 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x200, 0x1, &(0x7f0000000440)=[r1], &(0x7f0000000200), &(0x7f0000000300)=[r2], &(0x7f0000000340)}) 2m25.092477783s ago: executing program 0 (id=1660): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x14) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000080)='./file0\x00') mount$nfs(&(0x7f00000001c0)='./.4\x8e\xc5\x16+\xec\xf6\bP\xca.v%\x05k\xa9\xcb\x00.\xa1\x82\xb5F\x03\xb8\x04\xd6%\x91-a\xb2\xd5\x00\xe5\xa5V8\x16sd@F\r\xb2Y\x8b!r~\xc1\x02\xee,\x93\a\xa2{}h\xaa\xc1e\xc0\x8e\xf4;\x7f\x90\\\'\xc3\r\x9a\x8d\x1d\x86\xff\x03\x973hr\xa3\"w\xf2\xea\xff\xb2\xe3\x9c\x81-\x92\x85\xa4\xf8\'\xc7\x11\xf4\x19\xa0\x1c\x03\x14\xc4P\\\x95h\xb5\x9b\xa3\x1fG5+\x84\xc3(\'\tCA6^)\xa73\xa4|\x04\x84\x03\xadQ\xd1\xf8\xea8\\\x97{F4\xdc\x99)b\xdb.\x9b\xfd2e{#\x8d\xaa\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2000, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) close(r0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x2a05006, 0x0) 2m24.950848887s ago: executing program 0 (id=1665): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000080), 0x10) listen(r0, 0x0) accept4$llc(r0, 0x0, 0x0, 0x0) 2m24.82246465s ago: executing program 0 (id=1668): syz_clone3(0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x2000, 0xa68d7c519f800ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="00000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101101, 0x0) 2m24.699256553s ago: executing program 32 (id=1668): syz_clone3(0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x2000, 0xa68d7c519f800ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="00000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101101, 0x0) 2m8.042458755s ago: executing program 1 (id=1974): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) r1 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000080)={"895c7e00", 0x48, 0x8, 0xfa, 0x0, 0x3, "7b62d701a7ab0802cd8f2da37d83c1", "f9aa5cba", "de14bf4b", "ed5ebc28", ["f5e444ad1da635d736cdc398", "0d9c30505c09ef98b6fac64f", "a0fe649fa598ea2d67ee7d8f", "25e3bf3778db2993ccde71ee"]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140e0000002080002006d797a31000000000500010007000000b90787160bf6b6acf6f6cd4d5032913fdfb7ec246872588548ee9fd5ac9cb880f0080f0c3250b6f699bd2799688b7cbbdce6b0d047ea8f55d7335c57c41664dc9825a20b8c5913cc70c2f4d845c100"/150], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r6, 0x0, 0x0, 0x0, &(0x7f0000000040)) sendmmsg$alg(r5, &(0x7f00000022c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e005", 0x26}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a0", 0xca}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x24000040}], 0x1, 0x40800) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) mkdir(&(0x7f0000000240)='./file1/file1\x00', 0x0) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00\n'], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r7, 0x8b20, &(0x7f0000000000)={'wlan1\x00', @random="c30014016800"}) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904ff81000000fe0000000000000008000f00fd000000", 0x24) 2m7.972721507s ago: executing program 1 (id=1976): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x804c044}, 0x881) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106}}, 0x20) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000140)=0xe6e5, 0x4) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0xcc0}, 0x8) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0xfd87) 2m7.972436826s ago: executing program 1 (id=1977): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e000000000000000000"], 0x80}, 0x1, 0x0, 0x0, 0x40050}, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000180)=ANY=[], 0x0) 2m7.842200337s ago: executing program 1 (id=1979): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x48940, 0x0) acct(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x2) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f00000008c0)=""/31, 0x1f) 2m7.772578485s ago: executing program 1 (id=1981): socket$kcm(0x29, 0x5, 0x0) r0 = syz_io_uring_setup(0x10c, &(0x7f0000000380)={0x0, 0x5885, 0x10, 0x0, 0x2c1}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = syz_io_uring_setup(0x239, &(0x7f0000000400)={0x0, 0x6fbe, 0x10100, 0x0, 0x2e0}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r3, 0x81, 0x0, 0x0, 0x2, 0x1, {0x0, r6}}) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MADVISE={0x19, 0x20, 0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x1, {0x0, r6}}) io_uring_enter(r0, 0x3516, 0x701f, 0x0, 0x0, 0x0) 2m7.662820715s ago: executing program 1 (id=1982): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)={0xc0}, 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000140)="8369b66f", 0x20, 0xffffffd6, 0x0, 0x0) 2m7.568851362s ago: executing program 33 (id=1982): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)={0xc0}, 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000140)="8369b66f", 0x20, 0xffffffd6, 0x0, 0x0) 1m22.782414225s ago: executing program 2 (id=2552): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x5, 0x38, 0x6a, 0x0, 0x8, 0x1, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x17}}, @redirect={0x5, 0x2, 0x0, @multicast1, {0x5, 0x4, 0x3, 0x1f, 0x501, 0x69, 0xff2, 0x48, 0x1, 0xf, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}}, "2b3e2a0daee29c99"}}}}}, 0x0) 1m22.721742421s ago: executing program 2 (id=2553): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000040)={0x14, r6, 0x1, 0x0, 0x0, {0x54}}, 0x14}}, 0x880) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x188, r6, 0x100, 0x70bd28, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x900}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xd}, {0x8, 0x15, 0xd4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x1000}, {0x8, 0x15, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1000}, {0x6, 0x11, 0x3a23}, {0x8, 0x15, 0x3ff}}]}, 0x188}, 0x1, 0x0, 0x0, 0x50}, 0x20004000) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f00000000c0)={0x0, 0xa2, [0x1, 0x497, 0x3ff, 0x5, 0x7, 0x282ffa60]}) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@delchain={0x34, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r7, {}, {0xfff2, 0xffff}, {0xc, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 1m22.581577786s ago: executing program 2 (id=2554): r0 = socket$inet_smc(0x2b, 0x1, 0x0) socket$pppoe(0x18, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r2, &(0x7f00000000c0), 0x2) read(r2, &(0x7f00000001c0)=""/93, 0x5d) socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000002080045000030fffe0000fd06907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=r4, @ANYBLOB="7c0800025ac3d9000000000000000000613ef3a5a11f5ccb8a8eef236da8954b3a8f1ee47347a989a671d8fbb3608abbb2beb889944dcf6958676f2e4bc5fba61b6c81ebb3e2d4b4e74eaf189b15bf1a621cab86122fa00897eb07d3f1843e5fb66b0b0b2a748c4f1ff93c5b6afa86b3019bed33088d1da95b0e3f796c806fe55ed605e88aa351ba97b34846db7f0511a50dc63d5b893835ae153fdd77f304da4cc371011fdf6cc576e4375dc9ff000000000000f4d9844f"], 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000280)=@assoc_value={r6, 0x7fff}, 0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, @broadcast, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x2, 0x2f, 0x3c, 0x63, 0x0, 0x9, 0x6, 0x0, @empty, @broadcast}, @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x6, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4e22, 0x4e22, 0x4, 0x2}}}}}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000380)={0x0, @empty, @multicast2}, &(0x7f00000004c0)=0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0x400, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x3, 0x5}, {0xc, 0x9}, {0xc, 0x2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8d88}]}, 0x34}}, 0x804) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'syz_tun\x00'}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 1m20.161449914s ago: executing program 2 (id=2561): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r0 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') open(&(0x7f0000000200)='./file0\x00', 0x900, 0x8) 1m20.070807874s ago: executing program 2 (id=2565): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x12}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x23d7, 0x7f}}]}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x5c}, 0x1, 0x0, 0x0, 0xf00}, 0x0) 1m19.93594775s ago: executing program 2 (id=2572): getcwd(&(0x7f0000000200)=""/197, 0xc5) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/hci\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000010401390000000000000000000083ff0500010001"], 0x1c}, 0x1, 0x0, 0x0, 0x8840}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r2, &(0x7f0000001440)=""/126, 0x7e, 0x0) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) unshare(0x66020280) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) flock(r4, 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x6, 0x8000, 0x0, @remote, @private0, 0x7, 0x7, 0x1, 0x8}}) bind$can_j1939(r3, &(0x7f0000000140)={0x1d, r5, 0x3, {0x1, 0xff, 0x1}, 0xfd}, 0x18) 1m4.891785183s ago: executing program 34 (id=2572): getcwd(&(0x7f0000000200)=""/197, 0xc5) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/hci\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000010401390000000000000000000083ff0500010001"], 0x1c}, 0x1, 0x0, 0x0, 0x8840}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r2, &(0x7f0000001440)=""/126, 0x7e, 0x0) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) unshare(0x66020280) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) flock(r4, 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x6, 0x8000, 0x0, @remote, @private0, 0x7, 0x7, 0x1, 0x8}}) bind$can_j1939(r3, &(0x7f0000000140)={0x1d, r5, 0x3, {0x1, 0xff, 0x1}, 0xfd}, 0x18) 2.669363053s ago: executing program 5 (id=3814): syz_open_dev$sndctrl(&(0x7f0000001e00), 0x2, 0x40000) socket$inet_smc(0x2b, 0x1, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x200a83, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000600), 0xfec8) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r3, 0x0, r4, 0x0, 0x7, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x1c, r1, 0x1, 0xf0bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x4005804) r5 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0x1) r7 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0xf2cf, 0x10100, 0x0, 0x0, 0x0, r6}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r6, 0x0, 0x0, 0x0, {0x90c0}, 0x1}) io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r11 = openat$cgroup_type(r10, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r11, &(0x7f0000000280), 0x9) r12 = openat$cgroup_procs(r10, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r12, &(0x7f0000000c40), 0x12) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r14 = openat$cgroup_ro(r13, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r14, &(0x7f0000000200)=0x1, 0x12) 1.840551909s ago: executing program 5 (id=3823): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000001040)={0xfc, {"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", 0x103e}}, 0x1006) 1.761411254s ago: executing program 5 (id=3824): r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x15e, 0x800) syz_usb_disconnect(0xffffffffffffffff) ioctl$HIDIOCGRDESC(r0, 0x4004480d, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r1, 0x3b86, &(0x7f0000000100)={0x18, r3, 0x200, 0x1}) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f0000000200)={0xc, r2}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r1, 0x3b70, &(0x7f0000000000)={0xe1}) 1.43133194s ago: executing program 3 (id=3826): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip_mr_cache\x00') sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3", 0x99, 0xc001, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000006000000000000000005"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000100)=""/120, 0x78}, {&(0x7f0000001a80)=""/4106, 0x100a}, {&(0x7f0000000180)=""/167, 0xa7}, {&(0x7f0000000400)=""/141, 0x8d}, {&(0x7f0000000040)=""/36, 0x24}], 0x5, 0x4, 0x8000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000180)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000200)={0x60, 0x1, &(0x7f0000245000/0x2000)=nil, &(0x7f0000994000/0x2000)=nil, 0xb, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x9}) socket$netlink(0x10, 0x3, 0x2) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000100)={0xf1e5b317, 0x800000, 0x0, 0xfffffffc, 0x40001000}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 1.000697148s ago: executing program 6 (id=3834): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000080)={r3, 0x8}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000200)={r3, 0x1}, &(0x7f0000000100)=0x8) close(r0) socket$kcm(0x2, 0x2, 0x73) setsockopt$sock_attach_bpf(r0, 0x0, 0x4, 0x0, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x3700, 0x0) read$FUSE(r4, &(0x7f0000000340)={0x2020}, 0x2020) ioctl$KVM_GET_NESTED_STATE(r4, 0xc080aebe, &(0x7f0000000380)={{0x2, 0x0, 0x80, {0x3000, 0xeeee8000, 0x1}}, "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", "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"}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG(r7, 0x4048ae9b, &(0x7f0000000240)={0x20001, 0x0, [0x1, 0x3, 0xe8f, 0x7, 0x100, 0x6, 0x0, 0x10]}) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000100)="660fc7b5f3ffffff0fc73f47c44111f5c10c0cb8ab000f00d00f01cb66470fc7b60400000048b88bc00000000000000f23d80f21f835800000c00f23f848b8af890000000000000f23d00f21f835100000020f23218d8db86d2c6d2cfe6f1e", 0x5f}], 0x1, 0x1f, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x4e22, @dev}, 0x10, 0x0}, 0x400c080) 998.606423ms ago: executing program 5 (id=3836): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x6) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGL2CALL(r3, 0x89e5, &(0x7f0000000080)=@netrom) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f00000002800000129487a71fe2c251244961f2a74ac35ff5fc62c141dd3649af9d1587d741f8369d27d6c3d109bfffb92d594b3545a0b324afce706f475d4ba881b7b461e65f7559bc24ddab6dfe6e8367199f488cdec853a9ad59469711e7b6c43651c0a7cf3320f011c70c791b5ecce969d7f7f04fd3e4e847b388fae051f00100000000c9ea7ebbaab6da2e0f06e959ed9e201e263e1872f8958a78b94a1679cd93a5a20cbb5fad955333d21f6b", 0xd4}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_DRAIN(r4, 0x4144, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) connect$inet(r5, &(0x7f0000000380)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) close(r5) r6 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x169101, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000000180)) ioctl$VIDIOC_S_OUTPUT(r6, 0xc004562f, &(0x7f0000000000)=0x5) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r4, 0xc0884123, &(0x7f0000000300)={0x1, "244689261a3365eb47c14247a532ccbd3bf3b29282987c7cc1651cb50800000000000000fbd3abdf52848f78413bf8bf70c05fc6c43edcdaa8e7db0700", {0x8000000002, 0x1ff}}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r4, 0xc0984124, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ad0b19196c79eb5}) 861.086878ms ago: executing program 4 (id=3837): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x1a8, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x178, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0xd4, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xa}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x32}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4}]}, {0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x80000001}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5a}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x81}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x5b}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x49b}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x84}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x3}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x3}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0xa, 0xa, 0x4, 0xe, 0xc, 0xc, 0xa, 0x5, 0x2, 0xe, 0x6, 0xd, 0x5, 0xc, 0x10, 0x3], 0x1, [0xfae8, 0xfff7, 0x6, 0xa, 0x9, 0x200, 0x0, 0x8, 0x6, 0x8d79, 0x7, 0x0, 0x840c, 0xef, 0xb, 0x8], [0x4, 0x6, 0x7ff, 0x4, 0x9, 0xc, 0x6, 0x8001, 0x4, 0x58, 0x1, 0x8000, 0x5, 0x1, 0x3ff, 0x56]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x5}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x410c}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x6}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x7}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x10001}]}}]}, 0x1a8}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=@newtfilter={0x8c, 0x2c, 0xd2b, 0x70bd29, 0x35dfdbfb, {0x0, 0x0, 0x0, r2, {0x6}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x60, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_SEL={0x54, 0x5, {0x0, 0x9, 0x4, 0x9e, 0x8, 0x0, 0x4, 0x5, [{0x6, 0xfffffff8, 0x2, 0xffff}, {0x6, 0xfffff801, 0x1000, 0x6}, {0x0, 0x20000000, 0x8, 0x1a15}, {0x9, 0x8, 0xb, 0x4}]}}]}}]}, 0x8c}}, 0x24040084) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x2f, @local, 0x4e20, 0x4, 'sh\x00', 0x22, 0x8, 0x2c}, 0x2c) socket(0x10, 0x803, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x1a8, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x178, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0xd4, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xa}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x32}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4}]}, {0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x80000001}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5a}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x81}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x5b}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x49b}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x84}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x3}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x3}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0xa, 0xa, 0x4, 0xe, 0xc, 0xc, 0xa, 0x5, 0x2, 0xe, 0x6, 0xd, 0x5, 0xc, 0x10, 0x3], 0x1, [0xfae8, 0xfff7, 0x6, 0xa, 0x9, 0x200, 0x0, 0x8, 0x6, 0x8d79, 0x7, 0x0, 0x840c, 0xef, 0xb, 0x8], [0x4, 0x6, 0x7ff, 0x4, 0x9, 0xc, 0x6, 0x8001, 0x4, 0x58, 0x1, 0x8000, 0x5, 0x1, 0x3ff, 0x56]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x5}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x410c}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x6}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x7}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x10001}]}}]}, 0x1a8}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=@newtfilter={0x8c, 0x2c, 0xd2b, 0x70bd29, 0x35dfdbfb, {0x0, 0x0, 0x0, r2, {0x6}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x60, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_SEL={0x54, 0x5, {0x0, 0x9, 0x4, 0x9e, 0x8, 0x0, 0x4, 0x5, [{0x6, 0xfffffff8, 0x2, 0xffff}, {0x6, 0xfffff801, 0x1000, 0x6}, {0x0, 0x20000000, 0x8, 0x1a15}, {0x9, 0x8, 0xb, 0x4}]}}]}}]}, 0x8c}}, 0x24040084) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x2f, @local, 0x4e20, 0x4, 'sh\x00', 0x22, 0x8, 0x2c}, 0x2c) (async) 811.794351ms ago: executing program 4 (id=3838): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x4fed0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) userfaultfd(0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000004100)={0x2020}, 0x2020) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 810.552476ms ago: executing program 6 (id=3839): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'nr0\x00', 0x1}) write$UHID_INPUT(r1, &(0x7f0000002080)={0x8, {"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", 0x1000}}, 0x1006) write$UHID_INPUT(r0, &(0x7f0000001040)={0xfc, {"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", 0x103e}}, 0x1006) 810.385762ms ago: executing program 4 (id=3840): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r1}, 0x10) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000200)="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") r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, 0x18, 0x229, 0x0, 0x0, {0x2}, [@nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @ipv4=@broadcast}]}]}, 0x20}}, 0x0) 696.392182ms ago: executing program 4 (id=3841): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@weak_binder={0x77622a85, 0xa, 0x1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (fail_nth: 6) 694.242796ms ago: executing program 5 (id=3842): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) syz_usbip_server_init(0x1) r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={"20faff48", 0x2, 0x24, 0xff, 0xa9, 0x203c, "f700e7ff00000000e200", '\x00\x00\a\x00', "f800", "fcffffff", ["f8ff03000000000000008000", "808e88e2e9ffffffffff00", "00040000007600f466648800", "ff81000000000300"]}) setrlimit(0x8, &(0x7f0000000000)) syz_usbip_server_init(0x1) syz_usbip_server_init(0x0) syz_usbip_server_init(0x1) syz_usbip_server_init(0x5) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="480000001000010027bd7000fbd9dfa500000000", @ANYRES32, @ANYBLOB="104e0600d5ba2259280012800900010076657468000000001800028014000100000000000206e9b43d"], 0x7c}, 0x1, 0x0, 0x0, 0x404c000}, 0x2) syz_usbip_server_init(0x3) r2 = syz_io_uring_setup(0x42e6, &(0x7f0000000200)={0x0, 0x5eda, 0x0, 0x4, 0x25d}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffdbdf250200000002000005000000000500130001"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x8080) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x1c70, 0x0, 0x40, 0x0, 0x0) 621.103857ms ago: executing program 4 (id=3843): timer_create(0x0, &(0x7f0000000140)={0x0, 0x2d, 0x2, @thr={&(0x7f0000000000)="195d748341322d756dc4b1352f98d83ab54ffb5ce332b9bc20b2be7a47f331f813e7851911c0af7f57b2fc191199cffe7e7d700642b136c47b17597ac00304bf31e3be91230df433029c4051457c6fb9743a17e0c259718e68bccdfca2be2141078dc1e4f5f3810d00c25abf9d45e270bd49d6b4bfcd0fa39279d8b5175d979c0826109feb7108d47d5a55e77f70e7def812652f07586fa58f4147b677085fbfdd9749892ce0a12f590991d37c547c0a5cd287c98985c8089ea0fddedeb3cc0b269d89c525b534", &(0x7f0000000100)="cc2aab46fb42c7b46f318f7ed5ee5b5a1fed8ed5ca47"}}, &(0x7f0000000180)=0x0) (async) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000200)={{r1, r2+60000000}}, 0x0) (async) clock_gettime(0x5, &(0x7f0000000240)) (async) timer_create(0x2, &(0x7f0000000280)={0x0, 0xd, 0x2}, &(0x7f00000002c0)=0x0) timer_delete(r3) (async) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) (async) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r3, 0x1, &(0x7f0000000380)={{r4, r5+10000000}, {r6, r7+60000000}}, &(0x7f00000003c0)) (async) r8 = socket$unix(0x1, 0x5, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000400)={0x7, r8, 0xc, {0xd, 0x3fe}, 0x7f}, 0x1) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000480)={{r9, r10+10000000}, {0x77359400}}, &(0x7f00000004c0)) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0, 0x142) (async) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='io\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001780)={r12, 0x0, 0xdb, 0x75, &(0x7f0000000580)="2accc6acf3d10f1ebb430025b297cbe887580fc606383196272d61d92761f7d7672588cdf7410bb44e236cd639e303367a8bd7407a9b376ccc39478d499f18a96ed27bd0631ec8d4b171fe11284e87eb864c6a44f3e9ab4f513faed4e3a13bcc0f8296b60fc76460d959fb813354b763733fd7876e01d766bfe03abd2f0bd19d550e41411eec30ed74a68b34cf17909b0f380461d1387d9fa135e28b81c1cc43a224688cc24797ac8650c61b211dfff3fb457b240c9381d532d39b688bb7c3134fbda78152be2d777cfd8bb803afa071a7fd3b858edb0e6388f07e", &(0x7f0000000680)=""/117, 0x2, 0x0, 0x59, 0x1000, &(0x7f0000000700)="7d320f07bead079d4385b5325ff3df88beee0a6def51cd5917397924353b8d5e3016cc829b0e34d9f3349c5b2f68c0cdb1dddd8407b2737cc0dc0865108960f7cfdc099d1f23fd16b7a576c81a47cff72311e5bf75fc4983ee", &(0x7f0000000780)="549acf82b7ddb3183f9fafce2002de780a11abd53fdc1030dca871d8b4cb277bc34e85bc27a4ce490ba76b6ac452d88b34560ca54214a564221fbc1adc18a77ced5498ac1d6202a7ee2d609a507343699b600c7b06b7bc4e165f69c8c8e8e940b83feff3a294bc8647a904b85079e7661f8ee8c81946602b79d36e5fb0fdd60ec113272cb54dc5cdb2432b27757ad0598d5d7ee4b9e42fb51c325ed8d61d7316aeffdd4b9d30df6bf3ce1a067bfdbf53f03373b5cc69cb648867d730adb032d66daf126890923d38b02e23e9ea494d07322e84728381198035df9ca91c72997778c484558c37a0c673bf25992ce3053d9450f4f936d81c3934b724d1952589524e2844bafdd1cf54ce3df17607dfdb22ac61856ae08004883638d08af9edc98a6bdb21c99083dc36e37473595f0cdbee82fc801be45505a8706d9f42d1e9daa6827662c0f466807c9e0522f29568efe7f6898c057957a98ff18d460a0922ee13cdba29e02c77b6cd7665e7554e15522d34a1ea3f45e1439169e9e4d0c8d3109d76e6f349a17241e15ece8ad1d3efd45d7dc2eb8eeb958883fdbd15c87d83bb12787a8e6b595f70648434c3fae80f21d4e8e77d7cecd3126aedb49b5da9a0664c1637ca1f3b1d30e685a667cb2bf22b57e30031e79b642ea6c468f23639a8f1ce5af15cfbef800cd184e4800e5019ae1e0554d2e7dd7db67697e890aa7f8b858524c0a9712c46dfdbe63b5567564a57e8452eb102a9083ebea59b9708af8104115e3ac0b681ac029f966a11c3bf9649f9f22ca9d2a66e07e4e856f033366872eb77e3f44ff7eef224cb6d8357e848b1f5ed526d85d2d925f579e789119b18c74382c60b43e22c70e92fa05c660de79bf925788f69bd3da89275e73d9b207691167bb95e12e3142a4e38d454a823a05e44f4838c365d46d763001be967e97b6cc1b1156f09f0ee3d77b05e58653bc0ed577384f5942315ad87c4eefc8ce2d150d914d7da1f11a9595a14f16debd7900785dafeffe3659b48a9baf30617c80101ed6b0a2ce6356132e0eaef9068b00a027e2cd9d515e01f352904e3bc572cc3305d1de2a07018bde9a945b1ef0ca83edf75b9987676daf7aa6842be6b02178921c59858964294e741efedc8858151fc89363fe2ac43379b2d387f33142e35580ec1bd7781350a46347aa40eef1c173ba5063b6cdd2b27142727dbef3e187c719a001e310c6b56a12ef4336a5d90f1763b73a50831ebc4e7b4a621ff2b5654d77207d5464220ec9a738b07e9419ca8fc651413fbd54367e9bc9abbd8172692fd47e1bb5644809cddc27569230e7ecfd863634a3e1be8609a7e2f05f66961882ad4bb119d65220cd9e224ecac434ba234fe847bff172000543ac343f8c236bee72e7d6bcd48a056a77da67845c4d9069c5f7eb05698187cbde42f9dffb80dec6c1d7af8ba442e755083ba5dc8dda4664d9818449a5f8d432a28d65ee00f98ac0e8af5ad84b7b1930ade2f0ea98996f442e004c5c94032a7c28d0557dfffbf2943cbe3279cdd9bc4436db21d00426448e4761316905e5eb3c1bdcc6334b96ea79dc1cac7e5de097107ef0e6230569563d459e02ed034b6749560d390ca720d12f58799ad65beb298c6864b1133c2eaec9dd064337e19e88ef37f5ce2f71d77051ae7ddf7074acd315a0d87073f2fff6e44f3343329dc165ac2d33b5df234a996971be5295682fd15d183add0615d76492323fa34a007225fb56c580b2a4864c2334b7a3eda11fa342aa3739897a1e5d71d2c2300f703a5e62d0b7ec161acae54735e10941f5f8907ba35958ef665f4ced9c391feee4e684322d748a85a54bf75b627acf01fba71369d853cc8cccbe629b49365f3ac671d4ddbb4982314c05297f6304c0ff2af7594d9a378f5e848afc92bc1f7bcfdb2bebafa6c7195d9576e28784194f6b601771b9c6b027d524061ad86127a623d5cb8001b7031cdce336e1e8499f139c512c89db6844d9c164bc40a9b2cc77b5aa9f54ec6ff067f2562f843fa5e8edbb4b4242fc36e236bd21334b3aa212349d53272e15981e9764657ac7109441266409533b888b607a5bb83261fd10ac0ee5b4246e4ca78a5acfbb8b14ebb2af94176c1f3bdd34173414dc7f06027485e75131d79e3f1c45f4bb0be33e31efee7794477a083a9a375a1d0df7c86b8d6a94eaf08c02385e93a8cf757ed1ea395d42e64105b422646c4f4eca6f6f4743ba2ac0840bac67161c8358b028ace5732ff323b4dbec4ca822cdde7eec7eff675e0a2a80b2c3378084178adf5341ce7a5bab1012b270e3eb4ca39737ebebcc091852f564444a24473c9e28ceaed6f387cc0fe1aefefc3de4a7edb576427b1ff895fbb79f8ba8b2bbbdc2d9cd57507d57e546359f56d39bb781c07c289aadcb90e751e3a1268e5ec8fd1572441bbd17475e90927dea47ad067e41acddbba80caea73e39af609c8195c47d117c8961ca66bb826ac0edb0d6b1689d96fe6a54e1f205e775a5f4fe73c30236b5ec5cc0a47043f65c0e04ed4f178cc9e7bb02c78d7533110565bd26257e40068d6797614a29effffd0ad1e91a732b99bea6ea111429dc97535867010ae7f52ee3c50682a3fee797cbd0275e569e4f960d770d9a7fa7a33f736e134ebd049448e8a95433b4d0709ff013112e6680e9737dda1c40edf78a4a800696f49e6865d248e32f474e36d82a5e9c77ae227803c96ae7314a1039d6f6d66373dcb78776e939ca9fc1ee14b98516aee8c932ea3b1c5754c9fa1c9cd3b511517b068a62c0df65f31b2221d4e052c1fb22e0450ee0d239886ee42e4efd72765e0dfbfea0234b24d3bfa3f1abc2338f56393bf4d66f95d1ddcd231486de613d0a25ca10c7296af3b6729a0adadfc122c7f8e1356609bf67f9378762c6b4e149833c2a756dbee13f5282136bce9b972a689145a195e89bbecfc99481f638c5b421792e9094cdfb5549cbc5d3c3cde3f362944435222c0a0b52db090729d648d9937e666a9c830aa1f0a53f8a5e2f4786fd665dd8e46ea146d061cfb11f656b908c15497cfa29a8e8ecbc067a3b3a608b85cab9690aa7a49cb852769af85198ae5a48dec43f0b6c79838416bd403d0abba24fc074da45455816499f393c1ed415d9622059c6f1b5ebbaa688647837e3d7d3c26ee1c706680741ded72b4a37d5c70645472781ad1990e85f626bea4eef11654a4be0a68dd8c1775ecf9c879779c31b0eebe7b2a94953392e3a8b09dd140083edb171928795939e544e3ae23cc372494647ba228b8c0373a64ecec157476f33cad920f3bf5bbeeb0a9ec2030cc5368af522db6602fa18482193fb3d78938691d24fe0093264e9bf9eadb7d9ab3399e86118173758d1f658138f895b203246de80cd8de7666ac5a4c832b4bd7f34bd34139bcc18faec18ee41abe9911f627662753fbc9893e85fc30dd02046c29dc8f286c5a15e399b79a33b066572902d78d5a89f7d03d518d3872df3be607fa078def10cc509233deebc59fe6fb9cc1ef726f7c8a1333a6f9ff7fb847feeb2b7fa7ed860d757a95f5b36991d0e036496724eb467bf3b5b07f0c2227fac42e11542953201c3578fc7a361393ce4461cbe28bbd431c622cef0ae1d233ad75eceee658b9a68243271ed88aeb086231b44fece95399b56aaf4c5047257d48dcc33cd957d2fc979444ed43f7e9f0c3a94469c2b6fc6fa094b0bd4d7d57b361ad9aea5adac5bf3070964261b6c49998897aace0b82d9967e10f6b0cb3def86463e3c79b572f9062b3cd895cd47c823f15044999d4e89b521a4b4a9abe272c3921256c383ff8105c48a93e9221b88d193ee3ab5f05d46cbf7cd6844ee44ac42304bcb69c0f73c033c001e770988b6b841ddb7f69def2cc9e133ba6a1e508c0b0dd5255cab1c7074c2daec135c4bfe65bfba5f4e4db538317b8f0c4607bdad24156f9c02e0bb2d78a6baa7c49b74d8efbfd94dacc79255b6dc189ce7edecf07268f32a22879adc2df8c7e8baab449597a30f4296c237fa8c3f3aaa893f6785ebc05ae10bf503dc612cf3b495ad63d4c3cedcab5522efb90060071d005b8e4e2b93d20e09a72a5bbebca2945f0e0610064ff7edbf398b6dcd959eaf07b47faa748bb55b2d1741da93c8f9ad0a24717cae479d859bad705c29f9da988780d7e68a36fe158b248271652b24aeccf1cd767e011ab5ed55663f610ef6ef7d98c0c940bb4f21d4ae61655e0340af6e9d01c4259d607e024841b4c9fa927ae42bc1bb7b65c102653aa17ae8e2ec1fd348500c75ac1d479bcf104c3d1d56b33be65a1c2ebc82481840c48ad98fa51a75e942b412a6a59d14d8994a9a8c7bd37b4bb97897503f79b67bb89f2ac00f467ba437db602c351221598f638d61232778a296d9158665c74d059a98c1d3d88a05cfc88493ef24f1634ab97b9bac77fbb567dfd37106aff1fdfa64e17c57ffceb06184cb2271a08036c57b6c21d18b93327c3130f7550ee6533ad3f38200077c37a67505cd8fc0b419b250ed213ecdbea17c8c460a7a8b5b1b08dd49c56e38bec8061fd4111e7d8a40faeb8c8ab0270986a27d039147afc06389a159467a732d0ae9d25a41d8661d3d678807e37efa017a9c7c881a63c9da33854147dff6c338383be3f5bccbba5aafb3c4669c9d9795bbb5cb239e9802d0db9b401600b7a13fe5576f3bb01ce7484875879072a6f7ea08ca9584f46e621f5e0c14ac769a9af2dd040261ba75082617959882805e8a6954dc3042e9455191bd3dc9f426585d4683c4a10c98cfd5b404f23dcc0440d02e91b37cfc9a038b37d21e78222256444c872a40cf935a444cb980402bcd94f4e7bcad52073425abd317c191a954e9ca364e8711d8e3f6a795a88b255022bcba90bb9f2c50c62870dca92d9eb20a24f3536c05514014e715e08e0ac1eda9dc8b490a56444b67f32c87317b469a492d4486178cc2734389355f09fee76eeed5197ad17a8456e6073383348f321bc0ed1c0435ec092adfa7f96587b3e16b41ba9f5ab910127e2cbae1357f22352991c14c6487892c3924b94de03631cab12507a71ec8b610bfe70f4ecbe6a9eae593c35656870a9ecb1254dc7457afb0de9719058f1eaebf7dd78b877d60c90081656c6e5db1b4d8a5ff068cfd50cd7a07018d1b892cedd0cfb91b07fdf4d98d175bb96b5617d4778fa34f9090007b6902ae9e29cf984092d81fc2c40ac8722f7afbccdb708be488c2336937cd3c97251f0a881132e8e560275f59bde4ab4323e7240b46b0508413c04ffb19d42752993a6e7210a8bb4be8d256b4d913daf2ec3e45a99b4bba9f1176bd1873534cacd7687bc4c086f258bdb9d8426f9899dde2797ef6514111567051e6b6bb4d45856c635a9eabcd80c23213a55af3047e54fda6d98a695750d8e4338c9a3522306abebfe9b8dac306f48ccd80d479b179d78b012b9824a1f8ab1052884d1c7c237eb1ce549dd4c0e30382a93eec3f000998f790c55a414dbaf2946c4981d62731252fad1f0cf22a037cd8773df1e75888a0e37abea2bd00e09c1990eca05350638c6a0fce43a36420ad696bee055efeac2517dfad498106c39ab25d4d27f8eb905104bfc97636304cbc376207850af4faf69b5b7757de94f789e1f8e7350db2e6d90f38380429d863dd70bdc3cb32fbf29f84cb80a2cea7d2fc0b7c2cab0192941b1eb9c33a8147e91c96559c68fb9b24ee463c52360b0f0e0421a1b08fd81813bf2e052629870cd04da7468a5783646ad44766884de207c2d21246fabb4b810", 0x4, 0x0, 0x2}, 0x50) (async) io_setup(0x8, &(0x7f0000001800)=0x0) io_getevents(r13, 0x8, 0x5, &(0x7f0000001840)=[{}, {}, {}, {}, {}], &(0x7f0000001900)={0x77359400}) r14 = signalfd(r8, &(0x7f0000001c00)={[0x10000]}, 0x8) (async) r15 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001d80), 0x16a83, 0x0) io_submit(r13, 0x6, &(0x7f0000001e80)=[&(0x7f0000001a40)={0x0, 0x0, 0x0, 0x6, 0x1, r11, &(0x7f0000001940)="08bd21d8a4362088265c185b6f14c00902b6c49fa4e61fdd314aa3a7ebf688bc0ca89b69e5cf3bee8a2d89fa5731889e8c4a559a4a0d26a1c37d3e7e51552266884726bb264fdacd892e10b82d859ab13ff23029c73f06ae1a35a31bceb6d23fd546b43675ba23359ba6256e875d42b3ee0a5da04c3960a76aeab0d3c61ded9bed42628325a0d50c46378e3f46e2b710b7e74735b47a642006cd9e790f40df741a43bbac7041ea5e8a8f6ad43aba4690bd3cf1673fb8e88311e908e02df1bd174aa1c6e1384ef70ccadb5314afd934012b65", 0xd2, 0x7}, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x2, 0xb8, r12, &(0x7f0000001a80)="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", 0xfd, 0xc, 0x0, 0x2, r12}, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x8, 0x5, r12, &(0x7f0000001bc0)="6b93b5e41f61053ed052dddad3b8f4ad2a3ad245722cdbd902dfd92f5433ec8372db282796c63b9cfc9a69e6e53cf392dbe344e5102f", 0x36, 0x0, 0x0, 0x1, r14}, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x3, 0x1, r11, &(0x7f0000001c80)="312e1645c3e13e2558a66a91a24bbe5f88170e70d739f975494c40d2b9a4c6ad1259b862c7a8e17a9ae8b48d7817b11c90bcddf5cd55181a06bf2292235af262db80789fc8f2959bb0e294f7d7a56b1a9e77b26c7ad2bf06dcf9", 0x5a, 0x6, 0x0, 0x1}, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x7, 0x40, r8, &(0x7f0000001d40)="6fa29a0a2ac994821de5e1f59379ed68a23c3053b48b6d922c1c2eae68f5e35cc911bea765be546330a4bc27f6087f0ef8268c809c1460b6ad2993", 0x3b, 0x5, 0x0, 0x2, r15}, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x8, 0x0, r11, &(0x7f0000001e00)="5474dd2d92ca0887c307ad1cf0045350eeaae093bf98199bbc29c47cc323175d8da2", 0x22, 0x5, 0x0, 0x2, r12}]) r16 = getpid() (async) r17 = getpgrp(0x0) sendmsg$nl_generic(r14, &(0x7f0000002240)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002200)={&(0x7f0000001f00)={0x2c8, 0x2a, 0x724, 0x70bd2b, 0x25dfdbfc, {0x18}, [@nested={0xf4, 0x2, 0x0, 0x1, [@nested={0x4, 0x4f}, @typed={0x8, 0x5a, 0x0, 0x0, @pid=r16}, @generic="efef878dfd6d6df4a0da4bf4bab5c1d1dd1c91f5b436e66356e8783cf29e338aa208905441a26535f1f4e89b6c325d459a94d468cc950b9931c85782e918527039e0bdddee2c65e428eefc45818a3ac3cad24a9eeada13b5f69eb5cbec3ae8e94b6469b430582212a2fab8ef9139f16fbeddb014bc3462e53044c46c7ccf9bf1aa0dfe7fafb4f063e29c4bb7f9493ab348bb8a9eeecb61f55a2ba7893021e6a997cd4c91e519e918a09e8de84c6000ed7200839ce826d9362b4a11baaa2d2f117e3afced61cc728c8f10903955ccfa17f27698b92b83ea52fc62cbb77db51c514320b710"]}, @typed={0x8, 0xf8, 0x0, 0x0, @ipv4=@private=0xa010100}, @nested={0x26, 0xc9, 0x0, 0x1, [@nested={0x4, 0x5c}, @generic="698b5bc39c9f8d9dcb7969c85169", @typed={0x8, 0x6a, 0x0, 0x0, @ipv4=@private=0xa010102}, @typed={0x8, 0x142, 0x0, 0x0, @u32=0xfffffff9}]}, @generic="26a5404978b8efb6037bac02f989a5aa6f14c77a6fad574b943ee309ce8aa0c6aab6d70ce94d7d9892cc9a9b18c2ff1e1c2fe73644f03db26a7046c937735c8ae11135c4badad1ef124e6ab2854e1bf6188ebfda1263338a8a7c2b396f891c470833870e1eba22c16f12abb3212762959668500440c2ef2e7c7ce57250c6073b7f27f05228dbc8", @generic="80d508b0ed5e5f6bc5a65c232ed723be389bd90338bb6f1007", @generic="e17852ca87c28655659a9b9f63934923fb6c1b05c9534175938fe60f5e293d05f8dfec27c898699045459deea66969282d853899f59a3461ba6638a51dc28dcce91fe44884e12d73902e8a6fe8a184d29905fb353cf460974fbf4528de55c9437abbe3587c3ba10a168e65b28a2f390046ec23716f4cdc447d605f30e6a49700a30c827aa139f147c69264dd4179147aa1be3bf8018b", @nested={0x20, 0x20, 0x0, 0x1, [@typed={0x14, 0x10e, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}, @typed={0x8, 0x139, 0x0, 0x0, @pid=r17}]}, @typed={0x8, 0xa8, 0x0, 0x0, @ipv4=@multicast2}, @nested={0x2f, 0xef, 0x0, 0x1, [@generic="5b7753197c62725368e7a7991e0e61e7c21da385b392c7818c69dc55b99ff30928c6913be32861", @nested={0x4, 0x142}]}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x40488c0}, 0x8000) (async) syz_emit_ethernet(0x1015, &(0x7f0000002280)={@broadcast, @random="59ef265190f5", @val={@void, {0x8100, 0x4, 0x1, 0x1}}, {@x25={0x805, {0x1, 0x9, 0xf7, "ec69e149d9c8f9380df0013c5cc38bce255cdde966f7a4450985ad32303111c3e916161507313faffebcb7d39485e761fdbd171debe27dfa27942ebc3ac8792c1b472b04b148cdc13804a8965b48a700ab78eb00be5afc0720ef21021eb42e3e10adf83423b6be1cff1fa4411ca9a89a89139f149540dfd37630176dc6bdcc01b18e4a80756774307195724c99cebe231be3c8949d6463d85915cb98d93def0450c3a9d4194a9fcd9783fc3c6178678dbba58daf65ad684ab82dd71c732c35bc0896582906d73f63bc0ed9051740bec5f536ba8848237ab4f7c4bc2ed01e6d1406be89c1f0f388b88d26817caf3f114b321e648d1660254fdc5d5592f0487bb3168df106badf8f423a78c747496d19696da7d01aeef78b8704f70fe585e0a4b841b58a67584e992818a38aa9686c26715a38d55b3ee58609f279789b2b11c1886c144c7ccf7611b6fa6e81512da915567199a78b3597ec64c2db112a10fd829847720a4fdeffd31181c2ad5cfa203fbe3f6e1949ae983889365828ecb726213a297f59414918ae844c2ff033e5fa4f6e83452bcbd3c7f1218d73b2d7e9ccf0964871ec4b85bb37d660c868e52aff8b9ddf67b7785cf15981bf6d2e5e1cc38e1da2ee2998ca7e49c87114a52b35f08ea710717d00c325e6a14a7f2b7d8bcad3864681a097dd01c26ebd208a4e6ab346ce28456f835d7cc81c864d0b1471ec34af9d625d21a3373d8a88cfb700f2a5a024ade027039fc0786f441cd1d069355f176986e0ec6fe6586ecce0fda78f1291fda768061a5dc7b8c43c794c00677229b146023fd75750bceb7f9842f97f74960934d5e084a2a8885df9091efad063b502c053e281542ed0fa54c3176ded9ccba7f5255c70468245dd972ff5de8e0be328d45584207aed473746ed2bbd729e881ff8409d4424c612d6197beb2afb5e276bb5af4add13a1892925360a0e1f90cc9b0e3371aaa582c258c582cb8699583d9b4ad79bda2f1a0e58a063af4b08c45e18304103bed8aa51bff989826be801f240355bf2f26737555736bccbc54b4aedef690f163dfc41da1b8388b8638b59b89691d21988cefd4a5fa0828a6c8dd879f0542b11c3cf0b82f6b760eb2a2c2762a9bb060a2ddbde23357d1e22e81128fa544e230e280fe99a5032880fcdc5fc2698bb312af70ee68045ebbdf5fc4078bd5bcfab8f55387c9f9949d42b3341fb27ac9625dc9b6332ebc2d5c0506868e9cc22aa906dd179dfb6d4f264a99c4d91540d5d808db4bfe0aa5d8022d85e4ab47d3e61a9b1c20500f639b1be8957ce3326f43344bd6cbb367d0d449bcd19d411b599055d3b7f7500064b0536601b0ca229140e19824faa7994441a73dec5a7d8167d096320497268a444b0c94f667129ff879889824cd6872e9defe9bc6766386f76866126c6ba5958e3cbe994b5923be03660555a9bf834173be4eb6de26217f697fe484b767a287e09cdcee1a6301cf51bdf7dc3db4118d4f30b5c8b211bbbcf721a3806ce53c17f6eb4a99badb3e4ae40d6eebbeb2ad2585870bdd77a800cca4fdd2ab58774d6020693f7d266e874275bbd2dcd328d7607276801d51dd9e21fd58dbe297b5cdca130dfa791ba9dc70135a88a7ddcb8d24d82b5ef0b38afdf8efc75639bea7c77a4e7d6cd223fd07465c440a0810812c2ec76d2f4b708cc653d5bca14c85f144393761662959d7c891375ece8df8fae45fb5a0f1da34eb7d7491f3a6a89c9d1f0562b7310516cd18a00ebd28d839a37baa0ea32dc86c105fa48f7c735cea613e95d4818da13b8c68ea32525d03e3a6743837e19d5f8b4465fd7ef69d100001ebb8cdcbdaf72073ba0b2416e99237a9189811f6c7c1ae96a8e34265ce23c9c8592d8cd7c8dc873220dfc05cd0c2b6e05a819b62b7f6fe7f7a1d4184fec2cb82c04eddbe1282163d338a35c21f7b38485be35a3891d645f3e61647c87cef09c3e0f6dbf88542b02453b8bdadb97ec055a80111e4e028fa2e2981c4f59b7b28dc65222800bc5bcd135d6774a2d9f5aa9d0fcbd90a5cbc963b88ecf356fcff6ba85b25b354bfd27f903f311d480a7af2c920006683766cafd8749acbd065ab9596e641aedbfb8baf1df0be4a69fc71f49a97c4dd74d4c6e9c204ec862958350899a2ef351a9bc3355f52cee7c3b85a18add91f6a2e4e5f4e8c97b27a883614fb33a6d8f88b57af004566f73e508eb21ab79b2ffa7509c7519df521dbca48fe396e335cd32e8bce38b136a16cdb0df2f1324b430c7b639f42fac92838266f4d3e6c75e8ce59fbf350122d8d7346eaa8825ed433fd2c74f0b847acad0a2a46d6e2eac03c803726ac3947b347d43f94aaa31b51203781b137547be15ada613e2653fc7d9eec6c8eab0438791d9f23d15a3dc5f1eab933de23f3dde00255575e327ce7fd30350877732b2d7dfea8d623c0283308cdac436211b01dc23c99e92aa220b093330e50fc92068c5887e55488337722bbbe7cfddcbf169d16e085a0a3ab29bc04e6424a5708c3f1086120902168c634b87a4c54561c4ffba3287b99004e5b6cd70080d047a837071ddf0149162f0fef935c89ea559c8a7dca08eae4f92b4f39bd0dd73b8a20846a4e03df04a27291a50831f000e6f7ee9855c61de027f8642fc82fd49a2caf1babd4fb8a952a42e3a294adda6ba98737b60fac740066eaaa6e07a20fd82395647242d0b3e3bc8e8ffb72d2334808c542e23b05bd92636e730c48edf8005e4879854ba1a7bb33f506be8e1901a4637d1a7e55baa29df6acdd0e14dfa8cbc5f461376825c474d2867ac8db5768c6debd771143c5c715c52d941939d4b62186224603c68fda5367fb07c8b1b527ee89f6b0301e1d7d80cfa11fec44e3bf294999d273f48b935fa65e382987dde09f06fd344cee0bb82d8f8d01115a6bcefc36c5bc8f3cc0608603f3177b6d4d84074cf780ab91d9bf66e4bbb5e6213238857604ba8b3c1462e756fdb5d70e9a82bbf263e29946c42d2749ab0c44844d4c8bc41c4731574d89d63a40963d4f324e12f96b2bb35e4f83b0aa25868a8b9d39220ab9ccaead4dfd02c281a2458e0217099f753359942e9afce1e5ecb3485600bf164176798397d0bb855490ce4f55696bafa13332ad73d806f862518ca74c62fda7b38f480bd9018d3678fba14211fc1dbc7e3c0dd462401b4bb5713b055b9e8f7318052a6918055bc06848e53971667768da9e276e90e11889bbe77567ae11a6998e3f395dad415edafd7701d70e179d5d4d77c28659e2e19213462569bce65812221ab24b86d1dbedb7c019eef6af310de6d37ebbc6b98b3834b3aaae6b9e80994383d933873e37aa6bde71a4ae2005349c91c17bb1b5168270a9cabd40d4d9c4c654fafa77545e900fdfc4bec09192a81417fa59d2e68a1485ad6d3dc01295cb207249826f9899dfaa1519e705879ebe953796a79822f62e01bb6f53653d913a23df716d63233d7f738af4e53866e7a6f4d9dc3fa177f8a3e98468ee23ff861abb5d083e28190259ec04f63a71a81c84df699ef48fd97877e0e6f34341ea1fb310e08ede9855fca9cba0e41d38a39744b5fa303016aa78ba437491d33171b4bfe25fe9d9065c150d807a759e69427513b40c84f3f03b37fbb7fb9bd18fc9ed81be74dfe85aceb5780cec118cc283c50589336e8802aca70971c109fea528356343faa9fe962a1186300d755fd65a1887598391f6a107fde8ba48235563c7799f1700864d0f116b64baaa31a8adefdbd7090332f6b294e3dba1213a208dccd868549344baba58ea8d2bf11aaac1c75f8d4bdc142341c68d459590365c1f9afd93691063ab1a7f89f3e3e8b9f9d62130051ccd26358a9a7ce88bc80f3231c42b03fe263129c977a2493a26d39b2c46e8f1467ebb57c1e8b337e076908363a3b2c6518e16dcf182abfa1a3675056a5b8984e67a84ad799537e2867ee94a1df7b9d8cb3f8dc810d23fdd4b01c3f73cad2165f3250d6da11d54775f1d11c1f166ea38a30c085e058d71a0f7693daddd9d765bbdbc594228660a6ae947f17d1b51f6dd0ab39c769d6e7d0f52670a7b551c810ff17b594adfaea3dd6db57513717ce3a6c682d14f380fe2fb6fcc2f217cf114c716d986d03fe0a37eaae003ee8ef5f20df1cb5ec9d88e82ababbb0030dfcedabf4bc35f1b6445812f40d6af864952509311250fab517970e9240734e48c14cf8a253a9c25602101fa9daea60adebff5f65a17c79d99e92a7cc84086dfd3c46c4f1be8801410539c37e6a754a3adc202197380011ae06bb86d4d0a5da60b0262480de825befff7b0ada57989da330b85bd6457d7e7d0b704bb7d7b6421a105aebeb2a77f2f4009862951a3ffe7e6c2b7ecb30b533576a377308c4547837a1dfbc99241f088377df56297faac8f97fd50974c4c9ae198250fd60bdd652a10a2a6bcc74ae3b3210618b083e43a3bfd19dc636fdb546f96f4bc3447d343ee65f690a7a34b86d17a6ffb9af6fb9daeeb5a82c33be6b1d1aee558b06acc6cd662440b7b31504361767f97f46cb5a9b55905222ea9e5b1e53575cbc12cb62675d061d9ba26a31bb0b35f622b31476c98abf5b3e69abb879b46cb95bca4cf4743eaaa86ff099d1e7a328dc4cb9e0271049cac2cb0d250a33a7d0ad0c8290152167afd4f4de597b342e17db15e0d83567d310895db687183303e79eb94866f73500b7300a27a8a9d62824d9f90738cad95e5dc09acd4e3d138a6f252c040354f2c2ecfc40e5b7e53251e39db67b72cd8bb372cd44d47b91ee21ad3681f990cf016eb21824701c0fa0476d0179654f5178321da8b71ec5512f48560d363b247db66d91e7fcf887d48f58cfb7c0b4159a53545502f43a3aba98c5efc10e2f434a97b4c61b6408f9538ea47b95041f85c3988286921162eddc6d0cfe38eea6b67310ec1da15139a03209183d943397691d9a7f2c408903d07f243b0965ac1e75068e999c0cccab0119bb78bfa3a30aca8bdd639dcb878ca5866e708b5296086ae3350c3775b7874217c07800e2a119ed887ab78db906062f53314cc5256d5653267d281f082cb05f496e351307479432c6a420ff1696aba3228374bacca67e0fa5c716a522b25855507e18c432a4977a4d8fcee30d9379e5c894380d6a7286204c2d3bd9974e2257d681ed9cb811d9912e7232260dee69ee9b8cabb8b8b8511b916c888c0894e196b84530e1b8a3517b22fb23990fb32caebb2bfa8f42c085098ed1f534129b185a433e10a545ea8eda0b441689d09028d1a76c11f578f6c1f5d865a3adf15e8511280f7e6e89412de95932e18ae4d84feee62c786301d8b1cba704f9e837bbbebc3e96cb3bc3141cd850f54441c8408b171f34a9ce4aaa50d097f202a3557e9c91db9dd6690b9861620538c55e595f55e3616a18d5bcf46d7c54e681d4285c7038eb5f6642e8d981cd1db03d845e71d868d9fedaee6ed19489a7054fc96f07307c8bc5ab50078686a520ef91d9712fd76289f74ec6d0b534ad9cb43ea2d7ecedf41af7ab13234a4abc881f3ec5364dd53b8ad9698b560178d0c72e2a6231349713c4c3b184b2c0f11cf5f0ca4926d6e31ea942b5550dbda6a66de5e81fdaf56b12e00d0f9846be3253954143c278e716a94964ec47263f7b5ddc79f62ead40ad3771efda126fdd45136d0b824b641024d74171658ba5c565aaa0c7c4c987dc60237e3efb2f24b6ee4b1ffc59fbdc71f5795504868d4af357666f04bc60a5d139dea5c4af3fd2692f14691a7894b5b76c79ffe89b0f57"}}}}, &(0x7f00000032c0)={0x1, 0x1, [0xde3, 0x16d, 0x28e, 0x1ea]}) (async) rt_sigaction(0x27, &(0x7f0000003380)={&(0x7f0000003300)="f244abc463794c4b36ff26decff344da65bd41ae666666420f380020f2470f38f1060fa2c48281bdfc430ff6e3", 0xc8000003, &(0x7f0000003340)="476690364181b62b340000d7805947406690f2ab650198451e571965660f78c30fa6c423f56b827c000000a12e64db86ab6100006567410f58eb0fdd02"}, 0x0, 0x8, &(0x7f00000033c0)) (async) r18 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003440), r14) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r12, &(0x7f0000003540)={&(0x7f0000003400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003500)={&(0x7f0000003480)={0x54, r18, 0x200, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x80}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xb9}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x54}}, 0x20048000) timerfd_settime(r14, 0x1, &(0x7f0000003580)={{0x77359400}, {0x77359400}}, &(0x7f00000035c0)) (async) timerfd_gettime(0xffffffffffffffff, &(0x7f0000003600)) 620.932988ms ago: executing program 6 (id=3844): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2c}, 0x78, r1}) r2 = socket(0xa, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000000680)=0x6, 0x4) sendmmsg$inet(r3, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r3, &(0x7f00000000c0)="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", 0x301, 0x6000000000000000, 0x0, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r2, 0x8936, &(0x7f0000000000)) 530.96035ms ago: executing program 6 (id=3845): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) open_tree(0xffffffffffffffff, 0x0, 0x80000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@weak_binder={0x77622a85, 0xa, 0x1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 481.346421ms ago: executing program 4 (id=3846): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x8) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000080)=0x40000) ppoll(&(0x7f0000000000)=[{r8}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000040)=0x8) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="030300000000fbdbdf2506000000a6928704d738224c652a4a2bd63f4ed3fd0936f893b21405ad571525cbe3631960300ea34ab37bbb3f9f1e66c3628118dafdb1c5f067c3b07a3a5a66cc6fa3c6a887c1a65b5301000000000000000cad788752414c3cbb4aa8e6f979ed15008d228be6ff59e8f25ad743be68dfd6728f16"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) syz_emit_ethernet(0x29, &(0x7f0000000540)={@link_local, @local, @void, {@generic={0x809b, "55237544a46e0a592e27709355f639a1fece3040e00e9a33f3e708"}}}, 0x0) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x8, {0x0, 0x4000000, 0x0, {0x4, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3966, 0x3, 0x8000, 0x0, r3, r4, 0x13, 0x59c4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r10, &(0x7f00000000c0)='lp\x00', 0xfffffdef) r11 = dup2(r10, r1) setsockopt$RXRPC_SECURITY_KEYRING(r11, 0x110, 0x2, &(0x7f0000000240)='~\xbe\xf4\xd2vJ +\xdb\x10\xdb\xd1\xf0\xb74\xf4\x04\xbc\x04\xf9!