last executing test programs: 4m30.763855494s ago: executing program 2 (id=2436): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r4, 0x53, 0x0) write$binfmt_script(r4, &(0x7f0000000640)={'#! ', './file0'}, 0xb) tee(r3, r2, 0x9, 0x8) 4m30.664533479s ago: executing program 2 (id=2437): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6616, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000080)={0x0, 0x1}) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000000)={0x6, 0x3}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x50) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e60, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x7, 0x100) ioctl$MON_IOCX_GET(r4, 0x400c9206, &(0x7f0000000340)={0x0, 0x0}) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000000)=""/23, 0x17}], 0x1, 0x100, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f7000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000bdb200b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000500)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x10001, 0xd0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$procfs(0xffffff9c, &(0x7f00000001c0)='/proc/consoles\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4m29.792442883s ago: executing program 2 (id=2440): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x40) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000, &(0x7f00000004c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4075}, 0x4880) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYRES8], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x68, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x31, 0xe, {{{}, {}, @device_a, @device_b, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x1, 0x1, 0x0, 0xa, 0x8}}, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}]}, 0x68}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x6) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r8) sendmsg$NL802154_CMD_SET_CHANNEL(r8, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x2c, r9, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1}]}, 0x2c}}, 0x64000) 4m28.360918244s ago: executing program 2 (id=2444): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') (async) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) (async) setpgid(r1, 0x0) setpgid(0x0, r1) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10000, 0x0) (async) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10000, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040)=0x3, 0x4) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000030101"], 0x14}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000030101"], 0x14}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) syz_io_uring_setup(0x31c7, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0xfffffffc}, &(0x7f00000001c0), &(0x7f00000005c0)) (async) r3 = syz_io_uring_setup(0x31c7, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0xfffffffc}, &(0x7f00000001c0), &(0x7f00000005c0)) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x0, 0x27, 0x2, 0x0, 0x0, r3}, &(0x7f0000000200), &(0x7f0000000300)) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x2, 0x7, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x10000}, 0x4000) close(r0) 4m28.148749058s ago: executing program 2 (id=2445): mknodat$null(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x8000, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000040)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2092) syz_fuse_handle_req(r0, &(0x7f0000002580)="5536182daefa2fc6ee10a1b2d4e27cff3c3e628d4656f7b27979e371b15b420c01ae674ddb8fff7b2bc41e7c5927065cd32f2ff7908ef7dd74cdc82f3799ab12edbbfd0b8f6d2194d7f72aec3a136e25c7bf733436bf6cbfc94431ad053a2ec4ccac5aaada8a41ac38c0e1849e599dce84e431ac501db105b4484146b338c0ae9124877ccb8273c7fbb32603251e2d66c71398a7a715bcbe5c9d87e41af55f837e2931c4c1b6b7bbc30dfedfe6e61a39e28f66bbe56496745fbe03f6035183257edac4b0fe3087e7f3e79c2152a07341f3ae9ec68e78875b6e12b5a2a1abbcca4d7963be818a7a31290cad5a025ccd05b609c7ac49ea85d49f354c1e76091a917966665e77471005a46a195b290c01bb7ddf4709e94543471d87a0a5047d3631b00862e1e9a00c60b83371cc16ba087463122a892a1b21786fe3d450c7ba97799d88126f09a698a421242e9c67c981ebc576f57ba3df22e0071db74fa22e97b0fbe589894931a4c4e0eda8bb9533c4ce503fba218d0ae43ab4b4d0c705e04442d093ca5299ae8499c6db904bda6c68105bc2a1cd8e16067215476e573745d1e99daa73400567a9978dd7bffb21429479ace30c95afdfaebd7faf74343cd58e14ce6d2fada5a1c66504a3eaa717ee681666c8b63c6d54e66df86144f85d80dcaa3ae7a13b58d5f2b607029efbbf8593afc75e0ce0a875a5fbedecb425a22624a0bb8e2fd06212a1fdafb92430d309f8f68504484fb1246f3d7b0893d3dc9d0b6c8d7476b6aea871eb4f32c283e22435fccb221484409cc28a6609dd869b99547fc81b2e517809a5b77783f9fc11b5fe584b9f64c0fec35d3db21ae30d0b8b88d722dea4a376d2a610f0a9d08b311e2ed3ef5d72d0e040e41d3dc45e5a17d740c67db88d95b18c8610fed3302aef0c3c1871ff8a5ae1908bf9668f0bc8e5867f56cc59cd303bafabde6a4034a96ba66b98a910dfaaff712673dcbf84c5354f066126068de620f08be67e6034138dd9a312f9ff197fca56a77bad46e59edfd79dfa3aee4582bfe01ce2201f6569178be7a4bdd28e495114944e538ee7b8f11e0812d9f822cd9760316809eccb9b0bbc5f0630224a1534f88600bbb2af2882562e76d149b44780380b62241829e5734fdfff1a2b3a052f3504dffe04d4632e9fef82762fe1950fbaceeb961464dfe2699f0a898fc8783cfdde45ecc3a16f052c4777beb1fddb080fc802a8cc760d1a0d4606b669e78ee9ba1ac398914ed5096850dedc513e5c71eca19d51af9075151f4ca3d8a841b7b1d205f5f3d223f7e48685daa0836f93017935ad1d942c7392667145ccc1d4700f5d8fb2fc218fd6d70357667d339a28dba3360761857b19f9f91e56a0e0281af1042a409a4e2839f3d21b73a5c352b22e4ff06e563e92c00b48e7f8bcdbbbd398c65331298f779dafe875854e301394b0faac2126138908fa8598b4f5e58ed1ac451eb0187e20077099d12d745fcff0b7fb5e8b9fa65ac617ea6c953e8786229b67a604c46810876650f919e6bc6792db22ec0be29cff94e9c24eb6e1830f890bb4b6bcd74b39060506095b99b95f2a8addfb8dfe11f47479fd23cc7c0701ae00774c430b3b9f52ab2579d47a2c2095365aa569f55a1431f93e651c01f0d67ff9337708a72e352c0e699f14bf07f9b9c056897c78edcf34ade3dfd17a04446d565fb6e7c701a237fe1a3d932371654a43b56e7f5ccdadc0f506d746c3f0047b69c0c174cbbfe092f139c09c0e2e76d9a777142813cb78174630ea8d73301e3343b94856fe610777468a9fb4518a0cf68243a4bd715e38e3431a811f962edb1306d76d89e0aad9be5800e7bebb82ccaec2382c9c114c91aee013acca2d8ddf99465e760bd185453a9eb4e5a78383094603b749c6242ad227124ef4b7ec7506b8a76f714099c954f0b2f2d427af0451a7ea3d1dbfa8a3e644c3640d397de3ce942311deb73fad3a76cba773f416314e81e70bda715b342113a18a249300b43250cb3b3aa46ecabe42d0e8c1dc4be286e539c71f0d1c0b0e1795ae7428a3887f36b79e9c76401a5dd460f45b9d8277e04c7c1e615fb33d0fbc444421f3fd0bff4e045d790610aaa2b62945e4b398024c75680b5e12235c35f5b23ddd99454fe527acad6d08fb37c35d9ecc0a8b10e2c31fac786666eb2ad499ddb7d06c7526fb1c5412f6a0df003410e69b81fe523057b6b73cdecf0e5bc4d3b87757889fe49dbdb3ec79c7eb3a868480fc87528e80400de837cccd4a6345508386ada1833f57a20c56e973569bc7821088d343e80009b7b35390975323d24e764aa6c90d3dd5fdec08ed363dc9ab57de949282994cd3858f829c7e5e9a745261383db27c9c53e9e98e109fda6cbb88649ba40b5067470d73b7471d406e5ea8041f9fa25f5b6c919aef84f7595511141e9f090ee103b20a13b22c9a88348ed6d284c0d7a58326e0c4c9626d9a5390bae2be199b201ea136a9aac76e6125db9bf58f61e6a46f8145a9df1305415989435f51529da03f09a67e3629e6f6cb6b70407d9d848f554f1a7e63602e678e62d3b41b4bf4ddda713ed2c291536d8cc12a16bde144ef56acc17778b1aa8eeeeeb60c781365b615be4435c7158d926351cdb46b89fa82acb384c7318dcb2e51db8bdb223aff2c8f36d9e6b1135ad18f7e0b9d91a76972c3140f8e21dc71422de12a4f5d08624bdaeb983619a5ff82cf788c6b8a5fbf0f78e61ae4058d6e03a3d5130646dfc13686e356a1325434caac94ced659529181561fee7ce4f7e1e7945f119ad8474ea6b00257ceb7af2d9b3f9ad5782cd986f1b097d61bf26a6c48c3ab597e4678d609f3050eec9f3bbea1bc67314407521950526e6d71e34e35392067ac84b66badc82a54bb0dc8ed2f1050711ef2d47af5252075c0441aad6900539fcc649c1b1ffc70a1cc39e0c2136c764ba718d50f4800dc29769c4bc9a2fd0f43eb6ffb717a473ccb14ccd58bd506c4e4a0f4ea1158b59b3d6bf1a2d010c456c1f099bff69add46cc60fd2d9779f603ebb943ab8eb02627ac8aebdd52f25b069f64a61e90fa9ac979cb4c6cf0ebcd070099a1a6e6a747e8989e84afe090390953f988f2dcee405086ce51b1d2d8d249f45899b4e862008d28efad8aa5abd0912fa456aa9d3a918a0dd3420d7c4b04b9e3d65c41a1548b7caeef5fbcededf64697786a0bae73d2c5352658b871c806bd150c91bbf8f4735dddee9cfd3e152b5d44cbcce912a2809760e225b9018fa498c86ccb2359cb0834bcefab92c0468522648fbefbe25cf8d82b897371b5369e8f2972502574c0a3235066969c4d5d67fc312d6631702f66a113d22063ba2ac7d9ab387ad1e115e9c98275f3e0dacd2e8f0843f24687b297bf42bca11b89c6db2fc7026d364486ef2d614bc45d5cff0758d69fd48ea06b8a97667e4d7d30bf7f1c30b62287637f50468bf144fd177fdabcbd0d12b50c9cbd052dcd66993c72f48bd6086412ed5f9af3d44dffdf7c012aadd5cf7bd3b314f236660fa1c0e4773a4e9ccc36fd130ffda59a9bf41f7fbf79e5e3333365a3ed2e7714e50805bc70bc6fd20203cacbbeecb8e01a2ce626756cdbd01c53717c2e7b56b47e21f13209c2bf2b1b251e7a93f8a085dcc61d9ae82303a962441372ff7c0b8b8ba75bbf5b861ff7ddbc9781d40c90ae467bdeddfdf949e9a8b8c9fb7db3a9323d05d15bef19ce2e7634b84ac082d50e84b66f99f34b2f852fefe67faa403e848f3de110eb1d9faefa176c3cacd20c7f87d74e858a1a7bfc2c9e895541f691f99a2b8771c8755300ee74e3d6a048b30d02ca16202ecfc207a0b29302aabc1c5b57c7d0d31d43be5cb1f7230dc238fb701e7037aa00c9b57c6fc85baccaa56754d27b975872051566187b0983d93b9ec052edf3b33f7ddab343eac6f7aed97771e708e40a4cc6797f85d91a0debd5c6169895e895f67a10685af5e0b80b0e728731cbffbff8be603469d03bd47dbca4456108c79c029af16482c5c2590c1e0673c7e943699ea107d906a3e667fe7b2afaeb489548b6a11d9862e86a0b549a42b607ffeda6e3ba0f567b63b0be6edb9098cf3a44e6864c5e99fa5f475acb57e2b7343eb7fe3e8c139b515348b188defd2d3021fd27950d822f6df5f9c93584fd95f3f88c85231943ed4d511249f96447f7903779e4d8c4a680661fe5133d415b862e668441e8077bfb827293a9eb733e914f37a19e01ad4b014ef87ed5a5817ab8123af9fd863090b8e9a50ce29cf706b2182fd79660cbdbb53ba71b750e71a21d0ed01db3335cad91d5cb4d4648f46468b6e51f63e4088386913ae6b6cbf103947c32d25a8a825118cd6ce23f53ffe3c087114700e9a5932faf3d844fc6b323b3e722ed3ed75037bd9a7fd9d256b2b9a168e66802e284853a0d6b47d39675900f02f005050425731f9c2cb329f70d7a5ce2ee256212bf8b2ba9ece0df39c58f0fbac06c4da946787abf19dadb536bddbf7e51d89f22413575e064c6482d936a89d48be159aeb5055feb0577ced6c5334411d1d58a7e6d02eca6164d90fda39685fd619269fea7f21db51f6aa6961250e03c9e00788c178dabeb68f13dea29f8cdcf30478dbca15c4519bb342ba8b201019061bf8317022dbc5673fb4ed92ef1a1dea0a1a00cb3cbca291f7ebcbec27ea5e824f04b82f5644d4368cdf8026550bc2f86b83da6a265357eb548a9eec6622204b3dcd22440fec0e12819ade4ba53b53b1e6ab906fe0cacabb9c15e8b657475a0dad62dbcb1037aa8617787abce24a0aa4cf1b5c85c030a14277832a95d8b29a4ea86fb80148ece147ce4bf386995ac28e1ad1e2072f3f4fce5c05d9bdd0af118815d6ee89aabfa3f8173e6fa59dfa4a8c1ba7641291b3c18c6ccc4c3588d56d169d397facb4e67485610cc68197b3a43fe78b9458dc47e5057d5bc6b8e3b65bf414818b65d41ed7cfd7a35fe79c9851ef39c3e059fb3dffe331a791ce75728efcd58dd9b3ed1c93b128469afa648f4f91de6e39d5bef7a0e69bdf5b2202682d857847a64b33432ea0f33bbfd1948ad0b6c66d853fef1e6c0d712b86c40f79ff4d125baebf2a4b32dfc8bed2a697f745cfeb16303b4f8e866ee0bb6a5eb6c6ce513b5cb84e2b44854c72ed0cf2e838245be8d098a6943d845f5a8c07c1036da86cab0d5be4ce29545fade4323acf2085b7645107dd12d5b3af7bb37be1b291cbd6fe297c4b4a2a23280358711be91f21305c035bf1f57467a1853c999b3fb478b11c49cfac66429a76099633a54689047d66fd8bd6eebea94fc8007d9e2765e2969608a78d0b96d6b30360e81fb9df5262c8ff15f2fd7000756d8cda1db3847d6f793bf803b159344c57b480c87702cb3d1260692a19ebdceb2e05a2fe2eb5ac5cfa76551a04795915bfaba9849a623e46ac1832157d0ea5255b5cacd4efa844b0ce5f2f0e1a9dc4fb115fce2640ec6d03c5fe15b4837bd6e6127349f2b6b0fd61c82c96531714f5b623ce4e4978c4a0c86b3c17f50acdd67d283ec934ed36ba7360a10ffeeb7864113eeaa25cccc66613e0757782381614b8da3cd0a85cef7bc384969517c920e8454a5a0f112d1653b2828e895d0614e5bf4dec0ec863432cce9337ce7c29affa7f29fff97bd54a6947cc68df8fed17850209242c1c67d0d7aced2efec4b3c006678bcb8716e8e9e40d78781fd6cc5b5522b8ed2ec8cecb677849b778c0a2a17817a3dd2278080e109906dd4e99b772d5911893fa09ade4296876921d1e009e714df7e4973ab1d2e593d88ecf2151e97ec66176549d3af66652c8377e162454ce7cc8ab34397d31978e84aea92a3c0a8106a2a31e33a8dfe942819fa1f2c1272d0f3cbd7dae820642cbc00202455ab7fb81857ef050a1965a291001874b38397ed9a8e8106dcfcdfd80d0f5d0ef0d5775e53cc5aeb1d6bc13886f8f3491cd6af5dd77ace3689fa2bf56e9b4d1e4964f8fd8f0a4a8b5d7fb678f0f3adcb4a19b5168ac5aeee6f087af15af3bde52a9be0f550b21b10ce98da70445284d9db9416732e63b6efb3ced984c0df50c11aa677f822af7ad39b8b4c0d236e4b36a00ff73587b39f917d7effbb37b95a96e350a430d544d68623c80bf2cd2d689b4dc41e8ef374c393092a2619055f268fbdcb9de494e6582be90a4798bac801bcac8389c823759860e7c9d692f41ee2a6b9624da3c09a2c8e7cdeaa100ba8ca25a737046d8bb237b9546641cfbb2eac9bbee9e125b14dfabac642e634d32151c06ceb3ddbb3d3f038ab2efdd063152270449ed5eca2655cd0016147ebbd00003eb8cd25297350afbffae43cfd9867543b81da4510850b1afaa199d0477837017e9098bf5b3973efe218a88b3d010172fe77278088997758fdc1dbb0b1fb6af2ab9db1ddf3e3fbd8e8dd35f918779ccba75b3cdfa317fc6e3cbeaa8b11ce2a30cc53292bcb9dc2a18ca400c674360c041c97ee6aec1448a025c6b04ae9efb3a01d31e3f897cfd5dc94dac95c88b95a26676cc6153e203535891116a5f4ebf54c71cbbe3215a04c57c7ba874a1e203bc66d8161d5b556f661244d9d405a2e6baaedd0d0e4c7e093c2ac0e5ee83b7ddf91669dd59016f7cb53d19896fcc838dc008da4a5fdc0a4fac1a6d7f49b24bcc01467df04d8a3f3181cc4e811942a53daf784b59186a17756a8f3a41ad93035a893a4ff60dd8f54a533e94cf87864169287804df3aa38dc5ce6021a06c58d48985c562a0f51d8b32879f9fb7d4a1d3d442626810f151b161b7e35f9a0b3bec05979e381140f31c03ee6f5549e6e7f116be5e87e0a9ab71ee632f837e9a0f9ad1b4979304c26bad6e84eff0b5b79b667e3d74e354d04f5b2c237102e41a1a4dcac99cbb911d9484aebe6ab2cb539a1db3e3302fb833a44a2d725e858ea9a65d43bb7661842b655c51a1ff25207956e8c6c71667c79975d69f688dfa34c59771488028e3d7500ba0cb71ae5751a51b568e67bdf2abb63838aba5e5cfbbeaf02285f6cbe58428a92a6fc25abb01f8d55ecbd7cc0ea69cdfb188b79048dbea488493681b0e70234463ca3e425d24e2ae4d800ce3adb04ce69428b5f884f8dc83392c22e456a2e195b86d717ac45003a99ae9a59c94167eb04aba3612528f94dad3360b46bc456fbb78072eb7f96418c71bec09831b0a63e83816ffde0d9909c06e765a666c2c41b20c339e0d39107311830ae9ad912f0a85f2ec5ca66a79798a568dae14f76b6d59e6c0bc0f9ebdff29c0fce58367c9705bd4323d3c3e125cdb13da6e58f3fdb2751401014e393e3fc688f04080a90430e531767a7c4f3187ccb7b90880955e766aba6091c4e8fed36482bb5a63372350dd08fe84bf5afd1a30a0f8f4de7a640fa84b9c0447073a0b39bf875d0377c8a572adefec3e033fb3dad91b22bfe22c01f23f27ab0c6a1ce19d2f4f4235281cbca15dafe50f383ba89a8c46a666b106c1ac534955df71f4c560010934fd3eb68eebd55487defa1e024f75ac30139cd190bde1dc8684936bc23a1882ae469fc4af8730d29658f996f71c219526497918e359228b55849d952f4b2996fe5f45a6cfdf87da93bfada579479b18d05c4e964c85b88a7bfc6e4f2b5d6e98e00635e8bd2ebb9eb40b99a9e9db2f688b2d94b8cc8c5fb2a1928624fa5df1c228e6499d992453772084bcd33dda984d97e3857b6fee43c6666b3206ccfe3af52debea4ee060c6edd194b90309213f5c4805f454c7e57bc759377aae9727e484391486be0849c5cdfa99c5a0d0687d6afdce97a32e01d45fef015e7c869ca190219a778b91d881a7b595313fb462e5bf78260c78285d6ccf5e4c50ed56ff28e3f49912773f0a58093f259b5cf4e7f607c51a81576fa95b97bf32d0e2e3511b5d784eba29a15246a97ccf608db456cd70adacc6c31913416f24f38dec3544ac2e88c409b5ff7771d873ea8d7a1868775c8b5502273c784cf945680fb14f143140b56462cd46874ffeacde7bf329fe8369df9c4b95a42535ea56ad6fa260f5c738eb9627f890f4a34f80bf3b8fe568d44c3895029b5f9557f17469a53fe4c0d581eb29029ff162ca906cd0e4bb81138be91a254752bf849232ed7042a82cda1e14dfbfdf74a09c17a9039749c789ab0242ed2d0249231c4ad70c23c805676968bdeb96c2d8886f784ecc3e42e6493e45aa20b6e8eda65c49136c9e9414a4371e3012bf596d55315be17ea9396b1df7f82db27f0d121f8aa66c40365fa686a46f430b4cd336da0d9937d5c26284bdcc6c4e0d5a6acc1be089e1a5d6ec422ad3961fb5c5c9836466c3366e6d3f2686b19b529549cacb6252b0d7a7f5df42ea2961ac59ba0b911311ccc4d83f8611f0c4b071544236037b2863d673303a4e3d428131b07f60eb2cd507dc43503456ce829aed8254bf0b51b38008d42e445acb0effc2ab7e4bc26ad76ffba1220f2e878fe9b5de39bf4f25a9ed468cdb100008ffac6bef401df4817b23463e771a3c834c32993274689c01004eb94b89bc44257b7d2b3936caab6d86937b5bb8f705d00fb6f091711222b6dc25eeaa0e350fe484337396162c86bf7d3a1ab82591ad35d393664617041142c0f8b528e947c092f28c3142493d056bd548910615e7300f041f5d01a2f00138ae5d7849244ef9215f5c9dd874e60ca4ad883f86e71690a510831e35c24de1e0d1261172bf4a8625af958febb7b109c5ca5bfffd4342c43ad02136c6eb117b4a6ea98c07a91279731c1228b01e6be755c1c1d095d3cdfe950ac32eee77327a0e7e342ccfc13c69ab6ab113b18c1abe72d39c03e351986cb3326b8b17ada5884aa7d0a553b0d35e32b8c09f1a4106f5d675a88a1508de4a0e9c598c082ae5b229b75579e39e297b225a852e3f6a7d0990a45fdf68771991acf9b7a5c04bc21a40c57817d500e8ebc6b5919219a4110395817c92bf9eb9c623606d4d98ed68dc0b51a0278b0addce8753f86316158bb4bd6a7a0c4c72b0d17b9545695e54826021a6ac44b4de1b4ea977b20af3c47b8860b0ed29a68c1a883777097d54b162cc58edc0f4de1afbbad7c340a5cd9f2f93133cb2a4babc2a688e2ddd580ef8d9d0846c269c265ce9d978aa233c73aa11eb78d3a67f4e7a3dd035ef5a1f832ada87c7dfa377b77215f8c23b1a78e4a7faa6d0c1a4a28a0ef7b32b36bd566d8c478d0133ab43f9c2a4829624eec535234eb89a177ca8d4e9d2d422f33a24d15044822e4a4c1bca5f470b8c8fde09fb69160297218398da27f4e80dbd480782ee75cecd20ad23fdbcc1d4a0acbc63241c1e2cf1a0b12949e42f707ba06b6fdbd8f336bd72d7f96ddf9ec2b5cfcc4c8da6e1ea573e97eeaea537511ac9fd2ae78eb18cb50c13b595f8b6d65ce8c08e9028fffff6b512080dbbd3fb5e5068538c05f73254969f9727db9bff0c6aeaaf83713812499308792a7fc8318e6b2996bcd1b072641be1eb8e028cbd6b0a5f1fa13bfe35b5cd0d2ca21d9cf8ed97f724ef73ab5a99d65befa38d636f2f827d229479377f25501f3a6ece12cb095549503b2299db7806d32751d4851d62b0c6a91e2e961d475d33a8874c96df52c75bb5a0569e892743937451f75345e0351bfa334d37aa43f01ad1ff984dec164faebc713de31470db5e536a0681a042ced0f9839d9ce89259349075961985171c27c410c99458d4c25614ea1d4252293c4f85b0d2ded9ac560cfd024c199d5f0f4bd47763690ba1bca88b8cc81059bb9fe82c955488523114db8c2caf8a63c0049e90ca524330b57edcf718f6a7aab0efe282079d198cc3c1294f35d1a1bf5f69a8838cfc5d4363f9ca9383f83e4f9576de3fac48866ddcde282e5e4ee3f852a063bd6423ac1fdc6201b1facd6c36609fa2faf96afc1c0b76fff27bce059ad6390fd1e3f735806ce654ed555a78ea8e59fb16ff5ac5ad183aab9de37c3d033b3018d591e7ff1a896de969f561260f797603df5fc232076ccdc2e1fe9fc789253a54af151dd50f89e777c2541591101720c893647bd4b3e6257de85251c9bcd700154e85db2a9e2c4d9d2e531a18bfaa05d16ce75f823e60416b3afebce16555536120d5f554fd13e861d74c4947a62d2d09473d8d75f03d354572b371b02e16f3976b1b0b235582ee38d938fe843b107c77c2acd88f34e1669816eb3867134b1c5fce5afad3c70f9bca972ed494577f2ba6362a6ee6b4720bd86938bb49490982a1b5ce6dd54b79f093ce27051530e1233f03d6641392d4fe7a1f7dcec8ba86d8f32f00f0ad50a29b1e17de07bd0205c0d893532c198f23656f7f5d178c0745b7e0b7e8afdd29c8fa1639a06039980d9a5fba11801db4e7868a9b77925a03a770aae3430b1ccbddb8bd766f51fef71ba25cf9184c9cfa6f9921d69066d09a656080f3c5fe475ccab94cdfccd76f3c7dada9236d1be861eb5fe6247ae9f97b7705bb71c375e8b98203c5bd224202c1aa714da47e0daf98fd3eca617f9a255df5dbe98a7520a1e6db9b88af893521f2ecf7fd2b08a7f3c5aeb77ebe6f52739b473840889c41315407477b82242d9a805f9aa200a129c4701d1c88ccd34871f356caf02da9937a88612a9755315914f4e8e1bf471a46c00650457cc06db168e5457fb3f9662994d901a1f58306156979aa795afacc1a7d6111cbea53e97fb71c7bbe44558fb06f8d78ee08e3678b5d218e13f79cf06f1da9f7e128647884589dbdaffa16f9388568d3c8caa34a6b944e4f171842cdbb293474fcd5201b7440e05ddcf9e0b476773119516ef45077705e8bab5f877657205bf9eaaa7c86734b1b6c3661dfd4b9eb8590f962e17ad51b44058d558744e5b44cf9db280bff1062b2431d298064f11e7700ba4c8ece6f4df659d4880c4983db0152f1f903023672f6234620134bd5d1d888022da128a527d82e8fa1a562827a4f1592efe3b0bb78060626e8688ef3d5162afe9f1060123dbb1f93b7bdb6ad4ad6e1772bf8705cca424d9c42e4992eb5bef1ec7961bd4260d1e55e863fa9c8e0cb6d28b495fa37b5f59fd18cfcec6319288dd7363821e47ec46664e1994157319eb0d466b42fd9b5fac5ba979a9baf4f699dc539bf77852e18014074f88108b654219e4f9396696c94eb9fb9b360e59920f187029608bed76d09dd006f4033d384cd109726d51850202ba564599dbff7808591f834cc4084db29111de86a70217defa490e39c6e281650d15b1e44bb55164be0f6da58e838bf5f4d7cc2a23b818557ab1fad0fb2253c4da6af41591940b2608f6fa6bc25939ede95317ff96050bbc1f389235caa78adc0d801a56b2fb4cc41e73d5131552985b5af241722e0637f3b88e46b09ea875e5cf66f534666368ff8e46413e5ab557236134afa63478e18328d33b1a235deb2034955cdbb2bfd0e55fd885f380ae8efca1feea985a946519a712df1384f9e024efec61c30a6989aa3b5bd486366f3fccadc0add175c1cf0d2730ab97370eb47bcda4226ee140edbcd9b38b8ee913587125cb185adb4df18e80df2b0ea6e3e87dc8755fe6823ab5ee1feaebb1e6208cf3dd5ad5581f2388be9200", 0x2000, &(0x7f0000004dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)={0x18, 0x0, 0x0, {0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f00000046c0)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x403a1810, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0x0, 0x1000) (fail_nth: 8) close(0x3) 4m28.001172991s ago: executing program 2 (id=2446): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f00000000c0)={0x5, 0x20000dbc, 0x2}) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100000000000000000000e80000000000"]) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0xfffffffffffffcf1, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x700, 0xffffffff00000000, 0xfffffffffffffffd}, &(0x7f0000000780)={0x0, 0x989680}, &(0x7f0000000800)={&(0x7f0000000280), 0x8}) mkdir(0x0, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000740)={[{@lowerdir={'lowerdir', 0x3d, './file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_open_dev$vim2m(&(0x7f0000000140), 0x8, 0x2) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc04c560f, &(0x7f00000003c0)=@mmap={0x3, 0x5, 0x4, 0x10000, 0x1000, {}, {0x1, 0xc, 0x8, 0x7, 0x8, 0x3, "dfcad2e8"}, 0x2ad, 0x1, {}, 0x40, 0x0, r6}) chdir(&(0x7f0000000140)='./bus\x00') r7 = open(0x0, 0x80242, 0x1df2a23c5997fa5f) r8 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f00000000c0)=0x3) write$FUSE_CREATE_OPEN(r7, 0x0, 0x0) sendfile(r7, r7, &(0x7f0000000080), 0x7f03) 4m27.944268666s ago: executing program 32 (id=2446): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f00000000c0)={0x5, 0x20000dbc, 0x2}) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100000000000000000000e80000000000"]) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0xfffffffffffffcf1, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x700, 0xffffffff00000000, 0xfffffffffffffffd}, &(0x7f0000000780)={0x0, 0x989680}, &(0x7f0000000800)={&(0x7f0000000280), 0x8}) mkdir(0x0, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000740)={[{@lowerdir={'lowerdir', 0x3d, './file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_open_dev$vim2m(&(0x7f0000000140), 0x8, 0x2) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc04c560f, &(0x7f00000003c0)=@mmap={0x3, 0x5, 0x4, 0x10000, 0x1000, {}, {0x1, 0xc, 0x8, 0x7, 0x8, 0x3, "dfcad2e8"}, 0x2ad, 0x1, {}, 0x40, 0x0, r6}) chdir(&(0x7f0000000140)='./bus\x00') r7 = open(0x0, 0x80242, 0x1df2a23c5997fa5f) r8 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f00000000c0)=0x3) write$FUSE_CREATE_OPEN(r7, 0x0, 0x0) sendfile(r7, r7, &(0x7f0000000080), 0x7f03) 11.368716782s ago: executing program 1 (id=4193): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x30) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000340)='affs\x00', 0x0, &(0x7f00000001c0)='grpquota') r3 = syz_usbip_server_init(0x6) r4 = socket$netlink(0x10, 0x3, 0x15) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) mkdir(&(0x7f0000000300)='./file0\x00', 0x50) r6 = open$dir(&(0x7f0000000340)='./file0\x00', 0x400080, 0x386) r7 = signalfd(r3, &(0x7f00000005c0)={[0xffffff57, 0x40]}, 0x8) linkat(r6, &(0x7f0000000400)='./file0\x00', r7, &(0x7f0000000680)='./file0\x00', 0x0) sendmsg$nl_route(r4, 0x0, 0x4040) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0x14, 0x0, 0x8, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848290000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x80) 9.932889276s ago: executing program 1 (id=4197): socket$packet(0x11, 0x3, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) setrlimit(0x7, &(0x7f0000000180)={0xfffffffe, 0x6}) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc", 0x8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000009a00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40040}}, {{&(0x7f0000001180)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004000}}], 0x2, 0x4008010) sendmmsg(0xffffffffffffffff, &(0x7f0000000d40)=[{{&(0x7f0000000000)=@pptp={0x18, 0x2, {0x1, @rand_addr=0x64010100}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000d80)="309a7c61a8a85b615f1b0c58962510dd345ba89c7b893ccee7c6a9e8d4dddaacc47f44ff3e523c124b61677009fb2bcd43b669cb418f70e25764594db4d7e1e43ab388c1942ccbd37d96d954c37986e7c9b1de50bd93fe0087c7d702584feba0b91639c2a3e79f38b3700a927bc029826ab93e20213dd80d719058dd9f548c1af24a50f82718e9ba42bac6f32926174da8d932fc77a87c0fd48d873eac2f4a0a3c02c19b231c51c1bb35", 