last executing test programs: 3m50.234430434s ago: executing program 1 (id=1344): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6}]}, &(0x7f00000002c0)='syzkaller\x00', 0x4}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_int(r0, 0x11a, 0x5, &(0x7f0000000000)=0x3f9, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x0, 0xa}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x800003, 0x3, 0x1, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff43, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x5, 0xfffffffd, 0x19, 0x7, 0xc, 0x7, 0x4, 0x1, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x400004, 0x0, 0x8, 0x5, 0x48001, 0x5, 0x1, 0x1000, 0x9, 0x1, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7ffb, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x6ddd, 0xf, 0x6, 0x556, 0x1, 0x2e, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x7c, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x1, 0x8, 0x3, 0x200100, 0x3, 0x0, 0xfffffffe, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x1c0, 0xf80, 0x7, 0x116b, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x8, 0x81, 0xffffffff, 0x20000004, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x10, 0x3, 0x6, 0xf, 0xff, 0xf, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x9, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x5, 0x3ff, 0x2, 0x100, 0x8, 0xffffffff, 0x800, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x6ba4, 0x7, 0x3565, 0x2, 0x2, 0x4, 0x8, 0x1000, 0x0, 0x71f, 0x2, 0xc59, 0x106e8, 0x9, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270fff0000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 3m48.320664507s ago: executing program 1 (id=1349): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0xc, {0x1, 0x8010001, 0x4d0, 0x40d, 0x6, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r2, r3, 0x3d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x26, 0x5, 0xffffffff80010000, 0x0, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004380)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa0, 0x0, 0x7, {{0x1000000000000002, 0x4, 0x6, 0x5, 0xfffffff8, 0x8003, {0x1000000002, 0x1, 0x5, 0x40000003, 0xfffffffffffffff7, 0x5, 0xfffffffb, 0x8, 0xfd55, 0x8000, 0x5, r2, 0x0, 0x1, 0xfffffdff}}, {0x0, 0x50120b533aae0b5d}}}, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x64961, 0xb3836f6d7a15f2d) write$binfmt_misc(r4, 0x0, 0x0) (fail_nth: 1) 3m45.136335518s ago: executing program 1 (id=1357): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@ipv6_newrule={0x1c, 0x20, 0xc01, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) mq_open(&(0x7f0000000000)='\x00', 0x80, 0x93, &(0x7f00000000c0)={0x9cfe0ad2, 0x800, 0x800, 0x9}) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_COPY(r2, 0xc028aa03, 0x0) munmap(&(0x7f0000e29000/0x1000)=nil, 0x1000) mremap(&(0x7f00005a7000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00004fe000/0x4000)=nil) set_mempolicy_home_node(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x40480e0}, 0x40040c0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r5, 0x43f8f000) mq_notify(r5, &(0x7f0000000240)={0x0, 0x3e, 0x1}) r6 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) write$binfmt_aout(r7, &(0x7f0000000080)=ANY=[], 0xff70) ioctl$TCXONC(r7, 0x540a, 0x0) ioctl$TCXONC(r7, 0x540a, 0x2) ioctl$TCXONC(r7, 0x540a, 0x3) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)) sendfile64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080)=0x7f, 0x200) 3m44.975049926s ago: executing program 1 (id=1362): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc4, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x7a, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x8044) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0/../file0\x00', &(0x7f0000000140)='./file0\x00') sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_getrule={0x1c, 0x22, 0x4, 0x70bd2a, 0x25dfdbfe, {0x2, 0x14, 0x10, 0x6, 0x5, 0x0, 0x0, 0x2, 0x10}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 3m44.897960596s ago: executing program 1 (id=1363): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb08ffff000000000000000089907800000000ffffffff"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d00000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000007608000000c0000018000000000000000000000000000000950000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r4, &(0x7f0000001180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) rename(&(0x7f0000000580)='./file0\x00', 0x0) symlinkat(&(0x7f0000001040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') mount$nfs(&(0x7f0000000340)=')./.,\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x80000, &(0x7f0000000400)=ANY=[@ANYBLOB="2c65727370616e30002c2c2c47504c002c5c402c6673757569643d63636630616163002d640d63642d370132382d396364352d38003730313331302c66756e633d4d4f44554c455f434845434b2c646566636f6e746578743d757365725f752c66736d616769633d3078303030303030303030303030303030342c6f626a5f726f6c653d292c736d61636b66736861743d65727370616e30002c61707072616973655f747970653d696d617369672c657569643d", @ANYRESDEC=r5, @ANYBLOB="c075"]) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x8040) socket$inet_mptcp(0x2, 0x1, 0x106) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010001000000000013730000850000001100000018010000646c6c2500000000002020207b1af8ff00000000bfa1000000000000070176f29db30000f8ffffffb702000008000000b70300000000000085000000b00000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0xfffffffffffffeb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3m44.605222059s ago: executing program 1 (id=1369): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000380)=0x10, 0x1c) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x200440d1}, 0x800e885) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) shutdown(r1, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) 3m44.51618136s ago: executing program 32 (id=1369): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000380)=0x10, 0x1c) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x200440d1}, 0x800e885) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) shutdown(r1, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) 50.901339104s ago: executing program 4 (id=2366): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/ehci-pci/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='0000:00:1d.7', 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/drivers/ehci-pci/bind\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='0000:00:1d.7', 0xc) 50.373282794s ago: executing program 4 (id=2371): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000100000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, r2, 0x25, 0x0, @void}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r3, r4, 0x4, r4}, 0x5) (fail_nth: 1) 50.215492521s ago: executing program 4 (id=2373): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x3, 0x4, 0x8}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000001c0)=r2, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800450000300000000000019078ac1e0001ac1414aa18009078032c00004500000000000000008900000a010101ac1414aa"], 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r0, &(0x7f0000006e40)=[{{&(0x7f0000000380)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x7, 0xfff}) fcntl$setlease(r4, 0x400, 0x2) 49.42707644s ago: executing program 4 (id=2377): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$XFS_IOC_GETBMAPA(r4, 0xc020582c, &(0x7f0000000040)={0xffffffff, 0xfdb1, 0x6d3f, 0x7, 0x1}) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000100)) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = fanotify_init(0x10, 0x101000) fanotify_mark(r6, 0x80, 0x50000022, r5, 0x0) pwritev2(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x300, 0xfffff, 0x0, 0xa0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000340)={0x53, 0xfffffffffffffffd, 0xc, 0x40, @scatter={0x0, 0x0, &(0x7f0000000140)}, &(0x7f0000000180)="d4bd7a0837ebd3da78cb72e6", &(0x7f00000001c0)=""/253, 0x2, 0x23, 0x2, &(0x7f00000002c0)}) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, 0xffffffffffffffff, &(0x7f0000000000)) 48.60352475s ago: executing program 4 (id=2382): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) io_setup(0x7, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r0 = getpid() syz_pidfd_open(r0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000900)={{0x2, 0x0, 0xee00, 0x0, 0x0, 0x10a, 0x4}, 0x5, 0xffffffff, 0x100, 0xfffffffd, 0x0, r0, 0x6}) r1 = openat$vmci(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r1, 0x7ac, &(0x7f00000008c0)={&(0x7f0000000480)={{@local, 0x7fff}, {@any, 0x9}, 0x400, "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"}, 0x418, 0x10000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x1, @remote}, 0xa, 0x0, 0x3}}, 0x26) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000000)=0xa, 0x4) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000580), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r9, 0x40045304, &(0x7f0000000100)={{}, {0x0, 0x3}, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r9, 0xc02c5341, &(0x7f00000001c0)) sendmmsg$inet(r4, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)}}], 0x1a000, 0x8040) 48.094010822s ago: executing program 4 (id=2384): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}}, 0x0) setns(0xc9, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x5dd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) socketpair(0x1e, 0x1, 0x7, &(0x7f0000000000)) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r10 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r10, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r11 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r11, 0xc0045002, &(0x7f0000000040)=0x200) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) write$dsp(r11, 0x0, 0x0) 47.827259059s ago: executing program 33 (id=2384): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}}, 0x0) setns(0xc9, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x5dd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) socketpair(0x1e, 0x1, 0x7, &(0x7f0000000000)) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r10 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r10, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r11 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r11, 0xc0045002, &(0x7f0000000040)=0x200) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) write$dsp(r11, 0x0, 0x0) 20.056160601s ago: executing program 5 (id=2533): pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000037c0)=[{{&(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000035c0)=[{&(0x7f00000011c0)="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", 0x1000}, {&(0x7f00000021c0)="30b62b58a4f9e2291825d65618f93a13672899a499a400b8b30f4ddc8da0248399179e0a9aa523bdd5633febc6e0afe245c78ce5ad40c543b816a384db65d53e76ce12a974a4ad08174fbe1fc7f2a425fd97", 0x52}, {&(0x7f0000002240)="3e277f05abba039d553fdd80d04fe06c6e67f9186f64ed82568d212037b2ffb4e233c59c879ce2a2eddf866a5e5c1d30f36d5a6903028f30e7ff8969a979c44a4074ad4904d1260d9baee66d93973324d96e988789dcdf9d7f5abc3162b51e2a2fea45b8f2573addc465efe8cc00aa0c1587fcafe49d55ee368d2a1729ab68858dd5fa2457838d97", 0x88}, {&(0x7f0000002300)="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", 0xfa}, {&(0x7f0000002400)="9cdfe1efd6bae7082a48c55212df871b7023cd75a9ea43c4b60accae1e8e42499bfc0894cf630768faf1ad37b04d4f6976626093f17fc8b556cf464ddc6fc6f8f5f56eb7f0b8bbf3d6069727b7969b7e27c0e16e57260cb0853a77be5f243b7bd5f02d37d0e5f2179f02ccd4b0f82faea457fc03218999a3b65196f3b3947b219327f17122cb50c7359d7839a7", 0x8d}, {&(0x7f00000024c0)="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", 0x1000}, {&(0x7f00000034c0)="2bdca17e95d51bde9b1b133bdb96fa09f78ed1ca35dad130aa12cf90723c0dc4d911a552844a19e44689812ddf8fccf0d9b79fa35aaf50a72dde5423926c22c294cdb035d50ffc1fefea3dfb9e8cde7656943cabac214312193b0f4fb5bb4ecbc8ce8e4f43d6bae8567646523ec7a742b0c1c4d0838c087b36166066532907f6ea3d3253037683a94e9cdf916cf0ae4f6c1df07fdc54b5ee5c5545fb2e02594991c8e4ee3961549afd1001c451d307ad33e0", 0xb2}], 0x7, &(0x7f00000000c0)=[@cred={{0x18}}, @cred={{0x18}}], 0x30, 0x2000409c}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000440)=""/82, 0x52}, {&(0x7f00000001c0)=""/45, 0x52}, {&(0x7f0000000500)=""/107, 0x6b}, {&(0x7f0000000580)=""/27, 0x1b}, {&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000680)=""/184, 0xb8}, {&(0x7f0000000740)=""/179, 0xb3}], 0x7, &(0x7f0000000840)=""/159, 0x9f}, 0xfff}], 0x1, 0x2001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) close(0x3) listen(r3, 0x5b) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x2}}, 0x2e) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder1\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000003800)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x6, 0xa68d7c51df802ff5, 0xffbc, 0x6, 0x1d46, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r6, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11.053517232s ago: executing program 2 (id=2570): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x8, 0x8002}, 0x50) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x200000, 0x2) bind$l2tp6(r0, 0x0, 0x0) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, 0x0, 0x24000000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) prctl$PR_SET_TSC(0x1a, 0x3) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f0000000400)=[0xe758, 0xf8de], 0x2) unshare(0x6a040000) 9.756106727s ago: executing program 3 (id=2572): setns(0xc9, 0x0) r0 = socket(0x2a, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$xdp(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x3b70c0, 0x52) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SNDCTL_SYNTH_ID(r2, 0xc08c5114, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101401, 0x0) socket$kcm(0xa, 0x1, 0x106) unshare(0x26020480) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) r5 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r5, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000001c00000000000095000000000000cdcd4250cb514382885805004db83396197809ffb75605b0c10ce1ead808dd07576535e142b11cb6d31a81b38732c3c93618ef8c1a8e2719f38459e08906c6e3bcab49b689b6d5ebac164e9be74f34c9a60d4196c8a411d3d7fb42ad61aa27239aab"], &(0x7f0000000340)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) 8.455361595s ago: executing program 3 (id=2574): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x50, 0x8b}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4040084}, 0xc004) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0x8001, 0x5, 0x800405a, 0xc, 0x16, "c2a60dadf18d07f4c58200777dbcacf000"}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x1ff, 0x4, 0x8000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000004, 0x5, 0x41, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa1b, 0x8, 0x1, 0x0, 0x3, 0x2, 0xdb, 0x58], 0x10000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r5, 0x6, 0x24, &(0x7f0000000000)=0xaf, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a801400000000080c000000140001002001000000000000000000000000000114000200fc0200000000000000000000000000ff080018"], 0x4c}}, 0x40000) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_usbip_server_init(0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 6.951099713s ago: executing program 5 (id=2533): pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000037c0)=[{{&(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000035c0)=[{&(0x7f00000011c0)="49f5cfc53a525bdcfb224eda51538f93f87cd74684de40db9fb5bfea52ccee8c4883f949830247162ace492d9d7430bc02a568c8a80c025b6fcb168b583736c1e6beebf7b0a36d88e991c55a278c59931677dcdd170b28a734a5fa7a0bf49d85d88dfb84808fce47b11b02842d520d3fa8cdef33b3059786cec4b2f24534838632b361133071fdfe7b0164424682d7a9ebebf2d6a4b3b61cf9568b93ccef300b772df9cbf405589c3e8f994a3762b55beeeac5dfb6ee771b8358e8ec0b7f8a1fc8190b8870d4b09114d7caf6044c72f7d7dabbafe0396e9bee682eaf581af7539f8855ce6ffa1176144d84e2a4eb90076df96b700ce1b155c215f1e483d1886303903656bc2526d4c2ee94f6ceaf8d1be2084506f53447f4e3ad5804fd6863eada0d5505a9ad06045b9355b715a497ffe8e19cccc57384e1c220708dc8133a379b8fb1de390b366aed953ca2a7c2578bea9968d0822f2a6fc20ba2274f81573bd4de52acebec27a53bd8626d2171441b9646b4ff05f344eeff4970764bfd3ff52f4016cf5b0ec58d0164ecdc3c5bb04962d9251c8830e31fab6a2e41e439317944ff825ac6fdb127b82ae9b57d9be836f2d1d685a720ebe0376b8c368ef56a84f65c739ad80a077037cef9d29d75c672ea885c95348166e1cf541853582dabb7e12897a4435d0b907a378ba6c57eeafd43df82dd2d4d435db3ef3afb89381e1387613b4f3e56432d3c035a653d5aeca9c124b9ee279bb8dd3b6f092dc24ed240abbbe50b36a3d770e4ef7350ae9bc85974bcb23c2ee16f28eac44e8ac307b2ab13e089e6fa7053bfc4155bfe80cdb08c735decc90bff96a0270b61afffd9b5a081b95fa323de0c269211e6f37ade1550b7ab25d78a2cc8c65afbc3b5390ffe8c9f8f8f37024c096fbd48760dea7bb9429b9709bfdb5e6a345917f04414721c97074dd0d6c0f5b9ccb071c555ce3ecd48f020dd9a66efa5e6cdb2a5f4a91b21c0c4ee55561476679dfc3af0ba899c341351e68f279f7091d635e9c13e0720fbf9264c9b8c063180e1e333975fd530d796a2d3ff3c58fa7a05e605cb5795f689622a3daa76e285e981ed4d39725d3f940dfe4c40f13db672c68625f065e5c87ab5c2ccac2ac3d82dccb405650d7a3545aa1b676bc545a53fc5d9129fcc6aa6ee67e1ca8a2237405884756ea6f276530f20a47e5095c7abc616d5b6fadfd00931b31da9b3a9ee32d4588fbc01305e8df498a9c7c054d76bd2efd3ea15e35cdec9ef5e0db0ce859131235aafb2d859d10fe66e3b5c55aa862ecc902dd53f2125b355d14c7542ca12c958c996b997076bfe0631701e5305ea657cd7529814d62579a12643ccc8878e95e0be2f1fc666ee37b70678ee5b49596466e66cb03bb7c891635467b5eb3664fe923a21c6fd99b76a5ed24c6924bde9502b4c11757b9907a91b96252ec63a09223230cfba49f37d2c7c3300c25197ce6621ed7983c767c8c38b6971e719fc4527aa957ff88ddbab3a643d1f62e0ab29b9fc20cd59be3b25ec27d3b30cae235035b9fd64b8644a55a4324663a7b76f7a9d0c73b069302b94679681e0cd8fec0ad9031a2f1b373abcb2f2d7d798db44a70f0fc798eac47e31cea0538ed2f7f8afdcb6df473ac47e24383eab104adfb0f4b91be8a83a76df0c7c23c6f72257c6fe45f2e1ec2c560cd2b227b2be16814260b3f0632b46b971bc0c80c0901441311210f78dbe4613f3ec75314d4c1a57f54f55efdb81e458d6647bd64796aff0a853c821ae5d7a9bb7710a2dfa5d269149a09957aa2a65db70b64f72aba222291a76b5019c116643ba664f993b73c094b6dfefefe4d6c36465143df06b8956d6c8fe6b625bdd330c639bdb1572f898878a8e1b5c9456bdffaed7a461b1d9ab68122b0b9d30b72c2eee12bc8efbd2f064a99d561bbec8bb4d5ad4b7ce6ff1da8a3d58fc8a5aac22c770bfa165e3c2d10b455fd15f280a9500ffb47275bf84015cb37173c4152da564fac4dcea07be54179c3774b5c97e13a46b6d8c19093632811f08782e8a8f9bb0c9ef2c21a2168dea028d151aa8dbcbfc5f3d85d0d1666705b416b942ad655ca5476655b54781e5ecad0301e4e1a3a1a2f2bcdcd33efe1b9fe82673af9f8e593e2ae64ae912a4eb5a76d620584f839c9cc06bc6dc79709ff1a413f963ee64c26d476ebc81e3c9f5281380f28d5435263d69330776dc083c47234bc0ad1f049c29529ccb446859e4a02f2c6552cf0b19ebd5f5ff2f7d28e3cfeb8821557d5b5357b7183576ad1afe6852635658aea533c536972d52b42a982a6dcbcf87eb7911aecb8750ebcf31437159a37ae903dd74898f344b0bd6cadcce506c0967de209870ac3a19af952165ac856d6d94916eebe08ae6ecaf9d146d7768d2f1711981e35dfa0f9fd37db1eda1fcbd15ebdef3bfc6453086ae016fa67af5dc902f4ac41305b9122f5da76a41abacc42681da9729dad61506a8441978dd9b89bae12b1b671fc72afb87e488ddcb94a1425b58d904394aa60910e135fbb259bcc902447cd9a86e7392799b90f2e25157045d8e341d332a53ef7d11f70b263a2377804c9a49192ade6454c2f75f3196783b9c2e045d738ece7312db184a8df4f84e14af4aa6d05ddf23fa8ca4ba2d6f85e0cb80e336c40d068be019cf4318df0864f36a15e9ee2b853168c574bf4e0a5dbbb45dafde76c20977bb7426070b70c506d6c737ead8256a49bd036f52665c6bc99dbd9c1f4648519bca88408a77d7900a9e4cbd9dd9f34675e7818e781715bfeeb03ad4cf3d31b1de0ec5583b2afaf8476f9801ba2f85e7966971d37bebd9c63bb83adfc512b92b88efe1a8c6f51d20883cae80fc239fb3ff0e6798311514103e835f3fc0d28c544404bd160afdd40cd0cceaf389ce2876c8ac276e1ffe3f6ed671dd0f7839e6f44364df0295a6f80b9ab1c2ebd965997f0836fef7e4b82a3c085823ed3d3bd606b2a253dd9648580927da2a88428759d8b785b6c672c16314509e984be6673b23bc9d6a2c955e4069e8ce2f42507d33ca886eaa0ff75698d296b8289053522133fb0d7102bbe299cb0adab8fad831138e4ee01559c73738d617d6e1e022bfce249ac6e5e63e3def7dc146f811f4d75e7dc848e487a9dcda2ee9b9448082d371209829111ab8e6e2e446d9294c839bc4829cad3f08ca95ce75e24b4d0d8a4964d0f26d344da1cc58e32e1ad9d250724cd2db1d1146544b628bb419aa9a61860a8b639d22d51099e806825805429dbae22b27c1b5abb806bae9f8afc0aab9cffeae25ca1ccde914dacf9e2036f115324c1651ebce21ae416a1f8c7449ecc5b07aa0284c5077d47f42e51d34748b0d0565d18d962b30a92be99a6580b42fc18d2e63e998bab278cc7d2c16951a72f455dbce9c572d5d0ee7b644c677024d767ad122489a66b536317a1052e25371a97e318588be04d033525ad46739df156e67ff86a029f860e6bb2f86eac72088b17f9ff11e266b9f13aec2d049412a2fd601ddea5de11727a088e43f2153cf2d6eae59a2895e9ed068c3439e99a48808c345a43c3e11d446143a5bd44ba98237e5afb4ad8ef5dd86b4fe382180ecb7f91898c3e79c645e9bbe2cdc6d2900d7487455cc8072e42b9bec2558d6b6bc2dd480ce6cc03aec1af1d6b2ff015991b07ada3fb69518969d97b9c2db1688d800fb03ce5dd40533939416cb61f35b3bf5451064637aaf90e5828de98f81697c73355e9959aad64bad352e7d37ba674f743efdea03f60f1107dab0b83a549ef4a593acda491e327c59c20307f250f58862dcb210fad95846914a6e616d836875cf91ad8084e328db9c9b188c5c82af92c2219dc73fb60c57ef6b214ad08025821207f0eca35b8e895300fe5317ab9e79847aad09cc665807f10f7e385b7bf84ae3237f8fe255b0fa6059b3028e4e78519e6139d6d3f21c536b9b7e4c1172aa2c8aa5f7b4d44e7473dc1bc4a47cf96879fdabd077158b2f80eb0777995ac5276d805a1ce57565aa84fee481cf0a9fafe008b06f4451096e79f5e487a428e14da69e3ac43e10a8024de43f6312a5093062ab516d4fa039f21679e8e07956160c05d557cc1bf0c617d265f61b75ef12d96ebf10f040c5816c8cf7663be867306927f92e0dfc9929c12bdef0ef8a87d874d4e5bac5f8f09a09009d08046e267fc53f74288c2db02226a9be65cab0468bb7dd01dc961352127a540c45c60227c10264c183afcb2b294fc70968379e76e6153ff5075dcbbb40b2bbe662e8b497de22a1c6faf57e2b1400bebd2741f949ad5d4cbb8da1b0156a13b5cb94ac0dd7f68858670cc8385d741b15b35157add3fb3acbb53b2496a5f275df13efca8774c53b92a9d3adae61736d47a88b905cd87b19f69aee087588ffc3485567a7c46da34338e8cbf614818f1a42c00a1fe279738bcfde84ea79eb9e9ddfd4983e9b3426f5e75bc4ea31363d9d50b23715bce68016e44e49ac989b62ab426d521b744ba5ce064340df5c00006e867ecd193aeac1c219a2d46dc391b1bf5ec398b2caa010b175d0e88923cdf6cd9d95b3d3666181babb85858df0a860b20c2b4b4e5931b0082b125f76f0bd295e28893ac3febc8e1176a3bf6eb3c23b3a56a2ba2072f215dbbbd3a1e1a6eaedbc0c7eea69da058d66857e790aef58845b91092b88af7cb2232ddd690d25943e45af50e321088f86884a7a04d408ef6acc0b81d49b272df97e4dd3a627c8f2337bc8e01243e233133ebf0d56dd7a14ba7a5e5627c4ebd7d1c5fd191a7eeaca38f923a208693613e6f5e29921a2ca079de385dd3e57305524a01574d538bec760127afb993cba959ca0f3932c3bffbc66be895729d16f820ded973e6a2e22fd46e7aa26ee222614fb86d7b7b38531656e79636b0572411c3767615466127e6c94ffa39e27ab58d4d1725cc63e382a5cbf0d4786752c2a7d6e878f1251a07db7bf32180247c03d6b0a1ec73b039f3c7129b5558ec4232a2f25b50ba4b1bb07dc836719469144a84a67eac0759899d241f4ee5a158358905acacddbad0ba7bb127e2d19f6d3dbcf3a338f240a747c60370f9252f417e548c991eb4ace29d000313e32d674b973120d433873543071e208a5ef622bc8c6dbc055b405ba03d4088e1479388597200d99351d818bbbcb9455deedc4b84e15402c9b3e5def6259003f22b396d735ec2a2c8ff05550996bdeb13d3f266ac620b180d02f49c740da9d732aad6714e886a9eb9c04888647e0b621c18f3c12ceb390ca57336ea2aec806c080b13a6e8be8ecb4a70746e53ee0fe1c0a74d33cdcc3df7ecab8ce20b1706f67fa0fbf7f9b3213aa9352d6d9bfea3be063029f6a1ebc0be33a1162081b60a03cdfb03423a7ff0debf13e57df12754db89ce22bb1f95be5b8fcddbba9ffbb66c90f91830de9eaba12148652603afb4f1bc48a5964452d0c7f425ea2838064398995371b8cb716a2d7da088e093cdc933c6b94d490952b6627e9fe0b1436d65bd0c5b26e4c94a3cc6927da337fc4f32c8ceaa682630e469cbfbc62faeb99e05fd29b8d3ea8d956a5c7b5e6b862c46a496a0c2e346b735c1a24aadcc3fb78615e122d051f38ada853c4be903c9fa4baef58ee88038ed8d45e7ab1991ea30431abef1be431457b04c676c03acd904579cfa4a3068f79c5bb3d1054bc7b1b1efda75e2f84706c7997587b1fbd4cfa5cb02dd5268367e9500bb521982b904007e2e881c70d298e8d44d0066911c9168d4cc60fb6431b3a95e81b45535293bef190e1e1b73f81", 