\xa5\xd0\xbbs\a#\x0e`\xc0\x99\xd5\xab\xee\x95z\x8e\xa1i\xb1\x10\xd2G\xa0\x9c\xe1\x81?\a\x03S\xd36\x19\xca\xd0\x81\x1do\xbe\xeas4\x97\x95\xe5\xac\xda\x8c\xd2\x88\x11\xa1\xd4XOu\x8e\xc2\"\xcd\xf7\x87.7N\xbf\xa7\x15`\xc9k\x93F\x1b\xdf\x14\x93\xed\x80\xacb\xc4\x86s\xd55\x8d\xd4d\x12a.\xd0;\a\xce\x94\x1bYt\x9b\xf1O\nc\x050\x80\xbb/\x86\v\xdf\xf2\xe2\xdc\xc3\xbf\xd4A$\xfe\xc2|\xd2', 0x92) r12 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r12, 0x40045108, &(0x7f00000004c0)=0xffffff81) ioctl$KDSETLED(r0, 0x4b32, 0x2) 481.179537ms ago: executing program 6 (id=3847): setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000002440)=[{{0x0, 0x11, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x1, &(0x7f0000000480), 0x14}}], 0x400, 0x10) 480.675394ms ago: executing program 6 (id=3848): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x0, @tick, {}, {0x1}, @raw32={[0x80, 0x0, 0x4]}}], 0x1c) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) mq_open(&(0x7f0000000040)='!selinuxsel\xad\"\x0e\xabx\xb8\xc9\xa8x\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x63}, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000000c0)=0x8, 0x2) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000070961c40e90f55dbfb690102c9030902120001000000000904"], 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r3, 0x5607, 0x4) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0xa840, 0x582) ioctl$I2C_RDWR(r4, 0x707, &(0x7f00000000c0)={&(0x7f0000000940)=[{0x3, 0x0, 0x0, 0x0}, {0x4, 0x0, 0x0, 0x0}], 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x1}}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r5, 0xffffffffffffffff, 0x0) 210.58739ms ago: executing program 3 (id=3849): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000280)={0x18, r6, 0xffffffffffffcde, 0x0, &(0x7f0000000240)=[{0x0, 0x403}, {0x5, 0x100000000}]}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x62000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=0x0], 0x0, 0x4, 0x0, 0x0, 0x0, 0x10, '\x00', r4, 0x2}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000000000000008001f"], 0x24}, 0x1, 0x0, 0x0, 0x4048890}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) (async) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000200)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000280)={0x18, r6, 0xffffffffffffcde, 0x0, &(0x7f0000000240)=[{0x0, 0x403}, {0x5, 0x100000000}]}) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x62000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=0x0], 0x0, 0x4, 0x0, 0x0, 0x0, 0x10, '\x00', r4, 0x2}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) (async) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000000000000008001f"], 0x24}, 0x1, 0x0, 0x0, 0x4048890}, 0x0) (async) 161.372911ms ago: executing program 3 (id=3850): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000e40), 0x3, 0x2) ppoll(&(0x7f0000000e80)=[{r2, 0x1000}], 0x1, &(0x7f0000000ec0)={0x0, 0x989680}, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) setregid(0x0, 0xee01) faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xe) r5 = syz_open_dev$vim2m(&(0x7f0000000240), 0x2000a54, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x2, "a722a0dd8c08fe49da33e92aa916a401bfca7f265bc44791756bdc4d9d751233", 0x494e4f4b}) read(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r7) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)={0x44, r8, 0x1, 0x70bd67, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x115}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) ioctl$FS_IOC_RESVSP(r6, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x2, 0x3}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r9, 0x8, 0x2, 0x0, 0x0, [0x0], [0x0, 0xfffffffc], [0xfffffffc]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r10, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000200)={r9, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r11}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000040)={r12}) 61.301578ms ago: executing program 3 (id=3851): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050028bd7000000000002e0000000c00030068307ddfe2fa523665def15e5c9a0d9e1f8b0a033ef125bad300"/53, @ANYRES32=r2, @ANYBLOB="0a003400010101010101000010002a000301887107f701ff01000f00"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x44) 59.998646ms ago: executing program 5 (id=3852): r0 = add_key$keyring(&(0x7f0000005180), 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000180)={0x4001000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) setsockopt$inet_udp_int(r4, 0x11, 0x67, &(0x7f0000000680)=0x6, 0x4) sendmmsg$inet(r4, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r4, &(0x7f00000000c0)="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", 0x301, 0x6000000000000000, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r5, &(0x7f0000000580)='1\x00', 0x2) syz_clone(0x4400, 0x0, 0x0, 0x0, 0x0, 0x0) write$sysctl(r5, &(0x7f00000000c0)='2\x00', 0x2) ioctl$SYNC_IOC_FILE_INFO(r3, 0x40103e05, &(0x7f0000000140)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000480)="0080000000000000f29233d474ad7b00c7bf8ed2f0d7e7e62b993bf8ae11fc46775c1d7241ed48ffdb0f42d281b2b31c08abee16e7e3d2a061421e18769093c6687da96d802e82bc82dad3bf4ee59d85", 0x50) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000540)=@chain={'key_or_keyring:', r1}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)=@keyring={'key_or_keyring:', r0}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) preadv(r7, &(0x7f0000000000)=[{&(0x7f0000002040)=""/4107, 0x100b}], 0x1, 0x5, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r7, 0x91) 257.987µs ago: executing program 3 (id=3853): setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x1, &(0x7f0000000480), 0x14}}], 0x400, 0x10) (fail_nth: 4) 0s ago: executing program 3 (id=3854): r0 = gettid() syz_open_procfs(r0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0xe) process_vm_readv(r0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/23, 0x17}, {&(0x7f00000001c0)=""/50, 0x32}, {&(0x7f0000000200)=""/51, 0x33}], 0x3, &(0x7f0000001680)=[{&(0x7f0000000280)=""/35, 0x23}, {&(0x7f00000002c0)=""/5, 0x5}, {&(0x7f0000000380)=""/139, 0x8b}, {&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)=""/215, 0xd7}, {&(0x7f0000000600)=""/69, 0x45}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x7, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000100feffff7f0300000000000006", @ANYRES32=r5, @ANYBLOB="600000008008000008000300", @ANYRES32=r2, @ANYBLOB="538c03713e73cf48026dacd31829df26f7d2"], 0x28}, 0x1, 0xd, 0x0, 0x480c5}, 0x80d4) kernel console output (not intermixed with test programs): 6] ? __pfx___alloc_skb+0x10/0x10 [ 283.785564][T14366] ? ip6_dst_check+0x8d0/0x950 [ 283.785584][T14366] ? __fib6_drop_pcpu_from.part.0+0xcd/0x510 [ 283.785607][T14366] inet6_rt_notify+0x1e0/0x4b0 [ 283.785627][T14366] fib6_del+0xf60/0x1770 [ 283.785653][T14366] ? __pfx_fib6_del+0x10/0x10 [ 283.785671][T14366] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 283.785690][T14366] ? fib6_ifdown+0xcd/0x8f0 [ 283.785717][T14366] fib6_clean_node+0x424/0x5b0 [ 283.785738][T14366] ? __pfx_fib6_clean_node+0x10/0x10 [ 283.785766][T14366] fib6_walk_continue+0x44f/0x8d0 [ 283.785788][T14366] fib6_walk+0x182/0x370 [ 283.785805][T14366] ? __pfx_fib6_ifdown+0x10/0x10 [ 283.785822][T14366] fib6_clean_tree+0xd4/0x110 [ 283.785839][T14366] ? __pfx_fib6_clean_tree+0x10/0x10 [ 283.785860][T14366] ? __pfx_fib6_clean_node+0x10/0x10 [ 283.785879][T14366] ? __pfx_fib6_ifdown+0x10/0x10 [ 283.785903][T14366] ? __pfx_fib6_ifdown+0x10/0x10 [ 283.785921][T14366] __fib6_clean_all+0x107/0x2d0 [ 283.785944][T14366] rt6_disable_ip+0x2ec/0x990 [ 283.785960][T14366] ? __pfx___mutex_trylock_common+0x10/0x10 [ 283.785985][T14366] ? __pfx_rt6_disable_ip+0x10/0x10 [ 283.786002][T14366] ? trace_contention_end+0xdd/0x130 [ 283.786014][T14366] ? find_held_lock+0x2b/0x80 [ 283.786033][T14366] addrconf_ifdown.isra.0+0x11d/0x1aa0 [ 283.786061][T14366] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 283.786089][T14366] addrconf_notify+0x89a/0x19e0 [ 283.786102][T14366] ? ip6mr_device_event+0x1bc/0x230 [ 283.786120][T14366] notifier_call_chain+0xbc/0x410 [ 283.786141][T14366] ? __pfx_addrconf_notify+0x10/0x10 [ 283.786158][T14366] call_netdevice_notifiers_info+0xbe/0x140 [ 283.786178][T14366] netif_set_mtu_ext+0x590/0x7d0 [ 283.786194][T14366] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 283.786207][T14366] ? __lock_acquire+0xb97/0x1ce0 [ 283.786238][T14366] netif_set_mtu+0x98/0x140 [ 283.786270][T14366] ? __pfx_netif_set_mtu+0x10/0x10 [ 283.786292][T14366] ? full_name_hash+0xbc/0x110 [ 283.786314][T14366] dev_set_mtu+0xb2/0x260 [ 283.786331][T14366] dev_ifsioc+0xd28/0x1f70 [ 283.786355][T14366] ? __pfx_dev_ifsioc+0x10/0x10 [ 283.786376][T14366] ? __pfx___mutex_lock+0x10/0x10 [ 283.786399][T14366] ? dev_load+0x8e/0x240 [ 283.786424][T14366] dev_ioctl+0x223/0x10e0 [ 283.786447][T14366] sock_do_ioctl+0x19d/0x280 [ 283.786466][T14366] ? __pfx_sock_do_ioctl+0x10/0x10 [ 283.786489][T14366] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 283.786509][T14366] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 283.786534][T14366] sock_ioctl+0x227/0x6b0 [ 283.786553][T14366] ? __pfx_sock_ioctl+0x10/0x10 [ 283.786569][T14366] ? hook_file_ioctl_common+0x145/0x410 [ 283.786589][T14366] ? selinux_file_ioctl+0x180/0x270 [ 283.786607][T14366] ? selinux_file_ioctl+0xb4/0x270 [ 283.786627][T14366] ? __pfx_sock_ioctl+0x10/0x10 [ 283.786646][T14366] __x64_sys_ioctl+0x18b/0x210 [ 283.786669][T14366] do_syscall_64+0xcd/0x4c0 [ 283.786686][T14366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.786704][T14366] RIP: 0033:0x7f316f98ebe9 [ 283.786716][T14366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.786730][T14366] RSP: 002b:00007f3170874038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 283.786744][T14366] RAX: ffffffffffffffda RBX: 00007f316fbb5fa0 RCX: 00007f316f98ebe9 [ 283.786754][T14366] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 283.786763][T14366] RBP: 00007f3170874090 R08: 0000000000000000 R09: 0000000000000000 [ 283.786772][T14366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.786781][T14366] R13: 00007f316fbb6038 R14: 00007f316fbb5fa0 R15: 00007ffcd9030808 [ 283.786801][T14366] [ 283.788737][T14366] tipc: Resetting bearer [ 283.813929][ T6065] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 283.952105][T14365] tipc: Resetting bearer [ 283.964467][ T6065] usb 9-1: device descriptor read/8, error -71 [ 283.967329][T14365] tipc: Disabling bearer [ 284.214085][ T6065] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 284.244452][ T6065] usb 9-1: device descriptor read/8, error -71 [ 284.355241][ T6065] usb usb9-port1: unable to enumerate USB device [ 284.417465][T14385] tipc: Enabled bearer , priority 0 [ 284.421035][T14385] syzkaller0: entered promiscuous mode [ 284.423187][T14385] syzkaller0: entered allmulticast mode [ 284.439052][T14385] tipc: Resetting bearer [ 284.445712][T14384] tipc: Resetting bearer [ 284.458398][T14384] tipc: Disabling bearer [ 284.537789][ T40] audit: type=1400 audit(1755066648.018:1663): avc: denied { write } for pid=14386 comm="syz.5.3272" path="socket:[67757]" dev="sockfs" ino=67757 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 284.537820][T14387] ieee802154 phy0 wpan0: encryption failed: -22 [ 284.578303][T14387] 9pnet: Could not find request transport: unix(ñYi@†ÇK¶[¨¿ÀÝ [ 284.596013][T14390] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14390 comm=syz.6.3273 [ 284.750886][T14401] bridge0: entered promiscuous mode [ 285.057641][T14409] block nbd6: NBD_DISCONNECT [ 285.484088][T13552] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 285.634071][T13552] usb 11-1: Using ep0 maxpacket: 8 [ 285.643096][T13552] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 285.647130][T13552] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 285.651263][T13552] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 285.660181][T13552] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 285.666366][T13552] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 285.670166][T13552] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.811055][T14425] afs: Unknown parameter 'fsmagic' [ 285.880923][T13552] usb 11-1: GET_CAPABILITIES returned 0 [ 285.883348][T13552] usbtmc 11-1:16.0: can't read capabilities [ 286.091956][ T9090] usb 11-1: USB disconnect, device number 2 [ 286.463909][ T841] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 286.624006][ T61] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 286.643958][ T841] usb 9-1: Using ep0 maxpacket: 8 [ 286.647443][ T841] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 286.650535][ T841] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 286.657764][ T841] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 286.661426][ T841] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 286.665679][ T841] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 286.670500][ T841] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 286.674122][ T841] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.773953][ T61] usb 8-1: Using ep0 maxpacket: 8 [ 286.777260][ T61] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 286.779898][ T61] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 286.783371][ T61] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 286.786539][ T61] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 286.789705][ T61] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 286.794137][ T61] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 286.796980][ T61] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.885217][ T841] usb 9-1: usb_control_msg returned -32 [ 286.887366][ T841] usbtmc 9-1:16.0: can't read capabilities [ 286.895127][ T34] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 287.002939][ T61] usb 8-1: usb_control_msg returned -32 [ 287.004977][ T61] usbtmc 8-1:16.0: can't read capabilities [ 287.043958][ T34] usb 11-1: Using ep0 maxpacket: 8 [ 287.048048][ T34] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 287.051317][ T34] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 287.055545][ T34] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 287.059056][ T34] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 287.062290][ T34] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 287.066647][ T34] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 287.070244][ T34] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.239657][T14448] usbtmc 9-1:16.0: usb_control_msg returned -32 [ 287.243425][ T7137] usb 9-1: USB disconnect, device number 14 [ 287.281536][ T34] usb 11-1: usb_control_msg returned -32 [ 287.283452][ T34] usbtmc 11-1:16.0: can't read capabilities [ 287.289895][ T34] usb 11-1: USB disconnect, device number 3 [ 287.356044][T14449] FAULT_INJECTION: forcing a failure. [ 287.356044][T14449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.361079][T14449] CPU: 1 UID: 0 PID: 14449 Comm: syz.3.3296 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 287.361101][T14449] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 287.361111][T14449] Call Trace: [ 287.361117][T14449] [ 287.361124][T14449] dump_stack_lvl+0x16c/0x1f0 [ 287.361165][T14449] should_fail_ex+0x512/0x640 [ 287.361191][T14449] _copy_to_user+0x32/0xd0 [ 287.361211][T14449] simple_read_from_buffer+0xcb/0x170 [ 287.361229][T14449] proc_fail_nth_read+0x197/0x240 [ 287.361247][T14449] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 287.361264][T14449] ? rw_verify_area+0xcf/0x6c0 [ 287.361285][T14449] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 287.361300][T14449] vfs_read+0x1e1/0xcf0 [ 287.361318][T14449] ? __pfx___mutex_lock+0x10/0x10 [ 287.361337][T14449] ? __pfx_vfs_read+0x10/0x10 [ 287.361357][T14449] ? __fget_files+0x20e/0x3c0 [ 287.361379][T14449] ksys_read+0x12a/0x250 [ 287.361393][T14449] ? __pfx_ksys_read+0x10/0x10 [ 287.361408][T14449] ? fdget+0x187/0x210 [ 287.361426][T14449] do_syscall_64+0xcd/0x4c0 [ 287.361443][T14449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.361459][T14449] RIP: 0033:0x7feb2258d5fc [ 287.361471][T14449] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 287.361485][T14449] RSP: 002b:00007feb23325030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 287.361500][T14449] RAX: ffffffffffffffda RBX: 00007feb227b6090 RCX: 00007feb2258d5fc [ 287.361510][T14449] RDX: 000000000000000f RSI: 00007feb233250a0 RDI: 0000000000000004 [ 287.361519][T14449] RBP: 00007feb23325090 R08: 0000000000000000 R09: 0000000000000000 [ 287.361527][T14449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.361536][T14449] R13: 00007feb227b6128 R14: 00007feb227b6090 R15: 00007ffc8ed41f18 [ 287.361556][T14449] [ 287.435254][ T61] usb 8-1: USB disconnect, device number 38 [ 287.802621][T14456] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 288.232801][T14482] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 288.388969][T14486] __nla_validate_parse: 63 callbacks suppressed [ 288.388980][T14486] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3312'. [ 288.490134][T14492] fuse: Bad value for 'group_id' [ 288.491725][T14492] fuse: Bad value for 'group_id' [ 288.568777][T14497] overlayfs: failed to resolve './file1': -2 [ 288.757930][T14507] syz.4.3321: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 288.762060][T14507] netlink: 184 bytes leftover after parsing attributes in process `syz.4.3321'. [ 288.767324][T14507] xt_socket: unknown flags 0xd0 [ 288.770078][T14507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3321'. [ 288.773718][T14508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3321'. [ 288.894291][ T841] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 288.908367][T14519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3325'. [ 288.912024][T14519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3325'. [ 288.994006][ T60] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 289.056247][ T841] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.062628][ T841] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 289.068377][ T841] usb 11-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 289.072142][ T841] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 289.075800][ T841] usb 11-1: SerialNumber: syz [ 289.081921][T14529] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3329'. [ 289.157780][ T60] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 289.161348][ T60] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.164536][ T60] usb 8-1: Product: syz [ 289.166269][ T60] usb 8-1: Manufacturer: syz [ 289.168166][ T60] usb 8-1: SerialNumber: syz [ 289.175833][ T60] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 289.202089][ T60] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 289.211930][T14535] i2c i2c-1: Invalid block write size 34 [ 289.223726][T14535] netlink: 'syz.4.3332': attribute type 1 has an invalid length. [ 289.228145][T14535] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3332'. [ 289.293245][ T841] usb 11-1: 0:2 : does not exist [ 289.296764][ T841] usb 11-1: unit 9 not found! [ 289.306962][T14539] fuse: Unknown parameter 'f\' [ 289.310422][T14539] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3334'. [ 289.318731][ T841] usb 11-1: USB disconnect, device number 4 [ 289.346011][T14089] udevd[14089]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb11/11-1/11-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 289.359146][T14541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14541 comm=syz.4.3335 [ 289.366339][T14541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3335'. [ 289.482556][ T40] audit: type=1400 audit(1755066652.958:1664): avc: denied { accept } for pid=14540 comm="syz.4.3335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 289.796907][ T6065] usb 8-1: USB disconnect, device number 39 [ 289.828972][T14554] tipc: Enabling of bearer rejected, failed to enable media [ 290.340167][T14569] GUP no longer grows the stack in syz.3.3343 (14569): 200000004000-20000000a000 (200000002000) [ 290.344901][T14569] CPU: 1 UID: 0 PID: 14569 Comm: syz.3.3343 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 290.344926][T14569] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 290.344937][T14569] Call Trace: [ 290.344943][T14569] [ 290.344950][T14569] dump_stack_lvl+0x16c/0x1f0 [ 290.344972][T14569] gup_vma_lookup+0x1d2/0x220 [ 