0xaa}, {&(0x7f0000002040)="8347a78ccf5c1ddafca445cad46b8f89c2f94b6aca60c31024581c28767630dcf920d8b4deaad8464b20718abc204e1afb5a1a966614da972c62ef2165fe4fd14917430a0f659e849659c0f4f369c13f1c1fdc4b947c23b3ead6df33efa66d072b86bbb67ccb647467494655c21d3d2377af986ddbeb6f523f12d30fca54da9aa6b160baaea545908c3838cc717316a4dfb0e8b927c0c4f860337514777ac72643999041b56008a79f08628310e6f91db3cebda9587f7aa0eac852e3e4f157a2b0e1eb182ceebb8373e555346e04eafb40fb71ba7cef30dac9db8b3d167e6bfa32162e7fe7afd0be6ce9ed78559d2289f54df7500fc04a9d4991464561fbf6af19171c712559ee6aaaef351ed14c6082ff9e74869a2577d0b88c7daace6379aeca5ca5d7a6b6297bfd00d78d0ed726acf4a15113c98e96a9cb53500f657476f00c02878f7748e3191183c53ca5c3bd6d55db0a33e979ea981699d9cff214e0f212c26573489c060fbac9813db714dd3d4630ad943a61b26b12ce139df3e11bb60f28107ef1d6b1a64942d8251a7c2eca4c4ca687498cbef92486c7e384e43a6b85d7f65935daf8f3a96c05702fb4a63dc31fc9844e769477a07dc0ef53f2cd31af5668ee43d5e02349462ab1fef14aeec7c0be2074d48b370cafb33dfb17edbed91aa83639c0ee6f2c06edd79f7eef74f65de47235507b114edccc44dcafebd760d63232039882dec91564c4dc3b4fb9289ffee52204a9acfea9efbde5a84eb9d1ea3f2d9cd4e81bb857c4311ad9f6f56ef3de1090e4d74bb9d50d491d67b5c60180bb445d1a87bdc1b50d92ca2c68a017234f2f68aa445ac18d92992b3b4640b5fc68d9900653e73d5b63ad3b829ea3eb5e2d30d40cad2a67d6f2f8b3e8f1d65d1fe58c3e13a8fd8b8359cfbd42fb161129be7792cc6dde0839643d23694e77e18f57b6ede7115453e57bbb4c4523568a62228bd5588ee3c9889ff5169cbcd1c47ed6464fb2ebfbc1e7d2820d901545e048c344dab32720361c56f405d98cf19f287b6cc6b964176f447c25b012bccd6ec2d4d0f7feb84fa2a11a655267a4330d879f9ad23ef81a1ab05fdc2bd6cc9ea61d808bb17d396da71bf849b534dd009b14b82bd4de871d9154dd5dc2d0a38eb543a4bb1ccdaeb1f74394dbb086d4290b9d73c6c060a34334a64e63e640f0aa13f8d1cb05a8b8d14e08fa6f8dc0db82b8349575895715ef4af7ac63e58bbd45df298302ff08d70b74bb063211b43069ff9135d4e6fe87aa2a3f6401d0da95e578af33af1bd5bd7450db93bf443433071999b936bf76e57e61ce760901e1d7a353ebc3402fd88027ed2cb56dd02d383619efd66a27dc6848ad4bc65709f4d90302711311a7021dfdcad484c6642847256df1c6b51a8b5971630e42707033a3d83d45afc4f884b3899e37280009ea7d42a4651b09abeff161bba812491af8a56753d70bed1166b69897daa0b2cff8087cf50e0bc36092a182b3d1cdf73a0022a5c159342cff601593cc4591d975af8e7da95d79de7c0b3ddab8e41b335a9ffaca86f00fa9163b72f11f01ea2a12d2175081462ad464878681e6b3ccd7aadd7a0422b719b7793304149839b4920b34458f301f5620d6e7238f6239ec200b07a99e5ddea1c6b8bd4940803788826885a0966634f391c9a3937f295e6d5debadd54a2b69c922e104d0a60cf368a14447228ca0bbc5534783c0bd8351daf0ef6fd124954720aa77d406cf1f9f43793ffaca3722e7fe512550ffa98123a34208603f594e2c685981886962abc74c66dabeab846795fc9dac09d9066e19f375462d4107a4c6f0f16239d3bbea5b9e29e6d6ca69e6291d5ba0fc6277806a5dae43e53de8c5b952e57788b3d79f09c5d3d0c7f1c2cd3dc6fae6647885d8496a42eb317cfd3f7e2e71dc345adf7cd24a6d9afed30852268ae2e70f558ca27ede1501df70bd6e01d1dc529df42d9ddffc820c88de1618dae2ee960050956876977662afc3fad2d5db73ed85991ad3f7149ca7df30b53cd0a461275b007ee6ce9a6fc25930b48e3700f8398275e18824cdfb1ec7308d7ec0de527af6f41a9eb8574e2d028d01b523bdc45c1f8f34788983eba420d8d1b5cb1b07a8fe7e300f83a01454d4e043e756961927e2c4508414e3e8773b6759f2086328cf6607ca3021d14d47b162fe702ad62c752c31c6322387c4a27e635af77a3118cdca818006b0b2a81dc0d9ccdaf93bc55dbefa2c4b0430c1d78b0aabd98c6e6d71d1fa16e5e27a3607739f2f087d01bf7f99ed16bd0049732d697320625a88d960cd9616888f1c64663f6626e05e139c489da8ec674231ad0e095c66cb7ac5316ef320a8fe6ad637822f2d9f6f4d07e14fab941ddafa500d25f12d6d584cb3577e2b6051ffee2a6e3ca1aab7a64b7abb9d994c207fd1f8ad41daaab1fab90b6480c0035c9555fb77d998cb5244987858867e0a8d54524a63827291bd200c4494ab7faef26d65aa8ff24ebf36af5791d3c4f23eff6897060999f46a4677dae760bdba62eeaef271ce954c8693c2bb2a442ca00d14be99c316946a3e03b9357d1eaf36e9b4180d13773474a2f8a11825a8ecd39aa0204a2af2a3e8f8fcb4d94b60155d677b50ef46392117e459d842e5f0f6db33a5de324855f5b2f806c4041aaec9589f5b30b07590a06e7117e7534bea123489807126b8033b30a84c4ffdb9b498ab152857c4f174924cf2211f1e5f3cba22cac0b2c43da6fe74f1fbdc3648ed45c7316d66443d3c3ea2ef6ceb86bd908cd80adc244a5cc56d0faafddd302d62caf226ee9e5de6fa8cb29718b3cb955d0275eda03b92d70800b7aee32d26870f59d6147303ecc8ad13466c6492fb7f311a449a81e98201516f2304fb0754b9b82fc57025cd0307c862caa9f97e77d320e2329cea127cee9095c5da0554a00ea53a20baabcc15e7f019216bf32777f9da3d3e6a623e9bf8b8970d4557c3bc1fcea76b04a924c05e7ec6832bdf524af37343daaeeb9034d7be758970d7613b6ab556fda564c7b07f900657b069309a3090dafb1fd27fb775180e04c86992196b19b593b4903124cfd5c415fd83468ac3177292d8602c8786c8ff9cf7ccad8e8bd10db439b0a22dfa451a9ea3f978def6c78633ddee6db0b86aa5b1c352c7735f1e5e22ee936b41afc204d3358b5bf1cc760072df8d31d00af404e918639279fd0451221dec0b11ca5a372d571e313408d6baedf3ef6e53f9ee9e40b3c5b14653fd5d7a969a7014f03ef31adaaa47811056527ce5eff6c6b149a30c7ca3b289db53e0e68e313f0ef3c82961181f9dcdf9942345ad0ffd17796a62abdf8cff6b0ca559ec31d8c7e82aeb075643f5af5590e3c0e56a6d412acaf87331caa2b93aabb02da5c85cde02026c0afc1d32938c7f9756641264fd8ac714fa445a699eaeb8dfc6c4af37df922ea98cb1fc6a81b7c158ed5033d5da5b1672bebc11b15c92ebd974d90e295073c1a7dfe4f5cf0e937e81ac415918e3ea82eff713a468fe928cc020268e0e9fe34059d816c9aaa5135e7153e7a260ba2444eaf3ad20858915a66522159b365123449c40f60a3781f2b5b7261ce2d0b049b8c9ce2828335579214e9deb5a5a34ac8f37908dac9f4b6fd7dfd66856bae4cdd95e4d9e17b8db74e4da48786b844cddc03efb3a252f6f48e7ddc8ce87cac41716f37fd744454625dc526b37b9b1fbc6c58cb0cf0f72887f9d26eaf46d1a5ac939990e0c514a4a680ec0a9300b377148f32cc21c2b48198d5b8de3c990dbd8cc929832e50172d3a131bab7100fdf7ae47be036663882e19888f61e3127eed3d84bc6b6d209c027a08568c4f1f9579539daddf5e99c64fb4f052eb322c59e5d273137314fbb570b7949d47f52a520c8627b8947a87cd5022e2267bb40f80dc614fb4f5da1805cc3112c14040777d48489fa09fff03067104c2c18f7fa76c7bed7eb443938c2b7c50dc3c36b60cc85fdaa8ed3677222a1124b41a8817bd9c80bec1635e953e07313aa8e3601c5fbc2fc9490de32832973aaa7ebe44d27059d5557d2c427149db8a86c4c3800e6ba92db8e724d21d7f676794efb973f5f272805f4b564cc6494c1b9dc7dfaa0808fde2f4b072cb3e9b698cc5abe603c8f1f01fd229296393ec0ded1f5e03c7471fbd0e9cc94bbf94a049e3fcc36550065200df6f34ede8b15f338eded3ee2e25009efd6fdc3531cf9c7b815b784464e2f5f3b8260314d0fc08c569ea7ff32d47c7fa3a05f943c334e824ee38a109f3891b6a2aa907676cea2111a83bb0ee92c6b77d8a0f5bd88005a0c01148569196438dc522f9bfcb8c511a18dfafb25a1f10523c63b7f7fcb292f08d14b448f7005c478b070809a85e60bda20339e0c62ce108979ab4b46ef4cb3fe8586711ce11da426b5e6417e838b5209b288500d0df9e85e57c099f312bb314b1faa5e237354e3b76bdb945741764a0a4cf09b9c98839ab95bd4952c46f27803e03090bb5362f73b74ac08a955cacba2910db03407d9a7146cdfbe618dd05f6e2f26b9d3a90afb3bbfe8ffc014933e8f4ac41c1ea18dba171bd4bc7fffad9b877cb88a1328d7506b64b80f97d25f6e44122023772e765a67d183758cf46a3a08a6e3fa34e3fc6458586f33f8c62134c055f01545c8b0487030872671acdd0624f3b30cb22d1a53594ab0ecbb745a091a33a29aee2e0b5e90728c0979f1a261769ddcff29d9c4b7a480ed6db7b01be486134a94190fc2aae44112eb09e12d62e0dd4f5606c7a2c71d4f8da79aa391cc10c296b38621e99578aa3fe04a7e73bcba19feb56804086fb01c2fabde2d4b7ee9112d6e228ed42168b5166967beb399eb1d9831431e145d63c448ebca169ad2ec168abfc6bd195db937083ce7dbd9f33e4d39f994822edf4469c3b18388a16e17179b73f1d48fc58d174e5a4de2eb8ab40998bfb35e00b4e21c1089204c63425d40583584b3a9662f9aafc03c4bbc1507106cde84b4bd965b65f4160bc6332a19da9bc336a955f834412504eef11125d30022266a452dd0556724d504fdc2d13f11e0f1ef947d24422f48733fd76e22c130eb27e03c5d6b9a12d2be5788b22eb71544dc32fd56445a45e081a9eaff9d336a9e5a3352a1784d8fd18962d7833f7d64995d403232199fbe454b2f9bfd9ecd244700cceb5ac5e8a8463b9910901549b41423565a0a2b35ec9cae77075c534f3455bdde27534cd1d835b0ef4dca8eba1fbca494112e9dd60e108edb17ca98577388a7a0e4613f13a07887bf722ee2a6c69d47068e6b8d360403b7c43fbaed8ec276bfe746b7473169aca59bc42cf6d6a5a4355836f9ba0fb6b23dd012c566228ed11488e6abe5dbdba2591607165ea714c1a1e55d5bd1033a2355a3dc26a15a40936f6d40a491b81d41e6198230a16f971c41c8f7ff45ec2923a4d4b298494df79bf41ac6e4e888fb3fe0469e46b234e25463555696c43c1e875fb2c1c3bad59b0f79bf2f62ae9dca78d948cb1ec0f3247fe322e39a11a9d4b543363fdda73230714b8a5b868c6450aa00bf89a418d170be352ed74aea3874b1bf2d3b7107b225b43dfd1b11aeac2359535f92ece26799c86ecca1d2388ee4c43e921db0aa6c0976c26b36d84ced63b5ab316ce3da5bee260fc8897adaea5381c306332fe8fba47b064b0efe1ba966b0e1e50fbda3ffbc31984ebb6820fc47d313644e5d18136ed6e7546c945c7f57a27d546ae4b17dad4d97d1a144641de3178935f0fb55abe10d5523143ca03bc6eca7dd454b3eb9f6", 0x1000}, {&(0x7f0000000400)="fd0632a806778fc8040ce5aa0857d09fc8abe262fcb344f038f4f68aa62c20a7c42d138238bc7b2b02b44dc2a1c1d81713ecf22930349326e6ecdc94715f4522142797", 0x43}, {&(0x7f0000000680)="67cb5af0f2c0154ae92950b4f079ceaab940f8101db8132260df087fc9bbadc4ead82dac6648bd979e728b42e4fc0b320947df6a291cf702e63b535f6cf48da5033d5e30204c05f4fcc06d1920c75f6d2615155d2d0f0566b7f59e50780b32afe4462f0ab1fea2eef2fa224f6282308e1ad39748789d0fc8d261563a3308451527e941630cd8557910c0a10839f831f8c2612edd1738cf136af8820a6a6a8fe57d941e033c240655ed7c33e05805966bd7fc63d2a11b492814e48fa173a53e7eb0e69733da012fb59bccfb44379b", 0xce}], 0x4}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000880)="8a4e3eaf079882bb9814398356b69f17845bbab50753aa09ef2592d38342605b628342a73673e4ef2d4d85d7704c87471c28e0cc86c7a5dfb432a8e7e9fbfb6089dd5613e12995a0199d727f6cd9425e1454073d27c4f008c5fb8d0a881ee0e1489d20ecf4094f7f02846be5cb0b9a3fc42b71c1159d01fc366c67eece5c1e2344cbe916df5b7fc3f57da3a466f3bc8f5e8051f1127b2bb4c8b5326f6eeb47dc21bdd81dca450d88d734f0bc56459efb9e514dc5ee7305e757629874bad523caa6a0c445b193d9961ebd6f8ae011d94921af927fa1d1cff7cd203b17", 0xdc}, {&(0x7f0000000980)="0dcbab8659710a2b4cce4697507423e2ab4bd9561f63bfa33b329632c80357341c407f6e681161b10e0f516035921b9bf501123b918eed3b671cc5d2f38b574cb8c7ec06afc7c37e970c3d6fd966bb73131fb619f4631dbb8b413dd1ad24c98cf94ee62bc171ecf5e0a569e0aef6db8d0bf79ccde163b761cfcc044175af0155d873408177b80c3c6ba382097637ffe1fc79af361891cbb8e72eb0237194d63d34f2bf05d33248bf4edf398eb51267934bf8919f37e39c771175a381e131f99145e6628d9f0b9c1b529099b85b4aa80d290a930a3e389cc0", 0xd8}, {&(0x7f0000000100)="e84f8866871ef14ada2a7d058147f429f700193d1140c65990fb3aa12c0853a3eade0e6ab1ca5d16b391ee7d09a523b013870f4388a55f6e14727731c93f", 0x3e}, {&(0x7f0000000780)="df65cb2e1525056091f8b825acf1778c231abf6fbe38a4bd5e58deac2b961fb3566684bef55de6b95e35cadbfa50958c70f26c79200dc495a3933d1566e8d86af4a790b68f5e", 0x46}, {&(0x7f0000000340)="d650381956785428bef67c02", 0xc}, {&(0x7f0000000a80)="98d355fafa6d98ce27c5b1acaae4d12ac6340e88de53ff045691f0f75b7c1de82467edbd2d4320d8bc90a2963cfd346596041fa3bcdfd525caaabe08f5ea9a0ae2ef9728297dfc9a2db9a55054f88c2b8ffeef0943360033e665624e261a4a1665dcea3432f20e3a3cb9b17de0338ea91f99304a795ccd9d69a079780349a612905dec736d8ed14ab4d83607564d4e31c5ebf7f771a74f423b2bd35824cf456d15296338dfc8ed57b44b55f41c7ef58cd2e20111da1988eaf671e46d00e41dd380cc10a19da54f", 0xc7}, {&(0x7f0000000800)="383766cc035044b7cae9d77864654aa6daa7a0a1a9c00f7d99897e36822cbf38f6c4ae3c4e43040ba49ec775f72acb2a3aab51845f5bdf9e64", 0x39}, {&(0x7f0000000b80)="733e261b4a4ec9ba734bce489a1878917ad63d002b6c20be048844bb972b4369943cd504b5b98455ca0413e5d9d9b20ee98ab96b867d2348f5d0327868d6048babda67405ac05ece5ddb8c59a7a46595207ea4a3f1a43250723b62a790bbc12a64b05758f9388b5a0c091b390e33f481d248c9f1cc18112b2c2048567cccc1", 0x7f}, {&(0x7f0000000c40)="d1730a483008a03068898fbf1f6a031023de158058e23b032493b7e06243e274b4eca604c9ba697b003723d539bef151d009c0d020ec18b568a14e1901d7725cf9025e4abe4750854e57", 0x4a}], 0x9}}], 0x2, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x3e}]}}]}, 0x3c}}, 0x46cb6d075ccca0de) sendmmsg$inet(r1, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 8.08750129s ago: executing program 1 (id=4199): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r3, &(0x7f0000000080)="80", 0x1, 0x20040800, &(0x7f0000000100)={0xa, 0x4e21, 0x7, @local, 0x5}, 0x1c) setsockopt(r3, 0x84, 0x11, &(0x7f0000000040)="020000000980ffff", 0x8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r4, &(0x7f0000000080)=[{0x0, 0x60}, {&(0x7f0000002140)=""/4096, 0x1000}], 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) sched_getattr(0x0, &(0x7f00000000c0)={0x38}, 0x38, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="4f702f8d73aa27a714902d67e15ce601474ac489408af6970d7fc518172f549d7170c3123a6486de1809e27424245cfb21cc88737f8f420681d498e2e66b4a8769af3d45044c69d0ce3120585f7f58fbc2b1c1fd84a1bb2c1078ea856a4b8edbcb76471afd5d5f87f3914fed81115cb07c727e901dabae19ac72ffd5d5d25bee69d9684f69b8c22626338c08053f0fd4dd60b8874ded8a81094455e5ace7172985ff940d3f5f98", 0xa7, 0x0, 0x0, 0x0) 7.016425457s ago: executing program 1 (id=4205): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f00000004c0), &(0x7f0000001c40)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r3}, 0x10) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', r0, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r5, &(0x7f0000000300)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) r7 = socket$packet(0x11, 0x3, 0x300) bind$packet(r7, &(0x7f0000000000)={0x11, 0x3, r6, 0x1, 0x1, 0x6, @remote}, 0x14) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ptype\x00') read$FUSE(r8, &(0x7f0000000340)={0x2020}, 0x2020) 6.998476839s ago: executing program 1 (id=4206): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x40, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') lseek(r1, 0x14, 0x1) getdents(r1, 0xffffffffffffffff, 0x5a) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000240)={0x10, 0x700, 0x80, 0x480, 0x3, 0x0, 0x4, 0x2, {0x1, 0xc0000000, 0x1}, {0x9, 0x4, 0x1}, {0x0, 0xfffffff9}, {0x2, 0x8}, 0x1, 0xe2, 0x1, 0x42f0, 0x1, 0xf1f, 0x3c, 0x101, 0x10, 0x3ba, 0x2, 0x4, 0x10, 0x2, 0x0, 0x9}) r3 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000100)=0xffff0080) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000100)='I', 0x0, 0x4}, 0xfffffd87) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r7, &(0x7f0000000100), 0x6) 6.667713416s ago: executing program 1 (id=4208): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x5, 0x40000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CLOCK(r4, 0x4030ae7b, &(0x7f0000000500)={0x3d, 0x4, 0x8, 0x7, 0x80000001}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)=0x4}) ioctl$VIDIOC_DQEVENT(r2, 0x80805659, 0x0) ioctl$sock_proto_private(r1, 0x89a2, &(0x7f0000000000)="d8990ef9b33a") preadv2(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/139, 0x8b}], 0x1, 0x867, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYBLOB="50a78e43a7755a52148531"], 0x138}, 0x1, 0x0, 0x0, 0x4c881}, 0x20000000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="023d1e0101000000000000000032e5ee5f8f90162be0f45bb9e6cb3083066274f289e078ec8255578feefc26a571d35cb97cce20a9e692349d88538d2d23725b8bbcc1c560eac02157598e46c7bb27ea9d3f4c6ef2bc68def532582670a92fb0f047fbe21f49047fdb5f4a6ce12229320c69552bcc926a73723273b02332cc9b73f75b5cf6ecac41e893a22fa8092afca4a24cc17c111ff3c5c9ec4cd85d"], 0x50) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000580)={@private2, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2000000, 0x0, 0x7d, 0x200, 0xfffffffffffffffd, 0x930311}) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback={0x3f}, @loopback, 0x6, 0x0, 0x40, 0x0, 0x50000000, 0x10200}) sendmsg$kcm(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)="41a75d1cb5280e923434c553bdadd61cfcbba33222ba1894c3325c9e6535f339fbeb89bf4a0f39fcc774fc568dcee96bbdc74f707abec24b420861b40bed821c5af5aaed6344f73c2840907e6c4a68bceea7283a3e8ba27d79d4213b85a2c9405badfeed5649a601c4c979be0a06bd39d6157137eb13fb72d9cf607b37f50f911dc42d17c4f0e1f6d99254b3e3fe4e82fd65", 0x92}, {&(0x7f0000000600)="f315d6646cb1995c3902f11251e6230d752373014d5a12366a6a8cf2a0d28950f1da543dedc0ea80f9e076184a9715506b68daaf0e385be89b3c1adb96d350e1c6eb2256c728c7199a1ab0312ef7913047fef811fa802512070025271cdd1200e69ce3ab05b6a0f3d925ae97684e63d16d010c0bd3779ae7ed7d203b805d8b2f6562b53c51730a259cab08ab161a32c239e6f8891eeb436996b8fa9b70dd13a0c3fcbc521f03ea53b4745a3e1a81cc3f9b67a9de77a5e908991aa58fb68066af29a4e1f34998cfcbdb3d2525cd9d5a9365fb4cac", 0xd4}, {&(0x7f0000001400)="3637ec1345da895e37c22bc92bf6d5e31336d3d87a314fe4a250a34988a4aa9c372d3f754257d693ecfb3d5eadc1baf499eb20d637f600a57a60a2f02b1c002542c00477299340329221cb73ff73b649725fcbbda8194d40b1543dde9bebeb11cd373e1db3a80b7ede8c9e3e5cc77072d5b6941c3275dde963097d9e31333254b11b0fa26863fdbc6a0889214ec012c463a6cf72b1ff102857fecbaef228cf6546d0b00a2b522dd50bba19a7b0e330ad4dee6f454d751f2c4d3ccd20eb90e53ed21bf2836d5cd91a47767c72fa7eb20c8591f892176072a564bb5b02f7939c6f2ae28759184dcd6df8f04ac9810e5237f97c54481ad698269f0e974a45d2d5b02907ba5f8f068644cda031b8d9ad0bced9bc134ac4564e756597f8847a059687bcfbcfd16eae007318aafd1cd6aab2b2a2d457f0e405641ea929306781ee7f26d782bf054d32972eb6542c004d2cb1c124cb7733315afa05106afa8fd9ef83723860c6cc073d2e27e43f1ff471fd8df12f8a4028e868029b671e986afff976e950de26926a4469a59f1237198b1017270c6300d06345197908489f4212610362960438027f6e28387d1d0f96bf0c52a0d1679061d1fb7c0b69617b5664725be76260c66cd03cfd38e74907c40d74a7dd41afefa4eb6e7b9f9d2a94d36779f820474447b3", 0x1e4}, {&(0x7f0000002ec0)="801d2eaa5260266544230e2885adc31f15a3b2b36cc15ec0dda7e2b115543684ba1c91463e80e9e307850d333b4c43af64595ca24750c47d83390ad54b71cad5b11e0d4acde7499b092d1f016a2e99175ae31d7b2ade8a2df17ba336163e12e0743c309346967e1be9e0b60ca99a8ce8e4de941e3f4f02786f1db9bee614b1691c1f00f331a24d2b5c4decd2368ebdbbd815b89c557da2f739e0c8ffbf15abfabe7f09c82a9d2aa1bdfecf9ad36d70bff33d274d63b1fda19118f3ba02626de87a36a0294e4558b046f1e84c1105b130c12bb054a44169616907ca2b6aa7a39e454820ae3ceb3ca0266ba707a38a585601a814aaf6188a701433e40ca1a817a44ead49de4172adc251f781c9df0088c3321271e28e50afa962aa7522fd78c39a8382554b0fa6c350d22e8e05bf8b77a9850877a37da8eb76d5a75796832d2698ec511a462340313b96ced12025b7d9a485c057683269236476a00070e3301abb6d220ce495c5f93b5f207334665d3c0bf26ebc56a64d96a34306bdc90d90367094e99434111875b010d86b1d8f5316be75ef969bda1e1f6d66ddaa78029cf172f82a89c3c2f229aaa34ffbfbc2f9fba483dd6a4c32c155243d2ddbe23a976a2c11134112a1172558e0ac9abff99dc916c6f1db8a32e75ffe3ffd724ffb3aaa92230bc380207f7e8f8636a425becfa2ef4a6f0c89e5a5ad4fe501f4053e66b52182f87ef7bd2cecdb145ebb88b73edf45e3c3f0a0b5d45ea900afa44383d39973e4084a68e333cb0f4b53d591231e443699f6389ebe6f7281f8ec7bceb614c8564571f38970b5e709e8aa5decb2b5a204814f5b97e45474639048eae0c6f2105ac2b36aa9c959ce678785c9861ea7502f5f1fd579a6f485d7e341d188889ce2f62783b5fad78f319d295039f916513f9bc9f18cdc84d696f9e91aaeb78e5a29c8dc8239638224ba299a86de14a69bb34c5515a6b4a24d1f1b2646851139d5d970e0b471b1e2b0dc3f05f43a857cc67f4e0ba6318062a3909576996a80d4aa07e635c7e40d2c7f12bc4b2ccfa8deb9f682a8dca819fdc277b76f4f36643b6ac9616e533837260f466b4eb59bc873af25a95faa45e2a9bbce7ef30818beea24265a7b84ed3ee60e85a59ae9fcb54834035b9e945deea94c943417167e4038c6bc897ebaa5758afb0f98eda0f41f590f6ac9fe591beaa2fb26fc3cccb7ff94ca5af1b2cb2e9c0a9217c55b1111c9e04fb6436c3496f8f978023111fda7c6fee141d3b1b46ae51f6944580671469013004668ff9f2733a3c305064580e7bd263dea2cede437af1db5112cc7ba3bd36e67feae8833eb6ccca68830ca9bf7c245c057206e62fa3c799b887e3b997bec6f75e0ccdf9c0b17ff78541f46c3bd4715b3361437a0da4399d753a06ee2b6fad4ea687cd5cc62bf2c4cec7999f6a4d245cf2beead329f6b0b276d1a076a4bf95e370e4d3ed99f6bf87c3384992a97d55fdddc37bca0bce6f9cf13ae2a8dc7125cb43bed4b570e1f25450cc5a20c38f8f0f2c7276762157e6d27db1b6bbb3c3d10dbb607f98b438a1a384bf59ae2a532850e31edc17d51d9168ed63a5af7546e3d740f3eb4a26be371693c1875ff55959d7ac29a4cb79c792cc4874e84e78ecae44217dbcaea53295492eb3c458240fda5db578bd9f32897e88acceeb1a26c9a73c9416b7c497b1c049119a174b19b02c67fc1c162f3dcb4c69b0d10b69321156995f0b64043dba030ff736cc00d210489516c084f9497e2a730167d7080bcd398554e0005c47c5f192fd03dbb1c994554fdb345ff0f2fe4e3e67687ff780b4b6ef81b810454e641b82b4293618d7b84ce37a7ef02b08b821cd5bc3878d3af149cdf2be7ddee211e898a648a48940e9bbc639a71b430643b9e380258f172b516b1e6756f030f7b1341e4df4b6aa12078a7da3c255a32c36a9961a399ab35ab19e2abb89097075ffb95e50cca4272b63f9364ce8bc2a2e151f2f60ed70272b59dc9a1d6612fa9a546c5c1f99e650228c790a1cc96966f60dd24642ad9dd39a1990c10a556e5f5ddca930e8608ba68a20164cdbaf437aae586af1c5674b3867b7c517dc22ef5f8ecd62cc9cc1f0d5d5920f6ab69a26bab29fb0a745879de069e3504cfb96ca876c83aa5ad365bfe573de31082813be43c7399152a5b97f7f6ef08ac53ac3c78ea7cfc8a6c174022f73a500bc51989e3fe9060dd41a97d2ddc79eafaaf03868b0ec88afb70f502fb351bc5c7d3f36387b831baf5dd2bd26cff8fe28625e06f3d16f090888bb19c4e9544fae5ddd423a2a37b873aafffe6b5b69a7eafb6287bfffa9dbbe7cde63dc3420b0af7bee2743153ed59caa89336570a8412f3ce511ae2d1c10797ffbbb1e43a6aa69091c93dc44528136ea1dc645aa23f38a247a9c621daf97b166f5ac4bb836b27a83dfd67d336cff4596a49e0000fd7e075740c6f96a28e57efec35cc74081b19f614170ee69271189bb41750079c273e620e86348dbed47d8df6b19dfb1e0443105c5b935fd00eb0c5719be7fe6af2b0ac52eefd856059782a2eccd04993f8b6876e140e2f559f4298987ccdd3440ca4e6fc7c59cdbe9ec06050ad6a8b4ee0033b67b8531b23f070ba11ee6583b809b41b15d4f82704174ae9c61ae6ef0544e3e0396bdf7f6dfbd476ff12b1145ae0b3f3015ed87789e433b27d426173313a69b657a52b2c8a7cb991a3065e107356a8ea22a6c063527277e32f33dccb65a541758e3f054b460d603f9a57ad249a511c8c0601cc4d3f586af84eec47067b1ae712df6c04f8e44493dcba0805fa669c4ed260ce946e333264d966348c53b64e6a4444ffce1178f4804efec3373e2aa6e5bbcd7647b88bd937d994527d532f64b8e02fa41da3ed9cf8e2b8cf8ed69cb81053b6b240883d9ba2bf4b7a5650a06c567e674625a76be7089481a37f56c50f4a33499d0a071c2ccc0b64b8892a2d64034f509ee704f6baa934b8c98b702983e5d2f5d360cae35e961df16cedbdc09c19369c51b9359b9d2c75445e11ddde0ef1378d76e3cafb6986408e3f35a94fabec790c8b41d707eac2755cfb6f3ded1b3519bade3139f414772a86a601942b391e7bdd862e78940c68540f029fdb5b482b6755fe7d1c3cd796ecf136a642699537f9612aa370c8c69319f834a2fda0f9ca9d3b5b6bfe96a02b60c2f7cc480671930cb5d5ffe85c8cfc0d6d9d8c96d8c84239955fe1a0d37f8c7f0ab0a871a9d03776840a3a8ce09f47d8b6f9ad1f936807ff89f5c5f79d68b2683d7c8b1142c3614e501d86775831f50c092c7a652780e2ca8ad6ddc836c2d7f5c94d178871df065f4b57839d7834c78023b5bf26526cc611d5842ba6d874479fe656c4aa746c94412e883331d8942308b9d86b58af71496c2599d7198e14c85b4114a8a5d695955f4b9ca639693d011fbc5b1379b5f391e8f565590076c84a1322c686be1ef0579cd10dfa542a64ce8919ec29ba9de054344fd6ae3290def62e6ef5f1a51f3e2965d2357dea18104d95fea34b00231c8838583aa22c55fc79105c59a8d3380ab022426687f57b4f31cf6621083f9fae5bb6b37538525ad4702b404969f23bab27ae33bf27d7b7d443c3c65d3e7751587ae54b9795c5fdff283a7a7be66c8deeaa3b31456d704277f2ae9096c11de58cb9a9bc0b5b41958031b491c526c959e755bdb611d5b8018c422f569ad3d592100f76af0e5cd3a009ef8a0b4cf6b6f3281842d157ff6e752c616285c04af46f1070cd7a546f8310290bc406f0b0b34b41420197a849fec16a6db421c9dffd56a3c265354966d8468641ddb942e287dd6a50ba1ffd03dcae36af4204c34c7032d7deb2c082bff506a9ea56b717f186080b49cfbc543b8c80d3d0b31076b7dcb6ff79549f51dbd4334c9aab109595c49911aa171771d50bcc9795ef6d236a00739f7b09f37ab87568b53479bd29393ce1eecc5fc2297f2ee025c43a678193cff6b8e7ff441fb05d7efa3dd8fabfbe681bc12041786490ca68fba0220417b641d78c844a679207643d8b7d63419d4b961dcde845a6ca79f9cd2b59f9f7cb5b86abfabad54a361b866172351266cd1ede101ff1afbe88c45680bf9c58910bd6ec7ceac681f539947cfa866e25c3d410687ae669a2c2875d9bfd75508ca6d17a8690147804d88c7297164adc4dbb80143781f31cf72db66c1c976dd9ada4cb1866b28343c401bee35aa158ab1cd646f1d5a363b072d6c93b98605e595c9f243c8a5d229a5d981795503426a9654970c15382f069b756be0e37e8ac028d3df88bfb1d9a8772622a939b918ab586470af578fac8c9e0d87c93a49f235314cef17910eb137eab55f197751f85440364cd54c94ce0d0f84dd91e54a87e1d59613318f80b48161dba88c0e9723c34aad3265a1cc9cd07d47c36f9296c7d2a2bbff850c1cf6f27bdb6d20bc262bf677337c844f631d3a8ee94710ed25aa435fb6fa5446f368b043c47544ec255a9fa16d3787763da2626f8c662aad7f3ec35ffbb85f2f5f4349025ad1ec8f21c2e2ae252cd9ad46ee6d12f15ad457323587932e78f56a7479169cb058a8a0d2587f7e4f99a810b8fcbc6141c012d588603bb31dc213a60e513312ac7454c4bc16c225f4c50d788cc9f233206e11557bba2dbca2e286d18f645569e00bc9655bd298abbd0208068656e54a76f650741d241cdba49947a274fd87b8a629871994e8a7a0a2bbf77821c34e33b00907e1849f03955791ba90bc8c6346f4928ae52a1432a2deff6f7b10ab55f2e8e8f948c80082ca1ce3d27cebc45d6fa4e35ac62dea0f6e755f93531af9cceeae63500ebe826facff5cb973aae19d2ed0e44cf8ccc987d30bb2e0e603157cc7ca0d71eb6bef5ccfe2e8aba4eef5e718d8acec7e862704f769c061c0fc3dd7936f02618951e752821adad5345cf29bb1c653034a7e6596ae0ff056d66c638402854cae00accc1e089efd086fdf6564dbc4eb07d27dff5287f06ed8ab5474eb5f4b124e14ac112f9c931c7d7689c44a3fbbf79792ba197ef964b435fef0b123c84556cd82ec296d62e86e98732eca933556553c0a99a7e5da3003b691e8b004b51549e30d2f8a8e6192f674ad4a5b6927b5295e1b33ef25582c53b6e2cfb317d8a2e576096ffa3d168267af2154b9227c158222b2617368f73acc3b522968525af76e1da4c8531b4c4d9cf0920442e4724dc7eab1f702c295e9c4994e41a7e111fc62c99780beaf2de63d32719a84774860560c091f3f2a09f2588a7831bf732eec383f733658c9b0f6fecc7eb7eeb9b2f08fbe97a5486e860e9f1a3851977184f8e74038f4b1c54da854475a3f1ca74877ca38c36b4c7d8b401673361241c4e131ff987701314f5e304f8e37fe9d87463137917fd79ecf44b96cb9b464e4b73b9a905ed9c841bcad725a1eaa78075de420edf79fdb6ba7bd0c908f416feb2be4f5793ac46ac55af3ac53b9c4f31bc2b1396a0e9f23f1b08326a06f01674c9e9995d68ed9c5519bd84ab3353657151d07d47c4ac1ec0895fa188a6e25883a03997276064fe67e4f0d90827eb05fb11108847e87b28d6ff3ce08351512555276947b55a96f40faa81a37a46555daa4fee5b48757e3abb3617e1d55b8531ce087503169aed419a1f936fdc4c5763c8f2f1812370e5d6d45c74f108a41e77874dd5816508e6d1a14f55de2b812c529eeb6426945d00d027c94c100893a5a6fbbe47145e9a5a4a2c80c5073ebbb623bf95a9d8e2e6e1e9e0638b91ea2007a65d634f41f39b788d2811d42c6b50c6b5cb2c16fce26ad940c57d8be07b6d260f0d81a1c2808a3bdf0bed9d7eca7314d284dc9b4aaae5f9a8643d574b1558f94127a8eaf15c3cf816b8461f21d7eafc31ca80d4d31020c5df7f9a0eac9ec802208bdc7e517f3815ed07e2572b2d0f1444674f14020ea23c8844d364a54f524192784dae8d1414b2f6d7f3dd22e0c4f7bbfd8cebef60e6fc45e798331dec7e98cb65d15df80234532f", 0x10a1}, {&(0x7f00000009c0)="2b0f3573a20da1f8ea116a6f0a8ad9eadeacd4f5eefbc9dc9308b1dfc09d330cefea46bf96436ba14f05ea6c4b6f0cffd4ba8b3cd4d4b5284ff0e49ee7b1dc3778ebab0438e439fa416e8c5b17c4a913d6948f3345b009c80b225f78add526ea20f36fb497b8e68a0fd9cf01b6f69febe709fe7cc588f114724576064663642678bb74d1bd196b48cd", 0x89}], 0x5}, 0x20000004) lseek(r6, 0x8b8c, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r6, 0xc0c09425, &(0x7f00000003c0)={"8c81c3484ca26360a954bbedd5d51351", 0x0, 0x0, {0x0, 0x3}, {0xa98, 0x7}, 0x81, [0x6, 0x7, 0x8, 0x7fffffff, 0x4, 0x9, 0x8000, 0xffffffffffffffff, 0x7, 0x7, 0x200, 0x95, 0xffffffffffffffff, 0x0, 0x100000001, 0xcc]}) ioctl$BTRFS_IOC_WAIT_SYNC(r6, 0x40089416, &(0x7f0000000080)=r9) r10 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r10, 0xc008561c, &(0x7f0000000080)={0xf0f02a, 0x1}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000c40)={0x0, @empty, @broadcast}, &(0x7f0000000c80)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000013c0)={'vcan0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000001e80)={'gre0\x00', &(0x7f0000001e00)={'sit0\x00', 0x0, 0x80, 0x10, 0x2, 0x7f, {{0xc, 0x4, 0x0, 0x9, 0x30, 0x68, 0x0, 0x1, 0x4, 0x0, @remote, @private=0xa010100, {[@ra={0x94, 0x4, 0x1}, @noop, @timestamp_prespec={0x44, 0x14, 0xec, 0x3, 0x7, [{@empty, 0x4}, {@remote, 0x35}]}]}}}}}) r11 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'vlan1\x00'}) 6.512849594s ago: executing program 33 (id=4208): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x5, 0x40000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CLOCK(r4, 0x4030ae7b, &(0x7f0000000500)={0x3d, 0x4, 0x8, 0x7, 0x80000001}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)=0x4}) ioctl$VIDIOC_DQEVENT(r2, 0x80805659, 0x0) ioctl$sock_proto_private(r1, 0x89a2, &(0x7f0000000000)="d8990ef9b33a") preadv2(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/139, 0x8b}], 0x1, 0x867, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYBLOB="50a78e43a7755a52148531"], 0x138}, 0x1, 0x0, 0x0, 0x4c881}, 0x20000000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="023d1e0101000000000000000032e5ee5f8f90162be0f45bb9e6cb3083066274f289e078ec8255578feefc26a571d35cb97cce20a9e692349d88538d2d23725b8bbcc1c560eac02157598e46c7bb27ea9d3f4c6ef2bc68def532582670a92fb0f047fbe21f49047fdb5f4a6ce12229320c69552bcc926a73723273b02332cc9b73f75b5cf6ecac41e893a22fa8092afca4a24cc17c111ff3c5c9ec4cd85d"], 0x50) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000580)={@private2, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2000000, 0x0, 0x7d, 0x200, 0xfffffffffffffffd, 0x930311}) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback={0x3f}, @loopback, 0x6, 0x0, 0x40, 0x0, 0x50000000, 0x10200}) sendmsg$kcm(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)="41a75d1cb5280e923434c553bdadd61cfcbba33222ba1894c3325c9e6535f339fbeb89bf4a0f39fcc774fc568dcee96bbdc74f707abec24b420861b40bed821c5af5aaed6344f73c2840907e6c4a68bceea7283a3e8ba27d79d4213b85a2c9405badfeed5649a601c4c979be0a06bd39d6157137eb13fb72d9cf607b37f50f911dc42d17c4f0e1f6d99254b3e3fe4e82fd65", 0x92}, {&(0x7f0000000600)="f315d6646cb1995c3902f11251e6230d752373014d5a12366a6a8cf2a0d28950f1da543dedc0ea80f9e076184a9715506b68daaf0e385be89b3c1adb96d350e1c6eb2256c728c7199a1ab0312ef7913047fef811fa802512070025271cdd1200e69ce3ab05b6a0f3d925ae97684e63d16d010c0bd3779ae7ed7d203b805d8b2f6562b53c51730a259cab08ab161a32c239e6f8891eeb436996b8fa9b70dd13a0c3fcbc521f03ea53b4745a3e1a81cc3f9b67a9de77a5e908991aa58fb68066af29a4e1f34998cfcbdb3d2525cd9d5a9365fb4cac", 0xd4}, {&(0x7f0000001400)="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", 0x1e4}, {&(0x7f0000002ec0)="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", 0x10a1}, {&(0x7f00000009c0)="2b0f3573a20da1f8ea116a6f0a8ad9eadeacd4f5eefbc9dc9308b1dfc09d330cefea46bf96436ba14f05ea6c4b6f0cffd4ba8b3cd4d4b5284ff0e49ee7b1dc3778ebab0438e439fa416e8c5b17c4a913d6948f3345b009c80b225f78add526ea20f36fb497b8e68a0fd9cf01b6f69febe709fe7cc588f114724576064663642678bb74d1bd196b48cd", 0x89}], 0x5}, 0x20000004) lseek(r6, 0x8b8c, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r6, 0xc0c09425, &(0x7f00000003c0)={"8c81c3484ca26360a954bbedd5d51351", 0x0, 0x0, {0x0, 0x3}, {0xa98, 0x7}, 0x81, [0x6, 0x7, 0x8, 0x7fffffff, 0x4, 0x9, 0x8000, 0xffffffffffffffff, 0x7, 0x7, 0x200, 0x95, 0xffffffffffffffff, 0x0, 0x100000001, 0xcc]}) ioctl$BTRFS_IOC_WAIT_SYNC(r6, 0x40089416, &(0x7f0000000080)=r9) r10 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r10, 0xc008561c, &(0x7f0000000080)={0xf0f02a, 0x1}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000c40)={0x0, @empty, @broadcast}, &(0x7f0000000c80)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000013c0)={'vcan0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000001e80)={'gre0\x00', &(0x7f0000001e00)={'sit0\x00', 0x0, 0x80, 0x10, 0x2, 0x7f, {{0xc, 0x4, 0x0, 0x9, 0x30, 0x68, 0x0, 0x1, 0x4, 0x0, @remote, @private=0xa010100, {[@ra={0x94, 0x4, 0x1}, @noop, @timestamp_prespec={0x44, 0x14, 0xec, 0x3, 0x7, [{@empty, 0x4}, {@remote, 0x35}]}]}}}}}) r11 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'vlan1\x00'}) 3.511329125s ago: executing program 3 (id=4223): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0xf3021be2a65b013}, 0x0) (fail_nth: 9) 3.43683374s ago: executing program 3 (id=4224): r0 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000180)=""/42, 0x18) 3.436148162s ago: executing program 3 (id=4225): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYRESOCT=r3, @ANYRES16=r1, @ANYBLOB="4d7e00000000fcffffff2a00000008002f000000000005003600000000000c0005000000000000000000050037000000000008000200", @ANYRES16=r3, @ANYBLOB="0001000000000000"], 0x48}, 0x4, 0x700000000000000}, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000000)={[{0x3cd2ef5c, 0xfffd, 0x1, 0x2, 0x8, 0x80, 0x8, 0xb, 0x90, 0x0, 0x7, 0x7, 0x3c5baf4e}, {0xa9, 0xd9, 0x0, 0x2, 0x7, 0x8, 0x5, 0x6, 0xb, 0x1, 0x3, 0x9, 0xf2}, {0x7fffffff, 0x4, 0xc, 0x2, 0x0, 0x2, 0x7, 0x0, 0x9, 0x4, 0x8, 0x4, 0x1}], 0x7}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], &(0x7f0000000080)=""/35, 0x8c, 0x23, 0x0, 0xfffffd75, 0x10000}, 0x28) syz_io_uring_setup(0x10d, &(0x7f00000004c0)={0x0, 0x8b7c, 0x2000, 0x7, 0x3d4}, 0x0, 0x0) r6 = socket(0x2c, 0x803, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r7, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = socket$inet(0x2, 0x1, 0x0) shutdown(r10, 0x0) recvmmsg(r10, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000640)=ANY=[@ANYBLOB="1500000000000000c40100000000000000000000000000002bc6fb810b995008ee3875fa6ee220b34a21cbc5219f9fe0416d0f4283d73ddfc37d49fe3b7d31b701745ca594f7a4decd672f72021b9741d4ed8b546fcc7b8e192e414c7b772545000334bd01f5411bebbcf88c69167b74b8a5b52da5f6ff34526ae11c9ce679113c75c697b2b7a08a5e9ed5a6029cd7d32a57ac3a640b1706f4a21bd76b1a9b6984bf0ebe71bd44c5550a567883be9bf92f7927ff159bde3c2fe2e754e82eb5"]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x80000000) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0xf, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32=r9, @ANYRES16=0x0, @ANYRES32=r6], 0xcc}, 0x1, 0x0, 0x0, 0x40000010}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) 3.067978072s ago: executing program 0 (id=4229): r0 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x7ff, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r3, 0x0, 0x1}, 0x18) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000080)=ANY=[]) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000140)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r6 = gettid() syz_open_procfs(r6, &(0x7f00000001c0)='net/dev\x00') r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x180, 0x0) ioctl$TIOCGSOFTCAR(r7, 0x5414, &(0x7f0000000000)) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'rti802\x00', [0x8001, 0x6, 0x1, 0x0, 0x0, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x7, 0x0, 0x7, 0x4, 0x6, 0xffffffff, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x4000002, 0xf27, 0xffff, 0x7, 0x8, 0x5, 0x8, 0x4, 0x10000, 0xfffffff8]}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[], 0x32600) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000100)) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x15, 0x1}, 0x34000) 2.604584073s ago: executing program 5 (id=4209): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) kexec_load(0x2, 0x3, &(0x7f00000003c0)=[{&(0x7f0000000340)="d96498e161e78d362e82b9e6b1cf8bd2936fcf4c9f530834f2572ef52b7585047f7cb160efe6ebbda5372418910a71fa306560bb33cbda94851143707bf200ea14d6854087218f32b20f06ea6db9b4380be9084b4206ccb4e88cd9d9ce2015d33059295eb41188a038", 0x69, 0xffffffff, 0x3}, {&(0x7f0000000500)="7031804d4d515d895986cc44351a62f64ef0837ceba2464fd83f893ca64fe79d6c1f48bca8a5be6539c0a1f5f14579c354fbeb7ca7c99d1315f9a598edfc2c75de6638751162750409e4501a7722fad9c5b4df6603739a002d069af8", 0x5c, 0x9, 0xc}, {&(0x7f0000000580)="1df6f403343c957d93554a84584f1c7916e205651aea53f9a02e016c74704ce14eec83c609079407b7d6b1333b24ac876ca6de8dab950f2a765102e62b23fc30ecaadd9f0f0621a6ab64002891bf003c39c9c0005d8c8928fa52d63f84fa61e23964432cd2a4fa3458b916a08fed52", 0x6f, 0x7fff, 0x5}], 0x150000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x3c}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) syz_emit_ethernet(0x82, &(0x7f0000000800)=ANY=[@ANYBLOB="0180c20000001704b45adbde810000976ef8d9bea4783b06dace24df6e000800450000700000000000019078ac1e0001ac1414aa05009078e00000e0450000000000000000110000ac1414aa00000000830300443c00030a011100010000000000000000000000ffffffff00000000ac141400"/144], 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002d40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000000)=0x7, 0x4) r2 = socket(0x800000018, 0x2, 0x0) bind$unix(r2, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x800, 'syz1\x00'}, 0x1, [0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x2, 0xffffffffffffeaf0, 0xad0a, 0x67e8, 0x0, 0xff, 0xfffffff9, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0x8, 0xffffffffffffb443, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x10000000, 0x0, 0xfffffffc, 0x4, 0x800000, 0x0, 0x101, 0x0, 0xd721, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x3, 0x81, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x599, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}) r4 = syz_io_uring_setup(0x189c, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000240)=0xffffffff, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x1, 0x0, 0x4}]}, 0x10) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r7, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000740)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000007c0)={r8, 0x2, r0, 0x3, 0x80000}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r3, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="2c340677654dee98f79f000000", @ANYRES16=r10, @ANYBLOB="050000000000000600000600000008000300", @ANYRES32, @ANYBLOB="1fc430b5ba"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f00000006c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r10, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x7, 0x1}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20004080) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0xa, 0x4e20, 0x4080000, @dev={0xfe, 0x80, '\x00', 0x1a}}, 0x1c, 0x0}, 0x40c0) 2.504964133s ago: executing program 4 (id=4230): r0 = fsopen(&(0x7f0000000200)='mqueue\x00', 0x0) socketpair(0xa, 0xa, 0x0, &(0x7f0000000040)) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) 2.314563584s ago: executing program 3 (id=4231): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x500, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d61637674617000000008000140000000050a0007"], 0xf4}}, 0x10) 2.310114951s ago: executing program 4 (id=4232): r0 = eventfd2(0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x141, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x7d) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x7e) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r3 = accept4(r1, 0x0, 0x0, 0x80800) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)={0x60000019}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x24) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x29}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4008080}, 0x10) writev(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1f49b320ce08a98e", 0x8}, {&(0x7f0000000140)="ee", 0x1}], 0x2) r4 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r4, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @remote, 0xffffffe0}, 0x1c, 0x0, 0x0, &(0x7f0000000000)}, 0x10) r5 = getpgid(0xffffffffffffffff) fcntl$lock(r3, 0x25, &(0x7f0000000080)={0x0, 0x4, 0x6, 0x1, r5}) 2.13165645s ago: executing program 3 (id=4233): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000022000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="ce010a00009a697f65360c5e86dd", 0x0, 0x1fe7, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r8 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r8, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x4cbe8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xb}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg(r9, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x1, 0x0, 0x4}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) 2.129536663s ago: executing program 4 (id=4234): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f000000fec0)=ANY=[@ANYBLOB="04000000000010"]) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) timerfd_create(0x6, 0x0) 2.08813598s ago: executing program 4 (id=4235): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000010000)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffd74, 0x40004, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000300)='westwood', 0x8) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x114}], 0x1}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) r2 = add_key$user(&(0x7f0000000380), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) sendmsg$key(r3, &(0x7f00000001c0)={0x40000000, 0x0, 0x0}, 0x4000000) r4 = add_key$user(0x0, &(0x7f00000005c0), 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r4, r4}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)=ANY=[], 0x114}], 0x1}, 0x80) mkdir(&(0x7f0000000140)='./file0\x00', 0x63) 1.99612572s ago: executing program 0 (id=4236): openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x1a1002, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async, rerun: 32) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) (async) connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) (async) sendmmsg$inet6(r1, &(0x7f0000006bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[@dontfrag={{0x10, 0x29, 0x3e, 0x6}}], 0x10}}], 0x2, 0xff00) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async, rerun: 64) sched_setaffinity(r0, 0xffffffb3, &(0x7f0000000240)=0x2) (rerun: 64) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x68}}, 0x0) (async) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) (async, rerun: 32) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) (rerun: 32) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000001c0)={0x1ff, 0x1, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (rerun: 32) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x40000073, 0x0, 0x3}]}) (async) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x0, 0x300) 1.925212847s ago: executing program 0 (id=4237): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r1 = dup(r0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$cgroup_subtree(r1, &(0x7f00000005c0)=ANY=[], 0x32600) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) write$P9_RRENAME(r1, &(0x7f0000000040)={0x34000, 0x15, 0x1}, 0x7) 1.710134764s ago: executing program 5 (id=4238): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x101600, 0x0) socket$inet6(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYRESHEX], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r2) (async) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r2) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x4e, 0x1, 0xffffffff, 0x0, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r7 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r7, &(0x7f0000001440)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000001840)="a905000000007464000100000000000000e5c0d8af7a6417e436a106993e1e5ad8311dab", 0x24}], 0x1}}, {{&(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="100000000000000007"], 0x10}}], 0x2, 0x40000) (async) sendmmsg$inet(r7, &(0x7f0000001440)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000001840)="a905000000007464000100000000000000e5c0d8af7a6417e436a106993e1e5ad8311dab", 0x24}], 0x1}}, {{&(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="100000000000000007"], 0x10}}], 0x2, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x103) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x103) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) epoll_create1(0x0) (async) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r0, &(0x7f0000000680)={0x4000000c}) 1.165688491s ago: executing program 4 (id=4239): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)={0x4cc, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x480, 0x8, 0x0, 0x1, [{0xa8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x5c, 0x9, 0x0, 0x1, [{0x58}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x388, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x340, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0xb}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0xffffffffffffffec, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x4cc}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) creat(&(0x7f0000000440)='./file0\x00', 0x0) syz_clone(0x1010000, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r6, r6, 0x0, 0x40008) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000005c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}]}}) 1.016640971s ago: executing program 0 (id=4240): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1f, &(0x7f00000002c0)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0xf3021be2a65b013}, 0x0) 1.016114235s ago: executing program 0 (id=4241): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40002) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = gettid() prctl$PR_SCHED_CORE(0x53564d41, 0x0, r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r4) r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0xf4) fcntl$setlease(r6, 0x400, 0x1) r7 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r7, &(0x7f0000000340)={'#! ', './file0'}, 0xb) r8 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r8, &(0x7f0000000240)=[{&(0x7f0000001680)='0', 0x1}, {&(0x7f0000000080)='+', 0x1}], 0x2) socket$kcm(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @private=0xa010101}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x184, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x0, 0xb4}) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, 0x0) fcntl$dupfd(r1, 0x0, r1) 357.994888ms ago: executing program 0 (id=4242): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40002) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r2 = gettid() prctl$PR_SCHED_CORE(0x53564d41, 0x0, r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r4) r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0xf4) fcntl$setlease(r6, 0x400, 0x1) r7 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r7, &(0x7f0000000340)={'#! ', './file0'}, 0xb) r8 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r8, &(0x7f0000000240)=[{&(0x7f0000001680)='0', 0x1}, {&(0x7f0000000080)='+', 0x1}], 0x2) socket$kcm(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @private=0xa010101}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x184, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x0, 0xb4}) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, 0x0) fcntl$dupfd(r1, 0x0, r1) 300.644013ms ago: executing program 5 (id=4243): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x700, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}}, 0x40) 285.356618ms ago: executing program 3 (id=4244): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)={0x4cc, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x480, 0x8, 0x0, 0x1, [{0xa8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x5c, 0x9, 0x0, 0x1, [{0x58}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x388, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x340, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0xb}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0xffffffffffffffec, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x4cc}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) creat(&(0x7f0000000440)='./file0\x00', 0x0) syz_clone(0x1010000, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r6, r6, 0x0, 0x40008) (fail_nth: 2) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000005c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}]}}) 171.219944ms ago: executing program 4 (id=4245): r0 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) landlock_restrict_self(r0, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_io_uring_setup(0x497, &(0x7f0000000480)={0x0, 0x9013, 0x100, 0x4, 0x165}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) ptrace$peeksig(0x4209, r4, &(0x7f00000000c0), 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x3, 0x8}) io_uring_enter(r7, 0x3517, 0x173d, 0x42, 0x0, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x0, r3}) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x240408c1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000140)={0x6, 0x10, '\x00', 0x0, &(0x7f00000000c0)=[0x0, 0x0]}) r10 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r11, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r10, 0x4c0a, &(0x7f00000002c0)={r11, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) 97.200129ms ago: executing program 5 (id=4246): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffe15) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r0, 0x621) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) r3 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000000)="1c681411f7a496c0dacc6a3c24465b016f64b4c00b5f7c691cb24cb8000000001a0000200000000000201500", 0x0, 0x48) ioctl$UFFDIO_WAKE(r4, 0x8010aa02, &(0x7f00000002c0)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) close_range(r2, 0xffffffffffffffff, 0x0) 0s ago: executing program 5 (id=4247): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mknod$loop(0x0, 0x10, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, 0x0, 0x4004101) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x100) ioctl$int_in(r1, 0x5452, &(0x7f00000001c0)=0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)=0xffb) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r2, 0x40086603, &(0x7f0000000040)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000100), 0x0, 0x2062, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002680)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002640)={&(0x7f0000002600)={0x28, 0x140b, 0x400, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x4881) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40186f40, 0x0) r5 = openat$hpet(0xffffff9c, &(0x7f0000000000), 0x101180, 0x0) ppoll(&(0x7f00000012c0)=[{r5, 0x50}], 0x1, &(0x7f0000001300), 0x0, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002280)={&(0x7f0000002140)=ANY=[@ANYBLOB="9feb01001800000000000000e7000000e70000000b00000006040000000a00000000000000040000000700000004000000000000100c000000070000000200000f0300000004000000c7d5000007000000050000000080000064060000a41ab90d000000040000130900000008000400070000002c00000004000000ad00000001f0ffff0a00000000020000000400000500000008000000000000001000000000000007000000000c00000000000001000000003e002f01060000000000ed68f74ee602fcf200000500000d000000000a0000000200000005000000040000000d00000002000000070000000200000006000000000000000000002e5f0030002e2e6100"], &(0x7f0000002080)=""/91, 0x10b, 0x5b, 0x1, 0x1, 0x10000}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002540)={r6, 0x20, &(0x7f00000023c0)={&(0x7f00000022c0)=""/233, 0xe9, 0x0, &(0x7f0000002480)=""/156, 0x9c}}, 0x10) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000, 0x8000}], 0x320000) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="04230d00c8000102fcd1ca9a2e3c5a63"], 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) kernel console output (not intermixed with test programs): RDI: 0000000000000000 [ 623.537186][T17914] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 623.537192][T17914] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 