0x1000}, {&(0x7f00000021c0)="30b62b58a4f9e2291825d65618f93a13672899a499a400b8b30f4ddc8da0248399179e0a9aa523bdd5633febc6e0afe245c78ce5ad40c543b816a384db65d53e76ce12a974a4ad08174fbe1fc7f2a425fd97", 0x52}, {&(0x7f0000002240)="3e277f05abba039d553fdd80d04fe06c6e67f9186f64ed82568d212037b2ffb4e233c59c879ce2a2eddf866a5e5c1d30f36d5a6903028f30e7ff8969a979c44a4074ad4904d1260d9baee66d93973324d96e988789dcdf9d7f5abc3162b51e2a2fea45b8f2573addc465efe8cc00aa0c1587fcafe49d55ee368d2a1729ab68858dd5fa2457838d97", 0x88}, {&(0x7f0000002300)="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", 0xfa}, {&(0x7f0000002400)="9cdfe1efd6bae7082a48c55212df871b7023cd75a9ea43c4b60accae1e8e42499bfc0894cf630768faf1ad37b04d4f6976626093f17fc8b556cf464ddc6fc6f8f5f56eb7f0b8bbf3d6069727b7969b7e27c0e16e57260cb0853a77be5f243b7bd5f02d37d0e5f2179f02ccd4b0f82faea457fc03218999a3b65196f3b3947b219327f17122cb50c7359d7839a7", 0x8d}, {&(0x7f00000024c0)="67c44487d1b7b62d647bed85e8a6c3b48c651c63fbcdc99788aba805c1996d61291cb1f785e1ed82ce3477dda58bf7d648768f14c0fdd20ddf6fe118ea4e7c6280eb88622a930ceb6a8e384cf33748aac8f9621bf50a620186b6d23dd00f9a711598f63736e5fd50b3b436ba4da7c37985d78ade70b0dab713e0e0e8106b1ba58c25498a689a04277cd791c92338ed23ca5690610cdd0e1c324e91568bfe2bc2a4582d6b4aee8d37533faa9f8eeb2a14cf664a2d949b8cde3c537e2beb325dfd85200d9762583e49c9d02aeeaa442debee21b7329478d7e4d1443e21cf634432bdf2ff5571a9996af632101294a0aad5d026f4bf50bbc26b42a5ff82493f10d936cff8ece01b45a631862e8b6e3d54ae68b5823f0241350ebba0130497d6ee6e10bcccef8dfddf7f9d4ca55d1835a8db41e6ebe8fd6aa6ae37e030cbd674c2cc98026d02c08d50466df34108fa2d7b2c3fdf229b7fb3f7cf25e12a0283079e2a2d1457254ae76f50d4283980e35189d4de4590f27778eeee0f7ab63ed6be1afb93cb85de3bd9e24180dc0b0f9d8147e1305819da0e15de135b1e11c57478c2090515fcba579ffcccd601bab36da686a298a4db13b3b96e7cd286f06ec01a917c344f7adcd65841115421625b16a9bff9dd6610e3514a6068918e233dcd32609e0fbb96611dd73c8dee9ef25daf11ace02fc587cfb87812935ca36ac15fe40a203731b9e63e1970193b89f3dbf1103706cfa487e8a49c0f1bacc8aee52109bb7b6f4924da660ef2ba49335e7329d251c35e3ef39dd57f147e826921555648e34c323eea0d72970e5cffced4e460529655f489748fcd115485e3e52de986f469e3f18366f45235e05b4b126713a846bb2b90497853f3137ef7fb7c2dfa1a51b2b2f18f3d16d365fabd2286575cc9ce95627222e045db0de6c2b062f4f55e1ae4c7ccb8ba436d1b0049a2936b04fcbd228b036830f2c4baa08282a83e8ac307189c3a8fdb12f9b00a223108413e1684941653bf2deb8db00f55f1350a73c6324e4c1f26f1797e5672dd4022584775ba552af5a01da33e2cf46fdc7ff47d5cdbd350385c30d1bd46b065d30643f8ac8af9d987825e4d82cbf7ad6cbab5df0e4f0dbd27dd3ce940e2e5d8ecd7b659294ff5a99d277cb9523df2c3ff88542dd76d050fb65e9365476eea0ab1927cb5f6001db47227fd3ac834035002fe501e23712bcc24ec7555ab12b7860c11719b26dba3d19974c3683587449cfb5e17fee996b5cce85d390550d2921c44a0da4630c22cf499dc783b817913329d52522ed18b9b2d65df25a1d32b5354b6f26bef22da4724a6ef543af665eb252acc96ee0c9be74fa05a8d7ad9330a74aabc2922db4cdcf6e2cb81538be89e199ce74618fc308027e2d89d69c56ff19031fc45a8f50e137fa53800008e5c6acdfc51e8ccbf38c45a3ff25a74433af8ca7096336224e37d6cf51470e48b2cc282ecc47504133d062d28015e34a5c4dc4bcecf15cb88ce48ea2337c08e34a14b76670f14848b89ed0465338899908fcbe062f2e6033f834e34d53d2d4cdd590247ae1b53dc9a002055e52c0d3b53394d3ed9f6da412e5b77fb71abd51af1bb2e644fbaf692a5e257121bbe4e297627428ecf59d240d13b5a140adcfb0e856451158665f5308e130f5f3283e9ebd38fd612007137b28067e18fb7d96ff2b228b0363ae3dbf2e38cbe38a80ce3a66fd6c0363892df3e34c7c7789918ad808e582b05f1d8b644738effce8620e255b886a5c19ff44310e69292f24ac21e7976ac32a2f326f2a3c2d9d5e0385f7b6e1b8fa60d616756e48ae1c3c7c270e41f2ee3bd7b73af20f66a3d80b8fcd1276a95954ef38a2d028b88a7545aed56ecece4b519cd81d942dbfdd71a681115b13fe5a77f8b99bf568a3fe1b4e2a483d7c6c584ffa85f567042df13d48691060feb938dbfd64df213ff6793daa7d743798f064ae6baf88fd6e8903c189fd8ae9516fdd7931a3c051320e29a8cf4399777a06769eb41162387a9aed64a10729e41427d706f02a7021bec30acc8828630beb220d6dfd911508f5b23ac34057c2d2e1b056aaebd48ab7e02cd865d57ac6b75192db472bb954f91c9d5ea93afd6d21dfd5320746fa5cb1ee707a08298aaff5b63cecbb84314f222149c82c0f8d26f64f1a4ca00e8945e15157e09fd7ccf8c9a71d307b5d0d9f75562807130632150eabd53395868379cd1fc42463362837d24b25334aeebdbd145ffbb08cf37328bbfb15cd6454acac68137ea1156bfa012153f9c4f747bdc818c15c3033cf3d5fff71a01bd4f703f93b994255d7fca9b02ea9a17550fab9ac2f6273d6ec102a936781f53e396b5890d5a5eb6d9263cd7993dc9b8494efa29508a9fa9cf9ff128c130073033494e33fc27c72dfc0b204da0eb1f9c7fb71e1dfadfb6ed5002aeae936b11eb6e14b9cfeb92beb69ba7a5b0514720d634cffd773e3e24e425997915fa95ec406f424115689062042ffe9e8bd2e0a362a435fad59bfbadfa16ffb51c94ea2ef2a5deb8b44ba4a37b7d1277d14262161a55013acb6f50f9a13c41a689b2320a48933eed63b9368a2947eac97ccfd178167e3e4a40eee0448a4215b98365d3dc39f9f54edf1fe22c924efb19fa5104365e8e783870bd6a4311bff18e1f1c8031cf425cd6e2336616f787cafe63b91e26febe39c21f608923d1a5157b9bc26d802f66499ad89d4d7fcf92c8af5996235dd46cb1178ecce95836d141385188d8227137d4e7ba80dbc9805db24474ff88f58c2fdba9a5a33f06da02839d265d8b7eac5c55041031fa464ac7f8daf22823725cd1280d48a5d423facf3b8054456845f76a4e0b038a5e20bf7019d2108d9bfd552cb159659d113e394f40703ccd155e13d1a6ddfdf1872b59c39986e5da460b05d27eef0844a6c74fb0828ea5005d6881c91249e64a711e80ff94ee11fecb60bebb4fd33df4820c74bdf6c19c99cc25998aeee4155fd5e7e40ddabfb9dec8a2a8f13c094002337eae5246ce895e43a9005e760c9786d2e84d0f3cc01aba8d5438841236cd3895e78828eaeb4f4e7772605726705ef05ccc6a050899f9bf75c0b4de51256c1e9c08889ec9fb3a18487f331ab77cde1004d3698c91e24a66c87471e6b3b16946969eccbc5187436c1a8ab3db9f1b3c5e38646359cc1e9f11f7a2d4bc07f0c6075838b40bcaa1106a487656f387b21ba3048bfc210b121a910f208e4664785c8e2a08f05e6242944194cb309e7ae4568c643f3a456f8d1027ecb1ddcaefc4d8dda7757c5c71481a51ec3279198c4ddb9a025c63f75633e0ed20349c50c78a88256f56431978a9e9a7ea0cd001fd653bcd56873c725b82937d3d2ec9cf85c480100cd0fee4c2f754a40dbb4787a9f155e4a5affcc0ca1810eb755dff0299427ce87f73258fb5c5734dc4d6e8767276ef04c3bf2e73f267bb21c78df19ea1675f3e34e70e7fbf8bfecc9caeb9aa2c31444e4a2e5784b7c44c3f4ea60dac522839485416935a1bb1fecb9797b7cebc95e4d05c8d2596bbb54161931948ec9dbf7bc6820a0a79d567e10c9127081e57e08d148727cb7dbb233834c81de3070b157f05fb3a5c3e595c9bf2b38057632e1ef93757aa66a3a2d7421c3621fb0c481f8895933e41bee296eb9ba6990e33cf00f5d223f13c753663703dc44904a127d4f3afbdfd2b9e77aa794932189eeb5bca14e7462ec75deb883684a43f39815a62024d0b90d67ce3984fa8db500070ac83b5083c6693976ba8d29baf128dc577b235fbacf45f7f4f6f186e54f626114c808cee06ff72b97dc7c43fad8291384ab06a7210377c25348e0187466118df83b6c6342619f4e93f786ac76f459ff5b46c3378ccf8819d5241228fe84f0483b8eaae0b31a125d01b356b8c1fd01cca048ace7ab7e4b610820a04b8d3f3706f5cfcafd792ec0f1212cf2757cd46055a43c3fe2a1d0fc69478f53c80b3fc379a84e92684d865c7ee20a3c3636725670a1498658fd62367b82be5445ca6eafd9b27847ec0faf7980ddd82a7e23e7a56162496074e0bd8fd061747ceb9b31a3d8b544278f83aba1e37b1913c8969c15e0364b7583ff0368d2a9f7fcacb50d5deb466b1ee668c46d5460af3c03c5ab91bf03484605c7db9c305df85fabfcd282c1913524d38580fecb5b2305d39a2f046ed9bd4a5fc444a18eb62666eae4c7d848e9d867ec1f94caad7a7c70c3eb60f319ea403c7d30524feb7e1931c7882b6cc49e60951d828c8b94bb6622c97ede7519ec635d22d7f5630db958f832f6208468f40f48e9139e657a8773d2ccc46c49211d6bc3be4bea16cce9e119cc40586f1318b8711495974937e58c4358a26c0a88ac2bd327a9a6cbfe29f1e6e5bfb1ef423a0f968c11dfcba226d6c47d875efd69a5aa24b00ca04706e75be8e390a4698adf6b1aa8e76d656b82a4f7b96d6972248a1d347733297f977944c84f00ac1248c225defb0e956d92f01e19c00ed4be226d3ee4682a5cd05b7dcf58f66d568eceaf02a57844eb92ef96850c2be09d1ca53ee07020b3583ae63602b798f5140dca2b8b0bceb2a0ca7047499eb13ee85fedef09fd38a51d0c98d6ff770e78eb67fdd22590c033a98bc695fb32fcb8a107b43fc1c04fecd884809bbced1808e13f99d1e5223d82df20faea259ce30b2f3409040aa669fc9b50b8c3779c5722d5fa415c89df061feb38aac4608d80b0aa57ca59ebf00de41da12e5bf7b541dda2b44617470c9631bc03cdb180baa8e2b18e8f8ae6f7320a6d40d3c2d72251bcce65f3396097addedda16833d9d155c7f0fa0db71f5dcc79e3c6bceae66cf2e920e31a632c75720d9fa85191a57b0ec1571cb392487edc6d3510f0515463e43ebeae70aab52af40793edbe23983d8cde02b7e1080f878635d4bc04540370a76d9465d1e9666ff3dc653bb5ff59cb5e351b043405a11efac22b73647843e653ce8cc39648fdf065fd12716d3802f33caa0aaa7b46283b689bcfd9e9bee5972fcf3b7298f9649555c0db93efa3919077371d5019572c34e672346dd721411081aad3681dd17be6b60ec738db35443b77b815ffd49198f70f586fc6a6b4062805bc1d6ef63aef09828a7fb26c848eb1341052bc90a96469e49ba4c9bd26a9b3b0d9671a828ed3c00ad07fe7c857a593e6be05ef735efd2ee397f59a8b594da621be270412c63823e353b32bbc493e3f0f5ee3a98f3646541f28d99dd253889b2ab0b0a946c328d490bc28e747d715d1eb333c18541adf6527a44e9ac51a1c8bce21379d975c22a86ef3ab304ea95bbcde00dfc8ffef2ddda32d4bfcb4fab7a8cbfa4753d659e49c1d903fbe73828213f5388cbf30d53d661ac2dd6dff2c9109609338d9497deba080543ebf607ecb1187bcebd0b179698558be0bc1d9e26b3a859b34d77b9452eaf7974cb4a520c0024f79fac15727dea48bd30b600fdabc42b4632013c20a32593aa8e4265c91f6f2e0b6b3d1aeb7fb3ee65b0ef04e296196ca155ffc9e85db91fcb3bc9fa3e2c38cced00d702e8d353dcc963138bb4fe40cc6cca8574bfd2e033ecec0a06efbd6ce56cc05e16e0eb6461800f4d177a3fe701ca21339c0d642dc95db2ca74f531e318ddc4f40242dba6aef0dfd0cba2ef9679ea9992f51c4b27d440545b6deaefb7243cf2b4554a6a9ef2252ca582b25164e960ee3fa3c2c54afeb32c5ad8e6a65b67a23070ae61ec8b10952b1200fc7e66652a3e6fd59f5f0216dbea09b91976a2dd7634b29d158f571e66510331363ef6", 0x1000}, {&(0x7f00000034c0)="2bdca17e95d51bde9b1b133bdb96fa09f78ed1ca35dad130aa12cf90723c0dc4d911a552844a19e44689812ddf8fccf0d9b79fa35aaf50a72dde5423926c22c294cdb035d50ffc1fefea3dfb9e8cde7656943cabac214312193b0f4fb5bb4ecbc8ce8e4f43d6bae8567646523ec7a742b0c1c4d0838c087b36166066532907f6ea3d3253037683a94e9cdf916cf0ae4f6c1df07fdc54b5ee5c5545fb2e02594991c8e4ee3961549afd1001c451d307ad33e0", 0xb2}], 0x7, &(0x7f00000000c0)=[@cred={{0x18}}, @cred={{0x18}}], 0x30, 0x2000409c}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000440)=""/82, 0x52}, {&(0x7f00000001c0)=""/45, 0x52}, {&(0x7f0000000500)=""/107, 0x6b}, {&(0x7f0000000580)=""/27, 0x1b}, {&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000680)=""/184, 0xb8}, {&(0x7f0000000740)=""/179, 0xb3}], 0x7, &(0x7f0000000840)=""/159, 0x9f}, 0xfff}], 0x1, 0x2001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) close(0x3) listen(r3, 0x5b) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x2}}, 0x2e) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder1\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000003800)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x6, 0xa68d7c51df802ff5, 0xffbc, 0x6, 0x1d46, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r6, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.768754014s ago: executing program 3 (id=2578): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000280)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x1}], 0x10, 0x7000000}, 0xf401}], 0x1, 0x0) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x10, 0x110, 0x1}], 0x10, 0x7000000}, 0xf401}], 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 6.70803749s ago: executing program 3 (id=2579): setns(0xc9, 0x0) r0 = socket(0x2a, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$xdp(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x3b70c0, 0x52) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SNDCTL_SYNTH_ID(r2, 0xc08c5114, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101401, 0x0) socket$kcm(0xa, 0x1, 0x106) unshare(0x26020480) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) r5 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r5, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000001c00000000000095000000000000cdcd4250cb514382885805004db83396197809ffb75605b0c10ce1ead808dd07576535e142b11cb6d31a81b38732c3c93618ef8c1a8e2719f38459e08906c6e3bcab49b689b6d5ebac164e9be74f34c9a60d4196c8a411d3d7fb42ad61aa27239aab"], &(0x7f0000000340)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) 4.181163905s ago: executing program 5 (id=2581): setns(0xc9, 0x0) r0 = socket(0x2a, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$xdp(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x3b70c0, 0x52) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SNDCTL_SYNTH_ID(r2, 0xc08c5114, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0xa, 0x1, 0x106) unshare(0x26020480) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) r5 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r5, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000001c00000000000095000000000000cdcd4250cb514382885805004db83396197809ffb75605b0c10ce1ead808dd07576535e142b11cb6d31a81b38732c3c93618ef8c1a8e2719f38459e08906c6e3bcab49b689b6d5ebac164e9be74f34c9a60d4196c8a411d3d7fb42ad61aa27239aab"], &(0x7f0000000340)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) 4.172487929s ago: executing program 3 (id=2582): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[], 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x7) openat(0xffffffffffffffff, &(0x7f00000000c0)='./my_configfs\x00', 0x1, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0xffffffffffffffff, 0x5, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1d, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000b700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x12, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x66dbf000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x4) mkdir(&(0x7f0000000240)='./bus\x00', 0x74) mount$overlay(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f0000000040)={0x9, 0x7, 0x1, 0x300, 0x0, 0x10000000, 0xfffffffffffffffd, 0xb}, 0x0, &(0x7f0000000100)={0x9, 0x3, 0x2, 0x2000000000000, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) 4.12447911s ago: executing program 0 (id=2583): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) socket$inet_udp(0x2, 0x2, 0x0) r1 = getpgid(0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$peekuser(0x3, r2, 0x110) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000000)={0x8, [0x6, 0x7fffffff, 0xfffffffb], [{0x0, 0xffffffff, 0x0, 0x1}, {0xb, 0x35}, {0xfff, 0x100000c}, {0xffffffff}, {0x0, 0x3}, {0x3, 0x200}, {0x0, 0xfffffffd}, {0xfffffff8, 0x2010000}, {0x3, 0x82}, {0x1010000, 0x6}, {0xec41, 0xffffffff}, {0x3, 0x8}], 0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100), 0x0) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc00c64b5, &(0x7f00000003c0)={&(0x7f0000000380)}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r6, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002740)=[{0x0}, {&(0x7f0000000100)}, {0x0}, {&(0x7f0000000080)="09ebb34c6e6b9bcb890e8fc488c52697590da70578e206547182de9cd141c0012e4926791de3eea4aa103ad545198bf93c390bbdb6f1faf1c0924adb7ebc658f62f9f47ed5f8d851dea2d62af8d6aa9af055c1975558eef4", 0x58}, {&(0x7f0000001580)="5cf0b67aa16bf1dcc2f1ae5aa14e42cb6db77c270b99b1c640ab27453b4a089d9ad367f0f0dd7ab38ddbaeb047ef74d0a1f9aa080b894ea2f067824e2331f63e32eca6dd1196239a33e3ff58a8c40a9c120cca1666ab88492ec25f2ee144dc6b0d2e21651eea22bd79d45e406676df1e1ae9f937ff483c77a3c16a52c736c022b2829500081c0d6159780f114f713eb8364ba6d5b6c9f64f43326bc2219741e92de26f4342bcc6d691ff5f36c990af86750adc5b945e27ee8d6b65cd12841c9b110bad0f2c9a2d2e73410f0cb58d43c433459b820ed4314723626946aa6697e045c1edce001ffe549ae2a44b4377da7d4f3d2857e45c3f25ea44797577256b587f7420a30745a6e373c058200d42edc02b42d028e4cab8d6fe09d677ccd453784f3deb8724be00842dc857e2efe2a752a32b3dcd252d6ccb6ede45cfab2830c0b5947a4b9c9f68705d9e669d8f1e6d60a32812825252a46beadd87ecc1344c9924cffb26c2effcf25244b1f7b717b0e4b3f30b8c136b2385aeb52364d199e97c455117c390d3d3f0524bb4159b15a1803be4d289ee4524a36d70a47f56b1dcb865c40452f9851860601d929a4237c3ff9522ce238fb12761a11b0eeffa5156d5f8f8e8782dd61e291cd691dfebf673c04622ab3d0f41386eaa02f05a9d4f0b83c796ba1a3115ce0132030cd11f4cc797a20e5388ca45936c27282f7c28ae8312654c9f34b28f1c59894449dcc1c993929cff02280f7688100ac4ccba6e534cd44e6cefa6cf2c64fa66f8e3d59b0b851fbbdbbe81d57c44a5eee6a7d96ca176ad33240a703cff52de4fd70ea2d4330f4efc17c55aa688ed5daa1646e50ffc07c95059a2b3ee442f665c9838293b0400b951a1f706bf73b63d9d7a8aed42c0b54bb81be4fc698e1eb0605d656a5446698b76ef5a224cde75c457d49ad7479153d36ce1c2e32011e058866cc94d44604eefc42fdb6bfd82cf4722bf4c73df1ea2d02eb787ec0eb26ea13532a77465da7070bff12fe8c1694ec2eb87285915ab182543db23b45a1ca291e7b9133fccdc0742ce6e6b71e3286412339dc52d696136f47912519545911c246c875ff80dd734f81c41a73493da7da9c4ee125c60dd65a49d490e2fc33ca5fc511ad18148b1177f19eaeffe7a0174875dd03e8e3b32ebcae0a8aabea0d4d1de879332ea50471fc6eb5b7cefcc7b243c22c84d85c73f8c8fc31cbbcd9f4c6b601e02375428fdbd320c2182877da71a2d70330f05fd8e7c50f73c291bc4bff8e306f55c79cfea125876f6e9092ad5598d8fa62d119385061f1ff13bf7c2b44fd363be7229f6b4f2f6fb7f641535c47cca350e598b8290fa73bfc0559e5bfa74228bd4b7048b8f0356c43a439b5731381d575997780e4f57b5c2d6b5bfbb955aa10e9f9cc46eb62b530a156511fa7e0c001f24396af1a9946d07d3c065f7fb88c430c63807652c60cb174735e1466df3bd407a765a4a63ad2cf004bad50ab2049a7f56cdfd53d39eabc749871e70fbab4ffe42756ed05335df15d40420134902a68b69a15dda03c98ed9333174043441f807b70f5a98d35984128a902e7ee8d5ae806ca40e4f5ad2288ec645ca43275c7625eabda5a774d10c9efcc852b4e2a181255308ab1082ad382bb5bdff980865e7caadcec81b4697457d816625097cb4a9659d480145a3d40237e54be17faf12fae9a9a48226fd7e43509e325359642bd8626e37958f83494b15b6c615121238129c15c1fac440dabc71a836ac2976e1987abdc3ecbe78dacda51cf9019e3159b276a877e355c18a9835cdf98522dad7467dcbd97dca4098599ce33ebee7c742ab847d39172608fd8f829e344393b50f29f0e7efdc35bad46c1e20ed7c3f5874f021a8afe3a96cf9e186eafee13b138d92091282414ad896034d8146e849785b364450970abe11f743a12ac977062059ad7f67b01d32cdcc75c6babe2309fc929a9d92c805ecb4ff70719df50807e824ae90f66b0557bff4ebf78dfa43532869ff5164e144defc4d8ee1d6745ed369e7ed7afc981f0f3a0c82a1f97032a12eb8d672b2231040d132971ff2b2ea2eeb0f30fc21fdcd80e32f8a64d325b0fa74919c0b727335230cd340883ed28bd50af63e07f98f91e5d69851b25ab260828303713fa7ce5671c598fabee013bbb6ed04bc70e8d16d9748b885179ae22e4a9ea40d55d6565b0dc5b35719f28199b95ce9ce7f3c81c5a62a5ec1c9c63a8c74cbd26682875ffd2b8c709643d4dfa81199f9828fbe6c1e99d5c003f7ebfbf860fb238f1e427c74eadf459ed60ee73de4d13c8cfc7c58fc371fdd0e8bd70b10e4f9de9928f5c1fa81dffabc7a818fc8d50d9611f06b901bd88a5fc6b9f8bc6503b23822f105653b598c9f0abffbae0d8c56cff568f2c2bc47a88b26c2124a78921462efa4895730f369bf1f0d3227ef1b76dd394317c1726a13f9c15d65bcf6128b61351abac6a54151efcd872d25d9929cf5b7ef141e84b8d145fff6453d6a943af1c0ebd6c2aad77c1cadd21880bcdc362c690e88a914f946c8cfe00ac1936ac8e7ee66156bf76a158b09244aee3c937677067b8d6ce6de5711c80ee00893acf16e86e44037450581e6d06aff72630356644d2345741e76065a15b23cd57ed96a4b702b07a1c2df236ef5d1f0711ed23742a05bf7c047b48338e28115cdce04277cc10936937f0434ae60adbf1a9fc6f422ce8017d1f7b5554c19dc67fdce214afdb8b9a04e3987d16ce5b0b8d9f779914441357347af13f08fec8b05e4f786e88d1346fffd81cd3feb2c518c8a5199ebc2e15754a789febfde86dacb5530ebad117acc0b1cad2669836b5e536dc3df3739f22b85bf1d64353ce65b81707902fc9b471bd159fc80065f26d56aa310d47c276bbd83f5d2e5e4ffbe0e424b21eb940d9e1b3198eae52cdde8c193f4f07e7af9e40f64e2ebdb9aa0f0dc49fae9b024128379eec28ff2b2989907e16bdd9ea22f767f73d21c1c9ed2992b1c5ff5e606c7a3f5f29ce6e30e0118f5c6f88c6bdd27bc58fc74390a97a98590b31fbcbd76449777b253ce0c68da51d402ae862beef5fbfd8afb3aaa62f57826e74c8f6b985aa456e015fd8325eb8fedbc0f0e681bcd8d7626bee70e48d563d1acb03af39d206384b1e8328e588e66fb7243c8c9c2748a8f9efb34a0ab4e76035d9c6e4a7784ead7194f2868f97c580769942b3e81bf02e55c27f43885303d641ab9717618592bf790c119a9033ffce20a8ffcd0d1f1043add8da1a40b2d223920e33625366ccbf515b4e83ba5030df036316798c8cd50b5dca303fddfed3b4d7e89077be0af139ed509243dca68271d02238c85a6dc019897727b6137b18fdf444cff1790631b4c411daa9939b4a4b1abd93b2b1370d62c9e07962cacdde123b75a625553cc8dd2c4f4df4f96a1cdd07fefb232347dbf24e39831251d30e931dc965b789975d93c35d001bb90335f77984b4fe6cfe67eeacbfe8b03dd3b9eccc33ae979b38bf89417e89e0b7c3da65443cb8371353e7b5a44f99db5c73a0f7bc84147ef45847dc0231e00684f0bfb361efc62636c460501a910047db41258c00538b6763b3a79a23395afc6a46be1f53d123202bb598f9e3f40d50939f0cb01c70215e55de53703375e5be090387eaec3717d22e718c31f9d9eb2a81a2bddd846671d14aa42995cd18aca6c804b4b8eba42693eb4d2db995ef26e5a7ab1c4a98d7c268821edf7d2f193f381c15e87fa8355207c3efb209e4214038e99f7c3e7fdcdc4d038b18b08c488edc20a949f7417a7d8dd4e37dbf1b4afcf79ef867d17ca68a0d744b8f6aee7738be4beb737ca9dba34fda810f44c0f51ec9f8e295e7cd78e3256ae73db7186b1e29a04f63065c44fa6c7a16fe4f50851f336b402ce5a73ff88f9b5cdb52ead12060590180f112a4f6c36e5418207bc5dc8635ec831e383ae67fbbe119de517a6932a69440015d014a1d143c8b09f611aa4f79b083c8ea67806cf221ede408771cf2d979feb3e448fcbd859e875d6ff6cff062e073bdb4b32bcf5", 0xb35}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3fffffffffffe97, 0x2404c845) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8410) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x27}, 0x74) 3.054864576s ago: executing program 5 (id=2584): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@deltaction={0x5c, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000040)={0xfffffff8, 0x0, '\x00', {0x0, @bt={0x6, 0x9f, 0x0, 0x2, 0x7, 0x8, 0x6, 0x11, 0x1, 0x5, 0x6, 0x983, 0x0, 0x10, 0x1c, 0x21, {0x5, 0x3}, 0x8, 0x5}}}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000012c0)={0x0, 0x49, "10ef13d68041a7cdbb1807e34650f7387cf6e256d5caaa8c90110be3ec9e02e32baf542b339ac7e86f6d406ca71169586bb308c4f8483c8d7fb6b4d492a5e694f6123c36a9a4df2b02"}) connect$inet6(r3, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x40c0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_SET_DEF(r6, 0x4b72, &(0x7f00000009c0)={0x2, 0xffffffff, 0x15, 0x6, 0xaf, 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg1\x00'}) sendmsg$WG_CMD_SET_DEVICE(r5, 0x0, 0x24040811) ioctl$FIONCLEX(r1, 0x5450) r7 = socket(0x2d, 0x80002, 0x0) sendto$inet6(r7, &(0x7f00000001c0)="78c45c15d7e8e8cc5e7408ca236c1325eeafe98d2553ecab089c20184328623d442cdfb3b4da74a23f8c2fc7", 0x2c, 0x20000841, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x1f}, 0x0) connect$bt_sco(r7, &(0x7f0000000100)={0x1f, @none}, 0x8) 2.570018474s ago: executing program 0 (id=2585): syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) sendmmsg(0xffffffffffffffff, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000140)=""/16, 0x214000, 0x800}, 0x1c) syz_genetlink_get_family_id$nfc(&(0x7f0000000a80), 0xffffffffffffffff) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000000)=0x200008, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000010010000004"], 0x48) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x38) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00'}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000040), &(0x7f0000000480)='%pi6 \x00'}, 0x20) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) socket$pppoe(0x18, 0x1, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x800) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x381200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) 2.493998041s ago: executing program 3 (id=2586): syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0xc114) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xac, &(0x7f0000000140)=""/172, 0x41000, 0x2b, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_UQji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x9) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@updpolicy={0xc0, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x8000, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3}, [@policy_type={0xa, 