last executing test programs: 4.399142426s ago: executing program 1 (id=3427): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000340)=0x4000000) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)={0x3, 0x0, [{0xeeef0000, 0xe1, &(0x7f0000000580)=""/225}, {0xd000, 0x24, &(0x7f00000003c0)=""/36}, {0x0, 0x0, 0x0}]}) fsopen(0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x501483, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x8, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x205000, 0x0) accept4$unix(r5, 0x0, &(0x7f0000000300), 0x80000) fchown(r6, 0x0, 0xee01) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x46108101}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYRES16=r7, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x40800}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 4.392765201s ago: executing program 1 (id=3433): fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x10, 0x3, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000580)={0x0, r1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x15, 0x8, 0x10000004, 0x9c5e, 0x0, 0x1, 0x5, '\x00', 0x0, r5, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000000)=@abs, 0xfffffffffffffe6c, &(0x7f0000000100)=[{&(0x7f0000000c00)=""/3, 0x15}], 0x1, &(0x7f0000000200)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x84}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000003c0)=""/51, 0x22}, {&(0x7f0000000500)=""/58, 0x3a}, {&(0x7f00000005c0)=""/23, 0xb}], 0x3}}, {{&(0x7f0000000340), 0x6e, &(0x7f0000000980)=[{&(0x7f0000000440)=""/179, 0xb3}, {&(0x7f0000000880)=""/204, 0xcc}], 0x2, &(0x7f00000009c0)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0xe4}}], 0x3, 0x0, &(0x7f0000000b40)={0x0, 0x3938700}) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) 4.388142869s ago: executing program 2 (id=3434): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x18a) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xd) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x42, 0x3b) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x200, 0x2, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x10}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfffffffc, 0x11e41e7a, 0x20000000, 0x7, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x100000, 0xffffffffffffffff}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x6}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f0000000280)='./file0\x00', 0x10081, 0xa0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, 0x0, &(0x7f00000000c0)) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x101800, 0x40) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) 3.21020357s ago: executing program 1 (id=3437): openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40, 0x14) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newnexthop={0x78, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0x4c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x81}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}, @NHA_RES_GROUP_BUCKETS={0x5a, 0x1, 0x7fff}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x1a}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xdc}, @NHA_RES_GROUP_IDLE_TIMER={0xfd7f, 0x2, 0xe}, @NHA_RES_GROUP_UNBALANCED_TIMER={0xfffffffffffffdf0, 0x3, 0x4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x7}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x2}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1]) chown(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) sendfile(r2, r2, 0x0, 0xff) lremovexattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=@known='trusted.overlay.origin\x00') fchmodat(r2, &(0x7f0000000100)='./file0\x00', 0xc0) r3 = openat(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0x0, 0x4}]}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x22002, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000180)="e7", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r6, 0xc040565e, &(0x7f0000000100)={0x9, 0x101}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x2c, &(0x7f0000000240)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}]}, &(0x7f0000000280)=0xc) 3.203486352s ago: executing program 2 (id=3438): socket$inet_smc(0x2b, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r2, r3, 0x11, 0x0, r2, @void, @value}, 0x11) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x3, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x80000001, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000100000095000000000000001800400020646c2500000000002020207b1a00fe00000000bda100000000000007010000f8ffffffb702000008000000b70300000000000085000000760000009500000000000000d36b59ac17a5"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cdrom(0xffffff9c, &(0x7f00000012c0), 0x42880, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) 3.198737197s ago: executing program 3 (id=3439): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bda", 0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x4, 0x0, &(0x7f00000003c0)=[0x9, 0x10001, 0x10000, 0x3], 0xdbba}}, 0x30) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) r2 = socket(0x2b, 0x80801, 0x1) setsockopt$sock_int(r2, 0x1, 0x5, &(0x7f0000000380)=0x5, 0x4) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x1802, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60ee527e004c3c0000000000000000000000000000000100ff02000000000000000000000000000133"], 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000180)=0x0, &(0x7f0000000240)) r6 = getegid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {r5, r6}}, './file0\x00'}) r7 = epoll_create1(0x80000) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x20, 0x10, 0x901, 0xfffffffe, 0x0, {0x1}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x2}]}]}, 0x20}}, 0x80c1) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) close(r3) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r3, &(0x7f00000000c0)={0x40000009}) 2.698350251s ago: executing program 0 (id=3441): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018010000756cff7c000000b0002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.695044286s ago: executing program 0 (id=3442): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private0, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0x0, @mcast1}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f00000000c0)=0x7, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r5 = syz_io_uring_setup(0xa07, &(0x7f0000000200)={0x0, 0xcc75, 0x0, 0x3}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) socket$kcm(0x11, 0x3, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0x5b03, &(0x7f00000003c0)={0x0, 0xef71, 0x800, 0x2, 0x2f1}, &(0x7f00000001c0)=0x0, &(0x7f0000000440)) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r9, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(r9, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r9, 0x54a3) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r10}, 0x18) times(0x0) syz_io_uring_submit(r8, r7, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x40, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) 2.446101385s ago: executing program 0 (id=3443): r0 = syz_open_dev$vim2m(&(0x7f0000000440), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x3, 0x2, 0x4}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x40802, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000500)="34be0870eb973fa4bc5dbf45ddd5d51fcec70769729acbc42ba68986dd2a84bd069e43ab0016b2246cd1cfa6d607066764e44406676c05680049e93bf54ca49578400ff91ab4c17d88750fb76c145f4c15dd089aab4ba9bd7bf62ae39761c0e0a5e553b8edd3f3956a87373c46714303b772369ea65621983077f411eaa0875dc64e807dd7051f4097225a6f3773cde12b95ef631749c50a2170e84942e0427371c1b61f24d2662eac6a17f7f2ae81a9930aefa8be5e1f7fdd98efca6621e0d8838659bbb5c620502a6ab6316e73a970a4aa11e89813197a9da5b45bb7b6814663037a7b00f3c2698847f8d9c9a41d7f80c7ca02c551ac29dd2b1e3ae12ff501b7bf6cd27de226fdfba408a647de9aef61965102fb698b89a2e1c8b90cc70ada53e98519694bb1db08241e5f269a14bdd63008508875720585e5485f5f2b2db352f8f77b3d3551d93bbc32ada00dbc21ce138386c8c848ac43a185d3d3a765f5f662b60d7dd1811f36126a91cfb575f2625c8c400b5b5170ed1eca9194498acc6ce5ba44e6293056c538e370b9f0811160e4c1acaf0d244431355ad28fcd4eb8f559c3ac61d09e62520e89f6a8e547657d730b0496e6096fec628ca73bfbf1a39561bc7bda69255058a1be5f240a15bebf5ac9aa7b9ce0fd0401da83ee498028d75c5e210750930d5e57c1e68f789cd09c25c3d4ecca789e1822a396c87d75480d11cf39640ded51ef7fd9aeed06e5d58f99fe18cbbd6f860c2e4462f5fae7eff885a759205edd93f8f7a692cf8c2ba834b2e03dc501b2f7969607509cd2815bb4fbfd4ec93be53549467ea2936a0ffc56425729a6a0e72249a05d6885d3c4f0e0d7846f1d076c050902e763a9a8c633bcfecb28a74995acc6bf9947bc54737b91a5088c57be80bd42bdc5a1999ab1efb0b0ec21b0ec9131a0ae74d8bc5e85f9526fdedb60708bacb940edc6e6ee1a6395fdf46ff80b8d19587cf2205768c6ec4bd02cf8d7897c73f7249fd2187efea915ccff63d2fb0155c84db3a800ac67db0c3fd7a0b09add771f5e7011f6bb2bacbec6bf766bcc5ab57d46a004c7d1eb0d925245e7a652f924083019954449260852fdb98e97848ccbeade4a40cfcddf695be955b3dfec0e9af0c25fb2d59e6b8c99096d406d39d87a38ad525e4951d38facae2ee031876b3a3f8f70d0f4ba5102227ffec3a07564c361678160d2886bc7bcc215d40bcd9de2c75246a44720c3258731d980d8a8910fe7d2bcf42ab3831a1d4218357458249dd1e51fc0e2d0114aab99f69102c9c305a28b1c24ccc64e03e7a72b295601c5cdedd25c15e6797f540dd5f5a6a3a91dce4e3f14c06e4ce311c54c0b7140792bc42cc20dc1d6cd5b2949d711375428fa6a92c1b6331ca34b6b8fd010e68d0251c78eabbd6d9981bec7c0cdec86aed4df0ead7930ffdf45742006817221460a2eacc3063d48e90e3768809d56dbceafc2e58795d7549136edbc690f7893f7bdd5e56da83e6f4ae58b9fc32593d050bfe9129bca464efc56c742e8f82b7590014737d2f993e1d6e5226fb46f821aabaa25845de225384d69035e13f2b863d08ec754433a156e66b85efa60badbe1917b53aa110bb43b9f2f10bbab2f8bfadfb53c89068d658c80565cb7ccfe7fdd362650bb34d835bc92642bc645a9e8c0cce8ff0d4c212eaf8fdbc3a4463fd1d2c93e240f6d4a3be2e9ab6a602b914512ae10af26d135a2bd6934809f109175b3bad626f284c50aca164949edcf516468f6d4e63d2757634fcece92fb1b7bf1c0d31f33f17603847acb1f7b10379ea94df73981994e9a3f17edfaa80a1efaf16b2cd4238728b62695b1b0fb8239ad962d654a23b90a2668efd38fdf038869734a8ff9129d3221513e1bb2c198df9bc5436b2e3709710bdc3d0a27028508a86e9641ebb6c47e72fe5bb3c1f3b4c1f957296da4cf2eb476786a827472565bcc8050e85d59b2338d7ae53c4621bae4b56ebacda015446d70be8ad90abbaac5196ff834b82f743759ebaedd54e50966fbdfb165a2618f4aa4a92977e4664e46436d893631ab6074cd810038faa37f675b13dd9f6721eb61b4ef8202acd0f19105111dbb3f1f96f98e29cd71ed4f9de228c6e90bdf74f8d7a486ec9b2893f586c5e36732b9d988c8437c2f161cd17aa347a448c298ec21c4d2186af44b7388e62c454cf71408cfd8635bad63d10b6e56296c32e45898504a3677fc620dd9445a4ae4ea565fb4b57bc05984921efa6ed3984f004de0c0a148f08eebc0d97a8166cb2274184a3ce482a20bbc827e4809077bc9b4a170977acbbcbbe869ea29745218d425d82f8a56c38bcb09a06f30dc66d45f770ebd43c75a71fcc5cbc8e5e5df7786bf79b7b3b00fb3bfbae0a14ca4a2f08e00fa7bef026ecb3bc194ffc39a79e9168a5b8a26be7270ddf6937b437940ffa73e17fd85ee9b8a3ce8b896f5033a423da558f31132f716ef8eb112687c201cfff1d2f7c926245e1aaa23cda51b9c6105fd105c9aa9d10d601950c6eed89f6f86af4f32c626aaf7f20b0bd9c118b975196e87e6a85a6cffb401155eab9f192b3ef35da73bda057b20c5e2e3711b00ccdc26080b4b1d1654018e46acfaa896bfb3dabf3c9ddb0cde0f2852251a16e9c459221f81d236a4cd6b5a0a3beab1200f191aad99e48b7ec2b9f9b62b886603f8e6f689c4f8c030f2516c98646d6321e8463a70fce9947d2b7b9e998072b945d91fee71215b76e8acb017788c60c480a5bbf1edb1c024bcebf0c9e2e326544c1087d0ebb0406e746c26ee8387b48593d012832f2ab9da35eada5f6b06d19e45c1508f9c71b0b97b1670782eda50d9b9a9fd0a456d377ea3b5a0c9996cbc2d95901533a9026c007f100df7fe09d70b177b126aa071ebe44d7a36d8fdb615341c0cf8bce0fa933bf32bf72b05ae592974cc52b8d5a8d20a0e5b82b7ade6503ca42b49fa327c3d35682f4892b231815343c7b5e8067d0322c19c409cb6d9a1816e7926e69499c5651f880d2545249fbd5d8e0d1bbb0ca39709bc375fa67ec3d0dd655c102eb669bdeeda701dcac199df906f2bca4f221542f7a8efb47971a9c7ad05d39c9a24b16454d6b00ebd93ee455195da6ccf31c2a467779770f1f20ec790a219d43c2a9543c7c7a872472aec2ecf16c52840832a0c2a30548fd9acfb069e68f6ebb3ba817c6600f37bcf9be23773a5395e4cdf380a2b78db3b4114bf2f513f6977c2f81e4632626f816be5105f1e23910faf9904dacbbad1a2f7c2a350f42d056ef5c62f5e552b70ca5340305633c44b10ba66e82ec52f14b0c1fbb1936cb172abace7dbc920feea33ca15627159a41d1bf2fca2629382da6b60574d1db549c5c544a026d42f22b59163a5b240f0f42975195abf6f5c129418ff063d583376fd950264660f96bebe4dbe511eddfc1c58b9b76a916e380f9f53013bdd9aab6d9633d69a3f2b96f8363560741a3f8761e092d93700be4364ff0333d7aad80aabb8f9eea2686771d2d2a2abdba32ed6a9bcc76d20b5140581c05e9dd091f027b60c4eed39445afe7b9cedf3470f1deee4a266e79c4efea8e29f8cfb425528119294aa7fa85521b7db9053c8a2d940d40d315628821ddb32232c5165913a5d70a6f37cc0ef077947f1a95429ac48362107b03599aea164482f8bdcd024df76178453e7816a20644435a8438b12d46b3d69bcb819e3667f7ec1c884a08743f7016fd7c61e5efd2272a17ad87437636498c7b465363085744e66fab34778dacf4ce9b10a70ac96b39b543d9ac65930b125852fd33dd46e756b19756c340f8ec20845178b36f5a0fa9e80a15185828f216160559cb1d9bd01c8d695ec0f01f589b9ad48752c9f9d1f47508a4427d295076718c6740591397224a83278206eac819433baeb7dd7dea3ee769e8b2037af216052805c70037b3b02ee30165e9d0fbd22c2813c8b9800a3d558f05c20ea88a7beebff64dc424cbd994e4b8145d6696ae3eee16d81bdc5e4a3da95737c52c00a7335ce3400ebfc31a99c81820125b2e69f17f263ef1a2b08653caa5a78b35c521b50e2a0c6ba754bdc2071ea574a4126aba6e07eb1372a99e2ee43336ab1e6611b937e875f2339c9dc4443729b178757929e36aa2c668eda9fbf314ef378ce0e9397f96b7158db5be3b005ff9578ec9d639730dbba199d8f73564c3f819680e76625610988d958347c78ec01a9d3a0446a27269a3dd7aeec237e67f891c241e67de32361cfeb0ff932db69894b652bc87e64adc8d86ca0d030e2f6f0c93f4ca99eeded72560f4616b38ec9a0c7fed25b8ef68657f6b02f11343924908b79dc961f03545b738c574307d45c2434cbc2935276e5ed0644a9bd8f6bf1f75ce90540149fb54f8e36d2cb65643933440d42e7c08084bc6d4445faad468975c91142a1ca417ed9ff3e18d3ea04c9a69dcddb6ee4b0fa61481cdb2c266c73398c318a1633ddfd0901cf135dbc0e40a8c5a40e56070e103f77679c80bb85996d1ee34ea85f42d3cf59cdcbd70a2a9b0173d3eee592e77f7ad591bd1f918cf390116ae42a061f5049be21981c503cdaedc6c58e82563eec806885fbcbd5f75160380c38380c1f8c5dcac24bfd531e31af706b928ecf2fed930d669fab4e6f7630e27b16504ead38eb9d47e10be9a54e2aff580254efb5792368f709e49754e04e22561f34bce4933730b3b1f7e8c925349180029644687880fa10ac9e94921883f7cad22aac19ebeb7e3fb6cd66c1e31266096b9973cf8b33266ddac14104ef596bf42fa23941dcf5bfe88048e9dd5de812d9cf65634c7e0a7200e1ed2cdb60ea9025749959e314d7a394d9747b72eeb910f59b6d04144a7ec7c7b3b6385281bdfa85af828cd643102a7399461d3c089b93d1c9edc051a6c3e984d53014b58414b5cf250a36748746354bdc994003764bdb53908fd0e79e0281e9ba7a0a9370449ead26aa15d5c64ba3a14ed80f186aed78c064cad742c9b8c3599deabd846c25273f792526c99a5fece8c1825b536e0ba8cf1879e87f88f3053bd6556135e5d0c08040687a50be01fdc02b865d83568921c39a8a5be27ed00edfa0d57650c1b7f6d366807967c9486c0a0ade7afe1c63e82293518f59e1c3571e10e7af5cb2ac51b2b209866041e2426c838d4f0ba4b6573e4fbe99bf98d3a6eef9b5810d6ee861ef6fef69b7a7f297ca44e9c288ff95b553b9c6103fd11b1c4c5169df6c6a4aa31535b00dba63d9b49992191a7186c6ca3c6d6f021193b055706e468ca6b1d2add572942f3f2ba6020258c034dd5b22e1903e0aba31d6cf6210770306b33c027c6669c36ccdf19fd1944677884b3c35e9ac042eb825153db24021095da98689d0c769c30dab1122868f31a7145986dff816250c0ca54470f0aa08530e4fe47f768dfa1f9938c947149d5727923b23ac954f0297a767d12786f98c007eafe48e965afba6a9e740499359ddf4f3a8003223886236af67fbd7ae0bb5594ef02effdfff72e1fec7457f0b392af98cfe86b2045307a1bfff84aad94b511be2305ac70c77720ba22cf6c98657e6e27fa742ff686485b357e238a2034368d97bda0cf65f887d65dffb2a4f5bd31ab72bc27fd0540faea87f99ed8a468f5bd41e09cbf2bafadfa6b0df065398d6b85724ea8fc3ab7c3bd5e0ae499ea7e4f0859b95c7eb48552a98eecf0879643c85f376f46d4cf718d46ed8b74cb866854a7ec90a0836bb982e9005fb363fb04c863e456644195a9ab52a15b36efba75cbf455c996d3baf1e205b", 0x1000}, {&(0x7f0000001500)="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", 0xfff}], 0x2) ioctl$KDSETLED(r1, 0x4b32, 0x79) futimesat(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405668, &(0x7f0000000100)={0x4, 0x1, 0x2, 0x84000}) 2.386962694s ago: executing program 0 (id=3444): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x315500, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map=r0, 0xffffffffffffffff, 0x4, 0x0, 0x0, @void, @value}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r4, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x9, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000001c0)=0x9) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000280)=0xb3) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000140)=0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x335f, &(0x7f0000000300)={0x0, 0x200000, 0x10100, 0xfffffffd, 0xe3}, 0x0, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCSETD(r6, 0x5423, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 2.386596567s ago: executing program 3 (id=3445): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x21}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x10d2, &(0x7f0000000100)={0x0, 0x7734, 0x80, 0xfffffffd, 0xd3}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x0, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x1, 0x2, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_EXPECT_CLASS={0x8}]}, 0x1c}}, 0x4008000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x54, 0x0, 0x0, 0x0, 0x23456}) syz_emit_ethernet(0xbe, &(0x7f0000000440)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @local, {[@rr={0x7, 0x13, 0x0, [@private, @empty, @empty, @private]}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@loopback}]}, @ssrr={0x89, 0xf, 0x0, [@private, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x4c, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private}, {@rand_addr, 0x3}, {@local}, {@loopback}, {@private}, {@multicast2}, {@broadcast}, {@broadcast}]}, @timestamp={0x44, 0x4}]}}}}}}}, 0x0) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2.376424807s ago: executing program 1 (id=3446): socket$nl_generic(0x10, 0x3, 0x10) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = openat$fuse(0xffffff9c, &(0x7f0000000680), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000900)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x205000, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x80000) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x46108101}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYRES16], 0x23c}, 0x1, 0x0, 0x0, 0x40800}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf200300f909000015000200000001103d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff070067020000030000001606000000000078bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469fac5202d6293c3d5e11f4f83e7455baeeba4f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2.105749092s ago: executing program 2 (id=3447): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x14, 0x453, 0x4, 0x0, 0x0, "fd"}, 0x14}}, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='status\x00') readv(r1, 0x0, 0x0) 1.987117627s ago: executing program 2 (id=3448): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00'}, 0x14) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map=r0, 0x1, 0x0, 0x1218, &(0x7f0000000000)=[0x0], 0x1, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0]}, 0x40) splice(r1, &(0x7f00000001c0)=0x1000, r1, &(0x7f0000000200)=0xe54, 0xb1, 0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000240)='highspeed\x00', 0xa) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}, 0x1b, 0x401}, &(0x7f0000000340)=0x88) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000380)={r4}, 0x8) prctl$PR_SET_SECUREBITS(0x1c, 0x6) fcntl$setsig(r1, 0xa, 0x6) syz_clone3(&(0x7f00000005c0)={0x20004000, &(0x7f00000003c0)=0xffffffffffffffff, &(0x7f0000000400)=0x0, &(0x7f0000000440), {0x2c}, &(0x7f0000000480)=""/179, 0xb3, &(0x7f0000000540), &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x9}, 0x58) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000640)={0x0}, &(0x7f0000000680)=0xc) r8 = openat$ndctl0(0xffffff9c, &(0x7f00000006c0), 0x400200, 0x0) kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, 0xffffffffffffffff, &(0x7f0000000700)={r8, r0, 0xc42}) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f0000000740)={'raw\x00', 0x1c, "c7c1705e662354f111ba0ebf5c0bbfaddfa4e479741dee2a16cc02a2"}, &(0x7f0000000780)=0x40) ioctl$NS_GET_OWNER_UID(r8, 0xb704, &(0x7f0000000880)=0x0) mount$9p_virtio(&(0x7f00000007c0), &(0x7f0000000800)='./file0\x00', &(0x7f0000000840), 0x800010, &(0x7f00000008c0)={'trans=virtio,', {[{@dfltgid={'dfltgid', 0x3d, 0xffffffffffffffff}}, {@cache_fscache}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/ndctl0\x00'}}, {@fowner_lt={'fowner<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, '@)'}}, {@appraise}, {@fowner_lt={'fowner<', r9}}, {@appraise}, {@dont_measure}]}}) prctl$PR_SCHED_CORE(0x3e, 0x3, r6, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000980)={r4, 0x2}, &(0x7f00000009c0)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x66, &(0x7f0000000a00)={r10, 0x2}, &(0x7f0000000a40)=0x8) prctl$PR_SET_SECUREBITS(0x1c, 0x22) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f0000000a80)=[@sack_perm, @window={0x3, 0xfff, 0xac1}, @sack_perm], 0x3) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b00)={0xd8, 0x1403, 0x800, 0x70bd2d, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6erspan0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'rose0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg2\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vcan0\x00'}}]}, 0xd8}}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000d00)=@nat={'nat\x00', 0x1b, 0x5, 0x3c0, 0x248, 0x0, 0xffffffff, 0xdc, 0xdc, 0x32c, 0x32c, 0xffffffff, 0x32c, 0x32c, 0x5, &(0x7f0000000c80), {[{{@uncond, 0x0, 0xb4, 0xdc, 0x0, {}, [@common=@socket0={{0x20}}, @common=@icmp={{0x24}, {0x4, "6385"}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8, 0x4, 0x2}}}, {{@uncond, 0x0, 0x94, 0xc8, 0x0, {}, [@common=@ttl={{0x24}, {0x0, 0x6}}]}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x1, @multicast1, @broadcast, @port=0x4e24, @icmp_id=0x65}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @REDIRECT={0x34, 'REDIRECT\x00', 0x0, {0x1, {0x10, @local, @remote, @icmp_id=0x64, @icmp_id=0x66}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x28}, @multicast1, 0x0, 0xff000000, 'sit0\x00', 'bridge_slave_0\x00', {}, {}, 0x4c, 0x3}, 0x0, 0xb0, 0xe4, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x1, 0x3, 0x7, 0x0, 0x0, 0x3], 0x5, 0x7}}}]}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x13, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @gre_key=0x1, @icmp_id=0x68}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x41c) ioctl$KVM_SET_SIGNAL_MASK(r8, 0x4004ae8b, &(0x7f0000001140)={0x98, "4de7e8afab193d1f46bc480450dd5d74a1ff1d9c9ef8cf903666c9291ab80de74fc672c23e3e4eed1e1393153a94b5bf68d41399ae04cc1000cc3373cf8021cf66735a2592a550c9387b40c266a703656d9a34b9976566580f4097fc2533626e7e5e69a99c3fbbad876d632c389fd7d845b624cc8766e1571947fe05f45908993958964be01652347a874c380e7c9aaab7361564914b02e1"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r8, 0xd000943e, &(0x7f0000001200)={0x0, 