623.537198][T17914] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 623.537211][T17914] [ 623.785815][T17916] 9pnet_fd: Insufficient options for proto=fd [ 623.857277][ T1416] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 623.861799][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.351467][ T40] kauditd_printk_skb: 33 callbacks suppressed [ 624.351485][ T40] audit: type=1326 audit(1760858926.186:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17932 comm="syz.4.3243" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 624.361785][ T40] audit: type=1326 audit(1760858926.186:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17932 comm="syz.4.3243" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 624.373403][ T40] audit: type=1326 audit(1760858926.196:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17932 comm="syz.4.3243" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 624.380584][ T40] audit: type=1326 audit(1760858926.196:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17932 comm="syz.4.3243" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 624.387911][ T40] audit: type=1326 audit(1760858926.196:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17932 comm="syz.4.3243" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 624.396357][ T40] audit: type=1326 audit(1760858926.196:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17932 comm="syz.4.3243" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 624.403444][ T40] audit: type=1326 audit(1760858926.196:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17932 comm="syz.4.3243" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 624.411134][ T40] audit: type=1326 audit(1760858926.206:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17932 comm="syz.4.3243" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 624.419012][ T40] audit: type=1326 audit(1760858926.206:2033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17932 comm="syz.4.3243" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 624.426599][ T40] audit: type=1326 audit(1760858926.206:2034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17936 comm="syz.4.3243" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 624.608587][T17943] FAULT_INJECTION: forcing a failure. [ 624.608587][T17943] name failslab, interval 1, probability 0, space 0, times 0 [ 624.614998][T17943] CPU: 3 UID: 0 PID: 17943 Comm: syz.4.3245 Not tainted syzkaller #0 PREEMPT(full) [ 624.615023][T17943] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 624.615034][T17943] Call Trace: [ 624.615040][T17943] [ 624.615048][T17943] dump_stack_lvl+0x16c/0x1f0 [ 624.615078][T17943] should_fail_ex+0x512/0x640 [ 624.615094][T17943] ? fs_reclaim_acquire+0xae/0x150 [ 624.615143][T17943] should_failslab+0xc2/0x120 [ 624.615161][T17943] __kmalloc_noprof+0xdd/0x880 [ 624.615196][T17943] ? tomoyo_encode2+0x100/0x3e0 [ 624.615224][T17943] ? tomoyo_encode2+0x100/0x3e0 [ 624.615247][T17943] tomoyo_encode2+0x100/0x3e0 [ 624.615273][T17943] tomoyo_encode+0x29/0x50 [ 624.615295][T17943] tomoyo_realpath_from_path+0x18f/0x6e0 [ 624.615322][T17943] ? tomoyo_profile+0x47/0x60 [ 624.615339][T17943] tomoyo_path_number_perm+0x245/0x580 [ 624.615358][T17943] ? tomoyo_path_number_perm+0x237/0x580 [ 624.615380][T17943] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 624.615424][T17943] ? find_held_lock+0x2b/0x80 [ 624.615448][T17943] ? hook_file_ioctl_common+0x145/0x410 [ 624.615478][T17943] ? __fget_files+0x20e/0x3c0 [ 624.615505][T17943] security_file_ioctl_compat+0x9b/0x240 [ 624.615531][T17943] __ia32_compat_sys_ioctl+0xc3/0x370 [ 624.615554][T17943] __do_fast_syscall_32+0x7c/0x300 [ 624.615574][T17943] do_fast_syscall_32+0x32/0x80 [ 624.615590][T17943] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 624.615612][T17943] RIP: 0023:0xf707d579 [ 624.615626][T17943] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 624.615642][T17943] RSP: 002b:00000000f546d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 624.615661][T17943] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000004020ae46 [ 624.615672][T17943] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 624.615682][T17943] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 624.615692][T17943] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 624.615703][T17943] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 624.615726][T17943] [ 624.615832][T17943] ERROR: Out of memory at tomoyo_realpath_from_path. [ 625.131908][T17949] FAULT_INJECTION: forcing a failure. [ 625.131908][T17949] name failslab, interval 1, probability 0, space 0, times 0 [ 625.137170][T17949] CPU: 3 UID: 0 PID: 17949 Comm: syz.3.3247 Not tainted syzkaller #0 PREEMPT(full) [ 625.137193][T17949] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 625.137203][T17949] Call Trace: [ 625.137209][T17949] [ 625.137216][T17949] dump_stack_lvl+0x16c/0x1f0 [ 625.137247][T17949] should_fail_ex+0x512/0x640 [ 625.137262][T17949] ? fs_reclaim_acquire+0xae/0x150 [ 625.137280][T17949] should_failslab+0xc2/0x120 [ 625.137296][T17949] __kmalloc_noprof+0xdd/0x880 [ 625.137316][T17949] ? tomoyo_encode2+0x100/0x3e0 [ 625.137348][T17949] ? tomoyo_encode2+0x100/0x3e0 [ 625.137368][T17949] tomoyo_encode2+0x100/0x3e0 [ 625.137393][T17949] tomoyo_encode+0x29/0x50 [ 625.137413][T17949] tomoyo_realpath_from_path+0x18f/0x6e0 [ 625.137441][T17949] tomoyo_path_number_perm+0x245/0x580 [ 625.137460][T17949] ? tomoyo_path_number_perm+0x237/0x580 [ 625.137480][T17949] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 625.137524][T17949] ? find_held_lock+0x2b/0x80 [ 625.137545][T17949] ? hook_file_ioctl_common+0x145/0x410 [ 625.137571][T17949] ? __fget_files+0x20e/0x3c0 [ 625.137597][T17949] security_file_ioctl_compat+0x9b/0x240 [ 625.137619][T17949] __ia32_compat_sys_ioctl+0xc3/0x370 [ 625.137640][T17949] __do_fast_syscall_32+0x7c/0x300 [ 625.137659][T17949] do_fast_syscall_32+0x32/0x80 [ 625.137675][T17949] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 625.137694][T17949] RIP: 0023:0xf7fe1579 [ 625.137722][T17949] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 625.137740][T17949] RSP: 002b:00000000f54d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 625.137756][T17949] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005417 [ 625.137767][T17949] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 625.137777][T17949] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 625.137787][T17949] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 625.137797][T17949] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 625.137820][T17949] [ 625.137856][T17949] ERROR: Out of memory at tomoyo_realpath_from_path. [ 625.405704][T17959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3251'. [ 625.576327][T17971] team0: No ports can be present during mode change [ 625.585248][T17971] vlan0: entered promiscuous mode [ 625.595163][T17971] team0: Port device vlan0 added [ 625.604007][T17971] tipc: Enabled bearer , priority 0 [ 625.906065][T17964] syz.3.3253 (17964): drop_caches: 1 [ 625.970119][T17964] syz.3.3253 (17964): drop_caches: 1 [ 626.072130][T17984] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 626.074874][T17984] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 626.089638][T17984] vhci_hcd vhci_hcd.0: Device attached [ 626.406578][ T6002] usb 38-1: SetAddress Request (34) to port 0 [ 626.409870][ T6002] usb 38-1: new SuperSpeed USB device number 34 using vhci_hcd [ 626.610111][T17985] vhci_hcd: connection reset by peer [ 626.612864][T16577] vhci_hcd: stop threads [ 626.615455][T16577] vhci_hcd: release socket [ 626.617480][T16577] vhci_hcd: disconnect device [ 626.733523][ T1325] tipc: Node number set to 514991938 [ 627.108581][T18002] FAULT_INJECTION: forcing a failure. [ 627.108581][T18002] name failslab, interval 1, probability 0, space 0, times 0 [ 627.113592][T18002] CPU: 0 UID: 0 PID: 18002 Comm: syz.4.3262 Not tainted syzkaller #0 PREEMPT(full) [ 627.113615][T18002] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 627.113625][T18002] Call Trace: [ 627.113633][T18002] [ 627.113641][T18002] dump_stack_lvl+0x16c/0x1f0 [ 627.113669][T18002] should_fail_ex+0x512/0x640 [ 627.113684][T18002] ? __kmalloc_noprof+0xca/0x880 [ 627.113705][T18002] should_failslab+0xc2/0x120 [ 627.113721][T18002] __kmalloc_noprof+0xdd/0x880 [ 627.113738][T18002] ? __pfx___mutex_trylock_common+0x10/0x10 [ 627.113758][T18002] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 627.113797][T18002] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 627.113815][T18002] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 627.113837][T18002] ? __mutex_lock+0x1c5/0x1060 [ 627.113854][T18002] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 627.113873][T18002] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 627.113899][T18002] ? bpf_lsm_capable+0x9/0x10 [ 627.113914][T18002] ? security_capable+0x7e/0x260 [ 627.113931][T18002] ? ns_capable+0xd7/0x110 [ 627.113959][T18002] genl_rcv_msg+0x55c/0x800 [ 627.113983][T18002] ? __pfx_genl_rcv_msg+0x10/0x10 [ 627.114001][T18002] ? __pfx_l2tp_nl_cmd_tunnel_get+0x10/0x10 [ 627.114035][T18002] netlink_rcv_skb+0x158/0x420 [ 627.114051][T18002] ? __pfx_genl_rcv_msg+0x10/0x10 [ 627.114069][T18002] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 627.114100][T18002] genl_rcv+0x28/0x40 [ 627.114119][T18002] netlink_unicast+0x5aa/0x870 [ 627.114143][T18002] ? __pfx_netlink_unicast+0x10/0x10 [ 627.114170][T18002] netlink_sendmsg+0x8c8/0xdd0 [ 627.114191][T18002] ? __pfx_netlink_sendmsg+0x10/0x10 [ 627.114211][T18002] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 627.114232][T18002] ____sys_sendmsg+0xa98/0xc70 [ 627.114254][T18002] ? __pfx_____sys_sendmsg+0x10/0x10 [ 627.114276][T18002] ? get_compat_msghdr+0x11a/0x170 [ 627.114310][T18002] ___sys_sendmsg+0x134/0x1d0 [ 627.114339][T18002] ? __pfx____sys_sendmsg+0x10/0x10 [ 627.114376][T18002] ? find_held_lock+0x2b/0x80 [ 627.114412][T18002] __sys_sendmsg+0x16d/0x220 [ 627.114435][T18002] ? __pfx___sys_sendmsg+0x10/0x10 [ 627.114468][T18002] ? rcu_is_watching+0x12/0xc0 [ 627.114495][T18002] __do_fast_syscall_32+0x7c/0x300 [ 627.114517][T18002] do_fast_syscall_32+0x32/0x80 [ 627.114533][T18002] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 627.114552][T18002] RIP: 0023:0xf707d579 [ 627.114567][T18002] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 627.114582][T18002] RSP: 002b:00000000f546d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 627.114614][T18002] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000140 [ 627.114625][T18002] RDX: 0000000020000084 RSI: 0000000000000000 RDI: 0000000000000000 [ 627.114634][T18002] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 627.114643][T18002] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 627.114652][T18002] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 627.114676][T18002] [ 627.361043][ T1325] kernel write not supported for file /newroot/285/file0 (pid: 1325 comm: kworker/2:2) [ 627.822317][T18034] FAULT_INJECTION: forcing a failure. [ 627.822317][T18034] name failslab, interval 1, probability 0, space 0, times 0 [ 627.827778][T18034] CPU: 0 UID: 0 PID: 18034 Comm: syz.4.3275 Not tainted syzkaller #0 PREEMPT(full) [ 627.827794][T18034] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 627.827801][T18034] Call Trace: [ 627.827805][T18034] [ 627.827809][T18034] dump_stack_lvl+0x16c/0x1f0 [ 627.827830][T18034] should_fail_ex+0x512/0x640 [ 627.827841][T18034] ? fs_reclaim_acquire+0xae/0x150 [ 627.827853][T18034] should_failslab+0xc2/0x120 [ 627.827864][T18034] __kmalloc_noprof+0xdd/0x880 [ 627.827878][T18034] ? tomoyo_encode2+0x100/0x3e0 [ 627.827895][T18034] ? tomoyo_encode2+0x100/0x3e0 [ 627.827909][T18034] tomoyo_encode2+0x100/0x3e0 [ 627.827925][T18034] tomoyo_encode+0x29/0x50 [ 627.827940][T18034] tomoyo_realpath_from_path+0x18f/0x6e0 [ 627.827959][T18034] tomoyo_check_open_permission+0x2ab/0x3c0 [ 627.827973][T18034] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 627.828000][T18034] ? do_raw_spin_lock+0x12c/0x2b0 [ 627.828017][T18034] tomoyo_file_open+0x6b/0x90 [ 627.828028][T18034] security_file_open+0x84/0x1e0 [ 627.828050][T18034] do_dentry_open+0x596/0x1530 [ 627.828070][T18034] vfs_open+0x82/0x3f0 [ 627.828083][T18034] path_openat+0x1de4/0x2cb0 [ 627.828103][T18034] ? __pfx_path_openat+0x10/0x10 [ 627.828121][T18034] do_filp_open+0x20b/0x470 [ 627.828136][T18034] ? __pfx_do_filp_open+0x10/0x10 [ 627.828161][T18034] ? _raw_spin_unlock+0x28/0x50 [ 627.828175][T18034] ? alloc_fd+0x471/0x7d0 [ 627.828193][T18034] do_sys_openat2+0x11b/0x1d0 [ 627.828205][T18034] ? __pfx_do_sys_openat2+0x10/0x10 [ 627.828218][T18034] ? __fget_files+0x20e/0x3c0 [ 627.828231][T18034] ? handle_mm_fault+0x220/0xd10 [ 627.828246][T18034] __ia32_compat_sys_openat+0x16d/0x210 [ 627.828259][T18034] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 627.828272][T18034] ? ksys_write+0x1ac/0x250 [ 627.828288][T18034] ? rcu_is_watching+0x12/0xc0 [ 627.828306][T18034] __do_fast_syscall_32+0x7c/0x300 [ 627.828317][T18034] do_fast_syscall_32+0x32/0x80 [ 627.828327][T18034] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 627.828342][T18034] RIP: 0023:0xf707d579 [ 627.828350][T18034] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 627.828360][T18034] RSP: 002b:00000000f546d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 627.828371][T18034] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800001c0 [ 627.828378][T18034] RDX: 0000000000000801 RSI: 0000000000000000 RDI: 0000000000000000 [ 627.828384][T18034] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 627.828390][T18034] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 627.828396][T18034] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 627.828409][T18034] [ 627.828438][T18034] ERROR: Out of memory at tomoyo_realpath_from_path. [ 627.847816][T18036] fuse: Unknown parameter 'grou00000000000000000000' [ 627.849605][T18034] debugfs: 'ttyS3' already exists in 'caif_serial' [ 629.235200][T18072] usb usb4: usbfs: process 18072 (syz.4.3282) did not claim interface 0 before use [ 629.238418][T18072] FAULT_INJECTION: forcing a failure. [ 629.238418][T18072] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 629.244555][T18072] CPU: 3 UID: 0 PID: 18072 Comm: syz.4.3282 Not tainted syzkaller #0 PREEMPT(full) [ 629.244570][T18072] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 629.244577][T18072] Call Trace: [ 629.244581][T18072] [ 629.244585][T18072] dump_stack_lvl+0x16c/0x1f0 [ 629.244606][T18072] should_fail_ex+0x512/0x640 [ 629.244619][T18072] _copy_to_user+0x32/0xd0 [ 629.244631][T18072] simple_read_from_buffer+0xcb/0x170 [ 629.244646][T18072] proc_fail_nth_read+0x197/0x240 [ 629.244662][T18072] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 629.244677][T18072] ? rw_verify_area+0xcf/0x6c0 [ 629.244691][T18072] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 629.244705][T18072] vfs_read+0x1e4/0xcf0 [ 629.244723][T18072] ? __pfx_vfs_read+0x10/0x10 [ 629.244736][T18072] ? find_held_lock+0x2b/0x80 [ 629.244755][T18072] ? __fget_files+0x20e/0x3c0 [ 629.244773][T18072] ksys_read+0x12a/0x250 [ 629.244788][T18072] ? __pfx_ksys_read+0x10/0x10 [ 629.244802][T18072] ? fput+0x9b/0xd0 [ 629.244812][T18072] ? rcu_is_watching+0x12/0xc0 [ 629.244829][T18072] __do_fast_syscall_32+0x7c/0x300 [ 629.244841][T18072] do_fast_syscall_32+0x32/0x80 [ 629.244851][T18072] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 629.244864][T18072] RIP: 0023:0xf707d579 [ 629.244895][T18072] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 629.244906][T18072] RSP: 002b:00000000f546d590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 629.244916][T18072] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f546d620 [ 629.244923][T18072] RDX: 000000000000000f RSI: 00000000f7415ff4 RDI: 0000000000000000 [ 629.244929][T18072] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 629.244935][T18072] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 629.244941][T18072] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 629.244954][T18072] [ 629.359811][T18074] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3283'. [ 629.407511][T18078] fuse: Unknown parameter 'grou00000000000000000000' [ 629.823882][T18089] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 629.826640][T18089] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 629.830280][T18089] vhci_hcd vhci_hcd.0: Device attached [ 629.866535][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 629.866634][ T40] audit: type=1800 audit(1760858931.706:2040): pid=18089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3288" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 630.104554][T15365] usb 46-1: SetAddress Request (22) to port 0 [ 630.107932][T15365] usb 46-1: new SuperSpeed USB device number 22 using vhci_hcd [ 630.372707][T18090] vhci_hcd: connection reset by peer [ 630.374998][T16577] vhci_hcd: stop threads [ 630.376526][T16577] vhci_hcd: release socket [ 630.378247][T16577] vhci_hcd: disconnect device [ 630.527754][T18101] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3292'. [ 630.587611][T18108] fuse: Unknown parameter 'grou00000000000000000000' [ 630.588307][T18106] usb usb4: usbfs: process 18106 (syz.0.3293) did not claim interface 0 before use [ 630.685801][T18113] FAULT_INJECTION: forcing a failure. [ 630.685801][T18113] name failslab, interval 1, probability 0, space 0, times 0 [ 630.691013][T18113] CPU: 3 UID: 0 PID: 18113 Comm: syz.3.3295 Not tainted syzkaller #0 PREEMPT(full) [ 630.691036][T18113] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 630.691069][T18113] Call Trace: [ 630.691077][T18113] [ 630.691086][T18113] dump_stack_lvl+0x16c/0x1f0 [ 630.691119][T18113] should_fail_ex+0x512/0x640 [ 630.691138][T18113] ? fs_reclaim_acquire+0xae/0x150 [ 630.691159][T18113] should_failslab+0xc2/0x120 [ 630.691177][T18113] __kmalloc_noprof+0xdd/0x880 [ 630.691198][T18113] ? kfree+0x252/0x6d0 [ 630.691217][T18113] ? trace_kmalloc+0x2b/0xd0 [ 630.691232][T18113] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 630.691263][T18113] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 630.691287][T18113] tomoyo_realpath_from_path+0xc2/0x6e0 [ 630.691315][T18113] ? tomoyo_fill_path_info+0x233/0x420 [ 630.691337][T18113] tomoyo_mount_acl+0x1ae/0x850 [ 630.691359][T18113] ? bpf_ksym_find+0x124/0x1c0 [ 630.691386][T18113] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 630.691414][T18113] ? is_bpf_text_address+0x94/0x1a0 [ 630.691435][T18113] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 630.691457][T18113] ? unwind_get_return_address+0x59/0xa0 [ 630.691508][T18113] ? tomoyo_domain+0xbb/0x150 [ 630.691526][T18113] ? tomoyo_profile+0x47/0x60 [ 630.691545][T18113] tomoyo_mount_permission+0x16d/0x420 [ 630.691568][T18113] ? tomoyo_mount_permission+0x14f/0x420 [ 630.691593][T18113] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 630.691632][T18113] security_sb_mount+0x9b/0x260 [ 630.691654][T18113] path_mount+0x158/0x23a0 [ 630.691685][T18113] ? __pfx_path_mount+0x10/0x10 [ 630.691712][T18113] ? kmem_cache_free+0x2d4/0x6c0 [ 630.691734][T18113] ? putname+0x154/0x1a0 [ 630.691755][T18113] ? putname+0x154/0x1a0 [ 630.691788][T18113] ? __ia32_sys_mount+0x291/0x310 [ 630.691812][T18113] __ia32_sys_mount+0x291/0x310 [ 630.691839][T18113] ? __pfx___ia32_sys_mount+0x10/0x10 [ 630.691867][T18113] ? rcu_is_watching+0x12/0xc0 [ 630.691895][T18113] __do_fast_syscall_32+0x7c/0x300 [ 630.691915][T18113] do_fast_syscall_32+0x32/0x80 [ 630.691947][T18113] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 630.691970][T18113] RIP: 0023:0xf7fe1579 [ 630.691984][T18113] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 630.692001][T18113] RSP: 002b:00000000f54b555c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 630.692023][T18113] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000000 [ 630.692035][T18113] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000080001080 [ 630.692044][T18113] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 630.692054][T18113] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 630.692064][T18113] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 630.692089][T18113] [ 630.692410][T18113] ERROR: Out of memory at tomoyo_realpath_from_path. [ 630.695768][T18114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3296'. [ 630.858319][T18114] bond0: (slave syz_tun): Releasing backup interface [ 631.112586][T18129] fuse: Unknown parameter 'group_i00000000000000000000' [ 631.198262][T18132] netlink: 'syz.1.3302': attribute type 10 has an invalid length. [ 631.453871][ T6002] usb 38-1: device descriptor read/8, error -110 [ 631.482059][T18141] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 631.484818][T18141] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 631.489172][T18141] vhci_hcd vhci_hcd.0: Device attached [ 631.527490][T18145] random: crng reseeded on system resumption [ 631.569916][T18141] netlink: 'syz.0.3304': attribute type 10 has an invalid length. [ 631.703546][ T53] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 631.733407][ T6002] usb 38-1: SetAddress Request (35) to port 0 [ 631.735416][ T6002] usb 38-1: new SuperSpeed USB device number 35 using vhci_hcd [ 632.059837][T18142] vhci_hcd: connection reset by peer [ 632.062181][T16579] vhci_hcd: stop threads [ 632.066129][T16579] vhci_hcd: release socket [ 632.068337][T16579] vhci_hcd: disconnect device [ 632.561872][T18158] fuse: Unknown parameter 'group_i00000000000000000000' [ 632.574189][ T53] usb 9-1: Using ep0 maxpacket: 8 [ 632.577176][ T53] usb 9-1: config 0 interface 0 has no altsetting 0 [ 632.579368][ T53] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 632.582940][ T53] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.587276][ T53] usb 9-1: config 0 descriptor?? [ 632.648045][T18162] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3315'. [ 632.692050][T18162] debugfs: 'ttyS3' already exists in 'caif_serial' [ 633.003893][T18178] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 633.006640][T18178] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 633.009407][T18178] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 633.012066][T18178] comedi comedi3: 8255: I/O port conflict (0xfff,4) [ 633.014495][T18178] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 633.016807][T18178] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 633.019416][T18178] comedi comedi3: 8255: I/O port conflict (0x203ff,4) [ 633.022241][T18178] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 633.024514][T18178] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 633.027115][T18178] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 633.029753][T18178] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 633.032306][T18178] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 633.035237][T18178] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 633.037984][T18178] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 633.040788][T18178] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 633.652215][ T53] mcp2221 0003:04D8:00DD.0006: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 633.827865][T18189] netlink: 'syz.1.3316': attribute type 10 has an invalid length. [ 633.890511][T18194] fuse: Unknown parameter 'group_i00000000000000000000' [ 633.937710][T18181] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3321'. [ 633.941541][T18181] netlink: 'syz.0.3321': attribute type 1 has an invalid length. [ 634.401227][T18209] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 634.615430][T18186] usb 9-1: USB disconnect, device number 12 [ 634.867163][T18217] random: crng reseeded on system resumption [ 635.143380][T15365] usb 46-1: device descriptor read/8, error -110 [ 635.534494][T15365] usb usb46-port1: attempt power cycle [ 635.598857][T18226] fuse: Unknown parameter 'group_id00000000000000000000' [ 635.731920][T18232] virtiofs: Unknown parameter 'dax_…!' [ 636.114306][T15365] usb usb46-port1: unable to enumerate USB device [ 636.584771][T18257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3342'. [ 636.594081][T18257] syz_tun: left promiscuous mode [ 636.601432][T18257] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 636.684440][T18260] veth0_macvtap: left promiscuous mode [ 636.692006][T18260] macvtap0: refused to change device tx_queue_len [ 636.776685][T18263] overlayfs: failed to resolve 'xino=off': -2 [ 636.781675][T18263] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 636.814048][ T6002] usb 38-1: device descriptor read/8, error -110 [ 636.894452][T18266] fuse: Unknown parameter 'Ù' [ 636.933607][ T6002] usb usb38-port1: attempt power cycle [ 637.326660][T18273] netlink: 'syz.1.3347': attribute type 10 has an invalid length. [ 637.535652][ T6002] usb usb38-port1: unable to enumerate USB device [ 637.959918][T18286] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 637.962135][T18286] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 637.973482][T18286] vhci_hcd vhci_hcd.0: Device attached [ 637.997447][T18286] netlink: 'syz.4.3351': attribute type 10 has an invalid length. [ 638.273596][T15365] usb 46-1: SetAddress Request (26) to port 0 [ 638.275699][T15365] usb 46-1: new SuperSpeed USB device number 26 using vhci_hcd [ 638.578134][T18287] vhci_hcd: connection reset by peer [ 638.581393][T16579] vhci_hcd: stop threads [ 638.582774][T16579] vhci_hcd: release socket [ 638.585590][T16579] vhci_hcd: disconnect device [ 639.082769][T18311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3360'. [ 641.162426][T18333] random: crng reseeded on system resumption [ 641.238239][T18340] FAULT_INJECTION: forcing a failure. [ 641.238239][T18340] name failslab, interval 1, probability 0, space 0, times 0 [ 641.243551][T18340] CPU: 0 UID: 0 PID: 18340 Comm: syz.4.3368 Not tainted syzkaller #0 PREEMPT(full) [ 641.243576][T18340] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 641.243587][T18340] Call Trace: [ 641.243595][T18340] [ 641.243602][T18340] dump_stack_lvl+0x16c/0x1f0 [ 641.243635][T18340] should_fail_ex+0x512/0x640 [ 641.243652][T18340] ? fs_reclaim_acquire+0xae/0x150 [ 641.243674][T18340] should_failslab+0xc2/0x120 [ 641.243693][T18340] __kmalloc_noprof+0xdd/0x880 [ 641.243716][T18340] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 641.243749][T18340] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 641.243774][T18340] tomoyo_realpath_from_path+0xc2/0x6e0 [ 641.243803][T18340] ? tomoyo_profile+0x47/0x60 [ 641.243823][T18340] tomoyo_path_number_perm+0x245/0x580 [ 641.243850][T18340] ? tomoyo_path_number_perm+0x237/0x580 [ 641.243875][T18340] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 641.243924][T18340] ? find_held_lock+0x2b/0x80 [ 641.243948][T18340] ? hook_file_ioctl_common+0x145/0x410 [ 641.243977][T18340] ? __fget_files+0x20e/0x3c0 [ 641.244006][T18340] security_file_ioctl_compat+0x9b/0x240 [ 641.244032][T18340] __ia32_compat_sys_ioctl+0xc3/0x370 [ 641.244057][T18340] __do_fast_syscall_32+0x7c/0x300 [ 641.244077][T18340] do_fast_syscall_32+0x32/0x80 [ 641.244094][T18340] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 641.244119][T18340] RIP: 0023:0xf707d579 [ 641.244133][T18340] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 641.244150][T18340] RSP: 002b:00000000f546d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 641.244168][T18340] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000002284 [ 641.244179][T18340] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 641.244189][T18340] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 641.244199][T18340] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 641.244210][T18340] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 641.244234][T18340] [ 641.244242][T18340] ERROR: Out of memory at tomoyo_realpath_from_path. [ 641.523453][ T53] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 641.683412][ T53] usb 5-1: Using ep0 maxpacket: 8 [ 641.687301][ T53] usb 5-1: config 0 interface 0 has no altsetting 0 [ 641.690209][ T53] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 641.694180][ T53] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.703152][ T53] usb 5-1: config 0 descriptor?? [ 642.120582][ T53] mcp2221 0003:04D8:00DD.0007: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 642.419451][T18359] overlayfs: failed to clone upperpath [ 642.544383][T18368] FAULT_INJECTION: forcing a failure. [ 642.544383][T18368] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 642.549171][T18368] CPU: 0 UID: 0 PID: 18368 Comm: syz.3.3376 Not tainted syzkaller #0 PREEMPT(full) [ 642.549186][T18368] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 642.549193][T18368] Call Trace: [ 642.549198][T18368] [ 642.549203][T18368] dump_stack_lvl+0x16c/0x1f0 [ 642.549224][T18368] should_fail_ex+0x512/0x640 [ 642.549238][T18368] should_fail_alloc_page+0xe7/0x130 [ 642.549250][T18368] prepare_alloc_pages+0x3c2/0x610 [ 642.549260][T18368] ? __kernel_text_address+0xd/0x40 [ 642.549276][T18368] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 642.549293][T18368] ? __lock_acquire+0x622/0x1c90 [ 642.549307][T18368] ? __pfx_stack_trace_save+0x10/0x10 [ 642.549322][T18368] ? look_up_lock_class+0x6b/0x150 [ 642.549339][T18368] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 642.549362][T18368] ? find_held_lock+0x2b/0x80 [ 642.549375][T18368] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 642.549390][T18368] ? policy_nodemask+0xea/0x4e0 [ 642.549401][T18368] alloc_pages_mpol+0x1fb/0x550 [ 642.549412][T18368] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 642.549426][T18368] folio_alloc_mpol_noprof+0x36/0x2f0 [ 642.549440][T18368] vma_alloc_folio_noprof+0xed/0x1e0 [ 642.549452][T18368] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 642.549469][T18368] do_pte_missing+0x2202/0x3ba0 [ 642.549482][T18368] ? find_held_lock+0x2b/0x80 [ 642.549499][T18368] __handle_mm_fault+0x1556/0x2aa0 [ 642.549514][T18368] ? mt_find+0x3e2/0xa20 [ 642.549525][T18368] ? __pfx___handle_mm_fault+0x10/0x10 [ 642.549536][T18368] ? __pfx_mt_find+0x10/0x10 [ 642.549553][T18368] ? find_vma+0xbf/0x140 [ 642.549569][T18368] ? __pfx_find_vma+0x10/0x10 [ 642.549586][T18368] handle_mm_fault+0x589/0xd10 [ 642.549599][T18368] ? __pkru_allows_pkey+0x11/0xb0 [ 642.549613][T18368] do_user_addr_fault+0x7a6/0x1370 [ 642.549628][T18368] ? rcu_is_watching+0x12/0xc0 [ 642.549645][T18368] exc_page_fault+0x64/0xc0 [ 642.549661][T18368] asm_exc_page_fault+0x26/0x30 [ 642.549671][T18368] RIP: 0010:_copy_to_user+0xb6/0xd0 [ 642.549683][T18368] Code: 89 ee 48 89 ef e8 da 27 13 fd 4d 85 ff 75 a8 e8 20 2d 13 fd 89 de 4c 89 e7 e8 46 cb 7a fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 e6 a4 0f 1f 00 0f 01 ca 48 89 cb eb 80 66 2e 0f 1f 84 00 00 00 00 [ 642.549694][T18368] RSP: 0018:ffffc90004467bc8 EFLAGS: 00050246 [ 642.549702][T18368] RAX: 0000000000000001 RBX: 0000000000000900 RCX: 0000000000000900 [ 642.549709][T18368] RDX: 0000000000000000 RSI: ffff888063286000 RDI: 0000000080001240 [ 642.549715][T18368] RBP: 0000000080001240 R08: 0000000000000000 R09: ffffed100c650d1f [ 642.549722][T18368] R10: ffff8880632868ff R11: 0000000000000000 R12: ffff888063286000 [ 642.549728][T18368] R13: 0000000080001b40 R14: 00007ffffffff000 R15: 0000000000000000 [ 642.549741][T18368] ? _copy_to_user+0xaa/0xd0 [ 642.549753][T18368] pagemap_read+0x52c/0x890 [ 642.549771][T18368] ? __pfx_pagemap_read+0x10/0x10 [ 642.549789][T18368] ? rw_verify_area+0xcf/0x6c0 [ 642.549802][T18368] ? __pfx_pagemap_read+0x10/0x10 [ 642.549818][T18368] vfs_read+0x1e4/0xcf0 [ 642.549836][T18368] ? __pfx_vfs_read+0x10/0x10 [ 642.549849][T18368] ? find_held_lock+0x2b/0x80 [ 642.549863][T18368] ? __fget_files+0x204/0x3c0 [ 642.549879][T18368] ? __fget_files+0x20e/0x3c0 [ 642.549892][T18368] ? __fget_files+0x110/0x3c0 [ 642.549913][T18368] ksys_pread64+0x161/0x1a0 [ 642.549929][T18368] ? __pfx_ksys_pread64+0x10/0x10 [ 642.549945][T18368] ? rcu_is_watching+0x12/0xc0 [ 642.549961][T18368] __do_fast_syscall_32+0x7c/0x300 [ 642.549973][T18368] do_fast_syscall_32+0x32/0x80 [ 642.549983][T18368] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 642.549995][T18368] RIP: 0023:0xf7fe1579 [ 642.550004][T18368] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 642.550014][T18368] RSP: 002b:00000000f549455c EFLAGS: 00000296 ORIG_RAX: 00000000000000b4 [ 642.550023][T18368] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080001240 [ 642.550029][T18368] RDX: 0000000000200000 RSI: 0000000000000700 RDI: 0000000000000000 [ 642.550035][T18368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 642.550041][T18368] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 642.550047][T18368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 642.550060][T18368] [ 643.255533][T18383] netlink: 'syz.1.3383': attribute type 10 has an invalid length. [ 643.262226][T18383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 643.269725][T18383] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 643.403413][T15365] usb 46-1: device descriptor read/8, error -110 [ 643.769367][T18396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3386'. [ 643.778678][T18396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3386'. [ 643.804319][T15365] usb usb46-port1: attempt power cycle [ 643.867132][T18400] overlayfs: failed to clone upperpath [ 644.010295][T18405] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3389'. [ 644.017082][T18405] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3389'. [ 644.025411][T18405] FAULT_INJECTION: forcing a failure. [ 644.025411][T18405] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 644.029876][T18405] CPU: 0 UID: 0 PID: 18405 Comm: syz.4.3389 Not tainted syzkaller #0 PREEMPT(full) [ 644.029898][T18405] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 644.029909][T18405] Call Trace: [ 644.029915][T18405] [ 644.029921][T18405] dump_stack_lvl+0x16c/0x1f0 [ 644.029955][T18405] should_fail_ex+0x512/0x640 [ 644.029969][T18405] _copy_from_iter+0x29f/0x1720 [ 644.029981][T18405] ? _copy_from_iter+0x15d/0x1720 [ 644.029992][T18405] ? __pfx__copy_from_iter+0x10/0x10 [ 644.030004][T18405] ? __pfx__copy_from_iter+0x10/0x10 [ 644.030014][T18405] ? _copy_from_iter+0x15d/0x1720 [ 644.030027][T18405] copy_page_from_iter+0xde/0x180 [ 644.030039][T18405] skb_copy_datagram_from_iter+0x2a0/0x740 [ 644.030064][T18405] tun_get_user+0x1850/0x3cc0 [ 644.030083][T18405] ? __pfx_tun_get_user+0x10/0x10 [ 644.030096][T18405] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 644.030112][T18405] ? find_held_lock+0x2b/0x80 [ 644.030127][T18405] ? tun_get+0x191/0x370 [ 644.030141][T18405] tun_chr_write_iter+0xdc/0x210 [ 644.030154][T18405] vfs_write+0x7d3/0x11d0 [ 644.030170][T18405] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 644.030183][T18405] ? __pfx_vfs_write+0x10/0x10 [ 644.030197][T18405] ? find_held_lock+0x2b/0x80 [ 644.030219][T18405] ksys_write+0x12a/0x250 [ 644.030234][T18405] ? __pfx_ksys_write+0x10/0x10 [ 644.030250][T18405] ? rcu_is_watching+0x12/0xc0 [ 644.030266][T18405] __do_fast_syscall_32+0x7c/0x300 [ 644.030278][T18405] do_fast_syscall_32+0x32/0x80 [ 644.030289][T18405] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 644.030302][T18405] RIP: 0023:0xf707d579 [ 644.030311][T18405] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 644.030321][T18405] RSP: 002b:00000000f546d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 644.030332][T18405] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000040 [ 644.030338][T18405] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000 [ 644.030344][T18405] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 644.030350][T18405] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 644.030356][T18405] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 644.030369][T18405] [ 644.258586][ T1325] usb 5-1: USB disconnect, device number 8 [ 644.265910][T18389] ceph: No mds server is up or the cluster is laggy [ 644.385303][T15365] usb usb46-port1: unable to enumerate USB device [ 645.105117][T18435] bond0: (slave syz_tun): Releasing backup interface [ 645.109801][T18435] bond0: (slave batadv0): Releasing backup interface [ 645.118435][T18435] bridge_slave_0: left allmulticast mode [ 645.120907][T18435] bridge_slave_0: left promiscuous mode [ 645.124604][T18435] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.130734][T18435] bridge_slave_1: left allmulticast mode [ 645.133214][T18435] bridge_slave_1: left promiscuous mode [ 645.139839][T18435] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.147373][T18435] bond0: (slave bond_slave_0): Releasing backup interface [ 645.151020][T18435] bond0: (slave bond_slave_1): Releasing backup interface [ 645.157383][T18435] team0: Port device team_slave_0 removed [ 645.160756][T18435] team0: Port device team_slave_1 removed [ 645.165000][T18435] bond0: (slave batadv_slave_0): Releasing backup interface [ 645.168615][T18435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 645.173805][T18435] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 645.603368][ T1458] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 645.758188][T18458] vlan2: entered allmulticast mode [ 645.760084][T18458] veth0_to_bond: entered allmulticast mode [ 645.763384][ T1458] usb 9-1: Using ep0 maxpacket: 8 [ 645.774584][ T1458] usb 9-1: config 0 interface 0 has no altsetting 0 [ 645.782393][ T1458] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 645.788462][ T1458] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.797019][ T1458] usb 9-1: config 0 descriptor?? [ 646.217504][ T1458] mcp2221 0003:04D8:00DD.0008: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 646.351919][T18480] vlan3: entered promiscuous mode [ 646.353847][T18480] batadv_slave_0: entered promiscuous mode [ 646.376981][T18482] fuse: Bad value for 'fd' [ 646.449856][T18485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 646.505759][T18485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 646.567735][T18485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 647.412255][T18514] fuse: Bad value for 'fd' [ 647.534763][T18520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 647.597478][T18520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 647.609594][T18520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 648.217466][T18522] FAULT_INJECTION: forcing a failure. [ 648.217466][T18522] name failslab, interval 1, probability 0, space 0, times 0 [ 648.221824][T18522] CPU: 1 UID: 0 PID: 18522 Comm: syz.3.3430 Not tainted syzkaller #0 PREEMPT(full) [ 648.221839][T18522] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 648.221846][T18522] Call Trace: [ 648.221851][T18522] [ 648.221856][T18522] dump_stack_lvl+0x16c/0x1f0 [ 648.221877][T18522] should_fail_ex+0x512/0x640 [ 648.221888][T18522] ? fs_reclaim_acquire+0xae/0x150 [ 648.221900][T18522] should_failslab+0xc2/0x120 [ 648.221911][T18522] kmem_cache_alloc_noprof+0x75/0x6e0 [ 648.221925][T18522] ? do_raw_spin_lock+0x12c/0x2b0 [ 648.221938][T18522] ? p9_tag_alloc+0x9c/0x640 [ 648.221951][T18522] ? p9_tag_alloc+0x9c/0x640 [ 648.221961][T18522] p9_tag_alloc+0x9c/0x640 [ 648.221972][T18522] ? __pfx_p9_tag_alloc+0x10/0x10 [ 648.221982][T18522] ? stack_depot_save_flags+0x3de/0x9c0 [ 648.221998][T18522] p9_client_prepare_req+0x19b/0x4d0 [ 648.222010][T18522] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 648.222020][T18522] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 648.222036][T18522] ? __lock_acquire+0xb8a/0x1c90 [ 648.222049][T18522] p9_client_rpc+0x1c4/0xc40 [ 648.222060][T18522] ? node_tag_clear+0x105/0x290 [ 648.222074][T18522] ? __pfx_p9_client_rpc+0x10/0x10 [ 648.222085][T18522] ? idr_alloc_u32+0x20f/0x2f0 [ 648.222103][T18522] ? idr_preload_end+0xc2/0x230 [ 648.222114][T18522] ? rcu_is_watching+0x12/0xc0 [ 648.222131][T18522] p9_client_walk+0x1ab/0x530 [ 648.222143][T18522] ? __lock_acquire+0xb8a/0x1c90 [ 648.222154][T18522] ? __pfx_p9_client_walk+0x10/0x10 [ 648.222167][T18522] ? v9fs_fid_lookup+0xe9/0xeb0 [ 648.222187][T18522] v9fs_vfs_lookup+0x206/0x5b0 [ 648.222200][T18522] ? __pfx_v9fs_vfs_lookup+0x10/0x10 [ 648.222211][T18522] ? d_alloc+0x176/0x1e0 [ 648.222228][T18522] ? do_raw_spin_unlock+0x172/0x230 [ 648.222241][T18522] ? _raw_spin_unlock+0x28/0x50 [ 648.222258][T18522] lookup_one_qstr_excl+0x1d1/0x250 [ 648.222270][T18522] ? mnt_want_write+0x161/0x450 [ 648.222283][T18522] do_renameat2+0x575/0xc20 [ 648.222297][T18522] ? __pfx_do_renameat2+0x10/0x10 [ 648.222307][T18522] ? find_held_lock+0x2b/0x80 [ 648.222321][T18522] ? __might_fault+0xe3/0x190 [ 648.222335][T18522] ? __might_fault+0x13b/0x190 [ 648.222355][T18522] ? getname_flags.part.0+0x1c5/0x550 [ 648.222370][T18522] __ia32_sys_rename+0x7c/0xa0 [ 648.222380][T18522] __do_fast_syscall_32+0x7c/0x300 [ 648.222392][T18522] do_fast_syscall_32+0x32/0x80 [ 648.222401][T18522] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 648.222414][T18522] RIP: 0023:0xf7fe1579 [ 648.222422][T18522] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 648.222433][T18522] RSP: 002b:00000000f54d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000026 [ 648.222443][T18522] RAX: ffffffffffffffda RBX: 0000000080000580 RCX: 0000000080000780 [ 648.222450][T18522] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 648.222456][T18522] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 648.222461][T18522] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 648.222467][T18522] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 648.222481][T18522] [ 648.239132][T18524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 648.323550][T15057] usb 9-1: USB disconnect, device number 13 [ 648.344506][T18524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 648.407507][T18524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 648.863510][T18538] affs: No valid root block on device nbd4 [ 648.874295][T18538] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 648.877011][T18538] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 648.880703][T18538] vhci_hcd vhci_hcd.0: Device attached [ 648.954077][T18538] netlink: 'syz.4.3433': attribute type 10 has an invalid length. [ 649.049432][T18544] netlink: 'syz.0.3435': attribute type 1 has an invalid length. [ 649.052522][T18544] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3435'. [ 649.120817][T18547] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(14) [ 649.122922][T18547] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 649.125993][T18547] vhci_hcd vhci_hcd.0: Device attached [ 649.153404][T18186] usb 46-1: SetAddress Request (30) to port 0 [ 649.156179][T18186] usb 46-1: new SuperSpeed USB device number 30 using vhci_hcd [ 649.393569][ T6001] usb 37-1: new low-speed USB device number 11 using vhci_hcd [ 649.770345][T18541] vhci_hcd: connection closed [ 649.770716][T16579] vhci_hcd: stop threads [ 649.779966][T16579] vhci_hcd: release socket [ 649.782310][T16579] vhci_hcd: disconnect device [ 649.925415][T18548] vhci_hcd: connection reset by peer [ 649.928096][T16580] vhci_hcd: stop threads [ 649.929488][T16580] vhci_hcd: release socket [ 649.931077][T16580] vhci_hcd: disconnect device [ 650.354968][T18565] fuse: Bad value for 'fd' [ 650.372917][T18186] usb 46-1: enqueue for inactive port 0 [ 650.477539][T18570] Invalid logical block size (8388608) [ 650.515128][T18574] netlink: 'syz.0.3445': attribute type 10 has an invalid length. [ 650.519861][T18574] team0: Device ipvlan1 failed to register rx_handler [ 650.833212][T18186] usb usb46-port1: attempt power cycle [ 651.160758][T18592] fuse: Invalid rootmode [ 651.394031][T18186] usb usb46-port1: unable to enumerate USB device [ 651.878241][T18615] affs: No valid root block on device nbd0 [ 651.889797][T18615] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 651.891987][T18615] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 651.974944][T18629] xt_cgroup: xt_cgroup: no path or classid specified [ 651.985925][T18615] vhci_hcd vhci_hcd.0: Device attached [ 651.999679][T18615] netlink: 'syz.0.3460': attribute type 10 has an invalid length. [ 652.128679][T18634] netlink: 892 bytes leftover after parsing attributes in process `syz.1.3465'. [ 652.219407][T18640] bridge_slave_0: entered promiscuous mode [ 652.442878][T18620] vhci_hcd: connection closed [ 652.443226][T16580] vhci_hcd: stop threads [ 652.447225][T16580] vhci_hcd: release socket [ 652.449284][T16580] vhci_hcd: disconnect device [ 652.615174][ T40] audit: type=1326 audit(1760858954.456:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18656 comm="syz.3.3471" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe1579 code=0x0 [ 653.443861][T18677] vlan0: entered promiscuous mode [ 653.459732][T18677] tipc: Failed to remove unknown binding: 66,1,1/0:1253620418/1253620420 [ 653.464885][T18677] tipc: Failed to remove unknown binding: 66,1,1/0:1253620418/1253620420 [ 653.468535][T18677] tipc: Failed to remove unknown binding: 66,1,1/0:1253620418/1253620420 [ 654.089115][T18689] fuse: Bad value for 'rootmode' [ 654.125907][T18691] netlink: 'syz.0.3483': attribute type 10 has an invalid length. [ 654.131152][T18691] team0: Device ipvlan1 failed to register rx_handler [ 654.483390][ T5988] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 654.493455][ T6001] vhci_hcd: vhci_device speed not set [ 654.643452][ T5988] usb 5-1: Using ep0 maxpacket: 8 [ 654.647297][ T5988] usb 5-1: config 0 interface 0 has no altsetting 0 [ 654.649547][ T5988] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 654.653069][ T5988] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.657585][ T5988] usb 5-1: config 0 descriptor?? [ 654.896219][T18717] FAULT_INJECTION: forcing a failure. [ 654.896219][T18717] name failslab, interval 1, probability 0, space 0, times 0 [ 654.900243][T18717] CPU: 2 UID: 0 PID: 18717 Comm: syz.4.3492 Not tainted syzkaller #0 PREEMPT(full) [ 654.900258][T18717] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 654.900265][T18717] Call Trace: [ 654.900269][T18717] [ 654.900274][T18717] dump_stack_lvl+0x16c/0x1f0 [ 654.900294][T18717] should_fail_ex+0x512/0x640 [ 654.900305][T18717] ? fs_reclaim_acquire+0xae/0x150 [ 654.900317][T18717] should_failslab+0xc2/0x120 [ 654.900328][T18717] __kmalloc_noprof+0xdd/0x880 [ 654.900341][T18717] ? tomoyo_encode2+0x100/0x3e0 [ 654.900372][T18717] ? tomoyo_encode2+0x100/0x3e0 [ 654.900387][T18717] tomoyo_encode2+0x100/0x3e0 [ 654.900403][T18717] tomoyo_encode+0x29/0x50 [ 654.900418][T18717] tomoyo_realpath_from_path+0x18f/0x6e0 [ 654.900437][T18717] tomoyo_path_number_perm+0x245/0x580 [ 654.900450][T18717] ? tomoyo_path_number_perm+0x237/0x580 [ 654.900464][T18717] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 654.900492][T18717] ? find_held_lock+0x2b/0x80 [ 654.900506][T18717] ? hook_file_ioctl_common+0x145/0x410 [ 654.900524][T18717] ? __fget_files+0x20e/0x3c0 [ 654.900541][T18717] security_file_ioctl_compat+0x9b/0x240 [ 654.900557][T18717] __ia32_compat_sys_ioctl+0xc3/0x370 [ 654.900571][T18717] __do_fast_syscall_32+0x7c/0x300 [ 654.900584][T18717] do_fast_syscall_32+0x32/0x80 [ 654.900594][T18717] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 654.900607][T18717] RIP: 0023:0xf707d579 [ 654.900616][T18717] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 654.900626][T18717] RSP: 002b:00000000f546d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 654.900636][T18717] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040946400 [ 654.900643][T18717] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 654.900649][T18717] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 654.900654][T18717] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 654.900660][T18717] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 654.900674][T18717] [ 654.900721][T18717] ERROR: Out of memory at tomoyo_realpath_from_path. [ 655.076213][ T5988] mcp2221 0003:04D8:00DD.0009: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 655.199934][T18727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3496'. [ 655.202692][T18727] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3496'. [ 655.367756][T18733] cgroup: Need name or subsystem set [ 655.913827][ T1458] usb usb38-port1: attempt power cycle [ 656.458582][T18751] virtiofs: Unknown parameter 'dax_…!' [ 656.493094][ T1458] usb usb38-port1: unable to enumerate USB device [ 656.596818][T18753] IPv4: Oversized IP packet from 172.20.20.24 [ 656.601769][ C3] IPv4: Oversized IP packet from 172.20.20.24 [ 656.605374][ C3] IPv4: Oversized IP packet from 172.20.20.24 [ 656.621160][T18755] fuse: Unknown parameter 'use00000000000000000000' [ 657.193175][T15365] usb 5-1: USB disconnect, device number 9 [ 657.457054][T18762] random: crng reseeded on system resumption [ 657.496261][T18764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3509'. [ 657.927136][T18771] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3510'. [ 657.943523][ T40] audit: type=1326 audit(1760858959.756:2042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18769 comm="syz.4.3511" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 658.037000][ T40] audit: type=1326 audit(1760858959.766:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18769 comm="syz.4.3511" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 658.057074][ T40] audit: type=1326 audit(1760858959.766:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18769 