0x10, {0x3ebbdb2d5c673e1a}}]}, 0xc0}}, 0x8044) fsetxattr$security_capability(r4, &(0x7f0000000000), &(0x7f0000000040)=@v3={0x3000000, [{0x967, 0xfffffff7}, {0x10, 0x5}]}, 0x18, 0x1) fchown(r4, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={'rmd256-generic\x00'}}) socket$inet_tcp(0x2, 0x1, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x1f, 0x7ffdd000, 0x8000}], 0x320000) kexec_load(0x2, 0x0, 0x0, 0x80000) setuid(0xee01) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r6, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002840)=ANY=[@ANYBLOB="100000a6fa8ec1000000794c584c25bc"], 0x10}], 0x1, 0x0, 0x0, 0x4000851}, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='iso9660\x00', 0x1008081, 0x0) 2.310646846s ago: executing program 0 (id=2587): r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x7, 0x96603) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f00000006c0)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x7300, 0x4000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x4}, 0x28) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$vcs(0xffffff9c, &(0x7f0000000180), 0x50040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffd9df2502000000ff000008"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r5 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x41, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r6, &(0x7f0000000140), 0x2, 0x0) mkdirat$cgroup(r6, &(0x7f00000000c0)='syz1\x00', 0x1ff) socket$inet_mptcp(0x2, 0x1, 0x106) write$nbd(r5, &(0x7f0000000400)=ANY=[], 0x34) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001880)={r5, &(0x7f0000000880)}, 0x1c) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) openat$nci(0xffffff9c, 0x0, 0x2, 0x0) 1.231579938s ago: executing program 0 (id=2588): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x41814) 1.199990644s ago: executing program 5 (id=2589): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='measure func=FILE_CHECK', 0x17) close(r0) 1.092476627s ago: executing program 0 (id=2590): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='measure func=FILE_CHECK', 0x17) close(r0) (fail_nth: 1) 945.431083ms ago: executing program 0 (id=2591): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="000022f0414f670b000eaaaaaaaaaabb86dd6100070000002f00fe8000000000000000000000000000bb24010000000000000000000000000000142e1bc4f9406fabe1eb"], 0x3a) write(r0, &(0x7f0000000100)='measure func=FILE_CHECK', 0x17) close(r0) 896.596353ms ago: executing program 2 (id=2592): r0 = socket$inet_smc(0x2b, 0x1, 0x0) close(r0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000000c0)={@multicast1, @multicast2}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000189000/0x2000)=nil, 0x2000, 0x2000000) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex(&(0x7f000000cffc), 0x4, 0x0, &(0x7f0000000240)={0x77359400}, &(0x7f0000048000)=0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) r5 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r5, &(0x7f0000000500)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7080000, @private2={0xfc, 0x2, '\x00', 0xfe}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2000000029000000020000006b210acfeda507d6c477d874f77f552917000000"], 0x20}}], 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x10, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$bsg(0xffffff9c, &(0x7f0000000040)='/dev/bsg/1:0:0:0\x00', 0x40800, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 622.121238ms ago: executing program 2 (id=2593): r0 = fsopen(&(0x7f0000000280)='nilfs2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 589.285957ms ago: executing program 2 (id=2594): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$video(0x0, 0xfffffffd, 0x10bd00) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x48}}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[], [], 0x2f}) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x754}}, 0xc000) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000a00)={'syz0\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5338, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x2, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x400001ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x0, 0x8, 0x1009, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x400, 0x5], [0x391, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x104, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x8000, 0x4, 0x101, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x7, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xb, 0x47, 0x2, 0x3, 0x7, 0x7, 0x100, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x6, 0xa, 0xffffffff, 0x40004, 0x3, 0x6, 0x100fffe, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x40, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3a, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0xf, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0x0, 0x135, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 557.967397ms ago: executing program 2 (id=2595): mkdir(&(0x7f0000000100)='my_configfs\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000300)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='my_configfs/usb_gadget/g1/functions/mass_storage.usb0/lun.0/file\x00', 0x1, 0x0) write(r0, &(0x7f0000000f00)='file0', 0x5) 473.887511ms ago: executing program 2 (id=2596): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r0, 0x540e, 0xac) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x80000000, 0x20000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01072bbd70000000000005000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'bridge_slave_1\x00', 0x10}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r3) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000080)={0x1, 0x0, 0x6, &(0x7f0000000000)={0xfc, "e922fe53e14fcad1ebe6ff00000000008100"}}) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000000)={0x4, &(0x7f00000001c0)=[{0xe, 0x590}, {0xffff, 0x4}, {0x8, 0x3}, {0xfffe, 0x4}]}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000240)={0xa, 0x4e24, 0x5, @local, 0x4}, 0x1c) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000200)=ANY=[@ANYBLOB="0000001caaaaaaaaaa290180c200000e81000000080045000020000040000911fe93339078e000000200000000000017c1000c907821240001"], 0x36) r10 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r10, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r10, 0x7a9, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000000)) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f00000000c0), 0x0) 0s ago: executing program 5 (id=2597): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x14) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000940)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0x2, 0x6}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBMODE(r5, 0x4b45, 0x0) write$binfmt_misc(r4, &(0x7f0000000180)="cf", 0x1) sendfile(r3, r4, &(0x7f0000000000), 0xfffb) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r7) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400ecff", @ANYRES16=r8, @ANYBLOB="0100000000000400000003740006"], 0x14}, 0x1, 0xffffffff00000003}, 0x800) fcntl$addseals(r4, 0x409, 0x8) r9 = eventfd2(0xc, 0x800) io_submit(r2, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x6, r4, 0x0, 0x0, 0x6, 0x0, 0x1, r9}]) r10 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000180)='source\x00', &(0x7f00000001c0)='//127.0.0.1/share\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000380)='port\x00', &(0x7f00000003c0)='12345\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 14][T13517] FAULT_INJECTION: forcing a failure. [ 491.528314][T13517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 491.532822][T13517] CPU: 3 UID: 0 PID: 13517 Comm: syz.4.2165 Tainted: G L syzkaller #0 PREEMPT(full) [ 491.532841][T13517] Tainted: [L]=SOFTLOCKUP [ 491.532845][T13517] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 491.532852][T13517] Call Trace: [ 491.532857][T13517] [ 491.532862][T13517] dump_stack_lvl+0x100/0x190 [ 491.532881][T13517] should_fail_ex.cold+0x5/0xa [ 491.532895][T13517] _copy_from_user+0x2e/0xd0 [ 491.532915][T13517] get_compat_msghdr+0xb3/0x480 [ 491.532935][T13517] ? __pfx_get_compat_msghdr+0x10/0x10 [ 491.532958][T13517] ___sys_sendmsg+0x1b6/0x1e0 [ 491.532973][T13517] ? __pfx____sys_sendmsg+0x10/0x10 [ 491.532992][T13517] ? find_held_lock+0x2b/0x80 [ 491.533016][T13517] __sys_sendmsg+0x160/0x210 [ 491.533032][T13517] ? __pfx___sys_sendmsg+0x10/0x10 [ 491.533052][T13517] ? __pfx_ksys_write+0x10/0x10 [ 491.533067][T13517] __do_fast_syscall_32+0xe7/0x970 [ 491.533084][T13517] ? lockdep_hardirqs_on+0x78/0x100 [ 491.533101][T13517] do_fast_syscall_32+0x32/0x70 [ 491.533117][T13517] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 491.533133][T13517] RIP: 0023:0xf708efec [ 491.533148][T13517] Code: Unable to access opcode bytes at 0xf708efc2. [ 491.533154][T13517] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 491.533166][T13517] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000080 [ 491.533173][T13517] RDX: 0000000024004014 RSI: 0000000000000000 RDI: 0000000000000000 [ 491.533180][T13517] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 491.533187][T13517] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 491.533194][T13517] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 491.533208][T13517] [ 491.536454][ T6775] hid_parser_main: 206 callbacks suppressed [ 491.536487][ T6775] hid-generic 0004:0007:0000.0005: unknown main item tag 0x0 [ 491.585169][ T8676] usb 8-1: new high-speed USB device number 84 using dummy_hcd [ 491.587404][ T6775] hid-generic 0004:0007:0000.0005: unknown main item tag 0x0 [ 491.615297][ T6775] hid-generic 0004:0007:0000.0005: unknown main item tag 0x0 [ 491.617617][ T6775] hid-generic 0004:0007:0000.0005: unknown main item tag 0x0 [ 491.619763][ T6775] hid-generic 0004:0007:0000.0005: unknown main item tag 0x0 [ 491.620558][T13518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.621996][ T6775] hid-generic 0004:0007:0000.0005: unknown main item tag 0x0 [ 491.622013][ T6775] hid-generic 0004:0007:0000.0005: unknown main item tag 0x0 [ 491.622025][ T6775] hid-generic 0004:0007:0000.0005: unknown main item tag 0x0 [ 491.622038][ T6775] hid-generic 0004:0007:0000.0005: unknown main item tag 0x0 [ 491.622050][ T6775] hid-generic 0004:0007:0000.0005: unknown main item tag 0x0 [ 491.636316][T13518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.640468][ T6775] hid-generic 0004:0007:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 491.662176][T13521] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1109: comm fido_id: iget: checksum invalid [ 491.733058][T13524] netdevsim netdevsim4: Direct firmware load for . [ 491.733058][T13524] failed with error -2 [ 491.736774][T13524] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 491.736774][T13524] [ 491.745621][ T8676] usb 8-1: Using ep0 maxpacket: 32 [ 491.748899][ T8676] usb 8-1: unable to get BOS descriptor or descriptor too short [ 491.752495][ T8676] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 491.755522][ T8676] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 491.758193][ T8676] usb 8-1: config 14 has no interface number 0 [ 491.760174][ T8676] usb 8-1: config 14 has no interface number 1 [ 491.763537][ T8676] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 491.768574][ T8676] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 491.772569][ T8676] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 491.776396][ T8676] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 491.780198][ T8676] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 491.784413][ T8676] usb 8-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 491.788531][ T8676] usb 8-1: config 14 interface 57 has no altsetting 0 [ 491.790696][ T8676] usb 8-1: config 14 interface 228 has no altsetting 0 [ 491.794567][ T8676] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 491.797475][ T8676] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.800038][ T8676] usb 8-1: Product: syz [ 491.801384][ T8676] usb 8-1: Manufacturer: syz [ 491.802855][ T8676] usb 8-1: SerialNumber: syz [ 492.123786][ T64] Bluetooth: hci4: command 0x0c1a tx timeout [ 492.126655][ T5827] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 492.129080][ T5827] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 493.155082][T13542] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 493.287014][T13552] netlink: 'syz.4.2179': attribute type 1 has an invalid length. [ 493.291457][T13553] netlink: 'syz.4.2179': attribute type 1 has an invalid length. [ 493.830321][T13566] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2184'. [ 493.944072][T13571] netdevsim netdevsim4: Direct firmware load for . [ 493.944072][T13571] failed with error -2 [ 493.948398][T13571] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 493.948398][T13571] [ 494.020286][T13576] FAULT_INJECTION: forcing a failure. [ 494.020286][T13576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 494.025489][T13576] CPU: 3 UID: 0 PID: 13576 Comm: syz.2.2188 Tainted: G L syzkaller #0 PREEMPT(full) [ 494.025508][T13576] Tainted: [L]=SOFTLOCKUP [ 494.025513][T13576] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 494.025520][T13576] Call Trace: [ 494.025524][T13576] [ 494.025529][T13576] dump_stack_lvl+0x100/0x190 [ 494.025548][T13576] should_fail_ex.cold+0x5/0xa [ 494.025562][T13576] _copy_from_user+0x2e/0xd0 [ 494.025587][T13576] get_compat_msghdr+0xb3/0x480 [ 494.025607][T13576] ? __pfx_get_compat_msghdr+0x10/0x10 [ 494.025631][T13576] ___sys_sendmsg+0x1b6/0x1e0 [ 494.025645][T13576] ? __pfx____sys_sendmsg+0x10/0x10 [ 494.025665][T13576] ? find_held_lock+0x2b/0x80 [ 494.025689][T13576] __sys_sendmsg+0x160/0x210 [ 494.025706][T13576] ? __pfx___sys_sendmsg+0x10/0x10 [ 494.025727][T13576] ? __pfx_ksys_write+0x10/0x10 [ 494.025742][T13576] __do_fast_syscall_32+0xe7/0x970 [ 494.025759][T13576] ? lockdep_hardirqs_on+0x78/0x100 [ 494.025775][T13576] do_fast_syscall_32+0x32/0x70 [ 494.025792][T13576] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 494.025807][T13576] RIP: 0023:0xf6fcefec [ 494.025827][T13576] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 494.025833][T13576] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 494.025846][T13576] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000480 [ 494.025853][T13576] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 494.025861][T13576] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 494.025868][T13576] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 494.025874][T13576] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 494.025889][T13576] [ 494.419327][ T5856] usb 8-1: USB disconnect, device number 84 [ 494.541623][T13587] netlink: 'syz.3.2192': attribute type 1 has an invalid length. [ 496.166751][T13592] FAULT_INJECTION: forcing a failure. [ 496.166751][T13592] name failslab, interval 1, probability 0, space 0, times 0 [ 496.175175][T13592] CPU: 0 UID: 0 PID: 13592 Comm: syz.0.2194 Tainted: G L syzkaller #0 PREEMPT(full) [ 496.175194][T13592] Tainted: [L]=SOFTLOCKUP [ 496.175199][T13592] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 496.175206][T13592] Call Trace: [ 496.175211][T13592] [ 496.175216][T13592] dump_stack_lvl+0x100/0x190 [ 496.175235][T13592] should_fail_ex.cold+0x5/0xa [ 496.175250][T13592] should_failslab+0xc2/0x120 [ 496.175267][T13592] __kmalloc_cache_noprof+0x91/0x6c0 [ 496.175280][T13592] ? configfs_write_iter+0x388/0x4e0 [ 496.175308][T13592] configfs_write_iter+0x388/0x4e0 [ 496.175322][T13592] vfs_write+0x6ac/0x1050 [ 496.175334][T13592] ? __pfx_configfs_write_iter+0x10/0x10 [ 496.175346][T13592] ? __pfx_vfs_write+0x10/0x10 [ 496.175356][T13592] ? find_held_lock+0x2b/0x80 [ 496.175383][T13592] ksys_write+0x12a/0x250 [ 496.175394][T13592] ? __pfx_ksys_write+0x10/0x10 [ 496.175404][T13592] ? ksys_write+0x1ac/0x250 [ 496.175414][T13592] ? __pfx_ksys_write+0x10/0x10 [ 496.175427][T13592] __do_fast_syscall_32+0xe7/0x970 [ 496.175445][T13592] ? lockdep_hardirqs_on+0x78/0x100 [ 496.175461][T13592] do_fast_syscall_32+0x32/0x70 [ 496.175477][T13592] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 496.175492][T13592] RIP: 0023:0xf7f34fec [ 496.175509][T13592] Code: Unable to access opcode bytes at 0xf7f34fc2. [ 496.175515][T13592] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 496.175527][T13592] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000200 [ 496.175535][T13592] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000000 [ 496.175542][T13592] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 496.175552][T13592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 496.175559][T13592] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 496.175574][T13592] [ 496.873319][T13606] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2200'. [ 496.886891][T13608] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2201'. [ 496.886913][T13608] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 496.965792][T13613] Bluetooth: MGMT ver 1.23 [ 497.062626][T13618] siw: device registration error -23 [ 498.702114][T13640] FAULT_INJECTION: forcing a failure. [ 498.702114][T13640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 498.707155][T13640] CPU: 2 UID: 0 PID: 13640 Comm: syz.2.2210 Tainted: G L syzkaller #0 PREEMPT(full) [ 498.707174][T13640] Tainted: [L]=SOFTLOCKUP [ 498.707178][T13640] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 498.707186][T13640] Call Trace: [ 498.707190][T13640] [ 498.707195][T13640] dump_stack_lvl+0x100/0x190 [ 498.707214][T13640] should_fail_ex.cold+0x5/0xa [ 498.707228][T13640] _copy_from_user+0x2e/0xd0 [ 498.707247][T13640] get_compat_msghdr+0xb3/0x480 [ 498.707266][T13640] ? __pfx_get_compat_msghdr+0x10/0x10 [ 498.707289][T13640] ___sys_sendmsg+0x1b6/0x1e0 [ 498.707310][T13640] ? __pfx____sys_sendmsg+0x10/0x10 [ 498.707335][T13640] ? find_held_lock+0x2b/0x80 [ 498.707372][T13640] __sys_sendmsg+0x160/0x210 [ 498.707396][T13640] ? __pfx___sys_sendmsg+0x10/0x10 [ 498.707417][T13640] ? __pfx_ksys_write+0x10/0x10 [ 498.707439][T13640] __do_fast_syscall_32+0xe7/0x970 [ 498.707462][T13640] ? lockdep_hardirqs_on+0x78/0x100 [ 498.707485][T13640] do_fast_syscall_32+0x32/0x70 [ 498.707508][T13640] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 498.707525][T13640] RIP: 0023:0xf6fcefec [ 498.707540][T13640] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 498.707546][T13640] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 498.707557][T13640] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000880 [ 498.707564][T13640] RDX: 0000000000048040 RSI: 0000000000000000 RDI: 0000000000000000 [ 498.707571][T13640] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 498.707577][T13640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 498.707584][T13640] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 498.707598][T13640] [ 498.804091][T13645] FAULT_INJECTION: forcing a failure. [ 498.804091][T13645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 498.809616][T13645] CPU: 3 UID: 0 PID: 13645 Comm: syz.3.2212 Tainted: G L syzkaller #0 PREEMPT(full) [ 498.809642][T13645] Tainted: [L]=SOFTLOCKUP [ 498.809648][T13645] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 498.809658][T13645] Call Trace: [ 498.809664][T13645] [ 498.809671][T13645] dump_stack_lvl+0x100/0x190 [ 498.809697][T13645] should_fail_ex.cold+0x5/0xa [ 498.809733][T13645] _copy_from_user+0x2e/0xd0 [ 498.809757][T13645] __snd_timer_user_ioctl.isra.0+0xb77/0x2750 [ 498.809776][T13645] ? __pfx___snd_timer_user_ioctl.isra.0+0x10/0x10 [ 498.809791][T13645] ? lock_acquire+0x1b9/0x370 [ 498.809815][T13645] ? __mutex_lock+0x26d/0x1bd0 [ 498.809832][T13645] ? snd_timer_user_ioctl_compat+0xaf/0x430 [ 498.809846][T13645] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 498.809863][T13645] ? get_pid_task+0x106/0x250 [ 498.809879][T13645] ? __pfx___mutex_lock+0x10/0x10 [ 498.809904][T13645] snd_timer_user_ioctl_compat+0x1f4/0x430 [ 498.809918][T13645] ? find_held_lock+0x2b/0x80 [ 498.809933][T13645] ? __pfx_snd_timer_user_ioctl_compat+0x10/0x10 [ 498.809947][T13645] ? __fget_files+0x215/0x3d0 [ 498.809961][T13645] ? __fget_files+0x21f/0x3d0 [ 498.809974][T13645] ? __pfx_snd_timer_user_ioctl_compat+0x10/0x10 [ 498.809989][T13645] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 498.810009][T13645] __do_fast_syscall_32+0xe7/0x970 [ 498.810025][T13645] ? lockdep_hardirqs_on+0x78/0x100 [ 498.810041][T13645] do_fast_syscall_32+0x32/0x70 [ 498.810057][T13645] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 498.810072][T13645] RIP: 0023:0xf7fc6fec [ 498.810088][T13645] Code: Unable to access opcode bytes at 0xf7fc6fc2. [ 498.810093][T13645] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 498.810105][T13645] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040345410 [ 498.810113][T13645] RDX: 0000000080000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 498.810119][T13645] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 498.810126][T13645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 498.810133][T13645] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 498.810147][T13645] [ 498.914504][T13650] raw_sendmsg: syz.4.2207 forgot to set AF_INET. Fix it! [ 498.932461][ T8676] libceph: connect (1)[c::]:6789 error -97 [ 498.937975][ T8676] libceph: mon0 (1)[c::]:6789 connect error [ 498.972447][T13650] ceph: No mds server is up or the cluster is laggy [ 499.403875][T13667] siw: device registration error -23 [ 500.697220][ T1488] IPVS: starting estimator thread 0... [ 500.804349][T13682] IPVS: using max 43 ests per chain, 103200 per kthread [ 500.865841][T13686] FAULT_INJECTION: forcing a failure. [ 500.865841][T13686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 500.874799][T13686] CPU: 0 UID: 0 PID: 13686 Comm: syz.0.2221 Tainted: G L syzkaller #0 PREEMPT(full) [ 500.874820][T13686] Tainted: [L]=SOFTLOCKUP [ 500.874824][T13686] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 500.874832][T13686] Call Trace: [ 500.874836][T13686] [ 500.874841][T13686] dump_stack_lvl+0x100/0x190 [ 500.874861][T13686] should_fail_ex.cold+0x5/0xa [ 500.874875][T13686] _copy_from_iter+0x1f4/0x1690 [ 500.874896][T13686] ? __lock_acquire+0x49f/0x1a40 [ 500.874916][T13686] ? __pfx__copy_from_iter+0x10/0x10 [ 500.874933][T13686] ? __lock_acquire+0x49f/0x1a40 [ 500.874956][T13686] copy_page_from_iter+0x238/0x300 [ 500.874976][T13686] tun_build_skb.constprop.0+0x2ea/0x18f0 [ 500.874996][T13686] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 500.875009][T13686] ? unwind_get_return_address+0x59/0xa0 [ 500.875028][T13686] ? arch_stack_walk+0xa6/0xf0 [ 500.875047][T13686] ? __lock_acquire+0x49f/0x1a40 [ 500.875072][T13686] tun_get_user+0x16d6/0x3c20 [ 500.875091][T13686] ? __pfx_tun_get_user+0x10/0x10 [ 500.875106][T13686] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 500.875123][T13686] ? find_held_lock+0x2b/0x80 [ 500.875136][T13686] ? tun_get+0x191/0x370 [ 500.875148][T13686] ? tun_get+0x191/0x370 [ 500.875163][T13686] tun_chr_write_iter+0xdc/0x200 [ 500.875178][T13686] vfs_write+0x6ac/0x1050 [ 500.875190][T13686] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 