0x0, "52b1e4f62deb5246db4c23f82eedf7721ea6820df896cd118a5e9831fc85e0cdc9a8e6a179dad4e2e33fd3fda0b3fe7529148fb72b6afd2523856c45e1c88a515e1be4394924fb2bd92838794742c14db18f02e264a4ef0d92dd3b88a51a47a7cabf41e8255964213d4c1712cb2490b6be74908aee1135bc8ca41889e082425f10a84a5f0283081a039be65a64089330bcbdde58518627aafd3e96ff4db4b46514fe8947006d927eb498a8dd89d2112f67f350ba7a02fa56fb81429a9e800051be10d7b5bbf5bb70b6f06dbd7cba3b1d3c2f2d70e72745026d08aa0845a8384bad92d1c0b8040931ead5f00f7d2467b7402b2b1c5920e14a5d3a8186775b096d", "35eee66b21bd97211fb389c48019a8ef7aa05de438c8a315c685d2ad8258827b26f5ae8c559edeb56d803fac595ec667a3bde439f8db2d16b2ebee09a2a828429549f2546d0d250106d49d91ff4028c7e742e1d146e1186728e200ac9bd6e040dfb776fda10bd5e11bc05d806afb8d43ad656082af1f41472ce1756d2353cb14754703a4803991057ae3e81b8f47f957f6793fa34fd74ba03638c17d3430da5a7c5020165d11c667b0b75a9c042c86c0c8864e5ab19147ade3713e9279047b8cfebe4713fa222ff4121bc04f66c519366a5a0cbff3ebf6b2d4647f1fa9b771e9c5d54d7f55430405d03ba717b6a9163c6eff74b2909f4d0128ae54fdad6e64f7b2833a78fb925c3f75e080f442c6bed9a34c411be5a909d0309c4e347bb62e0d80c5a33e051e73c7d635275449880150ddf972fce3f722504ddc168bc4b861c5015ce264a593ec5b9dfc21a01d4e7cf1c7efccc4c343d4c5f63f477de4b1241ef4d39427ac9204109515d972cb4159ee3975858787ffa406dea0a02b4913e22ebc88394366eff33ee8e0e0ea9637e28340e04428c705a5d7e6426d3979ab2b33a11b746b7d780fc5e779f90f2ec332bcbe21402ea93b4c4f0dcafe0266c36d6ee521ea6f98fda95a790701f450ee94057b0ff4039f9e3bb8d4945d20600e107938ee6326c28fd15117ddf7b0db6696c93a4bfdf87d94d9035285ef0d2bb5325e3cdc92f36629472b8afbc08364a1be1f72b57d91747cd4f7def5e0d1b2539e73949907b1d1d517c64dead76c71abe49ef4a80ba5ab0ec97b0c7f6d7201dc5ac109e203a4e7b9e831ce7244cecbefe47d1f223e2cc2e01573d3f8058fc8ab12b2e0ad5aee815b65f4797f03c8968da09fbf51b7cdef50a8cb9667c35ccb4dbc7fe3e702db2665b412871e4cfa89107a85eba1c2321f9405a52ad6ea8293bf7a78cd3235b235ec07acac84d46d7aa272137582ecbb4c95df37a8e72694e60f041274341ee1397e1c670f6b4a69fdf3061bd346a49a8ed945d63bee7525481c020a4c7eb4743d31a4b69bbcb0ed685a6606f27891b2fd0e2f0889d85a2ce1b5c0131a5a625b0943fc89bbad21f339b275fbe48a364485aed62a9cc98d3988e02dbcdeb9c877b3a371e6129f454796cc8908cea158fb9dc888ec2bcd0a8124e294a974422861e8b01399b7b496241b1819c9c17e95944335bb11e0236ff13d30e696015a9a39bf1f1f8b5353ec48558784b5ff21c840988b2b9591c8b47e7fc49a21656290bdeb63177e01bdbc0ce4cd9e9a7856e4e5d348b602ee9ea910b3ebd67ce2cd0668c50bf0a2a14c7708d10fb1416899f6f8f50ab2fdecf301b91e9fc167e60aa9994e51a6754d815af1d53ffd3e87f9bca5e1de85fb08b096947cdf22c3a30d890a8981182db61bd90c5d2ba042ea91a77b7ae3088af909f62999938d072267e30e2b0dd3168182e889ef13727f345a890b9655920954baaf87b7a6215b1ccffacf422e0850329ebedd281ce5a9ccd2bc6716ef5b457b70c0a656a645c2f731c71a8a6f199fc9227de5e8baaccef5713ba5f5c1b3661ea6c1c2d94e7756a55472fcbd8b60450ca1a7d492fb4f594b7eeb0eb69316fe8034259f9bf3fb194e07d39a15b052787f6835262963638fca71073ccbb4df24fd6e2fbde93f8ea87d7cfbcc9fbb7a8574326d75009769f59f21fac848da7fc39aa7db3fb3e3c291eec28878545aff2c7defbb9846bf3f80b89ed799e9f61d3cdd10de263e92bee1268ad5e20b95f00d1954ab20a5f7650e64663fa99e8e274303a09e6ccbd7a36d751f43dc688290b40fcd7771cc0ba6038a0f2230a40a457bfea717ce98f425e7b3523cc38ab3bda2749f23ad7bbec1f5a2c06a89a98704443ea7c406fa2b2732288147f999baa5f7022b5d2800bcad373a88e4c528ba77a278244e5e9ba9cdc62957cc44e9f14b6f133f9afa744f495ce1dc98f7aa93b6fd0f99da2fb4c0b82e1213f59eb1277a289dc67bbb6b25fccabaa70271629e9c7e4689ea5909be0dd7d2f2d2f0ecdf4d96d994934bd60208502712103e015acc5aa8e323aaa6e62d6a4f395bb9e86865d31787ef31c73898c1b3b70220047ff090f4326e3a5ce1e1a4e2485cc3fc01751ef9991cc3f3dd2c37380a70a82ac297dfabc2655e0b7b7348dc6bce05b48f31c98f7aa86f7c7c180b076c1839e71a807ca8108796108d728d0d33a871824a8092fd5898ec0d9632ade16ff81da110aec5530a34a08d9d8165022bcbf30ac1b4bb6018b421319a6d11c4cffcc1dca2459e00f955f6bb8ec4cf9f1d9710d2fcd0f92560ad3e720e280121b262639a7cfaa029c3c751a195ab662bdbabda25b3e4e99ccd77034c9a698400ce7b0b8e0d6df5995e6dd161b0e7f4fc82c18de07b3e65a0c36fd213b58c02490d98c7b2a0456b3d9b566d994d58aea4990fcdca62a0d9fb4fb8b6a5f54079e83a48114dfe66e6073c268b24c252e7c8875218d057f86ff92958989ec070ac15ea852877db26738c285706028286a9b333d70f64a5470c11183865f574701369d63316e03453cc706aba5c523e0e07ce8fe56c94e647fd6b64a9cd564f0d2b2be5cd92689f865da2dc7ed77ecc785838b65204b3921dc71afe2bd998f3abe6cb41d56a823105b85bfe857ff8d508e33107ac65436c56546c786a210262914edec24e3b1a1778cfa13c2f453398f5db545d75ed17581f6e3f4d71420f638a4d27966454612af8239160d4722e73cc920547c815c534046f21f7866e8e0ee8217de047ea47581eb689ef220b7be17cb65a165282b8fd0f58abd796cabce3aa398a3c90ba61805faf72d67f6c765e23528cddd9fa39c72704ad83f892b0218c0d8ecbf8b4b76dd53ef9e3836156ac97429ee7da7107c572000720732d080bd2adbcc472d8693000f0f035c3de4c23dfc04cc5901b7e46076a535f9b8294ebffc1bfd1b0e9ec84763c30d99f05af38f4f07488a8ca94ddbd7ff6bf9f72b5ab03b063a85e7dc64b71c88a805c36540c3c8751994689f9b3fb9432046e01fc10e10f4f49409380c4e8ff65f30e7bae75ef9f828733d0859aa976283a293ddc6546d64b4c7b16fdc51e727973eefedf91c88c79f2896f1616e5583b4581050c9c8491610209a5b70bd2056876ed42fc52de883f14f01ae718524417372e941aa3e29d68bd79ecfeb39e381c722937606849d5153617b66d456afc7deadacb07e0e3242108e96807a6bdc0621b5559439715898f5058d930f5d3760269b59717e3afe14f37af8c114c31af9b5e8d0d7b61b97646cb913d3b0909fb40a8eb68d48c9cc7fb95d6dd1ae52c0fa77aebc044e6d2c84911ea8141e5f36f6689723dc61fe40adaf9b020a5bb504aa84dc5a1f43b54b7e43ab7c2220e5783e1c2e652abc51fa65e85b026be4c806bffed60c13f0b18b09e34b6d579c7c254630ec165cbbca11b854f199b700cf74c52a612a80954be7e8c9e512ea91a8d3871a54d86f28b7894ce4e5c0ca11cce4157c0c579db147fb6980d684d120d5f3f7dd398f0a48ea0bd4a8d500b3260e7f481477c612d0f7f37fbddaa90451e22de868db4399aeab5716b7a8b79e06668fb5c515c083ed472e96be91daf9c0b15deb7e989e3682bb99269d73aa0314eac5d6525743178939909f7a2b9688a21a5dc8731284af0259b43b3d785f2bd9ab97cd2bf1562c7f8df29a5d4900fa541eada929f0d9be2d1f4619341c5a1ee1624ed52e9ebc8ea5d6283f2b56bb7e518bb586a1c7aceacc6e9107b561321f322ff47b9a4a133758b856c6befa12f6cc5b7d3cb9b6ff5ac3fcdd7814f1ea359f003f22e0214709dbfac15a32e19ae792d8bee0bf219c8530d052226eb1b187a1ae318b9cedca1922e13c92e15d856c09cb00145c5c2c18abc23ce00d9a0e811fb0cc5338c4e4666942e22447e5ed6a6dcd70f2faa8459c773e6cb8376f4a75663909b52748c94cb63772e64f5e9a18fc6bea440de5769a4c365d3eb748ed4ba6f107e54a52b863547b4f8a75af122b88492c39493b98fd55b3101c6708eb81b295ac24eb06889b23afbb179cb8df33828973667ac8b1c42aa1c00318e3c97b662024df5e7f95033f75a83b1eb1bf697c18c2656088002ac9a3fb2baa1427c0416c756b6f829f530663d30db0d934e2afd1e3fefa40d75bf1152800142cdbb1599d45e4eb65cb4dc7f0716e96cd05f884d5f697ba040da9081c9870f544ebf69ca78343bd1930d04a8c5e95ddeae3d26d19ec5db9f208867b1d4724fde3c96a24007b0eea68701cda26cc203b6ae1aafd34f70d3f4f2190307afb3725e1acee29e2829b641538dad86f27369d4a59ec2e49b02419ffa7e2043f7467cc0028bbd5d0716640558327d237afde154c1a1e21aae8e52ec96cf14d604fe85f7662482a078130a11f5e79e55922cdf7101d3d63d07e05003ea037368ac672b04446e59a023f488c3b5c9f0b59388e94f3ed8a3cc40b9367ecb627cec8ac45bec8c4d44431ef24bcb3af89545a336547409cd9eaaf34e87df421a1bcca9f107610051e9e47af0fe0407d46d9e3bf855915172fd007467fe5b513e86d0e19b58ae0dbf76ac3bb25266692a38f304bb3d7a0c34d72422e250b69f40d4edb9404071ffa15f2519576a7cd29613ec1d3f61f00da95b5914d24b5e9c34419a7aee122159080ab3c67d72e8658fd9b01d53e18b0d93fb6e8c341bcf0aa79bb2a8195e84ec1fb8a6fc54d01d418dad330d255c5417c2276e5e4ddc26c7e3efa1f27ad7823cd39cefdfe11ba033fc6443f9497de4cd0c0059b0a8be8f6abc5a852116a3d418583767d95955dc97b567eb96105c15a6d434184564d2df2c598d55897ffd7823f947b44b955f620500a930e4311f4d0e44d1d707b286055a0f54c7476aa7e32c24f6f86c41fff068f555167d23bc9454387a801ae19d89214a7f899e6c87922908d5ff4d694ef8ab8436e154928673a5a48003d391bad36915c477a5bf5d7ff7104a9f7bd9da7aaccfa7111d944ed4bf2a9f7d6509fc77f192a7656d1f812fac234330b86288a71378b349b0635ae281e2556a1c411eb2c2f511a2372ca7304b765d73a2c705afdd0e4f609b06f70dc213f1576bd7f4f0a5a83f82a65c0498ebb9022f1e4df3632894865c64f531859deca6eb5fb2d60dba360413f76ba897b2afab288366ea121d17434df88beb4972db3cd2691af8505bb7f85e3213d15ea064313c2fa9692a12aa7d08536ad3bf190613f6439d82f53119d7ad2e6a28857191e54aeb11c37becf965e6f427dba9b70362fdd8bd44e9f4dc5d017da8280103aed99d75a3a5535311ff121288bbc56acdd416b984e8195a2770c0a6af7e12c0eae89ff51e5df5ccff5a68adfa33664d95bb3dee02b91d95c79c500324"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000002200)={0x0, 0x0, "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", "22d742119ca2728ed5bbf59fc4afc21659316d2a7497c3199defb037224e9e9e13ab4d44582e1e027c4337fa358577cc798b11bf084bb3df64a459986de411bcae88845d31ae361e4e0e09432b8722c0ff624f1402091866f15e64d2eb5a82ed111b2adde21c8b9163882753a124f7f1dd7d6ef9c6945db065b3b08afc38a154a5ae6bf8ecf6a9543c9f4300a63d9a6ffcdcbcbe457b947611e7e16ecf3ec1d4554f7df59397b9fa07e3395e330775f5c86b72957c2ae9baf365ce1ae6d1a9c4bc2e0e1807f2b186bf1a4b6e1f3cdbad0115f811b16a06bac9affe9463ed4166e5c4d6e7fe6fec5bc29cc1bdf8613d9fcda05f41404ddefa580baabfa8b08e63f50a000a91cfdc214da67e3ba1f5c1f08080cc0e11f70b20880822423480edb018124e02f111e8c63d943ed6e031670d0221ae9aa389117cc52d17daa4583c0f833865f75852e097e7760dfb8ffb742d2b560f61581ac49594f5c26d66c60878b37d0740c5fe12b942695513f3246531c364e2b19577794d9ab09a699ab53bf95b890d0563f494a8277c3f3e319ca50b2640ea088cd317112d34546daec475f70f33d076760f67fbce21bf4a995177e80e8d895bfe7f9d3e896fcb5a260697fe01999d8097c89a6ce4e07560d0dbc48123fae301ae65c3a9320d11dee00bd2ce57a243315830f00352c4a3ff82ce2997947fa07542c663ff35806b97f5bf803fe750720c23a7d6700a59eb697229cf3a7cdbf81b0de924cee74a33d5cd63e4136ca438d12fd799de766569ae86c2a86c9e0c3461edcf2a5d86f7dec6770b5c6319f050fc658c5961621a08f4524ec95ef532a2c413d4ef0702632e1a1d895d97046e68ac03cba999518994861c28dc62aa20a77cd88817b0a9f3a0786192c379dc10a93ae0b47af691d2abcfee1181b4846c48165116d4f94d8014ac2243585393aa9d1cb6c3f2651f367780f5d084755a5e47d37f8e76595932f3aba51c3f8904396a6b78891000c6b0c36d7e1df7757c6f926314f4790020956a72997230692f8ff3d0f758b90048750eb81c7a7aceab146089aceda602eb3332733e44a27fe71174340cfcc16ae26edf9f9e6ab549ab59e5ee370c61c9d6d974d13b1bee8c688bf4ff0dbf70e4e933b95312a911e52964b5e93b3691628d74facc9bc7298e3175f332d0da2aedfa48b4d727b5ab29037931914a4487b26d0ddab1a4e0b2be68f53d3494f0f63dad809fd00fdf7add17d17d79a30eec31a274cbc90609d9f574f923998dc14f5544e7c981aac99fc59a8bab4dc4f1314024a9ac50282b2004edea64a16831adbc6f5a7ca4a8977184aaa30cf6367a59865be2a3dd46fd4938f2619f0cd19248b8c2ae45e7d00a4d02ede6ea00e3f2d6abb161195d22b91652fe8a75f558a99da17d5fd39c0e3e7e57a91a9780a40f69e6349de3bd7c927289017b8ad79914e87524ab7dccc4b62cb10c706d72b3aa3a4adaadc905a53569b6e248da7cb7d27946a94b3944acff9c11864c8da264d168a3f1fb12995ee47769886d950e192c3ae32731747d9bc55fbd0dd1ea36f934d9606d66dfaa96a8f492797585543820b4910b58764dda741b2e9a60104a1eb9bedd88e1556c34f4f3e6824fa2ac513ded62970b22518baf767701a95a1069b71ed64c23ae418c062cb9b5eb8811d91e53935b2d9dfe9ef18916378faf78765838af1f9e74992e052f76f2134f0fc1df14ab10ef69bf06235ff4589add7795e942f1ab6327a77993832a139721cab45de8677d5d31086fa46e9bbf47a0c60b2ca2ea22920bf6df6691110147364e449675891dac1dd88e0107cce8494f0a650f6e41a7175622e8043f31ea77dce5fbc3ab01fb9d1b47239daae62574abef7131d399db14bed3b7dd69cca07a1c84fb1ed1b11800b32e14d8b3227de8f742fcc02e25175aa4b2c13e4446cf8105f732ba9ebccf4d057d144cf1a0ec5e64bd6199e98a6a7f29b169c90083ba8e601e0a8e9da8114134681545da1d4b3839dee2e3a07ad692d7be18b43da7edf5db2beb94a5181e01fad6f638303032e77cd25560d0c0a036de41df50b0f10c74c343686c96e62fbf6e8479a8e34647708df21eae11b61fdbb870c9e019d4ed7c346b38e43e87d975e4d17019591eb5bee5e5bce59d0d1029ad5a3390a85b8523e909f7b8e812459e36b48e51ea3cb50d3d6dc99d1dd06bc08a64d6d739fa2e8755219daec831f0edff262d36062d17d577bfd7d26f5d6315fb3e013aefa9709b6a03980ed250f8afb0cc11353413e738fac1936405064efcbd2fc08662b59e08c09157e43552d194276968eeef50b73cf4b8a16d05786a9852aab37e02d4e9c6db1c90dae093d6a4c4d6b106da87d04731c5ef72318fa323db934d8daf628be146520a1dc7c7ab4a0f738378724b78d72bd55fc5f4127efdac917eebcaa9a5b83bb5f20af2db181783b9b5fa7f4a511cbfe1fd274a1ec7852ba3786c8f6696ea1dde300b10a9c1412d441f3f581b7d488d9d2357ba8baa87b671d89dd20e093dcfbe030f78f83aad274c4bbca6e0eb349b6061306708b1b93764babdc7dd4f041dff4ddd482dc0d580908835cc92950cfeeb0adfa07494189479bab06019c4389f2c1dc039ecba951d6ae26fd5aff1116175303bf9f4e304a59033a347365b1d863e5809ee22b26bd44b30c8534afeee1326a1c526dd6a28b70f6da71fdac89322f07c4d6f001685e075485d64284894b54c4d6373bba794777bb31bd27b01edcc2ce3c0234a8f5652ef6b00af2d4b822443133942de2250fdd1b1c7be41cd7ecf5e8ffd81c45f847bc1dd708bb6080a759c4fdc945d5b42c8ec82b67e39d9b23bc9709acf5b60fced41e8538adb9ecfc800c1d086e73b99ff46f95de6451059737831c870d98da45dada908cd04f58610251fd3cf192f18ef079cfcaeb255ae7804ccf71697c71f3eb00d9e030e4edcf73bae5f93670979454a70a10ab90ec97737d0496779ea79e9059213ce16d8a91e5c11bbcd4a1667ef51fa8bcb5bd2db1a592d194e3e9219b834e11edffc44998b50dc75d95ae33cd0aa236ac281d1540fb0d469f617ca6a4fe44674d436af3f53f9c2ebaad31611c3e1af3707d5c3b2984e5b20b46c6a576189b0e82ebab4fcae6091e8c772464c861276ceb64e350b147c28498c147349ba65bfa017757ec13671cc9576eb5db22f2e3fdf44747de32706772f6f6b011f187af35d3d4e810b772a3ca22a737f3b8f3bce97b615bde522d21d899732324a0c82be6ca85f1d3b2ed33d26dbeed63935dc9874b273bc313b022f12afe830b2d2a4011b4600cf1490752b1616de1cf3c3b71d9c0499f86bbb2747be0855a836bd6489c8bc88029b669a8e8ad51101a1ebc2a26522d854a868226b8ab307f73db33b0ea16bb6906e3b7c8a9521fff8ca7e72f1a8fc2f006198d82d24a3992f63cd58e0effc578dd03f1a9074de8b2f5fe30995a78e996f4f6c70b9fcd86468337ba65085e6f9e72528c98a5414977010e7952cf81e89d73b3b0669800a79de1b98b6dbc918b43c4931b5424e26f73c2a59270dde7be009a0b2b3be3b958c703d28778ca4078d0932307569eaea1600799acc95c6d83f3b4d385aeb60edb9c9d12bfb3b7ec40198e228350c5f67ba822f1bbd497cad75ddec9abed1beea3b7352fa124d242abb7e32ce8adec36f0a2af99f545b7f5520b20ade0110fb7276da0a35ab0aa778a369c16b7df7cda643eea87db7c2700ecce175139862fe6363b55f4e94cb706a185f64cd88f63ba4e320e6455037bc53c06508720873a12de91f377b8b10f5b74a0cf79d4737c18cac1274ad3dfaeba90a2104070f64f7eec8041964761c63bd66438eac7e2b8646eecc578576311ce0b9d4017f56e2d893a7b12944c9b30cf46322638b177b42daedb6aec6bb219d4be9094cfa061e3865f0618b0f9f9ce1152b1f5c9a749f680eac9e341ed7af937acb40a2818b951e56556e61024bb4c4808c3ce9adc943b2d334064fe4a1c9f1cdfa0dac5e507e9974db033c94db5e61f22c37145d665347a947eda2803af29199a79ea53845ba4d2f702a437392b198ced72b29351ba43a6ef1b26a450443c0bc35888b9388068fffd88efb2a3b236acf2b08104951be3ded3a9ceb3ce6087de427499b66fc9aa524d495f28b466c7ebc23d5f57e9d1f897f4adde2ee9828158fafb5c71fe4063f1635e3d0d93706b673aba6889f959a3a08ef69efdb07db3f3c110facb01709df8e3e2c809393179cd27027107d09eb03d88c712f9c3671af3bf5c4bb3bb93c1fdc09518307a7ab1df5d8ba48668b7bfdc495504494a4462a7b847a8ccd537177cd77df19da6f5d968c61f0686b0bdfaab5c76556f62f44d34d58c877f016494e2cb1509f06bf6be2a609443f61a09fa590b0065c64a2b9da41fccce9c81ba1e9d41a8416190cdef91fa2dace1aa230a4642feac40f09588ad809246384217c91f438c3dd65818208c25417b1c1a0e86e498208a9b974b8d1e0ad17a3cf1a10a879608c97fe890b3339625a182645c009b04ecd3547e6c6c29e6e2eb4f78e9991005a54128ef940a0b8f870214517b2ac8205dd60879ba714835521ba200194fe9dbe4fb884a77746579c75dc34a653adc2af2471d0ca4f6b5d37799918f1aa18edf8c3edbaac2c28fa48ed6202737ac8ccee7effc10292542816ddc158cb8269c5c9aeb4bab1080390bf13260af8dab76699cf65900c8b3d4f61636fbe4de4735166f0aa1faa3b383670bb538e6c59243ce260165a285cb6cbaf563e4580d90596f13b15fc0083cf056159665e6784b095724fa3eec89f59c55f455b5ab0c087f9d391ec10c4cdd91714f3d22dc8d44fc6fb88a77f2f734f03d001750240395c494dbe9d8517d6abfd18c175092262baf066020dd1f11ba4dbd708925de092ef7ada9141c7f97f9499ca9864cf9bc90783b2c59a16d1bafdd5418404a94ba6b1851000089cab0677408c666a0bde3f81393aaa8b9f8d255c6da037dcd9ce4c778158a2b0b73d490c8f332df737377b2a63cbdbb186e3c2bbd8af0f0c4608b290feafbf5737c8b80600cf9e7c57f3058b592fb989bb96f04515a06bc33e13d869f5921a62f8a8a85eae7771e179aa51bdffc3968ce1915a772efb2bf60ccb8b352d8e6668be0546528f86f8bdc9c17d9d9ae636cfba422bff5480ed26bacfdf5127758c29134b5e2cbab5c8b1673a5a764e5f29871b55981b31df8be4e877160001169a8f66ea111a59470f6216a2e5c90c4faa233f3ff117a7ca018a91ab0c36d5757c1b19b0ea3a47b5a623358e84f71f649fa14b2083589ebd2e1d854c2dbe40468f2b1c99da7c52edf245a592b9f0338dbab97d547ce624583035841c87b8e2c6d1a914aac15ebec7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000003200)={{0x0, 0x1000, 0x3, 0x81, 0xffffffffffff0001, 0x9, 0x2, 0x4, 0x7f, 0xdb1, 0x8df, 0x1ff, 0x8000000000000000, 0x0, 0x6}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000032c0)={0x2000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x8, "0b39ae3d2973b3"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r8, 0xd000943d, &(0x7f00001160c0)={0x6, [{r11, r12}, {r13, r14}], 0x9, "1104442e280e4b"}) 1.887681165s ago: executing program 2 (id=3449): faccessat(0xffffffffffffffff, 0x0, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) socket(0x80000000000000a, 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0xf, 0x101800) syz_usb_connect(0x6, 0x24, &(0x7f00000001c0)=ANY=[], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = socket$inet6(0xa, 0x3, 0x5) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000000)=""/108, &(0x7f0000000080)=0x18) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r5, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r4, &(0x7f0000000340)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x80000000, @empty, 0x71b1, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c00028005000300000000000800014000000001080002400000000c0900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) 1.671567168s ago: executing program 3 (id=3450): syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="043e0c04"], 0xf) (async) r0 = dup(0xffffffffffffffff) (async) io_setup(0x19, &(0x7f00000009c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000500)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x5, r0, 0x0}]) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000007c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x18) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r5}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x101, 0x7ffc, 0xcc, 0x0, 0xffffffffffffffff, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000000)=0x7ff) 1.337535167s ago: executing program 1 (id=3451): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = openat$fuse(0xffffff9c, &(0x7f0000000680), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000900)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000340)=0x4000000) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)={0x3, 0x0, [{0xeeef0000, 0xe1, &(0x7f0000000580)=""/225}, {0xd000, 0x0, 0x0}, {0x0, 0x97, &(0x7f0000000700)=""/151}]}) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x501483, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x8, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="74010000", @ANYRES16=r7, @ANYBLOB="11060000000000000000010000000800050001000000200108803c0000801400040002000000ac1e00010000000000000000240001000000000000000000000000000000000000000000000000000000000000000000e0000080a400098028000080060001000a0000001400020020010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003000300000028020080060001000a00000014000200ff0100000000000000000000000000010500030000000000240001000000000000000000000000000000000000000000000000000000000000000000140004000200000000000000000000000000000024000300000000000000000000000000000000000000000000000000000000000000000014000200776731"], 0x174}}, 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.255100311s ago: executing program 0 (id=3452): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x2000000}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x10000, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x8, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) sched_setaffinity(r2, 0x8, &(0x7f0000000180)=0x54) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f0000000200), 0x92e, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x200, {0x1d, 0x1, 0x8}, [@CGW_DST_IF={0x8, 0xa, r7}, @CGW_SRC_IF={0x8, 0x9, r5}]}, 0x24}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r8, 0x0, 0x0, 0x2, 0x0) mbind(&(0x7f00001e7000/0x2000)=nil, 0x2000, 0x8003, &(0x7f0000000000)=0x9, 0x3, 0x2) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r10, &(0x7f00000007c0)={0x2020}, 0x2020) 1.157608042s ago: executing program 3 (id=3453): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bda", 0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x4, 0x0, &(0x7f00000003c0)=[0x9, 0x10001, 0x10000, 0x3], 0xdbba}}, 0x30) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) r2 = socket(0x2b, 0x80801, 0x1) setsockopt$sock_int(r2, 0x1, 0x5, &(0x7f0000000380)=0x5, 0x4) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x1802, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60ee527e004c3c0000000000000000000000000000000100ff02000000000000000000000000000133"], 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000180)=0x0, &(0x7f0000000240)) r6 = getegid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {r5, r6}}, './file0\x00'}) r7 = epoll_create1(0x80000) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x20, 0x10, 0x901, 0xfffffffe, 0x0, {0x1}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x2}]}]}, 0x20}}, 0x80c1) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) close(r3) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r3, &(0x7f00000000c0)={0x40000009}) 956.862757ms ago: executing program 2 (id=3454): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private0, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0x0, @mcast1}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f00000000c0)=0x7, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r5 = syz_io_uring_setup(0xa07, &(0x7f0000000200)={0x0, 0xcc75, 0x0, 0x3}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) socket$kcm(0x11, 0x3, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0x5b03, &(0x7f00000003c0)={0x0, 0xef71, 0x800, 0x2, 0x2f1}, &(0x7f00000001c0)=0x0, &(0x7f0000000440)) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r9, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(r9, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r9, 0x54a3) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r10}, 0x18) times(0x0) syz_io_uring_submit(r8, r7, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x40, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) 314.978399ms ago: executing program 3 (id=3455): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000011c0)='/proc/cpuinfo\x00', 0x0, 0x0) preadv(r2, &(0x7f0000001280)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x4, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x37, 0x107, 0x0, 0x7, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0x4, 0x2}]}, 0x1c}}, 0x4010) getrlimit(0xd, &(0x7f00000000c0)) syz_open_procfs(0xffffffffffffffff, 0x0) 182.080087ms ago: executing program 1 (id=3456): socket$inet_smc(0x2b, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r2, r3, 0x11, 0x0, r2, @void, @value}, 0x11) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x3, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x80000001, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000100000095000000000000001800500020646c2500000000002020207b1a00fe00000000bda100000000000007010000f8ffffffb702000008000000b70300000000000085000000760000009500000000000000d36b59ac17a5"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cdrom(0xffffff9c, &(0x7f00000012c0), 0x42880, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) 107.360224ms ago: executing program 3 (id=3457): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000140)={0x7, {{0x2, 0x4e22, @multicast2}}}, 0x88) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x7f000001}}}}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) syz_open_dev$sndpcmc(&(0x7f0000000140), 0x6, 0x121000) dup(r2) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=3458): r0 = socket$key(0xf, 0x3, 0x2) (async, rerun: 64) r1 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x42) (rerun: 64) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x18, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}]}, 0x60}, 0x1, 0x7}, 0x0) (async) socket$inet6(0xa, 0x1, 0x100) (async, rerun: 64) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) (async, rerun: 64) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) accept4$llc(r1, &(0x7f0000000200)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000240)=0x10, 0x800) (async) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0x7, &(0x7f0000000080)=0x1, 0x4) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f0000004380)="4e5350994ebf71ce3049a58c5d050078bf16b0757a4c27b455e2a547739587dd3380b5df8f40a0696c5bd6cdb672cffe4d870c5c90ca92095b9ebf3e92fe31d8cd74275d857d34a74f7eecc7fac15e2f148d4e9d47bb45b858bbf078999970d180f28d7b2cefd92635d45a563d9229c9fd770efdc0848e52fa5efd9ada5c94a1ba94b4b7c7507f8b0819bb20910f9f50a83a010abbe126dd9f6a7b84eab6b0d5ce78d2ade77a5f7e4e997df1d03ffab4b4c945d803e4457909013127a98769c938c237f37263bc509a42bc56ff2dbf80e847e2c407009eef94f18e1e59069d62298fdbadae007ffbdf403c5049a4530ac0abecceb5608da02754c9a575af52c0b7e41226e2d642a814861c4310c935bcbae413516dde2132652b39c7aa0218a6ce65dabb4494965209ce879ba7e7e59039db5c1d36d6a7f86d72dd59954fd6f46124a2506b245a0db11aa89d2feb312a6596ea2fecaa7b6021f37a255f628da7ff6b6c36b514d3b6be34e505f9dac6acfb888198004699fb350ac93431533554658c4957df36703591438d6488bc03dd8290a75ebb367a481a50e79a46b04d005649cabd79e5c6326c066bc2b6fc5febb87ef66d832ef31a16c2a450a0b990fb549a5d810c928d1a81fa1dc795db2607ac7d46cb5716b68acdeb00987e429fe6a394632c83b43336e7b51d9cfdb50e83d8c6ba1784d9f74c16b476e048e65e7ac0af683b347d7377ac1795422e00e5bd8da9b313af83abb3348861116de7a99959169b7dff9f7d9b7a6d107f2e76670a6214a419bf8298f80eb570fa29264ba57a383c5ec5836ce33104ecaf1aec76e311280a1d2c8bd7abff3a5a242e6a637f7db63038ef5d78aca9c680d72b60da4dbeb0e1e683ddc82898647c589a81b8f92db06711d8a0af05560cd77fa7005283db71e8da21713fccd450822062b994d152aaed2cdcf0dec9c60617e15ba4df628da4e71279bf9d1eee5c7f055c27cddfdd45f9225d5d5529ef7119e2e3c9838e7362971e069be487797e949b24297de19c61340d1cd7a2bfa3880b91a71e934720a59e1e0ea992d2a1633a0852ad8addfcab73a291e35745e694a6471f429b124305886c1f79f67c78de3f3ec998c91e7fc59d26766cd446f6f0de603f2c6892e13cdaa37d9e8e118d098b6986ccd991993ec152193e7d77394b05b99e7d310c506707f1be52249438fba9615f6dad2ec7244fedf36e34ec311b7d6bee64271d6491079e161190ded7e28e2ada4307a9b2986c267b1a30d2f720ff23408011f1d589ce9ee77f981c7833656ccf7df5b3a87ec253ff7c7ef1e67ceeb10c93e3fa683cdadad65850ffbc402b7744e94cdecef9db9d264c755c53d36278df23d4c9685fdefa69f7588a33b8a64b35191ee81abcb9765577d175cb06e31c582807ff7243bfef44961fbc0f8a235242f51ee991ea621803d4dcfed90d26f004b299425bf219f6d185fe6e088ae44601b03defada18794feac93787696a5d419f09f769bc590f43d2df6a131f6895da2de120c2644685e57b1d476c6aba5881e954fb2575356452b118b942cb02b4ea0fcf8f1bbb9a23b6e32c9d0accd3dd861452a3ad77b38fe709e216974932deb5397fd8033ff0e073d93ac0b4be762bca0424d69bd57b22ba914133f87671a29498b268c2911e793215463ca2164e38059456107dcb29beedfd6277e2b41a11d1c6f1361b19875c9384f04f9c53c1856d71f360a8fafe05f7aef750ec0cf2bfcfa971c017ad071b69a18fdaf970b384d4c889cfa5a0397dbe89543a5c6302645d6edf959aa60709ce0225fe6c3266c7ef62157ac8e78fddcd8a1f2ca5b58128218d19276885515775326aeeee0226cc810843eb05144bf8e2fe3340cf60b32cafd96d23cd7d0d3adcbdfec9a2a3d88307c362633b1c5637608ea8476d900b3f836a9734b5ecaf5e82983577128d3f74b903b0e3bf64326c1b564ae42aeeb0c07702b63a9ff74a2af6b45e5185a53f36c17bc29dfbc0ea28ca5cca43a15d751e9887ad3e6a87faacb6a278c4c8a8d21b9a77b9776f33102a6e645e99cc5cbc543ed0674282c2b9f8e5d14c2599aa9ac8f81438c77f2b9368bdac82edcdc5366f39adec9e9a3fbd55b79abc16d2ebff26b7d0c88f18b486e5836333575e3fc7808cb423b44781c57965767862922b4ff32d9bae76296843a46f430211c27ef9db168430026a5691623284dfd459dbdd1f1a6ec9bfad666507e6eacb1e2a7866da2e12e6d596d0bbb150500590013d9288af20596447f97bf1744eb9cfb244d8fca269b1fb71e14de664be4e95d83fff1b8abcfebcf3e78c1c66d28f260fb0c19f9fbcd2abbdd7dd7246e49dc25d954bf25f810a2ff6f9069dfdc62e7170fe3b0964b2ac95024256dfa3e7a426be5bb5f707fd82c2b3afec5d5dcf5bbb8fcb6dbc1b59f6c5330966c70d8b016956903a4278817414ba3652a102d7e7e37ecc79400267fc3bf7601c0731f87d479c33f100735e748874155267f708cea49d549e93cf7a398b20373dc90ad9afd56d9c77cd24e2c4a18f7130b366c7fe5b26bc4d11ca1ed1b98fa0b4d7396f82ae6593f4575d19f4d8fd586c991129e5cbe15c8bacc89c3ee15ca471dea966b5c48ede0d3ba2a7e28c75c04e6a4aa49a61f4e391ffe78eb5e40a5ef349f3aa4d15f2291cc86ec7e47ae301bf0b6083dae44b695820a893d46732553ef15ed1c16d28268d52a7e3a7e7c009d0c0708a356d3310c1ebcbcca4d7acf433e34bfc9fc115498142dcc725e7a16879c75e4c2f01c6c98b39619f3248bf530e6ee593467e38cf4026cfdc4db6296565722d587f3c580750b1453ecc141c0461495551297d88ae034acbd4f5e80ce198e6640c4c1e9501529988109cef006eb2090a6fcd974d7f60290b78f1a8ce3051ac2d69636c3219f0a6ad8c254764396a1684b2fd9805b1853525f2e640e513197283cc4d4073ac033e0539a88f08aabe1423cd40b8a7e073437d812b57a5d39a0531dcbe13f4466e89efc66c2a1e4b39a3e0b3073c9d44e6cf9b85f4df5c4e03628d05bc0f94ec04234c9eca4ed17463f190406834b02888728f625371cda75d15ec19efebd59f00ab659eb94eb88bcb2110862a369ad599610c1530fcc118f5b82205bc5215fe3623ac8ec297d8ff4eee75ace20731c5d505e6605c26203b7f754164c9463f0a6eefe3a2880b8e06e7bc66bb2adcc1a3f9b0325f5ec31d12a25f1f73c2aa6bb3a7680d786a082a63b13cce1822fa6a4b085a871ae3409eecbc1fd8661b5d52bb2b8b72f23e24a225075f272ed2ba0c6c5c693811a0ef8db6da7cfe7c966c647f0187ad223eedb1012a5b7af103e98464ac768c79b21ca45b12a52cf261de0d367442cda71c4b8ee39c94ded1b22ba06c13836cb467ebab4efea07bdf1e3de8da56a0ee6d4f848011253cc21fac10700003513d3167b7a73e0d752b861c49814bc5410ebe53a0264f76068c91ee6ec9e2daa343482b2f0f06e605c5aaf81f2a3cd570efc2094b4bc452f9526f1bbe7b22b694fb8109a5a987fabf6250912d6099e67da9cac79e8b6f2cce4702d1f17cbc5d06c38b8a48155ec758369c185ded839fb58cd736fbb74105fe5baf44e7e3ed06843f23601b60a43b1f88fd29e9b3f58479f9b95392a39d5ba1a31ee4441ca2d1fb57c0a8678a07a724b7a65b2ab16d1da197f435bce3ef003fce27fa2f0a67c9dd6c930a4bcf59e79e57b010000006fe34972958c28b56642d14ea89bf4d7d6f7fcbcf4fda8bd08fc9fe424de4359112b11f81fbdc1505658363697713ff6e1f8ca3c4be34a79993a9091f6017cda6c7489ae5c07062555231427c3eb42a049f42d22a060983b044a7d34ab5d2b5386cca79af72396a48aad6b8dcd7855410fc6106e4a165994f26efff1e7ea0aa8f560333b5dfdb2a0d899b0fda955155f90c75effd3c9535d88508e836feb7807d57b2a57cca42d3d08fe7de60d2a33376f49bdacdd3f814bd0927f417f15ad62a10b302f1cb390aaf82b0bc6af46bbf990b6ada45ef83ce13029d167c65134e7b82b59ddfdc367e61c40defd2732ccebb1d4000f6c742df964e1fb390c255d2b1dfc745c6ab34af8096b5b67aa179e3f341854f7a69f7bf47664c832037ec7a78f8e27209e3f20f833fb6e8c0fc4a40920a5ad2b0618982ff72540009d5db82f0f5bcaed2a27f35d1e50eaa0cf8e48c7a2d43c25d0264db750a7f33b44a4bfaae576cf9ee7594ed204513899566564ed8bbc97ed18b1d8868f926a5c70ac06fbac1eade46792186be7bf8ffa3301239edd093449b7d77192782b5111c14169d2b4a1b3443ad62e4abdf11aac6a5b89a5b20ab0ad0abd949b9d64582c67ffce018e7e46de4091fcc77a65b971fc67c8d9cbf0c341ca764b1056ee5014d9865059616a525a1d46ae2fad159afe86dd1df9b8246411827e19535ca0aa9f83050b06e70aa2737f27e93d584a9cef878a642e9361efaa5d20bd8da901fa2e064656f686d3b3ea31d1d850ae9196b7764548f5c6450a32a717e09b6b7e75d43fbbda76e43a24f186d5578933f408bfa28e0435cde525fb91e71d92d704cc5a9b5e3db7aaec46d2b1f8dcb3f921f69bd7397c96a1e132c39c8f1656cea4365c779abf76199cb5b6aada022edec5c901cdafa2e7f3765af9c8b20cb1a6785085fcb0dc901367b89051bdfdc6b68c5215fd04e2b3c7e1c454a4d21132953b25c50995af0f7159a5a8d0a1621f4808f126a5bd40ddc79fed90f49925ee367a57a05c070fbe39fe2c213e7c1724a907ecfa69efe6e021c06a262471a4377f3c9809e9fee4f375e27c31b6afbb2151da86b7cab63c7b4fa4b77fb30172b9d0d78b1c0535ec0639c4910b5eeecbb5b8b5c8aa74c140e7ad347812e36db3097a7ff85c09ab2c0020202307f50efefcdb497b9c060ca68c4be54a9165b4cebc6b2e2e14e5ffb9213142418faedcdf26fd326b7672399e71cfffe3ed712ced5317c254f9199ee10c24c802d102bd8749513d3145201ca4e01bc7c8bbcf430afa541ec5665f86dfb143be648521bb0f2b029018201444787f644f8c88b79e754e6ea9c797babdaec72a9680abadf3a41684cdd57c2b6e833acc0846be5aa927f1b1b36562d2acb9ecfb758455230d050daec6748ba280a5edc86d48e3f8af0f8f4ffb18ae3cd3c19a82d504a4fd52bb62289ae8026572a497fe268f87ef4b4b5886aa07eeb698b7cbf99683f710afc9ed1f8a488883ce0eb8f7fd055b82a9fe21a409caa231c41ba151008e9658919c611e157d7f3926a5e4248532a6860e615b9c86e9fea212128d96ed58c9b84ef22706071eb69f492e4d8321ed9faf6c6a8928f86172bdc930244583ea15be497d9ce4ae79cb3e6293a8512ffaa9e8e358f3c7c7117001fb92891a40b84f9126cc3def5cde67f463bbac9668b9f56c3e4ee72fceebb47e52fc226bab213d8193516e7064459fd1365350a95c5a1c3ac44a73bbba2a4c17ebe49dd781bff1995cd706b77bb533117594ad63566f4c0730beab85ff4c713b7f10b95480fe99a0f676c51ca11116b21e87887b462aa9770e85509e4e60f198148115f0a3ce6028516a946178d1acacf7767f6be7277891369eff67762aa58f928d48b7231e44d899cea8289003349117a53d61bc27b207fdc91c9db61e677d1e1a1bc6a1b6e8564130b335233db4b5de8d62324e6d0ccb2b08c2ff922324eb8c506711142d4b8d7a21223ef0a3d534fdb0de58be95cd827152f71bdd0a82766b62b4c87536f0b7e7df343c4263187da887de6e65d11d0360e2376c1d71c367ae85edeed8f767d24c644b1a9b455ded1dc3cc224f99936a6ee66931c45e5e3db2427719ab2d5cd9c20d9bb0ec004b69bccb00649f3d8e34a3572c257de114b9f027d76bc7db9007175cc03b9e2061b6b3fe7409e009b5371544e56fe438cbd361e5b11efbf2d79d1c250a1e73ca8c601c4f4d1e3761290950421c48c7daa45965e472f5ef3c4b8597444dc5dc01cd25358055b5000617f3e7291da3413e3f0853b1271366612405c35ff1b785b984d921b518425628a533a29ab65d3c11f44c6daa86f8b6457ebb9419274c481aa6f3fa4547641670aff58b9cc62c0993d49a509f02dee755ee5f1fd2710c995c43a91c4f873afa1bbdff19427cba2641052a8f361ecbc72e8a6cf587e83f8bd3110c95fb080edc77a6d43cd58c447b0e02261e4109500c6458dce70acb17aa8f9dc1d15b94a61354164031b5d563c25d0246fc45e6401cefceb501e1468903e5d677759dbe3f24bd48ce55ff8b8f26529fb3b2d669202a1e8a498984b449b4830a0126b18f0e78182c9ce78fe0c448c0e27845b926cfde28fa85e156fa98fefaeb19ed1247c9643b447b4342c94c114d3c4c35eed4d5b49aa70e6aad45bfb557f15e8fdb2d6e3d10d8338a13fe3f187751985b37a5bb10b750f79e36fc2e2ee9bdecc3ed156e202ed7b45a94809d77edaa398042fc6a825a4848c334c557303d24eb3f8e01be06995ceb283c70272b00da61c3381628f0e372fe2fcc779ff7daf7e4b7f2686c39d3fab674b8867b62b0bf9d5cfd0c1d3b270521f55f147de75142ffd7fc9ac7e5dae7ca2fdf26a9222d060823852409dd040cfd1f66f218c6dbdaaacddab34b123af22f97384d64fac64d84fd638c96378c8f9532a11927d48440bc777ff8b8b9be88f930f3b579a713c0bc449dca3a3bd5f2efa98240ccc594299e44451dc60c6c5c9edd0d7b777912b3dc40c57e0ea5f4425cd7047e686c7304f04ba9f7b5de6ad2bd524f1d29f8802a524441fa286015adf4589431710aa4d76de8a956dc1d39c0a13abb7fc309d24222d036e204ab6bb46ef8a7595d9e4512e0b9d5f8fd719a4e3072e1d806967045789c67a1681f2a9f1f4b19f4f5e1afdafc17db7a6d5196161499e62ab4b0ec27648f3eeb1fb2b78f8ecf9b05cf9509a3b9e2a361238deb1c91bdbc8b1d11bbeb939fd9da811cd439069da0ecc00665d72357aac01f259a0325409b201859cc0569e0eba67a7a9ca7e8b78078d9370bd3e37f0571680ede60cb6bbfe69435d6ab5efd80cf051d119a7004fc0b600844d49218d844de8f521524a47ee50229c7da25e42a8639b5db225e7f23967f5d4f8a297aff04a3cbedc2985b6393a5ba0b26b6c7b4ca22d369b35b410799d1ad02825104d34f73408db1948438597931ed1c1c260e78340517bfa2f734537dbdf5ec303518ff4640efe7f7b1c2f46babdb9247ce8eabad9718a8b9ddb7a18d5e87ced554c9d6de78f85d293349590c6c32483534bc968b24a28eb54b9515589d6dd8eb51a5ad0b4d896ce92250397cbc404323fcdf0ee47ed634e0c58213bc5b35a72b21a098e11b79c061430dc817c1e0c79a5b6ed3b002979933f1b83a17f250b1bd5c4958df4d75531ca03efbda89f6a92fe08c23ad9014ff562a7f3dcde578d6825b9847b5df04dbca4f2aa52d8e0f4cf8183ce121e39b50358a9796acde0372a8ff97769874a80ab997cd889145aad4888c06963c2f5b82f53a748a6729fbc79d35c06d84e05c62e44ff78040e56ebfc6efcf0d8b49337d5a17c4041f0d5a8b616244d585a162b69db073accd9071d12df5b326a43b834bbffc2f2a60deafcbddf1c6438a1769d6fb09fbe1990e89da12164ef237f326edb5be64bb64b143a030de8a99b3c5e543c871cb581e2be090a92134aa587701f864907cadd7c1ce20fcf8f5dc7f7ecd06a6c19d89a92ca0ad4393c208b80bba990c7a3702a9c79bddde75d5db244719ac32191b6ceb041ab541fb47680a97dc0422b8a50d91e32cb08cd341b0b099aca5bd12b69d4f89d10b755b351a6489180b786a3bebac926532a4a2d85b07bce6c090d1aaaff079e36d5394a612f1351b90c13a0fa6bf9d188d548dfe6fa51a9026edb52009c03ed45ac51d05c58a957bcc67e05a588985ba00d79f33ae9cdd5f5721d9fdc72ee6e880708be87e8a60c3c035c146f2091d1b9a4c2cfa56f292fe1ba62290d4e56c05669291bbe917f3cac51802a2cc8e9c90dadfe666c233c5a5bb71ee17deec51ce60c73f57bf9ecb84873afcc44815131810c6c1217bea485ef9aa2785e859b25315ef8aa3a274982786e45d622ae831fb76010d69a181b069e4cc55d4436edb10d1119b0c6000c6d5cff7c72f740a59dc0507e7a952b69403c62673f122c9d1264fac6ce2262e86cd8d6a402672f88530fc2d16f31736dd497a4e853253ac8d5aff8d1376895e9f5519b2490cc2a2412ba0c99cec855f668837310035e92fb646486de1b0acffb91ae7516df3eeef381456b55e65baa58e71461c928687e699d2b21814805591382e95e1b970aaa53259917f070281f2336b7d570249d838b3f1a32753c336864e15f4561badf8fee034a29c52ff3fca7456ae140f83e3b2fd5b57c9aef3f20c664200d235f236ec47dd2fc20b14dc6000812237aea992d987e5460679e8c5b76d931ef6d951e6c7087e3106b6ce2db9de6f228fdf3ffc38710c0e8d5000a195a79d1fa2301038f5b27c40b09c34c025e5099d40c2204ea0eae985263c9101cab88d6857a320c9e497f22348a24861a5fb8d734e08cad09f9933748ff01eab22f17756f58688dc1b486a397563ee9ad0784b8833cdb5f7c6bcf76d9c1105f71c3c6aabefd70dc6cd5c66d31caf916145ac5ed7fa070b4277c0448ab1eb78c943be9aeab0587d321a4bcb7754f070881178f8be668b686124899fac252519f4b60ec42db766a908755040463125c26850177402a977246d36d23afac0a11889d54640bd8f6f670d686cfd33f6fc5d90cf6cbd63d9d0fd201dd4c74dbbab899f3c23c0b7e37ea0b2aff421327200d0da58b5893a4186ae3652cc6e11c2c2a0e52184a3872532acce98c94cebf4f31333663a620f0dba0ffd89c3124380075bd28caa6d449a050b3661b8fbaf4747b77c4928b1378fdc8c7a7b38ade1aeec44bdfacc8271d0b132b2029b0f3582f9919f5c8cd543abc9caf6b82b197cd482c3ef61a64743506342bf50a3c1ff544563bb8b2002911ee1fad698f4ac133ffed5bfe81239c918207a03c7a8bd71a0a502aea78d38e970e3ab2abf754b598acb79cf276792aa08724d0ba24f2a694912ab795b3f45f52dec50d9bfbc99ae27e1d2c2216afec6709d6513a64b29ef58255bbe18478c5d4f15f74ea63a1e15487752eec8fd019f1d4a7aa25277664754bd2d7cd3a7a018b92c56d965a1974885363757286da9e055ef7fac17876f0a64c1026a597733b897a9155ecbf420159ae8e5209aa83a3544fff1fb4566f2d54f95e3bbd30dcca5f24397e4bd47ff01292f0d6fe9dd47a810e0c25382fa69b4987d1afd9b69ef125110ad6b240eaa9c85829a2646f9ab7874bc02bfa8346cc9190943e9d46b44880670b1e2aa3a29e83be5472d7418885a353faade6e8b18f4b588607bbb758588d1e2f11a9dfa1c4d61be50249f1ee32e6ff8c0c7722aaec1bc79654a4772efc578bd6a14c79abcc77a4e09c8b6c6ea35cd3ab31e35268fb55db843176f8042f8ce7be0ddd4ead6dbdad0ef9e7cb2323db5cc48119a72b27306b8ff6366c0bc682a85ab9e2cf2238b6d6eb2e38a97d5577e6334cb2aa6e7c86e489e876f9d7053577a5cb57f52812fab7c4bd7b19a34c228ffb67dcac9281612f778b58c580c140542200fd00cb3ad81d93420df93c5af2493f646d8de797102fa0a65247317882fbf171520f00b2c7638623b823ff11444fdde453570f99f9099b60061a908b83383ba8b82bb78edd074dccf9342afdf8d11a6129ba6ea7030f3629056264f1736c2b926171b6dc7e1fa455a473de656390495f3b6ad2f9f46f35eacb075628ff739ef78f28ba683448068c7f18fb63f28ba7dbbb78999100dde0a94e8b8570817c7114c13e139ceb333782b29a84a5b19497fa785915c7680dd7f972cb59ba22161f60886e5cb3c3e808726cbf96bc4da78914eee565c6d9d18e70d22cf8c0244cf3cf488c3550eaa400bc0f26d64e0f1bc8d0301a841d954073a641f3ef883d81f4d5db8e9df708e64e640b38df7295f7fe573863653086bae5507c880ab7fdb7a6c5ce77027ffa7395233d3ce536d77ae6c2e9c8ffb6fee78a3bcb3b5f888bd595caa3a5586948776b950a89cde4db8247ffff27491c882b430afdd60e7a22324f6635a9aa7139f3e624c6d9ece60f7f8153b2080cf0544fbf8e1c436503766e670b902604ab521e11aa5a65cedd64cfaf898ac5f55c08c87693c323517bcb0d99c28f5e072d4f6540c7ead70138d47c1a67fd72bd6ef5613af33a0af311c3d0a631ca2a2dfbe35d1021eb610e40b9be128683235a788b5a4cacf99babee382458d59e8aa1dd7bba7e09dd30c055a3df8ed721a1778b2c6ed587a403566325cd19962edd7831caa44a6b716517bad502130e7cf6a5ce5288dc84c0170f622ae0b1e1166a9c2c0771d91df9f9dd82ae210469602ce38964746c1c1d04321aae7d464eb801dbea7ec39505457e778208774d72673626c998b002c46a9b4b1e390d9344f0ca62212a1b6d41043a2100b35196bce42d40caa0ea9a486bf8526fd1f0f0d362c2cac463ea7377a20b54b9435442ca529fc00da4fd7e27c4eaf14215a06857b54254c26346956fd7fe215a5ce57ec38cedf50a3c759e563a4fd87494f00e7bd9b44f3b7e99c6ef67187056a21d2fe1ac9d24125b1947eb293189fdc448b591af4d9b8eb091d6bbb5e50fae79d000044e282bb2ab6c63cc9562b151c214e45015354e62be63e1881238b907f7bdb791ff44a4e03fa29dbd26db2f49d0f4729b7cd9ba69a65b0b493466d35d09b3f590c67c31660d95e2ab4af2c9f1df91f04ce5a57dde2d75206b42e3423126774d76593c2f713ae279d7092506b513fd5d18f0f52d3fafd7141dfd4a0de1063754dba865faf8dc0f6be9d90ef21ec86a275533f6ad4b4e360dc775413f29eab8b3daac6279b9abfe163ea2f183e09ed91ef67fbb090875109288a182cfdcc46d90678efe5edceda6518335e678438cac4bb47d376f3f0e12aa55301735d7f42653c073d6a4a37b2e17d332dc1be6b50918c007b14886307cc39250e81efecd63d24067a49994572725a9df1760caac13a28f5255556b27ec245e93969b85cdec7cd1c2d2a433d3f9572b93054a7ce8adff81bc1d30884d5fc4791e251bd907e37af5bec74235c3e2f804e4e0450b715289942b7859ad207bafcfec1b586dc15e7911fe6d20aa3d02fcd47e9956780e300d7c53c17dfa15754deb4c20efebc7270bda0fa6b37fc88c6be4250cac38c1b8186b364482026ab52d65d3a691903fccc39772277011bfaa421adba76bed9731077bec885ce88d40f36bbd2a839c67dc4b862c968491b877d4fd13fc90f8da57a29121e12f78e85af765cd66e72ba513593fe1cdf20019985b065d828707d8e509c6834eab188deea5c9ee97955f4b07d37b6fc7beed73be94887d423a349f35bb8782bc670ceaec870d97f061bda02ae73f6d575f81e0b6326eae6c1b3085cc584686120e12dd9ad8ce44036bec8a189f9", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x0, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x100, 0x0, 0xd, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, r6, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0x0, r6, &(0x7f00000001c0)) (async, rerun: 64) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r7) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x40, r8, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x3a}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x4004000) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000003240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000005b40), 0x0, 0x1, 0x0, 0x0, r9}) kernel console output (not intermixed with test programs): 50:50:50:50:50:50 [ 483.326391][ T1201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.330346][ T1201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.688262][ T5310] Bluetooth: hci1: command tx timeout [ 484.440905][T15265] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2335'. [ 484.489928][T15273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2336'. [ 484.493771][T15273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2336'. [ 485.018755][T15286] random: crng reseeded on system resumption [ 485.767718][ T5310] Bluetooth: hci1: command tx timeout [ 486.739116][T15318] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 486.741623][T15318] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 486.748489][T15318] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 486.917179][T15327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2352'. [ 486.921850][T15327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2352'. [ 488.707260][T15370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2363'. [ 488.710668][T15370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2363'. [ 488.807701][ T5310] Bluetooth: hci1: command 0x0419 tx timeout [ 489.836843][T15384] FAULT_INJECTION: forcing a failure. [ 489.836843][T15384] name failslab, interval 1, probability 0, space 0, times 0 [ 489.840686][T15384] CPU: 2 UID: 0 PID: 15384 Comm: syz.1.2366 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) [ 489.840701][T15384] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 489.840708][T15384] Call Trace: [ 489.840712][T15384] [ 489.840716][T15384] dump_stack_lvl+0x16c/0x1f0 [ 489.840737][T15384] should_fail_ex+0x512/0x640 [ 489.840766][T15384] ? fs_reclaim_acquire+0xae/0x150 [ 489.840781][T15384] ? tomoyo_encode2+0x100/0x3e0 [ 489.840796][T15384] should_failslab+0xc2/0x120 [ 489.840807][T15384] __kmalloc_noprof+0xd2/0x510 [ 489.840822][T15384] ? d_absolute_path+0x136/0x1a0 [ 489.840839][T15384] tomoyo_encode2+0x100/0x3e0 [ 489.840859][T15384] tomoyo_encode+0x29/0x50 [ 489.840872][T15384] tomoyo_realpath_from_path+0x18f/0x6e0 [ 489.840892][T15384] tomoyo_path_number_perm+0x245/0x580 [ 489.840904][T15384] ? tomoyo_path_number_perm+0x237/0x580 [ 489.840918][T15384] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 489.840946][T15384] ? find_held_lock+0x2b/0x80 [ 489.840957][T15384] ? hook_file_ioctl_common+0x145/0x410 [ 489.840972][T15384] ? __fget_files+0x20e/0x3c0 [ 489.840986][T15384] ? fput+0x60/0xf0 [ 489.840999][T15384] security_file_ioctl_compat+0x9b/0x240 [ 489.841014][T15384] __ia32_compat_sys_ioctl+0xc3/0x370 [ 489.841029][T15384] __do_fast_syscall_32+0x7c/0x3a0 [ 489.841041][T15384] do_fast_syscall_32+0x32/0x80 [ 489.841051][T15384] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 489.841065][T15384] RIP: 0023:0xf706e579 [ 489.841074][T15384] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 489.841089][T15384] RSP: 002b:00000000f503d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 489.841104][T15384] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000004040534e [ 489.841113][T15384] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 489.841123][T15384] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 489.841133][T15384] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 489.841143][T15384] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 489.841167][T15384] [ 489.841200][T15384] ERROR: Out of memory at tomoyo_realpath_from_path. [ 490.463666][T15406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2373'. [ 490.468642][T15406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2373'. [ 490.888127][ T5310] Bluetooth: hci1: command 0x0419 tx timeout [ 491.152794][T15422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2378'. [ 492.196622][T15436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2382'. [ 492.203490][T15436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2382'. [ 492.977686][ T5310] Bluetooth: hci1: command 0x0419 tx timeout [ 494.396347][T15481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2393'. [ 494.403026][T15481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2393'. [ 494.472100][ T5963] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 494.476255][ T5963] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 494.479644][ T5963] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 494.489725][ T5963] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 494.492332][ T5963] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 494.513211][T15482] lo speed is unknown, defaulting to 1000 [ 494.676700][T15482] chnl_net:caif_netlink_parms(): no params data found [ 494.790679][T15482] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.793097][T15482] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.795635][T15482] bridge_slave_0: entered allmulticast mode [ 494.811133][T15482] bridge_slave_0: entered promiscuous mode [ 494.815944][T15482] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.822528][T15482] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.824905][T15482] bridge_slave_1: entered allmulticast mode [ 494.827795][T15482] bridge_slave_1: entered promiscuous mode [ 494.938885][T15482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.944139][T15482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.033829][T15482] team0: Port device team_slave_0 added [ 495.039495][T15482] team0: Port device team_slave_1 added [ 495.047713][ T5963] Bluetooth: hci1: command 0x0419 tx timeout [ 495.227461][T15482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.230423][T15482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.238915][T15482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.248022][T15482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.250461][T15482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.262747][T15482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.350521][T15482] hsr_slave_0: entered promiscuous mode [ 495.352800][T15482] hsr_slave_1: entered promiscuous mode [ 495.354848][T15482] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 495.357312][T15482] Cannot create hsr debugfs directory [ 495.702377][ T1201] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 495.706096][ T1201] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 495.711057][ T1201] bond0 (unregistering): (slave team0): Releasing backup interface [ 495.714279][ T1201] bond0 (unregistering): Released all slaves [ 495.720748][ T1201] bond1 (unregistering): Released all slaves [ 495.904367][ T1201] tipc: Disabling bearer [ 495.906379][ T1201] tipc: Left network mode [ 496.351579][ T1201] hsr_slave_0: left promiscuous mode [ 496.353830][ T1201] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.356785][ T1201] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.567868][ T5963] Bluetooth: hci4: command tx timeout [ 496.979904][T15557] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2404'. [ 496.986328][T15557] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2404'. [ 497.011289][ T1201] team0 (unregistering): Port device team_slave_1 removed [ 497.120306][ T1201] team0 (unregistering): Port device team_slave_0 removed [ 497.862158][T15482] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 497.874959][T15482] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 497.894503][T15482] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 497.902724][T15482] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 497.956626][T15482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.971552][T15482] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.977179][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.980611][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.991137][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.993382][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.371773][ T1201] IPVS: stop unused estimator thread 0... [ 498.473924][T15482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.501586][T15482] veth0_vlan: entered promiscuous mode [ 498.506452][T15482] veth1_vlan: entered promiscuous mode [ 498.521644][T15482] veth0_macvtap: entered promiscuous mode [ 498.525399][T15482] veth1_macvtap: entered promiscuous mode [ 498.534003][T15482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.540587][T15482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.545137][T15482] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.548325][T15482] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.551070][T15482] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.553799][T15482] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.585940][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.588902][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.602095][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.604663][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.649051][ T5963] Bluetooth: hci4: command tx timeout [ 499.163758][T15623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2414'. [ 499.183897][T15623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2414'. [ 500.122257][T15654] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2422'. [ 500.727718][ T5963] Bluetooth: hci4: command tx timeout [ 500.907155][T15669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2425'. [ 500.910498][T15669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2425'. [ 502.276985][T15677] kernel profiling enabled (shift: 7) [ 502.808110][ T5963] Bluetooth: hci4: command tx timeout [ 504.095702][T15723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2437'. [ 504.103511][T15723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2437'. [ 505.441551][T15758] FAULT_INJECTION: forcing a failure. [ 505.441551][T15758] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 505.445550][T15758] CPU: 3 UID: 0 PID: 15758 Comm: syz.3.2446 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) [ 505.445566][T15758] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 505.445573][T15758] Call Trace: [ 505.445577][T15758] [ 505.445581][T15758] dump_stack_lvl+0x16c/0x1f0 [ 505.445603][T15758] should_fail_ex+0x512/0x640 [ 505.445622][T15758] _copy_from_user+0x2e/0xd0 [ 505.445639][T15758] snd_seq_ioctl+0x1bf/0x410 [ 505.445651][T15758] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 505.445672][T15758] ? __fget_files+0x20e/0x3c0 [ 505.445686][T15758] ? fput+0x60/0xf0 [ 505.445698][T15758] snd_seq_ioctl_compat+0xea/0x310 [ 505.445709][T15758] ? __pfx_snd_seq_ioctl_compat+0x10/0x10 [ 505.445721][T15758] __ia32_compat_sys_ioctl+0x242/0x370 [ 505.445737][T15758] __do_fast_syscall_32+0x7c/0x3a0 [ 505.445749][T15758] do_fast_syscall_32+0x32/0x80 [ 505.445759][T15758] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 505.445773][T15758] RIP: 0023:0xf7f31579 [ 505.445781][T15758] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 505.445792][T15758] RSP: 002b:00000000f503555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 505.445802][T15758] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000004040534e [ 505.445809][T15758] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 505.445815][T15758] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 505.445821][T15758] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 505.445827][T15758] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 505.445840][T15758] [ 505.568944][T15764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2450'. [ 505.572294][T15764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2450'. [ 506.790288][T15790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2456'. [ 507.083896][T15800] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2457'. [ 507.809750][T15817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2462'. [ 507.814325][T15817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2462'. [ 509.418966][T15851] Cannot find del_set index 3 as target [ 509.421423][T15851] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2471'. [ 509.434274][T15851] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2471'. [ 509.461416][T15851] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2471'. [ 509.489358][T15851] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2471'. [ 511.004610][ T5310] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 511.010215][ T5310] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 511.014618][ T5310] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 511.020425][ T5310] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 511.023103][ T5310] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 511.052967][T15923] lo speed is unknown, defaulting to 1000 [ 511.167130][T15923] chnl_net:caif_netlink_parms(): no params data found [ 511.543249][T15923] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.545717][T15923] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.559066][T15923] bridge_slave_0: entered allmulticast mode [ 511.561866][T15923] bridge_slave_0: entered promiscuous mode [ 511.565072][T15923] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.567367][T15923] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.574852][T15923] bridge_slave_1: entered allmulticast mode [ 511.577479][T15923] bridge_slave_1: entered promiscuous mode [ 511.691683][T15923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 511.696329][T15923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.783518][T15947] __nla_validate_parse: 31 callbacks suppressed [ 511.783536][T15947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2482'. [ 511.791511][T15947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2482'. [ 511.824623][T15923] team0: Port device team_slave_0 added [ 511.828563][T15923] team0: Port device team_slave_1 added [ 511.912354][T15923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.915290][T15923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.927825][T15923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.936071][T15923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.939910][T15923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.948560][T15923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 512.007356][T15923] hsr_slave_0: entered promiscuous mode [ 512.011565][T15923] hsr_slave_1: entered promiscuous mode [ 512.119416][T15962] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 512.300603][ T40] kauditd_printk_skb: 25 callbacks suppressed [ 512.300615][ T40] audit: type=1326 audit(1749969048.430:24868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15976 comm="syz.1.2486" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 512.322010][ T40] audit: type=1326 audit(1749969048.430:24869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15976 comm="syz.1.2486" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 512.674296][ T13] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 512.677822][ T13] bond0 (unregistering): Released all slaves [ 512.851121][ T13] ave_0: left promiscuous mode [ 513.057791][ T5310] Bluetooth: hci0: command tx timeout [ 513.235882][ T13] tipc: Left network mode [ 513.421878][T15992] FAULT_INJECTION: forcing a failure. [ 513.421878][T15992] name failslab, interval 1, probability 0, space 0, times 0 [ 513.427139][T15992] CPU: 1 UID: 0 PID: 15992 Comm: syz.3.2488 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) [ 513.427163][T15992] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 513.427174][T15992] Call Trace: [ 513.427181][T15992] [ 513.427188][T15992] dump_stack_lvl+0x16c/0x1f0 [ 513.427237][T15992] should_fail_ex+0x512/0x640 [ 513.427266][T15992] ? fs_reclaim_acquire+0xae/0x150 [ 513.427289][T15992] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 513.427314][T15992] should_failslab+0xc2/0x120 [ 513.427331][T15992] __kmalloc_noprof+0xd2/0x510 [ 513.427363][T15992] tomoyo_realpath_from_path+0xc2/0x6e0 [ 513.427390][T15992] ? tomoyo_profile+0x47/0x60 [ 513.427420][T15992] tomoyo_path_number_perm+0x245/0x580 [ 513.427439][T15992] ? tomoyo_path_number_perm+0x237/0x580 [ 513.427463][T15992] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 513.427512][T15992] ? find_held_lock+0x2b/0x80 [ 513.427529][T15992] ? hook_file_ioctl_common+0x145/0x410 [ 513.427555][T15992] ? __fget_files+0x20e/0x3c0 [ 513.427592][T15992] ? fput+0x60/0xf0 [ 513.427617][T15992] security_file_ioctl_compat+0x9b/0x240 [ 513.427641][T15992] __ia32_compat_sys_ioctl+0xc3/0x370 [ 513.427671][T15992] __do_fast_syscall_32+0x7c/0x3a0 [ 513.427690][T15992] do_fast_syscall_32+0x32/0x80 [ 513.427707][T15992] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 513.427729][T15992] RIP: 0023:0xf7f31579 [ 513.427743][T15992] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 513.427760][T15992] RSP: 002b:00000000f505655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 513.427777][T15992] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c03064b7 [ 513.427788][T15992] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 513.427798][T15992] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 513.427809][T15992] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 513.427819][T15992] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 513.427843][T15992] [ 513.514245][T15992] ERROR: Out of memory at tomoyo_realpath_from_path. [ 513.660611][T16002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2490'. [ 513.667479][T16002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2490'. [ 515.039779][T16004] kthread_run failed with err -4 [ 515.079659][T15923] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 515.091968][T15923] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 515.100059][T15923] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 515.112894][T15923] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 515.127792][ T5310] Bluetooth: hci0: command tx timeout [ 515.211362][T15923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.221112][T15923] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.225906][ T1201] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.228196][ T1201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.246022][ T1201] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.248867][ T1201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.256809][T16031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2495'. [ 515.301614][T15923] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 515.305037][T15923] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 515.677261][ T13] IPVS: stop unused estimator thread 0... [ 515.708999][T15923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 515.733966][T15923] veth0_vlan: entered promiscuous mode [ 515.742359][T15923] veth1_vlan: entered promiscuous mode [ 515.760023][T15923] veth0_macvtap: entered promiscuous mode [ 515.765020][T15923] veth1_macvtap: entered promiscuous mode [ 515.775650][T15923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 515.784746][T15923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 515.790384][T15923] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.793212][T15923] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.795911][T15923] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.800295][T15923] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.843911][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.850659][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.863958][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.866443][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.436154][T16086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2500'. [ 516.445434][T16086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2500'. [ 517.153722][T16109] lo speed is unknown, defaulting to 1000 [ 517.207986][ T5310] Bluetooth: hci0: command tx timeout [ 519.528360][ T5963] Bluetooth: hci0: command tx timeout [ 520.143232][T16245] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2517'. [ 525.006600][T16466] atomic_op ffff888023fa4198 conn xmit_atomic 0000000000000000 [ 525.422017][T16490] tc_dump_action: action bad kind [ 525.820474][T16487] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 525.823094][T16487] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 525.825975][T16487] vhci_hcd vhci_hcd.0: Device attached [ 525.831539][T16511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2552'. [ 525.843841][T16517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2552'. [ 526.048824][T16515] vhci_hcd: connection closed [ 526.049136][ T1201] vhci_hcd: stop threads [ 526.053004][ T1201] vhci_hcd: release socket [ 526.056904][ T1201] vhci_hcd: disconnect device [ 526.109121][T14982] usb 40-1: enqueue for inactive port 0 [ 526.618743][T14982] usb usb40-port1: attempt power cycle [ 526.992458][T16577] netlink: 'syz.2.2558': attribute type 14 has an invalid length. [ 527.178645][T14982] usb usb40-port1: unable to enumerate USB device [ 528.049636][T16639] binder: 16638:16639 ioctl c0046209 0 returned -22 [ 528.413245][T14969] IPVS: starting estimator thread 0... [ 528.612094][T16670] lo speed is unknown, defaulting to 1000 [ 528.677826][T16662] IPVS: using max 42 ests per chain, 100800 per kthread [ 529.235184][ T40] audit: type=1326 audit(1749969065.360:24870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16675 comm="syz.3.2569" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f31579 code=0x0 [ 529.410544][T16720] set match dimension is over the limit! [ 529.438351][T16721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2576'. [ 529.568314][ T40] audit: type=1800 audit(1749969065.700:24871): pid=16731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2576" name="file1" dev="overlay" ino=146 res=0 errno=0 [ 530.962318][T16781] xt_CT: No such helper "snmp_trap" [ 530.998693][T16785] netlink: 'syz.0.2586': attribute type 1 has an invalid length. [ 531.001486][T16785] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 531.076299][T16787] lo speed is unknown, defaulting to 1000 [ 531.261444][T16791] syz.0.2587: attempt to access beyond end of device [ 531.261444][T16791] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 531.323516][T16791] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2587'. [ 531.503243][T16797] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2588'. [ 532.579297][T16834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2595'. [ 532.591456][T16834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2595'. [ 532.958875][T16850] lo speed is unknown, defaulting to 1000 [ 534.283377][T16902] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 534.285816][T16902] overlayfs: failed to set xattr on upper [ 534.288767][T16902] overlayfs: ...falling back to redirect_dir=nofollow. [ 534.292598][T16902] overlayfs: ...falling back to index=off. [ 534.294747][T16902] overlayfs: ...falling back to uuid=null. [ 534.883036][ T40] audit: type=1804 audit(1749969070.990:24872): pid=16924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2605" name="/newroot/261/file0/bus/bus" dev="overlay" ino=58487 res=1 errno=0 [ 534.894985][ T40] audit: type=1804 audit(1749969070.990:24873): pid=16924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2605" name="/newroot/261/file0/bus/bus" dev="overlay" ino=58487 res=1 errno=0 [ 536.529430][T16970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2613'. [ 536.571040][T16970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2613'. [ 536.887646][ T6001] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 537.043388][ T6001] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 537.057706][ T6001] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 537.061107][ T6001] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 537.064459][ T6001] usb 7-1: config 0 interface 0 has no altsetting 0 [ 537.090909][ T6001] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 537.094718][ T6001] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 537.099482][ T6001] usb 7-1: config 0 interface 0 has no altsetting 0 [ 537.105685][ T6001] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 537.110629][ T6001] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 537.113946][ T6001] usb 7-1: config 0 interface 0 has no altsetting 0 [ 537.117254][ T6001] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 537.120419][ T6001] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 537.124485][ T6001] usb 7-1: config 0 interface 0 has no altsetting 0 [ 537.131872][ T6001] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 537.134769][ T6001] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 537.149907][ T6001] usb 7-1: config 0 interface 0 has no altsetting 0 [ 537.153962][ T6001] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 537.156859][ T6001] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 537.164131][ T6001] usb 7-1: config 0 interface 0 has no altsetting 0 [ 537.168839][ T6001] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 537.172540][ T6001] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 537.177011][ T6001] usb 7-1: config 0 interface 0 has no altsetting 0 [ 537.184732][ T6001] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 537.198251][ T6001] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 537.202751][ T6001] usb 7-1: config 0 interface 0 has no altsetting 0 [ 537.207967][ T6001] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 537.211734][ T6001] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 537.215146][ T6001] usb 7-1: Product: syz [ 537.216913][ T6001] usb 7-1: Manufacturer: syz [ 537.219205][ T6001] usb 7-1: SerialNumber: syz [ 537.223309][ T6001] usb 7-1: config 0 descriptor?? [ 537.233790][ T6001] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 537.455002][ T6001] usb 7-1: USB disconnect, device number 29 [ 537.458254][ T6001] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 538.630808][T17042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2622'. [ 538.636591][T17042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2622'. [ 538.883125][T17051] dvmrp9: entered allmulticast mode [ 538.954323][T17062] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2624'. [ 538.957469][T17062] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 538.960712][T17062] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2624'. [ 538.964761][T17062] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 538.967935][T17062] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2624'. [ 538.971371][T17062] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 539.657923][T17102] 9pnet: Could not find request transport: xen [ 540.846308][T17146] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2632'. [ 540.856762][T17146] mkiss: ax0: crc mode is auto. [ 541.149880][T17169] netlink: 'syz.0.2634': attribute type 4 has an invalid length. [ 541.464748][T17186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2640'. [ 541.468713][T17186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2640'. [ 541.504355][T17191] binder: 17173:17191 ioctl c0306201 80000080 returned -14 [ 542.761755][T17260] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2644'. [ 542.845684][T17264] dummy0: entered promiscuous mode [ 542.852611][T17264] macsec1: entered allmulticast mode [ 542.855489][T17264] dummy0: entered allmulticast mode [ 542.969069][T17264] dummy0: left allmulticast mode [ 542.970803][T17264] dummy0: left promiscuous mode [ 543.844905][T17311] netlink: 'syz.1.2650': attribute type 1 has an invalid length. [ 543.878535][T17311] 8021q: adding VLAN 0 to HW filter on device bond1 [ 544.869725][T17342] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 544.872446][T17342] IPv6: NLM_F_CREATE should be set when creating new route [ 544.984306][T17349] netlink: 'syz.3.2654': attribute type 4 has an invalid length. [ 544.986932][T17349] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2654'. [ 545.079951][T17344] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 545.082120][T17344] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 545.088145][T17344] vhci_hcd vhci_hcd.0: Device attached [ 545.231145][T17351] vhci_hcd: connection closed [ 545.232421][T16262] vhci_hcd: stop threads [ 545.235531][T16262] vhci_hcd: release socket [ 545.239138][T16262] vhci_hcd: disconnect device [ 545.279478][T14979] vhci_hcd: vhci_device speed not set [ 545.859649][T17378] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 545.861997][T17378] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 545.866030][T17378] vhci_hcd vhci_hcd.0: Device attached [ 545.873099][T17379] vhci_hcd: connection closed [ 545.873449][ T44] vhci_hcd: stop threads [ 545.920099][ T44] vhci_hcd: release socket [ 545.922090][ T44] vhci_hcd: disconnect device [ 546.060871][T17385] fuse: Unknown parameter 'group_i00000000000000000000' [ 546.384622][T17388] lo speed is unknown, defaulting to 1000 [ 546.583256][T17401] netlink: 'syz.1.2661': attribute type 10 has an invalid length. [ 546.585835][T17401] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2661'. [ 546.707051][T17401] dummy0: entered promiscuous mode [ 546.709299][T17401] bridge0: port 3(dummy0) entered blocking state [ 546.711538][T17401] bridge0: port 3(dummy0) entered disabled state [ 546.713760][T17401] dummy0: entered allmulticast mode [ 546.716767][T17401] bridge0: port 3(dummy0) entered blocking state [ 546.719230][T17401] bridge0: port 3(dummy0) entered forwarding state [ 547.365435][T17407] loop6: detected capacity change from 0 to 524287999 [ 547.370575][T17413] overlayfs: unescaped trailing colons in lowerdir mount option. [ 547.459748][T17418] vlan2: entered promiscuous mode [ 547.462158][T17418] vlan2: entered allmulticast mode [ 547.463926][T17418] hsr_slave_1: entered allmulticast mode [ 547.480248][T17418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2663'. [ 548.671860][T17439] mac80211_hwsim hwsim54 wlan1: entered allmulticast mode [ 548.827317][T17445] input: syz1 as /devices/virtual/input/input17 [ 549.557397][T17459] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 549.560699][T17459] overlayfs: failed to set xattr on upper [ 549.563312][T17459] overlayfs: ...falling back to redirect_dir=nofollow. [ 549.566185][T17459] overlayfs: ...falling back to index=off. [ 549.569049][T17459] overlayfs: ...falling back to uuid=null. [ 550.160452][ T40] audit: type=1804 audit(1749969086.290:24874): pid=17468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2676" name="/newroot/49/file0/bus/bus" dev="overlay" ino=61499 res=1 errno=0 [ 550.167543][ T40] audit: type=1804 audit(1749969086.290:24875): pid=17468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2676" name="/newroot/49/file0/bus/bus" dev="overlay" ino=61499 res=1 errno=0 [ 550.889308][ T5963] Bluetooth: hci1: command 0x0419 tx timeout [ 550.891408][ T6084] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 550.893577][ T6084] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 550.985056][T17487] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2682'. [ 550.991510][T17487] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 551.015829][T17489] input: syz0 as /devices/virtual/input/input18 [ 551.904259][T17508] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 551.906497][T17508] overlayfs: failed to set xattr on upper [ 551.908616][T17508] overlayfs: ...falling back to redirect_dir=nofollow. [ 551.910754][T17508] overlayfs: ...falling back to index=off. [ 551.912579][T17508] overlayfs: ...falling back to uuid=null. [ 552.130583][ T40] audit: type=1804 audit(1749969088.260:24876): pid=17510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2688" name="/newroot/279/file0/bus/bus" dev="overlay" ino=60096 res=1 errno=0 [ 552.145886][ T40] audit: type=1804 audit(1749969088.270:24877): pid=17510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2688" name="/newroot/279/file0/bus/bus" dev="overlay" ino=60096 res=1 errno=0 [ 552.967893][ T5963] Bluetooth: hci4: command 0x0c1a tx timeout [ 553.177633][ T6084] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 553.180192][ T6084] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 554.486100][T17571] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 554.488441][T17571] overlayfs: failed to set xattr on upper [ 554.490243][T17571] overlayfs: ...falling back to redirect_dir=nofollow. [ 554.492403][T17571] overlayfs: ...falling back to index=off. [ 554.509233][T17571] overlayfs: ...falling back to uuid=null. [ 554.821646][ T40] audit: type=1804 audit(1749969090.940:24878): pid=17580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2701" name="/newroot/78/file0/bus/bus" dev="overlay" ino=58908 res=1 errno=0 [ 554.897903][T17578] lo speed is unknown, defaulting to 1000 [ 554.940447][ T40] audit: type=1804 audit(1749969091.020:24879): pid=17580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2701" name="/newroot/78/file0/bus/bus" dev="overlay" ino=58908 res=1 errno=0 [ 555.517043][T17598] gtp0: entered promiscuous mode [ 556.225431][T17627] fuseblk: Bad value for 'rootmode' [ 556.259805][ T5963] Bluetooth: hci0: command 0x0c1a tx timeout [ 556.262081][ T6084] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 556.264028][ T6084] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 557.059362][T17671] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 557.062079][T17671] overlayfs: failed to set xattr on upper [ 557.064272][T17671] overlayfs: ...falling back to redirect_dir=nofollow. [ 557.066986][T17671] overlayfs: ...falling back to index=off. [ 557.072649][T17671] overlayfs: ...falling back to uuid=null. [ 557.516805][ T40] audit: type=1804 audit(1749969093.620:24880): pid=17696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2712" name="/newroot/94/file0/bus/bus" dev="overlay" ino=58968 res=1 errno=0 [ 558.114445][T17704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2720'. [ 558.121172][T17704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2720'. [ 561.950535][T17851] 8021q: VLANs not supported on ipvlan0 [ 562.093775][T17858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2734'. [ 562.112626][T17858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2734'. [ 562.187660][T17866] binder: 17859:17866 ioctl 4018620d 0 returned -22 [ 562.241323][T17869] binder: 17859:17869 ioctl c018620c 0 returned -14 [ 562.293983][T17865] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 562.444055][ T40] audit: type=1326 audit(1749969098.570:24881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17864 comm="syz.3.2737" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 562.523678][T17880] netlink: 'syz.2.2738': attribute type 1 has an invalid length. [ 562.525448][ T40] audit: type=1326 audit(1749969098.570:24882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17864 comm="syz.3.2737" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 562.533593][ T40] audit: type=1326 audit(1749969098.570:24883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17864 comm="syz.3.2737" exe="/syz-executor" sig=0 arch=40000003 syscall=218 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 562.540366][ T40] audit: type=1326 audit(1749969098.570:24884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17864 comm="syz.3.2737" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 562.547313][ T40] audit: type=1326 audit(1749969098.570:24885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17864 comm="syz.3.2737" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 562.547353][T17880] bond1: entered promiscuous mode [ 562.555870][ T40] audit: type=1326 audit(1749969098.570:24886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17864 comm="syz.3.2737" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 562.564764][ T40] audit: type=1326 audit(1749969098.570:24887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17864 comm="syz.3.2737" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 562.571664][ T40] audit: type=1326 audit(1749969098.570:24888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17864 comm="syz.3.2737" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 562.583308][T17880] bond1: entered allmulticast mode [ 562.590485][T17884] bond1: (slave erspan1): making interface the new active one [ 562.592891][T17884] erspan1: entered promiscuous mode [ 562.594680][T17884] erspan1: entered allmulticast mode [ 562.599606][T17884] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 562.645132][T17880] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2738'. [ 562.900539][T17893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2739'. [ 562.903463][T17893] nbd: must specify a size in bytes for the device [ 565.378831][T17987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2749'. [ 566.535364][T18030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2753'. [ 566.539468][T18030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2753'. [ 567.487164][T18068] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2759'. [ 569.704744][T18139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2766'. [ 569.962238][ T40] audit: type=1326 audit(1749969106.090:24889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18133 comm="syz.3.2765" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f31579 code=0x0 [ 570.086265][T18156] lo speed is unknown, defaulting to 1000 [ 570.312717][T18163] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2765'. [ 570.883614][T18188] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 570.885969][T18188] overlayfs: failed to set xattr on upper [ 570.888682][T18188] overlayfs: ...falling back to redirect_dir=nofollow. [ 570.890893][T18188] overlayfs: ...falling back to index=off. [ 570.892718][T18188] overlayfs: ...falling back to uuid=null. [ 571.095790][T18192] lo speed is unknown, defaulting to 1000 [ 571.790624][T18216] syz.0.2772: attempt to access beyond end of device [ 571.790624][T18216] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 571.795001][T18216] syz.0.2772: attempt to access beyond end of device [ 571.795001][T18216] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 571.799215][T18216] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 571.802254][T18216] syz.0.2772: attempt to access beyond end of device [ 571.802254][T18216] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 571.814034][T18216] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 571.819036][T18216] syz.0.2772: attempt to access beyond end of device [ 571.819036][T18216] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 571.823069][T18216] syz.0.2772: attempt to access beyond end of device [ 571.823069][T18216] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 571.827170][T18216] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 571.834725][T18216] syz.0.2772: attempt to access beyond end of device [ 571.834725][T18216] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 571.844208][T18216] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 571.848044][T18216] syz.0.2772: attempt to access beyond end of device [ 571.848044][T18216] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 571.853200][T18216] syz.0.2772: attempt to access beyond end of device [ 571.853200][T18216] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 571.859781][T18216] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 571.862792][T18216] syz.0.2772: attempt to access beyond end of device [ 571.862792][T18216] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 571.866683][T18216] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 571.870311][T18216] syz.0.2772: attempt to access beyond end of device [ 571.870311][T18216] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 571.874831][T18216] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 571.877994][T18216] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 571.881367][T18216] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 573.329529][T18272] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2781'. [ 573.333667][T18272] vcan0: entered promiscuous mode [ 573.335773][T18272] vcan0: entered allmulticast mode [ 574.402454][T18317] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2785'. [ 574.440014][T18320] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 574.442270][T18320] overlayfs: failed to set xattr on upper [ 574.444133][T18320] overlayfs: ...falling back to redirect_dir=nofollow. [ 574.446373][T18320] overlayfs: ...falling back to index=off. [ 574.448282][T18320] overlayfs: ...falling back to uuid=null. [ 575.811994][T18377] wireguard0: entered promiscuous mode [ 575.814455][T18377] wireguard0: entered allmulticast mode [ 576.860404][T18410] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2798'. [ 577.398098][T18447] siw: device registration error -23 [ 577.498582][T18447] sch_tbf: burst 32855 is lower than device lo mtu (39799) ! [ 578.005282][T18475] cgroup: name respecified [ 580.399285][T18569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2816'. [ 580.414185][T18569] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2816'. [ 580.562921][T18581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2819'. [ 580.573087][T18581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2819'. [ 581.496132][T18602] : entered promiscuous mode [ 581.534793][T18605] hugetlbfs: Unknown parameter 'moda' [ 582.801156][T18623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2830'. [ 582.811505][T18623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2830'. [ 583.270200][T18628] lo speed is unknown, defaulting to 1000 [ 584.868684][T18643] netlink: 171000 bytes leftover after parsing attributes in process `syz.0.2835'. [ 585.197639][ C0] vkms_vblank_simulate: vblank timer overrun [ 585.307627][ C0] vkms_vblank_simulate: vblank timer overrun [ 586.257410][T18663] hub 9-0:1.0: USB hub found [ 586.267748][T18663] hub 9-0:1.0: 1 port detected [ 586.724956][T18666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.729590][T18666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.896605][T18674] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2843'. [ 586.946978][T18672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2842'. [ 586.951363][T18672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2842'. [ 587.142707][T18681] lo speed is unknown, defaulting to 1000 [ 588.355281][T18708] bridge_slave_0: left allmulticast mode [ 588.358113][T18708] bridge_slave_0: left promiscuous mode [ 588.361486][T18708] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.439463][T18708] bridge_slave_1: left allmulticast mode [ 588.446943][T18708] bridge_slave_1: left promiscuous mode [ 588.465259][T18708] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.562922][T18708] bond0: (slave bond_slave_0): Releasing backup interface [ 588.642087][T18708] bond0: (slave bond_slave_1): Releasing backup interface [ 588.845691][T18708] team0: Port device team_slave_0 removed [ 588.894462][T18708] team0: Port device team_slave_1 removed [ 588.907362][T18708] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 588.913543][T18735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2851'. [ 588.916817][T18708] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 588.938278][T18708] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 588.947042][T18708] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 589.263377][T18748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2855'. [ 589.268955][T18748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2855'. [ 589.987059][ T40] audit: type=1326 audit(1749969126.110:24890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18767 comm="syz.2.2860" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x0 [ 590.179415][T18772] fuse: Bad value for 'user_id' [ 590.181510][T18772] fuse: Bad value for 'user_id' [ 590.328970][T18782] lo speed is unknown, defaulting to 1000 [ 590.367505][T18782] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2864'. [ 590.849438][T18792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2867'. [ 590.858575][T18792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2867'. [ 591.018359][T18798] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 591.022934][T18798] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 591.029666][T18798] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 591.032149][T18798] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 591.655589][T18810] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 592.310094][T18815] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 592.312378][T18815] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 592.315704][T18815] vhci_hcd vhci_hcd.0: Device attached [ 592.577811][ T6034] usb 39-1: new high-speed USB device number 3 using vhci_hcd [ 592.821199][T18817] vhci_hcd: connection reset by peer [ 592.825071][ T44] vhci_hcd: stop threads [ 592.826461][ T44] vhci_hcd: release socket [ 592.828131][ T44] vhci_hcd: disconnect device [ 592.939747][T18835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2877'. [ 592.965035][T18835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2877'. [ 593.230653][T18834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2876'. [ 593.233655][T18834] vlan0: left promiscuous mode [ 593.235409][T18834] bond0: left promiscuous mode [ 593.237396][T18834] bond_slave_0: left promiscuous mode [ 593.241195][T18834] bond_slave_1: left promiscuous mode [ 593.243907][T18834] bridge0: port 3(vlan0) entered disabled state [ 593.251519][T18834] bridge_slave_1: left allmulticast mode [ 593.253556][T18834] bridge_slave_1: left promiscuous mode [ 593.255498][T18834] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.264187][T18834] bridge_slave_0: left allmulticast mode [ 593.266550][T18834] bridge_slave_0: left promiscuous mode [ 593.270121][T18834] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.899162][T18850] lo speed is unknown, defaulting to 1000 [ 594.073173][T18857] bond0: (slave bond_slave_0): Releasing backup interface [ 594.076486][T18857] bond_slave_0: left allmulticast mode [ 594.090845][T18857] bond0: (slave bond_slave_1): Releasing backup interface [ 594.095933][T18857] bond_slave_1: left allmulticast mode [ 594.130084][T18858] netlink: 'syz.3.2881': attribute type 10 has an invalid length. [ 594.145765][T18857] team0: Port device team_slave_0 removed [ 594.171911][T18857] team0: Port device team_slave_1 removed [ 594.175414][T18857] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 594.177943][T18857] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 594.190922][T18859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2881'. [ 594.196453][T18857] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 594.198977][T18857] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 594.219942][T18857] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 594.222220][T18857] batman_adv: batadv0: Removing interface: ip6gretap1 [ 594.270581][T14979] lo speed is unknown, defaulting to 1000 [ 594.456603][T18858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 594.460656][T18858] team0: Port device bond0 added [ 594.604698][T18859] team0 (unregistering): Port device bond0 removed [ 595.387753][T14967] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 595.550246][T14967] usb 6-1: config 0 has an invalid interface number: 176 but max is 2 [ 595.553525][T14967] usb 6-1: config 0 has an invalid interface number: 7 but max is 2 [ 595.556766][T14967] usb 6-1: config 0 has no interface number 0 [ 595.560189][T14967] usb 6-1: config 0 has no interface number 1 [ 595.563654][T14967] usb 6-1: config 0 interface 7 has no altsetting 0 [ 595.565647][T14967] usb 6-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 595.570386][T14967] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.584841][T14967] usb 6-1: config 0 descriptor?? [ 595.792407][T14967] usb 6-1: Could not set interface, error -71 [ 595.800596][T14967] usb 6-1: USB disconnect, device number 36 [ 596.012561][T18884] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2888'. [ 596.015374][T18884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2888'. [ 596.019125][T18884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2888'. [ 597.159836][T18909] overlayfs: overlapping lowerdir path [ 597.806929][ T6034] vhci_hcd: vhci_device speed not set [ 599.215769][T18944] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 599.227672][T18944] overlayfs: failed to set xattr on upper [ 599.230512][T18944] overlayfs: ...falling back to redirect_dir=nofollow. [ 599.233352][T18944] overlayfs: ...falling back to index=off. [ 599.235783][T18944] overlayfs: ...falling back to uuid=null. [ 599.595848][ T40] audit: type=1804 audit(1749969135.710:24891): pid=18959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2903" name="/newroot/127/file0/bus/bus" dev="overlay" ino=63930 res=1 errno=0 [ 599.617840][ T40] audit: type=1804 audit(1749969135.710:24892): pid=18959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2903" name="/newroot/127/file0/bus/bus" dev="overlay" ino=63930 res=1 errno=0 [ 599.851782][T18963] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2908'. [ 600.843848][ T40] audit: type=1326 audit(1749969136.970:24893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18990 comm="syz.3.2912" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 600.857685][ T40] audit: type=1326 audit(1749969136.970:24894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18990 comm="syz.3.2912" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 600.866966][ T40] audit: type=1326 audit(1749969136.980:24895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18990 comm="syz.3.2912" exe="/syz-executor" sig=0 arch=40000003 syscall=27 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 600.879661][ T40] audit: type=1326 audit(1749969136.980:24896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18990 comm="syz.3.2912" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 600.889826][ T40] audit: type=1326 audit(1749969136.980:24897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18990 comm="syz.3.2912" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 600.901011][ T40] audit: type=1326 audit(1749969136.980:24898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18990 comm="syz.3.2912" exe="/syz-executor" sig=0 arch=40000003 syscall=241 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 600.911261][ T40] audit: type=1326 audit(1749969136.980:24899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18990 comm="syz.3.2912" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 600.922588][ T40] audit: type=1326 audit(1749969136.980:24900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18990 comm="syz.3.2912" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 601.085589][T18992] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 601.088413][T18992] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 601.116908][T18992] vhci_hcd vhci_hcd.0: Device attached [ 601.357795][T12253] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 601.648457][T18993] vhci_hcd: connection reset by peer [ 601.659689][T16262] vhci_hcd: stop threads [ 601.679331][T16262] vhci_hcd: release socket [ 601.681357][T16262] vhci_hcd: disconnect device [ 601.794931][T19012] ALSA: mixer_oss: invalid OSS volume 'PHONEIÎ' [ 602.412660][T19035] rdma_rxe: rxe_newlink: failed to add lo [ 602.428037][T19035] rdma_rxe: rxe_newlink: failed to add lo [ 602.430723][T19035] netlink: 'syz.3.2923': attribute type 4 has an invalid length. [ 603.638082][T14982] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 603.935947][T19065] cgroup: Name too long [ 604.753391][T19088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2931'. [ 606.477782][T12253] vhci_hcd: vhci_device speed not set [ 613.901613][T19120] /dev/nullb0: Can't open blockdev [ 613.959298][T19130] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 613.961850][T19130] overlayfs: failed to set xattr on upper [ 613.963869][T19130] overlayfs: ...falling back to redirect_dir=nofollow. [ 613.966560][T19130] overlayfs: ...falling back to index=off. [ 613.971944][T19130] overlayfs: ...falling back to uuid=null. [ 614.095477][T19133] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2936'. [ 614.361249][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 614.361299][ T40] audit: type=1804 audit(1749969150.480:24912): pid=19141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2938" name="/newroot/151/file0/bus/bus" dev="overlay" ino=65059 res=1 errno=0 [ 614.373512][ T40] audit: type=1804 audit(1749969150.490:24913): pid=19141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2938" name="/newroot/151/file0/bus/bus" dev="overlay" ino=65059 res=1 errno=0 [ 617.296276][T19203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2953'. [ 617.338081][T19205] lo speed is unknown, defaulting to 1000 [ 617.582597][T19213] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2955'. [ 617.708865][T19220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2957'. [ 617.716366][T19220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2957'. [ 617.776504][T19223] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2957'. [ 618.946124][T19263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2964'. [ 618.952092][T19263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2964'. [ 619.491652][T19271] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 619.494508][T19271] overlayfs: failed to set xattr on upper [ 619.497960][T19271] overlayfs: ...falling back to redirect_dir=nofollow. [ 619.500135][T19271] overlayfs: ...falling back to index=off. [ 619.502075][T19271] overlayfs: ...falling back to uuid=null. [ 619.962516][ T40] audit: type=1804 audit(1749969156.090:24914): pid=19274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2966" name="/newroot/112/file0/bus/bus" dev="overlay" ino=66026 res=1 errno=0 [ 619.971950][ T40] audit: type=1804 audit(1749969156.090:24915): pid=19274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2966" name="/newroot/112/file0/bus/bus" dev="overlay" ino=66026 res=1 errno=0 [ 620.608843][T19273] vlan2: entered allmulticast mode [ 620.611093][T19273] vlan1: entered allmulticast mode [ 620.613308][T19273] veth0_vlan: entered allmulticast mode [ 620.813801][T19282] mac80211_hwsim hwsim19 wlan1: entered allmulticast mode [ 620.850321][T19284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2969'. [ 620.860396][T19284] FAULT_INJECTION: forcing a failure. [ 620.860396][T19284] name failslab, interval 1, probability 0, space 0, times 0 [ 620.865381][T19284] CPU: 2 UID: 0 PID: 19284 Comm: syz.2.2969 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) [ 620.865409][T19284] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 620.865416][T19284] Call Trace: [ 620.865420][T19284] [ 620.865425][T19284] dump_stack_lvl+0x16c/0x1f0 [ 620.865513][T19284] should_fail_ex+0x512/0x640 [ 620.865547][T19284] ? __kvmalloc_node_noprof+0x124/0x620 [ 620.865565][T19284] should_failslab+0xc2/0x120 [ 620.865576][T19284] __kvmalloc_node_noprof+0x137/0x620 [ 620.865592][T19284] ? xfrm_user_rcv_msg_compat+0x36d/0x1390 [ 620.865612][T19284] ? xfrm_user_rcv_msg_compat+0x36d/0x1390 [ 620.865673][T19284] xfrm_user_rcv_msg_compat+0x36d/0x1390 [ 620.865692][T19284] ? kmem_cache_free+0x2d1/0x4d0 [ 620.865707][T19284] ? __pfx_xfrm_user_rcv_msg_compat+0x10/0x10 [ 620.865723][T19284] ? dev_hard_start_xmit+0x97/0x740 [ 620.865738][T19284] ? __dev_queue_xmit+0x7eb/0x43e0 [ 620.865752][T19284] ? netlink_deliver_tap+0xa87/0xd30 [ 620.865763][T19284] ? netlink_unicast+0x5df/0x7f0 [ 620.865774][T19284] ? netlink_sendmsg+0x8d1/0xdd0 [ 620.865784][T19284] ? ____sys_sendmsg+0xa98/0xc70 [ 620.865797][T19284] ? ___sys_sendmsg+0x134/0x1d0 [ 620.865829][T19284] ? find_held_lock+0x2b/0x80 [ 620.865842][T19284] ? xfrm_get_translator+0xeb/0x290 [ 620.865857][T19284] ? __pfx_xfrm_user_rcv_msg_compat+0x10/0x10 [ 620.865874][T19284] xfrm_user_rcv_msg+0x280/0xb60 [ 620.865891][T19284] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 620.865904][T19284] ? kfree_skbmem+0x1a4/0x1f0 [ 620.865918][T19284] ? consume_skb+0xcc/0x100 [ 620.865930][T19284] ? find_held_lock+0x2b/0x80 [ 620.865940][T19284] ? __dev_queue_xmit+0x896/0x43e0 [ 620.865970][T19284] ? __pfx___might_resched+0x10/0x10 [ 620.865983][T19284] ? rcu_is_watching+0x12/0xc0 [ 620.865996][T19284] netlink_rcv_skb+0x155/0x420 [ 620.866009][T19284] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 620.866023][T19284] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 620.866042][T19284] ? netlink_deliver_tap+0x1ae/0xd30 [ 620.866056][T19284] xfrm_netlink_rcv+0x71/0x90 [ 620.866073][T19284] netlink_unicast+0x53d/0x7f0 [ 620.866087][T19284] ? __pfx_netlink_unicast+0x10/0x10 [ 620.866103][T19284] netlink_sendmsg+0x8d1/0xdd0 [ 620.866118][T19284] ? __pfx_netlink_sendmsg+0x10/0x10 [ 620.866131][T19284] ? __import_iovec+0x1dd/0x650 [ 620.866145][T19284] ____sys_sendmsg+0xa98/0xc70 [ 620.866160][T19284] ? __pfx_____sys_sendmsg+0x10/0x10 [ 620.866172][T19284] ? get_compat_msghdr+0x11a/0x170 [ 620.866190][T19284] ___sys_sendmsg+0x134/0x1d0 [ 620.866208][T19284] ? __pfx____sys_sendmsg+0x10/0x10 [ 620.866232][T19284] ? find_held_lock+0x2b/0x80 [ 620.866251][T19284] __sys_sendmsg+0x16d/0x220 [ 620.866269][T19284] ? __pfx___sys_sendmsg+0x10/0x10 [ 620.866293][T19284] ? rcu_is_watching+0x12/0xc0 [ 620.866305][T19284] __do_fast_syscall_32+0x7c/0x3a0 [ 620.866317][T19284] do_fast_syscall_32+0x32/0x80 [ 620.866340][T19284] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 620.866355][T19284] RIP: 0023:0xf7fa6579 [ 620.866365][T19284] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 620.866376][T19284] RSP: 002b:00000000f50c655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 620.866386][T19284] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800003c0 [ 620.866393][T19284] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 620.866399][T19284] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 620.866405][T19284] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 620.866411][T19284] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 620.866424][T19284] [ 621.127937][T19291] netlink: 'syz.0.2972': attribute type 39 has an invalid length. [ 621.132990][T19291] veth0_macvtap: left promiscuous mode [ 621.138311][T19284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2969'. [ 621.143522][T19292] netlink: 'syz.0.2972': attribute type 39 has an invalid length. [ 621.648325][T19297] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 621.650431][T19297] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 621.653035][T19297] vhci_hcd vhci_hcd.0: Device attached [ 621.730209][T19300] vhci_hcd: connection closed [ 621.748812][ T44] vhci_hcd: stop threads [ 621.752953][ T44] vhci_hcd: release socket [ 621.754541][ T44] vhci_hcd: disconnect device ½0=Ò k"0c³CÞ;å.ÀºEÈ@ÞÝw÷ÉÔ…Hiò=¼Rv©™[s;ݧõ8[ †µUxR©ª@å¾Þõ]u+¸'¯Þò“,]u²¨”ÖÐ g‡ª‰›(²¤ë£ÒÍ0ÜwèÀeÍ…z$aá¹’ãu§b9›yû˜ç¯YE)&Oþ)Ÿ‹6ø“b;æÁ©¡yg¾Uü4>´rÉ“´Žt€_ÆœàʘÚG‚†Ã0µØ0Hö”ŽÑVpẑEŠ=N© OeÝ¢Ï2ûæ"yÄJ½Iª†èÝz‰F°<@MS0êQ¥¤up¥øQ¯ʃ’´¥ølƒ’~™ñ7¿çMüžÂؤZGõk½›×íφÈÛwðW·§›_F•°‹cã1×`LÞéŠÏ챈*‘]Ðä°kjF‡U)B–6Ñ=xŒ}³í<˜úiä&vÛ 5@½‰3£ûw]+ú‹ÏÎáÇ$Ì6´_§)¦s½\ç( µH˜‘co bxz$!/ Î*ǽû ˆM3…ËG‡¼¦v[Ȁ¥mތ˖VP§CHØ\«üiÎ>€[4OÑñöwùO_ÑÆ;þø¨öÕ½†a,µÃaÓxÏ0 2a0ˆs¹1œ¼=Ï*¤*Š$þ»S8 ŽÆ+èW1E$”ÆmCK-ÁX_É^y—b1²À9õúQsÙîü'ê°CŒ9ÁñÓwBà°x(›„Ñ›‰ö·…"¯ÐuƒÏ›B«ÑI.XÕïOÚW¸­Zétp»0ÚÇ\PÖ‚ŒòXÎl¥fw;hB²? ŸÂe Þ#`!ödܱ Œo7¥ZlÇ‚¾©`¹ :‰“ýÅ[Ì!vHDÒVû€‘â.MŸgŽ“¹` hZ q­ƒØCÎ>Ô–’E8ĵôq©Ê%SËS·å§*vÔiü#yIWg¢ΙrÞ#ƒ…-¨¦Ô>6lÚc~cà‚²×× .k à7‡Áa#ßJ#÷'NÑN¹·&G]BÂVŸ3È^“"ûô7·ïI+ |£Æ¬¡ž±¹ nŸ‡ŠÎášÐî^F/’8£¹ù'U잦"ïh7&¬1x}O¦ Չ܌sQ"‘:oêLÇf…æƒz}öonùŠ˜ø=Lò»±Fl>¶åàÄËÌ=O£I„áêÒÝø¹éœÐ…9gâ6vß8€DïQHwYǺԒ_fÎ’ü·„‰|qÍ™ƒ'0Y^˜}íW_å³é“ÝÏ{S¼q*‰Ñ{ÒéºWUÓJ¸ªŒ+-TZ7c.Ý÷â¨% ,l6PŽXò6Å? |’ñ9eJ5ì<°›)œ \ˆ8÷ûVóò–Y©Í%v59C%ªwYzÕí2˾¨~Àòšúáúi5îgšR÷Œ‚Ð(\?ņ«;ˆ1!†Jq+tôŒ¹+øŒ5¶Ô·°bNþu£ ÓaY=ãñH©Ìö *9 3Zä\—Pˆ‹¦åWªð'À¶œ_n\‚I¶2×OWE„GR^…Y ^—»2æn« I¸Ú¤Ë­üoÖ+Ó…âJ¶˜º¤\ò0©ü{còŒÜT,—‡Ðg bJMÝãÆ%îýðºKÑìÊ{;. uiT-©Á[…ÀÞ+ðÉìx:‚†%y1zsY<$]cp¥qo4ùß@Dñ„\aÊ)#óŸåGÈ­‘@Ó ·'걜Œz!'‹è?C 1ƒñ¦ë³y§Y «(f€1ýGà˜©¡ž™WZ©Ï‘ç¼Ks~èìe÷˜îq°šg…ÀOþï´‚3îmý™Ím„ÐŽåä×zAŠŸóXË­e`]²†ß³ÙáAxÔvÖÏ+F¼»¶ùñîê¬ë0£—¬Üï?Oø}†.Ì<{„ƒ‚GñÞNJ÷kÒ¿2˜‡šYÃŒ;Tc÷.c&âÍ’&jäzŒRΉc“ȧé¹Ê- îÕzjýz/w$²â(>¼ÒT ”|Ôh‹ÊýÍ3 ÓÀ 7ð`(*ûì¦úéxÃk"ÞºùGzR…òú±AoOäź™:m@dcÜ~້Éî–]°F#§„ø<ÉÐÈHÓKœS¿_ }å ¥&4Ò½¥:– Bƒ@Y»a‹èH{€Iêȃ¢1À/Žt‡683Ù-ªHèÓ‡ÕŸOŽ6dÓÖg;ü„zÕá¿æG·Xê4WÐ6BÛg‘í³\¨"\‹V[1¯C³ç¡ cÀ½[H+í´ó™QçˆK°¾lÍ,NJçèTt0 ôêáO3 «~ÿ7ÄT7æ˜iò†‚ìÃBJ*à©—Mï<OËbù4Ï2Ù¬…x/àÉÏ­Ö:+¨€Þ‰ãß3l"0ËZ¿d®O#ýÃ̵G<'„-ÊP„%¶p»žÀmxB?=Ìž êKÏå;¢¤Âm$8¡™µ¹·ªI@¿;¥ÍŠrmDD"…÷©ÿÄeÑ€>wÿåj&/oc¹ÿáiˆ!iòP_yQ2¨3@†Sèºv³—yAe]Q3œL.Õùp9^€:êèl‚‘Ÿ~ðXöƒŒ±zÔÂ~MÿÏ& H~‚hó !Ôc·N'á²Ð¾Z8í £a–êµõÏ€LRß%Å(Þ…Ðÿ]åÃZG”ÖÓ…Ô–°ºjçÁŸ®3¿ùD õ“C9à°ü§R8„ M¹2æxZý²bÀŒ%„#Rž»|fÍÅ漮䷓Èl_Ià\G_b‘h§Vi×ô?ÓNfgV¾BpI+¢ëh9ãµ?ªæ ïMvÀsîÀ½¹>Å'Çp›MX¥sQâ.™`ìÌläqëx©ÖIóê¶z4Rg[ƒÒªa_®^íAHzôÎz/fš2=ah×ÂeRW³ô³Î5: &É6„k,c’š›æÀ#‡VIVHF¿¦Ã`à²óù±‚ éWèVo&Wõ’lÚËëIirŠ•‚·³æÚdÿcÿ¦áË Ø2È-¤»Äðeƒd¸ŒDÛ*Žñ.=÷8ó—´¦ùÝ;ø Ó?íw¤ž¡»1)nÊß±[§uyøS W¸Òq…·¦5ï'Zb·ÊŒÀ—0yùm:åå}kk™´ |æ´V“×’;¬%×+îlÀ;·HŠ°ï#°ìoŸFœù€J÷;öÎ !YgŽòe4Ëóð<;ýϹ®ˆØ#~­•¦™OpµLª}qü(Qê¶;‡¤gj<Ìó N%ŽüQÁ=@£~NHNß„0‘4Ùè¿ ‚³›†gÅ«Êø¯GÇ,S0lâ,«åÃwm";öæÚïoÓÑûù涠`ŽHà7íÑvòÐå‘Ãâ½Iüj϶Uß(Á˜³þ³‹cçÞ—ŒY­mO[ïA¾•YÉœ•0Ï€`‘Ø;‰W±©dÀªð×!ÐxX~# µ–Ëÿ; ûàäÌâ`VHëˆdUü„“°+ê“ø*íus‡ãþ^[6;מù9[<µûíÁ¯*I41Á=„ÆE0´A¥²ÏêÆÆPn‚Á]“-„Y¹’¥ÔÃÍŒýï@z=ðïÅò‰Õ8·†àÞÉ[wñÝ+¯»´ØØ¿ÑbMUlì•æÐe*ß4xå ½ƒÓ8³Xüp€|&ÿd_ ÊšÖµÀËùì->…Eè¡k]«Pת” _pvš«S.ÄÊRúû^üfx,^É}m÷VŸ5p/Ó¯ù¾YNÄÇŠS°9i`ØP€!‘(œm[,|"¥ûáF ¸çw]×eü4w¼~ÉÒh¡ÜÜ29 œ¨½bÅÚ¬@ñ™×¯˜?ÐðT­ÄÑæR¯›¶>KÒÛÚyZ+bt«ÚžW Â-bQõÕŠ ~ìf£i†hv‡^€ç|/˜xÅ$,YÕÕí 㣖ƒAœêÉ´ÃVÊGáHLSMKÌ*SuÝÊã—L§ãÝ­ð8*Ì1m&ÞúQìópÏ¿5ƒæµ=ùXŸ¥­ú¤ Œ:==öB>];oFÒÈçå jö+ X„þsëm‘ogI OP瀎Ž›‹p±=w•«ñ“ûú姩!z÷¢÷[È­±×‚G$ë[ûniUJœ\œBÔ°ǯJ¨Ûïz¢䲞G«èYE¿]Apaxeê‰&1]Á/hâKDRkZ*°îE°k7ŸÜªcÐ , Ùk*Êu?'«†rÏ“kV}'r¦eàùSJÖÞ¦kpá„”ý¦³ð¿Ròó œ$šH$ëÿ.Ä`ü›{“´“«­Ô^¾ýàç¦DYëÆÝÏ ÿïÛ†Idmy/kQm¶ëÌÏÒ£Ê9¹†tàÄôF˜VÜ|¦A\`K—Gëô‰ÿJÓè˜%ô.í©R Dh)ŽøT"/0ê¤Kâh»BçöÕûô&ýƈ“ÒJ¶+a z9ÝY2®«z—˜…Å ÄÚãdXÑ[E E³¢J¸ižVAoU˜m4T„[Ó-½>`Ѥg-;¨“3e-ú4$¾ë…‹ô’¯º6#<¬[ 623.157946][ T40] audit: type=1326 audit(1749969159.280:24916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19327 comm="syz.2.2982" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 623.164969][ T40] audit: type=1326 audit(1749969159.280:24917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19327 comm="syz.2.2982" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 623.190370][T19350] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2985'. [ 624.536042][T19367] vivid-007: disconnect [ 624.554847][T19364] vivid-007: reconnect [ 626.792011][T19409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3001'. [ 626.795103][T19409] FAULT_INJECTION: forcing a failure. [ 626.795103][T19409] name failslab, interval 1, probability 0, space 0, times 0 [ 626.799170][T19409] CPU: 0 UID: 0 PID: 19409 Comm: syz.2.3001 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) [ 626.799186][T19409] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 626.799193][T19409] Call Trace: [ 626.799197][T19409] [ 626.799201][T19409] dump_stack_lvl+0x16c/0x1f0 [ 626.799223][T19409] should_fail_ex+0x512/0x640 [ 626.799239][T19409] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 626.799259][T19409] should_failslab+0xc2/0x120 [ 626.799270][T19409] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 626.799286][T19409] ? __alloc_skb+0x2b2/0x380 [ 626.799305][T19409] __alloc_skb+0x2b2/0x380 [ 626.799321][T19409] ? __pfx___alloc_skb+0x10/0x10 [ 626.799342][T19409] netlink_ack+0x15d/0xb80 [ 626.799354][T19409] ? __pfx___might_resched+0x10/0x10 [ 626.799370][T19409] netlink_rcv_skb+0x332/0x420 [ 626.799382][T19409] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 626.799397][T19409] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 626.799416][T19409] ? netlink_deliver_tap+0x1ae/0xd30 [ 626.799429][T19409] xfrm_netlink_rcv+0x71/0x90 [ 626.799441][T19409] netlink_unicast+0x53d/0x7f0 [ 626.799455][T19409] ? __pfx_netlink_unicast+0x10/0x10 [ 626.799471][T19409] netlink_sendmsg+0x8d1/0xdd0 [ 626.799486][T19409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 626.799499][T19409] ? __import_iovec+0x1dd/0x650 [ 626.799513][T19409] ____sys_sendmsg+0xa98/0xc70 [ 626.799528][T19409] ? __pfx_____sys_sendmsg+0x10/0x10 [ 626.799541][T19409] ? get_compat_msghdr+0x11a/0x170 [ 626.799558][T19409] ___sys_sendmsg+0x134/0x1d0 [ 626.799576][T19409] ? __pfx____sys_sendmsg+0x10/0x10 [ 626.799600][T19409] ? find_held_lock+0x2b/0x80 [ 626.799620][T19409] __sys_sendmsg+0x16d/0x220 [ 626.799637][T19409] ? __pfx___sys_sendmsg+0x10/0x10 [ 626.799660][T19409] ? rcu_is_watching+0x12/0xc0 [ 626.799674][T19409] __do_fast_syscall_32+0x7c/0x3a0 [ 626.799685][T19409] do_fast_syscall_32+0x32/0x80 [ 626.799695][T19409] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 626.799709][T19409] RIP: 0023:0xf7fa6579 [ 626.799718][T19409] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 626.799728][T19409] RSP: 002b:00000000f50c655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 626.799739][T19409] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800003c0 [ 626.799760][T19409] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 626.799768][T19409] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 626.799774][T19409] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 626.799781][T19409] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 626.799794][T19409] [ 626.800960][T19409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3001'. [ 627.788400][T19439] overlayfs: failed to resolve './file0': -2 [ 627.913145][ T40] audit: type=1400 audit(1749969164.040:24918): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=19445 comm="syz.1.3011" [ 628.660493][T19458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3014'. [ 628.725986][T19464] vxcan0: tx address claim with dlc 0 [ 629.899976][T19495] Cannot find del_set index 3 as target [ 630.244371][T19495] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3024'. [ 630.408503][T19510] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3027'. [ 630.412338][T19510] FAULT_INJECTION: forcing a failure. [ 630.412338][T19510] name failslab, interval 1, probability 0, space 0, times 0 [ 630.416513][T19510] CPU: 2 UID: 0 PID: 19510 Comm: syz.3.3027 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) [ 630.416529][T19510] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 630.416536][T19510] Call Trace: [ 630.416540][T19510] [ 630.416545][T19510] dump_stack_lvl+0x16c/0x1f0 [ 630.416566][T19510] should_fail_ex+0x512/0x640 [ 630.416585][T19510] should_failslab+0xc2/0x120 [ 630.416596][T19510] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 630.416613][T19510] ? skb_clone+0x190/0x3f0 [ 630.416626][T19510] skb_clone+0x190/0x3f0 [ 630.416649][T19510] netlink_deliver_tap+0xabd/0xd30 [ 630.416666][T19510] netlink_unicast+0x6b2/0x7f0 [ 630.416680][T19510] ? __pfx_netlink_unicast+0x10/0x10 [ 630.416696][T19510] netlink_ack+0x696/0xb80 [ 630.416713][T19510] netlink_rcv_skb+0x332/0x420 [ 630.416725][T19510] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 630.416741][T19510] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 630.416764][T19510] ? netlink_deliver_tap+0x1ae/0xd30 [ 630.416777][T19510] xfrm_netlink_rcv+0x71/0x90 [ 630.416789][T19510] netlink_unicast+0x53d/0x7f0 [ 630.416803][T19510] ? __pfx_netlink_unicast+0x10/0x10 [ 630.416820][T19510] netlink_sendmsg+0x8d1/0xdd0 [ 630.416834][T19510] ? __pfx_netlink_sendmsg+0x10/0x10 [ 630.416848][T19510] ? __import_iovec+0x1dd/0x650 [ 630.416861][T19510] ____sys_sendmsg+0xa98/0xc70 [ 630.416876][T19510] ? __pfx_____sys_sendmsg+0x10/0x10 [ 630.416889][T19510] ? get_compat_msghdr+0x11a/0x170 [ 630.416906][T19510] ___sys_sendmsg+0x134/0x1d0 [ 630.416924][T19510] ? __pfx____sys_sendmsg+0x10/0x10 [ 630.416948][T19510] ? find_held_lock+0x2b/0x80 [ 630.416968][T19510] __sys_sendmsg+0x16d/0x220 [ 630.416985][T19510] ? __pfx___sys_sendmsg+0x10/0x10 [ 630.417009][T19510] ? rcu_is_watching+0x12/0xc0 [ 630.417022][T19510] __do_fast_syscall_32+0x7c/0x3a0 [ 630.417034][T19510] do_fast_syscall_32+0x32/0x80 [ 630.417044][T19510] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 630.417058][T19510] RIP: 0023:0xf7f31579 [ 630.417066][T19510] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 630.417078][T19510] RSP: 002b:00000000f505655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 630.417088][T19510] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800003c0 [ 630.417095][T19510] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 630.417101][T19510] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 630.417107][T19510] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 630.417113][T19510] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 630.417127][T19510] [ 630.525607][T19513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3027'. [ 630.626455][T19519] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(13) [ 630.628616][T19519] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 630.633408][T19519] vhci_hcd vhci_hcd.0: Device attached [ 630.644206][T19518] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(15) [ 630.646389][T19518] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 630.651475][T19518] vhci_hcd vhci_hcd.0: Device attached [ 630.711106][T19518] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(19) [ 630.713343][T19518] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 630.716009][T19518] vhci_hcd vhci_hcd.0: Device attached [ 630.720511][T19518] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(22) [ 630.722679][T19518] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 630.725124][T19518] vhci_hcd vhci_hcd.0: Device attached [ 630.729300][T19518] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(24) [ 630.731611][T19518] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 630.734650][T19518] vhci_hcd vhci_hcd.0: Device attached [ 630.739999][T19518] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 630.748453][T19518] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 630.759225][T19518] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(30) [ 630.761689][T19518] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 630.764855][T19518] vhci_hcd vhci_hcd.0: Device attached [ 630.774483][T19518] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(34) [ 630.777250][T19518] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 630.779039][T19540] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 630.782526][T19540] overlayfs: failed to set xattr on upper [ 630.784330][T19540] overlayfs: ...falling back to redirect_dir=nofollow. [ 630.786602][T19540] overlayfs: ...falling back to index=off. [ 630.787998][T19518] vhci_hcd vhci_hcd.0: Device attached [ 630.788595][T19540] overlayfs: ...falling back to uuid=null. [ 630.804606][T19522] vhci_hcd: connection closed [ 630.804727][T19526] vhci_hcd: connection closed [ 630.806806][T19524] vhci_hcd: connection closed [ 630.807992][T19528] vhci_hcd: connection closed [ 630.828078][T19530] vhci_hcd: connection closed [ 630.853365][ T44] vhci_hcd: stop threads [ 630.858581][ T44] vhci_hcd: release socket [ 630.862339][ T44] vhci_hcd: disconnect device [ 630.864862][ T44] vhci_hcd: stop threads [ 630.866624][ T44] vhci_hcd: release socket [ 630.869299][ T44] vhci_hcd: disconnect device [ 630.871523][ T44] vhci_hcd: stop threads [ 630.873243][ T44] vhci_hcd: release socket [ 630.874804][ T44] vhci_hcd: disconnect device [ 630.876451][ T44] vhci_hcd: stop threads [ 630.879203][ T44] vhci_hcd: release socket [ 630.880692][ T44] vhci_hcd: disconnect device [ 630.882294][ T44] vhci_hcd: stop threads [ 630.883639][ T44] vhci_hcd: release socket [ 630.885108][ T44] vhci_hcd: disconnect device [ 630.899523][T12253] vhci_hcd: vhci_device speed not set [ 631.235280][ T40] audit: type=1804 audit(1749969167.360:24919): pid=19562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3030" name="/newroot/375/file0/bus/bus" dev="overlay" ino=64501 res=1 errno=0 [ 631.263846][ T40] audit: type=1804 audit(1749969167.360:24920): pid=19562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.3030" name="/newroot/375/file0/bus/bus" dev="overlay" ino=64501 res=1 errno=0 [ 631.323073][T19536] vhci_hcd: connection closed [ 631.323207][T19532] vhci_hcd: connection closed [ 631.326147][ T44] vhci_hcd: stop threads [ 631.330816][ T44] vhci_hcd: release socket [ 631.332900][ T44] vhci_hcd: disconnect device [ 631.336392][ T44] vhci_hcd: stop threads [ 631.339171][ T44] vhci_hcd: release socket [ 631.341358][ T44] vhci_hcd: disconnect device [ 631.383756][T19550] ceph: No mds server is up or the cluster is laggy [ 631.542388][T19566] netlink: 'syz.1.3035': attribute type 1 has an invalid length. [ 631.604931][T19566] 8021q: adding VLAN 0 to HW filter on device bond3 [ 631.654599][T19569] bond3: (slave veth0_to_bond): making interface the new active one [ 631.664153][T19569] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 631.686747][T19566] vlan2: entered allmulticast mode [ 631.813614][T19566] veth1: entered allmulticast mode [ 631.815839][T19566] veth1: entered promiscuous mode [ 631.818733][T19566] veth1: left promiscuous mode [ 631.821519][T19566] bond3: (slave vlan2): Enslaving as an active interface with an up link [ 631.862344][ T6001] libceph: connect (1)[c::]:6789 error -101 [ 631.864329][ T6001] libceph: mon0 (1)[c::]:6789 connect error [ 631.900116][T19573] ceph: No mds server is up or the cluster is laggy [ 631.903034][T19580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3039'. [ 631.907056][T19580] FAULT_INJECTION: forcing a failure. [ 631.907056][T19580] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 631.913140][T19580] CPU: 3 UID: 0 PID: 19580 Comm: syz.0.3039 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) [ 631.913157][T19580] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 631.913164][T19580] Call Trace: [ 631.913168][T19580] [ 631.913172][T19580] dump_stack_lvl+0x16c/0x1f0 [ 631.913193][T19580] should_fail_ex+0x512/0x640 [ 631.913212][T19580] _copy_to_user+0x32/0xd0 [ 631.913230][T19580] simple_read_from_buffer+0xcb/0x170 [ 631.913246][T19580] proc_fail_nth_read+0x197/0x270 [ 631.913260][T19580] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 631.913273][T19580] ? rw_verify_area+0xcf/0x680 [ 631.913287][T19580] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 631.913300][T19580] vfs_read+0x1e1/0xc60 [ 631.913315][T19580] ? fdget_pos+0x2a2/0x370 [ 631.913332][T19580] ? __pfx_vfs_read+0x10/0x10 [ 631.913346][T19580] ? find_held_lock+0x2b/0x80 [ 631.913360][T19580] ? __fget_files+0x20e/0x3c0 [ 631.913379][T19580] ksys_read+0x12a/0x250 [ 631.913393][T19580] ? __pfx_ksys_read+0x10/0x10 [ 631.913409][T19580] ? rcu_is_watching+0x12/0xc0 [ 631.913422][T19580] __do_fast_syscall_32+0x7c/0x3a0 [ 631.913434][T19580] do_fast_syscall_32+0x32/0x80 [ 631.913444][T19580] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 631.913458][T19580] RIP: 0023:0xf70be579 [ 631.913467][T19580] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 631.913478][T19580] RSP: 002b:00000000f50ae590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 631.913488][T19580] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50ae620 [ 631.913495][T19580] RDX: 000000000000000f RSI: 00000000f7422ff4 RDI: 0000000000000000 [ 631.913501][T19580] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 631.913508][T19580] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 631.913514][T19580] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 631.913549][T19580] [ 631.983367][ C3] vkms_vblank_simulate: vblank timer overrun [ 632.077259][T19590] fuse: Bad value for 'user_id' [ 632.079269][T19590] fuse: Bad value for 'user_id' [ 632.126571][T19595] tmpfs: Unknown parameter 'ƒpol' [ 632.171295][T19598] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3043'. [ 632.429783][T19603] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 632.429872][T19600] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 632.432669][T19603] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 632.671171][ T5808] usb usb40-port1: attempt power cycle [ 633.238291][ T5808] usb usb40-port1: unable to enumerate USB device [ 635.508740][T14982] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 635.577247][T19659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3059'. [ 635.581240][T19659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3059'. [ 635.669772][T14982] usb 6-1: config 0 has no interfaces? [ 635.675034][T14982] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 635.685113][T14982] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.687779][T14982] usb 6-1: Product: syz [ 635.689387][T14982] usb 6-1: Manufacturer: syz [ 635.690902][T14982] usb 6-1: SerialNumber: syz [ 635.699452][T14982] usb 6-1: config 0 descriptor?? [ 636.011797][T12253] usb 6-1: USB disconnect, device number 37 [ 636.079818][T19682] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3067'. [ 636.200046][T19683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3067'. [ 636.560543][T19693] bridge1: entered promiscuous mode [ 636.748957][T19699] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3071'. [ 637.362377][T19719] 9pnet: p9_errstr2errno: server reported unknown error @í΂Í(º«‰ [ 637.362377][T19719] Â[©Çw²´Ž—Ù׌Ùâ [ 637.480245][T14982] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 637.486278][T14982] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 639.464735][T19759] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 639.466744][T19759] syzkaller0: owner set to 1 [ 640.979819][T19798] netlink: 'syz.2.3095': attribute type 2 has an invalid length. [ 641.077976][T19807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3100'. [ 641.093661][T19807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3100'. [ 641.637470][T19797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.641247][T19797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.646223][T19816] trusted_key: encrypted_key: keylen parameter is missing [ 642.056558][T19821] ceph: No mds server is up or the cluster is laggy [ 642.294448][T19835] bridge2: entered promiscuous mode [ 643.163036][T19859] sp0: Synchronizing with TNC [ 643.170053][T19859] netlink: 'syz.1.3112': attribute type 21 has an invalid length. [ 643.194852][T19861] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3111'. [ 643.233742][T19859] tmpfs: Bad value for 'mpol' [ 643.269064][T19861] ceph: No mds server is up or the cluster is laggy [ 643.991167][T19883] netlink: 'syz.2.3117': attribute type 8 has an invalid length. [ 644.140499][T19884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3117'. [ 644.518317][T19899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3122'. [ 644.523001][T19899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3122'. [ 644.773660][ T5963] block nbd0: Receive control failed (result -32) [ 645.091755][T19908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3126'. [ 645.095960][T19909] No such timeout policy "syz0" [ 645.097292][T19910] Bluetooth: MGMT ver 1.23 [ 645.103243][T19909] ubi31: attaching mtd0 [ 645.104176][T19908] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3126'. [ 645.106618][T19909] ubi31: scanning is finished [ 645.165787][T19913] netlink: 'syz.3.3126': attribute type 1 has an invalid length. [ 645.169289][T19913] netlink: 'syz.3.3126': attribute type 4 has an invalid length. [ 645.171721][T19913] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.3126'. [ 645.177034][T19913] netlink: 'syz.3.3126': attribute type 1 has an invalid length. [ 645.179875][T19913] netlink: 'syz.3.3126': attribute type 4 has an invalid length. [ 645.182268][T19913] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.3126'. [ 645.338507][T19909] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 645.341323][T19909] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 645.343749][T19909] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 645.346040][T19909] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 645.348613][T19909] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 645.350896][T19909] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 645.353850][T19909] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2647523684 [ 645.358157][T19909] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 645.362461][T19919] ubi31: background thread "ubi_bgt31d" started, PID 19919 [ 646.279540][T19939] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 646.281862][T19939] overlayfs: failed to set xattr on upper [ 646.283780][T19939] overlayfs: ...falling back to redirect_dir=nofollow. [ 646.291956][T19939] overlayfs: ...falling back to index=off. [ 646.295328][T19939] overlayfs: ...falling back to uuid=null. [ 646.587774][ T40] audit: type=1804 audit(1749969182.720:24921): pid=19953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3133" name="/newroot/152/file0/bus/bus" dev="overlay" ino=68040 res=1 errno=0 [ 646.598555][ T40] audit: type=1804 audit(1749969182.720:24922): pid=19953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3133" name="/newroot/152/file0/bus/bus" dev="overlay" ino=68040 res=1 errno=0 [ 647.177959][ T40] audit: type=1326 audit(1749969183.300:24923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19963 comm="syz.3.3140" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 647.191055][ T40] audit: type=1326 audit(1749969183.300:24924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19963 comm="syz.3.3140" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 647.202956][ T40] audit: type=1326 audit(1749969183.330:24925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19963 comm="syz.3.3140" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 647.217911][ T40] audit: type=1326 audit(1749969183.330:24926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19963 comm="syz.3.3140" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 647.228910][ T40] audit: type=1326 audit(1749969183.330:24927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19963 comm="syz.3.3140" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 647.240420][ T40] audit: type=1326 audit(1749969183.350:24928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19963 comm="syz.3.3140" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 647.250041][ T40] audit: type=1326 audit(1749969183.350:24929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19963 comm="syz.3.3140" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 647.259147][ T40] audit: type=1326 audit(1749969183.350:24930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19963 comm="syz.3.3140" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 647.499165][T19973] FAULT_INJECTION: forcing a failure. [ 647.499165][T19973] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 647.503274][T19973] CPU: 1 UID: 0 PID: 19973 Comm: syz.2.3141 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) [ 647.503300][T19973] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 647.503308][T19973] Call Trace: [ 647.503312][T19973] [ 647.503317][T19973] dump_stack_lvl+0x16c/0x1f0 [ 647.503338][T19973] should_fail_ex+0x512/0x640 [ 647.503357][T19973] _copy_from_user+0x2e/0xd0 [ 647.503375][T19973] __sys_bpf+0x21d/0x4d80 [ 647.503393][T19973] ? rcu_is_watching+0x12/0xc0 [ 647.503405][T19973] ? trace_sched_exit_tp+0x80/0x130 [ 647.503418][T19973] ? __pfx___sys_bpf+0x10/0x10 [ 647.503434][T19973] ? __schedule+0x1181/0x5de0 [ 647.503449][T19973] ? ksys_write+0x190/0x250 [ 647.503477][T19973] ? fput+0x70/0xf0 [ 647.503487][T19973] ? ksys_write+0x1ac/0x250 [ 647.503506][T19973] __ia32_sys_bpf+0x76/0xe0 [ 647.503517][T19973] __do_fast_syscall_32+0x7c/0x3a0 [ 647.503528][T19973] do_fast_syscall_32+0x32/0x80 [ 647.503539][T19973] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 647.503553][T19973] RIP: 0023:0xf7fa6579 [ 647.503561][T19973] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 647.503573][T19973] RSP: 002b:00000000f508455c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 647.503583][T19973] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800054c0 [ 647.503589][T19973] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 647.503596][T19973] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 647.503602][T19973] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 647.503608][T19973] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 647.503621][T19973] [ 647.754569][T19976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3143'. [ 648.130072][T19982] 9pnet: Could not find request transport: ~iatio [ 648.143172][T19982] mkiss: ax0: crc mode is auto. [ 648.524791][T19992] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3147'. [ 648.528080][T19993] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3147'. [ 649.399958][T20018] : entered promiscuous mode [ 649.898918][T20025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3155'. [ 651.171364][T20052] kthread_run failed with err -4 [ 653.843104][T20114] netlink: 'syz.2.3172': attribute type 10 has an invalid length. [ 654.457921][T20122] bio_check_eod: 2 callbacks suppressed [ 654.457933][T20122] syz.1.3177: attempt to access beyond end of device [ 654.457933][T20122] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 654.465166][T20122] vxfs: unable to read disk superblock at 1 [ 654.469383][T20122] syz.1.3177: attempt to access beyond end of device [ 654.469383][T20122] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 654.473721][T20122] vxfs: unable to read disk superblock at 8 [ 654.475828][T20122] vxfs: can't find superblock. [ 654.544518][T20128] tmpfs: Unknown parameter 'smackfshat' [ 654.614656][T20131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3180'. [ 654.632280][T20131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3180'. [ 654.905948][T20142] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 654.908755][T20142] overlayfs: failed to set xattr on upper [ 654.910637][T20142] overlayfs: ...falling back to redirect_dir=nofollow. [ 654.912791][T20142] overlayfs: ...falling back to index=off. [ 654.914757][T20142] overlayfs: ...falling back to uuid=null. [ 654.967707][T14979] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 655.139230][T14979] usb 7-1: config 0 has no interfaces? [ 655.147226][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 655.147237][ T40] audit: type=1804 audit(1749969191.270:24943): pid=20152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3183" name="/newroot/210/file0/bus/bus" dev="overlay" ino=69986 res=1 errno=0 [ 655.156099][ T40] audit: type=1804 audit(1749969191.270:24944): pid=20152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3183" name="/newroot/210/file0/bus/bus" dev="overlay" ino=69986 res=1 errno=0 [ 655.216889][T20150] syzkaller1: entered promiscuous mode [ 655.218824][T20150] syzkaller1: entered allmulticast mode [ 655.222809][T20150] program syz.1.3185 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 655.248882][T14979] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 655.252539][T14979] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.255821][T14979] usb 7-1: Product: syz [ 655.257830][T14979] usb 7-1: Manufacturer: syz [ 655.259764][T14979] usb 7-1: SerialNumber: syz [ 655.277076][T20151] nfs: Unknown parameter 'Ntext' [ 655.327858][ T1098] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 655.328084][T14979] usb 7-1: config 0 descriptor?? [ 655.330293][ T1098] ata1.00: irq_stat 0x40000000 [ 655.333516][ T1098] ata1.00: failed command: ZAC MANAGEMENT OUT [ 655.335552][ T1098] ata1.00: cmd 9f/02:00:00:00:00/00:00:00:00:00/40 tag 4 nodata 0 in [ 655.335552][ T1098] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 655.347647][ T1098] ata1.00: status: { DRDY ERR } [ 655.349239][ T1098] ata1.00: error: { ABRT } [ 655.350718][ T1098] ata1.00: device reported invalid CHS sector 0 [ 655.354596][ C3] ata1: illegal qc_active transition (00000000->00800000) [ 655.689251][ T1098] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 655.701675][ T1098] ata1.00: configured for UDMA/100 [ 655.790124][T12253] usb 7-1: USB disconnect, device number 30 [ 656.332502][T20175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3190'. [ 656.335589][T20175] netlink: 'syz.3.3190': attribute type 5 has an invalid length. [ 656.339272][T20175] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3190'. [ 656.501855][T20175] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 656.504951][T20175] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 656.507848][T20175] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 656.511774][T20175] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 656.518078][T20175] geneve2: entered promiscuous mode [ 656.520014][T20175] geneve2: entered allmulticast mode [ 657.925999][T14979] libceph: connect (1)[c::]:6789 error -101 [ 657.928132][T14979] libceph: mon0 (1)[c::]:6789 connect error [ 658.209862][T14979] libceph: connect (1)[c::]:6789 error -101 [ 658.212329][T14979] libceph: mon0 (1)[c::]:6789 connect error [ 658.719327][T14979] libceph: connect (1)[c::]:6789 error -101 [ 658.721337][T14979] libceph: mon0 (1)[c::]:6789 connect error [ 658.939803][T20180] ceph: No mds server is up or the cluster is laggy [ 659.068637][T14967] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 659.076285][T14967] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 659.127171][T20196] fido_id[20196]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 662.037646][ T40] audit: type=1326 audit(1749969198.160:24945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20210 comm="syz.0.3200" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x0 [ 663.080687][T20221] binder: 20220:20221 ioctl c0046209 0 returned -22 [ 663.286145][T20224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3203'. [ 664.365570][T20235] netlink: 'syz.1.3207': attribute type 21 has an invalid length. [ 664.369523][T20235] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3207'. [ 664.782701][T20228] wireguard0: entered promiscuous mode [ 664.784643][T20228] wireguard0: entered allmulticast mode [ 664.909701][T20250] 9pnet_virtio: no channels available for device syz [ 666.797811][T20279] lo speed is unknown, defaulting to 1000 [ 666.916755][T20289] netlink: 'syz.1.3220': attribute type 21 has an invalid length. [ 666.924313][T20289] netlink: 'syz.1.3220': attribute type 6 has an invalid length. [ 666.928945][T20289] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3220'. [ 667.081266][T20302] dummy0: left allmulticast mode [ 667.083968][T20302] bridge0: port 3(dummy0) entered disabled state [ 667.244056][T20302] batman_adv: batadv0: Adding interface: dummy0 [ 667.246300][T20302] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 667.257640][T20302] batman_adv: batadv0: Interface activated: dummy0 [ 667.268544][T20303] batadv0: mtu less than device minimum [ 667.271603][T20308] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 667.272338][T20303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 667.273960][T20308] overlayfs: failed to set xattr on upper [ 667.279529][T20303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 667.282361][T20308] overlayfs: ...falling back to redirect_dir=nofollow. [ 667.285688][T20303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 667.286968][T20308] overlayfs: ...falling back to index=off. [ 667.292260][T20303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 667.293341][T20308] overlayfs: ...falling back to uuid=null. [ 667.298537][T20303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 667.305127][T20303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 667.310473][T20303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 667.315708][T20303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 667.320184][T20303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 667.336450][T20304] macvlan2: entered promiscuous mode [ 667.340482][T20304] macvlan2: entered allmulticast mode [ 667.589638][T20319] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3228'. [ 667.647868][T20327] x_tables: ip_tables: ah match: only valid for protocol 51 [ 667.657110][T20327] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20002 [ 667.703544][ T40] audit: type=1804 audit(1749969203.830:24946): pid=20330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3225" name="/newroot/222/file0/bus/bus" dev="overlay" ino=68417 res=1 errno=0 [ 667.718019][ T40] audit: type=1804 audit(1749969203.830:24947): pid=20330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3225" name="/newroot/222/file0/bus/bus" dev="overlay" ino=68417 res=1 errno=0 [ 668.025426][T20339] lo speed is unknown, defaulting to 1000 [ 668.623264][T20353] block nbd1: server does not support multiple connections per device. [ 668.629448][T20353] block nbd1: shutting down sockets [ 668.715842][T20360] netlink: 71 bytes leftover after parsing attributes in process `syz.0.3240'. [ 669.136154][T20371] netlink: 'syz.2.3245': attribute type 1 has an invalid length. [ 669.138717][T20371] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3245'. [ 669.353127][T20388] netlink: 'syz.2.3248': attribute type 10 has an invalid length. [ 669.366256][T20388] team0: Device hsr_slave_0 failed to register rx_handler [ 669.403407][T20380] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3246'. [ 669.507689][ T40] audit: type=1326 audit(1749969205.630:24948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20391 comm="syz.2.3250" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x0 [ 669.808848][T20393] ubi: mtd0 is already attached to ubi31 [ 670.094061][T20399] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3251'. [ 670.152592][T20399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3251'. [ 670.203587][T20400] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3251'. [ 671.722524][T20447] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 671.724754][T20447] overlayfs: failed to set xattr on upper [ 671.726558][T20447] overlayfs: ...falling back to redirect_dir=nofollow. [ 671.730160][T20447] overlayfs: ...falling back to index=off. [ 671.732032][T20447] overlayfs: ...falling back to uuid=null. [ 671.811007][T20451] netlink: 'syz.3.3264': attribute type 1 has an invalid length. [ 671.941616][T20457] FAULT_INJECTION: forcing a failure. [ 671.941616][T20457] name failslab, interval 1, probability 0, space 0, times 0 [ 671.945687][T20457] CPU: 2 UID: 0 PID: 20457 Comm: syz.3.3266 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) [ 671.945702][T20457] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 671.945710][T20457] Call Trace: [ 671.945714][T20457] [ 671.945719][T20457] dump_stack_lvl+0x16c/0x1f0 [ 671.945741][T20457] should_fail_ex+0x512/0x640 [ 671.945757][T20457] ? fs_reclaim_acquire+0xae/0x150 [ 671.945773][T20457] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 671.945788][T20457] should_failslab+0xc2/0x120 [ 671.945799][T20457] __kmalloc_noprof+0xd2/0x510 [ 671.945819][T20457] tomoyo_realpath_from_path+0xc2/0x6e0 [ 671.945836][T20457] ? tomoyo_profile+0x47/0x60 [ 671.945854][T20457] tomoyo_path_number_perm+0x245/0x580 [ 671.945867][T20457] ? tomoyo_path_number_perm+0x237/0x580 [ 671.945881][T20457] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 671.945909][T20457] ? find_held_lock+0x2b/0x80 [ 671.945920][T20457] ? hook_file_ioctl_common+0x145/0x410 [ 671.945936][T20457] ? __fget_files+0x20e/0x3c0 [ 671.945950][T20457] ? fput+0x60/0xf0 [ 671.945962][T20457] security_file_ioctl_compat+0x9b/0x240 [ 671.945978][T20457] __ia32_compat_sys_ioctl+0xc3/0x370 [ 671.945994][T20457] __do_fast_syscall_32+0x7c/0x3a0 [ 671.946006][T20457] do_fast_syscall_32+0x32/0x80 [ 671.946022][T20457] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 671.946040][T20457] RIP: 0023:0xf7f31579 [ 671.946049][T20457] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 671.946060][T20457] RSP: 002b:00000000f505655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 671.946071][T20457] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000004008af60 [ 671.946078][T20457] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 671.946085][T20457] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 671.946091][T20457] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 671.946097][T20457] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 671.946110][T20457] [ 671.946115][T20457] ERROR: Out of memory at tomoyo_realpath_from_path. [ 672.023826][ T40] audit: type=1804 audit(1749969208.150:24949): pid=20460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3262" name="/newroot/188/file0/bus/bus" dev="overlay" ino=70665 res=1 errno=0 [ 672.047705][ T40] audit: type=1804 audit(1749969208.160:24950): pid=20460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3262" name="/newroot/188/file0/bus/bus" dev="overlay" ino=70665 res=1 errno=0 [ 672.255454][T20461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3267'. [ 672.929701][T20474] tmpfs: Unknown parameter 'usrquota' [ 673.037981][T20478] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3273'. [ 673.040824][T20478] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3273'. [ 673.045265][T20478] netlink: 504 bytes leftover after parsing attributes in process `syz.3.3273'. [ 673.655612][T20506] binder: 20504:20506 ioctl c0306201 80000080 returned -14 [ 673.660772][T20505] binder: 20504:20505 ioctl c0306201 800003c0 returned -14 [ 674.266358][T20519] ALSA: mixer_oss: invalid index 40000 [ 675.219662][T20539] lo speed is unknown, defaulting to 1000 [ 676.040754][T20569] devtmpfs: Too few inodes for current use [ 676.048282][T20569] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3296'. [ 676.318173][T20577] Cannot find del_set index 3 as target [ 676.673486][T20580] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 676.676353][T20580] overlayfs: failed to set xattr on upper [ 676.678817][T20580] overlayfs: ...falling back to redirect_dir=nofollow. [ 676.681609][T20580] overlayfs: ...falling back to index=off. [ 676.684004][T20580] overlayfs: ...falling back to uuid=null. [ 676.737679][ T40] audit: type=1326 audit(1749969212.860:24951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20581 comm="syz.3.3300" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f31579 code=0x0 [ 676.904404][ T40] audit: type=1804 audit(1749969213.030:24952): pid=20585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3299" name="/newroot/237/file0/bus/bus" dev="overlay" ino=70592 res=1 errno=0 [ 676.918815][ T40] audit: type=1804 audit(1749969213.040:24953): pid=20585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3299" name="/newroot/237/file0/bus/bus" dev="overlay" ino=70592 res=1 errno=0 [ 677.093950][T20588] xt_ecn: cannot match TCP bits for non-tcp packets [ 677.279598][T20596] random: crng reseeded on system resumption [ 678.853224][ T40] audit: type=1326 audit(1749969214.980:24954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20624 comm="syz.2.3311" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 678.865263][ T40] audit: type=1326 audit(1749969214.980:24955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20624 comm="syz.2.3311" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 678.887904][ T40] audit: type=1326 audit(1749969215.010:24956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20624 comm="syz.2.3311" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 678.894829][ T40] audit: type=1326 audit(1749969215.010:24957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20624 comm="syz.2.3311" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 678.927812][T20621] binder: 20618:20621 ioctl 4018620d 0 returned -22 [ 678.928218][ T40] audit: type=1326 audit(1749969215.060:24958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20624 comm="syz.2.3311" exe="/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 678.938643][ T40] audit: type=1326 audit(1749969215.060:24959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20624 comm="syz.2.3311" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 678.946629][ T40] audit: type=1326 audit(1749969215.060:24960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20624 comm="syz.2.3311" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 679.564538][T19714] Bluetooth: hci3: Frame reassembly failed (-84) [ 679.642652][T20645] fuse: Bad value for 'group_id' [ 679.644756][T20645] fuse: Bad value for 'group_id' [ 679.675975][T20648] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 679.681188][T20648] overlayfs: failed to set xattr on upper [ 679.684305][T20648] overlayfs: ...falling back to redirect_dir=nofollow. [ 679.687200][T20648] overlayfs: ...falling back to index=off. [ 679.692346][T20648] overlayfs: ...falling back to uuid=null. [ 680.201819][T20658] netlink: 'syz.0.3317': attribute type 10 has an invalid length. [ 680.229360][T20658] 8021q: adding VLAN 0 to HW filter on device team0 [ 680.233671][T20658] bond0: (slave team0): Enslaving as an active interface with an up link [ 680.351548][T20661] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3317'. [ 680.675416][T20672] net_ratelimit: 11 callbacks suppressed [ 680.675431][T20672] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 681.406439][T20681] openvswitch: netlink: EtherType 0 is less than min 600 [ 681.617960][ T5963] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 682.811733][T20722] netlink: 'syz.3.3331': attribute type 9 has an invalid length. [ 682.814225][T20722] netlink: 212384 bytes leftover after parsing attributes in process `syz.3.3331'. [ 682.817209][T20722] openvswitch: netlink: Message has 5 unknown bytes. [ 682.969549][T20729] fuse: Bad value for 'rootmode' [ 682.972876][T20729] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 684.084517][T20750] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3339'. [ 684.155510][T20753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3338'. [ 684.159451][T20753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3338'. [ 684.299430][T20760] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3341'. [ 684.577116][T20772] netlink: 'syz.3.3342': attribute type 10 has an invalid length. [ 684.787729][ T5808] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 684.937792][ T5808] usb 6-1: device descriptor read/64, error -71 [ 685.498635][ T5808] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 685.647890][ T5808] usb 6-1: device descriptor read/64, error -71 [ 685.768491][ T5808] usb usb6-port1: attempt power cycle [ 686.228004][ T5808] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 686.248145][ T5808] usb 6-1: device descriptor read/8, error -71 [ 686.487910][ T5808] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 686.508156][ T5808] usb 6-1: device descriptor read/8, error -71 [ 686.619357][ T5808] usb usb6-port1: unable to enumerate USB device [ 687.033512][T20820] could not allocate digest TFM handle sha512-neon [ 688.412620][T11598] Bluetooth: hci3: Frame reassembly failed (-84) [ 688.905383][T20866] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3367'. [ 688.958856][T20871] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 688.961833][T20871] overlayfs: failed to set xattr on upper [ 688.964254][T20871] overlayfs: ...falling back to redirect_dir=nofollow. [ 688.967115][T20871] overlayfs: ...falling back to index=off. [ 688.970747][T20871] overlayfs: ...falling back to uuid=null. [ 689.814987][T20881] lo speed is unknown, defaulting to 1000 [ 690.409172][ T5310] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 690.412521][T20893] netlink: 'syz.1.3373': attribute type 83 has an invalid length. [ 690.431048][T20893] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 690.445816][T20893] netlink: 'syz.1.3373': attribute type 10 has an invalid length. [ 690.465767][T20893] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 690.471419][T20893] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 690.478189][T20893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 690.484928][T20893] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 690.518004][ T5808] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 690.607516][T20893] batman_adv: batadv0: Interface deactivated: dummy0 [ 690.611656][T20893] batman_adv: batadv0: Removing interface: dummy0 [ 690.617069][T20893] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 690.620664][T20893] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 690.623627][T20893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 690.626144][T20893] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 690.643657][T20893] bond0: (slave batadv0): Releasing backup interface [ 690.662890][T20898] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 690.701377][T20898] syz.0.3375: attempt to access beyond end of device [ 690.701377][T20898] sr0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 690.706022][T20898] isofs_fill_super: bread failed, dev=sr0, iso_blknum=16, block=16 [ 692.385438][ T6034] libceph: connect (1)[c::]:6789 error -101 [ 692.391077][ T6034] libceph: mon0 (1)[c::]:6789 connect error [ 692.431520][T20935] ceph: No mds server is up or the cluster is laggy [ 693.463815][T20964] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3390'. [ 693.678973][T20976] evm: overlay not supported [ 693.738396][T20980] netlink: 'syz.2.3392': attribute type 2 has an invalid length. [ 693.810824][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 693.810841][ T40] audit: type=1326 audit(1749969229.940:24985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20983 comm="syz.2.3393" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x0 [ 694.201419][T20995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3394'. [ 694.205486][T20997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3394'. [ 694.252170][T20999] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 694.254495][T20999] overlayfs: failed to set xattr on upper [ 694.256342][T20999] overlayfs: ...falling back to redirect_dir=nofollow. [ 694.258559][T20999] overlayfs: ...falling back to index=off. [ 694.260567][T20999] overlayfs: ...falling back to uuid=null. [ 694.713443][T21009] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 694.717615][T21009] bond0: (slave lo): Error: Device type is different from other slaves [ 694.939072][T21012] binder: 21011:21012 ioctl c018620c 80000380 returned -22 [ 695.726515][T21036] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3405'. [ 695.965595][T21038] pimreg: entered allmulticast mode [ 696.014635][T21040] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3407'. [ 696.023972][ T40] audit: type=1326 audit(1749969232.150:24986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21039 comm="syz.2.3407" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 696.033501][ T40] audit: type=1326 audit(1749969232.160:24987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21039 comm="syz.2.3407" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 696.042594][ T40] audit: type=1326 audit(1749969232.160:24988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21039 comm="syz.2.3407" exe="/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 696.053567][ T40] audit: type=1326 audit(1749969232.160:24989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21039 comm="syz.2.3407" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 696.062802][ T40] audit: type=1326 audit(1749969232.160:24990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21039 comm="syz.2.3407" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 696.072002][ T40] audit: type=1326 audit(1749969232.170:24991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21039 comm="syz.2.3407" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 696.087890][ T40] audit: type=1326 audit(1749969232.170:24992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21039 comm="syz.2.3407" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 696.106220][ T40] audit: type=1326 audit(1749969232.170:24993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21039 comm="syz.2.3407" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 696.115527][ T40] audit: type=1326 audit(1749969232.170:24994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21039 comm="syz.2.3407" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 697.145692][T21060] lo speed is unknown, defaulting to 1000 [ 697.192597][T21060] lo: entered promiscuous mode [ 697.197388][T21060] tunl0: entered promiscuous mode [ 697.200116][T21060] gre0: entered promiscuous mode [ 697.202574][T21060] gretap0: entered promiscuous mode [ 697.204255][T21060] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 697.737713][ T5808] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 697.927940][ T5808] usb 7-1: Using ep0 maxpacket: 8 [ 698.180428][ T5808] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 698.185147][ T5808] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 698.197639][ T5808] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.203098][ T5808] usb 7-1: config 0 descriptor?? [ 698.411604][ T5808] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 698.670428][ C2] iowarrior 7-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 698.670778][ T6033] usb 7-1: USB disconnect, device number 31 [ 698.682573][T21067] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3414'. [ 698.718262][T21082] binder: Binderfs stats mode cannot be changed during a remount [ 699.247771][ T40] kauditd_printk_skb: 33 callbacks suppressed [ 699.247790][ T40] audit: type=1326 audit(1749969235.370:25028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21093 comm="syz.3.3423" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f31579 code=0x0 [ 716.608810][ T6084] IPVS: starting estimator thread 0... [ 716.698296][T21162] IPVS: using max 24 ests per chain, 57600 per kthread [ 716.862078][T21168] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 716.864403][T21168] overlayfs: failed to set xattr on upper [ 716.866436][T21168] overlayfs: ...falling back to redirect_dir=nofollow. [ 716.868936][T21168] overlayfs: ...falling back to index=off. [ 716.870894][T21168] overlayfs: ...falling back to uuid=null. [ 716.882688][T21169] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3433'. [ 717.115863][ T40] audit: type=1804 audit(1749969253.240:25029): pid=21173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3434" name="/newroot/225/file0/bus" dev="ramfs" ino=71668 res=1 errno=0 [ 717.147684][ T40] audit: type=1804 audit(1749969253.250:25030): pid=21173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3434" name="/newroot/225/file0/bus" dev="ramfs" ino=71668 res=1 errno=0 [ 717.233066][ T40] audit: type=1804 audit(1749969253.360:25031): pid=21179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3436" name="/newroot/273/file0/bus/bus" dev="overlay" ino=74362 res=1 errno=0 [ 717.240198][ T40] audit: type=1804 audit(1749969253.360:25032): pid=21179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3436" name="/newroot/273/file0/bus/bus" dev="overlay" ino=74362 res=1 errno=0 [ 717.716927][T21183] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3437'. [ 717.820147][ T40] audit: type=1326 audit(1749969253.950:25033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21184 comm="syz.3.3439" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f31579 code=0x0 [ 717.927313][ T40] audit: type=1326 audit(1749969254.050:25034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21181 comm="syz.1.3437" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x0 [ 718.930914][ T40] audit: type=1107 audit(1749969255.060:25035): pid=21227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ý' [ 719.014098][T21236] x_tables: duplicate underflow at hook 1 [ 719.156002][T21238] lo speed is unknown, defaulting to 1000 [ 719.788273][T21248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3452'. [ 719.792365][T21248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3452'. [ 719.806071][ T40] audit: type=1326 audit(1749969255.930:25036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21249 comm="syz.3.3453" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f31579 code=0x0 [ 720.720323][ T40] audit: type=1326 audit(1749969256.850:25037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21259 comm="syz.3.3455" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 720.764883][ T40] audit: type=1326 audit(1749969256.850:25038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21259 comm="syz.3.3455" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 720.996493][T21266] Oops: general protection fault, probably for non-canonical address 0xdffffc00000a2403: 0000 [#1] SMP KASAN NOPTI [ 721.001443][T21266] KASAN: probably user-memory-access in range [0x0000000000512018-0x000000000051201f] [ 721.007270][T21266] CPU: 2 UID: 0 PID: 21266 Comm: syz.0.3458 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) [ 721.012169][T21266] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 721.016696][T21266] RIP: 0010:__smc_diag_dump.constprop.0+0x3cd/0x24f0 [ 721.019494][T21266] Code: 4c 8b b3 60 05 00 00 4d 85 f6 0f 84 f6 02 00 00 e8 b8 67 90 f6 49 8d 7e 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 c7 1e 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b [ 721.027424][T21266] RSP: 0018:ffffc90003ed71d8 EFLAGS: 00010206 [ 721.029965][T21266] RAX: dffffc0000000000 RBX: ffff888057bc3000 RCX: ffffffff89659954 [ 721.033252][T21266] RDX: 00000000000a2403 RSI: ffffffff8b2b20b8 RDI: 0000000000512018 [ 721.036545][T21266] RBP: ffff888052878000 R08: 0000000000000005 R09: 0000000000000000 [ 721.039845][T21266] R10: 0000000080000001 R11: 000000000000001e R12: ffff88804b0e35e8 [ 721.043159][T21266] R13: ffff88806bd46dc0 R14: 0000000000512000 R15: ffff888057bc3560 [ 721.046469][T21266] FS: 0000000000000000(0000) GS:ffff888097761000(0063) knlGS:00000000f50aeb40 [ 721.050157][T21266] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 721.052904][T21266] CR2: 000000008000e000 CR3: 0000000052fc2000 CR4: 0000000000352ef0 [ 721.056235][T21266] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 721.059523][T21266] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 721.062807][T21266] Call Trace: [ 721.064254][T21266] [ 721.065525][T21266] ? __pfx___smc_diag_dump.constprop.0+0x10/0x10 [ 721.068133][T21266] ? stack_trace_save+0x8e/0xc0 [ 721.070152][T21266] ? __pfx_stack_trace_save+0x10/0x10 [ 721.072272][T21266] ? check_path.constprop.0+0x24/0x50 [ 721.074528][T21266] ? save_trace+0x4e/0x380 [ 721.076418][T21266] ? add_lock_to_list+0x9d/0x130 [ 721.078513][T21266] ? lockdep_unlock+0x64/0xe0 [ 721.080480][T21266] ? __lock_acquire+0x1053/0x1c90 [ 721.082621][T21266] ? lock_acquire+0x179/0x350 [ 721.084638][T21266] ? smc_diag_dump_proto+0x2ce/0x420 [ 721.086799][T21266] smc_diag_dump_proto+0x26d/0x420 [ 721.088956][T21266] smc_diag_dump+0x84/0x90 [ 721.090840][T21266] netlink_dump+0x51b/0xce0 [ 721.092694][T21266] ? __pfx_netlink_dump+0x10/0x10 [ 721.094838][T21266] __netlink_dump_start+0x6d6/0x990 [ 721.097023][T21266] smc_diag_handler_dump+0x1f9/0x240 [ 721.099232][T21266] ? __pfx_smc_diag_handler_dump+0x10/0x10 [ 721.101673][T21266] ? __pfx_smc_diag_dump+0x10/0x10 [ 721.103841][T21266] ? sock_diag_lock_handler+0x10f/0x2e0 [ 721.106168][T21266] sock_diag_rcv_msg+0x438/0x790 [ 721.108251][T21266] netlink_rcv_skb+0x155/0x420 [ 721.110268][T21266] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 721.112491][T21266] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 721.114711][T21266] ? netlink_deliver_tap+0x1ae/0xd30 [ 721.116928][T21266] netlink_unicast+0x53d/0x7f0 [ 721.118935][T21266] ? __pfx_netlink_unicast+0x10/0x10 [ 721.121147][T21266] ? __build_skb_around+0x278/0x3b0 [ 721.123346][T21266] ? is_vmalloc_addr+0x86/0xa0 [ 721.125390][T21266] netlink_sendmsg+0x8d1/0xdd0 [ 721.127407][T21266] ? __pfx_netlink_sendmsg+0x10/0x10 [ 721.129630][T21266] ? __import_iovec+0x1dd/0x650 [ 721.131675][T21266] ____sys_sendmsg+0xa98/0xc70 [ 721.133704][T21266] ? __pfx_____sys_sendmsg+0x10/0x10 [ 721.135910][T21266] ? get_compat_msghdr+0x11a/0x170 [ 721.138060][T21266] ? __pfx_futex_wake_mark+0x10/0x10 [ 721.140294][T21266] ___sys_sendmsg+0x134/0x1d0 [ 721.142311][T21266] ? __pfx____sys_sendmsg+0x10/0x10 [ 721.144537][T21266] ? find_held_lock+0x2b/0x80 [ 721.146552][T21266] __sys_sendmsg+0x16d/0x220 [ 721.148495][T21266] ? __pfx___sys_sendmsg+0x10/0x10 [ 721.150630][T21266] ? __ia32_sys_futex_time32+0x1d9/0x460 [ 721.152986][T21266] ? rcu_is_watching+0x12/0xc0 [ 721.155000][T21266] __do_fast_syscall_32+0x7c/0x3a0 [ 721.157150][T21266] do_fast_syscall_32+0x32/0x80 [ 721.159193][T21266] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 721.161834][T21266] RIP: 0023:0xf70be579 [ 721.163565][T21266] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 721.171495][T21266] RSP: 002b:00000000f50ae55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 721.174960][T21266] RAX: ffffffffffffffda RBX: 0000000000000048 RCX: 0000000080000540 [ 721.178225][T21266] RDX: 0000000000000600 RSI: 0000000000000000 RDI: 0000000000000000 [ 721.181502][T21266] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 721.184820][T21266] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 721.187970][T21266] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 721.191247][T21266] [ 721.192560][T21266] Modules linked in: [ 721.195276][T21266] ---[ end trace 0000000000000000 ]--- [ 721.198263][T21266] RIP: 0010:__smc_diag_dump.constprop.0+0x3cd/0x24f0 [ 721.201056][T21266] Code: 4c 8b b3 60 05 00 00 4d 85 f6 0f 84 f6 02 00 00 e8 b8 67 90 f6 49 8d 7e 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 c7 1e 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b [ 721.209608][T21266] RSP: 0018:ffffc90003ed71d8 EFLAGS: 00010206 [ 721.212136][T21266] RAX: dffffc0000000000 RBX: ffff888057bc3000 RCX: ffffffff89659954 [ 721.215402][T21266] RDX: 00000000000a2403 RSI: ffffffff8b2b20b8 RDI: 0000000000512018 [ 721.219349][T21266] RBP: ffff888052878000 R08: 0000000000000005 R09: 0000000000000000 [ 721.222635][T21266] R10: 0000000080000001 R11: 000000000000001e R12: ffff88804b0e35e8 [ 721.225912][T21266] R13: ffff88806bd46dc0 R14: 0000000000512000 R15: ffff888057bc3560 [ 721.229445][T21266] FS: 0000000000000000(0000) GS:ffff888097761000(0063) knlGS:00000000f50aeb40 [ 721.233123][T21266] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 721.235872][T21266] CR2: 000000008000e000 CR3: 0000000052fc2000 CR4: 0000000000352ef0 [ 721.239475][T21266] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 721.242771][T21266] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 721.246062][T21266] Kernel panic - not syncing: Fatal exception [ 721.249361][T21266] Kernel Offset: disabled [ 721.251179][T21266] Rebooting in 86400 seconds.. VM DIAGNOSIS: 06:30:01 Registers: info registers vcpu 0 CPU#0 RAX=0000000000a7114c RBX=0000000000000000 RCX=ffffffff8b7c4be9 RDX=ffffed1005646646 RSI=ffffffff8c1562a0 RDI=ffffffff81918591 RBP=fffffbfff1c52ef0 RSP=ffffffff8e207e08 R8 =0000000000000000 R9 =ffffed1005646645 R10=ffff88802b23322b R11=ffffffff9afa98e8 R12=0000000000000000 R13=ffffffff8e297780 R14=ffffffff90a82f50 R15=0000000000000000 RIP=ffffffff8b7c374f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097561000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c39a0eb CR3=00000000247db000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffffffff8e5c46c0 RCX=ffffc900044b2000 RDX=0000000000080000 RSI=ffffffff820456cf RDI=ffffffff8e5c46c0 RBP=ffffea0001c53cc0 RSP=ffffc900067cf9e8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000010529 R12=ffffffff820456cf R13=00000000714f3027 R14=1ffff92000cf9f4f R15=0000000000000002 RIP=ffffffff81a0e5a0 RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097661000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c2bdee3 CR3=00000000247db000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85582355 RDI=ffffffff9b06da80 RBP=ffffffff9b06da40 RSP=ffffc90003ed6bd0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=70203a4e4153414b R12=0000000000000000 R13=0000000000000030 R14=ffffffff9b06da40 R15=ffffffff855822f0 RIP=ffffffff8558237f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097761000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000008000e000 CR3=0000000052fc2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=ffff88802b443920 RCX=ffffffff81af75ad RDX=ffff888023c1a440 RSI=ffffffff81af7589 RDI=0000000000000000 RBP=0000000000000001 RSP=ffffc9000d387678 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=000000000000001e R12=dffffc0000000000 R13=0000000000000003 R14=ffffed1005688725 R15=ffff88802b53d080 RIP=ffffffff81af75a6 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097861000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f955c0 CR3=000000006841b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000