290.344995][T14569] __get_user_pages+0x243/0x34a0 [ 290.345025][T14569] ? find_held_lock+0x2b/0x80 [ 290.345043][T14569] ? __pfx___get_user_pages+0x10/0x10 [ 290.345068][T14569] get_user_pages_remote+0x243/0xab0 [ 290.345086][T14569] ? mas_parent_gap+0x6f0/0x7b0 [ 290.345103][T14569] ? __pfx_get_user_pages_remote+0x10/0x10 [ 290.345124][T14569] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 290.345145][T14569] __access_remote_vm+0x24d/0x850 [ 290.345167][T14569] ? do_raw_spin_lock+0x12c/0x2b0 [ 290.345184][T14569] ? __pfx___access_remote_vm+0x10/0x10 [ 290.345208][T14569] proc_pid_cmdline_read+0x4de/0x8e0 [ 290.345230][T14569] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 290.345251][T14569] ? rw_verify_area+0xcf/0x6c0 [ 290.345275][T14569] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 290.345290][T14569] vfs_readv+0x5be/0x8b0 [ 290.345308][T14569] ? __pfx_vfs_readv+0x10/0x10 [ 290.345339][T14569] ? __fget_files+0x20e/0x3c0 [ 290.345361][T14569] ? do_preadv+0x1a6/0x270 [ 290.345373][T14569] do_preadv+0x1a6/0x270 [ 290.345398][T14569] ? __pfx_do_preadv+0x10/0x10 [ 290.345419][T14569] do_syscall_64+0xcd/0x4c0 [ 290.345437][T14569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.345452][T14569] RIP: 0033:0x7feb2258ebe9 [ 290.345465][T14569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.345480][T14569] RSP: 002b:00007feb23346038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 290.345496][T14569] RAX: ffffffffffffffda RBX: 00007feb227b5fa0 RCX: 00007feb2258ebe9 [ 290.345506][T14569] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 290.345515][T14569] RBP: 00007feb22611e19 R08: 0000000000000000 R09: 0000000000000000 [ 290.345524][T14569] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 290.345533][T14569] R13: 00007feb227b6038 R14: 00007feb227b5fa0 R15: 00007ffc8ed41f18 [ 290.345555][T14569] [ 290.450563][ T841] usb 11-1: new low-speed USB device number 5 using dummy_hcd [ 290.457441][ T60] usb 8-1: Service connection timeout for: 256 [ 290.462642][ T60] ath9k_htc 8-1:1.0: ath9k_htc: Unable to initialize HTC services [ 290.463108][ T60] ath9k_htc: Failed to initialize the device [ 290.463468][ T6065] usb 8-1: ath9k_htc: USB layer deinitialized [ 290.533250][T14579] FAULT_INJECTION: forcing a failure. [ 290.533250][T14579] name failslab, interval 1, probability 0, space 0, times 0 [ 290.539428][T14579] CPU: 3 UID: 0 PID: 14579 Comm: syz.3.3346 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 290.539454][T14579] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 290.539465][T14579] Call Trace: [ 290.539471][T14579] [ 290.539478][T14579] dump_stack_lvl+0x16c/0x1f0 [ 290.539527][T14579] should_fail_ex+0x512/0x640 [ 290.539545][T14579] ? fs_reclaim_acquire+0xae/0x150 [ 290.539568][T14579] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 290.539590][T14579] should_failslab+0xc2/0x120 [ 290.539625][T14579] __kmalloc_noprof+0xd2/0x510 [ 290.539657][T14579] tomoyo_realpath_from_path+0xc2/0x6e0 [ 290.539683][T14579] ? tomoyo_profile+0x47/0x60 [ 290.539702][T14579] tomoyo_path_number_perm+0x245/0x580 [ 290.539722][T14579] ? tomoyo_path_number_perm+0x237/0x580 [ 290.539745][T14579] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 290.539767][T14579] ? find_held_lock+0x2b/0x80 [ 290.539811][T14579] ? find_held_lock+0x2b/0x80 [ 290.539828][T14579] ? hook_file_ioctl_common+0x145/0x410 [ 290.539848][T14579] ? __fget_files+0x20e/0x3c0 [ 290.539868][T14579] security_file_ioctl+0x9b/0x240 [ 290.539891][T14579] __x64_sys_ioctl+0xb7/0x210 [ 290.539917][T14579] do_syscall_64+0xcd/0x4c0 [ 290.539935][T14579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.539952][T14579] RIP: 0033:0x7feb2258ebe9 [ 290.539967][T14579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.539983][T14579] RSP: 002b:00007feb23346038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 290.540000][T14579] RAX: ffffffffffffffda RBX: 00007feb227b5fa0 RCX: 00007feb2258ebe9 [ 290.540010][T14579] RDX: 0000200000000080 RSI: 0000000000005602 RDI: 0000000000000003 [ 290.540020][T14579] RBP: 00007feb23346090 R08: 0000000000000000 R09: 0000000000000000 [ 290.540030][T14579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.540040][T14579] R13: 00007feb227b6038 R14: 00007feb227b5fa0 R15: 00007ffc8ed41f18 [ 290.540064][T14579] [ 290.540195][T14579] ERROR: Out of memory at tomoyo_realpath_from_path. [ 290.584081][ T841] usb 11-1: device descriptor read/64, error -71 [ 290.742897][T14597] tipc: New replicast peer: 255.255.255.255 [ 290.746581][T14597] tipc: Enabled bearer , priority 10 [ 290.865631][ T841] usb 11-1: new low-speed USB device number 6 using dummy_hcd [ 290.964502][T14606] overlay: Unknown parameter 'subj_role' [ 290.966248][ T7137] usb 10-1: new full-speed USB device number 14 using dummy_hcd [ 290.980859][T14612] FAULT_INJECTION: forcing a failure. [ 290.980859][T14612] name failslab, interval 1, probability 0, space 0, times 0 [ 290.985691][T14612] CPU: 2 UID: 0 PID: 14612 Comm: syz.3.3358 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 290.985713][T14612] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 290.985722][T14612] Call Trace: [ 290.985727][T14612] [ 290.985733][T14612] dump_stack_lvl+0x16c/0x1f0 [ 290.985753][T14612] should_fail_ex+0x512/0x640 [ 290.985773][T14612] should_failslab+0xc2/0x120 [ 290.985791][T14612] __kmalloc_cache_noprof+0x6a/0x3e0 [ 290.985812][T14612] ? __pfx_stack_trace_save+0x10/0x10 [ 290.985831][T14612] ? tipc_udp_enable+0x1a0/0x10d0 [ 290.985849][T14612] tipc_udp_enable+0x1a0/0x10d0 [ 290.985862][T14612] ? kasan_save_stack+0x42/0x60 [ 290.985875][T14612] ? kasan_save_stack+0x33/0x60 [ 290.985889][T14612] ? __pfx_tipc_udp_enable+0x10/0x10 [ 290.985901][T14612] ? genl_family_rcv_msg_doit+0x209/0x2f0 [ 290.985919][T14612] ? genl_rcv_msg+0x55c/0x800 [ 290.985935][T14612] ? netlink_rcv_skb+0x158/0x420 [ 290.985949][T14612] ? genl_rcv+0x28/0x40 [ 290.985963][T14612] ? netlink_unicast+0x5a7/0x870 [ 290.985976][T14612] ? netlink_sendmsg+0x8d1/0xdd0 [ 290.985990][T14612] ? ____sys_sendmsg+0xa98/0xc70 [ 290.986039][T14612] tipc_enable_bearer+0x983/0x11e0 [ 290.986064][T14612] ? __pfx_tipc_enable_bearer+0x10/0x10 [ 290.986084][T14612] ? __pfx___nla_validate_parse+0x10/0x10 [ 290.986107][T14612] ? __pfx___mutex_trylock_common+0x10/0x10 [ 290.986133][T14612] ? __nla_parse+0x40/0x60 [ 290.986154][T14612] __tipc_nl_bearer_enable+0x332/0x420 [ 290.986177][T14612] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 290.986228][T14612] ? __nla_parse+0x40/0x60 [ 290.986253][T14612] tipc_nl_bearer_enable+0x21/0x40 [ 290.986274][T14612] genl_family_rcv_msg_doit+0x209/0x2f0 [ 290.986294][T14612] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 290.986311][T14612] ? genl_get_cmd+0x194/0x580 [ 290.986334][T14612] ? __radix_tree_lookup+0x21f/0x2c0 [ 290.986359][T14612] genl_rcv_msg+0x55c/0x800 [ 290.986379][T14612] ? __pfx_genl_rcv_msg+0x10/0x10 [ 290.986397][T14612] ? __pfx_tipc_nl_bearer_enable+0x10/0x10 [ 290.986427][T14612] netlink_rcv_skb+0x158/0x420 [ 290.986442][T14612] ? __pfx_genl_rcv_msg+0x10/0x10 [ 290.986461][T14612] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 290.986486][T14612] ? netlink_deliver_tap+0x1ae/0xd30 [ 290.986504][T14612] genl_rcv+0x28/0x40 [ 290.986519][T14612] netlink_unicast+0x5a7/0x870 [ 290.986537][T14612] ? __pfx_netlink_unicast+0x10/0x10 [ 290.986553][T14612] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 290.986575][T14612] netlink_sendmsg+0x8d1/0xdd0 [ 290.986594][T14612] ? __pfx_netlink_sendmsg+0x10/0x10 [ 290.986618][T14612] ____sys_sendmsg+0xa98/0xc70 [ 290.986636][T14612] ? copy_msghdr_from_user+0x10a/0x160 [ 290.986651][T14612] ? __pfx_____sys_sendmsg+0x10/0x10 [ 290.986683][T14612] ___sys_sendmsg+0x134/0x1d0 [ 290.986699][T14612] ? __pfx____sys_sendmsg+0x10/0x10 [ 290.986734][T14612] ? __mutex_unlock_slowpath+0x100/0x800 [ 290.986756][T14612] __sys_sendmsg+0x16d/0x220 [ 290.986771][T14612] ? __pfx___sys_sendmsg+0x10/0x10 [ 290.986800][T14612] do_syscall_64+0xcd/0x4c0 [ 290.986817][T14612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.986832][T14612] RIP: 0033:0x7feb2258ebe9 [ 290.986844][T14612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.986858][T14612] RSP: 002b:00007feb23346038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 290.986872][T14612] RAX: ffffffffffffffda RBX: 00007feb227b5fa0 RCX: 00007feb2258ebe9 [ 290.986881][T14612] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 290.986890][T14612] RBP: 00007feb23346090 R08: 0000000000000000 R09: 0000000000000000 [ 290.986898][T14612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.986907][T14612] R13: 00007feb227b6038 R14: 00007feb227b5fa0 R15: 00007ffc8ed41f18 [ 290.986928][T14612] [ 290.986984][T14612] tipc: Enabling of bearer rejected, failed to enable media [ 291.014431][ T841] usb 11-1: device descriptor read/64, error -71 [ 291.115648][ T7137] usb 10-1: config 5 has an invalid interface number: 59 but max is 1 [ 291.155724][ T7137] usb 10-1: config 5 has an invalid interface number: 123 but max is 1 [ 291.158653][ T7137] usb 10-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 291.161950][ T7137] usb 10-1: config 5 has no interface number 0 [ 291.164194][ T7137] usb 10-1: config 5 has no interface number 1 [ 291.166519][ T7137] usb 10-1: config 5 interface 59 altsetting 9 endpoint 0xE has invalid maxpacket 1019, setting to 64 [ 291.170547][ T7137] usb 10-1: config 5 interface 59 altsetting 9 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 291.174273][T14630] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 291.175625][ T7137] usb 10-1: too many endpoints for config 5 interface 123 altsetting 4: 151, using maximum allowed: 30 [ 291.183398][ T7137] usb 10-1: config 5 interface 123 altsetting 4 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 291.187559][ T7137] usb 10-1: config 5 interface 123 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 151 [ 291.192739][ T7137] usb 10-1: config 5 interface 59 has no altsetting 0 [ 291.196356][ T7137] usb 10-1: config 5 interface 123 has no altsetting 0 [ 291.204968][ T7137] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=a6.a0 [ 291.208387][ T7137] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.211401][ T7137] usb 10-1: Product: 쥫ä‚ﻳ巀쪟å°â¶‘㕡慿漳兮႖ꮕꅰâŒä½»å½«ä¬’잋쑰⫇쇸鎳䙟Ｗ랯î¿ä¬è«¤ë–㰕؛Ἒ阛徠輨귫㩳嘫臔î†ë»´ã¿¶ê‚°ì¤›èª¢è‚¨ì•‚䱙꣹똀裮¶呎ã¹ì‰¿çª“䙆ꔺ〶ࢤé€ã‚™ç»°î€æ‡¥ç«»ä ¨áŠ¤â–£ï¿€æº¬î³†ê±‘岟㼻ყ섾䞚è°ã©”륖穉é‹â®…ë­â¢¯í„ ã°’퉼Ⱝ㱺﹡爊æ£è­ˆå¼¢ç‘µæž… [ 291.222977][ T7137] usb 10-1: Manufacturer: Ћ [ 291.224189][ T841] usb usb11-port1: attempt power cycle [ 291.224860][ T7137] usb 10-1: SerialNumber: à°š [ 291.418107][T14650] bridge_slave_0: left allmulticast mode [ 291.420579][T14650] bridge_slave_0: left promiscuous mode [ 291.423200][T14650] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.432101][T14650] bridge_slave_1: left allmulticast mode [ 291.435800][T14650] bridge_slave_1: left promiscuous mode [ 291.438398][T14650] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.447997][T14650] bond0: (slave bond_slave_0): Releasing backup interface [ 291.462957][T14650] bond0: (slave bond_slave_1): Releasing backup interface [ 291.478586][ T7137] ath6kl: Failed to submit usb control message: -71 [ 291.481176][ T7137] ath6kl: unable to send the bmi data to the device: -71 [ 291.483779][ T7137] ath6kl: Unable to send get target info: -71 [ 291.485241][T14650] team0: Port device team_slave_0 removed [ 291.494933][ T7137] ath6kl: Failed to init ath6kl core: -71 [ 291.498143][T14650] team0: Port device team_slave_1 removed [ 291.501278][T14650] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.505200][ T7137] ath6kl_usb 10-1:5.59: probe with driver ath6kl_usb failed with error -71 [ 291.507403][T14650] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.517115][ T7137] ath6kl: Failed to submit usb control message: -71 [ 291.517624][T14650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.519553][ T7137] ath6kl: unable to send the bmi data to the device: -71 [ 291.522281][T14650] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.527678][T13552] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 291.530961][ T7137] ath6kl: Unable to send get target info: -71 [ 291.534868][ T7137] ath6kl: Failed to init ath6kl core: -71 [ 291.537292][ T7137] ath6kl_usb 10-1:5.123: probe with driver ath6kl_usb failed with error -71 [ 291.547715][ T7137] usb 10-1: USB disconnect, device number 14 [ 291.567850][ T841] usb 11-1: new low-speed USB device number 7 using dummy_hcd [ 291.586242][ T841] usb 11-1: device descriptor read/8, error -71 [ 291.622704][T14660] netlink: 'syz.5.3377': attribute type 10 has an invalid length. [ 291.626656][T14660] wlan1: mtu less than device minimum [ 291.629038][T14660] Ã: (slave wlan1): Error -22 calling dev_set_mtu [ 291.654018][T13552] usb 9-1: device descriptor read/64, error -71 [ 291.740355][ T40] audit: type=1400 audit(1755066655.218:1665): avc: denied { bind } for pid=14672 comm="syz.3.3381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 291.762254][T14675] FAULT_INJECTION: forcing a failure. [ 291.762254][T14675] name failslab, interval 1, probability 0, space 0, times 0 [ 291.768172][T14675] CPU: 0 UID: 0 PID: 14675 Comm: syz.5.3382 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 291.768193][T14675] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 291.768203][T14675] Call Trace: [ 291.768208][T14675] [ 291.768214][T14675] dump_stack_lvl+0x16c/0x1f0 [ 291.768234][T14675] should_fail_ex+0x512/0x640 [ 291.768250][T14675] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 291.768268][T14675] should_failslab+0xc2/0x120 [ 291.768285][T14675] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 291.768299][T14675] ? __pfx___might_resched+0x10/0x10 [ 291.768316][T14675] ? alloc_vmap_area+0x645/0x29c0 [ 291.768338][T14675] alloc_vmap_area+0x645/0x29c0 [ 291.768366][T14675] ? __pfx_alloc_vmap_area+0x10/0x10 [ 291.768389][T14675] __get_vm_area_node+0x1ca/0x330 [ 291.768418][T14675] __vmalloc_node_range_noprof+0x271/0x14b0 [ 291.768438][T14675] ? vhost_task_create+0x1d2/0x2e0 [ 291.768452][T14675] ? local_lock_release+0x99/0x140 [ 291.768474][T14675] ? vhost_task_create+0x1d2/0x2e0 [ 291.768488][T14675] ? rcu_read_unlock+0x17/0x60 [ 291.768507][T14675] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 291.768536][T14675] ? vhost_task_create+0x1d2/0x2e0 [ 291.768549][T14675] __vmalloc_node_noprof+0xad/0xf0 [ 291.768569][T14675] ? vhost_task_create+0x1d2/0x2e0 [ 291.768585][T14675] copy_process+0x2c70/0x7690 [ 291.768614][T14675] ? __pfx_copy_process+0x10/0x10 [ 291.768636][T14675] ? lockdep_init_map_type+0x5c/0x280 [ 291.768652][T14675] ? lockdep_init_map_type+0x5c/0x280 [ 291.768665][T14675] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 291.768685][T14675] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 291.768707][T14675] vhost_task_create+0x1d2/0x2e0 [ 291.768721][T14675] ? __pfx_vhost_task_create+0x10/0x10 [ 291.768742][T14675] ? __pfx_vhost_task_fn+0x10/0x10 [ 291.768766][T14675] kvm_mmu_post_init_vm+0x1b7/0x380 [ 291.768784][T14675] kvm_arch_vcpu_ioctl_run+0x66/0x1980 [ 291.768804][T14675] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 291.768827][T14675] kvm_vcpu_ioctl+0x5eb/0x1690 [ 291.768847][T14675] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 291.768866][T14675] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 291.768884][T14675] ? do_vfs_ioctl+0x128/0x14f0 [ 291.768905][T14675] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 291.768925][T14675] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 291.768954][T14675] ? hook_file_ioctl_common+0x145/0x410 [ 291.768974][T14675] ? selinux_file_ioctl+0x180/0x270 [ 291.768992][T14675] ? selinux_file_ioctl+0xb4/0x270 [ 291.769012][T14675] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 291.769031][T14675] __x64_sys_ioctl+0x18b/0x210 [ 291.769053][T14675] do_syscall_64+0xcd/0x4c0 [ 291.769070][T14675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.769084][T14675] RIP: 0033:0x7f316f98ebe9 [ 291.769096][T14675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.769110][T14675] RSP: 002b:00007f3170874038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 291.769124][T14675] RAX: ffffffffffffffda RBX: 00007f316fbb5fa0 RCX: 00007f316f98ebe9 [ 291.769134][T14675] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 291.769142][T14675] RBP: 00007f3170874090 R08: 0000000000000000 R09: 0000000000000000 [ 291.769151][T14675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.769159][T14675] R13: 00007f316fbb6038 R14: 00007f316fbb5fa0 R15: 00007ffcd9030808 [ 291.769180][T14675] [ 291.769439][T14675] syz.5.3382: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 291.834050][ T841] usb 11-1: new low-speed USB device number 8 using dummy_hcd [ 291.834717][T14675] ,cpuset= [ 291.867984][ T841] usb 11-1: device descriptor read/8, error -71 [ 291.869285][T14675] /,mems_allowed=0-1 [ 291.910075][T14675] CPU: 2 UID: 0 PID: 14675 Comm: syz.5.3382 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 291.910096][T14675] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 291.910106][T14675] Call Trace: [ 291.910112][T14675] [ 291.910118][T14675] dump_stack_lvl+0x16c/0x1f0 [ 291.910139][T14675] warn_alloc+0x248/0x3a0 [ 291.910156][T14675] ? __pfx_warn_alloc+0x10/0x10 [ 291.910192][T14675] ? kfree+0x2b4/0x4d0 [ 291.910220][T14675] ? __get_vm_area_node+0x208/0x330 [ 291.910244][T14675] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 291.910264][T14675] ? local_lock_release+0x99/0x140 [ 291.910287][T14675] ? vhost_task_create+0x1d2/0x2e0 [ 291.910302][T14675] ? rcu_read_unlock+0x17/0x60 [ 291.910322][T14675] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 291.910350][T14675] ? vhost_task_create+0x1d2/0x2e0 [ 291.910363][T14675] __vmalloc_node_noprof+0xad/0xf0 [ 291.910383][T14675] ? vhost_task_create+0x1d2/0x2e0 [ 291.910399][T14675] copy_process+0x2c70/0x7690 [ 291.910429][T14675] ? __pfx_copy_process+0x10/0x10 [ 291.910451][T14675] ? lockdep_init_map_type+0x5c/0x280 [ 291.910466][T14675] ? lockdep_init_map_type+0x5c/0x280 [ 291.910480][T14675] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 291.910499][T14675] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 291.910521][T14675] vhost_task_create+0x1d2/0x2e0 [ 291.910535][T14675] ? __pfx_vhost_task_create+0x10/0x10 [ 291.910556][T14675] ? __pfx_vhost_task_fn+0x10/0x10 [ 291.910580][T14675] kvm_mmu_post_init_vm+0x1b7/0x380 [ 291.910598][T14675] kvm_arch_vcpu_ioctl_run+0x66/0x1980 [ 291.910618][T14675] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 291.910641][T14675] kvm_vcpu_ioctl+0x5eb/0x1690 [ 291.910669][T14675] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 291.910687][T14675] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 291.910705][T14675] ? do_vfs_ioctl+0x128/0x14f0 [ 291.910727][T14675] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 291.910747][T14675] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 291.910776][T14675] ? hook_file_ioctl_common+0x145/0x410 [ 291.910796][T14675] ? selinux_file_ioctl+0x180/0x270 [ 291.910814][T14675] ? selinux_file_ioctl+0xb4/0x270 [ 291.910834][T14675] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 291.910853][T14675] __x64_sys_ioctl+0x18b/0x210 [ 291.910876][T14675] do_syscall_64+0xcd/0x4c0 [ 291.910893][T14675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.910908][T14675] RIP: 0033:0x7f316f98ebe9 [ 291.910920][T14675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.910934][T14675] RSP: 002b:00007f3170874038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 291.910948][T14675] RAX: ffffffffffffffda RBX: 00007f316fbb5fa0 RCX: 00007f316f98ebe9 [ 291.910958][T14675] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 291.910966][T14675] RBP: 00007f3170874090 R08: 0000000000000000 R09: 0000000000000000 [ 291.910975][T14675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.910983][T14675] R13: 00007f316fbb6038 R14: 00007f316fbb5fa0 R15: 00007ffcd9030808 [ 291.911003][T14675] [ 291.911009][T14675] Mem-Info: [ 291.914014][T13552] usb 9-1: new full-speed USB device number 16 using dummy_hcd [ 291.915493][T14675] active_anon:14209 inactive_anon:0 isolated_anon:0 [ 291.915493][T14675] active_file:7305 inactive_file:50945 isolated_file:0 [ 291.915493][T14675] unevictable:1768 dirty:73 writeback:0 [ 291.915493][T14675] slab_reclaimable:13435 slab_unreclaimable:88213 [ 291.915493][T14675] mapped:31446 shmem:6496 pagetables:1215 [ 291.915493][T14675] sec_pagetables:306 bounce:0 [ 291.915493][T14675] kernel_misc_reclaimable:0 [ 291.915493][T14675] free:418530 free_pcp:12395 free_cma:0 [ 291.919456][ T7137] tipc: Node number set to 597638413 [ 291.920634][T14675] Node 0 active_anon:56836kB inactive_anon:0kB active_file:29132kB inactive_file:203576kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:125720kB dirty:236kB writeback:0kB shmem:22448kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15952kB pagetables:4656kB sec_pagetables:1224kB all_unreclaimable? no Balloon:0kB [ 291.920677][T14675] Node 1 active_anon:0kB inactive_anon:0kB active_file:88kB inactive_file:204kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:64kB dirty:56kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:112kB pagetables:204kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 291.984149][ T841] usb usb11-port1: unable to enumerate USB device [ 291.985143][T14675] Node 0 [ 292.063858][T13552] usb 9-1: device descriptor read/64, error -71 [ 292.071422][T14675] DMA free:15172kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:48kB local_pcp:0kB free_cma:0kB [ 292.086576][T14675] lowmem_reserve[]: 0 1233 1233 1233 1233 [ 292.088730][T14675] Node 0 DMA32 free:46944kB boost:0kB min:27516kB low:34392kB high:41268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:69732kB inactive_anon:0kB active_file:29132kB inactive_file:203576kB unevictable:3536kB writepending:236kB present:2080628kB managed:1263516kB mlocked:0kB bounce:0kB free_pcp:31596kB local_pcp:7412kB free_cma:0kB [ 292.100741][T14675] lowmem_reserve[]: 0 0 0 0 0 [ 292.102534][T14675] Node 1 Normal free:1602456kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:88kB inactive_file:204kB unevictable:3536kB writepending:56kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:14368kB local_pcp:1872kB free_cma:0kB [ 292.113892][T14675] lowmem_reserve[]: 0 0 0 0 0 [ 292.115679][T14675] Node 0 DMA: 9*4kB (UM) 10*8kB (UM) 11*16kB (UM) 11*32kB (UM) 9*64kB (UM) 9*128kB (UM) 4*256kB (UM) 1*512kB (U) 1*1024kB (M) 1*2048kB (U) 2*4096kB (ME) = 15172kB [ 292.121681][T14675] Node 0 DMA32: 100*4kB (UME) 33*8kB (UME) 2*16kB (ME) 45*32kB (UM) 9*64kB (UME) 21*128kB (UME) 20*256kB (UME) 23*512kB (UME) 14*1024kB (M) 5*2048kB (M) 0*4096kB = 46872kB [ 292.128554][T14675] Node 1 Normal: 2*4kB (E) 44*8kB (UE) 17*16kB (UE) 109*32kB (UE) 36*64kB (UE) 21*128kB (UE) 8*256kB (UE) 10*512kB (UM) 7*1024kB (UE) 3*2048kB (UM) 384*4096kB (UM) = 1602456kB [ 292.135065][T14675] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 292.138533][T14675] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 292.141893][T14675] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 292.145409][T14675] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 292.148786][T14675] 68804 total pagecache pages [ 292.150713][T14675] 0 pages in swap cache [ 292.152260][T14675] Free swap = 124996kB [ 292.153886][T14675] Total swap = 124996kB [ 292.155458][T14675] 1048443 pages RAM [ 292.156890][T14675] 0 pages HighMem/MovableOnly [ 292.158647][T14675] 283251 pages reserved [ 292.160232][T14675] 0 pages cma reserved [ 292.174360][T13552] usb usb9-port1: attempt power cycle [ 292.514105][T13552] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 292.534752][T13552] usb 9-1: device descriptor read/8, error -71 [ 292.784049][T13552] usb 9-1: new full-speed USB device number 18 using dummy_hcd [ 292.804542][T13552] usb 9-1: device descriptor read/8, error -71 [ 292.808307][ T40] audit: type=1400 audit(1755066656.288:1666): avc: denied { mounton } for pid=14712 comm="syz.3.3396" path="/file0" dev="ramfs" ino=70017 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 292.915055][T13552] usb usb9-port1: unable to enumerate USB device [ 293.066158][T14726] netlink: 'syz.3.3402': attribute type 1 has an invalid length. [ 293.200009][ T40] audit: type=1326 audit(1755066656.678:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14731 comm="syz.6.3405" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d57b8ebe9 code=0x7ffc0000 [ 293.392416][T14747] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.475166][T14747] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.571471][T14747] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.650761][T14747] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.677448][T14764] __nla_validate_parse: 8 callbacks suppressed [ 293.677466][T14764] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3416'. [ 293.766907][T13742] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.775724][T13742] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.788977][T13735] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.799221][T13742] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.827518][T14770] tipc: Started in network mode [ 293.829421][T14770] tipc: Node identity ac14140f, cluster identity 4711 [ 293.832153][T14770] tipc: New replicast peer: 255.255.255.255 [ 293.835328][T14770] tipc: Enabled bearer , priority 10 [ 293.853937][T14770] can0: slcan on ptm0. [ 293.858647][T14770] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3418'. [ 293.861976][T14770] tipc: Disabling bearer [ 293.934766][T14768] can0 (unregistered): slcan off ptm0. [ 293.954862][T14781] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 294.050462][T14787] overlayfs: workdir and upperdir must reside under the same mount [ 294.061489][T14791] vlan4: entered promiscuous mode [ 294.063635][T14791] vlan4: entered allmulticast mode [ 294.065745][T14791] bridge0: entered allmulticast mode [ 294.077713][T14790] mkiss: ax0: crc mode is auto. [ 294.179535][T14803] Invalid logical block size (238) [ 294.251040][T14812] Invalid logical block size (65481) [ 294.320426][T14809] netlink: 'syz.5.3435': attribute type 13 has an invalid length. [ 294.323720][T14809] gretap0: refused to change device tx_queue_len [ 294.326810][T14809] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 294.332548][T14809] binder: 14808:14809 ioctl c2604110 200000000880 returned -22 [ 294.335892][T14809] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3435'. [ 294.439075][T14832] loop2: detected capacity change from 0 to 7 [ 294.442063][T14832] Dev loop2: unable to read RDB block 7 [ 294.448646][T14832] loop2: unable to read partition table [ 294.450966][T14832] loop2: partition table beyond EOD, truncated [ 294.453292][T14832] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 294.482473][T14836] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3213269175 (102824613600 ns) > initial count (93960712448 ns). Using initial count to start timer. [ 294.727791][T14848] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.731334][T14848] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.844788][T14848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.856993][T14848] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.933544][T14858] netlink: 830 bytes leftover after parsing attributes in process `syz.6.3450'. [ 294.938091][T13743] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.942061][T13743] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.946240][T13743] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.949550][T13743] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.017047][T14866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3456'. [ 295.117317][ T40] audit: type=1400 audit(1755066658.598:1668): avc: denied { bind } for pid=14870 comm="syz.5.3458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 295.160338][ T40] audit: type=1400 audit(1755066658.638:1669): avc: denied { read } for pid=14878 comm="syz.5.3462" name="file0" dev="tmpfs" ino=2194 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 295.176422][T14879] SELinux: policydb version 1766316358 does not match my version range 15-35 [ 295.179906][T14879] SELinux: failed to load policy [ 295.259801][ T40] audit: type=1400 audit(1755066658.738:1670): avc: denied { write } for pid=14885 comm="syz.4.3465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 295.267133][ T40] audit: type=1400 audit(1755066658.738:1671): avc: denied { setattr } for pid=14885 comm="syz.4.3465" name="" dev="pipefs" ino=71373 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 295.276055][ T40] audit: type=1400 audit(1755066658.738:1672): avc: denied { setattr } for pid=14885 comm="syz.4.3465" name="NETLINK" dev="sockfs" ino=71374 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 295.625109][T14905] netlink: 272 bytes leftover after parsing attributes in process `syz.5.3472'. [ 295.630394][T14905] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 295.633442][T14905] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 295.637383][T14905] overlayfs: failed to set uuid (390/file1, err=-13); falling back to uuid=null. [ 295.698755][T14911] netlink: 212388 bytes leftover after parsing attributes in process `syz.4.3475'. [ 295.702041][T14911] openvswitch: netlink: Message has 5 unknown bytes. [ 295.817853][T14914] Invalid logical block size (-625016833) [ 295.828407][T14916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.832635][T14916] netlink: 'syz.4.3477': attribute type 1 has an invalid length. [ 295.863474][T14916] 8021q: adding VLAN 0 to HW filter on device bond2 [ 296.094895][ T5987] block nbd2: Receive control failed (result -32) [ 296.539706][T14944] FAULT_INJECTION: forcing a failure. [ 296.539706][T14944] name failslab, interval 1, probability 0, space 0, times 0 [ 296.544980][T14944] CPU: 3 UID: 0 PID: 14944 Comm: syz.6.3487 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 296.545000][T14944] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 296.545010][T14944] Call Trace: [ 296.545015][T14944] [ 296.545021][T14944] dump_stack_lvl+0x16c/0x1f0 [ 296.545064][T14944] should_fail_ex+0x512/0x640 [ 296.545085][T14944] ? __kvmalloc_node_noprof+0x124/0x620 [ 296.545110][T14944] should_failslab+0xc2/0x120 [ 296.545126][T14944] __kvmalloc_node_noprof+0x137/0x620 [ 296.545149][T14944] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 296.545174][T14944] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 296.545194][T14944] __kvm_mmu_topup_memory_cache+0x450/0x600 [ 296.545214][T14944] ? do_raw_spin_unlock+0x172/0x230 [ 296.545231][T14944] ? _raw_spin_unlock+0x28/0x50 [ 296.545259][T14944] mmu_topup_memory_caches+0x25/0x170 [ 296.545276][T14944] kvm_mmu_load+0xd6/0x23c0 [ 296.545290][T14944] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 296.545305][T14944] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 296.545321][T14944] ? vmx_get_rflags+0x100/0x420 [ 296.545340][T14944] ? kvm_apic_accept_pic_intr+0xe8/0x1a0 [ 296.545358][T14944] ? __pfx_kvm_mmu_load+0x10/0x10 [ 296.545372][T14944] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 296.545393][T14944] ? kvm_check_and_inject_events+0x71c/0x1310 [ 296.545417][T14944] vcpu_run+0x358c/0x5580 [ 296.545437][T14944] ? __lock_acquire+0xb97/0x1ce0 [ 296.545464][T14944] ? __pfx_vcpu_run+0x10/0x10 [ 296.545487][T14944] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 296.545504][T14944] ? __local_bh_enable_ip+0xa4/0x120 [ 296.545526][T14944] ? kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 296.545545][T14944] kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 296.545575][T14944] kvm_vcpu_ioctl+0x5eb/0x1690 [ 296.545596][T14944] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 296.545614][T14944] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 296.545632][T14944] ? do_vfs_ioctl+0x128/0x14f0 [ 296.545653][T14944] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 296.545673][T14944] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 296.545701][T14944] ? hook_file_ioctl_common+0x145/0x410 [ 296.545722][T14944] ? selinux_file_ioctl+0x180/0x270 [ 296.545740][T14944] ? selinux_file_ioctl+0xb4/0x270 [ 296.545760][T14944] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 296.545779][T14944] __x64_sys_ioctl+0x18b/0x210 [ 296.545801][T14944] do_syscall_64+0xcd/0x4c0 [ 296.545818][T14944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.545833][T14944] RIP: 0033:0x7f7d57b8ebe9 [ 296.545845][T14944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.545858][T14944] RSP: 002b:00007f7d5891f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 296.545873][T14944] RAX: ffffffffffffffda RBX: 00007f7d57db5fa0 RCX: 00007f7d57b8ebe9 [ 296.545883][T14944] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 296.545891][T14944] RBP: 00007f7d5891f090 R08: 0000000000000000 R09: 0000000000000000 [ 296.545900][T14944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.545909][T14944] R13: 00007f7d57db6038 R14: 00007f7d57db5fa0 R15: 00007fff24075fc8 [ 296.545929][T14944] [ 296.671065][ C3] vkms_vblank_simulate: vblank timer overrun [ 296.720551][T14947] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.3488' resets device [ 297.097907][ T40] audit: type=1326 audit(1755066660.578:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14963 comm="syz.4.3494" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f294758ebe9 code=0x0 [ 297.319864][T14971] nftables ruleset with unbound set [ 297.330753][T14971] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 297.825721][T13552] usb 11-1: new full-speed USB device number 9 using dummy_hcd [ 297.866620][T14993] binder: 14992:14993 ioctl c0306201 2000000003c0 returned -14 [ 297.908497][T14996] FAULT_INJECTION: forcing a failure. [ 297.908497][T14996] name failslab, interval 1, probability 0, space 0, times 0 [ 297.912597][T14996] CPU: 1 UID: 0 PID: 14996 Comm: syz.3.3507 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 297.912618][T14996] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 297.912627][T14996] Call Trace: [ 297.912634][T14996] [ 297.912641][T14996] dump_stack_lvl+0x16c/0x1f0 [ 297.912684][T14996] should_fail_ex+0x512/0x640 [ 297.912707][T14996] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 297.912726][T14996] should_failslab+0xc2/0x120 [ 297.912744][T14996] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 297.912759][T14996] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 297.912780][T14996] ? kvm_hv_setup_tsc_page+0x29a/0x8d0 [ 297.912800][T14996] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 297.912826][T14996] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 297.912853][T14996] mmu_topup_memory_caches+0x25/0x170 [ 297.912871][T14996] kvm_mmu_load+0xd6/0x23c0 [ 297.912890][T14996] ? kvm_deliver_exception_payload+0x47/0x200 [ 297.912909][T14996] ? __pfx_kvm_mmu_load+0x10/0x10 [ 297.912923][T14996] ? vmx_inject_exception+0x21b/0x470 [ 297.912943][T14996] ? trace_kvm_inj_exception+0x182/0x1f0 [ 297.912966][T14996] ? kvm_check_and_inject_events+0x71c/0x1310 [ 297.912988][T14996] vcpu_run+0x358c/0x5580 [ 297.913003][T14996] ? __lock_acquire+0xb97/0x1ce0 [ 297.913024][T14996] ? __pfx_vcpu_run+0x10/0x10 [ 297.913040][T14996] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 297.913054][T14996] ? __local_bh_enable_ip+0xa4/0x120 [ 297.913071][T14996] ? kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 297.913085][T14996] kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 297.913104][T14996] kvm_vcpu_ioctl+0x5eb/0x1690 [ 297.913120][T14996] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 297.913134][T14996] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 297.913149][T14996] ? do_vfs_ioctl+0x128/0x14f0 [ 297.913165][T14996] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 297.913181][T14996] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 297.913202][T14996] ? hook_file_ioctl_common+0x145/0x410 [ 297.913217][T14996] ? selinux_file_ioctl+0x180/0x270 [ 297.913231][T14996] ? selinux_file_ioctl+0xb4/0x270 [ 297.913247][T14996] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 297.913261][T14996] __x64_sys_ioctl+0x18b/0x210 [ 297.913278][T14996] do_syscall_64+0xcd/0x4c0 [ 297.913291][T14996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.913302][T14996] RIP: 0033:0x7feb2258ebe9 [ 297.913312][T14996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.913322][T14996] RSP: 002b:00007feb23346038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 297.913339][T14996] RAX: ffffffffffffffda RBX: 00007feb227b5fa0 RCX: 00007feb2258ebe9 [ 297.913346][T14996] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 297.913352][T14996] RBP: 00007feb23346090 R08: 0000000000000000 R09: 0000000000000000 [ 297.913363][T14996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 297.913369][T14996] R13: 00007feb227b6038 R14: 00007feb227b5fa0 R15: 00007ffc8ed41f18 [ 297.913383][T14996] [ 297.985458][T13552] usb 11-1: config 0 has no interfaces? [ 297.988219][T14996] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 297.992327][T13552] usb 11-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 298.033422][T13552] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.039371][T13552] usb 11-1: config 0 descriptor?? [ 298.208648][T15010] loop7: detected capacity change from 0 to 7 [ 298.381317][ T40] audit: type=1400 audit(1755066661.858:1674): avc: denied { map } for pid=15018 comm="syz.3.3515" path="/dev/comedi4" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 298.391516][ T40] audit: type=1400 audit(1755066661.858:1675): avc: denied { execute } for pid=15018 comm="syz.3.3515" path="/dev/comedi4" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 298.444189][T15019] sock: sock_timestamping_bind_phc: sock not bind to device [ 298.450931][T14978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.455744][T14978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.463494][ T60] usb 11-1: USB disconnect, device number 9 [ 298.509891][T15010] Dev loop7: unable to read RDB block 7 [ 298.511930][ C2] blk_print_req_error: 10 callbacks suppressed [ 298.511946][ C2] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 298.512567][T15010] loop7: unable to read partition table [ 298.515132][ C2] buffer_io_error: 141 callbacks suppressed [ 298.515146][ C2] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 298.531685][T15010] loop7: partition table beyond EOD, truncated [ 298.535402][T15010] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 298.630543][T15023] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3516'. [ 298.688748][ T40] audit: type=1400 audit(1755066662.168:1676): avc: denied { unmount } for pid=10886 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 298.800649][T15031] kvm: pic: non byte write [ 298.902976][T15041] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3520'. [ 299.005735][T15048] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 299.015913][T15048] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 299.255195][T13743] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.258441][T13743] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.262822][T13743] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.267624][T13743] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.312130][T15059] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=15059 comm=syz.4.3528 [ 299.317246][T15057] sctp: [Deprecated]: syz.6.3527 (pid 15057) Use of struct sctp_assoc_value in delayed_ack socket option. [ 299.317246][T15057] Use struct sctp_sack_info instead [ 299.560268][T15068] netlink: 'syz.4.3532': attribute type 3 has an invalid length. [ 299.563685][T15068] netlink: 'syz.4.3532': attribute type 1 has an invalid length. [ 299.618642][T15072] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3534'. [ 299.622680][T15072] netlink: 'syz.6.3534': attribute type 21 has an invalid length. [ 299.690452][T15081] geneve1: entered allmulticast mode [ 299.740007][T15079] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3536'. [ 299.742370][T15092] Bluetooth: MGMT ver 1.23 [ 299.747270][T15079] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3536'. [ 299.751326][T15092] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3541'. [ 299.757523][T15079] geneve2: entered promiscuous mode [ 299.759880][T15079] geneve2: entered allmulticast mode [ 299.763540][T13743] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.769630][T13743] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.788170][T15094] input: syz1 as /devices/virtual/input/input36 [ 299.807373][T13743] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.811708][T13743] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.831248][T15086] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 299.860370][T13743] Bluetooth: (null): Too short H5 packet [ 299.862918][T13743] Bluetooth: (null): Invalid header checksum [ 299.865981][T13743] Bluetooth: (null): Invalid header checksum [ 299.990942][T15114] FAULT_INJECTION: forcing a failure. [ 299.990942][T15114] name failslab, interval 1, probability 0, space 0, times 0 [ 299.997419][T15114] CPU: 3 UID: 0 PID: 15114 Comm: syz.5.3551 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 299.997444][T15114] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 299.997454][T15114] Call Trace: [ 299.997461][T15114] [ 299.997467][T15114] dump_stack_lvl+0x16c/0x1f0 [ 299.997489][T15114] should_fail_ex+0x512/0x640 [ 299.997507][T15114] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 299.997532][T15114] should_failslab+0xc2/0x120 [ 299.997556][T15114] __kmalloc_cache_noprof+0x6a/0x3e0 [ 299.997583][T15114] ? vmci_ctx_add_notification+0x152/0x670 [ 299.997610][T15114] vmci_ctx_add_notification+0x152/0x670 [ 299.997637][T15114] vmci_host_unlocked_ioctl+0x15cd/0x2040 [ 299.997657][T15114] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 299.997676][T15114] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 299.997697][T15114] ? do_vfs_ioctl+0x128/0x14f0 [ 299.997723][T15114] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 299.997747][T15114] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 299.997780][T15114] ? hook_file_ioctl_common+0x145/0x410 [ 299.997804][T15114] ? selinux_file_ioctl+0x180/0x270 [ 299.997831][T15114] ? selinux_file_ioctl+0xb4/0x270 [ 299.997855][T15114] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 299.997874][T15114] __x64_sys_ioctl+0x18b/0x210 [ 299.997900][T15114] do_syscall_64+0xcd/0x4c0 [ 299.997920][T15114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.997936][T15114] RIP: 0033:0x7f316f98ebe9 [ 299.997951][T15114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.997967][T15114] RSP: 002b:00007f3170874038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 299.997984][T15114] RAX: ffffffffffffffda RBX: 00007f316fbb5fa0 RCX: 00007f316f98ebe9 [ 299.997995][T15114] RDX: 0000200000000080 RSI: 00000000000007af RDI: 0000000000000003 [ 299.998005][T15114] RBP: 00007f3170874090 R08: 0000000000000000 R09: 0000000000000000 [ 299.998015][T15114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.998026][T15114] R13: 00007f316fbb6038 R14: 00007f316fbb5fa0 R15: 00007ffcd9030808 [ 299.998049][T15114] [ 300.107135][T15119] binder: 15118:15119 unknown command 0 [ 300.109616][T15119] binder: 15118:15119 ioctl c0306201 2000000001c0 returned -22 [ 300.188063][T15127] FAULT_INJECTION: forcing a failure. [ 300.188063][T15127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.192974][T15127] CPU: 2 UID: 0 PID: 15127 Comm: syz.5.3556 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 300.192995][T15127] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 300.193005][T15127] Call Trace: [ 300.193010][T15127] [ 300.193016][T15127] dump_stack_lvl+0x16c/0x1f0 [ 300.193035][T15127] should_fail_ex+0x512/0x640 [ 300.193054][T15127] _copy_from_user+0x2e/0xd0 [ 300.193072][T15127] binder_thread_write+0xa5c/0x4e70 [ 300.193100][T15127] ? __lock_acquire+0xb97/0x1ce0 [ 300.193121][T15127] ? __pfx_binder_thread_write+0x10/0x10 [ 300.193140][T15127] ? binder_debug+0xde/0x1a0 [ 300.193159][T15127] ? binder_debug+0xde/0x1a0 [ 300.193173][T15127] ? __pfx_binder_debug+0x10/0x10 [ 300.193188][T15127] ? find_held_lock+0x2b/0x80 [ 300.193216][T15127] binder_ioctl+0x253d/0x71f0 [ 300.193241][T15127] ? tomoyo_path_number_perm+0x18d/0x580 [ 300.193266][T15127] ? __pfx_binder_ioctl+0x10/0x10 [ 300.193286][T15127] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 300.193304][T15127] ? do_vfs_ioctl+0x128/0x14f0 [ 300.193329][T15127] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 300.193349][T15127] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 300.193377][T15127] ? hook_file_ioctl_common+0x145/0x410 [ 300.193397][T15127] ? selinux_file_ioctl+0x180/0x270 [ 300.193415][T15127] ? selinux_file_ioctl+0xb4/0x270 [ 300.193435][T15127] ? __pfx_binder_ioctl+0x10/0x10 [ 300.193453][T15127] __x64_sys_ioctl+0x18b/0x210 [ 300.193475][T15127] do_syscall_64+0xcd/0x4c0 [ 300.193492][T15127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.193506][T15127] RIP: 0033:0x7f316f98ebe9 [ 300.193518][T15127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.193532][T15127] RSP: 002b:00007f3170874038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 300.193547][T15127] RAX: ffffffffffffffda RBX: 00007f316fbb5fa0 RCX: 00007f316f98ebe9 [ 300.193556][T15127] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 300.193565][T15127] RBP: 00007f3170874090 R08: 0000000000000000 R09: 0000000000000000 [ 300.193574][T15127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.193583][T15127] R13: 00007f316fbb6038 R14: 00007f316fbb5fa0 R15: 00007ffcd9030808 [ 300.193602][T15127] [ 300.193610][T15127] binder: 15126:15127 ioctl c0306201 2000000001c0 returned -14 [ 300.310432][T15133] netlink: 'syz.5.3558': attribute type 7 has an invalid length. [ 300.327755][T15133] : entered promiscuous mode [ 300.655900][T15145] input: syz1 as /devices/virtual/input/input37 [ 300.695103][T15152] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3565'. [ 300.698455][T15152] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3565'. [ 300.706847][T15152] ip6gretap0: entered promiscuous mode [ 300.709640][T15152] syz_tun: entered promiscuous mode [ 300.712238][T15152] debugfs: 'hsr2' already exists in 'hsr' [ 300.717638][T15152] Cannot create hsr debugfs directory [ 300.719790][T15152] hsr2: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 300.723526][T15152] hsr2: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 300.908759][T15166] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3571'. [ 300.912222][T15166] netlink: 'syz.5.3571': attribute type 11 has an invalid length. [ 300.916746][T15166] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3571'. [ 300.920109][T15166] netlink: 'syz.5.3571': attribute type 11 has an invalid length. [ 300.959767][T15168] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3572'. [ 301.003448][T15173] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 301.212908][T15190] overlayfs: conflicting lowerdir path [ 301.251929][T15198] loop7: detected capacity change from 0 to 7 [ 301.256156][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 301.258712][T15197] sch_tbf: burst 6 is lower than device syzkaller0 mtu (1500) ! [ 301.259048][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 301.265000][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 301.266984][T15200] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 301.267856][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 301.278760][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 301.281610][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 301.284487][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 301.288457][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 301.292619][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 301.296404][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 301.300060][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 301.304185][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 301.309663][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 301.312566][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 301.316239][T14089] ldm_validate_partition_table(): Disk read failed. [ 301.319296][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 301.322333][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 301.325227][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 301.328404][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 301.331789][T14089] Dev loop7: unable to read RDB block 0 [ 301.336492][T14089] loop7: unable to read partition table [ 301.339313][T14089] loop7: partition table beyond EOD, truncated [ 301.343767][T15198] ldm_validate_partition_table(): Disk read failed. [ 301.349168][T15198] Dev loop7: unable to read RDB block 0 [ 301.351881][T15198] loop7: unable to read partition table [ 301.354853][T15198] loop7: partition table beyond EOD, truncated [ 301.357501][T15198] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…0ýÞý©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 301.400880][T15205] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1551 sclass=netlink_route_socket pid=15205 comm=syz.6.3586 [ 301.453393][T15209] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.458916][T15209] bridge_slave_1: left allmulticast mode [ 301.461408][T15209] bridge_slave_1: left promiscuous mode [ 301.466745][T15209] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.476573][T15209] bridge_slave_0: left allmulticast mode [ 301.479038][T15209] bridge_slave_0: left promiscuous mode [ 301.481641][T15209] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.663704][ T40] audit: type=1400 audit(1755066665.138:1677): avc: denied { append } for pid=15221 comm="syz.6.3591" name="pfkey" dev="proc" ino=4026534759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 301.667952][T15222] netlink: 'syz.6.3591': attribute type 20 has an invalid length. [ 301.674137][ T40] audit: type=1400 audit(1755066665.148:1678): avc: denied { map } for pid=15221 comm="syz.6.3591" path="/proc/499/net/pfkey" dev="proc" ino=4026534759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 301.692448][T13742] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.692577][T15222] netlink: 'syz.6.3591': attribute type 20 has an invalid length. [ 301.696720][T13742] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.703568][T13742] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.707758][T13742] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.965212][ T40] audit: type=1400 audit(1755066665.448:1679): avc: denied { connect } for pid=15231 comm="syz.3.3595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 302.017957][ T40] audit: type=1400 audit(1755066665.498:1680): avc: denied { bind } for pid=15231 comm="syz.3.3595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 302.026223][ T40] audit: type=1400 audit(1755066665.498:1681): avc: denied { listen } for pid=15231 comm="syz.3.3595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 302.034767][ T40] audit: type=1400 audit(1755066665.498:1682): avc: denied { accept } for pid=15231 comm="syz.3.3595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 302.527077][T15243] sp0: Synchronizing with TNC [ 302.880568][T15262] comedi comedi3: comedi_config --init_data is deprecated [ 302.882444][T15260] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 302.886149][T15260] IPv6: NLM_F_CREATE should be set when creating new route [ 302.889239][T15260] IPv6: NLM_F_CREATE should be set when creating new route [ 302.893732][T15260] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 302.944442][ T61] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 303.105961][ T61] usb 11-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 303.110845][ T61] usb 11-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 303.115601][ T61] usb 11-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 303.119573][ T61] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.126161][T15250] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 303.132102][ T61] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 303.237998][T15278] netlink: 'syz.4.3612': attribute type 10 has an invalid length. [ 303.365955][T15280] [U]  [ 303.411573][ T6065] usb 11-1: USB disconnect, device number 10 [ 303.837708][T15286] tmpfs: Bad value for 'mpol' [ 303.840357][T15286] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 303.843569][T15286] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 303.851640][T15287] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 303.857724][T15287] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 304.252002][T15318] __nla_validate_parse: 10 callbacks suppressed [ 304.252018][T15318] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3625'. [ 304.380297][T15318] tipc: Started in network mode [ 304.382494][T15318] tipc: Node identity 1ea86bd9f1ca, cluster identity 4711 [ 304.386114][T15318] tipc: Enabled bearer , priority 0 [ 304.390716][T15317] tipc: Resetting bearer [ 305.505989][ T9090] tipc: Node number set to 4016204761 [ 306.099955][T15317] tipc: Disabling bearer [ 306.419715][T15356] FAULT_INJECTION: forcing a failure. [ 306.419715][T15356] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.425540][T15356] CPU: 2 UID: 0 PID: 15356 Comm: syz.3.3637 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 306.425565][T15356] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 306.425575][T15356] Call Trace: [ 306.425582][T15356] [ 306.425589][T15356] dump_stack_lvl+0x16c/0x1f0 [ 306.425611][T15356] should_fail_ex+0x512/0x640 [ 306.425632][T15356] _copy_from_iter+0x29f/0x16f0 [ 306.425655][T15356] ? __alloc_skb+0x200/0x380 [ 306.425680][T15356] ? __pfx__copy_from_iter+0x10/0x10 [ 306.425701][T15356] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 306.425726][T15356] netlink_sendmsg+0x829/0xdd0 [ 306.425748][T15356] ? __pfx_netlink_sendmsg+0x10/0x10 [ 306.425773][T15356] ____sys_sendmsg+0xa98/0xc70 [ 306.425795][T15356] ? copy_msghdr_from_user+0x10a/0x160 [ 306.425812][T15356] ? __pfx_____sys_sendmsg+0x10/0x10 [ 306.425842][T15356] ___sys_sendmsg+0x134/0x1d0 [ 306.425859][T15356] ? __pfx____sys_sendmsg+0x10/0x10 [ 306.425896][T15356] ? __mutex_unlock_slowpath+0x100/0x800 [ 306.425935][T15356] __sys_sendmsg+0x16d/0x220 [ 306.425952][T15356] ? __pfx___sys_sendmsg+0x10/0x10 [ 306.425984][T15356] do_syscall_64+0xcd/0x4c0 [ 306.426004][T15356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.426020][T15356] RIP: 0033:0x7feb2258ebe9 [ 306.426033][T15356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.426077][T15356] RSP: 002b:00007feb23346038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 306.426094][T15356] RAX: ffffffffffffffda RBX: 00007feb227b5fa0 RCX: 00007feb2258ebe9 [ 306.426104][T15356] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 306.426114][T15356] RBP: 00007feb23346090 R08: 0000000000000000 R09: 0000000000000000 [ 306.426124][T15356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.426134][T15356] R13: 00007feb227b6038 R14: 00007feb227b5fa0 R15: 00007ffc8ed41f18 [ 306.426160][T15356] [ 306.738841][T15359] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3636'. [ 306.781134][T15354] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 306.792724][T15354] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 306.797272][T15354] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 306.815882][T15354] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 307.074470][T15373] syz_tun: entered allmulticast mode [ 307.298252][T15375] program syz.5.3642 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 307.423363][T15390] netlink: 'syz.4.3646': attribute type 1 has an invalid length. [ 307.432884][T15391] FAULT_INJECTION: forcing a failure. [ 307.432884][T15391] name failslab, interval 1, probability 0, space 0, times 0 [ 307.437594][T15391] CPU: 3 UID: 0 PID: 15391 Comm: syz.5.3647 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 307.437610][T15391] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 307.437617][T15391] Call Trace: [ 307.437621][T15391] [ 307.437626][T15391] dump_stack_lvl+0x16c/0x1f0 [ 307.437641][T15391] should_fail_ex+0x512/0x640 [ 307.437653][T15391] ? __kmalloc_noprof+0xbf/0x510 [ 307.437665][T15391] ? ovl_cache_entry_new+0x60/0x750 [ 307.437681][T15391] should_failslab+0xc2/0x120 [ 307.437693][T15391] __kmalloc_noprof+0xd2/0x510 [ 307.437707][T15391] ovl_cache_entry_new+0x60/0x750 [ 307.437725][T15391] ovl_fill_merge+0x601/0xa90 [ 307.437743][T15391] ? __pfx_ovl_fill_merge+0x10/0x10 [ 307.437759][T15391] offset_readdir+0x458/0x6d0 [ 307.437773][T15391] iterate_dir+0x296/0xaf0 [ 307.437792][T15391] ovl_dir_read_merged+0x20d/0x5c0 [ 307.437809][T15391] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 307.437828][T15391] ? __pfx_ovl_fill_merge+0x10/0x10 [ 307.437851][T15391] ovl_iterate+0x86c/0xe40 [ 307.437868][T15391] ? __pfx_down_read_killable+0x10/0x10 [ 307.437883][T15391] ? __pfx_ovl_iterate+0x10/0x10 [ 307.437899][T15391] wrap_directory_iterator+0x9f/0xe0 [ 307.437917][T15391] iterate_dir+0x296/0xaf0 [ 307.437935][T15391] __x64_sys_getdents+0x13c/0x2b0 [ 307.437952][T15391] ? __pfx___x64_sys_getdents+0x10/0x10 [ 307.437969][T15391] ? __pfx_filldir+0x10/0x10 [ 307.437990][T15391] do_syscall_64+0xcd/0x4c0 [ 307.438003][T15391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.438014][T15391] RIP: 0033:0x7f316f98ebe9 [ 307.438023][T15391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.438088][T15391] RSP: 002b:00007f3170874038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 307.438100][T15391] RAX: ffffffffffffffda RBX: 00007f316fbb5fa0 RCX: 00007f316f98ebe9 [ 307.438106][T15391] RDX: 000000000000001f RSI: 00002000000008c0 RDI: 0000000000000003 [ 307.438113][T15391] RBP: 00007f3170874090 R08: 0000000000000000 R09: 0000000000000000 [ 307.438119][T15391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.438125][T15391] R13: 00007f316fbb6038 R14: 00007f316fbb5fa0 R15: 00007ffcd9030808 [ 307.438139][T15391] [ 307.445915][T15390] 8021q: adding VLAN 0 to HW filter on device bond3 [ 307.476064][ T40] audit: type=1400 audit(1755066670.958:1683): avc: denied { accept } for pid=15385 comm="syz.4.3646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 307.498904][T15386] vlan2: entered allmulticast mode [ 307.551699][T15386] veth1: entered allmulticast mode [ 307.555216][T15386] bond3: (slave vlan2): Opening slave failed [ 307.562538][T15395] netlink: 'syz.5.3648': attribute type 29 has an invalid length. [ 307.568189][T15395] netlink: 'syz.5.3648': attribute type 29 has an invalid length. [ 307.571206][T15395] netlink: 500 bytes leftover after parsing attributes in process `syz.5.3648'. [ 307.572997][T15371] syz_tun: left allmulticast mode [ 307.605178][T15398] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3650'. [ 307.617708][T15398] fuse: Bad value for 'fd' [ 307.661648][T15403] sctp: [Deprecated]: syz.5.3651 (pid 15403) Use of struct sctp_assoc_value in delayed_ack socket option. [ 307.661648][T15403] Use struct sctp_sack_info instead [ 307.669448][T15402] FAULT_INJECTION: forcing a failure. [ 307.669448][T15402] name failslab, interval 1, probability 0, space 0, times 0 [ 307.677633][T15402] CPU: 3 UID: 0 PID: 15402 Comm: syz.4.3652 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 307.677659][T15402] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 307.677669][T15402] Call Trace: [ 307.677675][T15402] [ 307.677681][T15402] dump_stack_lvl+0x16c/0x1f0 [ 307.677703][T15402] should_fail_ex+0x512/0x640 [ 307.677721][T15402] ? fs_reclaim_acquire+0xae/0x150 [ 307.677742][T15402] should_failslab+0xc2/0x120 [ 307.677758][T15402] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 307.677773][T15402] ? security_inode_alloc+0x3b/0x2b0 [ 307.677799][T15402] security_inode_alloc+0x3b/0x2b0 [ 307.677820][T15402] inode_init_always_gfp+0xce4/0x1030 [ 307.677843][T15402] alloc_inode+0x86/0x240 [ 307.677867][T15402] new_inode+0x22/0x1c0 [ 307.677897][T15402] hugetlbfs_get_inode+0x354/0x730 [ 307.677915][T15402] ? __fget_files+0x20e/0x3c0 [ 307.677935][T15402] hugetlb_file_setup+0x15b/0x620 [ 307.677957][T15402] ksys_mmap_pgoff+0x189/0x5c0 [ 307.677983][T15402] __x64_sys_mmap+0x125/0x190 [ 307.678003][T15402] do_syscall_64+0xcd/0x4c0 [ 307.678022][T15402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.678070][T15402] RIP: 0033:0x7f294758ebe9 [ 307.678083][T15402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.678099][T15402] RSP: 002b:00007f294840f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 307.678116][T15402] RAX: ffffffffffffffda RBX: 00007f29477b5fa0 RCX: 00007f294758ebe9 [ 307.678126][T15402] RDX: 0000000000000003 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 307.678137][T15402] RBP: 00007f294840f090 R08: ffffffffffffffff R09: 0000000000000000 [ 307.678147][T15402] R10: 000200000005c832 R11: 0000000000000246 R12: 0000000000000001 [ 307.678157][T15402] R13: 00007f29477b6038 R14: 00007f29477b5fa0 R15: 00007ffe5aa0a728 [ 307.678181][T15402] [ 307.758614][ C3] vkms_vblank_simulate: vblank timer overrun [ 307.826830][ T40] audit: type=1400 audit(1755066671.308:1684): avc: denied { create } for pid=15408 comm="syz.3.3655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 307.830972][T15409] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3655'. [ 307.832922][ T40] audit: type=1400 audit(1755066671.308:1685): avc: denied { write } for pid=15408 comm="syz.3.3655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 307.851768][ T40] audit: type=1400 audit(1755066671.328:1686): avc: denied { checkpoint_restore } for pid=15410 comm="syz.5.3656" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 307.892843][ T40] audit: type=1400 audit(1755066671.368:1687): avc: denied { listen } for pid=15408 comm="syz.3.3655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 307.935529][T15425] FAULT_INJECTION: forcing a failure. [ 307.935529][T15425] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.940136][T15425] CPU: 2 UID: 0 PID: 15425 Comm: syz.3.3662 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 307.940153][T15425] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 307.940159][T15425] Call Trace: [ 307.940164][T15425] [ 307.940169][T15425] dump_stack_lvl+0x16c/0x1f0 [ 307.940186][T15425] should_fail_ex+0x512/0x640 [ 307.940201][T15425] _copy_to_user+0x32/0xd0 [ 307.940216][T15425] simple_read_from_buffer+0xcb/0x170 [ 307.940228][T15425] proc_fail_nth_read+0x197/0x240 [ 307.940242][T15425] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 307.940255][T15425] ? rw_verify_area+0xcf/0x6c0 [ 307.940271][T15425] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 307.940283][T15425] vfs_read+0x1e1/0xcf0 [ 307.940295][T15425] ? __pfx___mutex_lock+0x10/0x10 [ 307.940307][T15425] ? __pfx_vfs_read+0x10/0x10 [ 307.940321][T15425] ? __fget_files+0x20e/0x3c0 [ 307.940337][T15425] ksys_read+0x12a/0x250 [ 307.940347][T15425] ? __pfx_ksys_read+0x10/0x10 [ 307.940358][T15425] ? fput+0x9b/0xd0 [ 307.940375][T15425] do_syscall_64+0xcd/0x4c0 [ 307.940388][T15425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.940399][T15425] RIP: 0033:0x7feb2258d5fc [ 307.940408][T15425] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 307.940418][T15425] RSP: 002b:00007feb23346030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 307.940429][T15425] RAX: ffffffffffffffda RBX: 00007feb227b5fa0 RCX: 00007feb2258d5fc [ 307.940436][T15425] RDX: 000000000000000f RSI: 00007feb233460a0 RDI: 0000000000000004 [ 307.940442][T15425] RBP: 00007feb23346090 R08: 0000000000000000 R09: 0000000000000000 [ 307.940448][T15425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.940454][T15425] R13: 00007feb227b6038 R14: 00007feb227b5fa0 R15: 00007ffc8ed41f18 [ 307.940472][T15425] [ 307.972974][ T40] audit: type=1400 audit(1755066671.428:1688): avc: denied { watch watch_reads } for pid=15417 comm="syz.4.3659" path="/proc/1229" dev="proc" ino=74629 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 308.015042][ T40] audit: type=1400 audit(1755066671.468:1689): avc: denied { bind } for pid=15428 comm="syz.3.3663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 308.079866][T15437] netlink: 'syz.4.3667': attribute type 1 has an invalid length. [ 308.100775][T15437] 8021q: adding VLAN 0 to HW filter on device bond4 [ 308.115081][T15437] vlan2: entered allmulticast mode [ 308.118453][T15437] bond4: (slave vlan2): Opening slave failed [ 308.184531][ T5987] block nbd3: Receive control failed (result -32) [ 308.194118][ T841] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 308.246543][ T61] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 308.289975][T15447] FAULT_INJECTION: forcing a failure. [ 308.289975][T15447] name failslab, interval 1, probability 0, space 0, times 0 [ 308.296279][T15447] CPU: 3 UID: 0 PID: 15447 Comm: syz.3.3670 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 308.296302][T15447] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 308.296311][T15447] Call Trace: [ 308.296317][T15447] [ 308.296324][T15447] dump_stack_lvl+0x16c/0x1f0 [ 308.296344][T15447] should_fail_ex+0x512/0x640 [ 308.296359][T15447] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 308.296384][T15447] should_failslab+0xc2/0x120 [ 308.296401][T15447] __kmalloc_cache_noprof+0x6a/0x3e0 [ 308.296421][T15447] ? iopt_cut_iova+0x3f5/0xe40 [ 308.296446][T15447] iopt_cut_iova+0x3f5/0xe40 [ 308.296482][T15447] iommufd_vfio_ioctl+0xafe/0xe90 [ 308.296503][T15447] ? __pfx_iommufd_vfio_ioctl+0x10/0x10 [ 308.296543][T15447] ? do_vfs_ioctl+0x128/0x14f0 [ 308.296567][T15447] iommufd_fops_ioctl+0x45b/0x540 [ 308.296584][T15447] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 308.296602][T15447] ? hook_file_ioctl_common+0x145/0x410 [ 308.296623][T15447] ? selinux_file_ioctl+0x180/0x270 [ 308.296641][T15447] ? selinux_file_ioctl+0xb4/0x270 [ 308.296661][T15447] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 308.296678][T15447] __x64_sys_ioctl+0x18b/0x210 [ 308.296700][T15447] do_syscall_64+0xcd/0x4c0 [ 308.296717][T15447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.296732][T15447] RIP: 0033:0x7feb2258ebe9 [ 308.296744][T15447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.296758][T15447] RSP: 002b:00007feb23346038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 308.296774][T15447] RAX: ffffffffffffffda RBX: 00007feb227b5fa0 RCX: 00007feb2258ebe9 [ 308.296783][T15447] RDX: 0000200000000440 RSI: 0000000000003b72 RDI: 0000000000000003 [ 308.296792][T15447] RBP: 00007feb23346090 R08: 0000000000000000 R09: 0000000000000000 [ 308.296801][T15447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.296809][T15447] R13: 00007feb227b6038 R14: 00007feb227b5fa0 R15: 00007ffc8ed41f18 [ 308.296830][T15447] [ 308.355799][ T841] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 308.358818][ C3] vkms_vblank_simulate: vblank timer overrun [ 308.391630][ T841] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 308.397680][ T841] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 308.401346][ T841] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 308.406010][ T841] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 308.411941][ T841] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 308.416752][ T841] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 308.420008][ T841] usb 10-1: Product: syz [ 308.421751][ T841] usb 10-1: Manufacturer: syz [ 308.428436][ T841] cdc_wdm 10-1:1.0: skipping garbage [ 308.430677][ T841] cdc_wdm 10-1:1.0: skipping garbage [ 308.436020][ T841] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 308.438848][ T841] cdc_wdm 10-1:1.0: Unknown control protocol [ 308.445186][ T61] usb 11-1: config 0 has no interfaces? [ 308.447301][ T61] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 308.450642][ T61] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.456174][ T61] usb 11-1: config 0 descriptor?? [ 308.482263][ T40] audit: type=1400 audit(1755066671.958:1690): avc: denied { read } for pid=15451 comm="syz.4.3672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 308.496107][T15454] xfrm0 speed is unknown, defaulting to 1000 [ 308.498406][T15454] xfrm0 speed is unknown, defaulting to 1000 [ 308.501346][T15454] xfrm0 speed is unknown, defaulting to 1000 [ 308.512918][T15454] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 308.534460][T15454] xfrm0 speed is unknown, defaulting to 1000 [ 308.538403][T15454] xfrm0 speed is unknown, defaulting to 1000 [ 308.542398][T15454] xfrm0 speed is unknown, defaulting to 1000 [ 308.546472][T15454] xfrm0 speed is unknown, defaulting to 1000 [ 308.551412][T15454] xfrm0 speed is unknown, defaulting to 1000 [ 308.555776][T15454] xfrm0 speed is unknown, defaulting to 1000 [ 308.559408][T15454] xfrm0 speed is unknown, defaulting to 1000 [ 308.563034][T15454] xfrm0 speed is unknown, defaulting to 1000 [ 308.567009][T15454] xfrm0 speed is unknown, defaulting to 1000 [ 308.570646][T15454] xfrm0 speed is unknown, defaulting to 1000 [ 308.576688][T15454] xfrm0 speed is unknown, defaulting to 1000 [ 308.580348][T15454] xfrm0 speed is unknown, defaulting to 1000 [ 308.613238][T15462] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3675'. [ 308.675594][T15472] netlink: 'syz.3.3678': attribute type 10 has an invalid length. [ 308.685162][T15472] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 308.695141][ T6519] usb 11-1: USB disconnect, device number 11 [ 308.702991][T13552] usb 10-1: USB disconnect, device number 15 [ 308.733360][T15478] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15478 comm=syz.3.3680 [ 308.738896][T15478] netlink: 'syz.3.3680': attribute type 1 has an invalid length. [ 308.769006][T15478] bond1: (slave bridge2): making interface the new active one [ 308.773129][T15478] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 308.823955][ T5987] Bluetooth: hci3: command 0x040f tx timeout [ 308.825297][ T63] Bluetooth: hci0: command 0x0405 tx timeout [ 308.884617][T15493] netlink: 296 bytes leftover after parsing attributes in process `syz.6.3686'. [ 308.959349][T15502] FAULT_INJECTION: forcing a failure. [ 308.959349][T15502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.966426][T15502] CPU: 3 UID: 0 PID: 15502 Comm: syz.6.3689 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 308.966451][T15502] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 308.966462][T15502] Call Trace: [ 308.966468][T15502] [ 308.966476][T15502] dump_stack_lvl+0x16c/0x1f0 [ 308.966499][T15502] should_fail_ex+0x512/0x640 [ 308.966521][T15502] _copy_from_user+0x2e/0xd0 [ 308.966549][T15502] copy_msghdr_from_user+0x98/0x160 [ 308.966567][T15502] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 308.966594][T15502] ___sys_sendmsg+0xfe/0x1d0 [ 308.966610][T15502] ? __pfx____sys_sendmsg+0x10/0x10 [ 308.966648][T15502] ? __mutex_unlock_slowpath+0x100/0x800 [ 308.966674][T15502] __sys_sendmsg+0x16d/0x220 [ 308.966692][T15502] ? __pfx___sys_sendmsg+0x10/0x10 [ 308.966723][T15502] do_syscall_64+0xcd/0x4c0 [ 308.966743][T15502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.966759][T15502] RIP: 0033:0x7f7d57b8ebe9 [ 308.966773][T15502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.966790][T15502] RSP: 002b:00007f7d5891f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 308.966807][T15502] RAX: ffffffffffffffda RBX: 00007f7d57db5fa0 RCX: 00007f7d57b8ebe9 [ 308.966819][T15502] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 308.966829][T15502] RBP: 00007f7d5891f090 R08: 0000000000000000 R09: 0000000000000000 [ 308.966839][T15502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.966849][T15502] R13: 00007f7d57db6038 R14: 00007f7d57db5fa0 R15: 00007fff24075fc8 [ 308.966871][T15502] [ 309.044740][ C3] vkms_vblank_simulate: vblank timer overrun [ 309.089987][T15506] geneve3: entered promiscuous mode [ 309.183235][T15514] FAULT_INJECTION: forcing a failure. [ 309.183235][T15514] name failslab, interval 1, probability 0, space 0, times 0 [ 309.188936][T15514] CPU: 0 UID: 0 PID: 15514 Comm: syz.6.3694 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 309.188962][T15514] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 309.188973][T15514] Call Trace: [ 309.188979][T15514] [ 309.188986][T15514] dump_stack_lvl+0x16c/0x1f0 [ 309.189009][T15514] should_fail_ex+0x512/0x640 [ 309.189027][T15514] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 309.189053][T15514] should_failslab+0xc2/0x120 [ 309.189072][T15514] __kmalloc_cache_noprof+0x6a/0x3e0 [ 309.189094][T15514] ? __asan_memcpy+0x3c/0x60 [ 309.189114][T15514] ? sctp_association_new+0xbb/0x2a00 [ 309.189133][T15514] ? sctp_add_bind_addr+0x2a1/0x3f0 [ 309.189157][T15514] sctp_association_new+0xbb/0x2a00 [ 309.189181][T15514] sctp_connect_new_asoc+0x1a8/0x770 [ 309.189201][T15514] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 309.189230][T15514] sctp_sendmsg+0x1560/0x1e10 [ 309.189256][T15514] ? __pfx_sctp_sendmsg+0x10/0x10 [ 309.189278][T15514] ? __pfx_sock_has_perm+0x10/0x10 [ 309.189311][T15514] ? __pfx_sctp_sendmsg+0x10/0x10 [ 309.189331][T15514] inet_sendmsg+0x11c/0x140 [ 309.189355][T15514] __sys_sendto+0x43c/0x520 [ 309.189381][T15514] ? __pfx___sys_sendto+0x10/0x10 [ 309.189424][T15514] ? ksys_write+0x1ac/0x250 [ 309.189451][T15514] ? __pfx_ksys_write+0x10/0x10 [ 309.189471][T15514] __x64_sys_sendto+0xe0/0x1c0 [ 309.189494][T15514] ? do_syscall_64+0x91/0x4c0 [ 309.189511][T15514] ? lockdep_hardirqs_on+0x7c/0x110 [ 309.189524][T15514] do_syscall_64+0xcd/0x4c0 [ 309.189539][T15514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.189553][T15514] RIP: 0033:0x7f7d57b8ebe9 [ 309.189564][T15514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.189579][T15514] RSP: 002b:00007f7d5891f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 309.189596][T15514] RAX: ffffffffffffffda RBX: 00007f7d57db5fa0 RCX: 00007f7d57b8ebe9 [ 309.189606][T15514] RDX: 0000000000000002 RSI: 00002000000002c0 RDI: 0000000000000003 [ 309.189616][T15514] RBP: 00007f7d5891f090 R08: 0000200000000140 R09: 000000000000001c [ 309.189626][T15514] R10: 000000000400c0d4 R11: 0000000000000246 R12: 0000000000000001 [ 309.189635][T15514] R13: 00007f7d57db6038 R14: 00007f7d57db5fa0 R15: 00007fff24075fc8 [ 309.189658][T15514] [ 309.339073][ T40] audit: type=1400 audit(1755066672.818:1691): avc: denied { read } for pid=5366 comm="acpid" name="mouse2" dev="devtmpfs" ino=3461 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 309.348560][ T40] audit: type=1400 audit(1755066672.818:1692): avc: denied { open } for pid=5366 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=3461 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 309.688781][T15545] input: syz0 as /devices/virtual/input/input39 [ 309.691401][T15545] input: failed to attach handler leds to device input39, error: -6 [ 309.712594][T15546] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3705'. [ 309.728521][T15546] syz_tun (unregistering): left promiscuous mode [ 309.824750][T15544] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3705'. [ 309.834441][ T841] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 309.882342][T15551] syz.6.3706: attempt to access beyond end of device [ 309.882342][T15551] nbd6: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 309.887545][T15551] gfs2: error -5 reading superblock [ 309.994229][ T841] usb 10-1: Using ep0 maxpacket: 32 [ 309.998679][ T841] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.002784][ T841] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 310.006709][ T841] usb 10-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 310.010533][ T841] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.016666][ T841] usb 10-1: config 0 descriptor?? [ 310.171663][T15565] batman_adv: batadv0: Adding interface: gretap1 [ 310.176923][T15565] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.188724][T15565] batman_adv: batadv0: Interface activated: gretap1 [ 310.199415][T15565] netlink: 'syz.3.3709': attribute type 1 has an invalid length. [ 310.609298][T15572] netlink: 'syz.4.3711': attribute type 1 has an invalid length. [ 310.612735][T15572] netlink: 'syz.4.3711': attribute type 2 has an invalid length. [ 310.616898][T15572] netlink: 1172 bytes leftover after parsing attributes in process `syz.4.3711'. [ 310.699279][T15579] netlink: 'syz.4.3713': attribute type 11 has an invalid length. [ 310.805520][T15585] FAULT_INJECTION: forcing a failure. [ 310.805520][T15585] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 310.811057][T15585] CPU: 3 UID: 0 PID: 15585 Comm: syz.6.3716 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 310.811083][T15585] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 310.811094][T15585] Call Trace: [ 310.811100][T15585] [ 310.811108][T15585] dump_stack_lvl+0x16c/0x1f0 [ 310.811130][T15585] should_fail_ex+0x512/0x640 [ 310.811150][T15585] _copy_from_iter+0x29f/0x16f0 [ 310.811174][T15585] ? __alloc_skb+0x200/0x380 [ 310.811199][T15585] ? __pfx__copy_from_iter+0x10/0x10 [ 310.811222][T15585] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 310.811247][T15585] netlink_sendmsg+0x829/0xdd0 [ 310.811269][T15585] ? __pfx_netlink_sendmsg+0x10/0x10 [ 310.811306][T15585] ____sys_sendmsg+0xa98/0xc70 [ 310.811327][T15585] ? copy_msghdr_from_user+0x10a/0x160 [ 310.811344][T15585] ? __pfx_____sys_sendmsg+0x10/0x10 [ 310.811375][T15585] ___sys_sendmsg+0x134/0x1d0 [ 310.811393][T15585] ? __pfx____sys_sendmsg+0x10/0x10 [ 310.811430][T15585] ? __mutex_unlock_slowpath+0x100/0x800 [ 310.811454][T15585] __sys_sendmsg+0x16d/0x220 [ 310.811472][T15585] ? __pfx___sys_sendmsg+0x10/0x10 [ 310.811502][T15585] do_syscall_64+0xcd/0x4c0 [ 310.811523][T15585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.811540][T15585] RIP: 0033:0x7f7d57b8ebe9 [ 310.811554][T15585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.811569][T15585] RSP: 002b:00007f7d5891f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 310.811586][T15585] RAX: ffffffffffffffda RBX: 00007f7d57db5fa0 RCX: 00007f7d57b8ebe9 [ 310.811597][T15585] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 310.811608][T15585] RBP: 00007f7d5891f090 R08: 0000000000000000 R09: 0000000000000000 [ 310.811619][T15585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.811629][T15585] R13: 00007f7d57db6038 R14: 00007f7d57db5fa0 R15: 00007fff24075fc8 [ 310.811653][T15585] [ 310.896490][ C3] vkms_vblank_simulate: vblank timer overrun [ 310.905373][ T63] Bluetooth: hci3: command 0x040f tx timeout [ 311.170877][T15609] pim6reg: entered allmulticast mode [ 311.173384][T15609] pim6reg: left allmulticast mode [ 311.386218][T15620] tap0: tun_chr_ioctl cmd 1074025677 [ 311.388119][T15620] tap0: linktype set to 769 [ 311.443535][T15621] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15621 comm=syz.3.3726 [ 311.878252][T15633] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3732'. [ 312.058147][T15647] netlink: 'syz.3.3738': attribute type 3 has an invalid length. [ 312.061240][T15647] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3738'. [ 312.230548][T15668] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3745'. [ 312.237088][T15663] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 312.244782][T15669] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 312.281396][T15675] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3748'. [ 312.286074][T15675] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3748'. [ 312.563540][T13552] usb 10-1: USB disconnect, device number 16 [ 312.754018][T15705] validate_nla: 1 callbacks suppressed [ 312.754033][T15705] netlink: 'syz.5.3757': attribute type 10 has an invalid length. [ 312.759231][T15705] wlan1: mtu less than device minimum [ 312.761281][T15705] Ã: (slave wlan1): Error -22 calling dev_set_mtu [ 312.766279][T15715] netlink: 'syz.3.3760': attribute type 5 has an invalid length. [ 312.811289][T15719] netlink: 'syz.5.3761': attribute type 4 has an invalid length. [ 312.816036][T15719] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3761'. [ 312.906783][T15732] Invalid logical block size (-16777217) [ 312.918455][T15734] program syz.6.3768 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 312.946998][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 312.947012][ T40] audit: type=1400 audit(1755066676.428:1695): avc: denied { accept } for pid=15733 comm="syz.6.3768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 312.993949][ T5987] Bluetooth: hci3: command 0x040f tx timeout [ 313.125212][T15746] netlink: 'syz.4.3770': attribute type 10 has an invalid length. [ 313.131229][T15746] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 313.245862][ T40] audit: type=1804 audit(1755066676.728:1696): pid=15755 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.3773" name="/newroot/526/file0/file0" dev="9p" ino=35913850 res=1 errno=0 [ 313.353169][T15757] FAULT_INJECTION: forcing a failure. [ 313.353169][T15757] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 313.358763][T15757] CPU: 2 UID: 0 PID: 15757 Comm: syz.4.3774 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 313.358788][T15757] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 313.358799][T15757] Call Trace: [ 313.358805][T15757] [ 313.358812][T15757] dump_stack_lvl+0x16c/0x1f0 [ 313.358835][T15757] should_fail_ex+0x512/0x640 [ 313.358857][T15757] should_fail_alloc_page+0xe7/0x130 [ 313.358879][T15757] prepare_alloc_pages+0x3c2/0x610 [ 313.358902][T15757] ? stack_depot_save_flags+0x3de/0x9c0 [ 313.358924][T15757] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 313.358943][T15757] ? kasan_save_stack+0x42/0x60 [ 313.358959][T15757] ? kasan_save_stack+0x33/0x60 [ 313.358974][T15757] ? kasan_save_track+0x14/0x30 [ 313.358989][T15757] ? __kasan_kmalloc+0xaa/0xb0 [ 313.359004][T15757] ? __kmalloc_noprof+0x223/0x510 [ 313.359019][T15757] ? bio_kmalloc+0x41/0x70 [ 313.359033][T15757] ? blk_rq_map_kern+0x387/0x6d0 [ 313.359055][T15757] ? scsi_execute_cmd+0xbd9/0xef0 [ 313.359076][T15757] ? sr_do_ioctl+0x219/0x840 [ 313.359094][T15757] ? sr_packet+0xee/0x1c0 [ 313.359109][T15757] ? dvd_do_auth+0x34b/0xe70 [ 313.359134][T15757] ? mmc_ioctl_dvd_auth+0x153/0x230 [ 313.359157][T15757] ? cdrom_ioctl+0x2cea/0x3190 [ 313.359170][T15757] ? sr_block_ioctl+0x1b0/0x250 [ 313.359185][T15757] ? blkdev_ioctl+0x277/0x6d0 [ 313.359206][T15757] ? __x64_sys_ioctl+0x18b/0x210 [ 313.359229][T15757] ? do_syscall_64+0xcd/0x4c0 [ 313.359246][T15757] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.359265][T15757] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 313.359298][T15757] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 313.359322][T15757] ? policy_nodemask+0xea/0x4e0 [ 313.359344][T15757] alloc_pages_mpol+0x1fb/0x550 [ 313.359364][T15757] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 313.359382][T15757] ? trace_kmalloc+0x2b/0xd0 [ 313.359406][T15757] ? __kmalloc_noprof+0x242/0x510 [ 313.359422][T15757] ? __pfx___debug_object_init+0x10/0x10 [ 313.359453][T15757] alloc_pages_noprof+0x131/0x390 [ 313.359473][T15757] blk_rq_map_kern+0x403/0x6d0 [ 313.359501][T15757] scsi_execute_cmd+0xbd9/0xef0 [ 313.359529][T15757] ? __pfx_scsi_execute_cmd+0x10/0x10 [ 313.359550][T15757] ? unwind_get_return_address+0x59/0xa0 [ 313.359570][T15757] ? arch_stack_walk+0xa6/0x100 [ 313.359595][T15757] sr_do_ioctl+0x219/0x840 [ 313.359620][T15757] ? __pfx_sr_do_ioctl+0x10/0x10 [ 313.359637][T15757] ? stack_depot_save_flags+0x29/0x9c0 [ 313.359656][T15757] ? __lock_acquire+0xb97/0x1ce0 [ 313.359694][T15757] sr_packet+0xee/0x1c0 [ 313.359712][T15757] dvd_do_auth+0x34b/0xe70 [ 313.359738][T15757] ? __pfx_dvd_do_auth+0x10/0x10 [ 313.359770][T15757] ? __might_fault+0xe3/0x190 [ 313.359786][T15757] ? __might_fault+0x13b/0x190 [ 313.359812][T15757] mmc_ioctl_dvd_auth+0x153/0x230 [ 313.359839][T15757] ? __pfx_mmc_ioctl_dvd_auth+0x10/0x10 [ 313.359871][T15757] cdrom_ioctl+0x2cea/0x3190 [ 313.359890][T15757] ? __pfx_cdrom_ioctl+0x10/0x10 [ 313.359907][T15757] ? rpm_resume+0x80c/0x1310 [ 313.359924][T15757] ? rcu_is_watching+0x12/0xc0 [ 313.359944][T15757] ? rpm_resume+0x80c/0x1310 [ 313.359959][T15757] ? trace_rpm_return_int+0x196/0x220 [ 313.359977][T15757] ? rpm_resume+0x811/0x1310 [ 313.359999][T15757] ? __pfx_rpm_resume+0x10/0x10 [ 313.360014][T15757] ? do_raw_spin_lock+0x12c/0x2b0 [ 313.360033][T15757] ? find_held_lock+0x2b/0x80 [ 313.360058][T15757] ? lockdep_hardirqs_on+0x7c/0x110 [ 313.360074][T15757] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 313.360100][T15757] ? __pm_runtime_resume+0xc3/0x170 [ 313.360121][T15757] sr_block_ioctl+0x1b0/0x250 [ 313.360140][T15757] ? __pfx_sr_block_ioctl+0x10/0x10 [ 313.360158][T15757] blkdev_ioctl+0x277/0x6d0 [ 313.360182][T15757] ? __pfx_blkdev_ioctl+0x10/0x10 [ 313.360204][T15757] ? selinux_file_ioctl+0x180/0x270 [ 313.360227][T15757] ? selinux_file_ioctl+0xb4/0x270 [ 313.360251][T15757] ? __pfx_blkdev_ioctl+0x10/0x10 [ 313.360277][T15757] __x64_sys_ioctl+0x18b/0x210 [ 313.360305][T15757] do_syscall_64+0xcd/0x4c0 [ 313.360324][T15757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.360341][T15757] RIP: 0033:0x7f294758ebe9 [ 313.360355][T15757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.360371][T15757] RSP: 002b:00007f294840f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 313.360388][T15757] RAX: ffffffffffffffda RBX: 00007f29477b5fa0 RCX: 00007f294758ebe9 [ 313.360404][T15757] RDX: 0000200000000040 RSI: 0000000000005392 RDI: 0000000000000003 [ 313.360415][T15757] RBP: 00007f294840f090 R08: 0000000000000000 R09: 0000000000000000 [ 313.360425][T15757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.360434][T15757] R13: 00007f29477b6038 R14: 00007f29477b5fa0 R15: 00007ffe5aa0a728 [ 313.360458][T15757] [ 313.818563][T15772] netlink: 'syz.3.3782': attribute type 10 has an invalid length. [ 313.832113][T15784] 9pnet_fd: p9_fd_create_tcp (15784): problem binding to privport [ 313.868571][T15786] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 313.964868][T15804] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15804 comm=syz.3.3793 [ 314.097235][T15816] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 314.184549][T15822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3798'. [ 314.219044][T15826] netlink: 'syz.3.3801': attribute type 15 has an invalid length. [ 314.346922][T15837] netlink: 'syz.3.3804': attribute type 2 has an invalid length. [ 314.354625][T15837] netlink: 'syz.3.3804': attribute type 1 has an invalid length. [ 314.357909][T15837] netlink: 'syz.3.3804': attribute type 1 has an invalid length. [ 314.623399][T15844] FAULT_INJECTION: forcing a failure. [ 314.623399][T15844] name failslab, interval 1, probability 0, space 0, times 0 [ 314.633637][T15844] CPU: 1 UID: 0 PID: 15844 Comm: syz.5.3805 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 314.633663][T15844] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 314.633674][T15844] Call Trace: [ 314.633680][T15844] [ 314.633688][T15844] dump_stack_lvl+0x16c/0x1f0 [ 314.633730][T15844] should_fail_ex+0x512/0x640 [ 314.633748][T15844] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 314.633776][T15844] should_failslab+0xc2/0x120 [ 314.633813][T15844] __kmalloc_cache_noprof+0x6a/0x3e0 [ 314.633835][T15844] ? do_raw_spin_lock+0x12c/0x2b0 [ 314.633853][T15844] ? find_held_lock+0x2b/0x80 [ 314.633871][T15844] ? create_io_worker+0xc9/0x5b0 [ 314.633897][T15844] ? create_io_worker+0x1f/0x5b0 [ 314.633918][T15844] create_io_worker+0xc9/0x5b0 [ 314.633942][T15844] io_wq_enqueue+0x4cc/0x980 [ 314.633988][T15844] ? __pfx_io_wq_enqueue+0x10/0x10 [ 314.634013][T15844] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 314.634036][T15844] ? io_prep_async_work+0x654/0x770 [ 314.634062][T15844] io_queue_iowq+0x246/0x530 [ 314.634088][T15844] io_req_task_submit+0x142/0x1f0 [ 314.634114][T15844] io_poll_task_func+0x90d/0x1130 [ 314.634134][T15844] ? __pfx_snd_rawmidi_poll+0x10/0x10 [ 314.634162][T15844] ? __pfx_io_poll_task_func+0x10/0x10 [ 314.634180][T15844] ? find_held_lock+0x2b/0x80 [ 314.634206][T15844] ? io_handle_tw_list+0x112/0x500 [ 314.634230][T15844] ? __pfx_io_poll_task_func+0x10/0x10 [ 314.634249][T15844] io_handle_tw_list+0x155/0x500 [ 314.634276][T15844] ? __pfx_io_handle_tw_list+0x10/0x10 [ 314.634305][T15844] tctx_task_work_run+0xac/0x380 [ 314.634331][T15844] tctx_task_work+0x7a/0xd0 [ 314.634353][T15844] ? __pfx_tctx_task_work+0x10/0x10 [ 314.634376][T15844] ? rcu_is_watching+0x12/0xc0 [ 314.634395][T15844] ? _raw_spin_unlock_irq+0x23/0x50 [ 314.634419][T15844] ? lockdep_hardirqs_on+0x7c/0x110 [ 314.634437][T15844] task_work_run+0x150/0x240 [ 314.634456][T15844] ? __pfx_task_work_run+0x10/0x10 [ 314.634471][T15844] ? schedule+0x2d7/0x3a0 [ 314.634498][T15844] ? get_signal+0xe45/0x26d0 [ 314.634520][T15844] get_signal+0xf45/0x26d0 [ 314.634538][T15844] ? find_held_lock+0x2b/0x80 [ 314.634561][T15844] ? __pfx_get_signal+0x10/0x10 [ 314.634579][T15844] ? __mutex_unlock_slowpath+0x163/0x800 [ 314.634601][T15844] arch_do_signal_or_restart+0x8f/0x7d0 [ 314.634624][T15844] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 314.634651][T15844] ? ksys_write+0x1ac/0x250 [ 314.634669][T15844] ? __pfx_ksys_write+0x10/0x10 [ 314.634691][T15844] exit_to_user_mode_loop+0x84/0x110 [ 314.634709][T15844] do_syscall_64+0x3f6/0x4c0 [ 314.634728][T15844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.634743][T15844] RIP: 0033:0x7f316f98ebe9 [ 314.634758][T15844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.634774][T15844] RSP: 002b:00007f3170853038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 314.634793][T15844] RAX: 0000000000000012 RBX: 00007f316fbb6090 RCX: 00007f316f98ebe9 [ 314.634803][T15844] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 000000000000000e [ 314.634813][T15844] RBP: 00007f3170853090 R08: 0000000000000000 R09: 0000000000000000 [ 314.634823][T15844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.634833][T15844] R13: 00007f316fbb6128 R14: 00007f316fbb6090 R15: 00007ffcd9030808 [ 314.634856][T15844] [ 314.775770][ T7137] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 314.961586][ T40] audit: type=1400 audit(1755066678.438:1697): avc: denied { name_connect } for pid=15851 comm="syz.6.3808" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 314.963444][T15852] 9pnet_fd: Insufficient options for proto=fd [ 314.977418][ T7137] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 314.982193][ T7137] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 314.986834][ T7137] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 314.991116][ T7137] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.998442][T15843] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 315.006228][ T7137] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 315.362774][ T6031] usb 8-1: USB disconnect, device number 40 [ 315.499315][T15866] autofs4:pid:15866:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 316.164117][T13736] tipc: Subscription rejected, illegal request [ 316.196826][T15895] FAULT_INJECTION: forcing a failure. [ 316.196826][T15895] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 316.202096][T15895] CPU: 2 UID: 0 PID: 15895 Comm: syz.6.3821 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 316.202121][T15895] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 316.202132][T15895] Call Trace: [ 316.202138][T15895] [ 316.202146][T15895] dump_stack_lvl+0x16c/0x1f0 [ 316.202173][T15895] should_fail_ex+0x512/0x640 [ 316.202195][T15895] _copy_to_user+0x32/0xd0 [ 316.202219][T15895] simple_read_from_buffer+0xcb/0x170 [ 316.202238][T15895] proc_fail_nth_read+0x197/0x240 [ 316.202259][T15895] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 316.202279][T15895] ? rw_verify_area+0xcf/0x6c0 [ 316.202305][T15895] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 316.202324][T15895] vfs_read+0x1e1/0xcf0 [ 316.202343][T15895] ? __pfx___mutex_lock+0x10/0x10 [ 316.202361][T15895] ? __pfx_vfs_read+0x10/0x10 [ 316.202384][T15895] ? __fget_files+0x20e/0x3c0 [ 316.202410][T15895] ksys_read+0x12a/0x250 [ 316.202426][T15895] ? __pfx_ksys_read+0x10/0x10 [ 316.202442][T15895] ? fput+0x9b/0xd0 [ 316.202467][T15895] do_syscall_64+0xcd/0x4c0 [ 316.202487][T15895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.202503][T15895] RIP: 0033:0x7f7d57b8d5fc [ 316.202516][T15895] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 316.202532][T15895] RSP: 002b:00007f7d5891f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 316.202548][T15895] RAX: ffffffffffffffda RBX: 00007f7d57db5fa0 RCX: 00007f7d57b8d5fc [ 316.202559][T15895] RDX: 000000000000000f RSI: 00007f7d5891f0a0 RDI: 0000000000000004 [ 316.202569][T15895] RBP: 00007f7d5891f090 R08: 0000000000000000 R09: 0000000000000000 [ 316.202579][T15895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.202589][T15895] R13: 00007f7d57db6038 R14: 00007f7d57db5fa0 R15: 00007fff24075fc8 [ 316.202612][T15895] [ 316.311609][ T40] audit: type=1400 audit(1755066679.788:1698): avc: denied { map } for pid=15896 comm="syz.6.3822" path="/dev/usbmon1" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 316.965490][ T40] audit: type=1400 audit(1755066680.448:1699): avc: denied { create } for pid=15912 comm="syz.6.3828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 316.973683][ T40] audit: type=1400 audit(1755066680.448:1700): avc: denied { ioctl } for pid=15912 comm="syz.6.3828" path="socket:[79897]" dev="sockfs" ino=79897 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 317.023226][ T40] audit: type=1400 audit(1755066680.498:1701): avc: denied { write } for pid=15912 comm="syz.6.3828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 317.023394][T15917] vlan2: entered promiscuous mode [ 317.034021][T15917] vlan2: entered allmulticast mode [ 317.036310][T15917] hsr_slave_1: entered allmulticast mode [ 317.077174][T15922] binder: BINDER_SET_CONTEXT_MGR already set [ 317.079753][T15922] binder: 15921:15922 ioctl 4018620d 200000000040 returned -16 [ 317.092747][T15924] loop2: detected capacity change from 0 to 7 [ 317.097887][T15924] Dev loop2: unable to read RDB block 7 [ 317.100251][T15924] loop2: unable to read partition table [ 317.102767][T15924] loop2: partition table beyond EOD, truncated [ 317.106941][T15924] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 317.200108][T15931] netlink: 'syz.5.3836': attribute type 10 has an invalid length. [ 317.210968][T15931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.217160][T15931] Ã: (slave batadv0): Enslaving as an active interface with an up link [ 317.272629][ T40] audit: type=1400 audit(1755066680.748:1702): avc: denied { unmount } for pid=10089 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 317.345035][T15939] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 317.381572][ T40] audit: type=1400 audit(1755066680.858:1703): avc: denied { ioctl } for pid=15940 comm="syz.6.3839" path="socket:[78196]" dev="sockfs" ino=78196 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 317.394848][T15944] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3840'. [ 317.428036][T15948] FAULT_INJECTION: forcing a failure. [ 317.428036][T15948] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 317.433365][T15948] CPU: 1 UID: 0 PID: 15948 Comm: syz.4.3841 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 317.433388][T15948] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 317.433398][T15948] Call Trace: [ 317.433405][T15948] [ 317.433411][T15948] dump_stack_lvl+0x16c/0x1f0 [ 317.433433][T15948] should_fail_ex+0x512/0x640 [ 317.433462][T15948] _copy_to_user+0x32/0xd0 [ 317.433484][T15948] simple_read_from_buffer+0xcb/0x170 [ 317.433503][T15948] proc_fail_nth_read+0x197/0x240 [ 317.433523][T15948] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 317.433544][T15948] ? rw_verify_area+0xcf/0x6c0 [ 317.433567][T15948] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 317.433585][T15948] vfs_read+0x1e1/0xcf0 [ 317.433604][T15948] ? __pfx___mutex_lock+0x10/0x10 [ 317.433621][T15948] ? __pfx_vfs_read+0x10/0x10 [ 317.433644][T15948] ? __fget_files+0x20e/0x3c0 [ 317.433669][T15948] ksys_read+0x12a/0x250 [ 317.433685][T15948] ? __pfx_ksys_read+0x10/0x10 [ 317.433701][T15948] ? fput+0x9b/0xd0 [ 317.433725][T15948] do_syscall_64+0xcd/0x4c0 [ 317.433744][T15948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.433761][T15948] RIP: 0033:0x7f294758d5fc [ 317.433774][T15948] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 317.433806][T15948] RSP: 002b:00007f294840f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 317.433822][T15948] RAX: ffffffffffffffda RBX: 00007f29477b5fa0 RCX: 00007f294758d5fc [ 317.433834][T15948] RDX: 000000000000000f RSI: 00007f294840f0a0 RDI: 0000000000000006 [ 317.433843][T15948] RBP: 00007f294840f090 R08: 0000000000000000 R09: 0000000000000000 [ 317.433852][T15948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.433862][T15948] R13: 00007f29477b6038 R14: 00007f29477b5fa0 R15: 00007ffe5aa0a728 [ 317.433888][T15948] [ 317.472567][T15953] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11) [ 317.505387][T15953] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 317.505549][ C3] vkms_vblank_simulate: vblank timer overrun [ 317.506433][T15953] vhci_hcd vhci_hcd.0: Device attached [ 317.509930][T15953] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(14) [ 317.517047][T15953] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 317.521741][T15953] vhci_hcd vhci_hcd.0: Device attached [ 317.525916][T15953] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 317.530777][T15953] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(18) [ 317.533651][T15953] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 317.537497][T15953] vhci_hcd vhci_hcd.0: Device attached [ 317.541886][T15953] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(20) [ 317.544799][T15953] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 317.548259][T15953] vhci_hcd vhci_hcd.0: Device attached [ 317.551492][T15953] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 317.556155][T15953] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 317.563177][T15953] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 317.568009][T15953] vhci_hcd vhci_hcd.0: pdev(5) rhport(7) sockfd(29) [ 317.570527][T15953] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 317.573429][T15953] vhci_hcd vhci_hcd.0: Device attached [ 317.588670][T15965] vhci_hcd: connection closed [ 317.588740][T15959] vhci_hcd: connection closed [ 317.590113][T15956] vhci_hcd: connection closed [ 317.590791][T15954] vhci_hcd: connection closed [ 317.592849][T15969] vhci_hcd: connection closed [ 317.593071][T13741] vhci_hcd: stop threads [ 317.593086][T13741] vhci_hcd: release socket [ 317.593099][T13741] vhci_hcd: disconnect device [ 317.594442][T13741] vhci_hcd: stop threads [ 317.594453][T13741] vhci_hcd: release socket [ 317.594464][T13741] vhci_hcd: disconnect device [ 317.595050][T13741] vhci_hcd: stop threads [ 317.613069][T13741] vhci_hcd: release socket [ 317.615258][T13741] vhci_hcd: disconnect device [ 317.617680][T13741] vhci_hcd: stop threads [ 317.619640][T13741] vhci_hcd: release socket [ 317.621646][T13741] vhci_hcd: disconnect device [ 317.625235][T13741] vhci_hcd: stop threads [ 317.626980][T13741] vhci_hcd: release socket [ 317.629214][T13741] vhci_hcd: disconnect device [ 317.694508][ T61] vhci_hcd: vhci_device speed not set [ 317.943956][ T6065] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 318.099435][ T6065] usb 11-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 318.102852][ T6065] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 318.107584][ T6065] usb 11-1: Product: syz [ 318.109233][ T6065] usb 11-1: Manufacturer: syz [ 318.111069][ T6065] usb 11-1: SerialNumber: syz [ 318.119126][ T6065] usb 11-1: config 0 descriptor?? [ 318.125604][ T6065] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 318.128899][ T6065] dvb-usb: bulk message failed: -22 (2/0) [ 318.140076][ T6065] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 318.144422][ T6065] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 318.147393][ T6065] usb 11-1: media controller created [ 318.162831][ T6065] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 318.244865][ C1] ------------[ cut here ]------------ [ 318.247722][ C1] WARNING: CPU: 1 PID: 0 at net/ipv4/af_inet.c:156 inet_sock_destruct+0x684/0x830 [ 318.251693][ C1] Modules linked in: [ 318.254069][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 318.260272][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 318.264688][ C1] RIP: 0010:inet_sock_destruct+0x684/0x830 [ 318.267287][ C1] Code: 0f 0b 90 e9 12 fe ff ff e8 59 e9 a8 f7 90 0f 0b 90 e9 5e fe ff ff e8 4b e9 a8 f7 90 0f 0b 90 e9 94 fe ff ff e8 3d e9 a8 f7 90 <0f> 0b 90 e9 d3 fe ff ff e8 2f 41 0f f8 e9 d7 fc ff ff 4c 89 ff e8 [ 318.275604][ C1] RSP: 0018:ffffc900006a0d90 EFLAGS: 00010246 [ 318.278231][ C1] RAX: 0000000000000000 RBX: ffff88802c56de80 RCX: ffffffff8a12a8b7 [ 318.281574][ C1] RDX: ffff88801dea2440 RSI: ffffffff8a12a9e3 RDI: 0000000000000005 [ 318.285117][ C1] RBP: 0000000000000fff R08: 0000000000000005 R09: 0000000000000000 [ 318.288582][ C1] R10: 0000000000000fff R11: 0000000000000000 R12: ffff88802c56de80 [ 318.292062][ C1] R13: ffff88802c56df10 R14: ffffc900006a0e90 R15: 0000000000000002 [ 318.295516][ C1] FS: 0000000000000000(0000) GS:ffff8880d67bc000(0000) knlGS:0000000000000000 [ 318.299293][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 318.302128][ C1] CR2: 000055558aec3808 CR3: 000000004cf42000 CR4: 0000000000352ef0 [ 318.305640][ C1] DR0: 0000000000000046 DR1: 0000000000000000 DR2: 00000000000000d0 [ 318.309032][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 318.309682][T15999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3855'. [ 318.312400][ C1] Call Trace: [ 318.317577][ C1] [ 318.318849][ C1] ? inet6_cleanup_sock+0x117/0x210 [ 318.321161][ C1] ? __pfx_inet6_sock_destruct+0x10/0x10 [ 318.323670][ C1] __sk_destruct+0x84/0x9a0 [ 318.325753][ C1] ? rcu_core+0x797/0x1530 [ 318.327682][ C1] rcu_core+0x79c/0x1530 [ 318.329503][ C1] ? __pfx_rcu_core+0x10/0x10 [ 318.331537][ C1] handle_softirqs+0x216/0x8e0 [ 318.333596][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 318.335914][ C1] __irq_exit_rcu+0x109/0x170 [ 318.337924][ C1] irq_exit_rcu+0x9/0x30 [ 318.339814][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 318.342214][ C1] [ 318.343493][ C1] [ 318.344847][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 318.347174][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 318.348962][ C1] Code: ac 62 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d d3 c2 16 00 fb f4 4c 0d 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 318.355401][ C1] RSP: 0018:ffffc90000177df8 EFLAGS: 00000282 [ 318.357340][ C1] RAX: 00000000003dcb4d RBX: 0000000000000001 RCX: ffffffff8b934c29 [ 318.359836][ C1] RDX: 0000000000000000 RSI: ffffffff8de4f1fd RDI: ffffffff8c162500 [ 318.362350][ C1] RBP: ffffed1003bd4488 R08: 0000000000000001 R09: ffffed100d4a6655 [ 318.364901][ C1] R10: ffff88806a5332ab R11: 0000000000000000 R12: 0000000000000001 [ 318.367416][ C1] R13: ffff88801dea2440 R14: ffffffff90ab3690 R15: 0000000000000000 [ 318.369927][ C1] ? ct_kernel_exit+0x139/0x190 [ 318.371499][ C1] default_idle+0x13/0x20 [ 318.372923][ C1] default_idle_call+0x6d/0xb0 [ 318.374513][ C1] do_idle+0x391/0x510 [ 318.375819][ C1] ? __pfx_do_idle+0x10/0x10 [ 318.377282][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 318.378933][ C1] cpu_startup_entry+0x4f/0x60 [ 318.380553][ C1] start_secondary+0x21d/0x2b0 [ 318.382115][ C1] ? __pfx_start_secondary+0x10/0x10 [ 318.383859][ C1] common_startup_64+0x13e/0x148 [ 318.384135][T16006] dvb-usb: bulk message failed: -22 (3/0) [ 318.385622][ C1] [ 318.385632][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 318.385641][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 318.385654][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 318.385662][ C1] Call Trace: [ 318.385666][ C1] [ 318.385671][ C1] dump_stack_lvl+0x3d/0x1f0 [ 318.385685][ C1] vpanic+0x6e8/0x7a0 [ 318.385702][ C1] ? __pfx_vpanic+0x10/0x10 [ 318.385720][ C1] ? inet_sock_destruct+0x684/0x830 [ 318.385736][ C1] panic+0xca/0xd0 [ 318.385751][ C1] ? __pfx_panic+0x10/0x10 [ 318.385771][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 318.385781][ C1] check_panic_on_warn+0xab/0xb0 [ 318.385791][ C1] __warn+0xf6/0x3c0 [ 318.385801][ C1] ? inet_sock_destruct+0x684/0x830 [ 318.385816][ C1] report_bug+0x3c3/0x580 [ 318.385832][ C1] ? inet_sock_destruct+0x684/0x830 [ 318.385847][ C1] handle_bug+0x184/0x210 [ 318.385860][ C1] exc_invalid_op+0x17/0x50 [ 318.385873][ C1] asm_exc_invalid_op+0x1a/0x20 [ 318.385883][ C1] RIP: 0010:inet_sock_destruct+0x684/0x830 [ 318.385898][ C1] Code: 0f 0b 90 e9 12 fe ff ff e8 59 e9 a8 f7 90 0f 0b 90 e9 5e fe ff ff e8 4b e9 a8 f7 90 0f 0b 90 e9 94 fe ff ff e8 3d e9 a8 f7 90 <0f> 0b 90 e9 d3 fe ff ff e8 2f 41 0f f8 e9 d7 fc ff ff 4c 89 ff e8 [ 318.385909][ C1] RSP: 0018:ffffc900006a0d90 EFLAGS: 00010246 [ 318.385919][ C1] RAX: 0000000000000000 RBX: ffff88802c56de80 RCX: ffffffff8a12a8b7 [ 318.385926][ C1] RDX: ffff88801dea2440 RSI: ffffffff8a12a9e3 RDI: 0000000000000005 [ 318.385953][ C1] RBP: 0000000000000fff R08: 0000000000000005 R09: 0000000000000000 [ 318.385965][ C1] R10: 0000000000000fff R11: 0000000000000000 R12: ffff88802c56de80 [ 318.385972][ C1] R13: ffff88802c56df10 R14: ffffc900006a0e90 R15: 0000000000000002 [ 318.385983][ C1] ? inet_sock_destruct+0x557/0x830 [ 318.385998][ C1] ? inet_sock_destruct+0x683/0x830 [ 318.386015][ C1] ? inet6_cleanup_sock+0x117/0x210 [ 318.386029][ C1] ? __pfx_inet6_sock_destruct+0x10/0x10 [ 318.386044][ C1] __sk_destruct+0x84/0x9a0 [ 318.386061][ C1] ? rcu_core+0x797/0x1530 [ 318.386074][ C1] rcu_core+0x79c/0x1530 [ 318.386089][ C1] ? __pfx_rcu_core+0x10/0x10 [ 318.386107][ C1] handle_softirqs+0x216/0x8e0 [ 318.386124][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 318.386139][ C1] __irq_exit_rcu+0x109/0x170 [ 318.386152][ C1] irq_exit_rcu+0x9/0x30 [ 318.386164][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 318.386181][ C1] [ 318.386185][ C1] [ 318.386189][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 318.386201][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 318.386211][ C1] Code: ac 62 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d d3 c2 16 00 fb f4 4c 0d 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 318.386222][ C1] RSP: 0018:ffffc90000177df8 EFLAGS: 00000282 [ 318.386231][ C1] RAX: 00000000003dcb4d RBX: 0000000000000001 RCX: ffffffff8b934c29 [ 318.386237][ C1] RDX: 0000000000000000 RSI: ffffffff8de4f1fd RDI: ffffffff8c162500 [ 318.386244][ C1] RBP: ffffed1003bd4488 R08: 0000000000000001 R09: ffffed100d4a6655 [ 318.386251][ C1] R10: ffff88806a5332ab R11: 0000000000000000 R12: 0000000000000001 [ 318.386257][ C1] R13: ffff88801dea2440 R14: ffffffff90ab3690 R15: 0000000000000000 [ 318.386267][ C1] ? ct_kernel_exit+0x139/0x190 [ 318.386281][ C1] default_idle+0x13/0x20 [ 318.386293][ C1] default_idle_call+0x6d/0xb0 [ 318.386305][ C1] do_idle+0x391/0x510 [ 318.386319][ C1] ? __pfx_do_idle+0x10/0x10 [ 318.386332][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 318.386347][ C1] cpu_startup_entry+0x4f/0x60 [ 318.386364][ C1] start_secondary+0x21d/0x2b0 [ 318.386379][ C1] ? __pfx_start_secondary+0x10/0x10 [ 318.386397][ C1] common_startup_64+0x13e/0x148 [ 318.386414][ C1] [ 318.388693][ C1] Kernel Offset: disabled VM DIAGNOSIS: 06:31:21 Registers: info registers vcpu 0 CPU#0 RAX=000000000037590d RBX=0000000000000000 RCX=ffffffff8b934c29 RDX=0000000000000000 RSI=ffffffff8de4f1fd RDI=ffffffff8c162500 RBP=fffffbfff1c52ef8 RSP=ffffffff8e207e08 R8 =0000000000000001 R9 =ffffed100d486655 R10=ffff88806a4332ab R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e2977c0 R14=ffffffff90ab3690 R15=0000000000000000 RIP=ffffffff8b93378f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000000100 CR3=000000004d534000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000306d 697376656474656e ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc8ed42426 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc8ed42426 00007ffc8ed4242c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb22612e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb22612e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb22612e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb22612e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb22612ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb22612fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb227874a8 00007feb227874a0 00007feb22787498 00007feb22787470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb232ed100 00007feb22787460 00007feb22787478 00007feb227874c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb227874b8 00007feb227874b0 00007feb227874a8 00007feb227874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000055 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff856404d5 RDI=ffffffff9b10dfa0 RBP=ffffffff9b10df60 RSP=ffffc900006a0700 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000055 R14=ffffffff9b10df60 R15=ffffffff85640470 RIP=ffffffff856404ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055558aec3808 CR3=000000004cf42000 CR4=00352ef0 DR0=0000000000000046 DR1=0000000000000000 DR2=00000000000000d0 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc8ed422a0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc8ed42426 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc8ed42426 00007ffc8ed4242c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb22612e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb22612e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb22612e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb22612e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb22612ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb22612fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000381245 RBX=0000000000000002 RCX=ffffffff8b934c29 RDX=0000000000000000 RSI=ffffffff8de4f1fd RDI=ffffffff8c162500 RBP=ffffed1003bd4910 RSP=ffffc90000187df8 R8 =0000000000000001 R9 =ffffed100d4c6655 R10=ffff88806a6332ab R11=0000000000000000 R12=0000000000000002 R13=ffff88801dea4880 R14=ffffffff90ab3690 R15=0000000000000000 RIP=ffffffff8b93378f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007feb23345f98 CR3=00000000387dd000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001030001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 006d68732f637069 767379732f636f72 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcd9030d16 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcd9030d16 00007ffcd9030d1c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f316fa12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f316fa12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f316fa12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f316fa12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f316fa12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f316fa12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e776f6e6b6e7500 6f6c6c3332302500 657a697320740004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b524a4b4e4b5000 4a49491617150000 405f4c560551464a 5751560541444700 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 11a59e7ad9e3b53f 8e04f0edc7bd0ea4 b2f32eebe56a2cdd 5f496fcace1265b4 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 de8c2c56ee791f51 3e511b8ed51e1832 30bb71d5c3ceb7e7 9133231389eaec94 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c486ceaa6f0b578d bd8f0ef0028b8a60 10fd3a2c345e1de7 0f71432e27bb1d87 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 51cc2179a991830f 4247baf0211aa24d 88a121f1c0885df9 0d3fc4d50ad2706b ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a11a59e7ad9e3b5 3f8e04f0edc7bd0e a4b2f32eebe56a2c dd5f496fcace1265 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffffc90003b1f5c0 RCX=ffffffff8b8a9901 RDX=ffff8880264f0000 RSI=0000000000000000 RDI=0000000000000007 RBP=ffff88802ce5f200 RSP=ffffc90003b1f480 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=ffffc90003b1f5d8 R15=ffff888012d6f600 RIP=ffffffff81bb9324 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa3f3128440 CR3=000000002e222000 CR4=00352ef0 DR0=0000000000000001 DR1=0000000000000003 DR2=0000000000000e8f DR3=0000000000000007 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 766c6f7365726269 6c2f343662696c2f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000c10 000000000000d3f0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffffffffffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001da0 0000000000033260 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000