500.875205][T13686] ? __pfx_vfs_write+0x10/0x10 [ 500.875215][T13686] ? find_held_lock+0x2b/0x80 [ 500.875237][T13686] ksys_write+0x12a/0x250 [ 500.875247][T13686] ? __pfx_ksys_write+0x10/0x10 [ 500.875261][T13686] do_int80_emulation+0x14b/0x720 [ 500.875281][T13686] asm_int80_emulation+0x1a/0x20 [ 500.875293][T13686] RIP: 0023:0xf71373eb [ 500.875303][T13686] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 500.875314][T13686] RSP: 002b:00000000f53f644c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 500.875327][T13686] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000140 [ 500.875334][T13686] RDX: 0000000000000036 RSI: 0000000000000000 RDI: 0000000000000000 [ 500.875341][T13686] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 500.875347][T13686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 500.875354][T13686] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 500.875368][T13686] [ 501.405912][T13688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.455821][T13688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 501.677657][T13693] uhci_hcd 0000:00:1d.0: remove, state 4 [ 501.686001][T13693] usb usb2: USB disconnect, device number 1 [ 502.114301][T13688] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 502.169883][T13688] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 502.264743][T13688] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 502.491786][T13693] uhci_hcd 0000:00:1d.0: USB bus 2 deregistered [ 502.677585][T13695] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 502.719611][T13695] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 2 [ 502.727768][T13695] uhci_hcd 0000:00:1d.0: detected 2 ports [ 502.732867][T13695] uhci_hcd 0000:00:1d.0: irq 16, io port 0x0000c0e0 [ 502.769918][T13695] usb usb2: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02 [ 502.772879][T13695] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 502.776567][T13695] usb usb2: Product: UHCI Host Controller [ 502.778539][T13695] usb usb2: Manufacturer: Linux syzkaller uhci_hcd [ 502.780821][T13695] usb usb2: SerialNumber: 0000:00:1d.0 [ 503.543680][ T42] audit: type=1326 audit(1785723682.931:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13712 comm="syz.4.2228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 503.552242][ T42] audit: type=1326 audit(1785723682.941:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13712 comm="syz.4.2228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 503.577246][ T42] audit: type=1326 audit(1785723682.961:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13712 comm="syz.4.2228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 503.587096][ T42] audit: type=1326 audit(1785723682.981:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13712 comm="syz.4.2228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 503.596981][ T42] audit: type=1326 audit(1785723682.991:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13712 comm="syz.4.2228" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf708efec code=0x7ffc0000 [ 503.613040][ T42] audit: type=1326 audit(1785723682.991:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13712 comm="syz.4.2228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 503.621704][ T42] audit: type=1326 audit(1785723683.001:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13712 comm="syz.4.2228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 503.629625][ T42] audit: type=1326 audit(1785723683.001:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13712 comm="syz.4.2228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 503.637906][ T42] audit: type=1326 audit(1785723683.001:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13712 comm="syz.4.2228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 503.647576][ T42] audit: type=1326 audit(1785723683.001:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13712 comm="syz.4.2228" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf708efec code=0x7ffc0000 [ 503.814289][T13715] FAULT_INJECTION: forcing a failure. [ 503.814289][T13715] name failslab, interval 1, probability 0, space 0, times 0 [ 503.819227][T13715] CPU: 3 UID: 0 PID: 13715 Comm: syz.0.2229 Tainted: G L syzkaller #0 PREEMPT(full) [ 503.819261][T13715] Tainted: [L]=SOFTLOCKUP [ 503.819266][T13715] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 503.819273][T13715] Call Trace: [ 503.819278][T13715] [ 503.819284][T13715] dump_stack_lvl+0x100/0x190 [ 503.819302][T13715] should_fail_ex.cold+0x5/0xa [ 503.819317][T13715] should_failslab+0xc2/0x120 [ 503.819334][T13715] __kvmalloc_node_noprof+0x116/0x970 [ 503.819352][T13715] ? seq_read_iter+0x819/0x1270 [ 503.819372][T13715] seq_read_iter+0x819/0x1270 [ 503.819396][T13715] proc_reg_read_iter+0x11b/0x310 [ 503.819408][T13715] ? __pfx_proc_reg_read_iter+0x10/0x10 [ 503.819420][T13715] vfs_read+0x82e/0xb40 [ 503.819435][T13715] ? __pfx_vfs_read+0x10/0x10 [ 503.819444][T13715] ? find_held_lock+0x2b/0x80 [ 503.819468][T13715] ksys_read+0x12a/0x250 [ 503.819478][T13715] ? __pfx_ksys_read+0x10/0x10 [ 503.819488][T13715] ? ksys_write+0x1ac/0x250 [ 503.819498][T13715] ? __pfx_ksys_write+0x10/0x10 [ 503.819512][T13715] __do_fast_syscall_32+0xe7/0x970 [ 503.819528][T13715] ? lockdep_hardirqs_on+0x78/0x100 [ 503.819544][T13715] do_fast_syscall_32+0x32/0x70 [ 503.819560][T13715] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 503.819576][T13715] RIP: 0023:0xf7f34fec [ 503.819592][T13715] Code: Unable to access opcode bytes at 0xf7f34fc2. [ 503.819597][T13715] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 503.819609][T13715] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001140 [ 503.819616][T13715] RDX: 0000000000001000 RSI: 0000000000000000 RDI: 0000000000000000 [ 503.819623][T13715] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 503.819630][T13715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 503.819636][T13715] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 503.819657][T13715] [ 503.977979][T13723] cgroup: release_agent respecified [ 504.018893][T13723] random: crng reseeded on system resumption [ 504.034435][T13723] input: syz0 as /devices/virtual/input/input29 [ 504.034966][T13726] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2232'. [ 504.061582][T13726] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 504.063734][T13726] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 504.072003][T13726] vhci_hcd vhci_hcd.0: Device attached [ 504.130132][T13726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2232'. [ 504.146393][T13726] No such timeout policy "syz1" [ 504.149639][T13726] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 504.153925][T13728] vhci_hcd: connection closed [ 504.154119][ T5611] vhci_hcd vhci_hcd.2: stop threads [ 504.158544][ T5611] vhci_hcd vhci_hcd.2: release socket [ 504.160327][ T5611] vhci_hcd vhci_hcd.2: disconnect device [ 504.252553][T13733] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2233'. [ 505.428878][T13746] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2238'. [ 505.454740][T13747] netlink: 'syz.4.2237': attribute type 4 has an invalid length. [ 505.636849][T13750] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 505.758591][T13754] FAULT_INJECTION: forcing a failure. [ 505.758591][T13754] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 505.769995][T13754] CPU: 3 UID: 0 PID: 13754 Comm: syz.2.2240 Tainted: G L syzkaller #0 PREEMPT(full) [ 505.770016][T13754] Tainted: [L]=SOFTLOCKUP [ 505.770020][T13754] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 505.770028][T13754] Call Trace: [ 505.770034][T13754] [ 505.770040][T13754] dump_stack_lvl+0x100/0x190 [ 505.770060][T13754] should_fail_ex.cold+0x5/0xa [ 505.770075][T13754] _copy_from_user+0x2e/0xd0 [ 505.770112][T13754] kvm_arch_vcpu_ioctl+0x2e9c/0x57a0 [ 505.770136][T13754] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 505.770159][T13754] ? __lock_acquire+0x49f/0x1a40 [ 505.770180][T13754] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 505.770201][T13754] ? lock_acquire+0x1b9/0x370 [ 505.770222][T13754] ? trace_contention_end+0x126/0x160 [ 505.770234][T13754] ? __mutex_lock+0x26d/0x1bd0 [ 505.770251][T13754] ? kvm_vcpu_ioctl+0x322/0x1700 [ 505.770264][T13754] ? _kstrtoull+0x13c/0x1f0 [ 505.770277][T13754] ? __pfx___mutex_lock+0x10/0x10 [ 505.770297][T13754] ? __lock_acquire+0x49f/0x1a40 [ 505.770318][T13754] ? kvm_vcpu_ioctl+0x8a0/0x1700 [ 505.770328][T13754] kvm_vcpu_ioctl+0x8a0/0x1700 [ 505.770341][T13754] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 505.770353][T13754] ? tomoyo_path_number_perm+0x188/0x580 [ 505.770371][T13754] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 505.770386][T13754] ? get_pid_task+0x106/0x250 [ 505.770405][T13754] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 505.770423][T13754] ? do_vfs_ioctl+0x226/0x13e0 [ 505.770441][T13754] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 505.770463][T13754] kvm_vcpu_compat_ioctl+0x20f/0x3c0 [ 505.770476][T13754] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 505.770488][T13754] ? __fget_files+0x21f/0x3d0 [ 505.770502][T13754] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 505.770514][T13754] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 505.770533][T13754] __do_fast_syscall_32+0xe7/0x970 [ 505.770549][T13754] ? lockdep_hardirqs_on+0x78/0x100 [ 505.770565][T13754] do_fast_syscall_32+0x32/0x70 [ 505.770582][T13754] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 505.770597][T13754] RIP: 0023:0xf6fcefec [ 505.770614][T13754] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 505.770619][T13754] RSP: 002b:00000000f539c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 505.770631][T13754] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c048aeca [ 505.770638][T13754] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 505.770645][T13754] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 505.770651][T13754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 505.770658][T13754] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 505.770672][T13754] [ 507.379374][T13762] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2242'. [ 507.388588][T13762] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2242'. [ 507.454799][T13765] FAULT_INJECTION: forcing a failure. [ 507.454799][T13765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 507.459247][T13765] CPU: 3 UID: 0 PID: 13765 Comm: syz.4.2244 Tainted: G L syzkaller #0 PREEMPT(full) [ 507.459267][T13765] Tainted: [L]=SOFTLOCKUP [ 507.459272][T13765] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 507.459279][T13765] Call Trace: [ 507.459284][T13765] [ 507.459289][T13765] dump_stack_lvl+0x100/0x190 [ 507.459307][T13765] should_fail_ex.cold+0x5/0xa [ 507.459322][T13765] _copy_from_user+0x2e/0xd0 [ 507.459342][T13765] compat_wext_handle_ioctl+0xc4/0x220 [ 507.459360][T13765] ? __pfx_compat_wext_handle_ioctl+0x10/0x10 [ 507.459377][T13765] ? do_vfs_ioctl+0x226/0x13e0 [ 507.459395][T13765] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 507.459413][T13765] ? __pfx_unix_compat_ioctl+0x10/0x10 [ 507.459429][T13765] ? unix_ioctl+0x9c/0x570 [ 507.459442][T13765] compat_sock_ioctl+0x381/0x760 [ 507.459458][T13765] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 507.459471][T13765] ? hook_file_ioctl_common+0x140/0x440 [ 507.459488][T13765] ? __fget_files+0x215/0x3d0 [ 507.459502][T13765] ? __fget_files+0x21f/0x3d0 [ 507.459514][T13765] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 507.459528][T13765] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 507.459546][T13765] __do_fast_syscall_32+0xe7/0x970 [ 507.459562][T13765] ? lockdep_hardirqs_on+0x78/0x100 [ 507.459578][T13765] do_fast_syscall_32+0x32/0x70 [ 507.459595][T13765] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 507.459610][T13765] RIP: 0023:0xf708efec [ 507.459625][T13765] Code: Unable to access opcode bytes at 0xf708efc2. [ 507.459630][T13765] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 507.459642][T13765] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008b19 [ 507.459649][T13765] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 507.459656][T13765] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 507.459663][T13765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 507.459669][T13765] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 507.459683][T13765] [ 507.467329][T13762] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2242'. [ 507.546054][ T6432] hid_parser_main: 22 callbacks suppressed [ 507.546067][ T6432] hid-generic 029E:0005:0002.0006: unknown main item tag 0x0 [ 507.550325][ T6432] hid-generic 029E:0005:0002.0006: unknown main item tag 0x0 [ 507.552653][ T6432] hid-generic 029E:0005:0002.0006: unknown main item tag 0x0 [ 507.557300][ T6432] hid-generic 029E:0005:0002.0006: unknown main item tag 0x0 [ 507.559784][ T6432] hid-generic 029E:0005:0002.0006: unknown main item tag 0x0 [ 507.562578][ T6432] hid-generic 029E:0005:0002.0006: unknown main item tag 0x0 [ 507.566889][ T6432] hid-generic 029E:0005:0002.0006: unknown main item tag 0x0 [ 507.569311][ T6432] hid-generic 029E:0005:0002.0006: unknown main item tag 0x0 [ 507.570267][T13769] netlink: 'syz.3.2245': attribute type 4 has an invalid length. [ 507.571644][ T6432] hid-generic 029E:0005:0002.0006: unknown main item tag 0x0 [ 507.571661][ T6432] hid-generic 029E:0005:0002.0006: unknown main item tag 0x0 [ 507.610049][T13773] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1109: comm fido_id: iget: checksum invalid [ 507.615932][ T6432] hid-generic 029E:0005:0002.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 508.866620][T13792] binder: 13791:13792 ioctl c0306201 0 returned -14 [ 508.907371][T13793] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=167772165 (1342177320 ns) > initial count (160 ns). Using initial count to start timer. [ 508.985042][T13796] binder: 13791:13796 ioctl c0306201 0 returned -14 [ 509.446959][T13809] ehci-pci 0000:00:1d.7: remove, state 4 [ 509.454001][T13809] usb usb1: USB disconnect, device number 1 [ 509.482050][T13809] ehci-pci 0000:00:1d.7: USB bus 1 deregistered [ 510.219301][T13810] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 510.256241][T13810] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 1 [ 510.266023][T13810] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 510.287024][T13810] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 510.298911][T13810] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 510.302935][T13810] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 510.305920][T13810] usb usb1: Product: EHCI Host Controller [ 510.308970][T13810] usb usb1: Manufacturer: Linux syzkaller ehci_hcd [ 510.311233][T13810] usb usb1: SerialNumber: 0000:00:1d.7 [ 510.390348][T13813] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 510.508852][T13822] Mass Storage Function, version: 2009/09/11 [ 510.530491][T13822] LUN: removable file: (no medium) [ 510.552703][T13822] mass_storage.usb0/lun.0: unable to open backing file: file0 [ 510.727473][T13826] FAULT_INJECTION: forcing a failure. [ 510.727473][T13826] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 510.743245][T13826] CPU: 3 UID: 0 PID: 13826 Comm: syz.3.2258 Tainted: G L syzkaller #0 PREEMPT(full) [ 510.743267][T13826] Tainted: [L]=SOFTLOCKUP [ 510.743271][T13826] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 510.743279][T13826] Call Trace: [ 510.743284][T13826] [ 510.743289][T13826] dump_stack_lvl+0x100/0x190 [ 510.743309][T13826] should_fail_ex.cold+0x5/0xa [ 510.743323][T13826] __kvm_read_guest_page+0x186/0x250 [ 510.743345][T13826] kvm_fetch_guest_virt+0x128/0x1a0 [ 510.743367][T13826] __do_insn_fetch_bytes+0x5e2/0x7b0 [ 510.743399][T13826] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 510.743415][T13826] ? __pfx_vmx_vcpu_pi_load+0x10/0x10 [ 510.743438][T13826] x86_decode_insn+0x3ca/0x6da0 [ 510.743463][T13826] ? __pfx_x86_decode_insn+0x10/0x10 [ 510.743481][T13826] ? vmx_flush_tlb_current+0x130/0x610 [ 510.743494][T13826] ? init_decode_cache+0xd/0x2b0 [ 510.743512][T13826] ? init_emulate_ctxt+0x43c/0x700 [ 510.743530][T13826] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 510.743547][T13826] ? find_held_lock+0x2b/0x80 [ 510.743578][T13826] x86_emulate_instruction+0x1052/0x1df0 [ 510.743601][T13826] handle_ud+0x100/0x5b0 [ 510.743616][T13826] ? __pfx_handle_ud+0x10/0x10 [ 510.743629][T13826] ? rcu_qs+0x2a/0xe0 [ 510.743642][T13826] ? rcu_note_context_switch+0x174/0x19c0 [ 510.743657][T13826] ? __lock_acquire+0x49f/0x1a40 [ 510.743675][T13826] ? __vmx_complete_interrupts+0x129/0x570 [ 510.743693][T13826] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 510.743713][T13826] handle_exception_nmi+0xd0c/0x1af0 [ 510.743730][T13826] ? __pfx_handle_exception_nmi+0x10/0x10 [ 510.743745][T13826] vmx_handle_exit+0x4d6/0x1ef0 [ 510.743763][T13826] vcpu_run+0x35ab/0x5de0 [ 510.743778][T13826] ? vmx_vcpu_load_vmcs+0x21d/0x760 [ 510.743800][T13826] ? __pfx_vcpu_run+0x10/0x10 [ 510.743819][T13826] ? complete_emulated_mmio+0x102/0x710 [ 510.743837][T13826] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 510.743852][T13826] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 510.743871][T13826] kvm_vcpu_ioctl+0x730/0x1700 [ 510.743884][T13826] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 510.743896][T13826] ? tomoyo_path_number_perm+0x188/0x580 [ 510.743913][T13826] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 510.743929][T13826] ? get_pid_task+0x106/0x250 [ 510.743948][T13826] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 510.743965][T13826] ? do_vfs_ioctl+0x226/0x13e0 [ 510.743983][T13826] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 510.744005][T13826] kvm_vcpu_compat_ioctl+0x20f/0x3c0 [ 510.744017][T13826] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 510.744029][T13826] ? __fget_files+0x21f/0x3d0 [ 510.744043][T13826] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 510.744059][T13826] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 510.744078][T13826] __do_fast_syscall_32+0xe7/0x970 [ 510.744095][T13826] ? lockdep_hardirqs_on+0x78/0x100 [ 510.744111][T13826] do_fast_syscall_32+0x32/0x70 [ 510.744128][T13826] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 510.744144][T13826] RIP: 0023:0xf7fc6fec [ 510.744160][T13826] Code: Unable to access opcode bytes at 0xf7fc6fc2. [ 510.744165][T13826] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 510.744177][T13826] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 510.744184][T13826] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 510.744191][T13826] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 510.744198][T13826] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 510.744204][T13826] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 510.744219][T13826] [ 511.458573][T13832] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2261'. [ 511.650251][T13834] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2260'. [ 511.709996][T13839] FAULT_INJECTION: forcing a failure. [ 511.709996][T13839] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 511.720503][T13839] CPU: 3 UID: 0 PID: 13839 Comm: syz.2.2262 Tainted: G L syzkaller #0 PREEMPT(full) [ 511.720547][T13839] Tainted: [L]=SOFTLOCKUP [ 511.720555][T13839] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 511.720566][T13839] Call Trace: [ 511.720573][T13839] [ 511.720582][T13839] dump_stack_lvl+0x100/0x190 [ 511.720611][T13839] should_fail_ex.cold+0x5/0xa [ 511.720634][T13839] _copy_from_user+0x2e/0xd0 [ 511.720665][T13839] compat_i2cdev_ioctl+0x1db/0x540 [ 511.720680][T13839] ? hook_file_ioctl_common+0x140/0x440 [ 511.720697][T13839] ? __fget_files+0x215/0x3d0 [ 511.720710][T13839] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 511.720721][T13839] ? __fget_files+0x21f/0x3d0 [ 511.720734][T13839] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 511.720745][T13839] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 511.720765][T13839] __do_fast_syscall_32+0xe7/0x970 [ 511.720782][T13839] ? lockdep_hardirqs_on+0x78/0x100 [ 511.720798][T13839] do_fast_syscall_32+0x32/0x70 [ 511.720815][T13839] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 511.720830][T13839] RIP: 0023:0xf6fcefec [ 511.720848][T13839] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 511.720853][T13839] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 511.720865][T13839] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000720 [ 511.720872][T13839] RDX: 0000000080000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 511.720879][T13839] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 511.720886][T13839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 511.720893][T13839] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 511.720906][T13839] [ 511.881279][T13844] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(13) [ 511.884164][T13844] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 511.890818][T13844] vhci_hcd vhci_hcd.0: Device attached [ 511.899737][T13846] vhci_hcd: cannot find a urb of seqnum 796289135 max seqnum 0 [ 511.916281][T13818] vhci_hcd vhci_hcd.2: stop threads [ 511.916296][T13818] vhci_hcd vhci_hcd.2: release socket [ 511.916309][T13818] vhci_hcd vhci_hcd.2: disconnect device [ 511.929293][T13842] ext2: Unknown parameter 'addr' [ 511.986473][T13844] netlink: 'syz.2.2265': attribute type 1 has an invalid length. [ 512.040921][T13844] bond1: option mode: invalid value (19) [ 512.050782][T13844] bond1 (unregistering): Released all slaves [ 512.082257][T13848] : renamed from dummy0 [ 513.368598][T13866] netlink: 'syz.3.2270': attribute type 1 has an invalid length. [ 513.449236][T13868] macvtap4: entered allmulticast mode [ 513.471137][T13866] macvtap5: entered allmulticast mode [ 513.487730][T13866] bond7: (slave bridge7): making interface the new active one [ 513.491147][T13866] bond7: (slave bridge7): Enslaving as an active interface with an up link [ 513.548970][T13870] ehci-pci 0000:00:1d.7: remove, state 1 [ 513.561566][T13870] usb usb1: USB disconnect, device number 1 [ 513.611633][T13870] ehci-pci 0000:00:1d.7: USB bus 1 deregistered [ 513.748825][T13872] tmpfs: Unknown parameter 'grpquota·' [ 513.760510][T13872] tmpfs: Unknown parameter '' [ 513.767183][T13872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2272'. [ 513.827676][T13874] FAULT_INJECTION: forcing a failure. [ 513.827676][T13874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 513.836125][T13874] CPU: 0 UID: 0 PID: 13874 Comm: syz.3.2273 Tainted: G L syzkaller #0 PREEMPT(full) [ 513.836147][T13874] Tainted: [L]=SOFTLOCKUP [ 513.836163][T13874] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 513.836171][T13874] Call Trace: [ 513.836176][T13874] [ 513.836182][T13874] dump_stack_lvl+0x100/0x190 [ 513.836201][T13874] should_fail_ex.cold+0x5/0xa [ 513.836216][T13874] _copy_from_user+0x2e/0xd0 [ 513.836236][T13874] __sys_bpf+0x2f5/0x4e80 [ 513.836256][T13874] ? __pfx___sys_bpf+0x10/0x10 [ 513.836270][T13874] ? find_held_lock+0x2b/0x80 [ 513.836285][T13874] ? get_pid_task+0xfc/0x250 [ 513.836300][T13874] ? get_pid_task+0xfc/0x250 [ 513.836318][T13874] ? proc_fail_nth_write+0x9f/0x220 [ 513.836336][T13874] ? find_held_lock+0x2b/0x80 [ 513.836353][T13874] ? rcu_read_lock_any_held+0x6a/0xa0 [ 513.836370][T13874] ? find_held_lock+0x2b/0x80 [ 513.836384][T13874] ? ksys_write+0x190/0x250 [ 513.836395][T13874] ? ksys_write+0x190/0x250 [ 513.836416][T13874] ? fput+0x79/0x100 [ 513.836431][T13874] ? __ia32_sys_bpf+0xcc/0x170 [ 513.836444][T13874] __ia32_sys_bpf+0xcc/0x170 [ 513.836457][T13874] ? __do_fast_syscall_32+0x98/0x970 [ 513.836476][T13874] __do_fast_syscall_32+0xe7/0x970 [ 513.836492][T13874] ? lockdep_hardirqs_on+0x78/0x100 [ 513.836518][T13874] do_fast_syscall_32+0x32/0x70 [ 513.836538][T13874] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 513.836554][T13874] RIP: 0023:0xf7fc6fec [ 513.836575][T13874] Code: Unable to access opcode bytes at 0xf7fc6fc2. [ 513.836580][T13874] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 513.836593][T13874] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000600 [ 513.836601][T13874] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 513.836608][T13874] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 513.836615][T13874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 513.836621][T13874] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 513.836636][T13874] [ 514.094558][T13862] binder: 13861:13862 ioctl 40285881 80000040 returned -22 [ 514.333104][T13898] FAULT_INJECTION: forcing a failure. [ 514.333104][T13898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 514.338662][T13898] CPU: 3 UID: 0 PID: 13898 Comm: syz.0.2280 Tainted: G L syzkaller #0 PREEMPT(full) [ 514.338707][T13898] Tainted: [L]=SOFTLOCKUP [ 514.338714][T13898] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 514.338725][T13898] Call Trace: [ 514.338733][T13898] [ 514.338740][T13898] dump_stack_lvl+0x100/0x190 [ 514.338769][T13898] should_fail_ex.cold+0x5/0xa [ 514.338791][T13898] _copy_from_user+0x2e/0xd0 [ 514.338822][T13898] compat_wext_handle_ioctl+0xc4/0x220 [ 514.338850][T13898] ? __pfx_compat_wext_handle_ioctl+0x10/0x10 [ 514.338878][T13898] ? do_vfs_ioctl+0x226/0x13e0 [ 514.338905][T13898] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 514.338932][T13898] compat_sock_ioctl+0x381/0x760 [ 514.338959][T13898] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 514.338979][T13898] ? hook_file_ioctl_common+0x140/0x440 [ 514.339005][T13898] ? __fget_files+0x215/0x3d0 [ 514.339027][T13898] ? __fget_files+0x21f/0x3d0 [ 514.339049][T13898] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 514.339072][T13898] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 514.339101][T13898] __do_fast_syscall_32+0xe7/0x970 [ 514.339127][T13898] ? lockdep_hardirqs_on+0x78/0x100 [ 514.339153][T13898] do_fast_syscall_32+0x32/0x70 [ 514.339178][T13898] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 514.339203][T13898] RIP: 0023:0xf7f34fec [ 514.339226][T13898] Code: Unable to access opcode bytes at 0xf7f34fc2. [ 514.339236][T13898] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 514.339255][T13898] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008b05 [ 514.339268][T13898] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 514.339279][T13898] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 514.339288][T13898] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 514.339297][T13898] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 514.339322][T13898] [ 514.498886][T13899] siw: device registration error -23 [ 514.516304][T13901] overlayfs: failed to resolve './file1': -2 [ 514.714465][T13906] FAULT_INJECTION: forcing a failure. [ 514.714465][T13906] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 514.763645][T13906] CPU: 0 UID: 0 PID: 13906 Comm: syz.0.2282 Tainted: G L syzkaller #0 PREEMPT(full) [ 514.763666][T13906] Tainted: [L]=SOFTLOCKUP [ 514.763671][T13906] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 514.763678][T13906] Call Trace: [ 514.763683][T13906] [ 514.763689][T13906] dump_stack_lvl+0x100/0x190 [ 514.763709][T13906] should_fail_ex.cold+0x5/0xa [ 514.763723][T13906] _copy_to_user+0x32/0xd0 [ 514.763743][T13906] simple_read_from_buffer+0xcb/0x170 [ 514.763765][T13906] proc_fail_nth_read+0x1af/0x230 [ 514.763783][T13906] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 514.763799][T13906] ? rw_verify_area+0xce/0x6d0 [ 514.763816][T13906] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 514.763832][T13906] vfs_read+0x1e4/0xb40 [ 514.763844][T13906] ? __pfx_vfs_read+0x10/0x10 [ 514.763853][T13906] ? find_held_lock+0x2b/0x80 [ 514.763869][T13906] ? __fget_files+0x215/0x3d0 [ 514.763882][T13906] ? __fget_files+0x21f/0x3d0 [ 514.763897][T13906] ksys_read+0x12a/0x250 [ 514.763907][T13906] ? __pfx_ksys_read+0x10/0x10 [ 514.763921][T13906] do_int80_emulation+0x14b/0x720 [ 514.763941][T13906] asm_int80_emulation+0x1a/0x20 [ 514.763953][T13906] RIP: 0023:0xf71373eb [ 514.763964][T13906] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 514.763975][T13906] RSP: 002b:00000000f53d54bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 514.763988][T13906] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53d55d0 [ 514.763995][T13906] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 514.764003][T13906] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 514.764009][T13906] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 514.764016][T13906] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 514.764031][T13906] [ 515.971985][T13937] syz_tun: entered allmulticast mode [ 516.097809][T13945] overlayfs: cannot append lower layer [ 516.105607][T13929] syz_tun: left allmulticast mode [ 516.516870][T13964] fuse: Bad value for 'fd' [ 516.958446][T13992] af_packet: tpacket_rcv: packet too big, clamped from 3390 to 4294967272. macoff=96 [ 517.034628][T13998] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2312'. [ 517.066360][T13970] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 517.532563][T14022] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2319'. [ 517.782975][T14029] FAULT_INJECTION: forcing a failure. [ 517.782975][T14029] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 517.788033][T14029] CPU: 3 UID: 0 PID: 14029 Comm: syz.3.2323 Tainted: G L syzkaller #0 PREEMPT(full) [ 517.788052][T14029] Tainted: [L]=SOFTLOCKUP [ 517.788057][T14029] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 517.788064][T14029] Call Trace: [ 517.788068][T14029] [ 517.788073][T14029] dump_stack_lvl+0x100/0x190 [ 517.788094][T14029] should_fail_ex.cold+0x5/0xa [ 517.788108][T14029] _copy_from_user+0x2e/0xd0 [ 517.788128][T14029] __sys_bpf+0x2f5/0x4e80 [ 517.788145][T14029] ? __pfx___sys_bpf+0x10/0x10 [ 517.788158][T14029] ? find_held_lock+0x2b/0x80 [ 517.788173][T14029] ? get_pid_task+0xfc/0x250 [ 517.788188][T14029] ? get_pid_task+0xfc/0x250 [ 517.788206][T14029] ? proc_fail_nth_write+0x9f/0x220 [ 517.788222][T14029] ? find_held_lock+0x2b/0x80 [ 517.788239][T14029] ? rcu_read_lock_any_held+0x6a/0xa0 [ 517.788255][T14029] ? find_held_lock+0x2b/0x80 [ 517.788269][T14029] ? ksys_write+0x190/0x250 [ 517.788280][T14029] ? ksys_write+0x190/0x250 [ 517.788311][T14029] ? fput+0x79/0x100 [ 517.788332][T14029] ? __ia32_sys_bpf+0xcc/0x170 [ 517.788352][T14029] __ia32_sys_bpf+0xcc/0x170 [ 517.788373][T14029] ? __do_fast_syscall_32+0x98/0x970 [ 517.788401][T14029] __do_fast_syscall_32+0xe7/0x970 [ 517.788421][T14029] ? lockdep_hardirqs_on+0x78/0x100 [ 517.788437][T14029] do_fast_syscall_32+0x32/0x70 [ 517.788453][T14029] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 517.788469][T14029] RIP: 0023:0xf7fc6fec [ 517.788484][T14029] Code: Unable to access opcode bytes at 0xf7fc6fc2. [ 517.788490][T14029] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 517.788504][T14029] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000240 [ 517.788511][T14029] RDX: 000000000000004c RSI: 0000000000000000 RDI: 0000000000000000 [ 517.788518][T14029] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 517.788524][T14029] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 517.788531][T14029] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 517.788545][T14029] [ 517.863526][T14027] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 517.872725][T14027] CIFS: Attempting to mount //127.0.0.1/share [ 517.887145][T14027] CIFS: VFS: Error connecting to socket. Aborting operation. [ 517.890606][T14027] CIFS: VFS: cifs_mount failed w/return code = -111 [ 518.584519][ T5151] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 518.605539][ T5151] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 518.617785][ T5151] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 519.707857][T14034] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 519.866597][T14034] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 520.405925][T14080] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 520.408520][T14080] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 520.418443][T14080] vhci_hcd vhci_hcd.0: Device attached [ 520.495229][T14088] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2338'. [ 520.683744][ T8676] usb 44-1: SetAddress Request (19) to port 0 [ 520.687418][ T8676] usb 44-1: new SuperSpeed USB device number 19 using vhci_hcd [ 520.689577][T14084] vhci_hcd: connection closed [ 520.690634][ T5826] vhci_hcd vhci_hcd.3: stop threads [ 520.704284][ T5826] vhci_hcd vhci_hcd.3: release socket [ 520.711386][ T5826] vhci_hcd vhci_hcd.3: disconnect device [ 521.473757][T14123] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2342'. [ 521.647771][ T5151] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 521.659734][ T5151] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 521.671235][ T5151] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 521.730080][T14132] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2345'. [ 521.776586][T14134] FAULT_INJECTION: forcing a failure. [ 521.776586][T14134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 521.782775][T14134] CPU: 2 UID: 0 PID: 14134 Comm: syz.4.2346 Tainted: G L syzkaller #0 PREEMPT(full) [ 521.782796][T14134] Tainted: [L]=SOFTLOCKUP [ 521.782801][T14134] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 521.782808][T14134] Call Trace: [ 521.782813][T14134] [ 521.782819][T14134] dump_stack_lvl+0x100/0x190 [ 521.782837][T14134] should_fail_ex.cold+0x5/0xa [ 521.782851][T14134] _copy_from_user+0x2e/0xd0 [ 521.782877][T14134] kstrtoul_from_user+0xc6/0x1c0 [ 521.782892][T14134] ? __pfx_kstrtoul_from_user+0x10/0x10 [ 521.782909][T14134] ? __pfx___might_resched+0x10/0x10 [ 521.782929][T14134] ? import_ubuf+0x1b6/0x220 [ 521.782949][T14134] system_enable_write+0xcd/0x300 [ 521.782963][T14134] ? __pfx_system_enable_write+0x10/0x10 [ 521.782979][T14134] ? __pfx_system_enable_write+0x10/0x10 [ 521.782989][T14134] vfs_writev+0x5ed/0xdd0 [ 521.783011][T14134] ? __pfx_vfs_writev+0x10/0x10 [ 521.783038][T14134] ? __fget_files+0x21f/0x3d0 [ 521.783053][T14134] ? do_writev+0x13e/0x340 [ 521.783069][T14134] do_writev+0x13e/0x340 [ 521.783087][T14134] ? __pfx_do_writev+0x10/0x10 [ 521.783103][T14134] ? ksys_write+0x1ac/0x250 [ 521.783113][T14134] ? __pfx_ksys_write+0x10/0x10 [ 521.783127][T14134] __do_fast_syscall_32+0xe7/0x970 [ 521.783144][T14134] ? lockdep_hardirqs_on+0x78/0x100 [ 521.783160][T14134] do_fast_syscall_32+0x32/0x70 [ 521.783177][T14134] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 521.783192][T14134] RIP: 0023:0xf708efec [ 521.783207][T14134] Code: Unable to access opcode bytes at 0xf708efc2. [ 521.783213][T14134] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000092 [ 521.783225][T14134] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800019c0 [ 521.783232][T14134] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 521.783239][T14134] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 521.783245][T14134] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 521.783252][T14134] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 521.783266][T14134] [ 521.989437][ T42] kauditd_printk_skb: 164 callbacks suppressed [ 521.989453][ T42] audit: type=1800 audit(1785723701.381:430): pid=14136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2347" name="use" dev="configfs" ino=55630 res=0 errno=0 [ 522.008459][T14140] FAULT_INJECTION: forcing a failure. [ 522.008459][T14140] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 522.019716][T14140] CPU: 3 UID: 0 PID: 14140 Comm: syz.3.2349 Tainted: G L syzkaller #0 PREEMPT(full) [ 522.019745][T14140] Tainted: [L]=SOFTLOCKUP [ 522.019752][T14140] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 522.019763][T14140] Call Trace: [ 522.019769][T14140] [ 522.019776][T14140] dump_stack_lvl+0x100/0x190 [ 522.019803][T14140] should_fail_ex.cold+0x5/0xa [ 522.019823][T14140] _copy_from_user+0x2e/0xd0 [ 522.019852][T14140] hidp_sock_compat_ioctl+0x2f5/0x4e0 [ 522.019878][T14140] ? __pfx_hidp_sock_compat_ioctl+0x10/0x10 [ 522.019901][T14140] ? __lock_acquire+0x49f/0x1a40 [ 522.019943][T14140] ? tomoyo_path_number_perm+0x188/0x580 [ 522.019981][T14140] ? do_vfs_ioctl+0x226/0x13e0 [ 522.020006][T14140] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 522.020031][T14140] ? __pfx_hidp_sock_compat_ioctl+0x10/0x10 [ 522.020054][T14140] compat_sock_ioctl+0x179/0x760 [ 522.020079][T14140] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 522.020097][T14140] ? hook_file_ioctl_common+0x140/0x440 [ 522.020119][T14140] ? __fget_files+0x215/0x3d0 [ 522.020140][T14140] ? __fget_files+0x21f/0x3d0 [ 522.020160][T14140] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 522.020180][T14140] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 522.020207][T14140] __do_fast_syscall_32+0xe7/0x970 [ 522.020249][T14140] ? lockdep_hardirqs_on+0x78/0x100 [ 522.020273][T14140] do_fast_syscall_32+0x32/0x70 [ 522.020297][T14140] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 522.020320][T14140] RIP: 0023:0xf7fc6fec [ 522.020340][T14140] Code: Unable to access opcode bytes at 0xf7fc6fc2. [ 522.020348][T14140] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 522.020365][T14140] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000400448c8 [ 522.020376][T14140] RDX: 0000000080000340 RSI: 0000000000000000 RDI: 0000000000000000 [ 522.020386][T14140] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 522.020396][T14140] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 522.020406][T14140] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 522.020433][T14140] [ 522.095740][T14141] FAULT_INJECTION: forcing a failure. [ 522.095740][T14141] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 522.099943][T14141] CPU: 3 UID: 0 PID: 14141 Comm: syz.0.2348 Tainted: G L syzkaller #0 PREEMPT(full) [ 522.099961][T14141] Tainted: [L]=SOFTLOCKUP [ 522.099965][T14141] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 522.099973][T14141] Call Trace: [ 522.099978][T14141] [ 522.099983][T14141] dump_stack_lvl+0x100/0x190 [ 522.100002][T14141] should_fail_ex.cold+0x5/0xa [ 522.100016][T14141] _copy_to_user+0x32/0xd0 [ 522.100037][T14141] simple_read_from_buffer+0xcb/0x170 [ 522.100059][T14141] proc_fail_nth_read+0x1af/0x230 [ 522.100076][T14141] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 522.100093][T14141] ? rw_verify_area+0xce/0x6d0 [ 522.100110][T14141] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 522.100126][T14141] vfs_read+0x1e4/0xb40 [ 522.100138][T14141] ? __pfx_vfs_read+0x10/0x10 [ 522.100148][T14141] ? find_held_lock+0x2b/0x80 [ 522.100163][T14141] ? __fget_files+0x215/0x3d0 [ 522.100177][T14141] ? __fget_files+0x21f/0x3d0 [ 522.100191][T14141] ksys_read+0x12a/0x250 [ 522.100201][T14141] ? __pfx_ksys_read+0x10/0x10 [ 522.100216][T14141] do_int80_emulation+0x14b/0x720 [ 522.100235][T14141] asm_int80_emulation+0x1a/0x20 [ 522.100247][T14141] RIP: 0023:0xf71373eb [ 522.100258][T14141] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 522.100270][T14141] RSP: 002b:00000000f53d54bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 522.100282][T14141] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f53d55d0 [ 522.100289][T14141] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 522.100296][T14141] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 522.100302][T14141] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 522.100309][T14141] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 522.100323][T14141] [ 522.231394][T14144] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2350'. [ 522.291314][T14149] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 522.299721][T14149] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 523.635747][T14176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.670379][T14175] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2361'. [ 523.678915][T14175] tipc: Invalid UDP bearer configuration [ 523.678950][T14175] tipc: Enabling of bearer rejected, failed to enable media [ 523.794411][T14176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.409373][T14186] TCP: tcp_parse_options: Illegal window scaling value 251 > 14 received [ 524.419806][T14176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2360'. [ 524.696631][T14176] block nbd0: server does not support multiple connections per device. [ 524.707368][ T5151] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 524.715095][ T5151] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 524.720624][ T5151] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 524.734276][T14176] block nbd0: shutting down sockets [ 524.842794][T14200] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2369'. [ 524.878499][T14192] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 524.890471][T14192] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 1 [ 524.896715][T14192] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 524.913754][T14192] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 524.918468][T14192] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 524.921469][T14192] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 524.927439][T14192] usb usb1: Product: EHCI Host Controller [ 524.929396][T14192] usb usb1: Manufacturer: Linux syzkaller ehci_hcd [ 524.931524][T14192] usb usb1: SerialNumber: 0000:00:1d.7 [ 525.086827][T14207] FAULT_INJECTION: forcing a failure. [ 525.086827][T14207] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 525.092361][T14207] CPU: 3 UID: 0 PID: 14207 Comm: syz.4.2371 Tainted: G L syzkaller #0 PREEMPT(full) [ 525.092391][T14207] Tainted: [L]=SOFTLOCKUP [ 525.092399][T14207] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 525.092409][T14207] Call Trace: [ 525.092416][T14207] [ 525.092425][T14207] dump_stack_lvl+0x100/0x190 [ 525.092454][T14207] should_fail_ex.cold+0x5/0xa [ 525.092477][T14207] _copy_from_user+0x2e/0xd0 [ 525.092509][T14207] __sys_bpf+0x2f5/0x4e80 [ 525.092540][T14207] ? __pfx___sys_bpf+0x10/0x10 [ 525.092561][T14207] ? find_held_lock+0x2b/0x80 [ 525.092584][T14207] ? get_pid_task+0xfc/0x250 [ 525.092608][T14207] ? get_pid_task+0xfc/0x250 [ 525.092636][T14207] ? proc_fail_nth_write+0x9f/0x220 [ 525.092665][T14207] ? find_held_lock+0x2b/0x80 [ 525.092694][T14207] ? rcu_read_lock_any_held+0x6a/0xa0 [ 525.092718][T14207] ? find_held_lock+0x2b/0x80 [ 525.092739][T14207] ? ksys_write+0x190/0x250 [ 525.092756][T14207] ? ksys_write+0x190/0x250 [ 525.092792][T14207] ? fput+0x79/0x100 [ 525.092817][T14207] ? __ia32_sys_bpf+0xcc/0x170 [ 525.092838][T14207] __ia32_sys_bpf+0xcc/0x170 [ 525.092861][T14207] ? __do_fast_syscall_32+0x98/0x970 [ 525.092890][T14207] __do_fast_syscall_32+0xe7/0x970 [ 525.092914][T14207] ? lockdep_hardirqs_on+0x78/0x100 [ 525.092940][T14207] do_fast_syscall_32+0x32/0x70 [ 525.092965][T14207] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 525.092991][T14207] RIP: 0023:0xf708efec [ 525.093017][T14207] Code: Unable to access opcode bytes at 0xf708efc2. [ 525.093026][T14207] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 525.093045][T14207] RAX: ffffffffffffffda RBX: 000000000000001d RCX: 0000000080000000 [ 525.093057][T14207] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000000 [ 525.093068][T14207] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 525.093078][T14207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 525.093089][T14207] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 525.093114][T14207] [ 525.803861][ T8676] usb 44-1: device descriptor read/8, error -110 [ 526.291306][T14226] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2378'. [ 526.451913][T14226] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.455187][T14226] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.722081][ T8676] usb usb44-port1: attempt power cycle [ 526.762736][T14228] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2379'. [ 527.284892][ T8676] usb usb44-port1: unable to enumerate USB device [ 527.389270][T14234] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 527.599243][T14242] mass_storage.usb0/lun.0: unable to open backing file: file0 [ 527.678881][T14245] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:106: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 527.686932][T13818] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.808615][ T5151] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 527.823861][ T5151] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 527.832531][ T5151] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 527.883035][ T5764] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 527.890225][ T5764] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 527.897763][ T5764] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 527.915322][ T5764] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 527.918518][ T5764] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 527.982485][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 527.993270][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 527.999385][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 528.002446][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 528.005208][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 528.159259][T13818] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.232330][ T5453] EXT4-fs error (device sda1): ext4_lookup:1785: inode #125: comm dhcpcd: iget: checksum invalid [ 528.249743][T14256] netlink: 'syz.3.2387': attribute type 39 has an invalid length. [ 528.318885][T13818] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.533230][T13818] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.550249][ T5453] EXT4-fs error (device sda1): ext4_lookup:1785: inode #125: comm dhcpcd: iget: checksum invalid [ 528.709586][T14282] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2389'. [ 528.950642][T14289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.972529][T14289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.989001][T14289] 9p: Bad value for 'rfdno' [ 529.166607][T13818] bridge_slave_1: left allmulticast mode [ 529.169512][T13818] bridge_slave_1: left promiscuous mode [ 529.175984][T13818] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.323182][T13818] bridge_slave_0: left allmulticast mode [ 529.326037][T13818] bridge_slave_0: left promiscuous mode [ 529.346199][T13818] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.433881][ T5859] usb 8-1: new full-speed USB device number 85 using dummy_hcd [ 529.585046][ T5859] usb 