comm="syz.4.3511" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 658.159116][ T40] audit: type=1326 audit(1760858959.766:2045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18769 comm="syz.4.3511" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 658.324802][ T40] audit: type=1326 audit(1760858959.776:2046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18769 comm="syz.4.3511" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 658.333033][ T40] audit: type=1326 audit(1760858959.776:2047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18769 comm="syz.4.3511" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 658.344216][ T40] audit: type=1326 audit(1760858959.816:2048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18769 comm="syz.4.3511" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 658.353844][ T40] audit: type=1326 audit(1760858959.816:2049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18769 comm="syz.4.3511" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 658.375512][ T40] audit: type=1326 audit(1760858959.816:2050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18769 comm="syz.4.3511" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 658.383986][ T40] audit: type=1326 audit(1760858959.816:2051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18769 comm="syz.4.3511" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 658.594097][T18779] fuse: Unknown parameter 'use00000000000000000000' [ 658.997322][T18751] Set syz1 is full, maxelem 65536 reached [ 659.125463][T18794] netlink: 'syz.1.3518': attribute type 4 has an invalid length. [ 660.091603][T18811] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3523'. [ 660.202282][T18819] virtiofs: Unknown parameter 'dax_…!' [ 660.695202][T18826] affs: No valid root block on device nbd0 [ 660.700676][T18826] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 660.703392][T18826] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 660.706205][T18826] vhci_hcd vhci_hcd.0: Device attached [ 660.724277][T18826] netlink: 'syz.0.3528': attribute type 10 has an invalid length. [ 660.976091][ T1325] usb 38-1: SetAddress Request (42) to port 0 [ 660.979376][ T1325] usb 38-1: new SuperSpeed USB device number 42 using vhci_hcd [ 661.315190][T18827] vhci_hcd: connection reset by peer [ 661.318011][T16579] vhci_hcd: stop threads [ 661.319504][T16579] vhci_hcd: release socket [ 661.321557][T16579] vhci_hcd: disconnect device [ 661.590275][T18837] FAULT_INJECTION: forcing a failure. [ 661.590275][T18837] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 661.595859][T18837] CPU: 1 UID: 0 PID: 18837 Comm: syz.4.3531 Not tainted syzkaller #0 PREEMPT(full) [ 661.595884][T18837] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 661.595895][T18837] Call Trace: [ 661.595901][T18837] [ 661.595908][T18837] dump_stack_lvl+0x16c/0x1f0 [ 661.595939][T18837] should_fail_ex+0x512/0x640 [ 661.595962][T18837] _copy_to_user+0x32/0xd0 [ 661.595982][T18837] simple_read_from_buffer+0xcb/0x170 [ 661.596008][T18837] proc_fail_nth_read+0x197/0x240 [ 661.596033][T18837] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 661.596060][T18837] ? rw_verify_area+0xcf/0x6c0 [ 661.596082][T18837] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 661.596106][T18837] vfs_read+0x1e4/0xcf0 [ 661.596136][T18837] ? __pfx_vfs_read+0x10/0x10 [ 661.596157][T18837] ? find_held_lock+0x2b/0x80 [ 661.596188][T18837] ? __fget_files+0x20e/0x3c0 [ 661.596220][T18837] ksys_read+0x12a/0x250 [ 661.596243][T18837] ? __pfx_ksys_read+0x10/0x10 [ 661.596270][T18837] ? rcu_is_watching+0x12/0xc0 [ 661.596298][T18837] __do_fast_syscall_32+0x7c/0x300 [ 661.596318][T18837] do_fast_syscall_32+0x32/0x80 [ 661.596335][T18837] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 661.596356][T18837] RIP: 0023:0xf707d579 [ 661.596370][T18837] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 661.596387][T18837] RSP: 002b:00000000f546d590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 661.596404][T18837] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f546d620 [ 661.596415][T18837] RDX: 000000000000000f RSI: 00000000f7415ff4 RDI: 0000000000000000 [ 661.596425][T18837] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 661.596435][T18837] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 661.596445][T18837] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 661.596469][T18837] [ 661.897287][T18847] FAULT_INJECTION: forcing a failure. [ 661.897287][T18847] name failslab, interval 1, probability 0, space 0, times 0 [ 661.903110][T18847] CPU: 2 UID: 0 PID: 18847 Comm: syz.3.3534 Not tainted syzkaller #0 PREEMPT(full) [ 661.903133][T18847] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 661.903144][T18847] Call Trace: [ 661.903151][T18847] [ 661.903157][T18847] dump_stack_lvl+0x16c/0x1f0 [ 661.903190][T18847] should_fail_ex+0x512/0x640 [ 661.903210][T18847] should_failslab+0xc2/0x120 [ 661.903230][T18847] kmem_cache_alloc_noprof+0x75/0x6e0 [ 661.903255][T18847] ? fdb_create+0x22d/0x1a20 [ 661.903290][T18847] ? fdb_create+0x22d/0x1a20 [ 661.903309][T18847] fdb_create+0x22d/0x1a20 [ 661.903335][T18847] ? find_held_lock+0x2b/0x80 [ 661.903361][T18847] ? __pfx_fdb_create+0x10/0x10 [ 661.903379][T18847] ? br_fdb_find+0xe4/0x240 [ 661.903407][T18847] br_fdb_external_learn_add+0x224/0x7d0 [ 661.903437][T18847] __br_fdb_add+0x133/0xd90 [ 661.903464][T18847] br_fdb_add+0x8ed/0xe30 [ 661.903493][T18847] ? __pfx_br_fdb_add+0x10/0x10 [ 661.903520][T18847] ? __nla_parse+0x40/0x60 [ 661.903544][T18847] rtnl_fdb_add+0x4bf/0xac0 [ 661.903562][T18847] ? __pfx_br_fdb_add+0x10/0x10 [ 661.903587][T18847] ? __pfx_rtnl_fdb_add+0x10/0x10 [ 661.903628][T18847] ? __pfx_rtnl_fdb_add+0x10/0x10 [ 661.903648][T18847] rtnetlink_rcv_msg+0x3c9/0xe90 [ 661.903682][T18847] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 661.903707][T18847] ? ref_tracker_free+0x37c/0x830 [ 661.903729][T18847] netlink_rcv_skb+0x158/0x420 [ 661.903748][T18847] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 661.903768][T18847] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 661.903792][T18847] ? netlink_deliver_tap+0x1ae/0xd30 [ 661.903825][T18847] netlink_unicast+0x5aa/0x870 [ 661.903847][T18847] ? __pfx_netlink_unicast+0x10/0x10 [ 661.903871][T18847] netlink_sendmsg+0x8c8/0xdd0 [ 661.903894][T18847] ? __pfx_netlink_sendmsg+0x10/0x10 [ 661.903916][T18847] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 661.903941][T18847] ____sys_sendmsg+0xa98/0xc70 [ 661.903965][T18847] ? __pfx_____sys_sendmsg+0x10/0x10 [ 661.903982][T18847] ? get_compat_msghdr+0x11a/0x170 [ 661.904020][T18847] ___sys_sendmsg+0x134/0x1d0 [ 661.904050][T18847] ? __pfx____sys_sendmsg+0x10/0x10 [ 661.904086][T18847] ? find_held_lock+0x2b/0x80 [ 661.904130][T18847] __sys_sendmsg+0x16d/0x220 [ 661.904156][T18847] ? __pfx___sys_sendmsg+0x10/0x10 [ 661.904190][T18847] ? rcu_is_watching+0x12/0xc0 [ 661.904220][T18847] __do_fast_syscall_32+0x7c/0x300 [ 661.904241][T18847] do_fast_syscall_32+0x32/0x80 [ 661.904257][T18847] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 661.904279][T18847] RIP: 0023:0xf7fe1579 [ 661.904295][T18847] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 661.904313][T18847] RSP: 002b:00000000f54d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 661.904329][T18847] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000240 [ 661.904340][T18847] RDX: 0000000000040800 RSI: 0000000000000000 RDI: 0000000000000000 [ 661.904352][T18847] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 661.904361][T18847] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 661.904372][T18847] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 661.904395][T18847] [ 662.042206][T18850] virtiofs: Unknown parameter 'dax_…!' [ 662.240827][T18854] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 662.243427][T18854] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 662.247186][T18854] vhci_hcd vhci_hcd.0: Device attached [ 662.543389][T15365] usb 46-1: SetAddress Request (34) to port 0 [ 662.545377][T15365] usb 46-1: new SuperSpeed USB device number 34 using vhci_hcd [ 662.824588][T18855] vhci_hcd: connection reset by peer [ 662.826584][T16581] vhci_hcd: stop threads [ 662.828109][T16581] vhci_hcd: release socket [ 662.829657][T16581] vhci_hcd: disconnect device [ 663.525654][T18865] vxcan1: entered allmulticast mode [ 663.797604][T18850] Set syz1 is full, maxelem 65536 reached [ 663.903601][T17041] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 664.034075][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 664.034093][ T40] audit: type=1326 audit(1760858965.876:2071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18875 comm="syz.0.3543" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7fc00000 [ 664.063421][T17041] usb 9-1: Using ep0 maxpacket: 8 [ 664.068042][T17041] usb 9-1: config 0 interface 0 has no altsetting 0 [ 664.070709][T17041] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 664.076183][T17041] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.084258][T17041] usb 9-1: config 0 descriptor?? [ 664.511694][T18884] FAULT_INJECTION: forcing a failure. [ 664.511694][T18884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 664.516125][T18884] CPU: 0 UID: 0 PID: 18884 Comm: syz.3.3545 Not tainted syzkaller #0 PREEMPT(full) [ 664.516150][T18884] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 664.516161][T18884] Call Trace: [ 664.516169][T18884] [ 664.516177][T18884] dump_stack_lvl+0x16c/0x1f0 [ 664.516208][T18884] should_fail_ex+0x512/0x640 [ 664.516229][T18884] _copy_to_user+0x32/0xd0 [ 664.516251][T18884] v4l2_compat_put_array_args+0x5d6/0x720 [ 664.516276][T18884] ? __pfx_v4l2_compat_put_array_args+0x10/0x10 [ 664.516295][T18884] ? __pfx___video_do_ioctl+0x10/0x10 [ 664.516317][T18884] ? video_usercopy+0x9c8/0x1450 [ 664.516343][T18884] video_usercopy+0x5bc/0x1450 [ 664.516366][T18884] ? __pfx___video_do_ioctl+0x10/0x10 [ 664.516386][T18884] ? __pfx_video_usercopy+0x10/0x10 [ 664.516416][T18884] ? hook_file_ioctl_common+0x145/0x410 [ 664.516446][T18884] v4l2_ioctl+0x1bd/0x250 [ 664.516468][T18884] v4l2_compat_ioctl32+0x217/0x2c0 [ 664.516487][T18884] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 664.516505][T18884] __ia32_compat_sys_ioctl+0x242/0x370 [ 664.516530][T18884] __do_fast_syscall_32+0x7c/0x300 [ 664.516551][T18884] do_fast_syscall_32+0x32/0x80 [ 664.516568][T18884] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 664.516587][T18884] RIP: 0023:0xf7fe1579 [ 664.516600][T18884] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 664.516617][T18884] RSP: 002b:00000000f54d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 664.516634][T18884] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0185648 [ 664.516645][T18884] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 664.516655][T18884] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 664.516666][T18884] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 664.516677][T18884] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 664.516700][T18884] [ 664.672955][ T40] audit: type=1326 audit(1760858966.506:2072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18875 comm="syz.0.3543" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70dd598 code=0x7fc00000 [ 664.679962][ T40] audit: type=1326 audit(1760858966.506:2073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18875 comm="syz.0.3543" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf70dd5a7 code=0x7fc00000 [ 664.686849][ T40] audit: type=1326 audit(1760858966.506:2074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18875 comm="syz.0.3543" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf70dd579 code=0x7fc00000 [ 665.220555][T18900] random: crng reseeded on system resumption [ 665.614442][T18907] netlink: set zone limit has 8 unknown bytes [ 665.805816][T18916] netlink: 860 bytes leftover after parsing attributes in process `syz.1.3557'. [ 666.103511][ T1325] usb 38-1: device descriptor read/8, error -110 [ 666.474626][T18925] FAULT_INJECTION: forcing a failure. [ 666.474626][T18925] name failslab, interval 1, probability 0, space 0, times 0 [ 666.478593][T18925] CPU: 0 UID: 0 PID: 18925 Comm: syz.3.3559 Not tainted syzkaller #0 PREEMPT(full) [ 666.478608][T18925] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 666.478614][T18925] Call Trace: [ 666.478619][T18925] [ 666.478624][T18925] dump_stack_lvl+0x16c/0x1f0 [ 666.478644][T18925] should_fail_ex+0x512/0x640 [ 666.478655][T18925] ? sctp_get_port_local+0xfbb/0x1670 [ 666.478674][T18925] should_failslab+0xc2/0x120 [ 666.478686][T18925] __kmalloc_cache_noprof+0x72/0x780 [ 666.478700][T18925] ? sctp_add_bind_addr+0xae/0x3f0 [ 666.478743][T18925] ? sctp_add_bind_addr+0xae/0x3f0 [ 666.478761][T18925] sctp_add_bind_addr+0xae/0x3f0 [ 666.478779][T18925] sctp_do_bind+0x2d6/0x700 [ 666.478793][T18925] sctp_connect_new_asoc+0x5e7/0x770 [ 666.478807][T18925] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 666.478823][T18925] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 666.478840][T18925] sctp_sendmsg+0x1557/0x1e00 [ 666.478857][T18925] ? __pfx_sctp_sendmsg+0x10/0x10 [ 666.478868][T18925] ? __pfx___might_resched+0x10/0x10 [ 666.478889][T18925] ? aa_sk_perm+0x2f4/0xb10 [ 666.478906][T18925] ? __pfx_aa_sk_perm+0x10/0x10 [ 666.478923][T18925] ? __pfx_sctp_sendmsg+0x10/0x10 [ 666.478936][T18925] inet_sendmsg+0x11c/0x140 [ 666.478953][T18925] ____sys_sendmsg+0x973/0xc70 [ 666.478968][T18925] ? __pfx_____sys_sendmsg+0x10/0x10 [ 666.478980][T18925] ? get_compat_msghdr+0x11a/0x170 [ 666.478999][T18925] ? __pfx__kstrtoull+0x10/0x10 [ 666.479015][T18925] ___sys_sendmsg+0x134/0x1d0 [ 666.479033][T18925] ? __pfx____sys_sendmsg+0x10/0x10 [ 666.479048][T18925] ? __lock_acquire+0x622/0x1c90 [ 666.479075][T18925] __sys_sendmmsg+0x2f9/0x420 [ 666.479087][T18925] ? __pfx___sys_sendmmsg+0x10/0x10 [ 666.479101][T18925] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 666.479117][T18925] ? fput+0x9b/0xd0 [ 666.479129][T18925] ? ksys_write+0x1ac/0x250 [ 666.479144][T18925] ? __pfx_ksys_write+0x10/0x10 [ 666.479161][T18925] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 666.479192][T18925] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 666.479204][T18925] __do_fast_syscall_32+0x7c/0x300 [ 666.479216][T18925] do_fast_syscall_32+0x32/0x80 [ 666.479226][T18925] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 666.479239][T18925] RIP: 0023:0xf7fe1579 [ 666.479248][T18925] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 666.479258][T18925] RSP: 002b:00000000f54d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 666.479269][T18925] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001bc0 [ 666.479276][T18925] RDX: 0000000000000001 RSI: 0000000000000040 RDI: 0000000000000000 [ 666.479282][T18925] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 666.479288][T18925] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 666.479294][T18925] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 666.479307][T18925] [ 666.497991][ T1325] usb usb38-port1: attempt power cycle [ 666.582397][T18929] lo speed is unknown, defaulting to 1000 [ 666.613191][T17041] usbhid 9-1:0.0: can't add hid device: -71 [ 666.617553][T17041] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 666.621089][T17041] usb 9-1: USB disconnect, device number 14 [ 666.731095][T18936] random: crng reseeded on system resumption [ 666.899011][T18941] comedi comedi0: comedi_config --init_data is deprecated [ 667.159933][T18951] netlink: 860 bytes leftover after parsing attributes in process `syz.1.3566'. [ 667.179934][ T1325] usb usb38-port1: unable to enumerate USB device [ 667.341928][T18962] overlayfs: failed to clone upperpath [ 667.506774][T18965] affs: No valid root block on device nbd0 [ 667.532464][T18965] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 667.535261][T18965] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 667.550083][T18965] vhci_hcd vhci_hcd.0: Device attached [ 667.582642][T18965] netlink: 'syz.0.3571': attribute type 10 has an invalid length. [ 667.621393][ T40] audit: type=1804 audit(1760858969.456:2075): pid=18962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3569" name="bus" dev="tmpfs" ino=2070 res=1 errno=0 [ 667.623686][T15365] usb 46-1: device descriptor read/8, error -110 [ 668.093403][ T6002] usb 38-1: SetAddress Request (46) to port 0 [ 668.095418][ T6002] usb 38-1: new SuperSpeed USB device number 46 using vhci_hcd [ 668.304848][T18981] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3576'. [ 668.344625][T18983] netlink: 860 bytes leftover after parsing attributes in process `syz.3.3577'. [ 668.422534][T18986] rtc_cmos 00:05: Alarms can be up to one day in the future [ 668.483141][T15365] usb usb46-port1: attempt power cycle [ 668.981152][T18967] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 668.983161][T18966] vhci_hcd: connection closed [ 668.986433][T16578] vhci_hcd: stop threads [ 668.990469][T16578] vhci_hcd: release socket [ 668.992131][T16578] vhci_hcd: disconnect device [ 669.276775][T18998] fuse: Bad value for 'fd' [ 669.591338][T19017] fuse: Bad value for 'fd' [ 669.633529][T19019] ebtables: wrong size: *len 168, entries_size 48, replsz 48 [ 669.734646][T15365] usb usb46-port1: unable to enumerate USB device [ 669.925641][T19035] lo speed is unknown, defaulting to 1000 [ 669.934210][T19039] fuse: Unknown parameter '0x0000000000000004' [ 670.444259][T19052] affs: No valid root block on device nbd3 [ 670.448076][T19052] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 670.450190][T19052] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 670.452921][T19052] vhci_hcd vhci_hcd.0: Device attached [ 670.464641][T19052] netlink: 'syz.3.3605': attribute type 10 has an invalid length. [ 670.474802][T19062] vhci_hcd: connection closed [ 670.475867][T16585] vhci_hcd: stop threads [ 670.479161][T16585] vhci_hcd: release socket [ 670.480660][T16585] vhci_hcd: disconnect device [ 670.538231][T19065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3607'. [ 670.696385][T19073] fuse: Unknown parameter '0x0000000000000004' [ 670.744566][T19075] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3611'. [ 670.969383][T19084] FAULT_INJECTION: forcing a failure. [ 670.969383][T19084] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 670.975453][T19084] CPU: 0 UID: 0 PID: 19084 Comm: syz.4.3614 Not tainted syzkaller #0 PREEMPT(full) [ 670.975477][T19084] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 670.975487][T19084] Call Trace: [ 670.975493][T19084] [ 670.975500][T19084] dump_stack_lvl+0x16c/0x1f0 [ 670.975533][T19084] should_fail_ex+0x512/0x640 [ 670.975553][T19084] _copy_to_user+0x32/0xd0 [ 670.975573][T19084] simple_read_from_buffer+0xcb/0x170 [ 670.975597][T19084] proc_fail_nth_read+0x197/0x240 [ 670.975622][T19084] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 670.975658][T19084] ? rw_verify_area+0xcf/0x6c0 [ 670.975679][T19084] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 670.975703][T19084] vfs_read+0x1e4/0xcf0 [ 670.975731][T19084] ? __pfx_vfs_read+0x10/0x10 [ 670.975751][T19084] ? find_held_lock+0x2b/0x80 [ 670.975780][T19084] ? __fget_files+0x20e/0x3c0 [ 670.975813][T19084] ksys_read+0x12a/0x250 [ 670.975834][T19084] ? __pfx_ksys_read+0x10/0x10 [ 670.975857][T19084] ? rcu_is_watching+0x12/0xc0 [ 670.975880][T19084] __do_fast_syscall_32+0x7c/0x300 [ 670.975899][T19084] do_fast_syscall_32+0x32/0x80 [ 670.975913][T19084] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 670.975933][T19084] RIP: 0023:0xf707d579 [ 670.975946][T19084] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 670.975961][T19084] RSP: 002b:00000000f546d590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 670.975977][T19084] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 00000000f546d620 [ 670.975987][T19084] RDX: 000000000000000f RSI: 00000000f7415ff4 RDI: 0000000000000000 [ 670.975997][T19084] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 670.976007][T19084] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 670.976018][T19084] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 670.976042][T19084] [ 671.062258][ C0] vkms_vblank_simulate: vblank timer overrun [ 671.180354][T19088] netlink: 'syz.3.3616': attribute type 1 has an invalid length. [ 671.183805][T19088] netlink: 236 bytes leftover after parsing attributes in process `syz.3.3616'. [ 671.211174][T19090] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3617'. [ 671.240309][T19094] fuse: Unknown parameter '0x0000000000000004' [ 672.199026][T19113] affs: No valid root block on device nbd0 [ 672.205261][T19113] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 672.207949][T19113] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 672.211383][T19113] vhci_hcd vhci_hcd.0: Device attached [ 672.220014][T19113] netlink: 'syz.0.3624': attribute type 10 has an invalid length. [ 672.224652][T19115] vhci_hcd: connection closed [ 672.224977][T16585] vhci_hcd: stop threads [ 672.228762][T16585] vhci_hcd: release socket [ 672.230848][T16585] vhci_hcd: disconnect device [ 672.450125][T19127] netlink: 'syz.1.3627': attribute type 11 has an invalid length. [ 674.069559][ T6002] usb 38-1: device descriptor read/8, error -110 [ 674.207244][T19162] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 674.345552][T19167] openvswitch: netlink: Flow actions attr not present in new flow. [ 674.466265][ T6002] usb usb38-port1: attempt power cycle [ 676.077914][ T6002] usb usb38-port1: unable to enumerate USB device [ 677.791513][T19211] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 677.823591][T19211] C: renamed from team_slave_0 (while UP) [ 677.830944][T19211] netlink: 'syz.0.3649': attribute type 3 has an invalid length. [ 677.834661][T19211] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3649'. [ 677.838823][T19211] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 677.848493][T19220] netem: incorrect ge model size [ 677.850993][T19220] netem: change failed [ 677.882132][T19221] netlink: 'syz.3.3651': attribute type 10 has an invalid length. [ 677.894965][T19221] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 677.927954][T19221] lo: entered promiscuous mode [ 677.930040][T19221] lo: entered allmulticast mode [ 677.933680][T19221] tunl0: entered promiscuous mode [ 677.935401][T19221] tunl0: entered allmulticast mode [ 677.937536][T19221] gre0: entered promiscuous mode [ 677.939247][T19221] gre0: entered allmulticast mode [ 677.942886][T19221] gretap0: entered promiscuous mode [ 677.944734][T19221] gretap0: entered allmulticast mode [ 677.946777][T19221] erspan0: entered promiscuous mode [ 677.948426][T19221] erspan0: entered allmulticast mode [ 677.950469][T19221] ip_vti0: entered promiscuous mode [ 677.952125][T19221] ip_vti0: entered allmulticast mode [ 677.956415][T19221] ip6_vti0: entered promiscuous mode [ 677.958644][T19221] ip6_vti0: entered allmulticast mode [ 677.961342][T19221] sit0: entered promiscuous mode [ 677.964016][T19221] sit0: entered allmulticast mode [ 677.966742][T19221] ip6tnl0: entered promiscuous mode [ 677.968826][T19221] ip6tnl0: entered allmulticast mode [ 677.971445][T19221] ip6gre0: entered promiscuous mode [ 677.973941][T19221] ip6gre0: entered allmulticast mode [ 677.977031][T19221] syz_tun: entered promiscuous mode [ 677.979293][T19221] syz_tun: entered allmulticast mode [ 677.981927][T19221] ip6gretap0: entered promiscuous mode [ 677.984529][T19221] ip6gretap0: entered allmulticast mode [ 677.987671][T19221] bridge0: entered promiscuous mode [ 677.989961][T19221] bridge0: entered allmulticast mode [ 677.993249][T19221] vcan0: entered promiscuous mode [ 677.995257][T19221] vcan0: entered allmulticast mode [ 677.997918][T19221] bond0: entered promiscuous mode [ 677.999573][T19221] batadv_slave_0: entered promiscuous mode [ 678.001483][T19221] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 678.004026][T19221] bond0: entered allmulticast mode [ 678.005678][T19221] batadv_slave_0: entered allmulticast mode [ 678.008012][T19221] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 678.012057][T19221] team0: entered promiscuous mode [ 678.014821][T19221] team0: entered allmulticast mode [ 678.018792][T19221] dummy0: entered promiscuous mode [ 678.021516][T19221] dummy0: entered allmulticast mode [ 678.024811][T19221] nlmon0: entered promiscuous mode [ 678.027051][T19221] nlmon0: entered allmulticast mode [ 678.030098][T19221] caif0: entered promiscuous mode [ 678.032306][T19221] caif0: entered allmulticast mode [ 678.035333][T19221] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 678.046728][T19229] team0: Port device bridge0 added [ 678.049074][T19231] bridge0: port 