last executing test programs: 1m56.898825251s ago: executing program 3 (id=328): userfaultfd(0x801) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040003}, 0x0) socket$netlink(0x10, 0x3, 0xc) syz_open_dev$sndctrl(&(0x7f00000070c0), 0x1, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000040)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @empty}, @echo={0x8, 0x0, 0x0, 0x700, 0x0, '\x00\x00\x00\x00'}}}}}, 0x0) 1m56.829995922s ago: executing program 3 (id=329): sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5bf08cece5b99490}, 0x8000) kexec_load(0x3, 0x2, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b", 0x7f, 0x5, 0xffffffff}, {0x0, 0x0, 0x100, 0x9}], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0x50, 0x117, 0x2, 0x3c, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d43"}], 0x50, 0x40800}], 0x1, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m56.706710752s ago: executing program 3 (id=336): r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000140)={[{@uuid_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@verity_require}], [{@smackfshat={'smackfshat', 0x3d, '[*'}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@dont_hash}, {@obj_type={'obj_type', 0x3d, 'overlay\x00'}}, {@context={'context', 0x3d, 'staff_u'}}, {@pcr={'pcr', 0x3d, 0xc}}]}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x3, 0x0, 0x3b, 0x719d}, {0xfff8, 0x6, 0x7, 0x2}]}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0xc0ed0000, &(0x7f0000000280)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}}) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000040)=ANY=[], 0x6) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000700)='./bus\x00', 0x149100, 0x80) getdents64(r3, 0x0, 0x0) mkdirat(r3, &(0x7f0000000080)='./file0\x00', 0x0) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) socket$l2tp6(0xa, 0x2, 0x73) (async) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) (async) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000140)={[{@uuid_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@verity_require}], [{@smackfshat={'smackfshat', 0x3d, '[*'}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@dont_hash}, {@obj_type={'obj_type', 0x3d, 'overlay\x00'}}, {@context={'context', 0x3d, 'staff_u'}}, {@pcr={'pcr', 0x3d, 0xc}}]}) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x3, 0x0, 0x3b, 0x719d}, {0xfff8, 0x6, 0x7, 0x2}]}) (async) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount$fuseblk(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0xc0ed0000, &(0x7f0000000280)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}}) (async) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r2, &(0x7f0000000040)=ANY=[], 0x6) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000700)='./bus\x00', 0x149100, 0x80) (async) getdents64(r3, 0x0, 0x0) (async) mkdirat(r3, &(0x7f0000000080)='./file0\x00', 0x0) (async) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) (async) 1m56.630347534s ago: executing program 3 (id=339): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x63148, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800e00010069703665727370616e000000100002800400120006001800177b000008", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) sendmmsg$inet(r0, &(0x7f0000000140)=[{{&(0x7f0000000080)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @remote, @remote}}}], 0x20}}], 0x1, 0x0) 1m56.555992091s ago: executing program 3 (id=342): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='0x1234\x00', 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='0x5678\x00', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/loopback.usb0\x00', 0x1ff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r4, &(0x7f0000000440)='\x00\x00\x00', 0x3) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_CAP_XEN_HVM(r1, 0x4068aea3, &(0x7f0000000300)={0x26, 0x0, 0x50}) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0), 0x4) ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000580)={0xd, @win={{0x1, 0x401, 0x1, 0x9}, 0x3, 0xfff, &(0x7f0000000440)={{0xfffffffe, 0x8, 0x0, 0xd64}, &(0x7f0000000380)={{0x7, 0x9, 0x8, 0xbe2}, &(0x7f00000001c0)={{0x7fffffff, 0x5, 0x3, 0x1}, &(0x7f00000000c0)={{0x5, 0x3, 0x40000, 0xfff}}}}}, 0x8001, &(0x7f0000000480)="bc8c9ae60b0512555d7492181b0d16cbe315b275f997ea4f9fbcd4bfe3180e032f8464aa6fd030eeeb02fbe645fbcb6760a774e24fefd8d2aafb7cff81c75627dc02082814adf5e0579f8504ebd0392454884f79edde1ff946d9afc42421e7046a8114b74cdb686f3e2dbb1ce958904f89c4606ad615a8ca1afb8a73842b09b6062bca240e21181ead5692facce9a1d289259c9d9cac1fe13d6050ee55d3a01757a48fb9f55e9a526151f7efb8fd9794eba426a32a08886071c1bf8d90a6d0d297010268cac1a72ff5e9390a3fc547c337f190db2b0a89c5277c2a4940b15ba13aec9dbc3fc55317971cf1ee6c512d69ac196ff8d2c74f", 0x5}}) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000300)="d3", 0x1}], 0x1) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x202, 0xa, 0x4, 0x0, 0xfd}) ioctl$VIDIOC_REQBUFS(r6, 0xc0585609, &(0x7f0000000280)={0x0, 0xa}) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) 1m56.380626669s ago: executing program 3 (id=343): mkdir(&(0x7f0000000040)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./mysys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./mysys/bus/pci/devices/0000:00:01.0/driver/unbind\x00', 0x1, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./mysys/bus/pci/devices/0000:00:01.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='0000:00:01.0', 0xc) mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./config/cluster/mycluster\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000000)='./config/cluster/mycluster/heartbeat/dead_threshold\x00', 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (async) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mysys/bus/pci/drivers/xhci_hcd/new_id\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='1af4 1050', 0x9) 1m44.151001899s ago: executing program 32 (id=583): connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x60, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x60}, 0x1, 0x0, 0x0, 0x64008814}, 0x4000060) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000740)={&(0x7f0000000100)="69f1924b297e", &(0x7f0000000440)=""/244, &(0x7f0000000540)="6744e40db3966fd4653cf9ad2d7c83a2694c99b18a799d3336d01ae96164fbe398c74c1b0e9c7de14ddca01ce68ccabc1d07ab302a801f39227e06094aabfd15e7e3cf402ec52081bb4c9ebafca2cd3575153fb08ce3b2ab69ebcb0f499e185abd013de1ceb9c85ff17e31af33d86b932e7906589bc952ecd47185ee4d13539c20dba2f18c7cfa175837066071b20d037c506a9d16a912321ab866825e1bf059c1185f9e34a01b54ebc1a18d7cd94dfd224d7b7da89b8d52f880b3a4b1edcca2eb94b2fc330da46b01c98b7fefbc9613cf2934d7bdc1d41da86077c8ee5674", &(0x7f0000000640)="0fb7106a9a66f10d612e9aa82f2bb22eb3c815225c393ab41bfac59cd78e2a502036e7d70942a950d8c822dafa260a8703f700f9d87fa2b0534bcdf10d30e6bf6b5d7bf37059a04a275a617104601fc17714b4fb91f327ed2c3964e7c6611876fa564375af30bdeb866c9626b3afe43e50d8ea3f399e6beab2d7d6210b5db3de2a5a33e9c9f2ab0bfd363b121c5e3b380fa6736d40ef67f9e83e17a6e2cdc86a4fa7b5effd3bd19d73a393ce7f63c40b120519ecb2e6ea79898ea0f0da6754f1a30746a87362b421314cd0032be613dd", 0x6, r7, 0x4}, 0x38) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x80, 0x89, 0x0, 0x3, 0x8d], 0x100000, 0x2c08c6}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap$binder(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x800) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m41.337118527s ago: executing program 33 (id=343): mkdir(&(0x7f0000000040)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./mysys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./mysys/bus/pci/devices/0000:00:01.0/driver/unbind\x00', 0x1, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./mysys/bus/pci/devices/0000:00:01.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='0000:00:01.0', 0xc) mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./config/cluster/mycluster\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000000)='./config/cluster/mycluster/heartbeat/dead_threshold\x00', 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (async) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mysys/bus/pci/drivers/xhci_hcd/new_id\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='1af4 1050', 0x9) 1m8.090249321s ago: executing program 5 (id=1329): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) pipe2(&(0x7f0000000100)={0x0, 0x0}, 0x0) write(r2, &(0x7f0000000110)="00000001", 0x4) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x140, 0x0) poll(&(0x7f0000000240)=[{r3, 0x3104}], 0x1, 0x7) mkdirat(r3, &(0x7f00000001c0)='127.0.0.1:/export\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='127.0.0.1:/export\x00', &(0x7f00000000c0)='./nfs_mnt\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000140)='addr=127.0.0.1,proto=tcp,port=2049,mountport=2049,mountproto=tcp,mountvers=3,vers=3,clientaddr=127.0.0.1\x00') (async) r4 = accept(r0, 0x0, 0x0) read(r4, &(0x7f0000000200), 0x100) read(r1, &(0x7f0000000208), 0x4) write(r4, &(0x7f0000000200)='\x00'/64, 0x40) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) 1m7.959655355s ago: executing program 4 (id=1335): sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5bf08cece5b99490}, 0x8000) kexec_load(0x3, 0x2, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b", 0x7f, 0x5, 0xffffffff}, {0x0, 0x0, 0x100, 0x9}], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0x50, 0x117, 0x2, 0x3c, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d43"}], 0x50, 0x40800}], 0x1, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf90}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m7.79688208s ago: executing program 4 (id=1338): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000c80)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x4, @private1, 