8-1: config 0 has no interfaces? [ 529.586925][ T5859] usb 8-1: New USB device found, idVendor=1668, idProduct=0323, bcdDevice=5f.ca [ 529.589961][ T5859] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.630069][T13818] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 529.637534][T13818] bridge1 (unregistering): left promiscuous mode [ 529.639354][T14312] FAULT_INJECTION: forcing a failure. [ 529.639354][T14312] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 529.645601][T14312] CPU: 2 UID: 0 PID: 14312 Comm: syz.0.2394 Tainted: G L syzkaller #0 PREEMPT(full) [ 529.645635][T14312] Tainted: [L]=SOFTLOCKUP [ 529.645641][T14312] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 529.645651][T14312] Call Trace: [ 529.645657][T14312] [ 529.645664][T14312] dump_stack_lvl+0x100/0x190 [ 529.645691][T14312] should_fail_ex.cold+0x5/0xa [ 529.645711][T14312] _copy_from_user+0x2e/0xd0 [ 529.645739][T14312] get_compat_msghdr+0xb3/0x480 [ 529.645770][T14312] ? __pfx_get_compat_msghdr+0x10/0x10 [ 529.645803][T14312] ___sys_sendmsg+0x1b6/0x1e0 [ 529.645825][T14312] ? __pfx____sys_sendmsg+0x10/0x10 [ 529.645854][T14312] ? find_held_lock+0x2b/0x80 [ 529.645890][T14312] __sys_sendmsg+0x160/0x210 [ 529.645922][T14312] ? __pfx___sys_sendmsg+0x10/0x10 [ 529.645950][T14312] ? __pfx_ksys_write+0x10/0x10 [ 529.645972][T14312] __do_fast_syscall_32+0xe7/0x970 [ 529.645997][T14312] ? lockdep_hardirqs_on+0x78/0x100 [ 529.646020][T14312] do_fast_syscall_32+0x32/0x70 [ 529.646041][T14312] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 529.646062][T14312] RIP: 0023:0xf7f34fec [ 529.646084][T14312] Code: Unable to access opcode bytes at 0xf7f34fc2. [ 529.646092][T14312] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 529.646110][T14312] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 529.646137][T14312] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 529.646148][T14312] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 529.646158][T14312] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 529.646168][T14312] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 529.646193][T14312] [ 529.740713][T13818] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 529.743377][T13818] bridge3 (unregistering): left promiscuous mode [ 529.756439][T13818] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 529.761245][T13818] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 529.766122][T13818] bond0 (unregistering): Released all slaves [ 529.771833][T13818] bond1 (unregistering): Released all slaves [ 529.779429][T13818] bond2 (unregistering): Released all slaves [ 529.799441][T13818] bond3 (unregistering): Released all slaves [ 529.831876][ T5453] EXT4-fs error (device sda1): ext4_lookup:1785: inode #125: comm dhcpcd: iget: checksum invalid [ 530.043942][ T64] Bluetooth: hci0: command tx timeout [ 530.346414][ T5453] 8021q: adding VLAN 0 to HW filter on device eth2 [ 530.457628][T14246] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.460952][T14246] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.475291][T14246] bridge_slave_0: entered allmulticast mode [ 530.480962][T14246] bridge_slave_0: entered promiscuous mode [ 530.486878][T14246] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.489256][T14246] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.491651][T14246] bridge_slave_1: entered allmulticast mode [ 530.498290][T14246] bridge_slave_1: entered promiscuous mode [ 530.621064][ T5453] EXT4-fs error (device sda1): ext4_lookup:1785: inode #125: comm dhcpcd: iget: checksum invalid [ 530.629928][T14246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 530.920395][T14246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.992561][T13818] hsr_slave_0: left promiscuous mode [ 530.997604][T13818] hsr_slave_1: left promiscuous mode [ 530.999780][T13818] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 531.006776][T13818] batadv0: mtu less than device minimum [ 531.010986][T13818] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 531.016031][T13818] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 531.019766][T13818] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 531.023451][T13818] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 531.027193][T13818] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 531.030895][T13818] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 531.034812][T13818] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 531.038507][T13818] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 531.042216][T13818] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 531.056997][T13818] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 531.060368][T13818] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 531.106434][T13818] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 531.115046][T13818] batman_adv: batadv0: Interface deactivated: dummy0 [ 531.119333][T13818] batman_adv: batadv0: Removing interface: dummy0 [ 531.149404][T13818] veth1_macvtap: left promiscuous mode [ 531.161304][T13818] veth0_macvtap: left promiscuous mode [ 531.168349][T13818] veth1_vlan: left promiscuous mode [ 531.176621][T13818] veth0_vlan: left promiscuous mode [ 531.402405][T14361] netdevsim netdevsim2: Direct firmware load for . [ 531.402405][T14361] failed with error -2 [ 531.407960][T14361] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 531.407960][T14361] [ 531.418497][ T5151] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 531.423466][ T5151] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 531.429010][ T5151] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 531.533175][T14246] team0: Port device team_slave_0 added [ 531.545505][ T5453] 8021q: adding VLAN 0 to HW filter on device eth3 [ 531.549596][T14246] team0: Port device team_slave_1 added [ 531.567167][T14246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 531.569292][T14246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.581478][T14246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.594215][T14246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.596914][T14246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.605714][T14246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 531.614975][ T5453] EXT4-fs error (device sda1): ext4_lookup:1785: inode #125: comm dhcpcd: iget: checksum invalid [ 531.678338][T14246] hsr_slave_0: entered promiscuous mode [ 531.680897][T14246] hsr_slave_1: entered promiscuous mode [ 531.683193][T14246] debugfs: 'hsr0' already exists in 'hsr' [ 531.685267][T14246] Cannot create hsr debugfs directory [ 531.878046][T14246] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 531.905011][T14246] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 531.907773][T14246] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 531.950654][T14246] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 531.958182][ T5453] 8021q: adding VLAN 0 to HW filter on device eth4 [ 531.961235][T14246] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 532.016821][T14246] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 532.020874][T14246] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 532.028314][T14246] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 532.047828][ T5453] EXT4-fs error (device sda1): ext4_lookup:1785: inode #125: comm dhcpcd: iget: checksum invalid [ 532.099681][T14246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 532.124012][ T64] Bluetooth: hci0: command tx timeout [ 532.163969][ T10] usb 8-1: USB disconnect, device number 85 [ 532.287827][ T5453] 8021q: adding VLAN 0 to HW filter on device eth5 [ 532.292364][ T5453] EXT4-fs error (device sda1): ext4_lookup:1785: inode #125: comm dhcpcd: iget: checksum invalid [ 532.293944][T14246] 8021q: adding VLAN 0 to HW filter on device team0 [ 532.315608][T12407] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.318059][T12407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.340364][T12407] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.342797][T12407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.352767][T13818] IPVS: stop unused estimator thread 0... [ 532.410228][ T5453] EXT4-fs error (device sda1): ext4_lookup:1785: inode #125: comm dhcpcd: iget: checksum invalid [ 532.807322][ T5453] EXT4-fs error (device sda1): ext4_lookup:1785: inode #125: comm dhcpcd: iget: checksum invalid [ 533.171490][T14246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 533.571953][T14422] fuse: Bad value for 'fd' [ 533.625996][T14246] veth0_vlan: entered promiscuous mode [ 533.688146][T14246] veth1_vlan: entered promiscuous mode [ 533.747099][T14246] veth0_macvtap: entered promiscuous mode [ 533.757939][T14246] veth1_macvtap: entered promiscuous mode [ 533.810333][T14246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 533.837024][T14246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 534.073923][ T5611] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.077124][ T5611] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.125165][ T5826] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.173797][ T5611] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.203783][ T64] Bluetooth: hci0: command tx timeout [ 534.224333][T12411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.234245][T12411] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.342889][T12411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.349156][T12411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.707149][T14456] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2385'. [ 534.973911][ T5764] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 534.985859][ T5764] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 535.011725][ T5764] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 535.040076][ T5764] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 535.043288][ T5764] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 535.486500][T14479] FAULT_INJECTION: forcing a failure. [ 535.486500][T14479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 535.493704][T14479] CPU: 3 UID: 0 PID: 14479 Comm: syz.5.2427 Tainted: G L syzkaller #0 PREEMPT(full) [ 535.493724][T14479] Tainted: [L]=SOFTLOCKUP [ 535.493729][T14479] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 535.493736][T14479] Call Trace: [ 535.493741][T14479] [ 535.493746][T14479] dump_stack_lvl+0x100/0x190 [ 535.493764][T14479] should_fail_ex.cold+0x5/0xa [ 535.493778][T14479] _copy_from_user+0x2e/0xd0 [ 535.493798][T14479] get_compat_msghdr+0xb3/0x480 [ 535.493818][T14479] ? __pfx_get_compat_msghdr+0x10/0x10 [ 535.493847][T14479] ___sys_sendmsg+0x1b6/0x1e0 [ 535.493862][T14479] ? __pfx____sys_sendmsg+0x10/0x10 [ 535.493882][T14479] ? find_held_lock+0x2b/0x80 [ 535.493906][T14479] __sys_sendmsg+0x160/0x210 [ 535.493923][T14479] ? __pfx___sys_sendmsg+0x10/0x10 [ 535.493943][T14479] ? __pfx_ksys_write+0x10/0x10 [ 535.493958][T14479] __do_fast_syscall_32+0xe7/0x970 [ 535.493974][T14479] ? lockdep_hardirqs_on+0x78/0x100 [ 535.493991][T14479] do_fast_syscall_32+0x32/0x70 [ 535.494007][T14479] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 535.494023][T14479] RIP: 0023:0xf7f16fec [ 535.494038][T14479] Code: Unable to access opcode bytes at 0xf7f16fc2. [ 535.494044][T14479] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 535.494056][T14479] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 535.494063][T14479] RDX: 000000000000c040 RSI: 0000000000000000 RDI: 0000000000000000 [ 535.494070][T14479] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 535.494076][T14479] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 535.494084][T14479] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 535.494098][T14479] [ 535.785671][T14492] overlayfs: failed to resolve './cgroup': -2 [ 535.941500][T14463] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.946783][T14463] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.949782][T14463] bridge_slave_0: entered allmulticast mode [ 535.953170][T14463] bridge_slave_0: entered promiscuous mode [ 535.959811][T14463] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.962419][T14463] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.965860][T14463] bridge_slave_1: entered allmulticast mode [ 535.968768][T14463] bridge_slave_1: entered promiscuous mode [ 536.046226][T14463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 536.093621][T14463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 536.104898][T14499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2431'. [ 536.247474][T14463] team0: Port device team_slave_0 added [ 536.266263][T14463] team0: Port device team_slave_1 added [ 536.283704][ T64] Bluetooth: hci0: command tx timeout [ 536.334047][T14463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 536.341547][T14463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 536.374076][T14463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 536.395088][T14463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 536.419077][T14463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 536.445738][T14463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 536.575618][T14463] hsr_slave_0: entered promiscuous mode [ 536.585741][T14463] hsr_slave_1: entered promiscuous mode [ 536.603064][T14463] debugfs: 'hsr0' already exists in 'hsr' [ 536.609340][T14463] Cannot create hsr debugfs directory [ 536.644968][T14508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2435'. [ 537.060866][T14518] netlink: 'syz.5.2438': attribute type 1 has an invalid length. [ 537.084126][ T64] Bluetooth: hci1: command tx timeout [ 537.108150][T14522] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2440'. [ 537.461321][ T6775] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 537.638309][ T6775] usb 10-1: device descriptor read/64, error -71 [ 537.671610][T14527] FAULT_INJECTION: forcing a failure. [ 537.671610][T14527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 537.791036][T14527] CPU: 0 UID: 0 PID: 14527 Comm: syz.3.2441 Tainted: G L syzkaller #0 PREEMPT(full) [ 537.791057][T14527] Tainted: [L]=SOFTLOCKUP [ 537.791061][T14527] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 537.791069][T14527] Call Trace: [ 537.791074][T14527] [ 537.791079][T14527] dump_stack_lvl+0x100/0x190 [ 537.791098][T14527] should_fail_ex.cold+0x5/0xa [ 537.791112][T14527] _copy_from_user+0x2e/0xd0 [ 537.791132][T14527] get_compat_msghdr+0xb3/0x480 [ 537.791152][T14527] ? __pfx_get_compat_msghdr+0x10/0x10 [ 537.791176][T14527] ___sys_sendmsg+0x1b6/0x1e0 [ 537.791191][T14527] ? __pfx____sys_sendmsg+0x10/0x10 [ 537.791210][T14527] ? find_held_lock+0x2b/0x80 [ 537.791233][T14527] __sys_sendmsg+0x160/0x210 [ 537.791254][T14527] ? __pfx___sys_sendmsg+0x10/0x10 [ 537.791274][T14527] ? __pfx_ksys_write+0x10/0x10 [ 537.791289][T14527] __do_fast_syscall_32+0xe7/0x970 [ 537.791306][T14527] ? lockdep_hardirqs_on+0x78/0x100 [ 537.791334][T14527] do_fast_syscall_32+0x32/0x70 [ 537.791352][T14527] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 537.791367][T14527] RIP: 0023:0xf7fc6fec [ 537.791383][T14527] Code: Unable to access opcode bytes at 0xf7fc6fc2. [ 537.791389][T14527] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 537.791401][T14527] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000380 [ 537.791408][T14527] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 537.791414][T14527] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 537.791421][T14527] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 537.791428][T14527] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 537.791442][T14527] [ 537.904315][ T6775] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 538.148291][ T6775] usb 10-1: device descriptor read/64, error -71 [ 538.297310][ T6775] usb usb10-port1: attempt power cycle [ 539.041892][ T6775] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 539.111628][ T6775] usb 10-1: device descriptor read/8, error -71 [ 539.164317][ T64] Bluetooth: hci1: command tx timeout [ 539.317902][T14536] 9pnet_fd: Insufficient options for proto=fd [ 539.405976][ T6775] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 539.426235][ T6775] usb 10-1: device descriptor read/8, error -71 [ 539.447325][ T5151] EXT4-fs error: 5 callbacks suppressed [ 539.447339][ T5151] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 539.479110][ T5151] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 539.484096][ T5151] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 539.534773][ T6775] usb usb10-port1: unable to enumerate USB device [ 539.645371][T14463] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 539.650756][T14463] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 539.654330][T14463] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 539.676571][T14463] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 539.687586][T14463] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 539.713020][T14463] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 539.718201][T14463] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 539.726564][T14463] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 539.748051][T14556] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2449'. [ 539.759917][T14551] bond1: entered promiscuous mode [ 539.763358][T14551] 8021q: adding VLAN 0 to HW filter on device bond1 [ 540.219341][T14551] macvtap1: entered allmulticast mode [ 540.298991][T14558] bridge1: entered promiscuous mode [ 540.312236][T14558] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 540.884330][T14463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 540.932958][T14463] 8021q: adding VLAN 0 to HW filter on device team0 [ 540.951266][T12414] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.954073][T12414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 540.971073][T12414] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.973812][T12414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 541.244372][ T64] Bluetooth: hci1: command tx timeout [ 542.620541][ T5151] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 542.637483][ T5151] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 542.661591][ T5151] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 542.868450][T14617] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 542.873328][T14617] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 542.961933][T14624] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.964493][T14624] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.975294][T14463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 543.020660][T14463] veth0_vlan: entered promiscuous mode [ 543.023753][ T5826] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.026772][ T5826] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.032052][T14463] veth1_vlan: entered promiscuous mode [ 543.052854][T14463] veth0_macvtap: entered promiscuous mode [ 543.058539][T14463] veth1_macvtap: entered promiscuous mode [ 543.080162][T14463] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 543.087514][T14463] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 543.323879][ T64] Bluetooth: hci1: command tx timeout [ 543.506090][ T5826] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.514363][ T5826] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.674382][T13816] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.677175][T13816] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.700751][ T5826] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.724416][ T5826] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.750297][ T5826] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.765586][ T5826] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.889103][ T5826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.927363][T13816] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.074673][T14654] netlink: 'syz.2.2471': attribute type 1 has an invalid length. [ 544.114264][T14654] bond2: entered promiscuous mode [ 544.143221][T14654] 8021q: adding VLAN 0 to HW filter on device bond2 [ 544.389820][T14654] macvtap2: entered allmulticast mode [ 544.422290][T14656] bridge2: entered promiscuous mode [ 544.442710][T14656] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 544.643903][T12404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.646635][T12404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.738294][T12384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.742034][T12384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.874955][T14665] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2475'. [ 545.050349][T14669] netdevsim netdevsim5: Direct firmware load for . [ 545.050349][T14669] failed with error -2 [ 545.070915][T14669] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 545.070915][T14669] [ 545.092946][T14672] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2476'. [ 546.162806][ T5151] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 546.181709][ T5151] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 546.209912][ T5151] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 546.248319][T14691] net_ratelimit: 30 callbacks suppressed [ 546.248338][T14691] netlink: NAT attribute has 5 unknown bytes [ 546.256878][T14691] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 546.783820][ T5857] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 546.936216][ T5857] usb 10-1: config index 0 descriptor too short (expected 28277, got 36) [ 546.939162][ T5857] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 546.942532][ T5857] usb 10-1: config 0 has no interfaces? [ 546.946644][ T5857] usb 10-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 546.949714][ T5857] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.000744][T14706] netlink: 'syz.0.2485': attribute type 3 has an invalid length. [ 547.295182][T14723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2489'. [ 547.388003][T14725] netdevsim netdevsim0: Direct firmware load for . [ 547.388003][T14725] failed with error -2 [ 547.401863][T14725] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 547.401863][T14725] [ 547.460496][T14729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2491'. [ 548.329291][T14757] siw: device registration error -23 [ 548.664533][T14772] EXT4-fs error (device sda1): ext4_lookup:1785: inode #448: comm syz.0.2497: iget: checksum invalid [ 548.672515][T14772] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 548.675557][T14772] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 548.678789][T14772] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 549.326397][ T5151] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 549.398392][ T5151] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 549.420419][ T5151] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 549.464175][ T5857] usb 10-1: USB disconnect, device number 6 [ 549.658683][T14781] FAULT_INJECTION: forcing a failure. [ 549.658683][T14781] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 549.676160][T14781] CPU: 2 UID: 0 PID: 14781 Comm: syz.5.2501 Tainted: G L syzkaller #0 PREEMPT(full) [ 549.676182][T14781] Tainted: [L]=SOFTLOCKUP [ 549.676186][T14781] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 549.676194][T14781] Call Trace: [ 549.676199][T14781] [ 549.676205][T14781] dump_stack_lvl+0x100/0x190 [ 549.676224][T14781] should_fail_ex.cold+0x5/0xa [ 549.676238][T14781] _copy_to_user+0x32/0xd0 [ 549.676259][T14781] simple_read_from_buffer+0xcb/0x170 [ 549.676285][T14781] proc_fail_nth_read+0x1af/0x230 [ 549.676302][T14781] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 549.676318][T14781] ? rw_verify_area+0xce/0x6d0 [ 549.676336][T14781] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 549.676351][T14781] vfs_read+0x1e4/0xb40 [ 549.676364][T14781] ? __pfx_vfs_read+0x10/0x10 [ 549.676373][T14781] ? find_held_lock+0x2b/0x80 [ 549.676389][T14781] ? __fget_files+0x215/0x3d0 [ 549.676402][T14781] ? __fget_files+0x21f/0x3d0 [ 549.676416][T14781] ksys_read+0x12a/0x250 [ 549.676427][T14781] ? __pfx_ksys_read+0x10/0x10 [ 549.676441][T14781] do_int80_emulation+0x14b/0x720 [ 549.676460][T14781] asm_int80_emulation+0x1a/0x20 [ 549.676473][T14781] RIP: 0023:0xf71173eb [ 549.676483][T14781] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 549.676495][T14781] RSP: 002b:00000000f53d64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 549.676506][T14781] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53d65d0 [ 549.676514][T14781] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 549.676520][T14781] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 549.676527][T14781] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 549.676534][T14781] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 549.676547][T14781] [ 549.900133][T14786] macvtap1: entered allmulticast mode [ 551.479073][T14792] syzkaller0: entered promiscuous mode [ 551.483662][T14792] syzkaller0: entered allmulticast mode [ 551.489609][T14794] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2505'. [ 551.496264][T14792] FAULT_INJECTION: forcing a failure. [ 551.496264][T14792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 551.503655][T14792] CPU: 0 UID: 0 PID: 14792 Comm: syz.5.2504 Tainted: G L syzkaller #0 PREEMPT(full) [ 551.503676][T14792] Tainted: [L]=SOFTLOCKUP [ 551.503680][T14792] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 551.503688][T14792] Call Trace: [ 551.503692][T14792] [ 551.503697][T14792] dump_stack_lvl+0x100/0x190 [ 551.503716][T14792] should_fail_ex.cold+0x5/0xa [ 551.503730][T14792] _copy_from_user+0x2e/0xd0 [ 551.503751][T14792] get_compat_msghdr+0xb3/0x480 [ 551.503771][T14792] ? __pfx_get_compat_msghdr+0x10/0x10 [ 551.503794][T14792] ___sys_sendmsg+0x1b6/0x1e0 [ 551.503809][T14792] ? __pfx____sys_sendmsg+0x10/0x10 [ 551.503828][T14792] ? find_held_lock+0x2b/0x80 [ 551.503852][T14792] __sys_sendmsg+0x160/0x210 [ 551.503868][T14792] ? __pfx___sys_sendmsg+0x10/0x10 [ 551.503888][T14792] ? __pfx_ksys_write+0x10/0x10 [ 551.503903][T14792] __do_fast_syscall_32+0xe7/0x970 [ 551.503920][T14792] ? lockdep_hardirqs_on+0x78/0x100 [ 551.503936][T14792] do_fast_syscall_32+0x32/0x70 [ 551.503952][T14792] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 551.503968][T14792] RIP: 0023:0xf7f16fec [ 551.503984][T14792] Code: Unable to access opcode bytes at 0xf7f16fc2. [ 551.503989][T14792] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 551.504001][T14792] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800000c0 [ 551.504009][T14792] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 551.504015][T14792] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 551.504022][T14792] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 551.504029][T14792] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 551.504042][T14792] [ 552.480179][ T5151] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 552.500592][ T5151] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 552.515581][ T5151] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 552.617729][T14824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2511'. [ 552.916654][T14832] pim6reg: entered allmulticast mode [ 552.952134][T14832] pim6reg: left allmulticast mode [ 553.666334][T14843] netdevsim netdevsim0: Direct firmware load for . [ 553.666334][T14843] failed with error -2 [ 553.677413][T14843] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 553.677413][T14843] [ 553.781915][T14841] fuse: fd is not a fuse device [ 553.787935][T14850] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2519'. [ 553.806978][T14850] ebtables: wrong size: *len 168, entries_size 48, replsz 48 [ 553.924475][T14852] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2520'. [ 554.134932][T14858] fuse: root generation should be zero [ 554.429510][T14867] cgroup: fork rejected by pids controller in /syz5 [ 554.877970][T14893] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2530'. [ 555.523198][T13818] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.820363][T13818] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.029237][ T5151] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 556.038636][ T5151] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 556.046538][ T5151] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 556.116267][T13818] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.277356][ T5764] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 556.288008][ T5764] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 556.293871][ T5764] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 556.321179][ T5764] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 556.325048][ T5764] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 556.358999][T13818] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.421342][T14912] FAULT_INJECTION: forcing a failure. [ 556.421342][T14912] name failslab, interval 1, probability 0, space 0, times 0 [ 556.448554][T14912] CPU: 0 UID: 0 PID: 14912 Comm: syz.3.2536 Tainted: G L syzkaller #0 PREEMPT(full) [ 556.448575][T14912] Tainted: [L]=SOFTLOCKUP [ 556.448580][T14912] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 556.448587][T14912] Call Trace: [ 556.448591][T14912] [ 556.448597][T14912] dump_stack_lvl+0x100/0x190 [ 556.448616][T14912] should_fail_ex.cold+0x5/0xa [ 556.448630][T14912] should_failslab+0xc2/0x120 [ 556.448647][T14912] __kvmalloc_node_noprof+0x116/0x970 [ 556.448664][T14912] ? file_tty_write.isra.0+0x64e/0x890 [ 556.448687][T14912] file_tty_write.isra.0+0x64e/0x890 [ 556.448703][T14912] ? security_file_permission+0x76/0x210 [ 556.448721][T14912] ? rw_verify_area+0xce/0x6d0 [ 556.448740][T14912] vfs_write+0x6ac/0x1050 [ 556.448751][T14912] ? __pfx_tty_write+0x10/0x10 [ 556.448768][T14912] ? __pfx_vfs_write+0x10/0x10 [ 556.448777][T14912] ? find_held_lock+0x2b/0x80 [ 556.448801][T14912] ksys_write+0x12a/0x250 [ 556.448812][T14912] ? __pfx_ksys_write+0x10/0x10 [ 556.448821][T14912] ? ksys_write+0x1ac/0x250 [ 556.448831][T14912] ? __pfx_ksys_write+0x10/0x10 [ 556.448845][T14912] __do_fast_syscall_32+0xe7/0x970 [ 556.448862][T14912] ? lockdep_hardirqs_on+0x78/0x100 [ 556.448877][T14912] do_fast_syscall_32+0x32/0x70 [ 556.448894][T14912] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 556.448909][T14912] RIP: 0023:0xf7fc6fec [ 556.448923][T14912] Code: Unable to access opcode bytes at 0xf7fc6fc2. [ 556.448929][T14912] RSP: 002b:00000000f544450c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 556.448941][T14912] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080001980 [ 556.448948][T14912] RDX: 0000000000001006 RSI: 0000000000000000 RDI: 0000000000000000 [ 556.448955][T14912] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 556.448961][T14912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 556.448967][T14912] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 556.448981][T14912] [ 556.577090][T14915] 9p: Bad value for 'wfdno' [ 556.595580][T14924] 9p: Bad value for 'wfdno' [ 556.597397][T14925] 9p: Bad value for 'wfdno' [ 556.707238][T14929] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2540'. [ 556.784444][T14934] FAULT_INJECTION: forcing a failure. [ 556.784444][T14934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 556.788666][T14934] CPU: 3 UID: 0 PID: 14934 Comm: syz.0.2539 Tainted: G L syzkaller #0 PREEMPT(full) [ 556.788698][T14934] Tainted: [L]=SOFTLOCKUP [ 556.788702][T14934] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 556.788710][T14934] Call Trace: [ 556.788716][T14934] [ 556.788721][T14934] dump_stack_lvl+0x100/0x190 [ 556.788740][T14934] should_fail_ex.cold+0x5/0xa [ 556.788754][T14934] _copy_from_user+0x2e/0xd0 [ 556.788774][T14934] get_compat_msghdr+0xb3/0x480 [ 556.788794][T14934] ? __pfx_get_compat_msghdr+0x10/0x10 [ 556.788818][T14934] ___sys_sendmsg+0x1b6/0x1e0 [ 556.788833][T14934] ? __pfx____sys_sendmsg+0x10/0x10 [ 556.788853][T14934] ? find_held_lock+0x2b/0x80 [ 556.788877][T14934] __sys_sendmsg+0x160/0x210 [ 556.788894][T14934] ? __pfx___sys_sendmsg+0x10/0x10 [ 556.788915][T14934] ? __pfx_ksys_write+0x10/0x10 [ 556.788930][T14934] __do_fast_syscall_32+0xe7/0x970 [ 556.788947][T14934] ? lockdep_hardirqs_on+0x78/0x100 [ 556.788963][T14934] do_fast_syscall_32+0x32/0x70 [ 556.788980][T14934] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 556.789020][T14934] RIP: 0023:0xf70befec [ 556.789036][T14934] Code: Unable to access opcode bytes at 0xf70befc2. [ 556.789041][T14934] RSP: 002b:00000000f546b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 556.789053][T14934] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000140 [ 556.789060][T14934] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 556.789067][T14934] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 556.789073][T14934] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 556.789080][T14934] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 556.789094][T14934] [ 557.111969][T13818] bridge_slave_1: left allmulticast mode [ 557.119137][T13818] bridge_slave_1: left promiscuous mode [ 557.126505][T13818] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.145021][T13818] bridge_slave_0: left allmulticast mode [ 557.149509][T13818] bridge_slave_0: left promiscuous mode [ 557.152040][T13818] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.181490][T14947] FAULT_INJECTION: forcing a failure. [ 557.181490][T14947] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 557.193698][T14947] CPU: 0 UID: 0 PID: 14947 Comm: syz.0.2541 Tainted: G L syzkaller #0 PREEMPT(full) [ 557.193727][T14947] Tainted: [L]=SOFTLOCKUP [ 557.193733][T14947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 557.193744][T14947] Call Trace: [ 557.193749][T14947] [ 557.193756][T14947] dump_stack_lvl+0x100/0x190 [ 557.193784][T14947] should_fail_ex.cold+0x5/0xa [ 557.193804][T14947] _copy_from_user+0x2e/0xd0 [ 557.193832][T14947] move_addr_to_kernel+0x65/0x170 [ 557.193858][T14947] __sys_bind+0x11d/0x260 [ 557.193878][T14947] ? __pfx___sys_bind+0x10/0x10 [ 557.193896][T14947] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 557.193929][T14947] ? ksys_write+0x1ac/0x250 [ 557.193944][T14947] ? __pfx_ksys_write+0x10/0x10 [ 557.193961][T14947] __ia32_sys_bind+0x71/0xb0 [ 557.193980][T14947] ? lockdep_hardirqs_on+0x78/0x100 [ 557.194001][T14947] __do_fast_syscall_32+0xe7/0x970 [ 557.194024][T14947] ? lockdep_hardirqs_on+0x78/0x100 [ 557.194046][T14947] do_fast_syscall_32+0x32/0x70 [ 557.194066][T14947] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 557.194089][T14947] RIP: 0023:0xf70befec [ 557.194109][T14947] Code: Unable to access opcode bytes at 0xf70befc2. [ 557.194117][T14947] RSP: 002b:00000000f548c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000169 [ 557.194134][T14947] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000800000c0 [ 557.194145][T14947] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000000 [ 557.194155][T14947] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 557.194162][T14947] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 557.194171][T14947] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 557.194193][T14947] [ 558.016432][T14943] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 558.192098][T13818] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 558.202826][T13818] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 558.206830][T13818] bond0 (unregistering): Released all slaves [ 558.233843][ T5453] EXT4-fs error (device sda1): ext4_lookup:1785: inode #125: comm dhcpcd: iget: checksum invalid [ 558.344264][T14967] Bluetooth: MGMT ver 1.23 [ 558.471298][T14971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2548'. [ 558.689706][T14980] ptrace attach of ""[14982] was attempted by "/syz-executor exec"[14980] [ 559.128163][ T5453] 8021q: adding VLAN 0 to HW filter on device eth6 [ 559.170846][ T5151] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 559.204928][ T5151] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 559.219182][ T5151] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 559.266486][T13818] hsr_slave_0: left promiscuous mode [ 559.300131][T13818] hsr_slave_1: left promiscuous mode [ 559.309941][T13818] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 559.329381][T13818] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 559.348524][T13818] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 559.354513][T13818] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 559.537850][T13818] veth1_macvtap: left promiscuous mode [ 559.540156][T13818] veth0_macvtap: left promiscuous mode [ 559.542889][T13818] veth1_vlan: left promiscuous mode [ 559.552678][T13818] veth0_vlan: left promiscuous mode [ 559.562018][T14988] FAULT_INJECTION: forcing a failure. [ 559.562018][T14988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 559.566600][T14988] CPU: 3 UID: 0 PID: 14988 Comm: syz.3.2550 Tainted: G L syzkaller #0 PREEMPT(full) [ 559.566619][T14988] Tainted: [L]=SOFTLOCKUP [ 559.566624][T14988] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 559.566631][T14988] Call Trace: [ 559.566635][T14988] [ 559.566640][T14988] dump_stack_lvl+0x100/0x190 [ 559.566660][T14988] should_fail_ex.cold+0x5/0xa [ 559.566673][T14988] _copy_from_user+0x2e/0xd0 [ 559.566693][T14988] get_compat_msghdr+0xb3/0x480 [ 559.566713][T14988] ? __pfx_get_compat_msghdr+0x10/0x10 [ 559.566736][T14988] ___sys_sendmsg+0x1b6/0x1e0 [ 559.566751][T14988] ? __pfx____sys_sendmsg+0x10/0x10 [ 559.566770][T14988] ? find_held_lock+0x2b/0x80 [ 559.566796][T14988] __sys_sendmsg+0x160/0x210 [ 559.566817][T14988] ? __pfx___sys_sendmsg+0x10/0x10 [ 559.566845][T14988] ? __pfx_ksys_write+0x10/0x10 [ 559.566881][T14988] __do_fast_syscall_32+0xe7/0x970 [ 559.566906][T14988] ? lockdep_hardirqs_on+0x78/0x100 [ 559.566930][T14988] do_fast_syscall_32+0x32/0x70 [ 559.566952][T14988] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 559.566975][T14988] RIP: 0023:0xf7fc6fec [ 559.566995][T14988] Code: Unable to access opcode bytes at 0xf7fc6fc2. [ 559.567003][T14988] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 559.567020][T14988] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000140 [ 559.567031][T14988] RDX: 0000000000004040 RSI: 0000000000000000 RDI: 0000000000000000 [ 559.567041][T14988] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 559.567052][T14988] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 559.567062][T14988] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 559.567085][T14988] [ 561.086035][T13818] team0 (unregistering): Port device team_slave_1 removed [ 561.090129][T15020] FAULT_INJECTION: forcing a failure. [ 561.090129][T15020] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 561.095463][T15020] CPU: 2 UID: 0 PID: 15020 Comm: syz.3.2557 Tainted: G L syzkaller #0 PREEMPT(full) [ 561.095504][T15020] Tainted: [L]=SOFTLOCKUP [ 561.095510][T15020] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 561.095521][T15020] Call Trace: [ 561.095528][T15020] [ 561.095535][T15020] dump_stack_lvl+0x100/0x190 [ 561.095567][T15020] should_fail_ex.cold+0x5/0xa [ 561.095588][T15020] _copy_from_user+0x2e/0xd0 [ 561.095617][T15020] rfkill_fop_write+0x11e/0x580 [ 561.095643][T15020] ? __pfx_rfkill_fop_write+0x10/0x10 [ 561.095662][T15020] ? __pfx_bpf_lsm_file_permission+0x10/0x10 [ 561.095681][T15020] ? security_file_permission+0x76/0x210 [ 561.095707][T15020] ? rw_verify_area+0xce/0x6d0 [ 561.095736][T15020] vfs_write+0x2aa/0x1050 [ 561.095757][T15020] ? __pfx_rfkill_fop_write+0x10/0x10 [ 561.095780][T15020] ? __pfx_vfs_write+0x10/0x10 [ 561.095793][T15020] ? find_held_lock+0x2b/0x80 [ 561.095815][T15020] ? __fget_files+0x215/0x3d0 [ 561.095832][T15020] ? __fget_files+0x215/0x3d0 [ 561.095852][T15020] ? __fget_files+0x21f/0x3d0 [ 561.095876][T15020] ksys_write+0x1f8/0x250 [ 561.095891][T15020] ? __pfx_ksys_write+0x10/0x10 [ 561.095907][T15020] ? ksys_write+0x1ac/0x250 [ 561.095923][T15020] ? __pfx_ksys_write+0x10/0x10 [ 561.095943][T15020] __do_fast_syscall_32+0xe7/0x970 [ 561.095968][T15020] ? lockdep_hardirqs_on+0x78/0x100 [ 561.095992][T15020] do_fast_syscall_32+0x32/0x70 [ 561.096016][T15020] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 561.096037][T15020] RIP: 0023:0xf7fc6fec [ 561.096059][T15020] Code: Unable to access opcode bytes at 0xf7fc6fc2. [ 561.096066][T15020] RSP: 002b:00000000f546550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 561.096083][T15020] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080000080 [ 561.096093][T15020] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000000 [ 561.096103][T15020] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 561.096113][T15020] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 561.096122][T15020] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 561.096144][T15020] [ 561.475014][T13818] team0 (unregistering): Port device team_slave_0 removed [ 561.719557][ T5453] EXT4-fs error (device sda1): ext4_lookup:1785: inode #125: comm dhcpcd: iget: checksum invalid [ 562.263804][ T5151] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 562.299296][ T5151] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 562.350630][ T5151] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 562.404455][ T5453] 8021q: adding VLAN 0 to HW filter on device eth7 [ 562.534491][ T5453] EXT4-fs error (device sda1): ext4_lookup:1785: inode #125: comm dhcpcd: iget: checksum invalid [ 562.605233][T14907] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.611720][T14907] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.630080][T14907] bridge_slave_0: entered allmulticast mode [ 562.690018][T14907] bridge_slave_0: entered promiscuous mode [ 562.714940][T14907] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.732180][T14907] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.745332][T14907] bridge_slave_1: entered allmulticast mode [ 562.757825][T14907] bridge_slave_1: entered promiscuous mode [ 562.845751][T14907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 562.864306][T14907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 562.927760][T14907] team0: Port device team_slave_0 added [ 562.948702][T14907] team0: Port device team_slave_1 added [ 562.992836][T14907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 563.003957][T14907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 563.031536][T15063] fuse: fd is not a fuse device [ 563.032740][T14907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 563.048776][T14907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 563.048789][T14907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 563.048805][T14907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 563.104430][T15063] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2563'. [ 563.104446][T15063] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2563'. [ 563.140842][ T5453] 8021q: adding VLAN 0 to HW filter on device eth8 [ 563.161110][T14907] hsr_slave_0: entered promiscuous mode [ 563.161714][T14907] hsr_slave_1: entered promiscuous mode [ 563.162111][T14907] debugfs: 'hsr0' already exists in 'hsr' [ 563.162126][T14907] Cannot create hsr debugfs directory [ 563.206670][ T5453] EXT4-fs error (device sda1): ext4_lookup:1785: inode #125: comm dhcpcd: iget: checksum invalid [ 563.246201][ T38] Bluetooth: hci3: Frame reassembly failed (-84) [ 564.076729][ T5453] EXT4-fs error (device sda1): ext4_lookup:1785: inode #125: comm dhcpcd: iget: checksum invalid [ 564.622437][ T5453] EXT4-fs error (device sda1): ext4_lookup:1785: inode #125: comm dhcpcd: iget: checksum invalid [ 564.786988][T14907] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 564.803801][T14907] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 564.817573][T14907] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 564.834933][T14907] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 564.844036][T14907] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 564.866053][T14907] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 564.874705][T14907] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 564.890651][T14907] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 565.262019][ T5764] Bluetooth: hci3: command 0x1003 tx timeout [ 565.265827][ T64] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 565.441837][T14907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 565.501264][T14907] 8021q: adding VLAN 0 to HW filter on device team0 [ 565.518563][T12404] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.520944][T12404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 565.531606][ T5151] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 565.539436][ T5151] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 565.541622][T12404] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.546349][T12404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 565.546577][ T5151] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 566.348903][T14907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 567.050835][T14907] veth0_vlan: entered promiscuous mode [ 567.140082][T14907] veth1_vlan: entered promiscuous mode [ 567.149407][T15156] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 567.151905][T15156] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 567.154840][T15156] vhci_hcd vhci_hcd.0: Device attached [ 567.206970][T14907] veth0_macvtap: entered promiscuous mode [ 567.216721][T14907] veth1_macvtap: entered promiscuous mode [ 567.280639][T14907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 567.305288][T14907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 567.328693][T13818] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.332859][T13818] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.336926][ T5827] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 567.363782][T13818] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.383130][T13818] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.384340][T15163] netlink: 'syz.0.2575': attribute type 1 has an invalid length. [ 567.394587][ T5827] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 567.682467][T12384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.686252][T12384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.810521][T12384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.834750][T12384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.860641][T15158] vhci_hcd: connection reset by peer [ 567.862614][T13816] vhci_hcd vhci_hcd.3: stop threads [ 567.864614][T13816] vhci_hcd vhci_hcd.3: release socket [ 567.868194][T13816] vhci_hcd vhci_hcd.3: disconnect device [ 568.733803][ T5151] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 568.741486][ T5151] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 568.971017][ T5151] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 569.976506][T15188] /dev/loop0: Can't lookup blockdev [ 572.368827][ T42] audit: type=1800 audit(1785723751.330:431): pid=15215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2582" name="file0" dev="overlay" ino=3168 res=0 errno=0 [ 572.379069][ T5151] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 572.400336][ T5151] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 572.418649][ T5151] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 572.473289][T15218] netlink: 'syz.5.2584': attribute type 21 has an invalid length. [ 572.485249][T15218] IPv6: NLM_F_CREATE should be specified when creating new route [ 572.499731][T15218] netlink: 'syz.5.2584': attribute type 1 has an invalid length. [ 572.523921][ T5827] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 572.528096][ T42] audit: type=1326 audit(1785723751.490:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15217 comm="syz.5.2584" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 572.557963][ T42] audit: type=1326 audit(1785723751.490:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15217 comm="syz.5.2584" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 572.598297][ T42] audit: type=1326 audit(1785723751.510:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15217 comm="syz.5.2584" exe="/syz-executor" sig=0 arch=40000003 syscall=186 compat=1 ip=0xf707efec code=0x7ffc0000 [ 572.609511][ T42] audit: type=1326 audit(1785723751.510:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15217 comm="syz.5.2584" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 572.619196][ T42] audit: type=1326 audit(1785723751.510:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15217 comm="syz.5.2584" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 572.629391][ T42] audit: type=1326 audit(1785723751.520:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15217 comm="syz.5.2584" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf707efec code=0x7ffc0000 [ 572.640985][ T42] audit: type=1326 audit(1785723751.520:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15217 comm="syz.5.2584" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 572.645397][ C0] sched: DL replenish lagged too much [ 572.650277][ T42] audit: type=1326 audit(1785723751.520:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15217 comm="syz.5.2584" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 572.657098][ T42] audit: type=1326 audit(1785723751.520:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15217 comm="syz.5.2584" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf707efec code=0x7ffc0000 [ 573.204472][T15226] siw: device registration error -23 [ 574.309375][T15231] ima: policy update completed [ 574.357662][T15234] FAULT_INJECTION: forcing a failure. [ 574.357662][T15234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 574.361673][T15234] CPU: 3 UID: 0 PID: 15234 Comm: syz.0.2590 Tainted: G L syzkaller #0 PREEMPT(full) [ 574.361692][T15234] Tainted: [L]=SOFTLOCKUP [ 574.361696][T15234] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 574.361703][T15234] Call Trace: [ 574.361709][T15234] [ 574.361714][T15234] dump_stack_lvl+0x100/0x190 [ 574.361736][T15234] should_fail_ex.cold+0x5/0xa [ 574.361752][T15234] _copy_to_user+0x32/0xd0 [ 574.361773][T15234] simple_read_from_buffer+0xcb/0x170 [ 574.361796][T15234] proc_fail_nth_read+0x1af/0x230 [ 574.361815][T15234] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 574.361831][T15234] ? rw_verify_area+0xce/0x6d0 [ 574.361848][T15234] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 574.361863][T15234] vfs_read+0x1e4/0xb40 [ 574.361876][T15234] ? __pfx_vfs_read+0x10/0x10 [ 574.361886][T15234] ? find_held_lock+0x2b/0x80 [ 574.361902][T15234] ? __fget_files+0x215/0x3d0 [ 574.361915][T15234] ? __fget_files+0x21f/0x3d0 [ 574.361929][T15234] ksys_read+0x12a/0x250 [ 574.361939][T15234] ? __pfx_ksys_read+0x10/0x10 [ 574.361954][T15234] do_int80_emulation+0x14b/0x720 [ 574.361973][T15234] asm_int80_emulation+0x1a/0x20 [ 574.361985][T15234] RIP: 0023:0xf71f73eb [ 574.361995][T15234] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 574.362006][T15234] RSP: 002b:00000000f54ad4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 574.362018][T15234] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f54ad5d0 [ 574.362025][T15234] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 574.362031][T15234] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 574.362038][T15234] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 574.362044][T15234] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 574.362058][T15234] [ 575.472321][T15252] ima: policy update completed [ 575.490734][ T5151] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 575.494971][ T5151] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 575.498538][ T5151] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 575.510257][T15194] [ 575.511108][T15194] ====================================================== [ 575.513472][T15194] WARNING: possible circular locking dependency detected [ 575.515747][T15194] syzkaller #0 Tainted: G L [ 575.518339][T15194] ------------------------------------------------------ [ 575.520868][T15194] udevd/15194 is trying to acquire lock: [ 575.522673][T15194] ffff88802a8269a8 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x5ab/0x2350 [ 575.526056][T15194] [ 575.526056][T15194] but task is already holding lock: [ 575.528393][T15194] ffff88804d032450 (sb_writers#5){.+.+}-{0:0}, at: path_openat+0x2929/0x4280 [ 575.531193][T15194] [ 575.531193][T15194] which lock already depends on the new lock. [ 575.531193][T15194] [ 575.534467][T15194] [ 575.534467][T15194] the existing dependency chain (in reverse order) is: [ 575.537635][T15194] [ 575.537635][T15194] -> #4 (sb_writers#5){.+.+}-{0:0}: [ 575.540517][T15194] lock_acquire+0x1b9/0x370 [ 575.542141][T15194] mnt_want_write+0x6f/0x410 [ 575.543747][T15194] path_openat+0xad9/0x4280 [ 575.545399][T15194] do_file_open+0x20e/0x430 [ 575.546884][T15194] file_open_name+0x1c3/0x3e0 [ 575.548581][T15194] filp_open+0x2e/0x50 [ 575.550077][T15194] fsg_lun_open+0x6b/0x7b0 [ 575.551672][T15194] fsg_store_file+0x1e7/0x450 [ 575.553328][T15194] configfs_write_iter+0x302/0x4e0 [ 575.555161][T15194] vfs_write+0x6ac/0x1050 [ 575.556899][T15194] ksys_write+0x12a/0x250 [ 575.558500][T15194] __do_fast_syscall_32+0xe7/0x970 [ 575.560393][T15194] do_fast_syscall_32+0x32/0x70 [ 575.562447][T15194] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 575.565006][T15194] [ 575.565006][T15194] -> #3 (&common->filesem){+.+.}-{4:4}: [ 575.567625][T15194] lock_acquire+0x1b9/0x370 [ 575.569183][T15194] down_write+0x8b/0x1f0 [ 575.570674][T15194] fsg_store_file+0x193/0x450 [ 575.572285][T15194] configfs_write_iter+0x302/0x4e0 [ 575.574220][T15194] vfs_write+0x6ac/0x1050 [ 575.575844][T15194] ksys_write+0x12a/0x250 [ 575.577493][T15194] __do_fast_syscall_32+0xe7/0x970 [ 575.579216][T15194] do_fast_syscall_32+0x32/0x70 [ 575.581139][T15194] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 575.583491][T15194] [ 575.583491][T15194] -> #2 (&p->frag_sem){.+.+}-{4:4}: [ 575.586270][T15194] lock_acquire+0x1b9/0x370 [ 575.588173][T15194] down_read+0x99/0x4c0 [ 575.589988][T15194] configfs_write_iter+0x218/0x4e0 [ 575.592147][T15194] vfs_write+0x6ac/0x1050 [ 575.593699][T15194] ksys_write+0x12a/0x250 [ 575.595187][T15194] __do_fast_syscall_32+0xe7/0x970 [ 575.596957][T15194] do_fast_syscall_32+0x32/0x70 [ 575.598629][T15194] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 575.600672][T15194] [ 575.600672][T15194] -> #1 (&buffer->mutex){+.+.}-{4:4}: [ 575.602993][T15194] lock_acquire+0x1b9/0x370 [ 575.604537][T15194] __mutex_lock+0x1a4/0x1bd0 [ 575.606203][T15194] configfs_read_iter+0x79/0x6f0 [ 575.607889][T15194] __kernel_read+0x397/0xad0 [ 575.609477][T15194] integrity_kernel_read+0x7e/0xb0 [ 575.611171][T15194] ima_calc_file_hash_tfm+0x25e/0x350 [ 575.612981][T15194] ima_calc_file_hash+0x1e3/0x380 [ 575.614708][T15194] ima_collect_measurement+0x94f/0xb30 [ 575.616593][T15194] process_measurement+0xdfe/0x2350 [ 575.618424][T15194] ima_file_check+0xcc/0x120 [ 575.620064][T15194] security_file_post_open+0xc4/0x210 [ 575.621957][T15194] path_openat+0x985/0x4280 [ 575.623521][T15194] do_file_open+0x20e/0x430 [ 575.625137][T15194] do_sys_openat2+0x10f/0x1e0 [ 575.626736][T15194] __ia32_compat_sys_openat+0x12d/0x210 [ 575.628658][T15194] __do_fast_syscall_32+0xe7/0x970 [ 575.630434][T15194] do_fast_syscall_32+0x32/0x70 [ 575.632140][T15194] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 575.634355][T15194] [ 575.634355][T15194] -> #0 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 575.637059][T15194] check_prev_add+0xeb/0xe60 [ 575.639066][T15194] __lock_acquire+0x136c/0x1a40 [ 575.641260][T15194] lock_acquire+0x1b9/0x370 [ 575.643244][T15194] __mutex_lock+0x1a4/0x1bd0 [ 575.645286][T15194] process_measurement+0x5ab/0x2350 [ 575.647074][T15194] ima_file_check+0xcc/0x120 [ 575.648698][T15194] security_file_post_open+0xc4/0x210 [ 575.650621][T15194] path_openat+0x985/0x4280 [ 575.652209][T15194] do_file_open+0x20e/0x430 [ 575.653816][T15194] do_sys_openat2+0x10f/0x1e0 [ 575.655477][T15194] __x64_sys_openat+0x12d/0x210 [ 575.657255][T15194] do_syscall_64+0x115/0x840 [ 575.658891][T15194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.660896][T15194] [ 575.660896][T15194] other info that might help us debug this: [ 575.660896][T15194] [ 575.664070][T15194] Chain exists of: [ 575.664070][T15194] &ima_iint_mutex_key[depth] --> &common->filesem --> sb_writers#5 [ 575.664070][T15194] [ 575.668277][T15194] Possible unsafe locking scenario: [ 575.668277][T15194] [ 575.670635][T15194] CPU0 CPU1 [ 575.672394][T15194] ---- ---- [ 575.674171][T15194] rlock(sb_writers#5); [ 575.675852][T15194] lock(&common->filesem); [ 575.678594][T15194] lock(sb_writers#5); [ 575.681270][T15194] lock(&ima_iint_mutex_key[depth]); [ 575.683367][T15194] [ 575.683367][T15194] *** DEADLOCK *** [ 575.683367][T15194] [ 575.686136][T15194] 1 lock held by udevd/15194: [ 575.687665][T15194] #0: ffff88804d032450 (sb_writers#5){.+.+}-{0:0}, at: path_openat+0x2929/0x4280 [ 575.690621][T15194] [ 575.690621][T15194] stack backtrace: [ 575.692470][T15194] CPU: 3 UID: 0 PID: 15194 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 575.692488][T15194] Tainted: [L]=SOFTLOCKUP SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 575.692493][T15194] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 575.692500][T15194] Call Trace: [ 575.692506][T15194] [ 575.692512][T15194] dump_stack_lvl+0x100/0x190 [ 575.692529][T15194] print_circular_bug.cold+0x178/0x1c7 [ 575.692548][T15194] check_noncircular+0x146/0x160 [ 575.692566][T15194] ? stack_trace_save+0x8e/0xc0 [ 575.692589][T15194] check_prev_add+0xeb/0xe60 [ 575.692607][T15194] ? kasan_save_stack+0x3f/0x50 [ 575.692624][T15194] __lock_acquire+0x136c/0x1a40 [ 575.692644][T15194] lock_acquire+0x1b9/0x370 [ 575.692661][T15194] ? process_measurement+0x5ab/0x2350 [ 575.692678][T15194] ? __pfx___might_resched+0x10/0x10 [ 575.692699][T15194] __mutex_lock+0x1a4/0x1bd0 [ 575.692716][T15194] ? process_measurement+0x5ab/0x2350 [ 575.692729][T15194] ? process_measurement+0x5ab/0x2350 [ 575.692743][T15194] ? __pfx___mutex_lock+0x10/0x10 [ 575.692758][T15194] ? rcu_is_watching+0x12/0xc0 [ 575.692772][T15194] ? trace_kmem_cache_alloc+0xdd/0x100 [ 575.692789][T15194] ? __kasan_slab_alloc+0x89/0x90 [ 575.692806][T15194] ? process_measurement+0x5ab/0x2350 [ 575.692819][T15194] process_measurement+0x5ab/0x2350 [ 575.692834][T15194] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 575.692851][T15194] ? __pfx_process_measurement+0x10/0x10 [ 575.692864][T15194] ? tomoyo_check_open_permission+0x211/0x3c0 [ 575.692879][T15194] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 575.692896][T15194] ? hook_file_open+0x24f/0x8f0 [ 575.692973][T15194] ? __pfx___fsnotify_parent+0x10/0x10 [ 575.692993][T15194] ima_file_check+0xcc/0x120 [ 575.693008][T15194] ? __pfx_ima_file_check+0x10/0x10 [ 575.693022][T15194] ? vfs_open+0x2e3/0x3f0 [ 575.693036][T15194] security_file_post_open+0xc4/0x210 [ 575.693053][T15194] path_openat+0x985/0x4280 [ 575.693067][T15194] ? __pfx_path_openat+0x10/0x10 [ 575.693080][T15194] do_file_open+0x20e/0x430 [ 575.693091][T15194] ? __pfx_do_file_open+0x10/0x10 [ 575.693107][T15194] ? alloc_fd+0x471/0x7a0 [ 575.693118][T15194] ? do_getname+0x191/0x390 [ 575.693132][T15194] do_sys_openat2+0x10f/0x1e0 [ 575.693147][T15194] ? __pfx_do_sys_openat2+0x10/0x10 [ 575.693163][T15194] __x64_sys_openat+0x12d/0x210 [ 575.693179][T15194] ? __pfx___x64_sys_openat+0x10/0x10 [ 575.693196][T15194] do_syscall_64+0x115/0x840 [ 575.693211][T15194] ? clear_bhb_loop+0x40/0x90 [ 575.693224][T15194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.693236][T15194] RIP: 0033:0x7f90bc2a7407 [ 575.693248][T15194] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 575.693259][T15194] RSP: 002b:00007ffcb2f4cbc0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 575.693272][T15194] RAX: ffffffffffffffda RBX: 00007f90bcaa4880 RCX: 00007f90bc2a7407 [ 575.693279][T15194] RDX: 00000000000a0241 RSI: 00007ffcb2f4d880 RDI: ffffffffffffff9c [ 575.693287][T15194] RBP: 000055d2a1bd6200 R08: 0000000000000000 R09: 0000000000000000 [ 575.693294][T15194] R10: 0000000000000124 R11: 0000000000000202 R12: 000055d2a1af4f30 [ 575.693301][T15194] R13: 00007ffcb2f4d880 R14: 00007ffcb2f4d480 R15: 00007ffcb2f4d080 [ 575.693311][T15194] [ 576.025226][T15260] could not allocate digest TFM handle rmd256-generic [ 576.713276][ T5611] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.718789][T15251] EXT4-fs error (device sda1) in ext4_free_inode:363: Corrupt filesystem [ 576.725517][T15251] EXT4-fs error (device sda1) in ext4_free_inode:363: Corrupt filesystem [ 576.829427][ T5611] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.935383][T13655] EXT4-fs error (device sda1) in ext4_free_inode:363: Corrupt filesystem [ 576.942883][T13655] EXT4-fs error (device sda1) in ext4_free_inode:363: Corrupt filesystem [ 576.996787][ T5611] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.055537][ T5611] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.184414][ T5611] bridge_slave_1: left allmulticast mode [ 577.186472][ T5611] bridge_slave_1: left promiscuous mode [ 577.188271][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.196608][ T5611] bridge_slave_0: left allmulticast mode [ 577.203686][ T5611] bridge_slave_0: left promiscuous mode [ 577.208404][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.287882][ T5611] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 577.293235][ T5611] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 577.302740][ T5611] bond0 (unregistering): Released all slaves [ 577.312750][ T5453] 8021q: adding VLAN 0 to HW filter on device eth6 [ 577.472343][ T5453] 8021q: adding VLAN 0 to HW filter on device eth7 [ 577.488668][ T5453] EXT4-fs error: 4 callbacks suppressed [ 577.488685][ T5453] EXT4-fs error (device sda1): ext4_lookup:1785: inode #125: comm dhcpcd: iget: checksum invalid [ 577.632630][T15258] EXT4-fs error (device sda1) in ext4_free_inode:363: Corrupt filesystem [ 577.648536][T15258] EXT4-fs error (device sda1) in ext4_free_inode:363: Corrupt filesystem [ 577.658041][ T5453] 8021q: adding VLAN 0 to HW filter on device eth8 [ 577.667245][ T5453] EXT4-fs error (device sda1): ext4_lookup:1785: inode #125: comm dhcpcd: iget: checksum invalid [ 577.712831][ T5611] hsr_slave_0: left promiscuous mode [ 577.715725][ T5611] hsr_slave_1: left promiscuous mode [ 577.718304][ T5611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 577.720944][ T5611] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 577.725755][ T5611] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 577.728795][ T5611] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 577.734989][ T5611] veth1_macvtap: left promiscuous mode [ 577.737188][ T5611] veth0_macvtap: left promiscuous mode [ 577.738913][ T5611] veth1_vlan: left promiscuous mode [ 577.742126][T15258] EXT4-fs error (device sda1) in ext4_free_inode:363: Corrupt filesystem [ 577.744444][ T5611] veth0_vlan: left promiscuous mode [ 577.815167][ T5611] team0 (unregistering): Port device team_slave_1 removed [ 577.820358][ T5611] team0 (unregistering): Port device team_slave_0 removed [ 577.862674][ T5453] 8021q: adding VLAN 0 to HW filter on device eth9 [ 577.866217][ T5453] EXT4-fs error (device sda1): ext4_lookup:1785: inode #125: comm dhcpcd: iget: checksum invalid [ 577.887996][ T5453] EXT4-fs error (device sda1): ext4_lookup:1785: inode #125: comm dhcpcd: iget: checksum invalid [ 577.910371][ T5453] EXT4-fs error (device sda1): ext4_lookup:1785: inode #125: comm dhcpcd: iget: checksum invalid [ 577.948014][ T5453] EXT4-fs error (device sda1): ext4_lookup:1785: inode #125: comm dhcpcd: iget: checksum invalid [ 578.428046][ T42] kauditd_printk_skb: 2102 callbacks suppressed [ 578.428058][ T42] audit: type=1800 audit(1785723757.400:2543): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=229915 res=0 errno=0 [ 578.437887][ T42] audit: type=1800 audit(1785723757.410:2544): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=230001 res=0 errno=0 [ 578.447252][ T42] audit: type=1800 audit(1785723757.420:2545): pid=15194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=229920 res=0 errno=0 [ 578.460072][ T5453] EXT4-fs error (device sda1): ext4_lookup:1785: inode #125: comm dhcpcd: iget: checksum invalid [ 578.462945][ T42] audit: type=1800 audit(1785723757.420:2546): pid=15194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=229924 res=0 errno=0 [ 578.470641][ T42] audit: type=1800 audit(1785723757.420:2547): pid=15194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=229923 res=0 errno=0 [ 578.476884][ T42] audit: type=1800 audit(1785723757.420:2548): pid=15194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=229926 res=0 errno=0 [ 578.485708][ T42] audit: type=1800 audit(1785723757.420:2549): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=230087 res=0 errno=0 [ 578.486094][ T5611] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.494506][ T42] audit: type=1800 audit(1785723757.420:2550): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=230173 res=0 errno=0 [ 578.505110][ T42] audit: type=1800 audit(1785723757.430:2551): pid=15095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=230092 res=0 errno=0 [ 578.511772][ T42] audit: type=1800 audit(1785723757.430:2552): pid=15095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=230096 res=0 errno=0 [ 578.556828][ T5611] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.600594][ T5611] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.607627][ T5453] 8021q: adding VLAN 0 to HW filter on device eth10 [ 578.681894][ T5611] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.765062][ T5611] bridge_slave_1: left allmulticast mode [ 578.766900][ T5611] bridge_slave_1: left promiscuous mode [ 578.768810][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.771900][ T5611] bridge_slave_0: left allmulticast mode [ 578.777193][ T5611] bridge_slave_0: left promiscuous mode [ 578.779074][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.837451][ T5611] bridge_slave_1: left allmulticast mode [ 578.839796][ T5611] bridge_slave_1: left promiscuous mode [ 578.842159][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.848519][ T5611] bridge_slave_0: left allmulticast mode [ 578.850774][ T5611] bridge_slave_0: left promiscuous mode [ 578.853141][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.038977][ T5611] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 579.042446][ T5611] bridge2 (unregistering): left promiscuous mode [ 579.058921][ T5611] bond2 (unregistering): (slave bridge3): Releasing backup interface [ 579.061737][ T5611] bridge3 (unregistering): left promiscuous mode [ 579.068022][ T5611] bond4 (unregistering): (slave bridge4): Releasing backup interface [ 579.070763][ T5611] bridge4 (unregistering): left promiscuous mode [ 579.075866][ T5611] bond5 (unregistering): (slave bridge5): Releasing backup interface [ 579.078465][ T5611] bridge5 (unregistering): left promiscuous mode [ 579.085329][ T5611] bond7 (unregistering): (slave bridge7): Releasing active interface [ 579.091516][ T5611] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 579.095279][ T5611] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 579.098438][ T5611] bond0 (unregistering): Released all slaves [ 579.104562][ T5611] bond1 (unregistering): Released all slaves [ 579.108871][ T5611] bond2 (unregistering): Released all slaves [ 579.112941][ T5611] bond3 (unregistering): Released all slaves [ 579.119976][ T5611] bond4 (unregistering): Released all slaves [ 579.128234][ T5611] bond5 (unregistering): Released all slaves [ 579.135465][ T5611] bond6 (unregistering): Released all slaves [ 579.147404][ T5611] bond7 (unregistering): Released all slaves [ 579.187806][ T5611] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 579.193195][ T5611] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 579.198723][ T5611] bond0 (unregistering): Released all slaves [ 579.202996][ T5453] 8021q: adding VLAN 0 to HW filter on device eth12 [ 579.284463][ T5611] tipc: Left network mode [ 579.380269][ T5453] 8021q: adding VLAN 0 to HW filter on device eth13 [ 579.529376][ T5453] 8021q: adding VLAN 0 to HW filter on device eth11 [ 579.661763][ T5453] 8021q: adding VLAN 0 to HW filter on device eth14 [ 579.807209][ T5611] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 579.810709][ T5611] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 579.819092][ T5611] hsr_slave_0: left promiscuous mode [ 579.821466][ T5611] hsr_slave_1: left promiscuous mode [ 579.823503][ T5611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 579.826357][ T5611] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 579.829186][ T5611] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 579.831537][ T5611] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 579.837889][ T5611] veth1_macvtap: left promiscuous mode [ 579.840183][ T5611] veth0_macvtap: left promiscuous mode [ 579.842533][ T5611] veth1_vlan: left promiscuous mode [ 579.844844][ T5611] veth0_vlan: left promiscuous mode [ 580.062971][ T5611] team0 (unregistering): Port device team_slave_1 removed [ 580.090341][ T5611] team0 (unregistering): Port device team_slave_0 removed [ 580.136471][ T5453] 8021q: adding VLAN 0 to HW filter on device eth15 [ 580.337749][ T5453] 8021q: adding VLAN 0 to HW filter on device eth16 [ 580.536582][ T5453] 8021q: adding VLAN 0 to HW filter on device eth17 [ 580.737635][ T5611] IPVS: stop unused estimator thread 0... [ 583.913436][ T5151] EXT4-fs error: 18 callbacks suppressed [ 583.913450][ T5151] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 583.918964][ T5151] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 583.922462][ T5151] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid