last executing test programs: 27m23.82953034s ago: executing program 0 (id=3992): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0xb00, 0x12) 27m23.726713342s ago: executing program 0 (id=3996): r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket(0xa, 0x3, 0x3a) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000100008001000000007000000060000000000000100000000c5d9dea9c5700044010000432eeb06a05351d5a9e92476d51e9f85eeac941937dbd7c9ea0d3742bf9a96a26efd4893889f22b6a8fbd01fb85a4a7d40662de51e0815d1aa84ae3d42f1df92a8231835ded861ca111f2537cb7058b72da5649608848ea84c59d3abdd74eaee8344fc2dcad8c01b83ef"], 0x0, 0x2f, 0x0, 0x1, 0x80}, 0x28) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101242, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x3, 0xff) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000280)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYRESDEC, @ANYBLOB="59b7dac1cee9741e5253e1ce22ea0aeb1783c96c882e293a233d93e50eda996ced9a29792b2aff78eed5343d4d9f66d00f9f7cf8e99c8f7d76e0493d5862b473336ca0dd1d606d909eaa4044704bb57ad1161b215b60ba8e6f07f301ee760d509b9e5dfc4ed51d9b8228b021bf3e9ca84bab4ed902e3f996239ab8cc1319b548623c3f60791959331378d906c04741677b2a2da409626c84e5025b9ae537bbfb525fd7b83f0a8c9f4075fb1d9f27a950813177bc98d7161f6e8c6a51cc4c45f2fc5ab82f1613277f4bc1dc3be665936971e7d2fd085aab2c7721e402c27137b52f875facfb9c4b8b"], &(0x7f0000000000)='GPL\x00', 0x2, 0xbb, &(0x7f00000005c0)=""/187, 0x41000, 0x2d, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8ec, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7fffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) ioctl$EXT4_IOC_MIGRATE(r8, 0xff05) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000240)={0x2000, 0x1000000}) 27m21.908710932s ago: executing program 0 (id=4001): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x22, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x60, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}}, 0x8000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x4004092b, 0x200000000005) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)={0x404, r5, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2400000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb93c}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfd96}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x5, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2fe}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4df2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_BEARER={0xdc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3c}}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x68e6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e23, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x400}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x400}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa06d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x846a}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x36}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff8000}]}, @TIPC_NLA_LINK={0x114, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe0000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x97db}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x404}, 0x1, 0x0, 0x0, 0x10}, 0x2004e010) 27m21.788521799s ago: executing program 0 (id=4004): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da", 0x33}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40804) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/62, 0x3e}], 0x2}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000002c0)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfee4}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 27m21.708788s ago: executing program 0 (id=4007): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x40}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='binder\x00', 0x3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a90000000060a030400000000000000000a0000050900010073797a3100000000500004804c0001800b00010074617267657400003c000280240003007339f2f304fdd672bad09dfb0400003667feee96325d0c0dabf95ddc91967c2008000240000000000c00010052415445455354000900020073797a3200000000140000001100010000000000000000000100000ae184a193b70fca8e1ecb987780e60593e20c26d33867972e4e669d1a9a24e56bf767763fcd1b555d0f79b9b10a4ba72d74004b640a2914970ae9343640b6eeedcaa4a0dda71cee8fddb3"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 27m21.138328732s ago: executing program 0 (id=4013): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002e000701fcffffff1400000001"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x2400c080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001840)="b9ff0307683a268cb8091a990053", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 2) 27m21.07514735s ago: executing program 32 (id=4013): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002e000701fcffffff1400000001"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x2400c080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001840)="b9ff0307683a268cb8091a990053", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 2) 8m56.693652446s ago: executing program 3 (id=6803): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x2f5}], 0x2}, 0x0) 8m56.693289877s ago: executing program 3 (id=6804): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setreuid(0x0, 0xee00) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r1, 0x4068aea3, &(0x7f0000000380)) 8m56.684662922s ago: executing program 3 (id=6805): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x404400, 0x112) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2200, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x26}}, 0x4}, 0x1c) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r3, 0x8949, &(0x7f0000000000)) 8m56.680830385s ago: executing program 3 (id=6810): syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "8fe1a6", 0x10, 0x0, 0x0, @private2, @local, {[@routing={0x3c}], "223427d5c9a46b9f"}}}}}, 0x0) 8m56.62224413s ago: executing program 3 (id=6811): mkdir(&(0x7f0000005800)='./file0\x00', 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000180)}], 0x1, 0x80000001, 0x9, 0x4) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r2 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r1}, 0x8) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r3 = socket(0xb, 0x0, 0x8) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4, 0x308}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r3) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="dd4b22c7f486649fdf9d7ff1b1f620020028bd7000fedbdfda2738d28d39d91b03d88ece58bccb90e554d31aae000b0000", @ANYRES32=r3, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x40000000}, 0x400) 8m56.606979438s ago: executing program 3 (id=6812): r0 = socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) socket$inet6(0xa, 0x80002, 0x88) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES32=r0], 0x17) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x38, 0x2, 0x6, 0x5, 0x0, 0x0, {0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000906010200000000000000000500000205000100070000002c0007800c00148008000140e00000020c0001800800014064010100060004404e20000005000700840000000900020073797a31"], 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x4800) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x80) syz_init_net_socket$ax25(0x3, 0x3, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r8, 0x0, 0x28, &(0x7f0000000080)="0b9ca2bc7ed21832933c3c13da47bc501c522b23e5bf054f6b53401677f67a9bd671906d97d795281384d26eded291a4429721e6db1d923ee5", 0x39) openat(0xffffffffffffffff, 0x0, 0x48241, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xe}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) 8m40.019313745s ago: executing program 33 (id=6812): r0 = socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) socket$inet6(0xa, 0x80002, 0x88) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES32=r0], 0x17) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x38, 0x2, 0x6, 0x5, 0x0, 0x0, {0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000906010200000000000000000500000205000100070000002c0007800c00148008000140e00000020c0001800800014064010100060004404e20000005000700840000000900020073797a31"], 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x4800) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x80) syz_init_net_socket$ax25(0x3, 0x3, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r8, 0x0, 0x28, &(0x7f0000000080)="0b9ca2bc7ed21832933c3c13da47bc501c522b23e5bf054f6b53401677f67a9bd671906d97d795281384d26eded291a4429721e6db1d923ee5", 0x39) openat(0xffffffffffffffff, 0x0, 0x48241, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xe}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) 4m23.927954266s ago: executing program 1 (id=7551): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newtaction={0x100, 0x30, 0x1, 0x0, 0x0, {}, [{0xec, 0x1, [@m_ct={0x94, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x2, 0xf}}]}, {0x51, 0x6, "3c4efb5df7f2794062b87e2e609c6a623f91c0fa1b3b8e1cf3d3849e419a8fc4f040c93920ef777f0d1ea7ca66b2394f7033fb6816b9ca44dcc3f03e98534cff90541b08f2f56357ff622bd4ec"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) (async) r0 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) (async) r4 = accept4(r3, 0x0, 0x0, 0x800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0x51}], 0x1}, 0x0) (async) r5 = socket$igmp(0x2, 0x3, 0x2) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f00000003c0)={'broute\x00', 0x0, 0x0, 0x0, [0x61, 0x10000, 0x9c9, 0xf, 0x4, 0x3]}, &(0x7f00000001c0)=0x50) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0x20}}, 0xc010) (async) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000340)) (async) mount$9p_virtio(&(0x7f0000000340), &(0x7f00000001c0)='.\x00', &(0x7f0000000040), 0x4004, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=virtio,posixac']) read$FUSE(0xffffffffffffffff, &(0x7f0000000840)={0x2020}, 0x2020) (async) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x54, 0x0, 0x1, {0x8, 0x1}, {0x53, 0xfffe}, @period={0x5d, 0x8e, 0x5, 0x9, 0x101, {0x2, 0x9201, 0x5}, 0x0, 0x0}}) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700e0090500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) (async) io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x87c}, 0x0) (async) openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x14a300, 0x0) 4m22.240866615s ago: executing program 1 (id=7552): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000101000008900000000000000", @ANYRES64, @ANYRESOCT, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000001f00000000000000000000000000a02c3197a298c2f474a000a1ca0ed3f7f772393c4e6677810daf2c4655190aed3aae97fcf0243fd9751db0baa23779be3bcb603662c036491791d83628caa9e7b6d34cdfb7597a7509b832ff5e8e077f11d26b25b44ae572"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f00000006c0)="9d9e8dd97f6a20796978cee158e93e0e66369dd81b00337bd061dd73d88d7ca50091bcb5f92c282efd77ccfec779009ee8e6441daacea4210585784ce8fb70b3e46fa21fc058bc6277cc379d9e395f85854054fd59d2c80cd6a8f7f50ba203d51c2f05db625f2f6891c48e3e517fc6a3de981217a13960205ad455e2abf8063a43b80fe819f15a1b6d13ffeae5c2c51c", &(0x7f00000005c0)="2761d70f65db87e29e55b3b41773a0cb5ca28a6b52b64f8a93443fddf1750866ffd801b4068aa5f4eaf768b507cb5d734d0ccb438e778ac534136fe8d6466af71f4a0fd62682a07ec9ac7e10180ac3625ef106507c3556674a5b63bd08b563675024143ab7304906fa5b3007a01f64c637553fe362b016310ccb33c2b54192a3ae82b9b3a726c9948b63ce6490f45d8b41b04afbcadd0f8aa14e413b551f4899dd222cf5f57cbeb9227dc42eda72a34e4d5d6ae24561d36405b6f148d45884792bd3c67e64f70c9f0dbe2adbe37878ace18022fbfac3f7ed2fd8", 0x80, r0, 0x4, 0x7}, 0x38) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/custom1\x00', 0x800, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000200)=0x2000) sendmsg$nl_route(r2, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYRES64=r2, @ANYRES32=r3, @ANYBLOB="08000600f8ffffff08000100", @ANYRES32=0x0, @ANYBLOB="6250b3fce72704b34c5741038300fd1c"], 0x2c}, 0x1, 0x0, 0x0, 0x4c045}, 0x40001) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000000)=0x4000) bind$alg(r2, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000002c0)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0}) r5 = dup3(r1, r4, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x9) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x0, 0x5}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000980)=[@acquire={0x40046305, 0x2}], 0xfffffffffffffff8, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x10000000000) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r8 = accept4$alg(r7, 0x0, 0x0, 0x80000) io_setup(0x42, &(0x7f0000000100)=0x0) sendmmsg$alg(r8, &(0x7f0000004400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}], 0x1, 0x10) io_submit(r9, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r8, &(0x7f0000000000)='e', 0x12, 0x0, 0x0, 0x2}]) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x2, 0x0, &(0x7f00000049c0), 0x0, 0x0, 0x0}) 4m20.740782205s ago: executing program 1 (id=7553): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000200)={@remote, @private, @empty}, &(0x7f00000002c0)=0xc) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3d, 0x301, 0x70bd25, 0xfffffffc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b5b09094bf70e0dd038e7ff7fc6e5539b324c078b089b3438076d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b32310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509301815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153bdf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db87195358bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f00000003c0)=[@in6={0xa, 0x4e20, 0x9d, @private2, 0x1}, @in6={0xa, 0x4e23, 0x2, @loopback, 0x1a8}, @in6={0xa, 0x4e23, 0x1, @private0, 0x7fff}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e21, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}], 0x90) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mlock(&(0x7f0000ff9000/0x1000)=nil, 0x1000) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) recvmmsg(r6, &(0x7f0000006f00)=[{{0x0, 0x0, 0x0}, 0x81}, {{0x0, 0x0, 0x0}, 0x1}], 0x2, 0x60000100, 0x0) 4m19.227440317s ago: executing program 1 (id=7554): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) (fail_nth: 2) 4m19.10336517s ago: executing program 1 (id=7555): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x26f}], 0x1}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003d80)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x1}}], 0x1, 0x48040) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000002000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000002000000", 0xfe60) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r2 = socket$kcm(0xa, 0x922000000003, 0x11) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x59}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466ccfe807a000000ad6e911b51818462b4003a000001", 0x38}], 0x1}, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000080)={0x0, 0x0, 0xfffffffe, 0x2, 0xfffffffb}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="273f00000000000000000000000047e09c0befcac085dd538e3a97b7e09770a706afb6e30cfe6407c0c69e87ec3c94875db7b22993d0d18429236d3ad17ac880c88fc07ceab7035707009c071bf8aa9c3e258a77cff2858e8395327cea46febf9d0e7f4f7676b3fd65", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000005400000083000000bf090000000000005509010000000000950000000000000018460000040000000000000000000000bf91000000000000b7020000010000008500000000000010b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) ioctl$PPPIOCSMRU(r4, 0x40047452, &(0x7f0000000040)) fcntl$setlease(r4, 0x400, 0x1) r5 = epoll_create1(0x0) r6 = socket(0x2, 0x80802, 0x0) epoll_pwait(r5, &(0x7f0000000080)=[{}], 0x1, 0xab7, 0x0, 0x0) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x100) fcntl$notify(r7, 0x402, 0x8000000b) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000)=0x20) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x20000040) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000000)) shutdown(r6, 0x0) shutdown(r6, 0x1) fcntl$setlease(r4, 0x400, 0x1) ioctl$TIOCEXCL(r4, 0x540c) 4m18.709937933s ago: executing program 1 (id=7556): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r1, &(0x7f0000000440)={&(0x7f0000000200)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x2}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000280)="a10259a34ec8305f6bbcede33377041cc5e3a5dd012a220beee6c1a28ca2b46b93f8709bfcb1b021b74f6c005d8c80f2dc2b7617d03fb9e5b320cb508feba1aa0ece9efc04aaf428633ff3c2f1a5beb9a417be1fa1c2f12149faad1764c4f2b64bcf2d2f1ab880e600044f3e4dca44e49dee7e86a789adfb1d238edee6e302a1f5e1ceec09734607788259ece58794d2bfacc18da8d4182a7185e58c943486d805b25612646855f859c1fd84a4c32f4cc3bb16be4745ab659aa0e4ee008febb4284e110f4aec3dc483f1afb7dd4a5e20fcbceef3bb88424617441feef9f5bd3fe44392c7a47ed91f8415130c7d24935ae6", 0xf1}], 0x1, &(0x7f0000000380)=[@txtime={{0x14, 0x1, 0x3d, 0x5}}, @mark={{0x10, 0x1, 0x24, 0x4}}, @txtime={{0x14, 0x1, 0x3d, 0x200}}, @txtime={{0x14, 0x1, 0x3d, 0xff}}, @mark={{0x10, 0x1, 0x24, 0xf9}}, @txtime={{0x14, 0x1, 0x3d, 0xf05}}, @timestamping={{0x10, 0x1, 0x25, 0x9}}, @txtime={{0x14, 0x1, 0x3d, 0x1}}, @txtime={{0x14, 0x1, 0x3d, 0x5}}, @txtime={{0x14, 0x1, 0x3d, 0x4}}], 0xbc}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000150001000000001a000000000b000000080002000ab13d"], 0x1c}}, 0x20000080) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xab49}, {0x30, 0x0, 0x3, 0xffeff010}, {0x6}]}, 0x8) r3 = socket$inet(0x2, 0x3, 0x8) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000100)) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xfdef) 3m46.231532511s ago: executing program 34 (id=7556): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r1, &(0x7f0000000440)={&(0x7f0000000200)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x2}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000280)="a10259a34ec8305f6bbcede33377041cc5e3a5dd012a220beee6c1a28ca2b46b93f8709bfcb1b021b74f6c005d8c80f2dc2b7617d03fb9e5b320cb508feba1aa0ece9efc04aaf428633ff3c2f1a5beb9a417be1fa1c2f12149faad1764c4f2b64bcf2d2f1ab880e600044f3e4dca44e49dee7e86a789adfb1d238edee6e302a1f5e1ceec09734607788259ece58794d2bfacc18da8d4182a7185e58c943486d805b25612646855f859c1fd84a4c32f4cc3bb16be4745ab659aa0e4ee008febb4284e110f4aec3dc483f1afb7dd4a5e20fcbceef3bb88424617441feef9f5bd3fe44392c7a47ed91f8415130c7d24935ae6", 0xf1}], 0x1, &(0x7f0000000380)=[@txtime={{0x14, 0x1, 0x3d, 0x5}}, @mark={{0x10, 0x1, 0x24, 0x4}}, @txtime={{0x14, 0x1, 0x3d, 0x200}}, @txtime={{0x14, 0x1, 0x3d, 0xff}}, @mark={{0x10, 0x1, 0x24, 0xf9}}, @txtime={{0x14, 0x1, 0x3d, 0xf05}}, @timestamping={{0x10, 0x1, 0x25, 0x9}}, @txtime={{0x14, 0x1, 0x3d, 0x1}}, @txtime={{0x14, 0x1, 0x3d, 0x5}}, @txtime={{0x14, 0x1, 0x3d, 0x4}}], 0xbc}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000150001000000001a000000000b000000080002000ab13d"], 0x1c}}, 0x20000080) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xab49}, {0x30, 0x0, 0x3, 0xffeff010}, {0x6}]}, 0x8) r3 = socket$inet(0x2, 0x3, 0x8) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000100)) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xfdef) 31.059254819s ago: executing program 6 (id=7893): r0 = socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x2000000b, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x54000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd0, &(0x7f0000000040)=0x8, 0x4) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000340)=0x10001) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) sendmsg$nl_route(r0, 0x0, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="180100002020642500000000002020207b1af8ff00000000bfa100000020000007c5dbcd608b4c42117102010000f8ffffffb702000008000000b7030000070040008500000006000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000080)={0x3, 0x1}, 0x8}, 0x94) getsockname$unix(r0, &(0x7f0000000480), &(0x7f0000000400)=0x6e) writev(r4, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing', 0x0, 0xefaace022867884) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010022bd70000001002500000000", @ANYRES32=0x0, @ANYBLOB="131401002b9201001400128009000100626f6e640000000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fcdbdf2512000000180001801400020076657468300000000000000008000000"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) r7 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) sendto$inet6(r7, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) lseek(r6, 0x5, 0x0) 28.861027849s ago: executing program 2 (id=7900): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x404400, 0x112) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2200, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x26}}, 0x4}, 0x1c) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r3, 0x8949, &(0x7f0000000000)) 11.267701639s ago: executing program 6 (id=7902): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x8, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r0, 0x1, 0x0, 0x3, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}}, 0x4) gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000540)={0x3, &(0x7f0000000140)=[{0x25, 0x0, 0x1, 0x5}, {0x7, 0x0, 0x0, 0x4d60d799}, {0x6, 0xfe}]}) 11.266568439s ago: executing program 6 (id=7903): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x61) copy_file_range(r0, 0x0, r0, 0x0, 0x1000000001ff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x11fe, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r2, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0xf9) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x244b, 0x0, 0x0, 0x400}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000170a010904010073797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x8094) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000280)=0xb3) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x3) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x5) 11.26591318s ago: executing program 2 (id=7904): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) r1 = fsmount(r0, 0x0, 0x6) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x404400, 0x112) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r4, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2200, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r5, 0x8949, &(0x7f0000000000)) 11.265282264s ago: executing program 4 (id=7905): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x404400, 0x112) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r3, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2200, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r4, 0x8949, &(0x7f0000000000)) 11.264803549s ago: executing program 5 (id=7906): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x404400, 0x112) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r3, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2200, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r4, 0x8949, &(0x7f0000000000)) 11.260363331s ago: executing program 2 (id=7907): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000000000095", @ANYRES8=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000300)={{0x4, 0xffff1000, 0x0, 0x9, 0x7f, 0x3, 0x81, 0xff, 0x0, 0x84, 0x0, 0xf}, {0xd000, 0xd000, 0x10, 0x3, 0x1, 0x7, 0x6, 0x6, 0x1, 0x6, 0xfa, 0x5}, {0xf000, 0x8080000, 0x4, 0x89, 0x10, 0x81, 0x4, 0x13, 0x5, 0x4, 0xd2, 0x80}, {0x10000, 0x25000, 0xf, 0x7, 0x1, 0x40, 0x2, 0x0, 0xfd, 0x21, 0x9, 0x9}, {0xeeee8001, 0x1000, 0xf, 0x9, 0x5, 0xa, 0x7, 0xf1, 0x5, 0x6e, 0x1, 0x8}, {0x2, 0xdddd1000, 0xe, 0x2, 0xad, 0x2, 0x5, 0x5, 0x1, 0xc, 0x6, 0x81}, {0xeeee8000, 0xf000, 0xb, 0x9, 0xcd, 0x5, 0x5, 0x26, 0x8, 0x6, 0x4, 0x6}, {0x80b6004, 0xf000, 0x4, 0xe, 0x13, 0x40, 0x3, 0x0, 0x7f, 0x1, 0x0, 0x8}, {0x100000, 0x5}, {0xc000, 0xbf81}, 0x4, 0x0, 0xffff1000, 0x240431, 0x5, 0xa800, 0x8000000, 0x0, [0x6, 0x2, 0x7, 0x7]}) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x404c03, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000004c0), 0x8000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000100)={0x20004, r7, 0x2}) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732"], 0xa8}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c69700014000780080006400000020008000840"], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) socket$nl_netfilter(0x10, 0x3, 0xc) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 11.252548061s ago: executing program 4 (id=7908): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200)={0x0, 0x3, 0x2, [0x7a, 0x6]}, &(0x7f0000000240)=0xc) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x6c, &(0x7f0000000280)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x10}}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e23, @private=0xa010101}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e24, 0x3, @mcast1, 0xc}]}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000380)={0x0, 0x4, 0x5, [0x1000, 0x3, 0x1, 0x436f, 0x8]}, &(0x7f0000000400)=0x12) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000280)={r1, 0x101, 0x80000000, 0x1, 0x7, 0x1, 0x8, 0x2, {r4, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x28}}}, 0xfff, 0x8, 0x800, 0xad}}, &(0x7f0000000340)=0xb0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0xfc2, 0x20000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000280e180000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r7 = memfd_create(&(0x7f0000000440)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz\x03\x00\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92 \x00*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\f\xc9\xc5H\x0f;\xd3\xe2\at\x9bJ\xe6\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xee\xdc\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)\xdeA\x1ed\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97\xf6\xb8\xebN\xe2\x18\x04[\xabW}\xb1\xffo\xae~=\x9dd\x9f\x92\xd2[\xb8\xb6\x1a\x02c\xa1\xd1H\xb7@\x06\x96s\xef\xee\x92\xfaC\x15+\x84%h1O\xe2\xb8\xd3\x19R\x00\f\n\x1cpEn\xad\xa7IRf\xc65\x15<}\xb8\x05\xe4\xb7\x9e\xf3\xda\xdavzB\xf8qj\x9e\xe4\xbd\x05\xcfx\xb5\x12\t\xe0\xf2\'f\xf4+\xb3\xdeA6\x10O\xdd\x9c\xf7B', 0x7) r8 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) r9 = socket(0x10, 0x80002, 0x0) connect$netlink(r9, &(0x7f00000014c0)=@proc, 0xa) ioctl$SIOCX25GCAUSEDIAG(r9, 0x89e6, &(0x7f00000001c0)={0x7, 0x2}) accept4$inet6(r5, &(0x7f0000000840)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000880)=0x1c, 0x40800) ioctl$VIDIOC_G_SELECTION(r8, 0xc040565e, &(0x7f00000003c0)={0x2, 0x0, 0x7, {0x80000004, 0x7, 0x2, 0x8000001}}) fcntl$addseals(r7, 0x409, 0x8) syz_open_dev$video(&(0x7f00000008c0), 0x8, 0x400000) ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4000}) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r11, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0xfffffe69}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 586.453516ms ago: executing program 4 (id=7909): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200)={0x0, 0x3, 0x2, [0x7a, 0x6]}, &(0x7f0000000240)=0xc) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x6c, &(0x7f0000000280)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x10}}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e23, @private=0xa010101}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e24, 0x3, @mcast1, 0xc}]}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000380)={0x0, 0x4, 0x5, [0x1000, 0x3, 0x1, 0x436f, 0x8]}, &(0x7f0000000400)=0x12) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000280)={r1, 0x101, 0x80000000, 0x1, 0x7, 0x1, 0x8, 0x2, {r4, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x28}}}, 0xfff, 0x8, 0x800, 0xad}}, &(0x7f0000000340)=0xb0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0xfc2, 0x20000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000280e180000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r7 = memfd_create(&(0x7f0000000440)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz\x03\x00\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92 \x00*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\f\xc9\xc5H\x0f;\xd3\xe2\at\x9bJ\xe6\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xee\xdc\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)\xdeA\x1ed\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97\xf6\xb8\xebN\xe2\x18\x04[\xabW}\xb1\xffo\xae~=\x9dd\x9f\x92\xd2[\xb8\xb6\x1a\x02c\xa1\xd1H\xb7@\x06\x96s\xef\xee\x92\xfaC\x15+\x84%h1O\xe2\xb8\xd3\x19R\x00\f\n\x1cpEn\xad\xa7IRf\xc65\x15<}\xb8\x05\xe4\xb7\x9e\xf3\xda\xdavzB\xf8qj\x9e\xe4\xbd\x05\xcfx\xb5\x12\t\xe0\xf2\'f\xf4+\xb3\xdeA6\x10O\xdd\x9c\xf7B', 0x7) r8 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) r9 = socket(0x10, 0x80002, 0x0) connect$netlink(r9, &(0x7f00000014c0)=@proc, 0xa) ioctl$SIOCX25GCAUSEDIAG(r9, 0x89e6, &(0x7f00000001c0)={0x7, 0x2}) accept4$inet6(r5, &(0x7f0000000840)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000880)=0x1c, 0x40800) ioctl$VIDIOC_G_SELECTION(r8, 0xc040565e, &(0x7f00000003c0)={0x2, 0x0, 0x7, {0x80000004, 0x7, 0x2, 0x8000001}}) fcntl$addseals(r7, 0x409, 0x8) syz_open_dev$video(&(0x7f00000008c0), 0x8, 0x400000) ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4000}) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r11, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0xfffffe69}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 581.392057ms ago: executing program 4 (id=7910): fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fchdir(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x404400, 0x112) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r2, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2200, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r3, 0x8949, &(0x7f0000000000)) 581.106218ms ago: executing program 6 (id=7911): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000200)={@remote, @private, @empty}, &(0x7f00000002c0)=0xc) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f00000003c0)=[@in6={0xa, 0x4e20, 0x9d, @private2, 0x1}, @in6={0xa, 0x4e23, 0x2, @loopback, 0x1a8}, @in6={0xa, 0x4e23, 0x1, @private0, 0x7fff}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e21, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}], 0x90) mlock(&(0x7f0000ff9000/0x1000)=nil, 0x1000) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) recvmmsg(0xffffffffffffffff, &(0x7f0000006f00)=[{{0x0, 0x0, 0x0}, 0x81}, {{0x0, 0x0, 0x0}, 0x1}], 0x2, 0x60000100, 0x0) 580.988851ms ago: executing program 2 (id=7912): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x14) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r0, 0x1, 0x0, 0x3, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}}, 0x4) gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000540)={0x3, &(0x7f0000000140)=[{0x25, 0x0, 0x1, 0x5}, {0x7, 0x0, 0x0, 0x4d60d799}, {0x6, 0xfe}]}) 580.874991ms ago: executing program 5 (id=7913): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x404400, 0x112) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2200, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x26}}, 0x4}, 0x1c) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r3, 0x8949, &(0x7f0000000000)) 577.940753ms ago: executing program 6 (id=7914): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000200)={@remote, @private, @empty}, &(0x7f00000002c0)=0xc) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3d, 0x301, 0x70bd25, 0xfffffffc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b5b09094bf70e0dd038e7ff7fc6e5539b324c078b089b3438076d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b32310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509301815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153bdf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db87195358bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f00000003c0), 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mlock(&(0x7f0000ff9000/0x1000)=nil, 0x1000) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) recvmmsg(r6, &(0x7f0000006f00)=[{{0x0, 0x0, 0x0}, 0x81}, {{0x0, 0x0, 0x0}, 0x1}], 0x2, 0x60000100, 0x0) 367.095985ms ago: executing program 2 (id=7915): r0 = getpid() openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2, 0x2, 0x0) socket$inet(0x2, 0x80000, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r1, 0x10c, 0x1, &(0x7f0000000180), &(0x7f00000008c0)=0x4) r2 = socket$qrtr(0x2a, 0x2, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0xcc09, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0}) io_uring_enter(r3, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) r6 = syz_pidfd_open(r0, 0x0) r7 = pidfd_getfd(r6, r6, 0x0) madvise(&(0x7f0000bdd000/0x3000)=nil, 0x3000, 0x2) setns(r7, 0x66020000) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r8, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r8, 0x1, 0x31, &(0x7f0000001600), 0x4) write$P9_RFLUSH(r7, &(0x7f0000000000)={0x7, 0x6d, 0x2}, 0x7) 366.735597ms ago: executing program 5 (id=7916): r0 = socket$vsock_stream(0x28, 0x1, 0x0) memfd_create(&(0x7f0000000040)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xd3\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\xfa\x18\x8dR\xbb\xea5F\x00G\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|n\xda\xee\x01\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01;\xbfM.\xe3\x84\x82\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13\x03\x04\xdb', 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10) (fail_nth: 2) 365.661221ms ago: executing program 4 (id=7917): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x61) copy_file_range(r0, 0x0, r0, 0x0, 0x1000000001ff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x11fe, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r2, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0xf9) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x244b, 0x0, 0x0, 0x400}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000170a010904010073797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x8094) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000280)=0xb3) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x3) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x5) 365.499641ms ago: executing program 6 (id=7918): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200)={0x0, 0x3, 0x2, [0x7a, 0x6]}, &(0x7f0000000240)=0xc) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x6c, &(0x7f0000000280)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x10}}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e23, @private=0xa010101}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e24, 0x3, @mcast1, 0xc}]}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000380)={0x0, 0x4, 0x5, [0x1000, 0x3, 0x1, 0x436f, 0x8]}, &(0x7f0000000400)=0x12) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000280)={r1, 0x101, 0x80000000, 0x1, 0x7, 0x1, 0x8, 0x2, {r4, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x28}}}, 0xfff, 0x8, 0x800, 0xad}}, &(0x7f0000000340)=0xb0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0xfc2, 0x20000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000280e180000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r7 = memfd_create(&(0x7f0000000440)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz\x03\x00\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92 \x00*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\f\xc9\xc5H\x0f;\xd3\xe2\at\x9bJ\xe6\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xee\xdc\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)\xdeA\x1ed\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97\xf6\xb8\xebN\xe2\x18\x04[\xabW}\xb1\xffo\xae~=\x9dd\x9f\x92\xd2[\xb8\xb6\x1a\x02c\xa1\xd1H\xb7@\x06\x96s\xef\xee\x92\xfaC\x15+\x84%h1O\xe2\xb8\xd3\x19R\x00\f\n\x1cpEn\xad\xa7IRf\xc65\x15<}\xb8\x05\xe4\xb7\x9e\xf3\xda\xdavzB\xf8qj\x9e\xe4\xbd\x05\xcfx\xb5\x12\t\xe0\xf2\'f\xf4+\xb3\xdeA6\x10O\xdd\x9c\xf7B', 0x7) r8 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) r9 = socket(0x10, 0x80002, 0x0) connect$netlink(r9, &(0x7f00000014c0)=@proc, 0xa) ioctl$SIOCX25GCAUSEDIAG(r9, 0x89e6, &(0x7f00000001c0)={0x7, 0x2}) accept4$inet6(r5, &(0x7f0000000840)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000880)=0x1c, 0x40800) ioctl$VIDIOC_G_SELECTION(r8, 0xc040565e, &(0x7f00000003c0)={0x2, 0x0, 0x7, {0x80000004, 0x7, 0x2, 0x8000001}}) fcntl$addseals(r7, 0x409, 0x8) syz_open_dev$video(&(0x7f00000008c0), 0x8, 0x400000) ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4000}) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r11, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0xfffffe69}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 365.360063ms ago: executing program 2 (id=7919): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000200)={@remote, @private, @empty}, &(0x7f00000002c0)=0xc) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f00000003c0)=[@in6={0xa, 0x4e20, 0x9d, @private2, 0x1}, @in6={0xa, 0x4e23, 0x2, @loopback, 0x1a8}, @in6={0xa, 0x4e23, 0x1, @private0, 0x7fff}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e21, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}], 0x90) mlock(&(0x7f0000ff9000/0x1000)=nil, 0x1000) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) recvmmsg(0xffffffffffffffff, &(0x7f0000006f00)=[{{0x0, 0x0, 0x0}, 0x81}, {{0x0, 0x0, 0x0}, 0x1}], 0x2, 0x60000100, 0x0) 365.258522ms ago: executing program 5 (id=7920): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x61) copy_file_range(r0, 0x0, r0, 0x0, 0x1000000001ff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x11fe, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r2, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0xf9) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x244b, 0x0, 0x0, 0x400}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000170a010904010073797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x8094) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000280)=0xb3) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x3) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x5) 133.709945ms ago: executing program 5 (id=7921): r0 = socket$vsock_stream(0x28, 0x1, 0x0) memfd_create(&(0x7f0000000040)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xd3\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\xfa\x18\x8dR\xbb\xea5F\x00G\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|n\xda\xee\x01\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01;\xbfM.\xe3\x84\x82\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13\x03\x04\xdb', 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10) 1.493287ms ago: executing program 4 (id=7922): openat$ptmx(0xffffffffffffff9c, 0x0, 0x8200, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x10000000000000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x1fab35f8ee128383, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f000001f000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000000)="b842068ec80f79c666b9800000c00f326635008000000f30658b9299ebf000bfaa80260fc731baf80c66b848f7288366efbafc0c66b8f5ee91dd66efbaf80c66b8c076cd8066efbafc0c66b80000000066ef0f22666466f30f09", 0x5a}], 0xaaaaaaaaaaaad59, 0x30, 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000080)={0x41424344}, 0x1, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x9, 0x7fff0000}]}) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x401, 0x12, r3, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/sync_on_suspend', 0x40, 0x0) sendfile(r3, r5, 0x0, 0xa4ae) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="18f6f076dcfc3f00000000000800458a00280064000007069078ac1414bbe00000014e224e22", @ANYRES32=r2, @ANYRES32=0x41424344, @ANYBLOB="501800079078006707af6d76eee30c8ad52f2d3cec5aa2a33d5ec4e25be784ca5ea0c3dd4237d8b7ee87d888236b0fe2a0a73cef3daba142073d2bbb7ab7ad1329136cfe10e4a34c816869679900944f39acff64818b9453fa556cd13ace830f7c6498005909f9494519fa99bec80035e2d38efe1d1f090895e07fb961ecd1aaa25f"], 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_usb_connect_ath9k(0x3, 0xffffffffffffffe3, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) r9 = openat$cgroup_pressure(r8, &(0x7f0000000800)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r9, &(0x7f0000000040)={'some', 0x20, 0x17e, 0x20, 0x100002}, 0x2f) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$UFFDIO_MOVE(r5, 0xc028aa05, &(0x7f00000001c0)={&(0x7f000047d000/0x3000)=nil, &(0x7f00000f0000/0x1000)=nil, 0x3000, 0x2}) ioctl$KVM_SET_IRQCHIP(r12, 0x4048aec9, &(0x7f0000000480)={0x1, 0x0, @ioapic={0x8000000, 0x4, 0x7, 0x4, 0x0, [{0x8, 0x86, 0x3, '\x00', 0xd5}, {0x2, 0x2, 0x4, '\x00', 0x6}, {0x10, 0x8, 0x0, '\x00', 0xbc}, {0xe, 0xff, 0x5, '\x00', 0x4}, {0x4, 0x4, 0xfa, '\x00', 0xf}, {0x5, 0xe7, 0x7, '\x00', 0xf9}, {0xb9, 0x40, 0x1, '\x00', 0x6}, {0x0, 0x83, 0x7, '\x00', 0xf8}, {0x3, 0x1, 0x2, '\x00', 0x8}, {0x2, 0x38, 0xf7, '\x00', 0x8}, {0xe, 0x6, 0x1a, '\x00', 0x10}, {0x80, 0x55, 0xc1, '\x00', 0x8}, {0x2, 0x5, 0x5, '\x00', 0x80}, {0x9, 0x40, 0x9, '\x00', 0x40}, {0x3, 0x4, 0x4, '\x00', 0x5}, {0x1, 0x43, 0x0, '\x00', 0x1}, {0x1, 0x8, 0x0, '\x00', 0x3}, {0x9, 0x2, 0x1, '\x00', 0x6}, {0x2, 0x80, 0x6, '\x00', 0x5}, {0x81, 0xf8, 0x4}, {0x2, 0x1, 0x6, '\x00', 0x6}, {0x1, 0x5, 0x80, '\x00', 0x2}, {0x88, 0x80, 0x5e}, {0x20, 0xbf, 0x9, '\x00', 0x4}]}}) close_range(r10, 0xffffffffffffffff, 0x100000000000000) 0s ago: executing program 5 (id=7923): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x800) (fail_nth: 2) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) kernel console output (not intermixed with test programs): nted: [L]=SOFTLOCKUP [ 2326.666921][ T4343] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2326.666930][ T4343] Call Trace: [ 2326.666935][ T4343] [ 2326.666941][ T4343] dump_stack_lvl+0x100/0x190 [ 2326.666966][ T4343] should_fail_ex.cold+0x5/0xa [ 2326.666984][ T4343] ? tomoyo_encode2+0xfb/0x3c0 [ 2326.666999][ T4343] should_failslab+0xc2/0x120 [ 2326.667015][ T4343] __kmalloc_noprof+0xe0/0x850 [ 2326.667040][ T4343] tomoyo_encode2+0xfb/0x3c0 [ 2326.667059][ T4343] tomoyo_encode+0x29/0x50 [ 2326.667074][ T4343] tomoyo_realpath_from_path+0x18c/0x690 [ 2326.667095][ T4343] tomoyo_path_number_perm+0x23c/0x580 [ 2326.667118][ T4343] ? tomoyo_path_number_perm+0x22e/0x580 [ 2326.667142][ T4343] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2326.667184][ T4343] ? find_held_lock+0x2b/0x80 [ 2326.667199][ T4343] ? hook_file_ioctl_common+0x146/0x410 [ 2326.667222][ T4343] ? __fget_files+0x215/0x3d0 [ 2326.667239][ T4343] ? __fget_files+0x21f/0x3d0 [ 2326.667256][ T4343] security_file_ioctl_compat+0xd3/0x230 [ 2326.667281][ T4343] __ia32_compat_sys_ioctl+0xc2/0x360 [ 2326.667304][ T4343] __do_fast_syscall_32+0xe3/0x8c0 [ 2326.667325][ T4343] do_fast_syscall_32+0x32/0x70 [ 2326.667344][ T4343] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2326.667367][ T4343] RIP: 0023:0xf702ef6c [ 2326.667379][ T4343] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 2326.667393][ T4343] RSP: 002b:00000000f53fc50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 2326.667409][ T4343] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000008922 [ 2326.667419][ T4343] RDX: 0000000080002280 RSI: 0000000000000000 RDI: 0000000000000000 [ 2326.667428][ T4343] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2326.667436][ T4343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2326.667445][ T4343] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2326.667464][ T4343] [ 2326.667481][ T4343] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2326.719987][ T4343] tipc: Resetting bearer [ 2326.864048][ T4338] tipc: Resetting bearer [ 2327.433627][ T4350] loop9: detected capacity change from 0 to 7 [ 2327.527791][ T4338] tipc: Disabling bearer [ 2327.875265][T14501] tipc: Node number set to 1842537378 [ 2328.140577][ T4205] Dev loop9: unable to read RDB block 7 [ 2328.140633][ T4205] loop9: unable to read partition table [ 2328.140858][ T4205] loop9: partition table beyond EOD, truncated [ 2328.497600][ T4350] Dev loop9: unable to read RDB block 7 [ 2328.500090][ T4350] loop9: unable to read partition table [ 2328.502736][ T4350] loop9: partition table beyond EOD, truncated [ 2328.507913][ T4350] loop_reread_partitions: partition scan of loop9 (úùƒWå¡™‰ü¾Ã½¸*‹ºÐ œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5) [ 2328.522008][ T4357] syzkaller0: entered promiscuous mode [ 2328.560577][ T4357] syzkaller0: entered allmulticast mode [ 2328.630087][ T4357] FAULT_INJECTION: forcing a failure. [ 2328.630087][ T4357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2328.665136][ T4357] CPU: 0 UID: 0 PID: 4357 Comm: syz.2.7499 Tainted: G L syzkaller #0 PREEMPT(full) [ 2328.665166][ T4357] Tainted: [L]=SOFTLOCKUP [ 2328.665173][ T4357] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2328.665183][ T4357] Call Trace: [ 2328.665209][ T4357] [ 2328.665217][ T4357] dump_stack_lvl+0x100/0x190 [ 2328.665247][ T4357] should_fail_ex.cold+0x5/0xa [ 2328.665269][ T4357] _copy_from_user+0x2e/0xd0 [ 2328.665286][ T4357] move_addr_to_kernel+0x65/0x170 [ 2328.665314][ T4357] get_compat_msghdr+0x3ee/0x4b0 [ 2328.665335][ T4357] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2328.665363][ T4357] ___sys_sendmsg+0x1b6/0x1e0 [ 2328.665391][ T4357] ? __pfx____sys_sendmsg+0x10/0x10 [ 2328.665456][ T4357] __sys_sendmsg+0x170/0x220 [ 2328.665478][ T4357] ? __pfx___sys_sendmsg+0x10/0x10 [ 2328.665507][ T4357] ? __pfx_ksys_write+0x10/0x10 [ 2328.665529][ T4357] __do_fast_syscall_32+0xe3/0x8c0 [ 2328.665556][ T4357] do_fast_syscall_32+0x32/0x70 [ 2328.665578][ T4357] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2328.665601][ T4357] RIP: 0023:0xf70aef6c [ 2328.665616][ T4357] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 2328.665633][ T4357] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 2328.665651][ T4357] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000280 [ 2328.665662][ T4357] RDX: 0000000000004005 RSI: 0000000000000000 RDI: 0000000000000000 [ 2328.665672][ T4357] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2328.665682][ T4357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2328.665692][ T4357] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2328.665715][ T4357] [ 2328.846480][ T39] usb 48-1: device descriptor read/8, error -110 [ 2329.033044][ T4351] Dev loop9: unable to read RDB block 7 [ 2329.039781][ T4351] loop9: unable to read partition table [ 2329.044556][ T4351] loop9: partition table beyond EOD, truncated [ 2329.064076][ T4364] binder: 4361:4364 unknown command 0 [ 2329.067013][ T4364] binder: 4361:4364 ioctl c0306201 80000540 returned -22 [ 2329.256533][ T39] usb usb48-port1: attempt power cycle [ 2329.320601][ T4367] tipc: Started in network mode [ 2329.323562][ T4367] tipc: Node identity 6e9f092851f9, cluster identity 4711 [ 2329.328805][ T4367] tipc: Enabled bearer , priority 0 [ 2329.334247][ T4367] syzkaller0: entered promiscuous mode [ 2329.356247][ T4367] syzkaller0: entered allmulticast mode [ 2329.401045][ T4367] tipc: Resetting bearer [ 2329.569585][ T4374] overlayfs: failed lookup in lower (newroot/111, name='file1', err=-40): overlapping layers [ 2329.602858][ T4366] tipc: Resetting bearer [ 2329.687837][ T4380] overlay: ./bus is not a directory [ 2329.825866][ T4366] tipc: Disabling bearer [ 2329.856458][ T39] usb usb48-port1: unable to enumerate USB device [ 2330.369550][ T4391] wg1 speed is unknown, defaulting to 1000 [ 2330.886107][ T4410] binder: 4409:4410 unknown command 0 [ 2330.901299][ T4410] binder: 4409:4410 ioctl c0306201 80000540 returned -22 [ 2330.930609][ T4417] FAULT_INJECTION: forcing a failure. [ 2330.930609][ T4417] name failslab, interval 1, probability 0, space 0, times 0 [ 2330.955495][ T4417] CPU: 3 UID: 0 PID: 4417 Comm: syz.2.7515 Tainted: G L syzkaller #0 PREEMPT(full) [ 2330.955525][ T4417] Tainted: [L]=SOFTLOCKUP [ 2330.955532][ T4417] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2330.955541][ T4417] Call Trace: [ 2330.955548][ T4417] [ 2330.955555][ T4417] dump_stack_lvl+0x100/0x190 [ 2330.955585][ T4417] should_fail_ex.cold+0x5/0xa [ 2330.955604][ T4417] ? tomoyo_encode2+0xfb/0x3c0 [ 2330.955621][ T4417] should_failslab+0xc2/0x120 [ 2330.955639][ T4417] __kmalloc_noprof+0xe0/0x850 [ 2330.955662][ T4417] ? d_absolute_path+0x136/0x1b0 [ 2330.955689][ T4417] tomoyo_encode2+0xfb/0x3c0 [ 2330.955712][ T4417] tomoyo_encode+0x29/0x50 [ 2330.955730][ T4417] tomoyo_realpath_from_path+0x18c/0x690 [ 2330.955754][ T4417] tomoyo_path_number_perm+0x23c/0x580 [ 2330.955781][ T4417] ? tomoyo_path_number_perm+0x22e/0x580 [ 2330.955809][ T4417] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2330.955860][ T4417] ? find_held_lock+0x2b/0x80 [ 2330.955876][ T4417] ? hook_file_ioctl_common+0x146/0x410 [ 2330.955903][ T4417] ? __fget_files+0x215/0x3d0 [ 2330.955923][ T4417] ? __fget_files+0x21f/0x3d0 [ 2330.955942][ T4417] security_file_ioctl_compat+0xd3/0x230 [ 2330.955971][ T4417] __ia32_compat_sys_ioctl+0xc2/0x360 [ 2330.955999][ T4417] __do_fast_syscall_32+0xe3/0x8c0 [ 2330.956024][ T4417] do_fast_syscall_32+0x32/0x70 [ 2330.956046][ T4417] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2330.956068][ T4417] RIP: 0023:0xf70aef6c [ 2330.956084][ T4417] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 2330.956100][ T4417] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 2330.956116][ T4417] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ab03 [ 2330.956127][ T4417] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2330.956137][ T4417] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2330.956146][ T4417] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2330.956156][ T4417] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2330.956180][ T4417] [ 2330.956201][ T4417] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2330.995792][ T4420] block nbd2: shutting down sockets [ 2331.273295][ T4422] block nbd1: shutting down sockets [ 2332.047937][ T3243] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 2332.218278][ T3243] usb 7-1: Using ep0 maxpacket: 32 [ 2332.255189][ T3243] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 2332.259129][ T3243] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2332.263677][ T3243] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2332.279124][ T3243] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2332.283258][ T3243] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2332.321879][ T3243] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2332.338802][ T3243] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2332.343134][ T3243] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2332.365662][ T3243] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2332.369614][ T3243] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2332.398466][ T3243] usb 7-1: config 0 descriptor?? [ 2332.659612][ T3243] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 57 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2332.672979][ T780] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 2332.693497][ T1531] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 2332.818215][ T4432] FAULT_INJECTION: forcing a failure. [ 2332.818215][ T4432] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2332.827626][ T4432] CPU: 2 UID: 0 PID: 4432 Comm: syz.2.7520 Tainted: G L syzkaller #0 PREEMPT(full) [ 2332.827656][ T4432] Tainted: [L]=SOFTLOCKUP [ 2332.827663][ T4432] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2332.827673][ T4432] Call Trace: [ 2332.827682][ T4432] [ 2332.827690][ T4432] dump_stack_lvl+0x100/0x190 [ 2332.827739][ T4432] should_fail_ex.cold+0x5/0xa [ 2332.827758][ T4432] strncpy_from_user+0x3b/0x2d0 [ 2332.827789][ T4432] do_getname+0x78/0x390 [ 2332.827814][ T4432] do_sys_openat2+0xc5/0x1e0 [ 2332.827836][ T4432] ? __pfx_do_sys_openat2+0x10/0x10 [ 2332.827854][ T4432] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2332.827878][ T4432] ? __fget_files+0x21f/0x3d0 [ 2332.827900][ T4432] __ia32_compat_sys_openat+0x12d/0x210 [ 2332.827925][ T4432] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 2332.827947][ T4432] ? ksys_write+0x1ac/0x250 [ 2332.827972][ T4432] do_int80_emulation+0x141/0x6b0 [ 2332.827995][ T4432] asm_int80_emulation+0x1a/0x20 [ 2332.828013][ T4432] RIP: 0023:0xf71e5cab [ 2332.828029][ T4432] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 2332.828045][ T4432] RSP: 002b:00000000f549d03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 2332.828064][ T4432] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f549d100 [ 2332.828075][ T4432] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 2332.828085][ T4432] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2332.828094][ T4432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2332.828104][ T4432] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2332.828127][ T4432] [ 2332.829186][ T3243] usb 7-1: USB disconnect, device number 57 [ 2332.899418][ T780] usb 10-1: device descriptor read/64, error -71 [ 2333.045106][ T3243] usblp0: removed [ 2333.175503][ T780] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 2333.305509][ T780] usb 10-1: device descriptor read/64, error -71 [ 2333.435772][ T780] usb usb10-port1: attempt power cycle [ 2333.785672][ T780] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 2333.811102][ T1531] usb 6-1: Using ep0 maxpacket: 32 [ 2333.925845][ T780] usb 10-1: device descriptor read/8, error -71 [ 2334.175538][ T780] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 2334.196851][ T780] usb 10-1: device descriptor read/8, error -71 [ 2334.221400][ T1531] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 2334.225151][ T1531] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2334.259614][ T1531] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2334.297329][ T1531] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2334.321276][ T1531] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2334.345206][ T1531] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2334.362204][ T1531] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2334.362816][ T780] usb usb10-port1: unable to enumerate USB device [ 2334.366787][ T1531] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2334.383812][ T1531] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2334.407905][ T1531] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2334.440235][ T1531] usb 6-1: config 0 descriptor?? [ 2334.444781][ T1531] usb 6-1: can't set config #0, error -71 [ 2334.458341][ T1531] usb 6-1: USB disconnect, device number 81 [ 2334.491831][ T4454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7525'. [ 2334.497395][ T4454] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7525'. [ 2334.697529][ T4453] wg1 speed is unknown, defaulting to 1000 [ 2334.882607][ T4459] geneve2: left promiscuous mode [ 2335.551979][ T4458] wg1 speed is unknown, defaulting to 1000 [ 2335.924812][ T4465] FAULT_INJECTION: forcing a failure. [ 2335.924812][ T4465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2336.044853][ T4465] CPU: 1 UID: 0 PID: 4465 Comm: syz.1.7527 Tainted: G L syzkaller #0 PREEMPT(full) [ 2336.044878][ T4465] Tainted: [L]=SOFTLOCKUP [ 2336.044883][ T4465] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2336.044892][ T4465] Call Trace: [ 2336.044897][ T4465] [ 2336.044903][ T4465] dump_stack_lvl+0x100/0x190 [ 2336.044929][ T4465] should_fail_ex.cold+0x5/0xa [ 2336.044946][ T4465] _copy_from_user+0x2e/0xd0 [ 2336.044962][ T4465] get_compat_msghdr+0xb3/0x4b0 [ 2336.044979][ T4465] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2336.045005][ T4465] ___sys_sendmsg+0x1b6/0x1e0 [ 2336.045034][ T4465] ? __pfx____sys_sendmsg+0x10/0x10 [ 2336.045063][ T4465] ? __pte_offset_map+0x179/0x310 [ 2336.045105][ T4465] __sys_sendmsg+0x170/0x220 [ 2336.045128][ T4465] ? __pfx___sys_sendmsg+0x10/0x10 [ 2336.045166][ T4465] __do_fast_syscall_32+0xe3/0x8c0 [ 2336.045195][ T4465] do_fast_syscall_32+0x32/0x70 [ 2336.045217][ T4465] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2336.045240][ T4465] RIP: 0023:0xf707ef6c [ 2336.045255][ T4465] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 2336.045272][ T4465] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 2336.045289][ T4465] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000140 [ 2336.045301][ T4465] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2336.045312][ T4465] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2336.045321][ T4465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2336.045349][ T4465] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2336.045369][ T4465] [ 2336.272087][ T4467] overlayfs: workdir and upperdir must be separate subtrees [ 2336.384303][ T4467] 9p: Bad value for 'rfdno' [ 2336.389864][ T4467] 9pnet_fd: Insufficient options for proto=fd [ 2339.165695][ T4490] wg1 speed is unknown, defaulting to 1000 [ 2341.780194][ T4513] wg1 speed is unknown, defaulting to 1000 [ 2342.955577][ T1531] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 2343.107921][ T1531] usb 6-1: Using ep0 maxpacket: 32 [ 2343.119142][ T1531] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 2343.151005][ T1531] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 2343.176431][ T1531] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2343.182510][ T1531] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 2343.201451][ T1531] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 2343.221998][ T1531] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2343.227632][ T1531] usb 6-1: Product: syz [ 2343.229681][ T1531] usb 6-1: Manufacturer: syz [ 2343.231993][ T1531] usb 6-1: SerialNumber: syz [ 2343.259931][ C0] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 2343.266221][ T1531] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input209 [ 2343.495568][ T1531] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 2343.499163][ T1531] (id 0x00) [ 2343.819461][ T1531] rc_core: IR keymap rc-imon-pad not found [ 2343.859454][ T1531] Registered IR keymap rc-empty [ 2343.863357][ T1531] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 2343.875930][ T1531] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 2343.990974][ T1531] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0 [ 2344.010488][ T1531] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0/input210 [ 2344.018523][ T1531] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:82> initialized [ 2344.235441][ T1723] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 2344.386889][ T1723] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 2344.390005][ T1723] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2344.393819][ T1723] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2344.404543][ T1723] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2344.410841][ T1723] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2344.418303][ T1723] usb 7-1: Product: syz [ 2344.421161][ T1723] usb 7-1: Manufacturer: syz [ 2344.424712][ T1723] usb 7-1: SerialNumber: syz [ 2344.436138][ T1723] usb 7-1: config 0 descriptor?? [ 2344.449422][ T1723] hub 7-1:0.0: bad descriptor, ignoring hub [ 2344.454964][ T1723] hub 7-1:0.0: probe with driver hub failed with error -5 [ 2344.463018][ T1723] usb 7-1: selecting invalid altsetting 0 [ 2344.923262][ T4528] FAULT_INJECTION: forcing a failure. [ 2344.923262][ T4528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2344.963983][ T4528] CPU: 0 UID: 0 PID: 4528 Comm: syz.2.7541 Tainted: G L syzkaller #0 PREEMPT(full) [ 2344.964014][ T4528] Tainted: [L]=SOFTLOCKUP [ 2344.964020][ T4528] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2344.964030][ T4528] Call Trace: [ 2344.964036][ T4528] [ 2344.964043][ T4528] dump_stack_lvl+0x100/0x190 [ 2344.964072][ T4528] should_fail_ex.cold+0x5/0xa [ 2344.964093][ T4528] strncpy_from_user+0x3b/0x2d0 [ 2344.964125][ T4528] do_getname+0x78/0x390 [ 2344.964153][ T4528] do_sys_openat2+0xc5/0x1e0 [ 2344.964177][ T4528] ? __pfx_do_sys_openat2+0x10/0x10 [ 2344.964197][ T4528] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2344.964223][ T4528] ? __fget_files+0x21f/0x3d0 [ 2344.964244][ T4528] __ia32_compat_sys_openat+0x12d/0x210 [ 2344.964269][ T4528] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 2344.964293][ T4528] ? ksys_write+0x1ac/0x250 [ 2344.964316][ T4528] do_int80_emulation+0x141/0x6b0 [ 2344.964342][ T4528] asm_int80_emulation+0x1a/0x20 [ 2344.964360][ T4528] RIP: 0023:0xf71e5cab [ 2344.964375][ T4528] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 2344.964392][ T4528] RSP: 002b:00000000f549d03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 2344.964410][ T4528] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f549d100 [ 2344.964421][ T4528] RDX: 0000000000042382 RSI: 0000000000000000 RDI: 0000000000000000 [ 2344.964431][ T4528] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2344.964441][ T4528] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2344.964451][ T4528] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2344.964475][ T4528] [ 2345.279686][ T3243] usb 7-1: USB disconnect, device number 58 [ 2345.712101][ T780] usb 6-1: USB disconnect, device number 82 [ 2345.962923][ T3243] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 2346.585148][ T3243] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 2346.590700][ T3243] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2346.595126][ T3243] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2347.208881][ T3243] usb 7-1: string descriptor 0 read error: -71 [ 2347.211973][ T3243] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2347.275173][ T3243] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2347.280934][ T3243] usb 7-1: config 0 descriptor?? [ 2347.285968][ T3243] usb 7-1: can't set config #0, error -71 [ 2347.314159][ T3243] usb 7-1: USB disconnect, device number 59 [ 2347.702144][ T4553] syzkaller0: entered promiscuous mode [ 2347.725149][ T4553] syzkaller0: entered allmulticast mode [ 2347.736029][ T4553] FAULT_INJECTION: forcing a failure. [ 2347.736029][ T4553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2347.742463][ T4553] CPU: 0 UID: 0 PID: 4553 Comm: syz.5.7545 Tainted: G L syzkaller #0 PREEMPT(full) [ 2347.742492][ T4553] Tainted: [L]=SOFTLOCKUP [ 2347.742498][ T4553] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2347.742508][ T4553] Call Trace: [ 2347.742517][ T4553] [ 2347.742526][ T4553] dump_stack_lvl+0x100/0x190 [ 2347.742557][ T4553] should_fail_ex.cold+0x5/0xa [ 2347.742578][ T4553] _copy_from_user+0x2e/0xd0 [ 2347.742597][ T4553] move_addr_to_kernel+0x65/0x170 [ 2347.742626][ T4553] get_compat_msghdr+0x3ee/0x4b0 [ 2347.742647][ T4553] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2347.742675][ T4553] ___sys_sendmsg+0x1b6/0x1e0 [ 2347.742720][ T4553] ? __pfx____sys_sendmsg+0x10/0x10 [ 2347.742777][ T4553] __sys_sendmsg+0x170/0x220 [ 2347.742798][ T4553] ? __pfx___sys_sendmsg+0x10/0x10 [ 2347.742827][ T4553] ? __pfx_ksys_write+0x10/0x10 [ 2347.742848][ T4553] __do_fast_syscall_32+0xe3/0x8c0 [ 2347.742874][ T4553] do_fast_syscall_32+0x32/0x70 [ 2347.742896][ T4553] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2347.742918][ T4553] RIP: 0023:0xf7fc5f6c [ 2347.742934][ T4553] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 2347.742950][ T4553] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 2347.742968][ T4553] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000800000c0 [ 2347.742979][ T4553] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 2347.742989][ T4553] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2347.742999][ T4553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2347.743008][ T4553] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2347.743031][ T4553] [ 2349.097298][ T4559] syzkaller0: entered promiscuous mode [ 2349.102337][ T4559] syzkaller0: entered allmulticast mode [ 2349.260434][ T1411] ieee802154 phy0 wpan0: encryption failed: -22 [ 2349.263537][ T1411] ieee802154 phy1 wpan1: encryption failed: -22 [ 2352.280693][ T4581] binder: 4578:4581 unknown command 0 [ 2352.295100][ T4581] binder: 4578:4581 ioctl c0306201 80000540 returned -22 [ 2362.203973][ T4596] netlink: 'syz.2.7558': attribute type 21 has an invalid length. [ 2362.208613][ T4596] netlink: 'syz.2.7558': attribute type 6 has an invalid length. [ 2362.214015][ T4596] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7558'. [ 2362.626294][T14169] e1000 0000:00:06.0 eth0: Reset adapter [ 2365.267913][ T2228] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 2365.370610][ T4608] binder: 4602:4608 unknown command 0 [ 2365.373760][ T4608] binder: 4602:4608 ioctl c0306201 80000540 returned -22 [ 2366.610697][ T3545] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 2366.789071][ T3545] usb 9-1: Using ep0 maxpacket: 32 [ 2366.818533][T23149] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 2366.828792][ T3545] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 2366.874707][ T3545] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2366.878847][ T3545] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2366.882872][ T3545] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2366.932328][ T3545] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2366.937624][ T3545] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 102 [ 2366.948980][ T3545] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2366.973948][ T3545] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2366.979648][ T3545] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2366.991676][ T3545] usb 9-1: config 0 descriptor?? [ 2366.994890][ T4615] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2367.030717][T23149] usb 10-1: Using ep0 maxpacket: 8 [ 2367.037519][T23149] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 2367.052750][T23149] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2367.058779][T23149] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2367.075775][T23149] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2367.107378][T23149] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2367.129291][T23149] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2367.133408][T23149] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2367.246581][ T3545] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 67 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2367.438552][ C1] usblp0: nonzero read bulk status received: -71 [ 2367.449443][ T4615] usblp0: error -71 reading from printer [ 2367.452257][ C1] usblp0: nonzero read bulk status received: -71 [ 2367.536412][T27158] usb 9-1: USB disconnect, device number 67 [ 2367.543936][T27158] usblp0: removed [ 2367.722671][T23149] usb 10-1: usb_control_msg returned -32 [ 2367.725653][T23149] usbtmc 10-1:16.0: can't read capabilities [ 2370.609148][T23149] usb 10-1: USB disconnect, device number 17 [ 2372.923765][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2373.035478][T21521] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2373.043472][T21521] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2373.090698][T21521] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2373.165213][T21521] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2373.182097][T21521] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2374.794897][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2374.960860][ T4652] wg1 speed is unknown, defaulting to 1000 [ 2375.096985][ T4656] pim6reg: entered allmulticast mode [ 2375.147169][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2375.267192][T21521] Bluetooth: hci2: command tx timeout [ 2375.481146][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2375.514442][ T4652] chnl_net:caif_netlink_parms(): no params data found [ 2375.638519][ T4652] bridge0: port 1(bridge_slave_0) entered blocking state [ 2375.641322][ T4652] bridge0: port 1(bridge_slave_0) entered disabled state [ 2375.644556][ T4652] bridge_slave_0: entered allmulticast mode [ 2375.651625][ T4652] bridge_slave_0: entered promiscuous mode [ 2375.671410][ T4652] bridge0: port 2(bridge_slave_1) entered blocking state [ 2375.675506][ T4652] bridge0: port 2(bridge_slave_1) entered disabled state [ 2375.684982][ T4652] bridge_slave_1: entered allmulticast mode [ 2375.697989][ T4652] bridge_slave_1: entered promiscuous mode [ 2375.762829][ T4652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2375.803503][ T4652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2375.913147][ T4652] team0: Port device team_slave_0 added [ 2375.929341][ T4652] team0: Port device team_slave_1 added [ 2376.024064][ T4652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2376.045698][ T4652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2376.058815][ T4652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2376.064346][ T12] bridge_slave_1: left allmulticast mode [ 2376.070052][ T12] bridge_slave_1: left promiscuous mode [ 2376.073016][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 2376.127583][ T12] bridge_slave_0: left allmulticast mode [ 2376.129990][ T12] bridge_slave_0: left promiscuous mode [ 2376.132417][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 2376.880003][ T12] bond0 (unregistering): (slave 30): Releasing backup interface [ 2376.887633][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2376.908390][ T12] bond0 (unregistering): Released all slaves [ 2376.927647][ T4652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2376.932097][ T4652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2376.967067][ T4652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2377.077974][ T4652] hsr_slave_0: entered promiscuous mode [ 2377.081348][ T4652] hsr_slave_1: entered promiscuous mode [ 2377.112861][ T4652] debugfs: 'hsr0' already exists in 'hsr' [ 2377.115256][ T4652] Cannot create hsr debugfs directory [ 2377.341765][T21521] Bluetooth: hci2: command tx timeout [ 2378.007059][ T4652] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2378.151126][ T12] hsr_slave_0: left promiscuous mode [ 2378.165988][ T12] hsr_slave_1: left promiscuous mode [ 2378.171229][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2378.195850][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2378.243377][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2378.257972][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2378.287252][ T12] veth1_macvtap: left promiscuous mode [ 2378.290737][ T12] veth0_macvtap: left promiscuous mode [ 2378.293824][ T12] veth1_vlan: left promiscuous mode [ 2378.300197][ T12] veth0_vlan: left promiscuous mode [ 2378.732960][ T12] team0 (unregistering): Port device team_slave_1 removed [ 2378.756567][ T12] team0 (unregistering): Port device team_slave_0 removed [ 2379.046414][ T4652] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2379.080479][ T4652] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2379.090431][ T4652] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2379.416829][ T4652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2379.437736][T21521] Bluetooth: hci2: command tx timeout [ 2379.458117][ T4652] 8021q: adding VLAN 0 to HW filter on device team0 [ 2379.537458][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 2379.541254][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2379.558107][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 2379.578339][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2380.081216][ T4652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2380.652856][ T4652] veth0_vlan: entered promiscuous mode [ 2380.710453][ T4652] veth1_vlan: entered promiscuous mode [ 2380.767234][ T4652] veth0_macvtap: entered promiscuous mode [ 2380.783498][ T4652] veth1_macvtap: entered promiscuous mode [ 2380.824466][ T4652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2380.843246][ T4652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2380.945476][ T100] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2380.954988][ T100] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2380.966954][ T100] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2380.992098][ T100] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2381.143240][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2381.146898][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2381.173355][ T2609] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2381.180625][ T2609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2381.486502][T21521] Bluetooth: hci2: command tx timeout [ 2381.777587][ T4721] FAULT_INJECTION: forcing a failure. [ 2381.777587][ T4721] name failslab, interval 1, probability 0, space 0, times 0 [ 2381.814481][ T4721] CPU: 3 UID: 0 PID: 4721 Comm: syz.6.7568 Tainted: G L syzkaller #0 PREEMPT(full) [ 2381.814508][ T4721] Tainted: [L]=SOFTLOCKUP [ 2381.814514][ T4721] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2381.814524][ T4721] Call Trace: [ 2381.814530][ T4721] [ 2381.814538][ T4721] dump_stack_lvl+0x100/0x190 [ 2381.814567][ T4721] should_fail_ex.cold+0x5/0xa [ 2381.814588][ T4721] ? tomoyo_encode2+0xfb/0x3c0 [ 2381.814606][ T4721] should_failslab+0xc2/0x120 [ 2381.814624][ T4721] __kmalloc_noprof+0xe0/0x850 [ 2381.814653][ T4721] tomoyo_encode2+0xfb/0x3c0 [ 2381.814675][ T4721] tomoyo_encode+0x29/0x50 [ 2381.814692][ T4721] tomoyo_realpath_from_path+0x18c/0x690 [ 2381.814716][ T4721] tomoyo_path_number_perm+0x23c/0x580 [ 2381.814748][ T4721] ? tomoyo_path_number_perm+0x22e/0x580 [ 2381.814774][ T4721] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2381.814823][ T4721] ? find_held_lock+0x2b/0x80 [ 2381.814838][ T4721] ? hook_file_ioctl_common+0x146/0x410 [ 2381.814863][ T4721] ? __fget_files+0x215/0x3d0 [ 2381.814882][ T4721] ? __fget_files+0x21f/0x3d0 [ 2381.814902][ T4721] security_file_ioctl_compat+0xd3/0x230 [ 2381.814929][ T4721] __ia32_compat_sys_ioctl+0xc2/0x360 [ 2381.814956][ T4721] __do_fast_syscall_32+0xe3/0x8c0 [ 2381.814981][ T4721] do_fast_syscall_32+0x32/0x70 [ 2381.815001][ T4721] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2381.815022][ T4721] RIP: 0023:0xf7fe6f6c [ 2381.815037][ T4721] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 2381.815051][ T4721] RSP: 002b:00000000f548550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 2381.815069][ T4721] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000c040aed5 [ 2381.815078][ T4721] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2381.815088][ T4721] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2381.815097][ T4721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2381.815107][ T4721] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2381.815129][ T4721] [ 2381.815149][ T4721] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2387.905055][ T4733] overlayfs: workdir and upperdir must be separate subtrees [ 2387.981452][ T4733] 9p: Bad value for 'wfdno' [ 2387.988869][ T4733] 9pnet_fd: Insufficient options for proto=fd [ 2388.696878][ T4745] wg1 speed is unknown, defaulting to 1000 [ 2388.996248][T24483] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 2389.032606][ T4750] wg1 speed is unknown, defaulting to 1000 [ 2389.227243][T24483] usb 11-1: Using ep0 maxpacket: 8 [ 2389.388553][T24483] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 2389.396788][T24483] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2389.530819][T24483] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2389.538893][T24483] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2389.556077][T24483] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2389.704146][T24483] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2389.719074][T24483] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2390.450939][T24483] usb 11-1: usb_control_msg returned -32 [ 2390.453552][T24483] usbtmc 11-1:16.0: can't read capabilities [ 2390.952824][ T4775] usbtmc 11-1:16.0: usb_control_msg returned -32 [ 2390.976131][T14169] usb 11-1: USB disconnect, device number 2 [ 2392.260101][ T4791] FAULT_INJECTION: forcing a failure. [ 2392.260101][ T4791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2392.266531][ T4791] CPU: 2 UID: 0 PID: 4791 Comm: syz.5.7584 Tainted: G L syzkaller #0 PREEMPT(full) [ 2392.266560][ T4791] Tainted: [L]=SOFTLOCKUP [ 2392.266566][ T4791] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2392.266576][ T4791] Call Trace: [ 2392.266582][ T4791] [ 2392.266590][ T4791] dump_stack_lvl+0x100/0x190 [ 2392.266618][ T4791] should_fail_ex.cold+0x5/0xa [ 2392.266638][ T4791] _copy_to_user+0x32/0xd0 [ 2392.266657][ T4791] simple_read_from_buffer+0xcb/0x170 [ 2392.266682][ T4791] proc_fail_nth_read+0x1af/0x230 [ 2392.266701][ T4791] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2392.266722][ T4791] ? rw_verify_area+0xce/0x6d0 [ 2392.266743][ T4791] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2392.266762][ T4791] vfs_read+0x1e4/0xb30 [ 2392.266791][ T4791] ? __pfx_vfs_read+0x10/0x10 [ 2392.266812][ T4791] ? find_held_lock+0x2b/0x80 [ 2392.266828][ T4791] ? __fget_files+0x215/0x3d0 [ 2392.266847][ T4791] ? __fget_files+0x21f/0x3d0 [ 2392.266867][ T4791] ksys_read+0x12a/0x250 [ 2392.266891][ T4791] ? __pfx_ksys_read+0x10/0x10 [ 2392.266921][ T4791] do_int80_emulation+0x141/0x6b0 [ 2392.266946][ T4791] asm_int80_emulation+0x1a/0x20 [ 2392.266968][ T4791] RIP: 0023:0xf71c5cab [ 2392.266983][ T4791] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 2392.266997][ T4791] RSP: 002b:00000000f54864bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 2392.267012][ T4791] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f54865d0 [ 2392.267023][ T4791] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 2392.267032][ T4791] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2392.267040][ T4791] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2392.267049][ T4791] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2392.267072][ T4791] [ 2392.489324][ T4793] overlayfs: workdir and upperdir must be separate subtrees [ 2392.551608][ T4794] 9p: Bad value for 'wfdno' [ 2392.568447][ T4794] 9pnet_fd: Insufficient options for proto=fd [ 2396.456611][ T4839] wg1 speed is unknown, defaulting to 1000 [ 2398.225209][ T4848] tmpfs: Unknown parameter 'nr_mnod•@' [ 2399.338902][ T4863] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7596'. [ 2399.575982][T14169] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 2399.750234][ T4871] overlayfs: workdir and upperdir must be separate subtrees [ 2399.922727][ T4869] 9pnet_fd: Insufficient options for proto=fd [ 2401.878734][ T4885] binder: 4875:4885 unknown command 0 [ 2401.881222][ T4885] binder: 4875:4885 ioctl c0306201 80000540 returned -22 [ 2403.095766][T14501] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 2403.255444][T14501] usb 10-1: Using ep0 maxpacket: 8 [ 2403.267860][T14501] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2403.272359][T14501] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2403.328542][T14501] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2403.388864][T14501] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2403.411438][T14501] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2403.415721][T14501] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2403.837936][T14501] usb 10-1: GET_CAPABILITIES returned 0 [ 2403.846046][T14501] usbtmc 10-1:16.0: can't read capabilities [ 2404.093846][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2404.525634][ T2228] usb 10-1: USB disconnect, device number 18 [ 2404.990376][ T40] audit: type=1326 audit(1773167562.041:9646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4894 comm="syz.2.7604" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 2405.010259][ T40] audit: type=1326 audit(1773167562.041:9647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4894 comm="syz.2.7604" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 2406.229264][ T2228] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 2406.964050][ T4917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7608'. [ 2406.989385][ T4917] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7608'. [ 2407.552781][ T4926] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7610'. [ 2407.614127][ T4932] binder: 4928:4932 unknown command 0 [ 2407.622020][ T4932] binder: 4928:4932 ioctl c0306201 80000540 returned -22 [ 2410.731210][ T1411] ieee802154 phy0 wpan0: encryption failed: -22 [ 2410.734413][ T1411] ieee802154 phy1 wpan1: encryption failed: -22 [ 2411.787910][ T2228] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 2412.459390][ T4966] FAULT_INJECTION: forcing a failure. [ 2412.459390][ T4966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2412.531748][ T4966] CPU: 0 UID: 0 PID: 4966 Comm: syz.6.7617 Tainted: G L syzkaller #0 PREEMPT(full) [ 2412.531777][ T4966] Tainted: [L]=SOFTLOCKUP [ 2412.531783][ T4966] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2412.531792][ T4966] Call Trace: [ 2412.531798][ T4966] [ 2412.531804][ T4966] dump_stack_lvl+0x100/0x190 [ 2412.531831][ T4966] should_fail_ex.cold+0x5/0xa [ 2412.531851][ T4966] strncpy_from_user+0x3b/0x2d0 [ 2412.531877][ T4966] do_getname+0x78/0x390 [ 2412.531899][ T4966] do_sys_openat2+0xc5/0x1e0 [ 2412.531918][ T4966] ? __pfx_do_sys_openat2+0x10/0x10 [ 2412.531936][ T4966] ? __fget_files+0x215/0x3d0 [ 2412.531955][ T4966] ? __fget_files+0x21f/0x3d0 [ 2412.531973][ T4966] __ia32_compat_sys_openat+0x12d/0x210 [ 2412.531998][ T4966] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 2412.532023][ T4966] ? __pfx_ksys_write+0x10/0x10 [ 2412.532045][ T4966] __do_fast_syscall_32+0xe3/0x8c0 [ 2412.532072][ T4966] do_fast_syscall_32+0x32/0x70 [ 2412.532094][ T4966] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2412.532115][ T4966] RIP: 0023:0xf7fe6f6c [ 2412.532130][ T4966] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 2412.532146][ T4966] RSP: 002b:00000000f548550c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 2412.532164][ T4966] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000340 [ 2412.532175][ T4966] RDX: 0000000000068c81 RSI: 0000000000000000 RDI: 0000000000000000 [ 2412.532184][ T4966] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2412.532194][ T4966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2412.532204][ T4966] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2412.532227][ T4966] [ 2413.531765][ T4986] binder: 4985:4986 unknown command 0 [ 2413.534750][ T4986] binder: 4985:4986 ioctl c0306201 80000540 returned -22 [ 2413.685911][ T40] audit: type=1326 audit(1773167570.751:9648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4972 comm="syz.5.7618" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5f6c code=0x7ffc0000 [ 2413.710472][ T40] audit: type=1326 audit(1773167570.761:9649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4972 comm="syz.5.7618" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc5f6c code=0x7ffc0000 [ 2413.720013][ T40] audit: type=1326 audit(1773167570.761:9650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4972 comm="syz.5.7618" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5f6c code=0x7ffc0000 [ 2413.746819][ T40] audit: type=1326 audit(1773167570.761:9651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4972 comm="syz.5.7618" exe="/syz-executor" sig=0 arch=40000003 syscall=373 compat=1 ip=0xf7fc5f6c code=0x7ffc0000 [ 2413.757603][ T40] audit: type=1326 audit(1773167570.761:9652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4972 comm="syz.5.7618" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5f6c code=0x7ffc0000 [ 2413.775746][ T40] audit: type=1326 audit(1773167570.761:9653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4972 comm="syz.5.7618" exe="/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7fc5f6c code=0x7ffc0000 [ 2413.785235][ T40] audit: type=1326 audit(1773167570.791:9654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4972 comm="syz.5.7618" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5f6c code=0x7ffc0000 [ 2413.849742][ T40] audit: type=1326 audit(1773167570.921:9655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4972 comm="syz.5.7618" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5f6c code=0x7ffc0000 [ 2413.994445][ T40] audit: type=1326 audit(1773167571.061:9656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4972 comm="syz.5.7618" exe="/syz-executor" sig=0 arch=40000003 syscall=288 compat=1 ip=0xf7fc5f6c code=0x7ffc0000 [ 2414.030937][ T40] audit: type=1326 audit(1773167571.061:9657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4972 comm="syz.5.7618" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5f6c code=0x7ffc0000 [ 2415.597326][ T5017] FAULT_INJECTION: forcing a failure. [ 2415.597326][ T5017] name failslab, interval 1, probability 0, space 0, times 0 [ 2415.630518][ T5017] CPU: 3 UID: 0 PID: 5017 Comm: syz.5.7630 Tainted: G L syzkaller #0 PREEMPT(full) [ 2415.630545][ T5017] Tainted: [L]=SOFTLOCKUP [ 2415.630550][ T5017] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2415.630560][ T5017] Call Trace: [ 2415.630566][ T5017] [ 2415.630573][ T5017] dump_stack_lvl+0x100/0x190 [ 2415.630600][ T5017] should_fail_ex.cold+0x5/0xa [ 2415.630617][ T5017] ? io_cache_alloc_new+0x45/0xe0 [ 2415.630637][ T5017] should_failslab+0xc2/0x120 [ 2415.630653][ T5017] __kmalloc_noprof+0xe0/0x850 [ 2415.630678][ T5017] io_cache_alloc_new+0x45/0xe0 [ 2415.630700][ T5017] io_msg_alloc_async+0x1c3/0x3a0 [ 2415.630719][ T5017] io_sendmsg_prep+0x352/0x520 [ 2415.630740][ T5017] io_submit_sqes+0x99b/0x22f0 [ 2415.630765][ T5017] __do_sys_io_uring_enter+0x9c0/0x1a20 [ 2415.630784][ T5017] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2415.630807][ T5017] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 2415.630828][ T5017] ? fput+0x79/0x100 [ 2415.630853][ T5017] ? ksys_write+0x1ac/0x250 [ 2415.630866][ T5017] ? __pfx_ksys_write+0x10/0x10 [ 2415.630883][ T5017] __do_fast_syscall_32+0xe3/0x8c0 [ 2415.630905][ T5017] do_fast_syscall_32+0x32/0x70 [ 2415.630923][ T5017] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2415.630943][ T5017] RIP: 0023:0xf7fc5f6c [ 2415.630957][ T5017] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 2415.630976][ T5017] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 00000000000001aa [ 2415.630995][ T5017] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000f23 [ 2415.631008][ T5017] RDX: 0000000000000000 RSI: 000000000000000c RDI: 0000000000000000 [ 2415.631018][ T5017] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2415.631028][ T5017] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2415.631038][ T5017] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2415.631060][ T5017] [ 2416.942462][ T5024] binder: 5022:5024 unknown command 0 [ 2416.942484][ T5024] binder: 5022:5024 ioctl c0306201 80000540 returned -22 [ 2417.540570][ T5031] wg1 speed is unknown, defaulting to 1000 [ 2418.038344][ T5049] FAULT_INJECTION: forcing a failure. [ 2418.038344][ T5049] name failslab, interval 1, probability 0, space 0, times 0 [ 2418.044843][ T5049] CPU: 3 UID: 0 PID: 5049 Comm: syz.2.7638 Tainted: G L syzkaller #0 PREEMPT(full) [ 2418.044873][ T5049] Tainted: [L]=SOFTLOCKUP [ 2418.044879][ T5049] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2418.044890][ T5049] Call Trace: [ 2418.044896][ T5049] [ 2418.044904][ T5049] dump_stack_lvl+0x100/0x190 [ 2418.044934][ T5049] should_fail_ex.cold+0x5/0xa [ 2418.044954][ T5049] should_failslab+0xc2/0x120 [ 2418.044972][ T5049] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 2418.044998][ T5049] ? __alloc_skb+0x140/0x710 [ 2418.045020][ T5049] __alloc_skb+0x140/0x710 [ 2418.045038][ T5049] ? __alloc_skb+0x5b7/0x710 [ 2418.045056][ T5049] ? __pfx___alloc_skb+0x10/0x10 [ 2418.045082][ T5049] netlink_alloc_large_skb+0x69/0x150 [ 2418.045105][ T5049] netlink_sendmsg+0x680/0xda0 [ 2418.045129][ T5049] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2418.045153][ T5049] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 2418.045181][ T5049] ____sys_sendmsg+0x9e1/0xb70 [ 2418.045204][ T5049] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2418.045228][ T5049] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2418.045264][ T5049] ___sys_sendmsg+0x190/0x1e0 [ 2418.045293][ T5049] ? __pfx____sys_sendmsg+0x10/0x10 [ 2418.045372][ T5049] __sys_sendmsg+0x170/0x220 [ 2418.045397][ T5049] ? __pfx___sys_sendmsg+0x10/0x10 [ 2418.045426][ T5049] ? __pfx_ksys_write+0x10/0x10 [ 2418.045448][ T5049] __do_fast_syscall_32+0xe3/0x8c0 [ 2418.045475][ T5049] do_fast_syscall_32+0x32/0x70 [ 2418.045498][ T5049] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2418.045528][ T5049] RIP: 0023:0xf70aef6c [ 2418.045544][ T5049] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 2418.045561][ T5049] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 2418.045579][ T5049] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 2418.045590][ T5049] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2418.045600][ T5049] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2418.045611][ T5049] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2418.045621][ T5049] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2418.045644][ T5049] [ 2418.352495][ T5051] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 2419.093814][ T5063] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 2419.637315][ T5071] binder: 5070:5071 unknown command 0 [ 2419.651391][ T5071] binder: 5070:5071 ioctl c0306201 80000540 returned -22 [ 2420.292815][ T5074] FAULT_INJECTION: forcing a failure. [ 2420.292815][ T5074] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2420.311462][ T5074] CPU: 0 UID: 0 PID: 5074 Comm: syz.5.7644 Tainted: G L syzkaller #0 PREEMPT(full) [ 2420.311493][ T5074] Tainted: [L]=SOFTLOCKUP [ 2420.311499][ T5074] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2420.311510][ T5074] Call Trace: [ 2420.311517][ T5074] [ 2420.311526][ T5074] dump_stack_lvl+0x100/0x190 [ 2420.311557][ T5074] should_fail_ex.cold+0x5/0xa [ 2420.311581][ T5074] _copy_from_user+0x2e/0xd0 [ 2420.311603][ T5074] kstrtouint_from_user+0xd6/0x1d0 [ 2420.311626][ T5074] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 2420.311648][ T5074] ? __lock_acquire+0x4a5/0x2630 [ 2420.311675][ T5074] ? lock_acquire+0x1cf/0x380 [ 2420.311702][ T5074] proc_fail_nth_write+0x83/0x220 [ 2420.311727][ T5074] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2420.311753][ T5074] vfs_write+0x2aa/0x1070 [ 2420.311782][ T5074] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2420.311811][ T5074] ? __pfx_vfs_write+0x10/0x10 [ 2420.311835][ T5074] ? find_held_lock+0x2b/0x80 [ 2420.311851][ T5074] ? __fget_files+0x215/0x3d0 [ 2420.311872][ T5074] ? __fget_files+0x21f/0x3d0 [ 2420.312223][ T5074] ksys_write+0x12a/0x250 [ 2420.312243][ T5074] ? __pfx_ksys_write+0x10/0x10 [ 2420.312266][ T5074] do_int80_emulation+0x141/0x6b0 [ 2420.312292][ T5074] asm_int80_emulation+0x1a/0x20 [ 2420.312310][ T5074] RIP: 0023:0xf71c5cab [ 2420.312325][ T5074] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 2420.312342][ T5074] RSP: 002b:00000000f54654bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 2420.312360][ T5074] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54655d0 [ 2420.312372][ T5074] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 2420.312382][ T5074] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2420.312393][ T5074] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2420.312403][ T5074] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2420.312427][ T5074] [ 2420.471952][ T5076] FAULT_INJECTION: forcing a failure. [ 2420.471952][ T5076] name failslab, interval 1, probability 0, space 0, times 0 [ 2420.514751][ T5076] CPU: 2 UID: 0 PID: 5076 Comm: syz.6.7645 Tainted: G L syzkaller #0 PREEMPT(full) [ 2420.514782][ T5076] Tainted: [L]=SOFTLOCKUP [ 2420.514788][ T5076] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2420.514798][ T5076] Call Trace: [ 2420.514804][ T5076] [ 2420.514811][ T5076] dump_stack_lvl+0x100/0x190 [ 2420.514841][ T5076] should_fail_ex.cold+0x5/0xa [ 2420.514861][ T5076] should_failslab+0xc2/0x120 [ 2420.514878][ T5076] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 2420.514902][ T5076] ? __alloc_skb+0x140/0x710 [ 2420.514923][ T5076] __alloc_skb+0x140/0x710 [ 2420.514938][ T5076] ? __alloc_skb+0x5b7/0x710 [ 2420.514955][ T5076] ? __pfx___alloc_skb+0x10/0x10 [ 2420.514987][ T5076] netlink_alloc_large_skb+0x69/0x150 [ 2420.515010][ T5076] netlink_sendmsg+0x680/0xda0 [ 2420.515033][ T5076] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2420.515056][ T5076] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 2420.515082][ T5076] ____sys_sendmsg+0x9e1/0xb70 [ 2420.515102][ T5076] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2420.515123][ T5076] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2420.515153][ T5076] ___sys_sendmsg+0x190/0x1e0 [ 2420.515177][ T5076] ? __pfx____sys_sendmsg+0x10/0x10 [ 2420.515224][ T5076] __sys_sendmsg+0x170/0x220 [ 2420.515243][ T5076] ? __pfx___sys_sendmsg+0x10/0x10 [ 2420.515267][ T5076] ? __pfx_ksys_write+0x10/0x10 [ 2420.515286][ T5076] __do_fast_syscall_32+0xe3/0x8c0 [ 2420.515309][ T5076] do_fast_syscall_32+0x32/0x70 [ 2420.515353][ T5076] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2420.515372][ T5076] RIP: 0023:0xf7fe6f6c [ 2420.515386][ T5076] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 2420.515400][ T5076] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 2420.515416][ T5076] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 2420.515426][ T5076] RDX: 00000000040008c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2420.515435][ T5076] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2420.515443][ T5076] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2420.515451][ T5076] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2420.515471][ T5076] [ 2421.368804][ T5085] wg1 speed is unknown, defaulting to 1000 [ 2423.598156][ T2228] e1000 0000:00:06.0 eth0: Reset adapter [ 2424.069155][ T5120] FAULT_INJECTION: forcing a failure. [ 2424.069155][ T5120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2424.132444][ T5120] CPU: 2 UID: 0 PID: 5120 Comm: syz.4.7658 Tainted: G L syzkaller #0 PREEMPT(full) [ 2424.132477][ T5120] Tainted: [L]=SOFTLOCKUP [ 2424.132483][ T5120] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2424.132494][ T5120] Call Trace: [ 2424.132502][ T5120] [ 2424.132511][ T5120] dump_stack_lvl+0x100/0x190 [ 2424.132543][ T5120] should_fail_ex.cold+0x5/0xa [ 2424.132566][ T5120] _copy_from_user+0x2e/0xd0 [ 2424.132586][ T5120] kstrtouint_from_user+0xd6/0x1d0 [ 2424.132608][ T5120] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 2424.132628][ T5120] ? __lock_acquire+0x4a5/0x2630 [ 2424.132654][ T5120] ? lock_acquire+0x1cf/0x380 [ 2424.132681][ T5120] proc_fail_nth_write+0x83/0x220 [ 2424.132704][ T5120] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2424.132732][ T5120] vfs_write+0x2aa/0x1070 [ 2424.132771][ T5120] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2424.132794][ T5120] ? __pfx_vfs_write+0x10/0x10 [ 2424.132818][ T5120] ? find_held_lock+0x2b/0x80 [ 2424.132835][ T5120] ? __fget_files+0x215/0x3d0 [ 2424.132856][ T5120] ? __fget_files+0x21f/0x3d0 [ 2424.132878][ T5120] ksys_write+0x12a/0x250 [ 2424.132893][ T5120] ? __pfx_ksys_write+0x10/0x10 [ 2424.132917][ T5120] do_int80_emulation+0x141/0x6b0 [ 2424.132944][ T5120] asm_int80_emulation+0x1a/0x20 [ 2424.132963][ T5120] RIP: 0023:0xf7165cab [ 2424.132979][ T5120] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 2424.132996][ T5120] RSP: 002b:00000000f541d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 2424.133014][ T5120] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f541d5d0 [ 2424.133026][ T5120] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 2424.133036][ T5120] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2424.133047][ T5120] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2424.133058][ T5120] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2424.133082][ T5120] [ 2425.816852][ T3243] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 2437.501204][ T5184] binder: 5167:5184 unknown command 0 [ 2437.514995][ T5184] binder: 5167:5184 ioctl c0306201 80000540 returned -22 [ 2437.770738][ T5187] FAULT_INJECTION: forcing a failure. [ 2437.770738][ T5187] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2437.786995][ T5187] CPU: 2 UID: 0 PID: 5187 Comm: syz.6.7669 Tainted: G L syzkaller #0 PREEMPT(full) [ 2437.787025][ T5187] Tainted: [L]=SOFTLOCKUP [ 2437.787031][ T5187] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2437.787041][ T5187] Call Trace: [ 2437.787048][ T5187] [ 2437.787055][ T5187] dump_stack_lvl+0x100/0x190 [ 2437.787085][ T5187] should_fail_ex.cold+0x5/0xa [ 2437.787105][ T5187] _copy_to_user+0x32/0xd0 [ 2437.787122][ T5187] simple_read_from_buffer+0xcb/0x170 [ 2437.787145][ T5187] proc_fail_nth_read+0x1af/0x230 [ 2437.787167][ T5187] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2437.787189][ T5187] ? rw_verify_area+0xce/0x6d0 [ 2437.787212][ T5187] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2437.787233][ T5187] vfs_read+0x1e4/0xb30 [ 2437.787258][ T5187] ? __pfx_vfs_read+0x10/0x10 [ 2437.787289][ T5187] ? find_held_lock+0x2b/0x80 [ 2437.787306][ T5187] ? __fget_files+0x215/0x3d0 [ 2437.787328][ T5187] ? __fget_files+0x21f/0x3d0 [ 2437.787350][ T5187] ksys_read+0x12a/0x250 [ 2437.787375][ T5187] ? __pfx_ksys_read+0x10/0x10 [ 2437.787409][ T5187] do_int80_emulation+0x141/0x6b0 [ 2437.787434][ T5187] asm_int80_emulation+0x1a/0x20 [ 2437.787453][ T5187] RIP: 0023:0xf71e5cab [ 2437.787469][ T5187] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 2437.787486][ T5187] RSP: 002b:00000000f54a64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 2437.787504][ T5187] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54a65d0 [ 2437.787514][ T5187] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 2437.787524][ T5187] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2437.787536][ T5187] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2437.787546][ T5187] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2437.787569][ T5187] [ 2438.986231][T24483] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 2439.155532][T24483] usb 10-1: Using ep0 maxpacket: 8 [ 2439.181362][T24483] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 2439.191725][T24483] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2439.191759][T24483] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2439.191780][T24483] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2439.191802][T24483] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2439.191838][T24483] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2439.191858][T24483] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2439.434268][T24483] usb 10-1: usb_control_msg returned -32 [ 2439.434312][T24483] usbtmc 10-1:16.0: can't read capabilities [ 2440.274846][ T5213] usbtmc 10-1:16.0: usb_control_msg returned -32 [ 2440.281599][T24483] usb 10-1: USB disconnect, device number 19 [ 2442.089242][ T5230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7681'. [ 2444.711113][ T5237] FAULT_INJECTION: forcing a failure. [ 2444.711113][ T5237] name failslab, interval 1, probability 0, space 0, times 0 [ 2444.716822][ T5237] CPU: 2 UID: 0 PID: 5237 Comm: syz.4.7684 Tainted: G L syzkaller #0 PREEMPT(full) [ 2444.716853][ T5237] Tainted: [L]=SOFTLOCKUP [ 2444.716859][ T5237] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2444.716870][ T5237] Call Trace: [ 2444.716878][ T5237] [ 2444.716886][ T5237] dump_stack_lvl+0x100/0x190 [ 2444.716917][ T5237] should_fail_ex.cold+0x5/0xa [ 2444.716940][ T5237] ? sock_kmalloc+0x111/0x170 [ 2444.716968][ T5237] should_failslab+0xc2/0x120 [ 2444.716988][ T5237] __kmalloc_noprof+0xe0/0x850 [ 2444.717012][ T5237] ? do_raw_spin_lock+0x128/0x260 [ 2444.717042][ T5237] sock_kmalloc+0x111/0x170 [ 2444.717070][ T5237] af_alg_alloc_areq+0xbc/0x240 [ 2444.717096][ T5237] skcipher_recvmsg+0x314/0x1020 [ 2444.717132][ T5237] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 2444.717164][ T5237] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 2444.717192][ T5237] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 2444.717219][ T5237] sock_recvmsg+0x1a4/0x1f0 [ 2444.717247][ T5237] ____sys_recvmsg+0x218/0x640 [ 2444.717278][ T5237] ? __pfx_____sys_recvmsg+0x10/0x10 [ 2444.717314][ T5237] ? __lock_acquire+0x4a5/0x2630 [ 2444.717341][ T5237] ___sys_recvmsg+0x16a/0x1a0 [ 2444.717370][ T5237] ? __pfx____sys_recvmsg+0x10/0x10 [ 2444.717421][ T5237] __sys_recvmsg+0x16d/0x220 [ 2444.717444][ T5237] ? __pfx___sys_recvmsg+0x10/0x10 [ 2444.717474][ T5237] ? __pfx_ksys_write+0x10/0x10 [ 2444.717498][ T5237] __do_fast_syscall_32+0xe3/0x8c0 [ 2444.717525][ T5237] do_fast_syscall_32+0x32/0x70 [ 2444.717548][ T5237] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2444.717571][ T5237] RIP: 0023:0xf702ef6c [ 2444.717586][ T5237] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 2444.717602][ T5237] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000174 [ 2444.717620][ T5237] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800005c0 [ 2444.717631][ T5237] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2444.717641][ T5237] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2444.717651][ T5237] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2444.717661][ T5237] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2444.717685][ T5237] [ 2445.075546][ T5240] overlayfs: missing 'lowerdir' [ 2451.035873][T15390] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 2451.245761][T15390] usb 10-1: Using ep0 maxpacket: 8 [ 2451.249870][T15390] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 2451.254008][T15390] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2451.265717][T15390] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2451.270267][T15390] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2451.296825][T15390] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2451.303663][T15390] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2451.375066][T15390] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2451.444477][ T5267] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7693'. [ 2451.479737][ T5267] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7693'. [ 2451.603148][T15390] usb 10-1: usb_control_msg returned -32 [ 2451.614808][T15390] usbtmc 10-1:16.0: can't read capabilities [ 2451.817995][ T5267] netlink: 'syz.2.7693': attribute type 11 has an invalid length. [ 2452.360649][ T5275] binder: 5273:5275 ioctl c02864c3 80000240 returned -22 [ 2452.542384][ T5272] usbtmc 10-1:16.0: usb_control_msg returned -32 [ 2452.547429][T27158] usb 10-1: USB disconnect, device number 20 [ 2453.143441][ T5286] binder: 5281:5286 unknown command 0 [ 2453.194220][ T5286] binder: 5281:5286 ioctl c0306201 80000540 returned -22 [ 2453.511231][T15390] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 2455.367696][ T5320] 9p: Bad value for 'rfdno' [ 2455.714040][ T5334] FAULT_INJECTION: forcing a failure. [ 2455.714040][ T5334] name failslab, interval 1, probability 0, space 0, times 0 [ 2455.725947][ T5330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2455.735931][ T5334] CPU: 0 UID: 0 PID: 5334 Comm: syz.4.7703 Tainted: G L syzkaller #0 PREEMPT(full) [ 2455.735959][ T5334] Tainted: [L]=SOFTLOCKUP [ 2455.735965][ T5334] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2455.735976][ T5334] Call Trace: [ 2455.735982][ T5334] [ 2455.735990][ T5334] dump_stack_lvl+0x100/0x190 [ 2455.736019][ T5334] should_fail_ex.cold+0x5/0xa [ 2455.736039][ T5334] should_failslab+0xc2/0x120 [ 2455.736057][ T5334] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 2455.736082][ T5334] ? __alloc_skb+0x140/0x710 [ 2455.736106][ T5334] __alloc_skb+0x140/0x710 [ 2455.736124][ T5334] ? __alloc_skb+0x5b7/0x710 [ 2455.736142][ T5334] ? __pfx___alloc_skb+0x10/0x10 [ 2455.736166][ T5334] netlink_alloc_large_skb+0x69/0x150 [ 2455.736191][ T5334] netlink_sendmsg+0x680/0xda0 [ 2455.736216][ T5334] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2455.736241][ T5334] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 2455.736270][ T5334] ____sys_sendmsg+0x9e1/0xb70 [ 2455.736304][ T5334] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2455.736329][ T5334] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2455.736363][ T5334] ___sys_sendmsg+0x190/0x1e0 [ 2455.736391][ T5334] ? __pfx____sys_sendmsg+0x10/0x10 [ 2455.736443][ T5334] __sys_sendmsg+0x170/0x220 [ 2455.736463][ T5334] ? __pfx___sys_sendmsg+0x10/0x10 [ 2455.736490][ T5334] ? __pfx_ksys_write+0x10/0x10 [ 2455.736512][ T5334] __do_fast_syscall_32+0xe3/0x8c0 [ 2455.736569][ T5334] do_fast_syscall_32+0x32/0x70 [ 2455.736593][ T5334] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2455.736615][ T5334] RIP: 0023:0xf702ef6c [ 2455.736630][ T5334] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 2455.736646][ T5334] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 2455.736662][ T5334] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000300 [ 2455.736673][ T5334] RDX: 0000000004000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 2455.736683][ T5334] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2455.736693][ T5334] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2455.736702][ T5334] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2455.736724][ T5334] [ 2455.903474][ T5330] batadv_slave_0: entered promiscuous mode [ 2455.951508][ T5334] batadv_slave_0: entered promiscuous mode [ 2464.478131][ T5375] netlink: 'syz.6.7707': attribute type 16 has an invalid length. [ 2464.481959][ T5375] netlink: 156 bytes leftover after parsing attributes in process `syz.6.7707'. [ 2464.494803][ T5375] Cannot find del_set index 0 as target [ 2464.795466][ T2228] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 2464.809968][ T5372] wg1 speed is unknown, defaulting to 1000 [ 2464.928366][ T5385] FAULT_INJECTION: forcing a failure. [ 2464.928366][ T5385] name failslab, interval 1, probability 0, space 0, times 0 [ 2464.934246][ T5385] CPU: 2 UID: 0 PID: 5385 Comm: syz.2.7710 Tainted: G L syzkaller #0 PREEMPT(full) [ 2464.934272][ T5385] Tainted: [L]=SOFTLOCKUP [ 2464.934279][ T5385] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2464.934289][ T5385] Call Trace: [ 2464.934296][ T5385] [ 2464.934303][ T5385] dump_stack_lvl+0x100/0x190 [ 2464.934332][ T5385] should_fail_ex.cold+0x5/0xa [ 2464.934352][ T5385] should_failslab+0xc2/0x120 [ 2464.934371][ T5385] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 2464.934396][ T5385] ? __alloc_skb+0x140/0x710 [ 2464.934420][ T5385] __alloc_skb+0x140/0x710 [ 2464.934437][ T5385] ? __alloc_skb+0x5b7/0x710 [ 2464.934454][ T5385] ? __pfx___alloc_skb+0x10/0x10 [ 2464.934478][ T5385] netlink_alloc_large_skb+0x69/0x150 [ 2464.934502][ T5385] netlink_sendmsg+0x680/0xda0 [ 2464.934528][ T5385] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2464.934553][ T5385] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 2464.934586][ T5385] ____sys_sendmsg+0x9e1/0xb70 [ 2464.934609][ T5385] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2464.934631][ T5385] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2464.934664][ T5385] ___sys_sendmsg+0x190/0x1e0 [ 2464.934691][ T5385] ? __pfx____sys_sendmsg+0x10/0x10 [ 2464.934744][ T5385] __sys_sendmsg+0x170/0x220 [ 2464.934764][ T5385] ? __pfx___sys_sendmsg+0x10/0x10 [ 2464.934790][ T5385] ? __pfx_ksys_write+0x10/0x10 [ 2464.934810][ T5385] __do_fast_syscall_32+0xe3/0x8c0 [ 2464.934836][ T5385] do_fast_syscall_32+0x32/0x70 [ 2464.934857][ T5385] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2464.934879][ T5385] RIP: 0023:0xf70aef6c [ 2464.934894][ T5385] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 2464.934909][ T5385] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 2464.934925][ T5385] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 2464.934936][ T5385] RDX: 0000000004000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 2464.934946][ T5385] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2464.934955][ T5385] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2464.934965][ T5385] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2464.934988][ T5385] [ 2465.105634][ T2228] usb 10-1: Using ep0 maxpacket: 8 [ 2465.130123][ T2228] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 2465.136016][ T2228] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2465.142123][ T2228] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2465.149121][ T2228] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2465.156111][ T2228] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2465.163823][ T2228] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2465.172267][ T2228] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2465.449654][ T2228] usb 10-1: usb_control_msg returned -32 [ 2465.452372][ T2228] usbtmc 10-1:16.0: can't read capabilities [ 2465.796939][ T5393] 9p: Bad value for 'rfdno' [ 2466.008274][ T5396] usbtmc 10-1:16.0: usb_control_msg returned -32 [ 2466.013095][ T3243] usb 10-1: USB disconnect, device number 21 [ 2466.496782][ T5411] netlink: 'syz.6.7713': attribute type 3 has an invalid length. [ 2466.517358][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 2466.517420][ T40] audit: type=1326 audit(1773167623.551:9664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5397 comm="syz.6.7713" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6f6c code=0x7ffc0000 [ 2466.730456][ T40] audit: type=1326 audit(1773167623.551:9665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5397 comm="syz.6.7713" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6f6c code=0x7ffc0000 [ 2466.761337][ T40] audit: type=1326 audit(1773167623.551:9666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5397 comm="syz.6.7713" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7fe6f6c code=0x7ffc0000 [ 2466.879334][ T40] audit: type=1326 audit(1773167623.551:9667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5397 comm="syz.6.7713" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6f6c code=0x7ffc0000 [ 2466.900102][ T40] audit: type=1326 audit(1773167623.551:9668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5397 comm="syz.6.7713" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6f6c code=0x7ffc0000 [ 2466.926021][ T40] audit: type=1326 audit(1773167623.551:9669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5397 comm="syz.6.7713" exe="/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7fe6f6c code=0x7ffc0000 [ 2466.966891][ T40] audit: type=1326 audit(1773167623.551:9670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5397 comm="syz.6.7713" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6f6c code=0x7ffc0000 [ 2467.055074][ T40] audit: type=1326 audit(1773167623.551:9671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5397 comm="syz.6.7713" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6f6c code=0x7ffc0000 [ 2467.074014][ T40] audit: type=1326 audit(1773167623.551:9672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5397 comm="syz.6.7713" exe="/syz-executor" sig=0 arch=40000003 syscall=83 compat=1 ip=0xf7fe6f6c code=0x7ffc0000 [ 2467.105586][ T40] audit: type=1326 audit(1773167623.561:9673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5397 comm="syz.6.7713" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6f6c code=0x7ffc0000 [ 2467.688277][ T5425] input: syz1 as /devices/virtual/input/input211 [ 2469.139762][ T5442] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7723'. [ 2469.520232][ T5436] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 2470.322961][ T5457] wg1 speed is unknown, defaulting to 1000 [ 2470.758598][T14825] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 2470.925902][T14825] usb 11-1: Using ep0 maxpacket: 8 [ 2470.973141][T14825] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 2470.979010][T14825] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2470.984252][T14825] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2471.006941][T14825] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2471.013269][T14825] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2471.106667][T14825] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2471.112179][T14825] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2471.394179][T14825] usb 11-1: usb_control_msg returned -32 [ 2471.400148][T14825] usbtmc 11-1:16.0: can't read capabilities [ 2471.876116][ T5470] binder: 5467:5470 unknown command 0 [ 2471.884211][ T5470] binder: 5467:5470 ioctl c0306201 80000540 returned -22 [ 2471.923252][ T5472] usbtmc 11-1:16.0: usb_control_msg returned -32 [ 2471.928008][ T3317] usb 11-1: USB disconnect, device number 3 [ 2472.137878][ T1411] ieee802154 phy0 wpan0: encryption failed: -22 [ 2472.144055][ T1411] ieee802154 phy1 wpan1: encryption failed: -22 [ 2472.195652][ T5479] FAULT_INJECTION: forcing a failure. [ 2472.195652][ T5479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2472.226779][ T5479] CPU: 1 UID: 0 PID: 5479 Comm: syz.5.7733 Tainted: G L syzkaller #0 PREEMPT(full) [ 2472.226811][ T5479] Tainted: [L]=SOFTLOCKUP [ 2472.226818][ T5479] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2472.226828][ T5479] Call Trace: [ 2472.226835][ T5479] [ 2472.226843][ T5479] dump_stack_lvl+0x100/0x190 [ 2472.226875][ T5479] should_fail_ex.cold+0x5/0xa [ 2472.226896][ T5479] _copy_to_user+0x32/0xd0 [ 2472.226917][ T5479] simple_read_from_buffer+0xcb/0x170 [ 2472.226946][ T5479] proc_fail_nth_read+0x1af/0x230 [ 2472.226968][ T5479] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2472.226997][ T5479] ? rw_verify_area+0xce/0x6d0 [ 2472.227021][ T5479] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2472.227042][ T5479] vfs_read+0x1e4/0xb30 [ 2472.227072][ T5479] ? __pfx_vfs_read+0x10/0x10 [ 2472.227097][ T5479] ? find_held_lock+0x2b/0x80 [ 2472.227114][ T5479] ? __fget_files+0x215/0x3d0 [ 2472.227135][ T5479] ? __fget_files+0x21f/0x3d0 [ 2472.227155][ T5479] ksys_read+0x12a/0x250 [ 2472.227177][ T5479] ? __pfx_ksys_read+0x10/0x10 [ 2472.227209][ T5479] do_int80_emulation+0x141/0x6b0 [ 2472.227233][ T5479] asm_int80_emulation+0x1a/0x20 [ 2472.227251][ T5479] RIP: 0023:0xf71c5cab [ 2472.227266][ T5479] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 2472.227282][ T5479] RSP: 002b:00000000f54654bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 2472.227300][ T5479] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54655d0 [ 2472.227311][ T5479] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 2472.227321][ T5479] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2472.227330][ T5479] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2472.227341][ T5479] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2472.227364][ T5479] [ 2472.390641][ T3243] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 2473.183035][ T5494] FAULT_INJECTION: forcing a failure. [ 2473.183035][ T5494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2473.207915][ T5494] CPU: 2 UID: 0 PID: 5494 Comm: syz.4.7737 Tainted: G L syzkaller #0 PREEMPT(full) [ 2473.207947][ T5494] Tainted: [L]=SOFTLOCKUP [ 2473.207953][ T5494] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2473.207964][ T5494] Call Trace: [ 2473.207969][ T5494] [ 2473.207976][ T5494] dump_stack_lvl+0x100/0x190 [ 2473.208013][ T5494] should_fail_ex.cold+0x5/0xa [ 2473.208033][ T5494] _copy_from_user+0x2e/0xd0 [ 2473.208052][ T5494] get_compat_msghdr+0xb3/0x4b0 [ 2473.208073][ T5494] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2473.208101][ T5494] ___sys_sendmsg+0x1b6/0x1e0 [ 2473.208129][ T5494] ? __pfx____sys_sendmsg+0x10/0x10 [ 2473.208184][ T5494] __sys_sendmsg+0x170/0x220 [ 2473.208206][ T5494] ? __pfx___sys_sendmsg+0x10/0x10 [ 2473.208233][ T5494] ? __pfx_ksys_write+0x10/0x10 [ 2473.208254][ T5494] __do_fast_syscall_32+0xe3/0x8c0 [ 2473.208280][ T5494] do_fast_syscall_32+0x32/0x70 [ 2473.208301][ T5494] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2473.208322][ T5494] RIP: 0023:0xf702ef6c [ 2473.208336][ T5494] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 2473.208350][ T5494] RSP: 002b:00000000f53fc50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 2473.208366][ T5494] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 2473.208376][ T5494] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2473.208387][ T5494] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2473.208397][ T5494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2473.208406][ T5494] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2473.208427][ T5494] [ 2474.144236][ T5509] wg1 speed is unknown, defaulting to 1000 [ 2476.744687][ T5540] FAULT_INJECTION: forcing a failure. [ 2476.744687][ T5540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2476.753285][ T5540] CPU: 0 UID: 0 PID: 5540 Comm: syz.5.7744 Tainted: G L syzkaller #0 PREEMPT(full) [ 2476.753316][ T5540] Tainted: [L]=SOFTLOCKUP [ 2476.753323][ T5540] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2476.753334][ T5540] Call Trace: [ 2476.753342][ T5540] [ 2476.753352][ T5540] dump_stack_lvl+0x100/0x190 [ 2476.753382][ T5540] should_fail_ex.cold+0x5/0xa [ 2476.753406][ T5540] _copy_from_user+0x2e/0xd0 [ 2476.753441][ T5540] sctp_setsockopt+0x8cc/0xb370 [ 2476.753465][ T5540] ? __pfx_aa_sk_perm+0x10/0x10 [ 2476.753482][ T5540] ? __pfx_sctp_setsockopt+0x10/0x10 [ 2476.753507][ T5540] ? aa_sock_opt_perm+0xfe/0x1b0 [ 2476.753527][ T5540] ? sock_common_setsockopt+0x2e/0xf0 [ 2476.753549][ T5540] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 2476.753573][ T5540] do_sock_setsockopt+0xf3/0x1d0 [ 2476.753598][ T5540] __sys_setsockopt+0x119/0x190 [ 2476.753645][ T5540] __ia32_sys_setsockopt+0xbc/0x160 [ 2476.753665][ T5540] ? __do_fast_syscall_32+0x94/0x8c0 [ 2476.753686][ T5540] ? lockdep_hardirqs_on+0x78/0x100 [ 2476.753705][ T5540] __do_fast_syscall_32+0xe3/0x8c0 [ 2476.753727][ T5540] do_fast_syscall_32+0x32/0x70 [ 2476.753746][ T5540] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2476.753766][ T5540] RIP: 0023:0xf7fc5f6c [ 2476.753780][ T5540] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 2476.753795][ T5540] RSP: 002b:00000000f546550c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 2476.753814][ T5540] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000084 [ 2476.753826][ T5540] RDX: 0000000000000077 RSI: 0000000080000180 RDI: 0000000000000008 [ 2476.753837][ T5540] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2476.753848][ T5540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2476.753859][ T5540] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2476.753884][ T5540] [ 2477.532878][ T5553] FAULT_INJECTION: forcing a failure. [ 2477.532878][ T5553] name failslab, interval 1, probability 0, space 0, times 0 [ 2477.650100][ T5553] CPU: 2 UID: 0 PID: 5553 Comm: syz.6.7747 Tainted: G L syzkaller #0 PREEMPT(full) [ 2477.650133][ T5553] Tainted: [L]=SOFTLOCKUP [ 2477.650139][ T5553] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2477.650150][ T5553] Call Trace: [ 2477.650157][ T5553] [ 2477.650165][ T5553] dump_stack_lvl+0x100/0x190 [ 2477.650198][ T5553] should_fail_ex.cold+0x5/0xa [ 2477.650221][ T5553] should_failslab+0xc2/0x120 [ 2477.650241][ T5553] __kmalloc_cache_noprof+0x7a/0x6f0 [ 2477.650265][ T5553] ? uhid_char_write+0x35c/0xfd0 [ 2477.650297][ T5553] uhid_char_write+0x35c/0xfd0 [ 2477.650326][ T5553] ? __pfx_uhid_char_write+0x10/0x10 [ 2477.650351][ T5553] vfs_writev+0x5ea/0xe10 [ 2477.650384][ T5553] ? __pfx_vfs_writev+0x10/0x10 [ 2477.650429][ T5553] ? __fget_files+0x21f/0x3d0 [ 2477.650452][ T5553] ? do_writev+0x28a/0x340 [ 2477.650477][ T5553] do_writev+0x28a/0x340 [ 2477.650504][ T5553] ? __pfx_do_writev+0x10/0x10 [ 2477.650530][ T5553] ? __pfx_ksys_write+0x10/0x10 [ 2477.650552][ T5553] __do_fast_syscall_32+0xe3/0x8c0 [ 2477.650579][ T5553] do_fast_syscall_32+0x32/0x70 [ 2477.650603][ T5553] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2477.650632][ T5553] RIP: 0023:0xf7fe6f6c [ 2477.650649][ T5553] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 2477.650665][ T5553] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000092 [ 2477.650684][ T5553] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000780 [ 2477.650696][ T5553] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 2477.650706][ T5553] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2477.650716][ T5553] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2477.650727][ T5553] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2477.650751][ T5553] [ 2477.795704][T14825] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 2477.810701][ T3243] hid-generic 0000:0000:0004.0014: unknown main item tag 0x0 [ 2477.814138][ T3243] hid-generic 0000:0000:0004.0014: unknown main item tag 0x0 [ 2477.817605][ T3243] hid-generic 0000:0000:0004.0014: unknown main item tag 0x0 [ 2477.820891][ T3243] hid-generic 0000:0000:0004.0014: unknown main item tag 0x0 [ 2477.824138][ T3243] hid-generic 0000:0000:0004.0014: unknown main item tag 0x0 [ 2477.827841][ T3243] hid-generic 0000:0000:0004.0014: unknown main item tag 0x0 [ 2477.830996][ T3243] hid-generic 0000:0000:0004.0014: unknown main item tag 0x0 [ 2477.834308][ T3243] hid-generic 0000:0000:0004.0014: unknown main item tag 0x0 [ 2477.839467][ T3243] hid-generic 0000:0000:0004.0014: unknown main item tag 0x0 [ 2477.843216][ T3243] hid-generic 0000:0000:0004.0014: unknown main item tag 0x0 [ 2477.860183][ T3243] hid-generic 0000:0000:0004.0014: hidraw0: HID v0.03 Device [syz0] on syz1 [ 2477.999474][T14825] usb 7-1: Using ep0 maxpacket: 8 [ 2478.006490][T14825] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 2478.063235][T14825] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2478.111301][T14825] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2478.129736][T14825] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2478.135734][ T5559] netlink: 'syz.6.7750': attribute type 39 has an invalid length. [ 2478.170747][T14825] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2478.177315][T14825] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2478.215208][T14825] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2478.398424][ T5557] fido_id[5557]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2478.510839][T14825] usb 7-1: usb_control_msg returned -32 [ 2478.530500][T14825] usbtmc 7-1:16.0: can't read capabilities [ 2478.973448][ T5565] usbtmc 7-1:16.0: usb_control_msg returned -32 [ 2478.990277][ T2228] usb 7-1: USB disconnect, device number 60 [ 2479.356444][ T5569] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7753'. [ 2479.362527][ T5569] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7753'. [ 2479.622446][T14825] hid-generic 0000:10000000:0004.0015: hidraw0: HID v0.03 Device [syz0] on syz1 [ 2479.720587][ T5574] fido_id[5574]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2480.323907][ T5587] binder: 5584:5587 unknown command 0 [ 2480.328902][ T5587] binder: 5584:5587 ioctl c0306201 80000540 returned -22 [ 2481.729255][ T2228] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 2481.738256][ T5603] No control pipe specified [ 2482.753236][ T3243] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 2483.345884][ T5609] FAULT_INJECTION: forcing a failure. [ 2483.345884][ T5609] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2483.369444][ T5609] CPU: 1 UID: 0 PID: 5609 Comm: syz.5.7765 Tainted: G L syzkaller #0 PREEMPT(full) [ 2483.369472][ T5609] Tainted: [L]=SOFTLOCKUP [ 2483.369478][ T5609] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2483.369488][ T5609] Call Trace: [ 2483.369496][ T5609] [ 2483.369503][ T5609] dump_stack_lvl+0x100/0x190 [ 2483.369532][ T5609] should_fail_ex.cold+0x5/0xa [ 2483.369551][ T5609] _copy_from_user+0x2e/0xd0 [ 2483.369570][ T5609] get_compat_msghdr+0xb3/0x4b0 [ 2483.369615][ T5609] ? _parse_integer_limit+0x17f/0x1d0 [ 2483.369645][ T5609] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2483.369666][ T5609] ? _kstrtoull+0x13c/0x1f0 [ 2483.369687][ T5609] ? __pfx__kstrtoull+0x10/0x10 [ 2483.369711][ T5609] ___sys_sendmsg+0x1b6/0x1e0 [ 2483.369742][ T5609] ? __pfx____sys_sendmsg+0x10/0x10 [ 2483.369768][ T5609] ? __lock_acquire+0x4a5/0x2630 [ 2483.369801][ T5609] ? find_held_lock+0x2b/0x80 [ 2483.369834][ T5609] __sys_sendmmsg+0x2ff/0x430 [ 2483.369859][ T5609] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2483.369889][ T5609] ? __fget_files+0x215/0x3d0 [ 2483.369916][ T5609] ? fput+0x79/0x100 [ 2483.369936][ T5609] ? ksys_write+0x1ac/0x250 [ 2483.369952][ T5609] ? __pfx_ksys_write+0x10/0x10 [ 2483.369971][ T5609] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 2483.369990][ T5609] ? lockdep_hardirqs_on+0x78/0x100 [ 2483.370010][ T5609] __do_fast_syscall_32+0xe3/0x8c0 [ 2483.370033][ T5609] do_fast_syscall_32+0x32/0x70 [ 2483.370054][ T5609] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2483.370077][ T5609] RIP: 0023:0xf7fc5f6c [ 2483.370093][ T5609] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 2483.370109][ T5609] RSP: 002b:00000000f544450c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 2483.370127][ T5609] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000ac0 [ 2483.370139][ T5609] RDX: 00000000801ae9af RSI: 000000000000ff14 RDI: 0000000000000000 [ 2483.370150][ T5609] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2483.370161][ T5609] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2483.370171][ T5609] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2483.370196][ T5609] [ 2485.093796][ T5636] binder: 5635:5636 unknown command 0 [ 2485.096477][ T5636] binder: 5635:5636 ioctl c0306201 80000540 returned -22 [ 2485.227639][ T5651] wg1 speed is unknown, defaulting to 1000 [ 2485.541034][ T5661] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 2487.366049][ T3243] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 2495.291966][ T5713] FAULT_INJECTION: forcing a failure. [ 2495.291966][ T5713] name failslab, interval 1, probability 0, space 0, times 0 [ 2495.313242][ T5716] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7778'. [ 2495.331223][ T5713] CPU: 3 UID: 0 PID: 5713 Comm: syz.2.7780 Tainted: G L syzkaller #0 PREEMPT(full) [ 2495.331254][ T5713] Tainted: [L]=SOFTLOCKUP [ 2495.331261][ T5713] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2495.331271][ T5713] Call Trace: [ 2495.331278][ T5713] [ 2495.331286][ T5713] dump_stack_lvl+0x100/0x190 [ 2495.331318][ T5713] should_fail_ex.cold+0x5/0xa [ 2495.331340][ T5713] should_failslab+0xc2/0x120 [ 2495.331358][ T5713] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 2495.331383][ T5713] ? io_submit_one+0x124/0x1fb0 [ 2495.331408][ T5713] io_submit_one+0x124/0x1fb0 [ 2495.331432][ T5713] ? __lock_acquire+0x4a5/0x2630 [ 2495.331457][ T5713] ? irqentry_exit+0x180/0x670 [ 2495.331479][ T5713] ? lockdep_hardirqs_on+0x78/0x100 [ 2495.331500][ T5713] ? __pfx_io_submit_one+0x10/0x10 [ 2495.331531][ T5713] ? __might_fault+0xc5/0x140 [ 2495.331564][ T5713] ? __ia32_compat_sys_io_submit+0x1a7/0x3b0 [ 2495.331586][ T5713] __ia32_compat_sys_io_submit+0x1a7/0x3b0 [ 2495.331611][ T5713] ? __pfx___ia32_compat_sys_io_submit+0x10/0x10 [ 2495.331639][ T5713] ? __pfx_ksys_write+0x10/0x10 [ 2495.331662][ T5713] __do_fast_syscall_32+0xe3/0x8c0 [ 2495.331689][ T5713] do_fast_syscall_32+0x32/0x70 [ 2495.331713][ T5713] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2495.331737][ T5713] RIP: 0023:0xf70aef6c [ 2495.331753][ T5713] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 2495.331770][ T5713] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000f8 [ 2495.331789][ T5713] RAX: ffffffffffffffda RBX: 00000000f7fde000 RCX: 0000000000000001 [ 2495.331801][ T5713] RDX: 0000000080001240 RSI: 0000000000000000 RDI: 0000000000000000 [ 2495.331812][ T5713] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2495.331823][ T5713] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2495.331833][ T5713] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2495.331857][ T5713] [ 2495.401720][ T5717] syzkaller0: entered promiscuous mode [ 2495.425936][ T5719] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7779'. [ 2495.427755][ T5717] syzkaller0: entered allmulticast mode [ 2496.444787][ T5734] binder: 5720:5734 unknown command 0 [ 2496.449766][ T5734] binder: 5720:5734 ioctl c0306201 80000540 returned -22 [ 2496.525146][ T5738] ipt_rpfilter: unknown options [ 2499.817112][ T5750] Bluetooth: hci2: command 0x0406 tx timeout [ 2503.376210][ T5739] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 2503.524769][ T5729] wg1 speed is unknown, defaulting to 1000 [ 2504.927047][ T3243] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 2505.186909][ T5774] FAULT_INJECTION: forcing a failure. [ 2505.186909][ T5774] name failslab, interval 1, probability 0, space 0, times 0 [ 2505.216549][ T5774] CPU: 1 UID: 0 PID: 5774 Comm: syz.6.7791 Tainted: G L syzkaller #0 PREEMPT(full) [ 2505.216580][ T5774] Tainted: [L]=SOFTLOCKUP [ 2505.216586][ T5774] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2505.216596][ T5774] Call Trace: [ 2505.216603][ T5774] [ 2505.216611][ T5774] dump_stack_lvl+0x100/0x190 [ 2505.216643][ T5774] should_fail_ex.cold+0x5/0xa [ 2505.216664][ T5774] should_failslab+0xc2/0x120 [ 2505.216684][ T5774] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 2505.216710][ T5774] ? io_submit_one+0x124/0x1fb0 [ 2505.216736][ T5774] io_submit_one+0x124/0x1fb0 [ 2505.216758][ T5774] ? __lock_acquire+0x4a5/0x2630 [ 2505.216783][ T5774] ? irqentry_exit+0x180/0x670 [ 2505.216805][ T5774] ? lockdep_hardirqs_on+0x78/0x100 [ 2505.216827][ T5774] ? __pfx_io_submit_one+0x10/0x10 [ 2505.216856][ T5774] ? __might_fault+0xc5/0x140 [ 2505.216886][ T5774] ? __ia32_compat_sys_io_submit+0x1a7/0x3b0 [ 2505.216907][ T5774] __ia32_compat_sys_io_submit+0x1a7/0x3b0 [ 2505.216931][ T5774] ? __pfx___ia32_compat_sys_io_submit+0x10/0x10 [ 2505.216958][ T5774] ? __pfx_ksys_write+0x10/0x10 [ 2505.216980][ T5774] __do_fast_syscall_32+0xe3/0x8c0 [ 2505.217007][ T5774] do_fast_syscall_32+0x32/0x70 [ 2505.217030][ T5774] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2505.217053][ T5774] RIP: 0023:0xf7fe6f6c [ 2505.217067][ T5774] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 2505.217084][ T5774] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 00000000000000f8 [ 2505.217102][ T5774] RAX: ffffffffffffffda RBX: 00000000f7fde000 RCX: 0000000000000001 [ 2505.217114][ T5774] RDX: 0000000080001240 RSI: 0000000000000000 RDI: 0000000000000000 [ 2505.217125][ T5774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2505.217135][ T5774] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2505.217145][ T5774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2505.217170][ T5774] [ 2507.887297][ T3243] usb 11-1: new full-speed USB device number 4 using dummy_hcd [ 2508.000010][ T5834] FAULT_INJECTION: forcing a failure. [ 2508.000010][ T5834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2508.019668][ T5834] CPU: 1 UID: 0 PID: 5834 Comm: syz.4.7801 Tainted: G L syzkaller #0 PREEMPT(full) [ 2508.019697][ T5834] Tainted: [L]=SOFTLOCKUP [ 2508.019704][ T5834] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2508.019713][ T5834] Call Trace: [ 2508.019721][ T5834] [ 2508.019728][ T5834] dump_stack_lvl+0x100/0x190 [ 2508.019757][ T5834] should_fail_ex.cold+0x5/0xa [ 2508.019777][ T5834] _copy_from_user+0x2e/0xd0 [ 2508.019802][ T5834] move_addr_to_kernel+0x65/0x170 [ 2508.019828][ T5834] get_compat_msghdr+0x3ee/0x4b0 [ 2508.019848][ T5834] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2508.019874][ T5834] ___sys_sendmsg+0x1b6/0x1e0 [ 2508.019900][ T5834] ? __pfx____sys_sendmsg+0x10/0x10 [ 2508.019945][ T5834] __sys_sendmsg+0x170/0x220 [ 2508.019967][ T5834] ? __pfx___sys_sendmsg+0x10/0x10 [ 2508.019993][ T5834] ? __pfx_ksys_write+0x10/0x10 [ 2508.020014][ T5834] __do_fast_syscall_32+0xe3/0x8c0 [ 2508.020039][ T5834] do_fast_syscall_32+0x32/0x70 [ 2508.020060][ T5834] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2508.020082][ T5834] RIP: 0023:0xf702ef6c [ 2508.020097][ T5834] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 2508.020113][ T5834] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 2508.020130][ T5834] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000800000c0 [ 2508.020141][ T5834] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 2508.020151][ T5834] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2508.020160][ T5834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2508.020170][ T5834] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2508.020192][ T5834] [ 2508.090947][ T3243] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2508.300970][ T3243] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2508.306171][ T3243] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2508.310955][ T3243] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2508.826041][T15390] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 2509.073702][ T3243] usb 11-1: GET_CAPABILITIES returned 0 [ 2509.482105][ T3243] usbtmc 11-1:16.0: can't read capabilities [ 2510.166099][T14954] usb 11-1: USB disconnect, device number 4 [ 2512.682420][ T5863] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 2512.685431][ T5863] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2512.745628][ T5863] vhci_hcd vhci_hcd.0: Device attached [ 2512.907034][ T5867] vhci_hcd: connection closed [ 2512.933718][ T53] vhci_hcd vhci_hcd.4: stop threads [ 2512.945727][ T53] vhci_hcd vhci_hcd.4: release socket [ 2512.981884][ T53] vhci_hcd vhci_hcd.4: disconnect device [ 2513.361682][ T5875] infiniband sYz0: RDMA CMA: cma_listen_on_dev, error -98 [ 2515.197371][ T5887] 9pnet_fd: Insufficient options for proto=fd [ 2516.089890][ T5896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7816'. [ 2516.094889][ T5896] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7816'. [ 2517.306734][ T5901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7818'. [ 2520.608773][ T5927] FAULT_INJECTION: forcing a failure. [ 2520.608773][ T5927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2520.615899][ T5927] CPU: 1 UID: 0 PID: 5927 Comm: syz.6.7822 Tainted: G L syzkaller #0 PREEMPT(full) [ 2520.615928][ T5927] Tainted: [L]=SOFTLOCKUP [ 2520.615935][ T5927] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2520.615944][ T5927] Call Trace: [ 2520.615953][ T5927] [ 2520.615961][ T5927] dump_stack_lvl+0x100/0x190 [ 2520.615991][ T5927] should_fail_ex.cold+0x5/0xa [ 2520.616011][ T5927] _copy_from_user+0x2e/0xd0 [ 2520.616030][ T5927] move_addr_to_kernel+0x65/0x170 [ 2520.616059][ T5927] __sys_bind+0x11d/0x260 [ 2520.616077][ T5927] ? __pfx___sys_bind+0x10/0x10 [ 2520.616101][ T5927] ? ksys_write+0x1ac/0x250 [ 2520.616118][ T5927] ? __pfx_ksys_write+0x10/0x10 [ 2520.616136][ T5927] __ia32_sys_bind+0x71/0xb0 [ 2520.616152][ T5927] ? lockdep_hardirqs_on+0x78/0x100 [ 2520.616173][ T5927] __do_fast_syscall_32+0xe3/0x8c0 [ 2520.616198][ T5927] do_fast_syscall_32+0x32/0x70 [ 2520.616219][ T5927] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2520.616241][ T5927] RIP: 0023:0xf7fe6f6c [ 2520.616255][ T5927] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 2520.616272][ T5927] RSP: 002b:00000000f546450c EFLAGS: 00000292 ORIG_RAX: 0000000000000169 [ 2520.616289][ T5927] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000000 [ 2520.616299][ T5927] RDX: 0000000000000020 RSI: 0000000000000000 RDI: 0000000000000000 [ 2520.616308][ T5927] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2520.616317][ T5927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2520.616327][ T5927] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2520.616347][ T5927] [ 2520.925949][ T5928] wg1 speed is unknown, defaulting to 1000 [ 2521.341622][ T5932] pimreg: entered allmulticast mode [ 2521.993735][ T5938] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7826'. [ 2522.021709][ T5938] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7826'. [ 2522.366455][ T5940] binder: 5939:5940 ioctl 40046205 0 returned -22 [ 2522.366971][ T5941] binder: 5939:5941 ioctl 40046205 0 returned -22 [ 2522.641330][ T5945] FAULT_INJECTION: forcing a failure. [ 2522.641330][ T5945] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2522.689877][ T5945] CPU: 1 UID: 0 PID: 5945 Comm: syz.5.7828 Tainted: G L syzkaller #0 PREEMPT(full) [ 2522.689909][ T5945] Tainted: [L]=SOFTLOCKUP [ 2522.689915][ T5945] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2522.689925][ T5945] Call Trace: [ 2522.689931][ T5945] [ 2522.689938][ T5945] dump_stack_lvl+0x100/0x190 [ 2522.689968][ T5945] should_fail_ex.cold+0x5/0xa [ 2522.689988][ T5945] strncpy_from_user+0x3b/0x2d0 [ 2522.690017][ T5945] do_getname+0x78/0x390 [ 2522.690039][ T5945] user_path_at+0x26/0x60 [ 2522.690065][ T5945] __ia32_sys_umount+0x109/0x190 [ 2522.690082][ T5945] ? __pfx___ia32_sys_umount+0x10/0x10 [ 2522.690105][ T5945] __do_fast_syscall_32+0xe3/0x8c0 [ 2522.690130][ T5945] do_fast_syscall_32+0x32/0x70 [ 2522.690150][ T5945] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2522.690180][ T5945] RIP: 0023:0xf7fc5f6c [ 2522.690193][ T5945] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 2522.690209][ T5945] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000034 [ 2522.690225][ T5945] RAX: ffffffffffffffda RBX: 00000000800002c0 RCX: 0000000000000009 [ 2522.690236][ T5945] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2522.690246][ T5945] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2522.690256][ T5945] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2522.690265][ T5945] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2522.690286][ T5945] [ 2523.450123][ T5956] wg1 speed is unknown, defaulting to 1000 [ 2523.889671][ T5963] wg1 speed is unknown, defaulting to 1000 [ 2530.352505][ T6011] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7836'. [ 2530.377935][ T6011] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7836'. [ 2532.458715][ T6023] ata1.00: invalid multi_count 128 ignored [ 2533.726000][ T1411] ieee802154 phy0 wpan0: encryption failed: -22 [ 2533.728797][ T1411] ieee802154 phy1 wpan1: encryption failed: -22 [ 2534.245904][ T6030] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 2534.248585][ T6030] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2534.255527][ T6030] vhci_hcd vhci_hcd.0: Device attached [ 2534.458844][ T6034] 9pnet_fd: Insufficient options for proto=fd [ 2534.622990][T14825] usb 50-1: SetAddress Request (2) to port 0 [ 2534.627410][T14825] usb 50-1: new SuperSpeed USB device number 2 using vhci_hcd [ 2534.660946][ T6030] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. syzkaller syzkaller login: [ 2535.222391][ T6038] netlink: 7 bytes leftover after parsing attributes in process `syz.6.7841'. [ 2537.241823][ T40] kauditd_printk_skb: 36 callbacks suppressed [ 2537.241938][ T40] audit: type=1326 audit(1773167694.291:9710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6041 comm="syz.5.7844" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc5f6c code=0x0 [ 2537.812776][ T6050] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7845'. [ 2537.817040][ T6050] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7845'. [ 2537.849510][ T6040] wg1 speed is unknown, defaulting to 1000 [ 2539.066158][ T6031] vhci_hcd: connection reset by peer [ 2539.068796][ T3840] vhci_hcd vhci_hcd.6: stop threads [ 2539.073299][ T3840] vhci_hcd vhci_hcd.6: release socket [ 2539.106081][ T3840] vhci_hcd vhci_hcd.6: disconnect device [ 2539.277624][ T1422] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 2539.708926][ T6058] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 2539.735847][T14825] usb 50-1: device descriptor read/8, error -110 [ 2540.126456][T14825] usb usb50-port1: attempt power cycle [ 2540.640406][ T6077] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7850'. [ 2540.816832][T14825] usb usb50-port1: unable to enumerate USB device [ 2541.704447][ T6074] bridge0: port 2(bridge_slave_1) entered disabled state [ 2541.709048][ T6074] bridge0: port 1(bridge_slave_0) entered disabled state [ 2541.777045][ T6089] binder: 6086:6089 unknown command 0 [ 2541.795663][ T6089] binder: 6086:6089 ioctl c0306201 80000540 returned -22 [ 2542.569505][ T6074] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2542.598422][ T6074] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2543.392297][ T6077] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2543.784131][ T46] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2543.799295][ T5974] syz.2.7831 (5974) used greatest stack depth: 18952 bytes left [ 2543.808659][T15390] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 2543.906951][ T46] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2544.072036][ T46] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2547.693320][ T6124] wg1 speed is unknown, defaulting to 1000 [ 2548.339219][ T6130] binder: 6125:6130 unknown command 0 [ 2548.353057][ T6130] binder: 6125:6130 ioctl c0306201 80000540 returned -22 [ 2550.115614][ T6145] program syz.5.7867 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2550.537469][ T3545] usb 9-1: new high-speed USB device number 68 using dummy_hcd [ 2550.615657][ T6160] netlink: 132 bytes leftover after parsing attributes in process `syz.6.7870'. [ 2550.705458][ T3545] usb 9-1: Using ep0 maxpacket: 8 [ 2550.709621][ T3545] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 2550.713255][ T3545] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2550.717334][ T3545] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2550.738854][ T3545] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2550.743064][ T3545] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2550.765909][ T3545] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2550.771030][ T3545] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2551.267637][ T3545] usb 9-1: usb_control_msg returned -32 [ 2551.272492][ T3545] usbtmc 9-1:16.0: can't read capabilities [ 2551.647397][T15390] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 2551.965720][ T6189] binder: 6183:6189 unknown command 0 [ 2551.979272][ T6189] binder: 6183:6189 ioctl c0306201 80000540 returned -22 [ 2553.146320][ T5488] usb 9-1: USB disconnect, device number 68 [ 2563.707458][ T6207] overlayfs: workdir and upperdir must be separate subtrees [ 2563.713342][ T6206] FAULT_INJECTION: forcing a failure. [ 2563.713342][ T6206] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2563.721469][ T6206] CPU: 3 UID: 0 PID: 6206 Comm: syz.6.7876 Tainted: G L syzkaller #0 PREEMPT(full) [ 2563.721492][ T6206] Tainted: [L]=SOFTLOCKUP [ 2563.721496][ T6206] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2563.721506][ T6206] Call Trace: [ 2563.721512][ T6206] [ 2563.721520][ T6206] dump_stack_lvl+0x100/0x190 [ 2563.721556][ T6206] should_fail_ex.cold+0x5/0xa [ 2563.721579][ T6206] _copy_from_user+0x2e/0xd0 [ 2563.721597][ T6206] input_event_from_user+0x137/0x290 [ 2563.721619][ T6206] ? __pfx_input_event_from_user+0x10/0x10 [ 2563.721642][ T6206] ? input_inject_event+0x1c9/0x3b0 [ 2563.721660][ T6206] evdev_write+0x27a/0x430 [ 2563.721677][ T6206] ? __pfx_evdev_write+0x10/0x10 [ 2563.721693][ T6206] ? bpf_lsm_file_permission+0x9/0x10 [ 2563.721711][ T6206] ? security_file_permission+0x76/0x210 [ 2563.721724][ T6206] ? rw_verify_area+0xce/0x6d0 [ 2563.721742][ T6206] vfs_write+0x2aa/0x1070 [ 2563.721760][ T6206] ? __pfx_evdev_write+0x10/0x10 [ 2563.721776][ T6206] ? __pfx_vfs_write+0x10/0x10 [ 2563.721793][ T6206] ? find_held_lock+0x2b/0x80 [ 2563.721803][ T6206] ? __fget_files+0x215/0x3d0 [ 2563.721813][ T6206] ? __fget_files+0x215/0x3d0 [ 2563.721825][ T6206] ? __fget_files+0x21f/0x3d0 [ 2563.721839][ T6206] ksys_write+0x1f8/0x250 [ 2563.721849][ T6206] ? __pfx_ksys_write+0x10/0x10 [ 2563.721859][ T6206] ? __pfx_ksys_write+0x10/0x10 [ 2563.721872][ T6206] __do_fast_syscall_32+0xe3/0x8c0 [ 2563.721889][ T6206] do_fast_syscall_32+0x32/0x70 [ 2563.721904][ T6206] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2563.721918][ T6206] RIP: 0023:0xf7fe6f6c [ 2563.721928][ T6206] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 2563.721939][ T6206] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 2563.721950][ T6206] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 2563.721957][ T6206] RDX: 00000000000012d8 RSI: 0000000000000000 RDI: 0000000000000000 [ 2563.721964][ T6206] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2563.721971][ T6206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2563.721977][ T6206] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2563.721991][ T6206] [ 2563.807778][ T6214] 9pnet_fd: Insufficient options for proto=fd [ 2563.910913][ T6211] wg1 speed is unknown, defaulting to 1000 [ 2563.915923][T15390] e1000 0000:00:06.0 eth0: Reset adapter [ 2565.461420][ T6252] binder: 6251:6252 unknown command 0 [ 2565.461741][ T6256] wg1 speed is unknown, defaulting to 1000 [ 2565.463166][ T6252] binder: 6251:6252 ioctl c0306201 80000540 returned -22 [ 2565.590708][ T6249] fuse: Bad value for 'user_id' [ 2565.592945][ T6249] fuse: Bad value for 'user_id' [ 2565.599828][ T6262] FAULT_INJECTION: forcing a failure. [ 2565.599828][ T6262] name failslab, interval 1, probability 0, space 0, times 0 [ 2565.603741][ T6262] CPU: 3 UID: 0 PID: 6262 Comm: syz.4.7886 Tainted: G L syzkaller #0 PREEMPT(full) [ 2565.603759][ T6262] Tainted: [L]=SOFTLOCKUP [ 2565.603763][ T6262] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2565.603771][ T6262] Call Trace: [ 2565.603775][ T6262] [ 2565.603780][ T6262] dump_stack_lvl+0x100/0x190 [ 2565.603801][ T6262] should_fail_ex.cold+0x5/0xa [ 2565.603814][ T6262] should_failslab+0xc2/0x120 [ 2565.603827][ T6262] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 2565.603845][ T6262] ? __alloc_skb+0x140/0x710 [ 2565.603860][ T6262] __alloc_skb+0x140/0x710 [ 2565.603872][ T6262] ? __alloc_skb+0x5b7/0x710 [ 2565.603884][ T6262] ? __pfx___alloc_skb+0x10/0x10 [ 2565.603898][ T6262] ? up_write+0x290/0x4f0 [ 2565.603916][ T6262] alloc_skb_with_frags+0xe0/0x810 [ 2565.603937][ T6262] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 2565.603959][ T6262] sock_alloc_send_pskb+0x801/0x980 [ 2565.603975][ T6262] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 2565.603988][ T6262] ? __lock_acquire+0x4a5/0x2630 [ 2565.604007][ T6262] unix_dgram_sendmsg+0x3c7/0x1820 [ 2565.604027][ T6262] ? tomoyo_socket_sendmsg_permission+0x14e/0x3c0 [ 2565.604042][ T6262] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 2565.604057][ T6262] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 2565.604076][ T6262] ? __might_fault+0xc5/0x140 [ 2565.604092][ T6262] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 2565.604111][ T6262] ____sys_sendmsg+0x9e1/0xb70 [ 2565.604127][ T6262] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 2565.604146][ T6262] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2565.604162][ T6262] ? _parse_integer_limit+0x17f/0x1d0 [ 2565.604179][ T6262] ? _kstrtoull+0x13c/0x1f0 [ 2565.604192][ T6262] ? __pfx__kstrtoull+0x10/0x10 [ 2565.604208][ T6262] ___sys_sendmsg+0x190/0x1e0 [ 2565.604227][ T6262] ? __pfx____sys_sendmsg+0x10/0x10 [ 2565.604244][ T6262] ? __lock_acquire+0x4a5/0x2630 [ 2565.604264][ T6262] ? find_held_lock+0x2b/0x80 [ 2565.604282][ T6262] __sys_sendmmsg+0x2ff/0x430 [ 2565.604298][ T6262] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2565.604316][ T6262] ? __fget_files+0x215/0x3d0 [ 2565.604333][ T6262] ? fput+0x79/0x100 [ 2565.604346][ T6262] ? ksys_write+0x1ac/0x250 [ 2565.604356][ T6262] ? __pfx_ksys_write+0x10/0x10 [ 2565.604368][ T6262] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 2565.604382][ T6262] ? lockdep_hardirqs_on+0x78/0x100 [ 2565.604396][ T6262] __do_fast_syscall_32+0xe3/0x8c0 [ 2565.604413][ T6262] do_fast_syscall_32+0x32/0x70 [ 2565.604428][ T6262] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2565.604443][ T6262] RIP: 0023:0xf702ef6c [ 2565.604453][ T6262] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 2565.604464][ T6262] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 2565.604476][ T6262] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800025c0 [ 2565.604483][ T6262] RDX: 00000000d8648e6c RSI: 0000000000008000 RDI: 0000000000000000 [ 2565.604490][ T6262] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2565.604496][ T6262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2565.604503][ T6262] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2565.604517][ T6262] [ 2566.127346][T14337] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 2572.565482][ T40] audit: type=1326 audit(1773167729.631:9711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6290 comm="syz.6.7891" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe6f6c code=0x0 [ 2572.671261][ T6281] wg1 speed is unknown, defaulting to 1000 [ 2574.687593][ T3243] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 2583.477363][ T6347] 9pnet_fd: Insufficient options for proto=fd [ 2584.062956][ T6348] netlink: 27 bytes leftover after parsing attributes in process `syz.6.7893'. [ 2584.768707][ T6356] binder: 6355:6356 unknown command 0 [ 2584.770527][ T6356] binder: 6355:6356 ioctl c0306201 80000540 returned -22 [ 2585.364476][ T40] audit: type=1326 audit(1773167742.431:9712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.6.7902" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe6f6c code=0x0 [ 2585.392799][ T6367] wg1 speed is unknown, defaulting to 1000 [ 2585.395722][T15390] e1000 0000:00:06.0 eth0: Reset adapter [ 2586.365814][T15390] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 2586.802472][ T2228] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 2587.097679][T15390] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 2588.050093][ T6404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7908'. [ 2595.017724][ T1411] ieee802154 phy0 wpan0: encryption failed: -22 [ 2595.020548][ T1411] ieee802154 phy1 wpan1: encryption failed: -22 [ 2595.889626][ T6437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7909'. [ 2602.806585][ T40] audit: type=1326 audit(1773167759.881:9713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.2.7912" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x0 [ 2603.412698][ T6457] wg1 speed is unknown, defaulting to 1000 [ 2603.726839][ T6470] FAULT_INJECTION: forcing a failure. [ 2603.726839][ T6470] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2603.751413][ T6470] CPU: 1 UID: 0 PID: 6470 Comm: syz.5.7916 Tainted: G L syzkaller #0 PREEMPT(full) [ 2603.751435][ T6470] Tainted: [L]=SOFTLOCKUP [ 2603.751439][ T6470] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2603.751447][ T6470] Call Trace: [ 2603.751451][ T6470] [ 2603.751456][ T6470] dump_stack_lvl+0x100/0x190 [ 2603.751478][ T6470] should_fail_ex.cold+0x5/0xa [ 2603.751492][ T6470] _copy_to_user+0x32/0xd0 [ 2603.751505][ T6470] simple_read_from_buffer+0xcb/0x170 [ 2603.751524][ T6470] proc_fail_nth_read+0x1af/0x230 [ 2603.751539][ T6470] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2603.751554][ T6470] ? rw_verify_area+0xce/0x6d0 [ 2603.751570][ T6470] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2603.751584][ T6470] vfs_read+0x1e4/0xb30 [ 2603.751603][ T6470] ? __pfx_vfs_read+0x10/0x10 [ 2603.751620][ T6470] ? find_held_lock+0x2b/0x80 [ 2603.751631][ T6470] ? __fget_files+0x215/0x3d0 [ 2603.751644][ T6470] ? __fget_files+0x21f/0x3d0 [ 2603.751658][ T6470] ksys_read+0x12a/0x250 [ 2603.751676][ T6470] ? __pfx_ksys_read+0x10/0x10 [ 2603.751698][ T6470] do_int80_emulation+0x141/0x6b0 [ 2603.751716][ T6470] asm_int80_emulation+0x1a/0x20 [ 2603.751728][ T6470] RIP: 0023:0xf71c5cab [ 2603.751737][ T6470] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 2603.751748][ T6470] RSP: 002b:00000000f54864bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 2603.751760][ T6470] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54865d0 [ 2603.751766][ T6470] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 2603.751773][ T6470] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2603.751779][ T6470] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2603.751785][ T6470] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2603.751799][ T6470] [ 2605.325968][ T6422] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 2613.440643][ T6503] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7918'. [ 2614.000295][ T6526] FAULT_INJECTION: forcing a failure. [ 2614.000295][ T6526] name failslab, interval 1, probability 0, space 0, times 0 [ 2614.004277][ T6526] CPU: 0 UID: 0 PID: 6526 Comm: syz.5.7923 Tainted: G L syzkaller #0 PREEMPT(full) [ 2614.004295][ T6526] Tainted: [L]=SOFTLOCKUP [ 2614.004299][ T6526] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2614.004306][ T6526] Call Trace: [ 2614.004310][ T6526] [ 2614.004315][ T6526] dump_stack_lvl+0x100/0x190 [ 2614.004335][ T6526] should_fail_ex.cold+0x5/0xa [ 2614.004349][ T6526] should_failslab+0xc2/0x120 [ 2614.004361][ T6526] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 2614.004378][ T6526] ? security_inode_alloc+0x3b/0x2c0 [ 2614.004395][ T6526] ? lockdep_init_map_type+0x5c/0x250 [ 2614.004413][ T6526] security_inode_alloc+0x3b/0x2c0 [ 2614.004430][ T6526] inode_init_always_gfp+0xced/0x1040 [ 2614.004444][ T6526] alloc_inode+0x8e/0x250 [ 2614.004459][ T6526] sock_alloc+0x44/0x280 [ 2614.004475][ T6526] do_accept+0xf9/0x530 [ 2614.004486][ T6526] ? do_raw_spin_lock+0x128/0x260 [ 2614.004503][ T6526] ? __pfx_do_accept+0x10/0x10 [ 2614.004523][ T6526] __sys_accept4+0x108/0x200 [ 2614.004535][ T6526] ? __pfx___sys_accept4+0x10/0x10 [ 2614.004546][ T6526] ? fput+0x79/0x100 [ 2614.004558][ T6526] ? ksys_write+0x1ac/0x250 [ 2614.004568][ T6526] ? __pfx_ksys_write+0x10/0x10 [ 2614.004580][ T6526] __ia32_sys_accept4+0x94/0x100 [ 2614.004591][ T6526] ? lockdep_hardirqs_on+0x78/0x100 [ 2614.004605][ T6526] __do_fast_syscall_32+0xe3/0x8c0 [ 2614.004622][ T6526] do_fast_syscall_32+0x32/0x70 [ 2614.004637][ T6526] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2614.004652][ T6526] RIP: 0023:0xf7fc5f6c [ 2614.004662][ T6526] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 2614.004673][ T6526] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 000000000000016c [ 2614.004684][ T6526] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 2614.004691][ T6526] RDX: 0000000000000000 RSI: 0000000000000800 RDI: 0000000000000000 [ 2614.004697][ T6526] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2614.004704][ T6526] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2614.004710][ T6526] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2614.004727][ T6526] [ 2614.010901][ T1422] ================================================================== [ 2614.080115][ T1422] BUG: KASAN: slab-use-after-free in l2cap_sock_ready_cb+0x191/0x1a0 [ 2614.082997][ T1422] Read of size 8 at addr ffff888023e59188 by task kworker/u33:1/1422 [ 2614.088009][ T1422] [ 2614.089093][ T1422] CPU: 2 UID: 0 PID: 1422 Comm: kworker/u33:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 2614.089122][ T1422] Tainted: [L]=SOFTLOCKUP [ 2614.089130][ T1422] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2614.089144][ T1422] Workqueue: hci0 hci_rx_work [ 2614.089165][ T1422] Call Trace: [ 2614.089172][ T1422] [ 2614.089180][ T1422] dump_stack_lvl+0x100/0x190 [ 2614.089209][ T1422] print_report+0x156/0x4c9 [ 2614.089237][ T1422] ? __virt_addr_valid+0x81/0x620 [ 2614.089260][ T1422] ? __phys_addr+0xe8/0x180 [ 2614.089283][ T1422] ? l2cap_sock_ready_cb+0x191/0x1a0 [ 2614.089303][ T1422] kasan_report+0xdf/0x1e0 [ 2614.089323][ T1422] ? l2cap_sock_ready_cb+0x191/0x1a0 [ 2614.089347][ T1422] l2cap_sock_ready_cb+0x191/0x1a0 [ 2614.089368][ T1422] l2cap_le_start+0x1ea/0xea0 [ 2614.089395][ T1422] ? __pfx___mutex_lock+0x10/0x10 [ 2614.089417][ T1422] ? l2cap_global_fixed_chan+0x26f/0x3b0 [ 2614.089446][ T1422] ? __pfx_l2cap_le_start+0x10/0x10 [ 2614.089474][ T1422] ? do_raw_read_unlock+0x3f/0x70 [ 2614.089501][ T1422] ? __pfx_l2cap_global_fixed_chan+0x10/0x10 [ 2614.089531][ T1422] ? __l2cap_chan_add+0x486/0xa80 [ 2614.089561][ T1422] l2cap_connect_cfm+0x8ce/0x1050 [ 2614.089582][ T1422] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 2614.089602][ T1422] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 2614.089620][ T1422] le_conn_complete_evt+0x195c/0x1f40 [ 2614.089641][ T1422] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 2614.089663][ T1422] hci_le_conn_complete_evt+0x23c/0x3a0 [ 2614.089682][ T1422] ? skb_pull_data+0x15f/0x1e0 [ 2614.089711][ T1422] hci_le_meta_evt+0x34a/0x5f0 [ 2614.089732][ T1422] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 2614.089752][ T1422] hci_event_packet+0x682/0x11c0 [ 2614.089777][ T1422] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 2614.089801][ T1422] ? __pfx_hci_event_packet+0x10/0x10 [ 2614.089821][ T1422] ? kcov_remote_start+0x374/0x660 [ 2614.089839][ T1422] ? lockdep_hardirqs_on+0x78/0x100 [ 2614.089864][ T1422] hci_rx_work+0x451/0xfc0 [ 2614.089887][ T1422] process_one_work+0x9d7/0x1920 [ 2614.089919][ T1422] ? __pfx_process_one_work+0x10/0x10 [ 2614.089949][ T1422] ? __pfx_hci_rx_work+0x10/0x10 [ 2614.089967][ T1422] worker_thread+0x5da/0xe40 [ 2614.089995][ T1422] ? __pfx_worker_thread+0x10/0x10 [ 2614.090021][ T1422] ? kthread+0x13a/0x450 [ 2614.090044][ T1422] ? __pfx_worker_thread+0x10/0x10 [ 2614.090069][ T1422] kthread+0x370/0x450 [ 2614.090092][ T1422] ? __pfx_kthread+0x10/0x10 [ 2614.090129][ T1422] ret_from_fork+0x754/0xd80 [ 2614.090159][ T1422] ? __pfx_ret_from_fork+0x10/0x10 [ 2614.090187][ T1422] ? native_load_gs_index+0x1e/0xc0 [ 2614.090207][ T1422] ? __switch_to+0x7b4/0x1120 [ 2614.090228][ T1422] ? __pfx_kthread+0x10/0x10 [ 2614.090254][ T1422] ret_from_fork_asm+0x1a/0x30 [ 2614.090280][ T1422] [ 2614.090287][ T1422] [ 2614.205958][ T1422] Allocated by task 6526: [ 2614.207839][ T1422] kasan_save_stack+0x30/0x50 [ 2614.209425][ T1422] kasan_save_track+0x14/0x30 [ 2614.210976][ T1422] __kasan_kmalloc+0xaa/0xb0 [ 2614.212529][ T1422] __kmalloc_noprof+0x301/0x850 [ 2614.214141][ T1422] sk_prot_alloc+0x10b/0x2a0 [ 2614.215668][ T1422] sk_alloc+0x36/0xe80 [ 2614.217063][ T1422] bt_sock_alloc+0x3b/0x3a0 [ 2614.218920][ T1422] l2cap_sock_alloc.constprop.0+0x33/0x1e0 [ 2614.221521][ T1422] l2cap_sock_create+0x123/0x210 [ 2614.223721][ T1422] bt_sock_create+0x185/0x350 [ 2614.225808][ T1422] __sock_create+0x339/0x860 [ 2614.227821][ T1422] __sys_socket+0x14d/0x260 [ 2614.229806][ T1422] __ia32_sys_socket+0x72/0xb0 [ 2614.231850][ T1422] __do_fast_syscall_32+0xe3/0x8c0 [ 2614.234054][ T1422] do_fast_syscall_32+0x32/0x70 [ 2614.236167][ T1422] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2614.238821][ T1422] [ 2614.239890][ T1422] Freed by task 6525: [ 2614.241640][ T1422] kasan_save_stack+0x30/0x50 [ 2614.243700][ T1422] kasan_save_track+0x14/0x30 [ 2614.245751][ T1422] kasan_save_free_info+0x3b/0x70 [ 2614.247927][ T1422] __kasan_slab_free+0x5f/0x80 [ 2614.249706][ T1422] kfree+0x1f6/0x6b0 [ 2614.250961][ T1422] __sk_destruct+0x8ab/0xbb0 [ 2614.252420][ T1422] sk_destruct+0xc8/0xf0 [ 2614.253771][ T1422] __sk_free+0xf4/0x3e0 [ 2614.255150][ T1422] sk_free+0x61/0x90 [ 2614.256409][ T1422] l2cap_sock_kill+0x176/0x310 [ 2614.257931][ T1422] l2cap_sock_release+0x1cb/0x280 [ 2614.259492][ T1422] __sock_release+0xb3/0x260 [ 2614.260965][ T1422] sock_close+0x1c/0x30 [ 2614.262309][ T1422] __fput+0x3ff/0xb40 [ 2614.263575][ T1422] task_work_run+0x150/0x240 [ 2614.265067][ T1422] exit_to_user_mode_loop+0x100/0x4a0 [ 2614.266756][ T1422] __do_fast_syscall_32+0x578/0x8c0 [ 2614.268412][ T1422] do_fast_syscall_32+0x32/0x70 [ 2614.269966][ T1422] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2614.271912][ T1422] [ 2614.272688][ T1422] The buggy address belongs to the object at ffff888023e59000 [ 2614.272688][ T1422] which belongs to the cache kmalloc-2k of size 2048 [ 2614.277075][ T1422] The buggy address is located 392 bytes inside of [ 2614.277075][ T1422] freed 2048-byte region [ffff888023e59000, ffff888023e59800) [ 2614.281435][ T1422] [ 2614.282229][ T1422] The buggy address belongs to the physical page: [ 2614.284227][ T1422] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x23e58 [ 2614.286956][ T1422] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2614.289680][ T1422] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 2614.292060][ T1422] page_type: f5(slab) [ 2614.293327][ T1422] raw: 00fff00000000040 ffff88801b842f00 dead000000000100 dead000000000122 [ 2614.295981][ T1422] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 2614.298663][ T1422] head: 00fff00000000040 ffff88801b842f00 dead000000000100 dead000000000122 [ 2614.301372][ T1422] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 2614.304072][ T1422] head: 00fff00000000003 ffffea00008f9601 00000000ffffffff 00000000ffffffff [ 2614.306782][ T1422] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 2614.309570][ T1422] page dumped because: kasan: bad access detected [ 2614.311611][ T1422] page_owner tracks the page as allocated [ 2614.313392][ T1422] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5936, tgid 5936 (syz-executor), ts 54958353179, free_ts 54741423549 [ 2614.319757][ T1422] post_alloc_hook+0x153/0x170 [ 2614.321280][ T1422] get_page_from_freelist+0x111d/0x3140 [ 2614.323046][ T1422] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 2614.324895][ T1422] new_slab+0xa6/0x6c0 [ 2614.326201][ T1422] refill_objects+0x26b/0x400 [ 2614.327694][ T1422] __pcs_replace_empty_main+0x1ab/0x600 [ 2614.329451][ T1422] __kmalloc_node_track_caller_noprof+0x694/0x850 [ 2614.331533][ T1422] kmalloc_reserve+0xe8/0x350 [ 2614.333098][ T1422] pskb_expand_head+0x246/0xfe0 [ 2614.334678][ T1422] netlink_trim+0x22d/0x2f0 [ 2614.336165][ T1422] netlink_broadcast_filtered+0xd7/0xf50 [ 2614.337994][ T1422] nlmsg_notify+0xb1/0x290 [ 2614.339419][ T1422] rtmsg_ifinfo+0x177/0x1b0 [ 2614.340915][ T1422] __dev_notify_flags+0x24c/0x2e0 [ 2614.342546][ T1422] netif_change_flags+0x108/0x160 [ 2614.344170][ T1422] do_setlink.isra.0+0x1abb/0x3e50 [ 2614.345813][ T1422] page last free pid 6017 tgid 6017 stack trace: [ 2614.347841][ T1422] __free_frozen_pages+0x7e1/0x10d0 [ 2614.349501][ T1422] qlist_free_all+0x47/0xe0 [ 2614.350977][ T1422] kasan_quarantine_reduce+0x1a0/0x1f0 [ 2614.352745][ T1422] __kasan_slab_alloc+0x69/0x90 [ 2614.354341][ T1422] kmem_cache_alloc_noprof+0x241/0x6e0 [ 2614.356126][ T1422] do_getname+0x35/0x390 [ 2614.357534][ T1422] do_faccessat+0x115/0xc10 [ 2614.359039][ T1422] __x64_sys_access+0x5b/0x80 [ 2614.360579][ T1422] do_syscall_64+0x106/0xf80 [ 2614.362115][ T1422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2614.364041][ T1422] [ 2614.364848][ T1422] Memory state around the buggy address: [ 2614.366665][ T1422] ffff888023e59080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2614.369258][ T1422] ffff888023e59100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2614.371831][ T1422] >ffff888023e59180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2614.374418][ T1422] ^ [ 2614.375845][ T1422] ffff888023e59200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2614.378447][ T1422] ffff888023e59280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2614.381041][ T1422] ================================================================== [ 2614.409129][ T1422] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2614.411732][ T1422] CPU: 2 UID: 0 PID: 1422 Comm: kworker/u33:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 2614.415456][ T1422] Tainted: [L]=SOFTLOCKUP [ 2614.416950][ T1422] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2614.420228][ T1422] Workqueue: hci0 hci_rx_work [ 2614.421793][ T1422] Call Trace: [ 2614.422905][ T1422] [ 2614.423910][ T1422] dump_stack_lvl+0x100/0x190 [ 2614.425482][ T1422] vpanic+0x552/0x970 [ 2614.426802][ T1422] ? __pfx_vpanic+0x10/0x10 [ 2614.428324][ T1422] ? l2cap_sock_ready_cb+0x191/0x1a0 [ 2614.429967][ T1422] panic+0xd1/0xe0 [ 2614.431214][ T1422] ? __pfx_panic+0x10/0x10 [ 2614.432690][ T1422] ? l2cap_sock_ready_cb+0x191/0x1a0 [ 2614.434529][ T1422] ? preempt_schedule_common+0x42/0xc0 [ 2614.436335][ T1422] check_panic_on_warn.cold+0x19/0x34 [ 2614.438156][ T1422] end_report.part.0+0x3a/0x90 [ 2614.439730][ T1422] kasan_report.cold+0xe/0x18 [ 2614.441289][ T1422] ? l2cap_sock_ready_cb+0x191/0x1a0 [ 2614.443087][ T1422] l2cap_sock_ready_cb+0x191/0x1a0 [ 2614.444752][ T1422] l2cap_le_start+0x1ea/0xea0 [ 2614.446316][ T1422] ? __pfx___mutex_lock+0x10/0x10 [ 2614.447952][ T1422] ? l2cap_global_fixed_chan+0x26f/0x3b0 [ 2614.449865][ T1422] ? __pfx_l2cap_le_start+0x10/0x10 [ 2614.451562][ T1422] ? do_raw_read_unlock+0x3f/0x70 [ 2614.453226][ T1422] ? __pfx_l2cap_global_fixed_chan+0x10/0x10 [ 2614.455200][ T1422] ? __l2cap_chan_add+0x486/0xa80 [ 2614.456860][ T1422] l2cap_connect_cfm+0x8ce/0x1050 [ 2614.458523][ T1422] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 2614.460301][ T1422] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 2614.462097][ T1422] le_conn_complete_evt+0x195c/0x1f40 [ 2614.463856][ T1422] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 2614.465714][ T1422] hci_le_conn_complete_evt+0x23c/0x3a0 [ 2614.467544][ T1422] ? skb_pull_data+0x15f/0x1e0 [ 2614.469130][ T1422] hci_le_meta_evt+0x34a/0x5f0 [ 2614.470713][ T1422] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 2614.472696][ T1422] hci_event_packet+0x682/0x11c0 [ 2614.474346][ T1422] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 2614.476086][ T1422] ? __pfx_hci_event_packet+0x10/0x10 [ 2614.477853][ T1422] ? kcov_remote_start+0x374/0x660 [ 2614.479489][ T1422] ? lockdep_hardirqs_on+0x78/0x100 [ 2614.481191][ T1422] hci_rx_work+0x451/0xfc0 [ 2614.482657][ T1422] process_one_work+0x9d7/0x1920 [ 2614.484290][ T1422] ? __pfx_process_one_work+0x10/0x10 [ 2614.486046][ T1422] ? __pfx_hci_rx_work+0x10/0x10 [ 2614.487657][ T1422] worker_thread+0x5da/0xe40 [ 2614.489202][ T1422] ? __pfx_worker_thread+0x10/0x10 [ 2614.490880][ T1422] ? kthread+0x13a/0x450 [ 2614.492279][ T1422] ? __pfx_worker_thread+0x10/0x10 [ 2614.493961][ T1422] kthread+0x370/0x450 [ 2614.495320][ T1422] ? __pfx_kthread+0x10/0x10 [ 2614.496852][ T1422] ret_from_fork+0x754/0xd80 [ 2614.498371][ T1422] ? __pfx_ret_from_fork+0x10/0x10 [ 2614.500045][ T1422] ? native_load_gs_index+0x1e/0xc0 [ 2614.501746][ T1422] ? __switch_to+0x7b4/0x1120 [ 2614.503292][ T1422] ? __pfx_kthread+0x10/0x10 [ 2614.504862][ T1422] ret_from_fork_asm+0x1a/0x30 [ 2614.506437][ T1422] [ 2614.508191][ T1422] Kernel Offset: disabled [ 2614.509614][ T1422] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:36:11 Registers: info registers vcpu 0 CPU#0 RAX=0000000000070b79 RBX=0000000000000011 RCX=ffffc9000d4c1000 RDX=0000000000080000 RSI=ffffffff81fbdbb7 RDI=ffff888029f24980 RBP=ffffc90006667c38 RSP=ffffc90006667ae0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=1ffff92000cccf64 R13=0000000000000001 R14=ffff88802b43c240 R15=ffff88802b43c388 RIP=ffffffff81fbdbc0 RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88809714d000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f53fb4d1140 CR3=000000004e83b000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=53e7d393ae866509 34ad77e2888a8c52 53e7d393ae866509 34ad77e2888a8c52 53e7d393ae866509 34ad77e2888a8c52 53e7d393ae866509 34ad77e2888a8c52 ZMM18=c275a2889c9646cb b5deb44353484a3d c275a2889c9646cb b5deb44353484a3d c275a2889c9646cb b5deb44353484a3d c275a2889c9646cb b5deb44353484a3d ZMM19=2f64000000000000 0000000000000005 2f64000000000000 0000000000000004 2f64000000000000 0000000000000003 2f64000000000000 0000000000000002 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300000000000016 000000080004000b 000c00080b000000 00000017fffffff4 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03000000ffffffc6 000003e600000008 0004000000080008 0000001400000020 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000003800000048 0000005800000068 0000000600000000 000000000000010b ZMM24=c95f6a60c95f6a60 c95f6a60c95f6a60 c95f6a60c95f6a60 c95f6a60c95f6a60 c95f6a60c95f6a60 c95f6a60c95f6a60 c95f6a60c95f6a60 c95f6a60c95f6a60 ZMM25=3538605435386054 3538605435386054 3538605435386054 3538605435386054 3538605435386054 3538605435386054 3538605435386054 3538605435386054 ZMM26=160f588b160f588b 160f588b160f588b 160f588b160f588b 160f588b160f588b 160f588b160f588b 160f588b160f588b 160f588b160f588b 160f588b160f588b ZMM27=bd9d3990bd9d3990 bd9d3990bd9d3990 bd9d3990bd9d3990 bd9d3990bd9d3990 bd9d3990bd9d3990 bd9d3990bd9d3990 bd9d3990bd9d3990 bd9d3990bd9d3990 ZMM28=000000300000002f 0000002e0000002d 0000002c0000002b 0000002a00000029 0000002800000027 0000002600000025 0000002400000023 0000002200000021 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=6e3c00006e3c0000 6e3c00006e3c0000 6e3c00006e3c0000 6e3c00006e3c0000 6e3c00006e3c0000 6e3c00006e3c0000 6e3c00006e3c0000 6e3c00006e3c0000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=ffff88801e0e6360 RCX=ffffffff82b689db RDX=1ffff11003ad90fd RSI=000000000000000c RDI=ffff88801e0e6360 RBP=0000000000000001 RSP=ffffc90006447938 R8 =0000000000000003 R9 =0000000000000001 R10=0000000000000001 R11=0000000000000000 R12=ffff88801d6c8780 R13=ffff88801d6c8780 R14=ffffffff82b68c00 R15=ffff88801e0e6362 RIP=ffffffff828f9df0 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f53fbbb7880 ffffffff 00c09300 DPL=0 DS [-WA] GS =0000 ffff88809724d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000057278000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000000000000 Opmask02=00000000bfdfdfdf Opmask03=0000000010400004 Opmask04=00000000ffffffbf Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d766b2f6373696d 2f6c617574726976 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555fff8cdb0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555fff9e640 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f53fb5f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffff00ff ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff0000ff000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0000 ffffff000000ff00 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 759742e5821886b8 73732623d9d5a33d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737182 7373734243417343 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 007325203a656c69 66207974706d6520 676e697070696b53 006572005b3f2a00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 005600051f40494c 43055c5155484005 424b4c55554c4e53 004057005b1a0f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555fffa28e0 00005555fff93f60 00005555fff91520 00005555fff7ad20 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7766736c6d612c38 2c312c30722c4339 312c3739312c3938 312c3838312c3538 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312c3937312c3136 312c3131312c3031 312c32452c34442c 30442c45412c3841 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c34412c42382c30 382c33372c32372c 31376b2c34312c32 2c312c30652d3033 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4442654344464670 3243353176333030 30623a7475706e69 3d5341494c41444f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000006b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85773655 RDI=ffffffff9b48b080 RBP=ffffffff9b48b040 RSP=ffffc90002d87108 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6533323038386552 R12=0000000000000000 R13=000000000000006b R14=0000000000000010 R15=ffffffff857735f0 RIP=ffffffff8577367f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809734d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7fba190 CR3=000000004e218000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefeffd0 Opmask01=0000000000000003 Opmask02=00000000ffff7fdf Opmask03=0000000010400004 Opmask04=00000000ffffffbf Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555fff9a9e0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f53fb5f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0000 ffffff000000ff00 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 759742e5821886b8 73732623d9d5a33d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737182 7373734243417343 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3130323a30696368 2f306963682f6874 6f6f7465756c622f 6c6175747269762f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 005600051f40494c 43055c5155484005 424b4c55554c4e53 004057005b1a0f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555fff8ad30 00005555fff8ec68 0000000000000041 0000000000000034 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7766736c6d612c38 2c312c30722c4339 312c3739312c3938 312c3838312c3538 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312c3937312c3136 312c3131312c3031 312c32452c34442c 30442c45412c3841 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c34412c42382c30 382c33372c32372c 31376b2c34312c32 2c312c30652d3033 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4442654344464670 3243353176333030 30623a7475706e69 3d5341494c41444f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000002 RCX=ffffffff81fbbe52 RDX=0000000000000001 RSI=0000000000000000 RDI=ffff8880211aa4c0 RBP=ffff88802b442c60 RSP=ffffc90000bd7870 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000003 R13=ffffed100568858d R14=0000000000000001 R15=ffff88802b53c500 RIP=ffffffff82081640 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809744d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73983f4 CR3=000000000e598000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000