1(team0) entered blocking state [ 678.053789][T19231] bridge0: port 1(team0) entered disabled state [ 678.056468][T19231] team0: entered allmulticast mode [ 678.058078][T19231] C: entered allmulticast mode [ 678.059592][T19231] team_slave_1: entered allmulticast mode [ 678.062221][T19231] vlan0: entered allmulticast mode [ 678.064311][T19231] veth0_vlan: entered allmulticast mode [ 678.066511][T19231] bridge0: entered allmulticast mode [ 678.070462][T19231] team0: left allmulticast mode [ 678.072608][T19231] C: left allmulticast mode [ 678.074952][T19231] team_slave_1: left allmulticast mode [ 678.078233][T19231] vlan0: left allmulticast mode [ 678.080333][T19231] veth0_vlan: left allmulticast mode [ 678.082590][T19231] bridge0: left allmulticast mode [ 678.190890][T16585] syzkaller0: tun_net_xmit 76 [ 678.196879][T16585] syzkaller0: tun_net_xmit 48 [ 678.200140][T19238] syzkaller0: create flow: hash 1937654213 index 1 [ 678.214619][ T53] syzkaller0: tun_net_xmit 76 [ 678.486420][T19237] syzkaller0: delete flow: hash 1937654213 index 1 [ 678.644497][T19243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3660'. [ 678.657479][T19243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3660'. [ 679.881844][T19260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3663'. [ 680.204499][T16585] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 680.221443][T19259] netlink: 'syz.3.3663': attribute type 2 has an invalid length. [ 680.224003][T19259] netlink: 679 bytes leftover after parsing attributes in process `syz.3.3663'. [ 680.403027][T16585] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 680.406932][T16585] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 680.411042][T16585] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 680.550252][T19274] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3667'. [ 680.974975][T19281] can0: slcan on ttyS3. [ 681.006672][T19276] netlink: 'syz.3.3668': attribute type 39 has an invalid length. [ 681.925092][T19280] can0 (unregistered): slcan off ttyS3. [ 682.436316][ T40] audit: type=1326 audit(1760858984.276:2076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19323 comm="syz.4.3676" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x0 [ 682.643801][T19328] overlayfs: failed to clone upperpath [ 682.654332][ T40] audit: type=1326 audit(1760858984.496:2077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19327 comm="syz.1.3677" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 682.663201][ T40] audit: type=1326 audit(1760858984.496:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19327 comm="syz.1.3677" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 682.672551][ T40] audit: type=1326 audit(1760858984.496:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19327 comm="syz.1.3677" exe="/syz-executor" sig=0 arch=40000003 syscall=70 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 682.681760][ T40] audit: type=1326 audit(1760858984.496:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19327 comm="syz.1.3677" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 682.690243][ T40] audit: type=1326 audit(1760858984.496:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19327 comm="syz.1.3677" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 682.698939][ T40] audit: type=1326 audit(1760858984.496:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19327 comm="syz.1.3677" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 682.709883][ T40] audit: type=1326 audit(1760858984.496:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19327 comm="syz.1.3677" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 682.720911][ T40] audit: type=1326 audit(1760858984.496:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19327 comm="syz.1.3677" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 682.721063][ T40] audit: type=1326 audit(1760858984.496:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19327 comm="syz.1.3677" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 683.458695][T19344] fuse: Unknown parameter 'gro˜D8C:\#9Ëup_id' [ 683.738544][T19355] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3685'. [ 683.791015][T19359] FAULT_INJECTION: forcing a failure. [ 683.791015][T19359] name failslab, interval 1, probability 0, space 0, times 0 [ 683.796962][T19359] CPU: 0 UID: 0 PID: 19359 Comm: syz.0.3688 Not tainted syzkaller #0 PREEMPT(full) [ 683.796986][T19359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 683.796997][T19359] Call Trace: [ 683.797004][T19359] [ 683.797011][T19359] dump_stack_lvl+0x16c/0x1f0 [ 683.797043][T19359] should_fail_ex+0x512/0x640 [ 683.797060][T19359] ? __kmalloc_cache_noprof+0x5f/0x780 [ 683.797085][T19359] should_failslab+0xc2/0x120 [ 683.797103][T19359] __kmalloc_cache_noprof+0x72/0x780 [ 683.797125][T19359] ? binder_alloc_new_buf+0x180f/0x3190 [ 683.797148][T19359] ? binder_alloc_new_buf+0x180f/0x3190 [ 683.797168][T19359] binder_alloc_new_buf+0x180f/0x3190 [ 683.797201][T19359] ? __pfx_binder_alloc_new_buf+0x10/0x10 [ 683.797229][T19359] binder_transaction+0x1d09/0x9d10 [ 683.797273][T19359] ? __lock_acquire+0x622/0x1c90 [ 683.797290][T19359] ? __pfx_binder_transaction+0x10/0x10 [ 683.797343][T19359] ? __lock_acquire+0xb8a/0x1c90 [ 683.797374][T19359] ? find_held_lock+0x2b/0x80 [ 683.797397][T19359] ? __might_fault+0xe3/0x190 [ 683.797418][T19359] ? __might_fault+0xe3/0x190 [ 683.797439][T19359] ? __might_fault+0x13b/0x190 [ 683.797471][T19359] binder_thread_write+0xaae/0x4e70 [ 683.797494][T19359] ? __kasan_save_free_info+0x3b/0x60 [ 683.797528][T19359] ? __pfx_binder_thread_write+0x10/0x10 [ 683.797547][T19359] ? binder_debug+0xde/0x1a0 [ 683.797575][T19359] ? binder_debug+0xde/0x1a0 [ 683.797600][T19359] ? __pfx_binder_debug+0x10/0x10 [ 683.797627][T19359] ? find_held_lock+0x2b/0x80 [ 683.797660][T19359] ? __pfx_binder_ioctl+0x10/0x10 [ 683.797679][T19359] binder_ioctl+0x26db/0x73b0 [ 683.797705][T19359] ? tomoyo_path_number_perm+0x295/0x580 [ 683.797731][T19359] ? tomoyo_path_number_perm+0x18d/0x580 [ 683.797754][T19359] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 683.797776][T19359] ? __pfx_binder_ioctl+0x10/0x10 [ 683.797800][T19359] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 683.797824][T19359] ? do_vfs_ioctl+0x128/0x14f0 [ 683.797845][T19359] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 683.797871][T19359] ? find_held_lock+0x2b/0x80 [ 683.797894][T19359] ? hook_file_ioctl_common+0x145/0x410 [ 683.797923][T19359] ? __fget_files+0x20e/0x3c0 [ 683.797948][T19359] ? __pfx_binder_ioctl+0x10/0x10 [ 683.797967][T19359] compat_ptr_ioctl+0x6e/0xa0 [ 683.797985][T19359] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 683.798004][T19359] __ia32_compat_sys_ioctl+0x242/0x370 [ 683.798028][T19359] __do_fast_syscall_32+0x7c/0x300 [ 683.798047][T19359] do_fast_syscall_32+0x32/0x80 [ 683.798064][T19359] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 683.798085][T19359] RIP: 0023:0xf70dd579 [ 683.798099][T19359] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 683.798115][T19359] RSP: 002b:00000000f54cd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 683.798133][T19359] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0306201 [ 683.798143][T19359] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 683.798153][T19359] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 683.798163][T19359] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 683.798173][T19359] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 683.798197][T19359] [ 684.929720][T19381] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3697'. [ 684.982672][T19389] fuse: Unknown parameter 'group_iÿÿÿÿ' [ 685.196518][T19408] netlink: 'syz.0.3707': attribute type 39 has an invalid length. [ 685.295671][ T1416] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 685.299278][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.645492][T19418] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3709'. [ 686.743869][T19421] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3711'. [ 686.746940][T19420] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3711'. [ 687.181089][T19437] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3719'. [ 687.284056][T19443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3722'. [ 687.330145][T19445] netlink: 'syz.1.3723': attribute type 10 has an invalid length. [ 687.332804][T19447] FAULT_INJECTION: forcing a failure. [ 687.332804][T19447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 687.335554][T19445] bond0: (slave batadv_slave_0): Enslaving as an active interface with a down link [ 687.338643][T19447] CPU: 2 UID: 0 PID: 19447 Comm: syz.4.3724 Not tainted syzkaller #0 PREEMPT(full) [ 687.338667][T19447] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 687.338678][T19447] Call Trace: [ 687.338684][T19447] [ 687.338690][T19447] dump_stack_lvl+0x16c/0x1f0 [ 687.338722][T19447] should_fail_ex+0x512/0x640 [ 687.338743][T19447] _copy_from_user+0x2e/0xd0 [ 687.338762][T19447] ucma_write+0x128/0x330 [ 687.338788][T19447] ? __pfx_ucma_write+0x10/0x10 [ 687.338820][T19447] ? bpf_lsm_file_permission+0x9/0x10 [ 687.338848][T19447] ? security_file_permission+0x71/0x210 [ 687.338872][T19447] ? rw_verify_area+0xcf/0x6c0 [ 687.338893][T19447] ? __pfx_ucma_write+0x10/0x10 [ 687.338914][T19447] vfs_write+0x2a0/0x11d0 [ 687.338943][T19447] ? __pfx_vfs_write+0x10/0x10 [ 687.338964][T19447] ? find_held_lock+0x2b/0x80 [ 687.338990][T19447] ? __fget_files+0x204/0x3c0 [ 687.339018][T19447] ? __fget_files+0x20e/0x3c0 [ 687.339038][T19447] ? handle_mm_fault+0x220/0xd10 [ 687.339066][T19447] ksys_write+0x1f8/0x250 [ 687.339091][T19447] ? __pfx_ksys_write+0x10/0x10 [ 687.339117][T19447] ? rcu_is_watching+0x12/0xc0 [ 687.339144][T19447] __do_fast_syscall_32+0x7c/0x300 [ 687.339164][T19447] do_fast_syscall_32+0x32/0x80 [ 687.339181][T19447] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 687.339202][T19447] RIP: 0023:0xf707d579 [ 687.339215][T19447] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 687.339233][T19447] RSP: 002b:00000000f546d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 687.339250][T19447] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000900 [ 687.339261][T19447] RDX: 00000000000000a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 687.339271][T19447] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 687.339282][T19447] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 687.339293][T19447] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 687.339316][T19447] [ 688.124314][T19476] virtiofs: Unknown parameter 'dax_…!' [ 688.127050][T19468] netlink: 'syz.4.3730': attribute type 39 has an invalid length. [ 688.999256][T19498] netlink: 'syz.1.3738': attribute type 10 has an invalid length. [ 689.560629][T19508] netlink: 536 bytes leftover after parsing attributes in process `syz.0.3742'. [ 689.564711][T19508] netlink: 536 bytes leftover after parsing attributes in process `syz.0.3742'. [ 689.568675][T19508] netlink: 536 bytes leftover after parsing attributes in process `syz.0.3742'. [ 689.572562][T19508] netlink: 536 bytes leftover after parsing attributes in process `syz.0.3742'. [ 689.577715][T19508] netlink: 536 bytes leftover after parsing attributes in process `syz.0.3742'. [ 689.581728][T19508] netlink: 536 bytes leftover after parsing attributes in process `syz.0.3742'. [ 689.585912][T19508] netlink: 536 bytes leftover after parsing attributes in process `syz.0.3742'. [ 689.589410][T19508] netlink: 536 bytes leftover after parsing attributes in process `syz.0.3742'. [ 689.593253][T19508] netlink: 536 bytes leftover after parsing attributes in process `syz.0.3742'. [ 689.597298][T19508] netlink: 536 bytes leftover after parsing attributes in process `syz.0.3742'. [ 690.643502][T15365] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 690.793397][T15365] usb 5-1: Using ep0 maxpacket: 16 [ 690.797154][T15365] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 12408, setting to 64 [ 690.803634][T15365] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 690.807173][T15365] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.810309][T15365] usb 5-1: Product: syz [ 690.811992][T15365] usb 5-1: Manufacturer: syz [ 690.814067][T15365] usb 5-1: SerialNumber: syz [ 690.817780][T15365] usb 5-1: config 0 descriptor?? [ 690.824498][T15365] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 690.828119][T15365] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 691.129889][T19556] affs: No valid root block on device nbd4 [ 691.270381][T15365] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 691.303960][T19559] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 691.306597][T19559] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 691.317749][T19559] vhci_hcd vhci_hcd.0: Device attached [ 691.349594][T15365] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 691.353260][T15365] em28xx 5-1:0.0: board has no eeprom [ 691.367773][T19556] netlink: 'syz.4.3756': attribute type 10 has an invalid length. [ 691.493376][T15365] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 691.495842][T15365] em28xx 5-1:0.0: dvb set to bulk mode. [ 691.498350][ T5078] em28xx 5-1:0.0: Binding DVB extension [ 691.513471][T15365] usb 5-1: USB disconnect, device number 10 [ 691.518037][T15365] em28xx 5-1:0.0: Disconnecting em28xx [ 691.551652][ T5078] em28xx 5-1:0.0: Registering input extension [ 691.554417][T15365] em28xx 5-1:0.0: Closing input extension [ 691.603406][ T6002] usb 46-1: SetAddress Request (38) to port 0 [ 691.605508][ T6002] usb 46-1: new SuperSpeed USB device number 38 using vhci_hcd [ 691.620511][T15365] em28xx 5-1:0.0: Freeing device [ 691.767042][T19560] vhci_hcd: connection reset by peer [ 691.769159][T16583] vhci_hcd: stop threads [ 691.771008][T16583] vhci_hcd: release socket [ 691.773002][T16583] vhci_hcd: disconnect device [ 692.188643][T19580] lo speed is unknown, defaulting to 1000 [ 692.247243][T19585] random: crng reseeded on system resumption [ 692.590696][ T5975] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 692.965070][T19592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 693.065885][ T5975] usb 5-1: config 0 has no interfaces? [ 693.069661][ T5975] usb 5-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 693.073480][ T5975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.080253][ T5975] usb 5-1: config 0 descriptor?? [ 693.761823][T19610] netlink: 'syz.3.3775': attribute type 39 has an invalid length. [ 693.777873][T19615] binder: 19579:19615 ioctl 0 80000040 returned -22 [ 696.058375][T15057] usb 5-1: USB disconnect, device number 11 [ 696.201100][T19659] random: crng reseeded on system resumption [ 696.663801][ T6002] usb 46-1: device descriptor read/8, error -110 [ 697.080491][ T6002] usb usb46-port1: attempt power cycle [ 697.091383][T19684] __nla_validate_parse: 41 callbacks suppressed [ 697.091402][T19684] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3801'. [ 697.238592][T19674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3796'. [ 697.974378][ T6002] usb usb46-port1: unable to enumerate USB device [ 698.388998][T19720] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3813'. [ 698.459465][T19723] netlink: 'syz.1.3814': attribute type 21 has an invalid length. [ 698.461944][T19723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3814'. [ 699.143837][T19738] netlink: 'syz.0.3818': attribute type 1 has an invalid length. [ 699.153392][T19738] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3818'. [ 699.568546][T19744] netlink: 'syz.1.3819': attribute type 21 has an invalid length. [ 699.571980][T19744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3819'. [ 700.057586][T19757] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3821'. [ 700.061630][T19757] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3821'. [ 700.136976][T19751] affs: No valid root block on device nbd4 [ 700.161688][T19751] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 700.163827][T19751] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 700.173644][T19751] vhci_hcd vhci_hcd.0: Device attached [ 700.269604][T19751] netlink: 'syz.4.3822': attribute type 10 has an invalid length. [ 700.279882][T19765] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 700.281719][T19765] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 700.288340][T19765] vhci_hcd vhci_hcd.0: Device attached [ 700.487041][ T6002] usb 46-1: SetAddress Request (42) to port 0 [ 700.489094][ T6002] usb 46-1: new SuperSpeed USB device number 42 using vhci_hcd [ 700.543436][ T5078] usb 43-1: new high-speed USB device number 9 using vhci_hcd [ 700.736423][T19763] vhci_hcd: connection reset by peer [ 700.738427][T16578] vhci_hcd: stop threads [ 700.740268][T16578] vhci_hcd: release socket [ 700.742254][T16578] vhci_hcd: disconnect device [ 700.911887][T19766] vhci_hcd: connection reset by peer [ 700.914509][T16578] vhci_hcd: stop threads [ 700.916315][T16578] vhci_hcd: release socket [ 700.918358][T16578] vhci_hcd: disconnect device [ 701.697215][T19787] lo speed is unknown, defaulting to 1000 [ 701.752672][T19787] IPVS: You probably need to specify IP address on multicast interface. [ 701.756927][T19787] IPVS: Error connecting to the multicast addr [ 701.783207][T19794] vlan2: entered promiscuous mode [ 701.788838][T19794] bond0: entered promiscuous mode [ 701.790490][T19795] Unsupported ieee802154 address type: 0 [ 701.791055][T19794] batadv_slave_0: entered promiscuous mode [ 702.098730][T19823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3841'. [ 702.123638][T19824] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.126123][T19824] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.287317][T19824] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 702.953489][T19808] netlink: 'syz.1.3838': attribute type 39 has an invalid length. [ 703.025365][T16585] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 703.041016][T16585] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.057387][T16585] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 703.148519][T16585] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.153854][T16585] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 703.157127][T16585] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.160284][T16585] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 703.163711][T16585] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.284379][T19839] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3846'. [ 703.310233][T19841] tipc: Enabled bearer , priority 0 [ 703.314568][T19841] syzkaller0: entered promiscuous mode [ 703.317496][T19841] syzkaller0: entered allmulticast mode [ 703.336768][T19841] FAULT_INJECTION: forcing a failure. [ 703.336768][T19841] name failslab, interval 1, probability 0, space 0, times 0 [ 703.342039][T19841] CPU: 2 UID: 0 PID: 19841 Comm: syz.0.3847 Not tainted syzkaller #0 PREEMPT(full) [ 703.342065][T19841] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 703.342076][T19841] Call Trace: [ 703.342082][T19841] [ 703.342090][T19841] dump_stack_lvl+0x16c/0x1f0 [ 703.342124][T19841] should_fail_ex+0x512/0x640 [ 703.342144][T19841] should_failslab+0xc2/0x120 [ 703.342163][T19841] kmem_cache_alloc_node_noprof+0x78/0x770 [ 703.342188][T19841] ? __alloc_skb+0x2b2/0x380 [ 703.342217][T19841] ? __alloc_skb+0x2b2/0x380 [ 703.342240][T19841] ? rt6_nlmsg_size+0xc4/0x510 [ 703.342258][T19841] __alloc_skb+0x2b2/0x380 [ 703.342280][T19841] ? __pfx___alloc_skb+0x10/0x10 [ 703.342305][T19841] ? ip6_default_advmss+0x3f0/0x460 [ 703.342325][T19841] ? __fib6_drop_pcpu_from.part.0+0xcd/0x510 [ 703.342346][T19841] inet6_rt_notify+0x1e0/0x4b0 [ 703.342408][T19841] fib6_del+0xf60/0x1770 [ 703.342433][T19841] ? __pfx_fib6_del+0x10/0x10 [ 703.342451][T19841] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 703.342477][T19841] ? fib6_ifdown+0xcd/0x8f0 [ 703.342497][T19841] fib6_clean_node+0x424/0x5b0 [ 703.342519][T19841] ? __pfx_fib6_clean_node+0x10/0x10 [ 703.342550][T19841] fib6_walk_continue+0x452/0x8d0 [ 703.342576][T19841] fib6_walk+0x182/0x370 [ 703.342603][T19841] ? __pfx_fib6_ifdown+0x10/0x10 [ 703.342620][T19841] fib6_clean_tree+0xd4/0x110 [ 703.342643][T19841] ? __pfx_fib6_clean_tree+0x10/0x10 [ 703.342675][T19841] ? __pfx_fib6_clean_node+0x10/0x10 [ 703.342693][T19841] ? __pfx_fib6_ifdown+0x10/0x10 [ 703.342717][T19841] ? __pfx_fib6_ifdown+0x10/0x10 [ 703.342735][T19841] __fib6_clean_all+0x107/0x2d0 [ 703.342756][T19841] rt6_disable_ip+0x2ec/0x990 [ 703.342780][T19841] ? __pfx___mutex_trylock_common+0x10/0x10 [ 703.342802][T19841] ? __pfx_rt6_disable_ip+0x10/0x10 [ 703.342826][T19841] ? trace_contention_end+0xdd/0x130 [ 703.342846][T19841] addrconf_ifdown.isra.0+0x11d/0x1aa0 [ 703.342869][T19841] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 703.342892][T19841] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 703.342919][T19841] addrconf_notify+0x89a/0x19e0 [ 703.342942][T19841] ? ip6mr_device_event+0x1bc/0x230 [ 703.342967][T19841] notifier_call_chain+0xbc/0x410 [ 703.342984][T19841] ? __pfx_addrconf_notify+0x10/0x10 [ 703.343011][T19841] call_netdevice_notifiers_info+0xbe/0x140 [ 703.343031][T19841] netif_set_mtu_ext+0x590/0x7d0 [ 703.343058][T19841] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 703.343086][T19841] ? __lock_acquire+0xb8a/0x1c90 [ 703.343104][T19841] ? kasan_save_stack+0x42/0x60 [ 703.343129][T19841] ? kasan_save_stack+0x33/0x60 [ 703.343153][T19841] ? __kasan_save_free_info+0x3b/0x60 [ 703.343178][T19841] netif_set_mtu+0x98/0x140 [ 703.343205][T19841] ? __pfx_netif_set_mtu+0x10/0x10 [ 703.343239][T19841] ? full_name_hash+0xbc/0x110 [ 703.343261][T19841] dev_set_mtu+0xb2/0x260 [ 703.343294][T19841] dev_ifsioc+0xd1f/0x1ee0 [ 703.343325][T19841] ? __pfx_dev_ifsioc+0x10/0x10 [ 703.343349][T19841] ? __pfx___mutex_lock+0x10/0x10 [ 703.343375][T19841] ? dev_load+0x8e/0x240 [ 703.343405][T19841] dev_ioctl+0x223/0x1060 [ 703.343428][T19841] sock_do_ioctl+0x19d/0x280 [ 703.343448][T19841] ? __pfx_sock_do_ioctl+0x10/0x10 [ 703.343470][T19841] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 703.343492][T19841] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 703.343519][T19841] compat_sock_ioctl+0x301/0x730 [ 703.343560][T19841] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 703.343582][T19841] ? hook_file_ioctl_common+0x145/0x410 [ 703.343612][T19841] ? __fget_files+0x20e/0x3c0 [ 703.343640][T19841] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 703.343661][T19841] __ia32_compat_sys_ioctl+0x242/0x370 [ 703.343684][T19841] __do_fast_syscall_32+0x7c/0x300 [ 703.343700][T19841] do_fast_syscall_32+0x32/0x80 [ 703.343717][T19841] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 703.343740][T19841] RIP: 0023:0xf70dd579 [ 703.343754][T19841] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 703.343770][T19841] RSP: 002b:00000000f54cd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 703.343789][T19841] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000008922 [ 703.343800][T19841] RDX: 0000000080002280 RSI: 0000000000000000 RDI: 0000000000000000 [ 703.343812][T19841] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 703.343820][T19841] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 703.343828][T19841] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 703.343853][T19841] [ 703.515583][T19841] tipc: Resetting bearer [ 703.520158][T19840] tipc: Resetting bearer [ 703.537981][T19840] tipc: Disabling bearer [ 703.551171][T19854] virtiofs: Unknown parameter 'dax_…!' [ 704.124328][T19867] tipc: Enabled bearer , priority 0 [ 704.127904][T19867] syzkaller0: entered promiscuous mode [ 704.130249][T19867] syzkaller0: entered allmulticast mode [ 704.146739][T19867] tipc: Resetting bearer [ 704.149738][T19866] tipc: Resetting bearer [ 704.161288][T19866] tipc: Disabling bearer [ 704.567992][T19871] FAULT_INJECTION: forcing a failure. [ 704.567992][T19871] name failslab, interval 1, probability 0, space 0, times 0 [ 704.573085][T19871] CPU: 3 UID: 0 PID: 19871 Comm: syz.0.3857 Not tainted syzkaller #0 PREEMPT(full) [ 704.573109][T19871] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 704.573134][T19871] Call Trace: [ 704.573142][T19871] [ 704.573150][T19871] dump_stack_lvl+0x16c/0x1f0 [ 704.573181][T19871] should_fail_ex+0x512/0x640 [ 704.573198][T19871] ? __kmalloc_cache_noprof+0x5f/0x780 [ 704.573224][T19871] should_failslab+0xc2/0x120 [ 704.573242][T19871] __kmalloc_cache_noprof+0x72/0x780 [ 704.573270][T19871] ? tcf_block_get_ext+0x938/0x1800 [ 704.573294][T19871] ? tcf_block_get_ext+0x938/0x1800 [ 704.573310][T19871] tcf_block_get_ext+0x938/0x1800 [ 704.573337][T19871] tcf_block_get+0xa8/0x100 [ 704.573355][T19871] ? __pfx_tcf_block_get+0x10/0x10 [ 704.573372][T19871] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 704.573401][T19871] ? kasan_save_track+0x14/0x30 [ 704.573431][T19871] hfsc_change_class+0x6ee/0x4020 [ 704.573466][T19871] ? __pfx_hfsc_change_class+0x10/0x10 [ 704.573503][T19871] ? qdisc_match_from_root+0x16f/0x260 [ 704.573523][T19871] ? __pfx_hfsc_change_class+0x10/0x10 [ 704.573548][T19871] tc_ctl_tclass+0x59d/0x16c0 [ 704.573575][T19871] ? __pfx_tc_ctl_tclass+0x10/0x10 [ 704.573595][T19871] ? trace_contention_end+0xdd/0x130 [ 704.573616][T19871] ? __mutex_lock+0x1c5/0x1060 [ 704.573634][T19871] ? __lock_acquire+0x622/0x1c90 [ 704.573672][T19871] ? __pfx_tc_ctl_tclass+0x10/0x10 [ 704.573694][T19871] rtnetlink_rcv_msg+0x3c9/0xe90 [ 704.573714][T19871] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 704.573740][T19871] ? ref_tracker_free+0x37c/0x830 [ 704.573762][T19871] netlink_rcv_skb+0x158/0x420 [ 704.573780][T19871] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 704.573800][T19871] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 704.573829][T19871] ? netlink_deliver_tap+0x1ae/0xd30 [ 704.573864][T19871] netlink_unicast+0x5aa/0x870 [ 704.573886][T19871] ? __pfx_netlink_unicast+0x10/0x10 [ 704.573914][T19871] netlink_sendmsg+0x8c8/0xdd0 [ 704.573936][T19871] ? __pfx_netlink_sendmsg+0x10/0x10 [ 704.573958][T19871] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 704.573983][T19871] ____sys_sendmsg+0xa98/0xc70 [ 704.574003][T19871] ? btrfs_dev_replace_cancel+0xb70/0xc70 [ 704.574031][T19871] ? __pfx_____sys_sendmsg+0x10/0x10 [ 704.574051][T19871] ? get_compat_msghdr+0x11a/0x170 [ 704.574089][T19871] ___sys_sendmsg+0x134/0x1d0 [ 704.574118][T19871] ? __pfx____sys_sendmsg+0x10/0x10 [ 704.574158][T19871] ? find_held_lock+0x2b/0x80 [ 704.574199][T19871] __sys_sendmsg+0x16d/0x220 [ 704.574227][T19871] ? __pfx___sys_sendmsg+0x10/0x10 [ 704.574271][T19871] ? rcu_is_watching+0x12/0xc0 [ 704.574300][T19871] __do_fast_syscall_32+0x7c/0x300 [ 704.574320][T19871] do_fast_syscall_32+0x32/0x80 [ 704.574337][T19871] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 704.574377][T19871] RIP: 0023:0xf70dd579 [ 704.574392][T19871] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 704.574424][T19871] RSP: 002b:00000000f54cd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 704.574441][T19871] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080001200 [ 704.574452][T19871] RDX: 0000000004000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 704.574463][T19871] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 704.574473][T19871] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 704.574483][T19871] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 704.574509][T19871] [ 704.910755][T19873] netlink: 'syz.4.3858': attribute type 39 has an invalid length. [ 705.109537][T19894] overlayfs: failed to resolve './file1': -2 [ 705.201216][T19897] FAULT_INJECTION: forcing a failure. [ 705.201216][T19897] name failslab, interval 1, probability 0, space 0, times 0 [ 705.206313][T19897] CPU: 2 UID: 0 PID: 19897 Comm: syz.0.3864 Not tainted syzkaller #0 PREEMPT(full) [ 705.206329][T19897] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 705.206336][T19897] Call Trace: [ 705.206340][T19897] [ 705.206367][T19897] dump_stack_lvl+0x16c/0x1f0 [ 705.206395][T19897] should_fail_ex+0x512/0x640 [ 705.206406][T19897] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 705.206418][T19897] should_failslab+0xc2/0x120 [ 705.206430][T19897] kmem_cache_alloc_noprof+0x75/0x6e0 [ 705.206444][T19897] ? skb_clone+0x190/0x3f0 [ 705.206457][T19897] ? skb_clone+0x190/0x3f0 [ 705.206465][T19897] skb_clone+0x190/0x3f0 [ 705.206475][T19897] netlink_deliver_tap+0xabd/0xd30 [ 705.206495][T19897] netlink_unicast+0x71f/0x870 [ 705.206508][T19897] ? __pfx_netlink_unicast+0x10/0x10 [ 705.206519][T19897] ? genl_rcv_msg+0x4bb/0x800 [ 705.206534][T19897] netlink_ack+0x696/0xb80 [ 705.206552][T19897] netlink_rcv_skb+0x332/0x420 [ 705.206562][T19897] ? __pfx_genl_rcv_msg+0x10/0x10 [ 705.206575][T19897] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 705.206591][T19897] ? netlink_deliver_tap+0x1ae/0xd30 [ 705.206610][T19897] genl_rcv+0x28/0x40 [ 705.206620][T19897] netlink_unicast+0x5aa/0x870 [ 705.206632][T19897] ? __pfx_netlink_unicast+0x10/0x10 [ 705.206648][T19897] netlink_sendmsg+0x8c8/0xdd0 [ 705.206660][T19897] ? __pfx_netlink_sendmsg+0x10/0x10 [ 705.206672][T19897] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 705.206687][T19897] ____sys_sendmsg+0xa98/0xc70 [ 705.206701][T19897] ? __pfx_____sys_sendmsg+0x10/0x10 [ 705.206713][T19897] ? get_compat_msghdr+0x11a/0x170 [ 705.206736][T19897] ___sys_sendmsg+0x134/0x1d0 [ 705.206753][T19897] ? __pfx____sys_sendmsg+0x10/0x10 [ 705.206776][T19897] ? find_held_lock+0x2b/0x80 [ 705.206800][T19897] __sys_sendmsg+0x16d/0x220 [ 705.206817][T19897] ? __pfx___sys_sendmsg+0x10/0x10 [ 705.206839][T19897] ? rcu_is_watching+0x12/0xc0 [ 705.206856][T19897] __do_fast_syscall_32+0x7c/0x300 [ 705.206872][T19897] do_fast_syscall_32+0x32/0x80 [ 705.206887][T19897] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 705.206908][T19897] RIP: 0023:0xf70dd579 [ 705.206922][T19897] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 705.206940][T19897] RSP: 002b:00000000f54cd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 705.206959][T19897] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 705.206970][T19897] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 705.206979][T19897] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 705.206985][T19897] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 705.206991][T19897] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 705.207005][T19897] [ 705.331118][T19899] FAULT_INJECTION: forcing a failure. [ 705.331118][T19899] name failslab, interval 1, probability 0, space 0, times 0 [ 705.335656][T19899] CPU: 3 UID: 0 PID: 19899 Comm: syz.0.3865 Not tainted syzkaller #0 PREEMPT(full) [ 705.335672][T19899] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 705.335679][T19899] Call Trace: [ 705.335683][T19899] [ 705.335687][T19899] dump_stack_lvl+0x16c/0x1f0 [ 705.335708][T19899] should_fail_ex+0x512/0x640 [ 705.335719][T19899] ? __kmalloc_cache_noprof+0x5f/0x780 [ 705.335734][T19899] should_failslab+0xc2/0x120 [ 705.335746][T19899] __kmalloc_cache_noprof+0x72/0x780 [ 705.335760][T19899] ? ipv6_add_addr+0x4e3/0x1fe0 [ 705.335778][T19899] ? ipv6_add_addr+0x4e3/0x1fe0 [ 705.335794][T19899] ipv6_add_addr+0x4e3/0x1fe0 [ 705.335814][T19899] ? __pfx_ipv6_add_addr+0x10/0x10 [ 705.335836][T19899] ? inet6_addr_add+0x256/0x960 [ 705.335847][T19899] inet6_addr_add+0x256/0x960 [ 705.335860][T19899] inet6_rtm_newaddr+0x1619/0x1c70 [ 705.335875][T19899] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 705.335887][T19899] ? __lock_acquire+0x622/0x1c90 [ 705.335905][T19899] ? find_held_lock+0x2b/0x80 [ 705.335919][T19899] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 705.335930][T19899] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 705.335941][T19899] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 705.335954][T19899] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 705.335965][T19899] rtnetlink_rcv_msg+0x95e/0xe90 [ 705.335976][T19899] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 705.335990][T19899] ? ref_tracker_free+0x37c/0x830 [ 705.336003][T19899] netlink_rcv_skb+0x158/0x420 [ 705.336014][T19899] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 705.336025][T19899] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 705.336041][T19899] ? netlink_deliver_tap+0x1ae/0xd30 [ 705.336060][T19899] netlink_unicast+0x5aa/0x870 [ 705.336072][T19899] ? __pfx_netlink_unicast+0x10/0x10 [ 705.336087][T19899] netlink_sendmsg+0x8c8/0xdd0 [ 705.336100][T19899] ? __pfx_netlink_sendmsg+0x10/0x10 [ 705.336111][T19899] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 705.336126][T19899] ____sys_sendmsg+0xa98/0xc70 [ 705.336146][T19899] ? __pfx_____sys_sendmsg+0x10/0x10 [ 705.336163][T19899] ? get_compat_msghdr+0x11a/0x170 [ 705.336199][T19899] ___sys_sendmsg+0x134/0x1d0 [ 705.336224][T19899] ? __pfx____sys_sendmsg+0x10/0x10 [ 705.336262][T19899] ? find_held_lock+0x2b/0x80 [ 705.336295][T19899] __sys_sendmsg+0x16d/0x220 [ 705.336312][T19899] ? __pfx___sys_sendmsg+0x10/0x10 [ 705.336334][T19899] ? rcu_is_watching+0x12/0xc0 [ 705.336351][T19899] __do_fast_syscall_32+0x7c/0x300 [ 705.336362][T19899] do_fast_syscall_32+0x32/0x80 [ 705.336373][T19899] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 705.336387][T19899] RIP: 0023:0xf70dd579 [ 705.336396][T19899] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 705.336406][T19899] RSP: 002b:00000000f54cd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 705.336416][T19899] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 705.336423][T19899] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 705.336429][T19899] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 705.336435][T19899] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 705.336441][T19899] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 705.336455][T19899] [ 705.337546][T19854] Set syz1 is full, maxelem 65536 reached [ 705.533548][ T6002] usb 46-1: device descriptor read/8, error -110 [ 705.693524][ T5078] vhci_hcd: vhci_device speed not set [ 705.785241][T19921] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 705.842380][T19930] virtiofs: Unknown parameter 'dax_…!' [ 705.899289][T19926] veth0: entered promiscuous mode [ 705.903726][T19925] veth0: left promiscuous mode [ 705.944219][ T6002] usb usb46-port1: attempt power cycle [ 706.073416][T15057] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 706.213444][T15057] usb 5-1: device descriptor read/64, error -71 [ 706.453535][T15365] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 706.463563][T15057] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 706.513924][ T6002] usb usb46-port1: unable to enumerate USB device [ 706.603376][T15365] usb 9-1: Using ep0 maxpacket: 16 [ 706.603415][T15057] usb 5-1: device descriptor read/64, error -71 [ 706.607380][T15365] usb 9-1: config 0 has an invalid interface number: 48 but max is 0 [ 706.610934][T15365] usb 9-1: config 0 has no interface number 0 [ 706.612943][T15365] usb 9-1: config 0 interface 48 has no altsetting 0 [ 706.616654][T15365] usb 9-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 706.619681][T15365] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.622168][T15365] usb 9-1: Product: syz [ 706.623602][T15365] usb 9-1: Manufacturer: syz [ 706.625064][T15365] usb 9-1: SerialNumber: syz [ 706.627976][T15365] usb 9-1: config 0 descriptor?? [ 706.713759][T15057] usb usb5-port1: attempt power cycle [ 706.836985][T19941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 706.840397][T19941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 706.846782][T13930] Bluetooth: hci2: Unknown advertising packet type: 0x35 [ 706.846831][T13930] Bluetooth: hci2: adv larger than maximum supported [ 706.849838][T13930] Bluetooth: hci2: Malformed LE Event: 0x0d [ 706.913606][ T1325] usb 9-1: USB disconnect, device number 15 [ 707.073457][T15057] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 707.108297][T15057] usb 5-1: device descriptor read/8, error -71 [ 707.343372][T15057] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 707.374199][T15057] usb 5-1: device descriptor read/8, error -71 [ 707.495693][T15057] usb usb5-port1: unable to enumerate USB device [ 708.683428][T15365] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 708.844559][T15365] usb 9-1: Using ep0 maxpacket: 8 [ 708.848875][T15365] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 708.852559][T15365] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 708.855935][T15365] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 708.859086][T15365] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 708.863054][T15365] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 708.866080][T15365] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.078700][T19995] lo speed is unknown, defaulting to 1000 [ 711.073447][T15365] usb 9-1: usb_control_msg returned -71 [ 711.075427][T15365] usbtmc 9-1:16.0: can't read capabilities [ 711.080936][T15365] usb 9-1: USB disconnect, device number 16 [ 711.164639][T20011] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3898'. [ 711.510394][T20018] netlink: 'syz.1.3897': attribute type 10 has an invalid length. [ 712.458700][T20022] syz.4.3901 (20022): drop_caches: 4 [ 712.540984][T20029] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3903'. [ 712.595936][T20033] FAULT_INJECTION: forcing a failure. [ 712.595936][T20033] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 712.600377][T20033] CPU: 3 UID: 0 PID: 20033 Comm: syz.0.3904 Not tainted syzkaller #0 PREEMPT(full) [ 712.600402][T20033] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 712.600413][T20033] Call Trace: [ 712.600420][T20033] [ 712.600428][T20033] dump_stack_lvl+0x16c/0x1f0 [ 712.600460][T20033] should_fail_ex+0x512/0x640 [ 712.600482][T20033] should_fail_alloc_page+0xe7/0x130 [ 712.600509][T20033] prepare_alloc_pages+0x3c2/0x610 [ 712.600531][T20033] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 712.600557][T20033] ? css_rstat_updated+0x1c2/0x510 [ 712.600584][T20033] ? __pfx_css_rstat_updated+0x10/0x10 [ 712.600632][T20033] ? find_held_lock+0x2b/0x80 [ 712.600656][T20033] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 712.600679][T20033] ? __up_read+0x1f8/0x750 [ 712.600701][T20033] ? __pfx___up_read+0x10/0x10 [ 712.600728][T20033] ? do_user_addr_fault+0x843/0x1370 [ 712.600752][T20033] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 712.600778][T20033] ? policy_nodemask+0xea/0x4e0 [ 712.600798][T20033] alloc_pages_mpol+0x1fb/0x550 [ 712.600817][T20033] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 712.600843][T20033] alloc_pages_noprof+0x131/0x390 [ 712.600861][T20033] bpf_prog_test_run_xdp+0x10c4/0x1660 [ 712.600899][T20033] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 712.600927][T20033] ? __might_fault+0xd0/0x190 [ 712.600955][T20033] ? fput+0x9b/0xd0 [ 712.600974][T20033] ? __bpf_prog_get+0x97/0x2a0 [ 712.600992][T20033] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 712.601020][T20033] __sys_bpf+0x1035/0x4980 [ 712.601047][T20033] ? __pfx___sys_bpf+0x10/0x10 [ 712.601070][T20033] ? find_held_lock+0x2b/0x80 [ 712.601099][T20033] ? find_held_lock+0x2b/0x80 [ 712.601129][T20033] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 712.601160][T20033] ? fput+0x9b/0xd0 [ 712.601177][T20033] ? ksys_write+0x1ac/0x250 [ 712.601201][T20033] ? __pfx_ksys_write+0x10/0x10 [ 712.601228][T20033] __ia32_sys_bpf+0x76/0xe0 [ 712.601253][T20033] __do_fast_syscall_32+0x7c/0x300 [ 712.601272][T20033] do_fast_syscall_32+0x32/0x80 [ 712.601289][T20033] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 712.601311][T20033] RIP: 0023:0xf70dd579 [ 712.601326][T20033] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 712.601343][T20033] RSP: 002b:00000000f54cd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 712.601360][T20033] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080001bc0 [ 712.601371][T20033] RDX: 0000000000000022 RSI: 0000000000000000 RDI: 0000000000000000 [ 712.601381][T20033] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 712.601391][T20033] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 712.601401][T20033] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 712.601425][T20033] [ 712.908117][T20042] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 712.916366][T20042] evm: overlay not supported [ 713.362536][T20057] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3909'. [ 713.388901][T13930] Bluetooth: hci1: Malformed LE Event: 0x0d [ 713.445856][T20060] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3913'. [ 714.227246][T20072] lo speed is unknown, defaulting to 1000 [ 714.344704][T20062] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 714.347808][T20062] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 714.352203][T20062] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 714.603415][ T6020] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 714.761184][ T6020] usb 5-1: config 0 has no interfaces? [ 714.763755][ T6020] usb 5-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 714.767761][ T6020] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.779088][ T6020] usb 5-1: config 0 descriptor?? [ 715.462625][T20093] binder: 20071:20093 ioctl 0 80000040 returned -22 [ 715.613529][T13930] Bluetooth: hci1: command 0x0c1a tx timeout [ 716.321250][T20100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3926'. [ 716.326674][T20100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3926'. [ 716.387503][T20104] xt_SECMARK: invalid mode: 0 [ 716.397061][T20100] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3926'. [ 716.400931][T20100] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3926'. [ 716.413503][T13930] Bluetooth: hci2: command 0x0c1a tx timeout [ 716.423548][T13930] Bluetooth: hci3: command 0x040f tx timeout [ 716.751157][T20114] random: crng reseeded on system resumption [ 717.029733][T20117] overlay: ./bus is not a directory [ 717.220074][T20119] overlayfs: failed to resolve './file0': -2 [ 717.261450][ T1325] usb 5-1: USB disconnect, device number 16 [ 717.681126][T20129] netlink: 'syz.4.3934': attribute type 1 has an invalid length. [ 717.684469][T20129] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3934'. [ 719.139353][T20155] overlayfs: failed to resolve './file0': -2 [ 719.383781][T20163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3944'. [ 719.387152][T20163] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3944'. [ 719.393185][T20163] geneve3: entered promiscuous mode [ 719.395127][T20163] geneve3: entered allmulticast mode [ 719.399781][T20163] syzkaller0: entered promiscuous mode [ 719.401639][T20163] syzkaller0: entered allmulticast mode [ 720.177157][ T40] kauditd_printk_skb: 81 callbacks suppressed [ 720.177173][ T40] audit: type=1800 audit(1760859022.016:2167): pid=20173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3947" name="nullb0" dev="tmpfs" ino=1780 res=0 errno=0 [ 720.326037][T20179] overlayfs: failed to resolve './file0': -2 [ 766.915983][T16577] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 766.918317][T16577] CPU: 3 UID: 0 PID: 16577 Comm: kworker/u32:33 Not tainted syzkaller #0 PREEMPT(full) [ 766.922990][T16577] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 766.926369][T16577] Workqueue: netns cleanup_net [ 766.927929][T16577] Call Trace: [ 766.928998][T16577] [ 766.929961][T16577] dump_stack_lvl+0x3d/0x1f0 [ 766.931660][T16577] vpanic+0x640/0x6f0 [ 766.933478][T16577] ? xfrm6_tunnel_net_exit+0x9f/0x160 [ 766.935387][T16577] panic+0xca/0xd0 [ 766.936617][T16577] ? __pfx_panic+0x10/0x10 [ 766.938042][T16577] ? check_panic_on_warn+0x1f/0xb0 [ 766.939639][T16577] check_panic_on_warn+0xab/0xb0 [ 766.941250][T16577] __warn+0xf6/0x3c0 [ 766.942502][T16577] ? xfrm6_tunnel_net_exit+0x9f/0x160 [ 766.944216][T16577] report_bug+0x3c3/0x580 [ 766.945673][T16577] ? xfrm6_tunnel_net_exit+0x9f/0x160 [ 766.947404][T16577] handle_bug+0x184/0x210 [ 766.948772][T16577] exc_invalid_op+0x17/0x50 [ 766.950212][T16577] asm_exc_invalid_op+0x1a/0x20 [ 766.952058][T16577] RIP: 0010:xfrm6_tunnel_net_exit+0x9f/0x160 [ 766.954207][T16577] Code: 00 00 00 49 8d 3c dc 48 89 f8 48 c1 e8 03 42 80 3c 28 00 0f 85 bd 00 00 00 89 e8 49 8b 04 c4 48 85 c0 74 ab e8 d2 99 98 f7 90 <0f> 0b 90 eb a0 4d 8d ac 24 00 08 00 00 31 db 49 be 00 00 00 00 00 [ 766.961797][T16577] RSP: 0018:ffffc90006d3fa90 EFLAGS: 00010293 [ 766.964279][T16577] RAX: 0000000000000000 RBX: 0000000000000000 RCX: fffff52000da7f23 [ 766.967247][T16577] RDX: ffff888067828000 RSI: ffffffff8a241e8e RDI: ffff8880620f4000 [ 766.970354][T16577] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 766.973726][T16577] R10: ffffffff908349d7 R11: 0000000000000001 R12: ffff8880620f4000 [ 766.977019][T16577] R13: dffffc0000000000 R14: fffffbfff20607e0 R15: ffffffff90303ee0 [ 766.979658][T16577] ? xfrm6_tunnel_net_exit+0x9e/0x160 [ 766.981316][T16577] ? __pfx_xfrm6_tunnel_net_exit+0x10/0x10 [ 766.983095][T16577] ops_undo_list+0x2ee/0xab0 [ 766.984525][T16577] ? __pfx_ops_undo_list+0x10/0x10 [ 766.986094][T16577] ? cleanup_net+0x347/0x8b0 [ 766.987513][T16577] ? idr_destroy+0x62/0x2e0 [ 766.988898][T16577] cleanup_net+0x41b/0x8b0 [ 766.990275][T16577] ? __pfx_cleanup_net+0x10/0x10 [ 766.991785][T16577] ? rcu_is_watching+0x12/0xc0 [ 766.993263][T16577] process_one_work+0x9cf/0x1b70 [ 766.994806][T16577] ? __pfx_process_one_work+0x10/0x10 [ 766.996494][T16577] ? assign_work+0x1a0/0x250 [ 766.997924][T16577] worker_thread+0x6c8/0xf10 [ 766.999358][T16577] ? __pfx_worker_thread+0x10/0x10 [ 767.000936][T16577] kthread+0x3c5/0x780 [ 767.002201][T16577] ? __pfx_kthread+0x10/0x10 [ 767.003795][T16577] ? rcu_is_watching+0x12/0xc0 [ 767.005373][T16577] ? __pfx_kthread+0x10/0x10 [ 767.006832][T16577] ret_from_fork+0x675/0x7d0 [ 767.008262][T16577] ? __pfx_kthread+0x10/0x10 [ 767.009716][T16577] ret_from_fork_asm+0x1a/0x30 [ 767.011199][T16577] [ 767.012775][T16577] Kernel Offset: disabled [ 767.014167][T16577] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:31:02 Registers: info registers vcpu 0 CPU#0 RAX=00000002000008fd RBX=ffff88801dada480 RCX=0000000000000830 RDX=0000000000000002 RSI=00000000000000fd RDI=0000000000000002 RBP=0000000000000010 RSP=ffffc9000439f588 R8 =0000000000000000 R9 =fffffbfff210693a R10=ffffffff908349d7 R11=0000000000000001 R12=1ffff92000873eb2 R13=0000000000000004 R14=0000000000000001 R15=ffffc9000439f5b0 RIP=ffffffff816a8ae8 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880977e1000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000566bc4c0 CR3=000000005cd4a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000000f0114 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000006000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffff88802b23a4c0 RCX=0000000000000100 RDX=0000000000000001 RSI=0000000000000002 RDI=ffff88802b23a4c2 RBP=dffffc0000000000 RSP=ffffc9000046f8f8 R8 =0000000000000001 R9 =ffff88802b33b414 R10=ffff88802b23a4c3 R11=0000000000000001 R12=0000000000007fb2 R13=0000000000000000 R14=ffff88802b33b400 R15=ffffed1005647498 RIP=ffffffff8b6641e2 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880978e1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080069018 CR3=000000005cd4a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000004dc00000000 0000000b00000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000129e3f3 RBX=0000000000000002 RCX=ffffffff8b6382a9 RDX=ffffed1005686656 RSI=ffffffff8db0013c RDI=ffffffff8bf1e3c0 RBP=ffffed1003b5b920 RSP=ffffc9000047fde8 R8 =0000000000000001 R9 =ffffed1005686655 R10=ffff88802b4332ab R11=0000000000000001 R12=0000000000000002 R13=ffff88801dadc900 R14=ffffffff908349d0 R15=0000000000000000 RIP=ffffffff8b636d5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880979e1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055eb9a724f40 CR3=000000004ff67000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000074 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff852e1f65 RDI=ffffffff9adf1ec0 RBP=ffffffff9adf1e80 RSP=ffffc90006d3f2d8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000074 R14=ffffffff9adf1e80 R15=ffffffff852e1f00 RIP=ffffffff852e1f8f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097ae1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f7648c4efeb CR3=0000000066b6f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000040000000 Opmask01=0000000000000004 Opmask02=000000000000001f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 75722f7261762f87 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000020000000001 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7648bccb20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 00007f7648a8242d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555fc13e0760 0000555fc13e0760 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555fc13ecfc0 0000555fc13de910 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524548544f0030 3d004c2a3a523a62 3a7374533a6c3a4f 6e3a6d5e000a0920 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524548544f0003 0e004c1909520951 09404753095f094f 5d095e5e000a0913 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f62696c2f006575 72743d6e776f645f 66690065736c6166 3d70755f66690031 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00733d6e6f682d5f 66690064636c6166 3d2f645f66630031 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000