0xffffffff}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e24, 0x29, @remote, 0x1}, 0x1c, &(0x7f0000000840)=[{&(0x7f0000000240)="e5", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000003c0)={0x0, 0x206, 0x3, 0x80000001, 0xa00, 0x401}, 0x14) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x248000, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230002) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x6000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fddbdf25030000000500020000000000180001801400020073797a5f74756e000000000000000000050005"], 0x3c}, 0x1, 0x0, 0x0, 0x20009805}, 0x40010) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f0000000200)=0x6) ioctl$TUNSETOFFLOAD(r1, 0x8010743f, 0xf0ff1f00000000) 1m7.677933452s ago: executing program 4 (id=1342): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="e0000000150001002bbd7000fcdbdf25647262675f70725f736861310000000000000000000000000000000000000000000000000000000000000000000000000c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000240000002400"/224], 0xe0}, 0x1, 0x0, 0x0, 0x4800}, 0x80) mkdir(&(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./mysys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mysys/bus/pci/devices/0000:00:02.0/enable\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x190) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @mld={0x84, 0x0, 0x0, 0x0, 0x0, @dev}}}}}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/udp_port\x00', 0x1, 0x0) write(r4, &(0x7f0000000140)='9', 0x1) write$cgroup_devices(r4, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r5, 0x0, 0x82, &(0x7f00000002c0)={'broute\x00', 0x0, 0x0, 0x0, [0x3, 0x7, 0x4, 0x1, 0x2, 0x7]}, &(0x7f0000000200)=0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$KVM_GET_MSRS_sys(r6, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x491, 0x0, 0xcd}]}) write(r2, &(0x7f0000000500)='1', 0x1) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050005ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x26}], 0xf}, 0x4) r7 = fsmount(0xffffffffffffffff, 0x0, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18510000100000000000000000000000f52141d110000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000300000085000000060000006a51b5f5476c850efc2d6cdc88c83fd66adbe3b239be3eeff3ca090eda95ba0fdce6ea30f49f53c3f530060af696e476bb3eae3b453c514bc8d5734058fbe47194d9271262475d3b03d450d85df550f0780e30f21d297a5a57d4fd9f3de2959ce61d28a4558fbc7bbe0b4a6ccab6bff98b9700dc0dc6714a52eff473c2b74604c87c"], &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x1f00, 0x20, '\x00', 0x0, @fallback=0x16, r7, 0x8, &(0x7f00000001c0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0x1, 0x10, 0xfffffff9}, 0x10, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000240)=[{0x3, 0x5, 0x10, 0x8}, {0x1, 0x1, 0x10, 0xf6b79fcf5429a882}, {0x5, 0x5, 0x6, 0xc}], 0x10, 0xce10}, 0x94) 1m7.589645904s ago: executing program 4 (id=1343): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/rndis.usb0/ifname\x00', 0x20003, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) write(r0, &(0x7f0000000200)='syzkaller0\n', 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/rndis.usb0/ifname\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='syzkaller0', 0xa) r2 = syz_clone(0x22000100, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) pwrite64(r0, &(0x7f0000000040)="f0110042a63d8c30947a9027b951e9b8caa6f1e7871588052b44c958bb34f85144ee3a", 0x23, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000100008400000000000000000200000000000005000000000000000604"], 0x0, 0x3e, 0x0, 0x1}, 0x28) move_pages(r2, 0x1, &(0x7f00000001c0)=[&(0x7f0000000000/0x800000)=nil], &(0x7f0000000200)=[0x1], &(0x7f0000000240), 0x2) 1m7.520008785s ago: executing program 4 (id=1346): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) (async) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x80) (async) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f0000000240)={{0x80, 0x2}, 'port1\x00', 0x93, 0x20cda, 0x8, 0x8000007, 0x3, 0x4, 0xca, 0x0, 0x4}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f0000000240)={{0x80, 0x2}, 'port1\x00', 0x93, 0x20cda, 0x8, 0x8000007, 0x3, 0x4, 0xca, 0x0, 0x4}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 1m7.257364089s ago: executing program 5 (id=1355): ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0x800) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'hsr0\x00', 0x0}) bind$packet(r2, &(0x7f00000001c0)={0x11, 0x0, r3}, 0x14) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r2], 0x18}, 0x1, 0x0, 0x0, 0x20040000}, 0x4014) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f00000004c0)=0x5, 0x4) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x3000000, 0x1010, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xe9ac0000) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000006d40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}], 0x1, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) ioctl$F2FS_IOC_DECOMPRESS_FILE(r5, 0xf517, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={r6}, 0x8) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000004c0), 0x40000, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r7, 0xc4c03d09, &(0x7f0000000500)={0x19}) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000080)={r6, 0x6c}, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={r6, 0x3c, &(0x7f0000000340)=[@in6={0xa, 0x4e22, 0x5, @remote, 0xc}, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e24, @multicast2}]}, &(0x7f00000000c0)=0x10) mprotect(&(0x7f0000012000/0x4000)=nil, 0x4000, 0x2000000) 1m7.080200427s ago: executing program 4 (id=1361): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000010c0)=@newtclass={0x24, 0x28, 0x100, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xa}, {0xe, 0xfff5}, {0x5, 0xfff2}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000380)={@rand_addr, 0x0}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@gettfilter={0x2c, 0x2e, 0x208, 0x8001, 0x25dfdbff, {0x0, 0x0, 0x0, r0, {0xfff1, 0xb}, {0xb}, {0x1, 0xd}}, [{0x8, 0xb, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2400c804}, 0x20004055) r1 = socket(0x400000000010, 0x3, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000180)=0x80) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8}]}}]}, 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x48000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/kernel/cpu_byteorder', 0x0, 0x0) read$nci(r4, &(0x7f0000000680)=""/88, 0x58) readlinkat(r4, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)=""/88, 0x58) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r6, 0x20, 0x70bd29, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000014}, 0x2000c051) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r6, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_team\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8080}, 0x40801) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x2}, 0x94) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_generic(r5, &(0x7f0000003440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000001300)={0x20e0, 0x27, 0x200, 0x70bd25, 0x25dfdbfe, {0x1a}, [@generic="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", @generic="f1248f0d7acbc5d7cce01ac41657977863ce55594bd619976c4d49046f4e6bc3daa002bc4bcdb3bf07d504dd950cbf46b06d835ecd76c2ebf27d2bd58b1027a8b3b2a1ff20b687ed083170941e99993207709bba80567785e8ea94926924413bd5e18fb38c3b29086b8119379737f0e0e40e2e99dbaa49c0d8a1ef9bcc8cff59c5b797c475c2b5b54bd086e98f5449f843d1e04cf13aad98db19", @generic="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", @typed={0xc, 0x12d, 0x0, 0x0, @u64=0x100}, @generic="9e2eeaaeee029b6f3a66f0592936b54c909f9981c1b340cf59680dc78aa8f8f94fc22b"]}, 0x20e0}}, 0x0) 1m7.025820141s ago: executing program 34 (id=1361): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000010c0)=@newtclass={0x24, 0x28, 0x100, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xa}, {0xe, 0xfff5}, {0x5, 0xfff2}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000380)={@rand_addr, 0x0}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@gettfilter={0x2c, 0x2e, 0x208, 0x8001, 0x25dfdbff, {0x0, 0x0, 0x0, r0, {0xfff1, 0xb}, {0xb}, {0x1, 0xd}}, [{0x8, 0xb, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2400c804}, 0x20004055) r1 = socket(0x400000000010, 0x3, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000180)=0x80) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8}]}}]}, 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x48000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/kernel/cpu_byteorder', 0x0, 0x0) read$nci(r4, &(0x7f0000000680)=""/88, 0x58) readlinkat(r4, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)=""/88, 0x58) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r6, 0x20, 0x70bd29, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000014}, 0x2000c051) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r6, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_team\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8080}, 0x40801) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x2}, 0x94) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_generic(r5, &(0x7f0000003440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f0000001300)={0x20e0, 0x27, 0x200, 0x70bd25, 0x25dfdbfe, {0x1a}, [@generic="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", @generic="f1248f0d7acbc5d7cce01ac41657977863ce55594bd619976c4d49046f4e6bc3daa002bc4bcdb3bf07d504dd950cbf46b06d835ecd76c2ebf27d2bd58b1027a8b3b2a1ff20b687ed083170941e99993207709bba80567785e8ea94926924413bd5e18fb38c3b29086b8119379737f0e0e40e2e99dbaa49c0d8a1ef9bcc8cff59c5b797c475c2b5b54bd086e98f5449f843d1e04cf13aad98db19", @generic="84980f26aa433484ea206c8f9594c81b74855e0716216c0a0c20ebd7a8236d4b2db200a044efe13fc8982df351dce1fdd80b38dc805f06725eb41cf976488d3a481e055a7a4973043f1edf26299d60f76bb3872e4399706e30ec786e0b71e87d0bc3970822851d862149e7d4359502b7d37b59f3b6b72c250f5589ce80aeb565a140dd732bce4194ac1e16808aa112c90b5aa80740eaf61090e56f4d4abac57435758e06e7c03de2153046cc13373e3e46e9f01b70ccefc99f8364f4c9d47619992b7958cd67dfea9ae0bd3e14fca52bb2a7ee2faf10879303c7c456485e16f2cd2da04ab46b3f72829d3fb21c25ebb60dfcb626aafccd7e796a7ca0c8415a123db45f215580185213a1c64afd63abbc2a553676bf25d667c1cf85513542af9d1ea0c8743389924a611075af4d4382e1639087d5c2ad1b3948197b9f1b7fff144b009de910d5a5651d5dc180263c4e56dbe27d9527e6e67d893cf21e4932bb721d5ed66533fe751f589ed4136bff9689317c27a57e31b2872430db66070a0a549d17fe733420cc3e4ee075181567691462967d116bbb5057511727350f8e79bad67a2fba356da1edf2cea81d51c45d4ddf4860f9b357272c4713212b077e8fa0f0e1db14ab7d47ba8e7650450e8debcdb0128e47ae27b2b504314d0b87186cf49676828e326b5c5546c2cf9a5b25f322b213dd0dce1239b6346e8fbdddf2b1fcddb5b069c8a91d84056772ae105c5ff4ac70bcd0bc10016fc9988ab1df90cdcffd662b170673b11191ca3b066a6cdae78dff85d6a3cd643d9422e9169ee9100ee1bc563e6c8722deeefe654c25050e535e44436eca5dc6df12b639dad0db33d3eeeb0827d85c6bd09df5cc88b3114d2ff77b65ed869f08823f44757d37d84ac43b321d6b955f707a1f52242c42e907e260d6f47fd33b922af26ad9eb60a2a1b23268f0f85adfc09076303d51d37086e56d5ea97253a6dbd1da6a3db38e394168107751827ed1de49752ee756c00a35631c49d491ccd7a3560f1845d1f4c3f38c0d8e85ba16efbb5ed41ab1d8ac9ae2774e3e7dc278297cec3ab50f1954219a2998401ac5ce0bf54fe67b3ba3f41b30f8e5ced12035b773bc076a5b3b838675f91f25c98a379cfa9b4f87d79ead84bb8077eb95db288d07b5d956218364805fa7142d493942e23fe7dbd4d4053c8a9f1d0b98e3003b3a059c486b9e2d8d80184c08be6598eee2afd981d900363e7b975d282562c84caec42da0234602cb62af6bd0bff0997619ea6993b5f3c2c1b9baae54c208df19b198b9939bf13fac41fd53e3fdc0055478a0af88b3ea0028aef87d95b0fd18df415c4acd684f86838ee2a34344c3dd71c9c5346faf7ea8b225c273e4371dcfb33158027a5095ee61cb5fd37b1abc09b19815f13785315a385dd855228ba0f17567460c75fb50c1662654b8f27df8b32f19166ebbe2d360deb16e7971f83acd1cf5373d6208a7422184bc21d9c1e27c9e7c71023358af69c96e54260bae6d77b1ea51fecc9d925eb7197851f6f97ac74785e34d77a8f07ca958a311bbf23b174c7c9973566a92b2f8ee867dd3bc01abaa58be0a03ba1aaf8aed74c4bdc58e22a8ef5179720b8adfc70c4b95c4543c683cfec056f7dc29b16ea54a3c6a55969366da567f8c7ccc91abd1c89c6bab0175663c8f87b7f9e71644bb955c97266c8a621a57b365c18ebadb5b82e7689ed7d6754a12f93f99f10298d1bed91fa9314a7d794b0578e42cb681fde9fda601a3b32e24ab78559e7dd7d768aebfaa6f99904444c2085b117191fdda100abd1384fbd036f7bd3db34d2331ec0bc2169cf04c590bebf1d9f896619a1f197ef1c27bb89efa3fad6c4a5f684d56e8d86aae52af5441d3801b782aa32cbcfb62b5916884676c4826197e763ef99991c79074bcf2f0c3711d0386c2449e43813c52d6b70a2342cb7fef910d86ce29e76c4ba4dd37631d14c6745ff69d3600e794ea874fc6bea38ba10049a93764828dc380592f65f643b39aac18608e32ce4c5f6ab48fd976a5c232546182081b4befd3344fab3caf6cd8d8f2562775965d079e1afdbe5b6c11f4d98c66f8cc3673b9aa0cca6624843a77b31c869bbc65473d8e991042a76368e3dfba6ba7ee6f3cac3ec0aee1bc65c6dd3f1346de2919d5bc91bd6a74ee08e5f44abc46119940f658a5bbbb2c633c2c80c4258c39d0b213904f07da7961151e405aa058a149865c93feb60f922fe9f7fdb9fe0139c034ac2a63f227b704476a320a054cd3630105111eed5582deebae79be226a3fdd644d5184458927ec0c07322d00d6e7a0f60cbdf3358ca4d4ff5b7f2e8896d42f0b8a4ac02d2e217bb3d41f481f24c8bf0c8a27f24258fe00b010a2583f92a86051dcd483bdfb2176ead9912b429d950ae6d5df0851a6ccdc550f19189ce6137af6a1c8c28f36fb55956d77dc930c05b1620b21c563a91f674bbe8a66e41646bfd982087dff4933a32345906f9046380a61af84a8e42fa3a882bae76f5b87fd53bf37d917e9c22348f8f44e9438fa5d23e4ae3153b829f4d60860985a0c4a01ecf4c2ddc0439291a2ae4e26c05e178fd2a270ecb0f83824f7da6024b83fcd0e23466f5939ff59c2c053956f52577bd91028e26cd5d38cb7fc480a738e1b76ded13e1110cf3272505314e36bb6716f8d70ca6f10682035d580f8f7f80b26963881c00f8aafb6b04543cf3f09eb78e7fe2186f362b56f7fdd75bd87553ac149c8f57c08ecdc83abdc666df936bbd6b5d0a1fae3a464f879ed113a5cf794b205e2334e681232de09b0ef1e218f08aaaa6de2a3dd0d13666c6d5e72aa34eb3b89aa3bb2499f0c4cb270de0ad65f8bb08e4eaa41664589d62eaf29e6d7df3c88f0d56ad9ae0eee5c7408194e45ec3bd0de8f189eae0b0e6694fed3b4d1cd40ea5f6ff480ec4c4c51778461e8fc3924c004173860ae6dea8baab716dc26024347fad3f51adfff85c03ae0885fbe3fdf24e6bb7e60f3ad1ae8e116278731d4829935a5f2e6e574293f477ac0e13c552fd52c101fc796b7cb8b5fd58d7f95a89143ab3f40835bbe17429a96ea9f38529864c7dfbede530d41be48df2f3accf807edb1a732ceb05755dd268324dff0925b8795adc9fa8d27da320689c814e6b85825159234ef4b67e9ee2066fa196c89f76b99a6d83f0b5b47be83deb04b9e50179e7ed9786cee9e3a4187e8213292f253100449b6c6da3ce2644bb320eeac2e9e1d59ef9f8715e90384f8a59903770222da1dfbbb40b9b7609528505e29675d8922e45986ba67719b4461ea93402bae604df011d200a2b1b0f670ded01f73631e3b06c3f0ba682b6c33be4edb5b6c9692897f0535a49e87e4b564e36242472d9b66213a7bb6390a97dc0c290f1cd5c60d7df7588aa118392d53341e83207a97617ad61905e2a557fb5d1c0184dba65606a8d37ee1b0700bb7506791714bc3f0916673eb262e378d0d9b810832c4a91f5083c6c2d0153a852ae29522cc2f527eadd26566ebdb0a5d594c83599eac809d2ac7b3865ca400b4881ec3a15ef21178af8da31b66e8cabb11f703c6adef548ac8fe9da05f6ccfa30eba1efca5a887cdb49dd8fac5bfb3b7bf8d41b1211a25680554edfae9832b7ae27d720ae0f6fa0cb427bc51492353eb966a45186f7fb86f08338fc6fd64c87ad708b2c05d3d7517eaeaf72cc41c9faefe62664ee9a67ffe13ac89b0055600f2029be2e734b23aa91e835eeadee4b38de358be7e32a72e83fe7af53ad82ac147712cdbdfdde1ea16b16dedecd977ee648aa4d895077f5a9e5766910e79b34f8fe2a61533ddabdde99d007cc898c1aff6ccf130eff12f8ba3157821f14b19dc5276eeb2a99064992cb88628b8a8b58a63c5725d550409848254dae2842e8293d5e8b82210d8345412e0d607f30ab76317f722b5ae409644aadd776d62f9baf60c7959d7320079e75c777aa6d06e10c32580343e43dc953ae254494aa1f453e68de9c5160ac607d27d8e1ae722ea35ea146802e36d234c7ff1784ecd9491557f9aa91948f5640dcfcf0e870d0833eb0303bc5ef0d3f2f030c828ef33aef29e5881134916873d96d51d1b6c9b29371a400376fa417cebacb55c833b7e1a2b979c14220ca81ca79905b7a5e2d37cf43f9b5d8cd3166e20098f4a63a17ebfec7b299e5afa83a8b47be378da5e2982c9e2dfbcc3a0f4f08e4a4170721d05b26d374893ab31d59331385d270936b39ca78524732e8217c1c6652aa6a9b0deb35ac1eeb7b7f991e0767ea0e6fc2af4e766d3d98e3305baa7eb7e8a5bbab454e9a47bc31a685eb427f90487d61050629490314803a7fb620af7a99937df3d3c76e5a996ee0715570a732f14e8b4b9af367dffb140da6c1eb5b647a4fd4542a143c7eae973332ca4415f34c52f7f1b6a347d5c109092acdff5e4b89798ceab276d74028f11bddb5b967c7abde46500e9f96da555180e54fa37a162ffda72096785ad63952380e9042272e5b96a83408dc73e7e82327e6825189c5f090eeb34a8d1e0bcba72653e9374ac95217a355acd43db8b292701c1496d4e3379f624640f2ed8cad4e258a68829a3c8f35ff3d108e49621c42cec69af073b60bb5ba1ff718bc769cd969f0961f5a3b07cdb14969cb82a4825795c8f8e9860d01df84c8d396d9bb663bc3549389752c968275c377cecaa5471900c994ea55785a79c4f3242aead6d83bef259a4f26e90d552be08f6e52c700c5b60656b5c14f8b168c3973edeb910d599f9fc7cf7e90b5985d34d35abfb2a02e195e9dae5d7a4dea2a7ed7e63ef73688aea69dfdf6fcc140f13747b967e38270f46fb1f382cb75c112dafa2de4c53323fdd255ec13f74e08df4592c51ba9877fe256456286ef2d731b851d51e1cbd182b4bc65d89256c2e1795f93cdcbce4bf77d156128664dc5d49696808c0e1340d3c701748860323519563c08e474919cd4add9a2373d55825779b71ec337b3235e739948656a14118603e757b65cb62c65a6ab67881ff33fadf7c9356883353e68074df3743134348f757761003507a73265d293ac7e1943adb4562e9ea23f3e71dc1e12c7fddb5acb1d302cfe934d2e0b240091b6a5898377f029dbb51a71b27c455f145e1dab4deae93b77ea4b1939f099fb3a36876736613392736da27bf456a404910d4e95e7beff30a810f9537760f854c73d6890804f44d4feb613f14262f259e06926840a011cadde61fddfd930cabfcdb1508e37225cf969df43ca40baa2acaa5b65c3422564d2386527a2c4eaad82bbc4242bd04fdc3bd67b1de4bf57d522dec8e0021c0c24952627665374c1c916b4feae802fdc39fcb463baadf3c4e33e2bc95598fc2a9b729382bb2fd65b44f5eac22b6aa4f0495e7465c2286d52b98fe2a241720ad30394ad632145c7be741bd4c86768d3a6d5c66a4e8cd245ccbcde553dd90d5f42dad4e46800be820d38671e967e098104db0448e965302687fbba2ffbe1ad4734b159e55e699cd948353e48aa6b2f8ad2b3ccd251a5b144fd452d84bf632de9bc34bb614e12e984f51038eee685a91fbcb2135b82e7c19f66869293fe1665e5ac2fc433518d14c70869490fa1a8b19a963a908bb9f30b3978c0928f4c420616945730542991f3e86a09305af7d5a3bd6c944cb8675c5e3b63814b70a2b0f57cc17723f53e5e9065b3b78726619465d32ee72eb30afca98762942ef2d8e5fc990f21dcc1d01d322dd62b38a0a2b8830c07bfb8c4855e8cb28b07aace8d28ee4c2e4fdd2c30240e1fda682", @typed={0xc, 0x12d, 0x0, 0x0, @u64=0x100}, @generic="9e2eeaaeee029b6f3a66f0592936b54c909f9981c1b340cf59680dc78aa8f8f94fc22b"]}, 0x20e0}}, 0x0) 1m6.972144971s ago: executing program 5 (id=1365): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x208883, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfffffffd}}], 0x18}}], 0x2, 0x40800) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000240000000000000001f"], 0x14}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x490, 0x0, 0xf3ff000011fb}]}) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$selinux_load(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0x65) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000300)={0x27, 0x0, 0x0, 0x5, 0xc, 0xf, "a5e4097d6845192636da2fe17f28ce9a8a58a932e06a9677dcc4bf679b5f821e0db0a7db18db2abb2e45af586f8860aeace00614fa03c690dff8f866854ff6", 0x9}, 0x60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_TSC_KHZ_cpu(r7, 0xaea2, 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000001"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r8, &(0x7f0000000d40), 0x0}, 0x20) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x10, 0x0, 0xdb57}, {0x10, 0x0, 0x8}]}) r9 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x18000d) r10 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0), 0x40, 0x0) read$FUSE(r10, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x6, 0xf9, 0x1, 0x79, 0xff, 0x3, 0x1, 0x1, 0x0, 0x200008, 0x1, 0x8, 0x72, 0x6, 0xba, '\x00', 0x3}) r12 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r12, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) ioctl$KVM_RUN(r11, 0xae80, 0x0) 1m5.979722839s ago: executing program 5 (id=1376): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/rndis.usb0/ifname\x00', 0x20003, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) write(r0, &(0x7f0000000200)='syzkaller0\n', 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/rndis.usb0/ifname\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='syzkaller0', 0xa) r2 = syz_clone(0x22000100, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) pwrite64(r0, &(0x7f0000000040)="f0110042a63d8c30947a9027b951e9b8caa6f1e7871588052b44c958bb34f85144ee3a", 0x23, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000100008400000000000000000200000000000005000000000000000604"], 0x0, 0x3e, 0x0, 0x1}, 0x28) move_pages(r2, 0x1, &(0x7f00000001c0)=[&(0x7f0000000000/0x800000)=nil], &(0x7f0000000200)=[0x1], &(0x7f0000000240), 0x2) 1m5.680623272s ago: executing program 5 (id=1379): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xe) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000000)={0x74, 0x0, 0x4}) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newsa={0x10c, 0x10, 0x7, 0x70bd28, 0x0, {{@in=@private=0xa010102, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0x0, 0x0, 0x2, 0x4, 0x10000000}, {0x0, 0x200000, 0x7}, {0xc, 0xfffffffe, 0xae5}, 0x4, 0xfffffffe, 0xa, 0x2, 0x0, 0xba4c15520301ae61}, [@coaddr={0x14, 0xe, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, @replay_thresh={0x8, 0xb, 0x2}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4000009}, 0x0) 1m5.170593135s ago: executing program 5 (id=1385): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r0) fcntl$setstatus(r0, 0x4, 0x2c00) r1 = gettid() mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000001c0)) r3 = openat(r0, &(0x7f0000000140)='./sys/devices/system/cpu/smt/control\x00', 0x2, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000040), 0xffffffffffffffff, 0x2c00) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r4, 0xc0945662, &(0x7f0000000340)={0x6, 0x0, '\x00', {0x0, @reserved}}) write(r3, &(0x7f00000001c0)='1', 0x1) fcntl$setown(r0, 0x8, r1) fcntl$setsig(r0, 0xa, 0x22) recvfrom$unix(r0, &(0x7f0000000140)=""/161, 0xa1, 0x40000000, &(0x7f0000000240)=@file={0x1, './proc/mtrr\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) r6 = open$dir(&(0x7f00000002c0)='./proc/mtrr/file0\x00', 0x101400, 0x7d) fchmodat(r6, &(0x7f0000000300)='./proc/mtrr\x00', 0x0) write(r5, &(0x7f0000000200)='base=0x20000000 size=0x20000 type=write-back', 0x2c) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r8, 0x0, 0x0, 0x30, 0x0, @in={0x2, 0x4e20, @loopback}, @ib={0x1b, 0x0, 0xc, {"7d735931001016095e000303ff010001"}, 0x4}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r8}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r7, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r8}}, 0x18) ioctl(r5, 0x40104d06, &(0x7f0000000a00)="00000200000000000000020001") bpf$OBJ_GET_PROG(0x7, &(0x7f0000001280)=@generic={&(0x7f0000000a40)='./proc/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000013c0)={@map=r5, 0x4, 0x1, 0x800, &(0x7f00000012c0)=[0x0], 0x1, 0x0, &(0x7f0000001300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001340)=[0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 1m5.123678373s ago: executing program 35 (id=1385): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r0) fcntl$setstatus(r0, 0x4, 0x2c00) r1 = gettid() mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000001c0)) r3 = openat(r0, &(0x7f0000000140)='./sys/devices/system/cpu/smt/control\x00', 0x2, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000040), 0xffffffffffffffff, 0x2c00) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r4, 0xc0945662, &(0x7f0000000340)={0x6, 0x0, '\x00', {0x0, @reserved}}) write(r3, &(0x7f00000001c0)='1', 0x1) fcntl$setown(r0, 0x8, r1) fcntl$setsig(r0, 0xa, 0x22) recvfrom$unix(r0, &(0x7f0000000140)=""/161, 0xa1, 0x40000000, &(0x7f0000000240)=@file={0x1, './proc/mtrr\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) r6 = open$dir(&(0x7f00000002c0)='./proc/mtrr/file0\x00', 0x101400, 0x7d) fchmodat(r6, &(0x7f0000000300)='./proc/mtrr\x00', 0x0) write(r5, &(0x7f0000000200)='base=0x20000000 size=0x20000 type=write-back', 0x2c) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r8, 0x0, 0x0, 0x30, 0x0, @in={0x2, 0x4e20, @loopback}, @ib={0x1b, 0x0, 0xc, {"7d735931001016095e000303ff010001"}, 0x4}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r8}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r7, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r8}}, 0x18) ioctl(r5, 0x40104d06, &(0x7f0000000a00)="00000200000000000000020001") bpf$OBJ_GET_PROG(0x7, &(0x7f0000001280)=@generic={&(0x7f0000000a40)='./proc/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000013c0)={@map=r5, 0x4, 0x1, 0x800, &(0x7f00000012c0)=[0x0], 0x1, 0x0, &(0x7f0000001300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001340)=[0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 1m1.701439471s ago: executing program 7 (id=1387): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/rndis.usb0/ifname\x00', 0x20003, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) write(r0, &(0x7f0000000200)='syzkaller0\n', 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/rndis.usb0/ifname\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='syzkaller0', 0xa) r2 = syz_clone(0x22000100, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) pwrite64(r0, &(0x7f0000000040)="f0110042a63d8c30947a9027b951e9b8caa6f1e7871588052b44c958bb34f85144ee3a", 0x23, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000100008400000000000000000200000000000005000000000000000604"], 0x0, 0x3e, 0x0, 0x1}, 0x28) move_pages(r2, 0x1, &(0x7f00000001c0)=[&(0x7f0000000000/0x800000)=nil], &(0x7f0000000200)=[0x1], &(0x7f0000000240), 0x2) 1m1.586975427s ago: executing program 7 (id=1425): r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi3\x00', 0x1c1181, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0xfffffffc, 0x5, 0x4, 0x2f, 0xfffffff7, 0x8001, 0xa22, 0xfffffff8, 0x2, 0xfffffffc, 0x8502, 0x5006, 0x1000007, 0x1, 0x10003, 0x801000, 0x7effffff, 0x3, 0x3ff, 0x1001010, 0x1fe, 0x8, 0x3, 0x8001, 0xf, 0x3ff, 0x5, 0x400, 0x3, 0xfffd]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"84df57f13985dcc0cbe6e6ba50cd6396", 0x0, 0x0, {0x1, 0x40}, {0x4}, 0x3, [0x81, 0x0, 0x200, 0xffffffffffffcafd, 0x6, 0x9, 0x401, 0x1, 0x3, 0x100000000, 0x2, 0x5, 0x2, 0x0, 0x6, 0x89]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f00000004c0)={{r1}, r2, 0xc, @inherit={0x60, &(0x7f0000000440)={0x0, 0x3, 0x5, 0xff, {0x1, 0x7, 0xffffffffffff8001, 0x4, 0xdfc}, [0x4, 0x2, 0x5]}}, @subvolid=0x8}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r4 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f00000003c0)={0x48, 0x7, r4, 0x0, 0x1, 0x0, 0x8, 0x1fbf95, 0xd0822}) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd2a, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 1m0.710298263s ago: executing program 7 (id=1443): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x9, 0x200, 0xd, 0xd2ee, 0x0, 0x4, 0xa6, {0x0, @in6={{0xa, 0x4e23, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x48}}, 0x4812305a, 0x4ef, 0x3, 0x80, 0x7}}, &(0x7f00000002c0)=0xfffffffffffffe2b) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x2, 0x8, 0x10c, 0x2, 0x4000002, 0x3, 0xd1, 0xffffff80, r2}, &(0x7f0000000340)=0x20) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000640)={&(0x7f00000003c0)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000500)="adbbb944d42524140520f19761918f62b8a9fec7f67695b45d985675f522fd457406bb411f532c9b68220785b27ddcfbf13449704f5240d25094db778f4996a1b8020d22c08ff31de61f5d0b2c4e1ed7f550d374fd63dd431ade9d3e4a18db215bfbf215e42fee79eaeb8d8bdac55638eecf2a5f90af74be1c5cc20e0cd946acc02235bfc4cf830fd97b092204f643a8a03459855bfa6b49eb2e09ed155644b9ff1da2e880be06dfa06186e1843dae567940a1d10b4a11b967bfec5ebe6459122af468222cafc83dc710f599db7123f56581d2de54a978f349b4a2f52ac8c3eecdc22b7827146348c73b5e8da9d00aa1ff26", 0xf2}], 0x1, 0x0, 0x0, 0xc004}, 0x20008880) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) socket$tipc(0x1e, 0x2, 0x0) r4 = socket(0x1e, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="2000a10b08000f0001000000060006004e2100001400010000000000000000000000ffff640101010a0001000180c200000e00001c000e8005000100080000000500010008000000050001000b00000008000900020000000a000200aaaaaaaaaa1a000014000100fc0200"/120], 0x90}}, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x3, 0x88) r5 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xd00, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x48}], 0x1}}], 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r8, 0x0) setsockopt$inet6_opts(r8, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x150) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaabb53adea90150f86dd603c230000140600fe8000000000000000000000000000aafe8000000000000200000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c2000090780001"], 0x0) dup3(r4, r3, 0x0) 1m0.595767579s ago: executing program 36 (id=1443): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x9, 0x200, 0xd, 0xd2ee, 0x0, 0x4, 0xa6, {0x0, @in6={{0xa, 0x4e23, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x48}}, 0x4812305a, 0x4ef, 0x3, 0x80, 0x7}}, &(0x7f00000002c0)=0xfffffffffffffe2b) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x2, 0x8, 0x10c, 0x2, 0x4000002, 0x3, 0xd1, 0xffffff80, r2}, &(0x7f0000000340)=0x20) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000640)={&(0x7f00000003c0)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000500)="adbbb944d42524140520f19761918f62b8a9fec7f67695b45d985675f522fd457406bb411f532c9b68220785b27ddcfbf13449704f5240d25094db778f4996a1b8020d22c08ff31de61f5d0b2c4e1ed7f550d374fd63dd431ade9d3e4a18db215bfbf215e42fee79eaeb8d8bdac55638eecf2a5f90af74be1c5cc20e0cd946acc02235bfc4cf830fd97b092204f643a8a03459855bfa6b49eb2e09ed155644b9ff1da2e880be06dfa06186e1843dae567940a1d10b4a11b967bfec5ebe6459122af468222cafc83dc710f599db7123f56581d2de54a978f349b4a2f52ac8c3eecdc22b7827146348c73b5e8da9d00aa1ff26", 0xf2}], 0x1, 0x0, 0x0, 0xc004}, 0x20008880) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) socket$tipc(0x1e, 0x2, 0x0) r4 = socket(0x1e, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="2000a10b08000f0001000000060006004e2100001400010000000000000000000000ffff640101010a0001000180c200000e00001c000e8005000100080000000500010008000000050001000b00000008000900020000000a000200aaaaaaaaaa1a000014000100fc0200"/120], 0x90}}, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x3, 0x88) r5 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xd00, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x48}], 0x1}}], 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r8, 0x0) setsockopt$inet6_opts(r8, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x150) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaabb53adea90150f86dd603c230000140600fe8000000000000000000000000000aafe8000000000000200000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c2000090780001"], 0x0) dup3(r4, r3, 0x0) 37.375498832s ago: executing program 6 (id=1818): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/warn_count', 0x88000, 0x1) read$alg(r1, &(0x7f0000000e00)=""/59, 0x3b) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r3, &(0x7f0000000500)='0123:abcd:a,4567:ef01:o', 0x17) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x2, 0x80000001, 0xffff, 0xd0, r3, 0x2, '\x00', r2, r3, 0x1, 0x1, 0x4, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x63}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setuid(0xee01) pipe2(0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c00000041000100fcff07000400000001000000040048800c0001800800038004001080080002"], 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 37.288285126s ago: executing program 6 (id=1819): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x2, {0x8000, 0x8, 0x8, 0x2}}) r1 = socket(0x2a, 0x1, 0x2) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x4, 0xfff1}, {0x0, 0xfff1}, {0x8, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) request_key(0x0, 0x0, &(0x7f0000000180)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1bZ\xa1\xba\xb4E\xbc', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="bc0000001000010428bd7000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="08000000000101008c00128009000100766c616e000000007c0002800600010002000000700003800c00010000010000030000000c00010001000000020000000c000100a7000000080000000c00010001000000f4ffffff0c00010001000000050000000c0001000500000080f400000c00010005000000060000000c00010000000000040000000c0001005d000000b589000008000500", @ANYRES32=r8], 0xbc}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) ioctl$sock_x25_SIOCADDRT(r1, 0x890b, &(0x7f00000004c0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0xb, 'tunl0\x00'}) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a050000000000000000000100fffa0900010073797a30000000002c000000030a01010000000000000000010000000900030073797a31000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c0004801c0001800a0001007265646972"], 0xc8}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) tee(r0, r1, 0x852b, 0xc) 37.200494126s ago: executing program 6 (id=1820): memfd_secret(0x80000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000003f0007012bbd700000000000017c00000400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="0c000280050023000000000008000500e7e69111820da920196a69109ad79c282d3a87d0a9a9ceffccd1d833d86567b0002ff4b9a09549a0c9a4175b211f53d25e393c10e58bc07173", @ANYRES32=r0, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 37.197744748s ago: executing program 6 (id=1822): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d93", 0xe6}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="5000000000000000171500000200000035000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf932557100000000000000180000000000000017010000040000000600000000000000"], 0x68, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a328", 0x5}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3", 0x2c}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df4", 0x9c}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) fspick(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 36.960153938s ago: executing program 6 (id=1828): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) (async) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0xca) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0xca) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000185000/0x4000)=nil, 0x4000, 0xa) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) write(r0, &(0x7f0000000180)='wcd9390-usbss 0x42\x00', 0x13) 36.805568031s ago: executing program 6 (id=1829): r0 = socket$netlink(0x10, 0x3, 0x10) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @private, @dev}, &(0x7f0000000080)=0xc) (async, rerun: 64) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) (rerun: 64) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', r1, r2, 0x4, 0x1, 0x3}, 0x50) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_tcp(0x2, 0x1, 0x0) (async) sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) (async) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000000)={0x8, 0x8, 0x27b2, 0x7, 0x7, 0xff}) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000480)=0x1) ioctl$TCSETSF2(r5, 0x89f2, &(0x7f0000000000)={0x9, 0x4, 0x8, 0x0, 0xc, "a533b6aaf9f659ff35036bf79d8b4c2a246305", 0xe7, 0x8}) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r7 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) setresuid(0x0, 0xee01, 0x0) (async) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r8, 0xc, 0x0, 0x0) (async) r9 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r9, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r9, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r9, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) (async, rerun: 64) r10 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0xffff, 0x100000, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x12, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x0, 0x20000000, 0x1883}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000180)='ip6gre0\x00', 0x10) syz_usb_control_io$hid(r9, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)={0x40, 0x16, 0x8, "fde61e0ee4a63b9e"}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r9, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)=ANY=[@ANYBLOB="200000000000348b35e5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r11, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000003c0)=ANY=[@ANYBLOB="58000000b5cf62465df922f568834c6e88d496614c64aff82a001abafa6e2b119bbb8202f707e36ed16e219b3922e25258b5bf67418b51e03144c3599a9d28829b209f72cd3398f5f6485b3f2d9b5850861837a2de259b2e540809c5a287d99ff67e8a68803e1ff8c1e46e86be1fb588ea724c62eab24bfd0d834332b7ccb7d53ec185fcd073f861c1078d73e22a384aae6672efe9223426551fc304105d842002009773f31623c1d3943112aec6a1394fc69c9539f05ae7a768e96a27eb6a51cce1a5b5c7f80ff6a3", @ANYRES16=r7, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r12, @ANYRES16=0x0], 0x58}, 0x1, 0x0, 0x0, 0x4040df5}, 0x4040084) 21.707784131s ago: executing program 37 (id=1829): r0 = socket$netlink(0x10, 0x3, 0x10) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @private, @dev}, &(0x7f0000000080)=0xc) (async, rerun: 64) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) (rerun: 64) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', r1, r2, 0x4, 0x1, 0x3}, 0x50) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_tcp(0x2, 0x1, 0x0) (async) sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) (async) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000000)={0x8, 0x8, 0x27b2, 0x7, 0x7, 0xff}) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000480)=0x1) ioctl$TCSETSF2(r5, 0x89f2, &(0x7f0000000000)={0x9, 0x4, 0x8, 0x0, 0xc, "a533b6aaf9f659ff35036bf79d8b4c2a246305", 0xe7, 0x8}) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r7 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) setresuid(0x0, 0xee01, 0x0) (async) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r8, 0xc, 0x0, 0x0) (async) r9 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r9, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r9, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r9, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) (async, rerun: 64) r10 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0xffff, 0x100000, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x12, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x0, 0x20000000, 0x1883}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000180)='ip6gre0\x00', 0x10) syz_usb_control_io$hid(r9, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)={0x40, 0x16, 0x8, "fde61e0ee4a63b9e"}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r9, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)=ANY=[@ANYBLOB="200000000000348b35e5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r11, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000003c0)=ANY=[@ANYBLOB="58000000b5cf62465df922f568834c6e88d496614c64aff82a001abafa6e2b119bbb8202f707e36ed16e219b3922e25258b5bf67418b51e03144c3599a9d28829b209f72cd3398f5f6485b3f2d9b5850861837a2de259b2e540809c5a287d99ff67e8a68803e1ff8c1e46e86be1fb588ea724c62eab24bfd0d834332b7ccb7d53ec185fcd073f861c1078d73e22a384aae6672efe9223426551fc304105d842002009773f31623c1d3943112aec6a1394fc69c9539f05ae7a768e96a27eb6a51cce1a5b5c7f80ff6a3", @ANYRES16=r7, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r12, @ANYRES16=0x0], 0x58}, 0x1, 0x0, 0x0, 0x4040df5}, 0x4040084) 13.339564669s ago: executing program 0 (id=2041): socket$igmp6(0xa, 0x3, 0x2) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000002e00)="2210942272ce9a37c0fb001f95548ca7", 0x20) (async) getsockopt$inet6_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000240)) (async, rerun: 32) r1 = gettid() (rerun: 32) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0500f000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a010400000000000000000100000008000b40000000000900010073797a300000000014000480100001800a000100726564697200000014000000110001"], 0xcc}}, 0x801) 13.25834224s ago: executing program 0 (id=2042): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500540601fe8000000000000000000000000000bbfe8000000000000000050000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 13.255752948s ago: executing program 0 (id=2043): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="48010000100001000000000000000000e00000020000000000000000000000000a010101000000000000000000000000000000004e2100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffdfff0000000000000000000000000000000033000000fe8000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000004000000010000000000000000000a000000000000000000000048000100736861323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048460000000000000000000000000008001d00000000000800220003"], 0x148}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x201, 0x400000, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x4004}}}, 0x24}}, 0x40) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0xb, 0x0, 0xfffffffe, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x1}}, @TCA_CT_MARK={0x8, 0x10, 0xfffffffe}, @TCA_CT_LABELS={0x14, 0x7, "e3ccd1c5b8fbe60833617f2f4a63b45b"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x10000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b05, &(0x7f0000000100)={'wlan1\x00'}) mremap(&(0x7f00006fc000/0x1000)=nil, 0x1000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r5 = openat$kvm(0xffffff9c, &(0x7f0000000300), 0x80800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f0000000600)={0x1, 0x0, [{0x4b564d03, 0x0, 0x2}]}) mincore(&(0x7f0000c0d000/0x3000)=nil, 0x3000, &(0x7f0000000280)=""/113) socket$phonet_pipe(0x23, 0x5, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000640)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f0000000401a800080008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d93337568b26948fc700870ec38edc9761fdc", 0xd8}], 0x1}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r9, @ANYBLOB="000226bd7000fddbdf25020000001c0001800800060002000000060001000a0000000800060001000008000300ac1414aa08000300ac1414aa060005004e21000014000400ff010000000000000000000000000001080006001e00000008000200030000002c35e37e0e0005004e23000005000200040000000500020007000000060005004e220000080006000100000008000400000000000800030005000000080002000800"/182], 0xbc}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r6, 0x4008ae48, &(0x7f00000000c0)=0x25000) r11 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$CDROM_LAST_WRITTEN(r11, 0x5395, &(0x7f0000000040)) r12 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r12, 0xb702, 0x0) 13.020071913s ago: executing program 0 (id=2044): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000600), 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f0000000180)="a8a8d249d050b27290a6e236ba5e68cdce6d4060a3693634e716ad5b30fb107b753db300f37fbcd39f8408981d8080d8f6a80917426fe0cd41746df703a00c4a2dbaf46299ccdb9f18d6d130538e55dd7c0000000000", 0x56) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r2, 0x2, &(0x7f0000000380)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000740)={0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uac1.usb0/c_chmask\x00', 0x1, 0x0) write(r3, &(0x7f0000001200)='3', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x37) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_out(r5, 0x5460, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/236, 0x302000, 0x1000, 0x5, 0x6}, 0x20) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) 12.95998128s ago: executing program 0 (id=2045): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0xc9110021, 0x0, 0x0) 12.597395463s ago: executing program 0 (id=2047): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0xc9110021, 0x0, 0x0) (fail_nth: 1) 12.508194332s ago: executing program 38 (id=2047): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0xc9110021, 0x0, 0x0) (fail_nth: 1) 5.757154038s ago: executing program 9 (id=2104): r0 = socket$nl_route(0x10, 0x3, 0x0) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)="4c473e8be8246f2dd5ae67338b1c932d05f6b9bd16433fe6b8c195d362cdc1456ba6bffa8bbf463285c3de1c09d5fdae6268552663389fffbbf08e3bddff41c9186eed3cce92ee559cf70abfecaaea4bf1792e2be2b234a310ebb1b09e265c214c97633cfc44243ddab01aa1793b614b633a1ba9b4fab50afc820da268dbaf90beb7dd04067050f630ce447bd85417c0597ec9c4bfe6f8ba7132f9ccca8330ecec0f2fa8f6f685bc787f22d042649e42f21cc9809cc5c65e0604", 0xba}, {&(0x7f00000001c0)="2b8fd530862ef4cd1f973b35689b53622ed592eb8fa576c3067641c38b8d56d072833375a5d93609f9cc977efa7a50d3505eb4f6404d66b481ea87e1e64ed212e5a10485acf79933cf22a316cd18b33bf01d6715c3ad08ce19760933af0dd872af", 0x61}, {&(0x7f00000002c0)="e715f0999b62ed48b6f8cf819970780570ca5d361d65f564da925cbe6c82725c0712aba9a3f337eeced7b8fe8e675c9bbdd65d4135fa50b441ef5fdb239efdb0049aafa064f9f1f5d3b8894785e5a7ce1a768a74a90728de8dc49a725cade486f8978a96c363897c47e098a0d6acf76a4c16", 0x72}, {&(0x7f0000000340)="8435bf1d2c97756b0d18df77b3d5afde65cc502a5df8da8091a7a27a914d2ebaece27d2b2f9239ff782087bdd14c7539d32e32bd92e8da587e42d155de15cdaf1d3bf004631304e13050b518fec0db31d2e87f6f017e7327f2e9833d2d97d2ead144", 0x62}, {&(0x7f00000003c0)="b655ce90b76cc8844ca0d2d9314f9810c8a78f629cfa074acb62a0252175cd631e7a787d8e7411c9464e9aa8e81343f11dfa13a33d0298faaf4467db481041c2877fc2416502228cc142664146c32d9b7098af1aefc3461561fa3d47cfaadef9721dbb48b4a3", 0x66}, {&(0x7f0000000440)="81b063cffe1b757b7b6f51a3f369c2b1f2e04bb2b38aa71a5708cb504e8e15014abadc8cecbda9cd706f0a104ddc1efbc336c31f7a0b82bd97e19fc4665788e44c15b7212dc9dd194260b6fe910ea29688e38275b702dafc1e36a1dd3f05b68e9252f7c79297cca9ce9b4adb5ba36786462b43d0b03f60fac38ae83cfaaf59e4861ea64d0934803b681ba28acf7edcbda7d4ec431b783bcc02a414def9b3e5248d58a749c4e1eaa91bf31083d3354820116631e035a96272f43665932229", 0xbe}, {&(0x7f0000000500)="fadb5b891121c54c4f0b691d1a888c4cc4dc6b74a099c18f7e4618e2dbcf03a910ff59438a9196d7de7738a6508941422dee222c1200ae553ab3a09bbae049311ce05e9cc29235623b225e7750e217d7f8ba967f0bf4e72a2a5ec48b095a5b4c55cd9368ab5a28b4c881d0c118eb4c1fafb041677f19673af3e167175f87c89eb66db1ed51c4814bff3d3a823cb4c91a47656c621c28b83de15e66032cbd43fb81d578496f8c228104de70f8b5902a38997ad65456323e057c80d1d3f22efd4aaab4c01790d700d06f825289116980470a53656a36ccf6a67533820183548c9c0ca03c6e7971154c944cb6", 0xeb}, {&(0x7f0000000600)}, {&(0x7f0000000640)="3a2474f37424a893149840a582bd5ae594639ec7923cca727937e8003ec9c70835cb60ed2425a77da0c0821bdb63be1fad5bda751f0de98167ca560f73a1ee7a55bf72aa41e7656795e4002a9c29141c5e3dbb3cdba73db7d6aea8e68543e9563e552bffe00daee0c9976f419630b180e1cdd97028effbce6760", 0x7a}], 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev_mnt\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x2b, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000040990a0100000001020001090219000101008032090400"], 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev_mnt/ttyUSB0\x00', 0x802, 0x0) close(r2) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, 0x1, 0x13838}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x45}, 0x40000) 4.364623713s ago: executing program 9 (id=2117): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500540601fe8000000000000000000000000000bbfe8000000000000000000000000300aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 4.289104314s ago: executing program 9 (id=2119): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000240)=0x2, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x181) write$cgroup_int(r4, &(0x7f0000000540)=0x5, 0x12) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/bdc/bind\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='PNP0103:00\x00', 0xb) 4.108109067s ago: executing program 2 (id=2123): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x204041, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1f) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000080)={0x6}, 0x4) ptrace(0x10, 0x0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, 0x0, 0x1, 0x5004) syz_emit_ethernet(0x1e, &(0x7f0000000500)=ANY=[@ANYBLOB="0380c2000002aaaaaaaaaabb000c01000040fc01000005000000000000003826fc2e32992325232d81b80c656db8e3c3d84e332cf9c234716f119a690cf3590751be27329275b13df8796025c6ba8b96a0b4a74fbc4e5bb064a0"], 0x0) fcntl$setown(r0, 0x8, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r6, &(0x7f0000000100)='bRequestType=-', 0xe) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r7, 0x4048ae9b, &(0x7f0000000140)={0x1e0001, 0x0, {[0x2, 0x40009, 0x6, 0x40000009a47, 0x1ff, 0x1000, 0x1, 0xbc91]}}) ioctl$KVM_SET_DEBUGREGS(r7, 0x4080aea2, &(0x7f0000000440)={[0x8080000, 0xf7f74000, 0x4, 0x6000], 0x5}) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e20, 0xea, @rand_addr=' \x01\x00', 0x4}}}, &(0x7f00000004c0)=0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r9, 0x5, 0xffffffff}, 0xc) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000000700)=@sack_info={0x0, 0x2, 0x6}, &(0x7f0000000740)=0xc) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 3.599830025s ago: executing program 2 (id=2126): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000100)) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="02200000200000001c0012800b00010062726964676500000c00028006639bdd36000000eb39645dcb5b7751dbea452e09c7cc4df0e5be24f50941e7e9bba7ce91419a758ffd5ca957568cd759a6ece91c287ebeb3dc9453e49a8d3f65b5a90c30a570177408774ea3d7aa885901d8356fbceb111d3052faf5001e8a9d2a5d79c805b02a08e8005039b0673328191acaa3e18efe8f812b415df015001dfeec43bfe88e7945778e5b156978b70692c0fd968eb412210fffeaf0dac36ef1fb62b66cebcc7c3b4602fceaacc0eef53bbbf0bcb94c7a30c05bd468553462c3bd10b5b8c29111c721767703"], 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x0, 0x6}]}) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x400, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008, 0x40000000}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) fanotify_init(0x60, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980), 0x0, 0x5, 0x0, 0x0, r6}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000b00)={0x500, 0x1, &(0x7f0000000640)=[r6], &(0x7f0000000280)=[0x5], &(0x7f0000000a80)=[r7], &(0x7f0000000ac0), 0x0, 0x2}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_SET_IRQCHIP(r9, 0x8208ae63, &(0x7f0000000e80)={0x2, 0x0, @ioapic={0x4, 0x0, 0xc, 0x3, 0x0, [{0x7, 0x5, 0x8, '\x00', 0x55}, {0x7, 0x86, 0x8, '\x00', 0xff}, {0x7, 0x1f, 0x4e, '\x00', 0x3}, {0xe9, 0xd6, 0x0, '\x00', 0x4}, {0x7, 0xff, 0x6, '\x00', 0xb9}, {0x7, 0x5, 0x3, '\x00', 0xb3}, {0x8, 0xab, 0x8}, {0x40, 0x90, 0x4, '\x00', 0x8}, {0x1, 0x4, 0x9, '\x00', 0x4}, {0x6, 0x27, 0x0, '\x00', 0x11}, {0x2, 0xfd, 0x7, '\x00', 0xc6}, {0x3, 0xcf, 0xc, '\x00', 0x7}, {0x40, 0x9, 0x5, '\x00', 0x7}, {0x0, 0x71, 0x6, '\x00', 0x9}, {0x8, 0x84, 0x2}, {0xf9, 0x8, 0x9, '\x00', 0x2}, {0x5, 0x0, 0x3, '\x00', 0xa}, {0x3, 0x6, 0x24, '\x00', 0x1}, {0x58, 0x4, 0x61, '\x00', 0x81}, {0x3, 0xb, 0x2, '\x00', 0x5e}, {0x0, 0xfa, 0x48, '\x00', 0x9}, {0xf, 0x2, 0x3, '\x00', 0x1}, {0x5, 0xf, 0x3, '\x00', 0x2}, {0xfe, 0x1, 0xa, '\x00', 0x9}]}}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000240)={0x80, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1e50}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x154}, {}, {}, {}, {}, {}, {0x40000000}, {}, {}, {}, {}, {}, {}, {0x4000000e}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80000008}, {}, {0x0, 0x0, 0x0, 0x1000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80000008}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {0x40000001}, {0x80000019}, {}, {}]}) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x6, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x800000a, 0xc1}) connect$bt_l2cap(r1, &(0x7f00000001c0)={0x1f, 0x10, @any, 0x7, 0x1}, 0xe) syz_io_uring_setup(0x1593, &(0x7f0000000680)={0x0, 0x11b7, 0x40, 0x3, 0x6}, &(0x7f0000000400), &(0x7f0000002c00), &(0x7f0000000000)) capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000000300)={0x200002, 0x200003, 0x804, 0x4, 0x107}) 3.281971957s ago: executing program 2 (id=2134): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/rndis.usb0/ifname\x00', 0x20003, 0x0) (fail_nth: 27) 3.090140227s ago: executing program 2 (id=2137): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500540601fe8000000000000000000000000000bbfe8000000000000000000000000700aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 2.897270504s ago: executing program 2 (id=2139): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) add_key$fscrypt_v1(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x65, 0x31, 0x30]}, 0x0, 0x0, 0x0) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0) setsockopt$MRT_TABLE(r1, 0x0, 0xcf, &(0x7f00000000c0)=0xfd, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000001680)='veno', 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r7, @ANYRES16=r1], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0xc9110021, 0x0, 0x0) 2.419686771s ago: executing program 9 (id=2146): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000002c0)={0x1, 0xff, 0x5, &(0x7f0000000040)={0x1f, "1a0c1c9da4693b2542f9eb34767f98bba3d23098b4660cc16d461581326c87719d"}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x8008af26, &(0x7f0000000000)={0x1}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmmsg$inet_sctp(r3, &(0x7f0000004900)=[{&(0x7f0000000140)=@in6={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x62}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, &(0x7f0000000040)=ANY=[@ANYRESOCT=r5], 0x30, 0x24008005}], 0x1, 0x24008814) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x65, &(0x7f0000000080)=0xa43, 0x4) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000000)) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=@newlink={0x38, 0x10, 0x300, 0x0, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x880}, 0xc004090) write$P9_RAUTH(r2, &(0x7f00000000c0)={0x14, 0x67, 0x2, {0x40, 0x3, 0x2}}, 0x14) 2.114310703s ago: executing program 1 (id=2152): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x21, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000070000000900010073797a300000000040000000030a01040000000000000000070000000900010073797a30000000000900030073797a300000000014000480080001400000000408000240ffffff3854000000060a01040000000000000000070000000900010073797a30000000000900020073797a30000000002800048024000180090001006d65746100000000140002800800014000000001080002"], 0xdc}}, 0x0) 2.039497166s ago: executing program 1 (id=2153): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0xc, @private1, 0x5}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x4, 0x4, 0x3a0, 0xffffffff, 0x0, 0x1a0, 0x1a0, 0xfeffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0x100, 0x130, 0x0, {}, [@common=@srh={{0x30}, {0x88, 0x7f, 0x0, 0x5, 0x6, 0x1610, 0x51e8}}, @common=@eui64={{0x28}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2, 0x3899, 0x1000, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) 2.039228329s ago: executing program 2 (id=2154): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000240)=0x2, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x181) write$cgroup_int(r4, &(0x7f0000000540)=0x5, 0x12) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/bdc/bind\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='PNP0103:00\x00', 0xb) 1.190249579s ago: executing program 1 (id=2158): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500540601fe8000000000000000000000000000bbfe8000000000000000000000002000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 1.189728095s ago: executing program 1 (id=2159): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x400, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000035000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 939.966446ms ago: executing program 1 (id=2160): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x84000) ioctl$BLKCLOSEZONE(r0, 0x40101287, &(0x7f0000000080)={0x2, 0x1e4}) ioctl$BLKGETDISKSEQ(r0, 0x80081280, &(0x7f0000000140)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001300)={0x14, 0x2d, 0x8c7c251b32d84713, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20008040) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000001480)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socket(0x2a, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010fdfeff26bf7000f0dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="350c0400000000001c0012800b0001006d616373656300000c000280050006000100000008000500", @ANYRES32=r4, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x28001}, 0x4008800) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r6, &(0x7f0000000340)='on\x00', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/cpu/0/msr\x00', 0x2, 0x0) pwrite64(r7, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002520732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="68020000210001000000000000000000ff0200000000000000000000000000017f000001000000eacb9d23e0146aec000000000000ffffffff00000000000000a45c5f9e3c9b617d85ef194f94f3bf465d3207a71677ebe2e1a8715ba37234", @ANYRES32=r3, @ANYRES8=r4, @ANYBLOB="00000000000000000a001000060000000000000009000b00000000002c001300e00000010000d20cdc4a0000000051147a0000fc00002dffff3672ffffffffff00000000000000000400000000cc0111"], 0x268}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 819.879234ms ago: executing program 1 (id=2161): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x22, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000070000000900010073797a300000000040000000030a01040000000000000000070000000900010073797a30000000000900030073797a300000000014000480080001400000000408000240ffffff3854000000060a01040000000000000000070000000900010073797a30000000000900020073797a30000000002800048024000180090001006d65746100000000140002800800014000000001080002"], 0xdc}}, 0x0) 490.443011ms ago: executing program 8 (id=2167): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/rndis.usb0/ifname\x00', 0x20003, 0x0) (fail_nth: 30) 488.499375ms ago: executing program 8 (id=2168): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500540601fe8000000000000000000000000000bbfe8000000000000000000000004000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 410.302429ms ago: executing program 8 (id=2169): ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x0, 0x7, 0x1, 0xce}, {0x6, 0x7, 0xf, 0x100}, {0x5, 0xe4, 0x40, 0x2}, {0x8, 0x7, 0x6, 0x20000007}]}) socket(0x27, 0x3, 0xde) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) getpeername$inet(r0, 0x0, &(0x7f00000000c0)) 410.146898ms ago: executing program 8 (id=2170): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x0, 0xfffffffc}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x4040095}, 0x820) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x4040095}, 0x820) 327.480048ms ago: executing program 8 (id=2171): mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x4, &(0x7f0000000200)={'trans=virtio,', {[{@ignoreqv}]}}) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) r1 = socket(0x2, 0x805, 0x0) getsockopt$bt_hci(r1, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006) 327.055388ms ago: executing program 8 (id=2172): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) (async) mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000540), 0x4, 0x2) ioctl$KVM_GET_STATS_FD_vm(r4, 0xaece) (async) ioctl$KVM_GET_STATS_FD_vm(r4, 0xaece) close_range(r5, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000040)='./file0\x00') mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) (async) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) write(r6, &(0x7f0000000100)='vhci_hcd.0\x00', 0xa) (async) write(r6, &(0x7f0000000100)='vhci_hcd.0\x00', 0xa) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x6c, r8, 0x1, 0x70bd29, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xbfa6, @mcast1, 0x2f0}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xe}, 0x2}}}}]}]}, 0x6c}}, 0x4004090) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, &(0x7f0000000180)={r2, r2, 0x1, 0x7fffffffffffffff, 0x2}) r9 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r9, &(0x7f0000000780)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x2, {0x4, 0x2, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x8000) (async) sendmsg$tipc(r9, &(0x7f0000000780)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x2, {0x4, 0x2, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x8000) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000040)={r2}) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmmsg(r10, &(0x7f0000001940)=[{{&(0x7f00000001c0)=@nfc, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000240)=""/201, 0xc9}, {&(0x7f0000000340)=""/16, 0x10}, {&(0x7f0000000380)=""/207, 0xcf}, {&(0x7f0000000480)=""/147, 0x93}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x5, &(0x7f0000001840)=""/213, 0xd5}, 0x4}], 0x1, 0x0, &(0x7f0000001980)={0x0, 0x3938700}) (async) recvmmsg(r10, &(0x7f0000001940)=[{{&(0x7f00000001c0)=@nfc, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000240)=""/201, 0xc9}, {&(0x7f0000000340)=""/16, 0x10}, {&(0x7f0000000380)=""/207, 0xcf}, {&(0x7f0000000480)=""/147, 0x93}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x5, &(0x7f0000001840)=""/213, 0xd5}, 0x4}], 0x1, 0x0, &(0x7f0000001980)={0x0, 0x3938700}) 326.673573ms ago: executing program 9 (id=2173): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000300)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=ANY=[@ANYBLOB="400100001a001100feffffff00010000ac1e0101000000000000000000000000fc010000000000000000000000000001000107174e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc010000000000000000000000000001fe000000000000009201000000000010a39b000000000800ffff0000000000001c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffff9030000000000007e00000005350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0002000000"], 0x140}}, 0x844) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000a40)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0005000000000000000e41b0000900ac0006031100000004000b000a0012060048035c3b61c102000000007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c220175730d16a4683f5ae24e25ccc7ac9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000348cc5614f7da773c20c6a6c8bd414c8", 0xd8}], 0x1}, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f0000000580)={0x0, 0x8c1, 0x80, 0x20203843, 0x3, [0x2], [0x810003], [0x5, 0x0, 0xffffffff, 0x46], [0x0, 0x0, 0x0, 0xfffffffffffffffe]}) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r6 = openat2(r5, &(0x7f0000000200)='./cgroup\x00', &(0x7f00000000c0)={0x400000, 0x36, 0x1}, 0x18) r7 = getpid() r8 = gettid() mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r9, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_ADDFB(r6, 0xc01c64ae, &(0x7f0000000240)={r10, 0x7fff, 0xe07c, 0x8, 0x0, 0x37, 0x2}) rt_tgsigqueueinfo(r7, r8, 0x7, &(0x7f0000000280)={0xc, 0x0, 0x4}) syz_open_procfs(r8, &(0x7f0000000100)='oom_score\x00') ioctl$FBIO_WAITFORVSYNC(r5, 0x40044620, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0xc9110021, 0x0, 0x0) 0s ago: executing program 9 (id=2174): futex_waitv(&(0x7f0000000180)=[{0x3, &(0x7f0000000040)=0x3, 0x2}], 0x1, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) modify_ldt$read(0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x9, 0xe}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x67}]}}]}, 0x3c}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r4, {0x9, 0xe}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r5, &(0x7f0000000040)={0x2, 0xfe}, 0x2) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) kernel console output (not intermixed with test programs): opy_from_iter+0x1f4/0x1690 [ 171.216964][T13006] ? __asan_memset+0x23/0x50 [ 171.216985][T13006] ? __pfx__copy_from_iter+0x10/0x10 [ 171.217010][T13006] ? __pfx___alloc_skb+0x10/0x10 [ 171.217078][T13006] netlink_sendmsg+0x808/0xda0 [ 171.217124][T13006] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.217145][T13006] ? selinux_socket_sendmsg+0x198/0x2f0 [ 171.217179][T13006] ____sys_sendmsg+0xa4d/0xbe0 [ 171.217206][T13006] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.217252][T13006] ? __pfx_____sys_sendmsg+0x10/0x10 [ 171.217291][T13006] ___sys_sendmsg+0x190/0x1e0 [ 171.217322][T13006] ? __pfx____sys_sendmsg+0x10/0x10 [ 171.217348][T13006] ? __lock_acquire+0x49f/0x1a40 [ 171.217390][T13006] ? get_pid_task+0x106/0x250 [ 171.217435][T13006] __sys_sendmsg+0x160/0x210 [ 171.217458][T13006] ? __pfx___sys_sendmsg+0x10/0x10 [ 171.217494][T13006] do_syscall_64+0x115/0x870 [ 171.217517][T13006] ? clear_bhb_loop+0x40/0x90 [ 171.217540][T13006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.217559][T13006] RIP: 0033:0x7fa9a659e019 [ 171.217576][T13006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.217604][T13006] RSP: 002b:00007fa9a7521028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.217625][T13006] RAX: ffffffffffffffda RBX: 00007fa9a6825fa0 RCX: 00007fa9a659e019 [ 171.217637][T13006] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 171.217648][T13006] RBP: 00007fa9a7521090 R08: 0000000000000000 R09: 0000000000000000 [ 171.217658][T13006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.217669][T13006] R13: 00007fa9a6826038 R14: 00007fa9a6825fa0 R15: 00007ffdd81193e8 [ 171.217694][T13006] [ 171.302081][T13016] xfrm0 speed is unknown, defaulting to 1000 [ 171.412843][T13026] netlink: 232 bytes leftover after parsing attributes in process `syz.9.2025'. [ 171.421167][T13026] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2025'. [ 171.428828][T13026] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2025'. [ 171.517999][T13030] FAULT_INJECTION: forcing a failure. [ 171.517999][T13030] name failslab, interval 1, probability 0, space 0, times 0 [ 171.522722][T13030] CPU: 0 UID: 0 PID: 13030 Comm: syz.9.2026 Tainted: G L syzkaller #0 PREEMPT(full) [ 171.522750][T13030] Tainted: [L]=SOFTLOCKUP [ 171.522756][T13030] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 171.522766][T13030] Call Trace: [ 171.522773][T13030] [ 171.522780][T13030] dump_stack_lvl+0x100/0x190 [ 171.522809][T13030] should_fail_ex.cold+0x5/0xa [ 171.522833][T13030] should_failslab+0xc2/0x120 [ 171.522851][T13030] kmem_cache_alloc_noprof+0x91/0x6a0 [ 171.522868][T13030] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 171.522886][T13030] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 171.522907][T13030] mmu_topup_memory_caches+0x25/0x170 [ 171.522934][T13030] kvm_mmu_load+0xe2/0x2570 [ 171.522957][T13030] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 171.522974][T13030] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 171.522995][T13030] ? __pfx_kvm_mmu_load+0x10/0x10 [ 171.523016][T13030] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 171.523037][T13030] ? kvm_check_and_inject_events+0x873/0x12a0 [ 171.523060][T13030] ? record_steal_time+0x3a0/0xbb0 [ 171.523081][T13030] vcpu_run+0x3aaa/0x5de0 [ 171.523103][T13030] ? mark_held_locks+0x40/0x70 [ 171.523148][T13030] ? __pfx_vcpu_run+0x10/0x10 [ 171.523179][T13030] ? rcu_is_watching+0x12/0xc0 [ 171.523207][T13030] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 171.523231][T13030] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 171.523262][T13030] kvm_vcpu_ioctl+0x730/0x1700 [ 171.523282][T13030] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 171.523302][T13030] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 171.523344][T13030] ? do_vfs_ioctl+0x226/0x13e0 [ 171.523370][T13030] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 171.523395][T13030] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 171.523432][T13030] ? __fget_files+0x215/0x3d0 [ 171.523449][T13030] ? hook_file_ioctl_common+0x140/0x440 [ 171.523477][T13030] ? selinux_file_ioctl+0x13b/0x290 [ 171.523501][T13030] ? selinux_file_ioctl+0xb6/0x290 [ 171.523532][T13030] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 171.523554][T13030] __x64_sys_ioctl+0x18e/0x210 [ 171.523580][T13030] do_syscall_64+0x115/0x870 [ 171.523601][T13030] ? clear_bhb_loop+0x40/0x90 [ 171.523623][T13030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.523640][T13030] RIP: 0033:0x7f4b5f59e019 [ 171.523656][T13030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.523672][T13030] RSP: 002b:00007f4b604bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 171.523691][T13030] RAX: ffffffffffffffda RBX: 00007f4b5f825fa0 RCX: 00007f4b5f59e019 [ 171.523703][T13030] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 171.523713][T13030] RBP: 00007f4b604bb090 R08: 0000000000000000 R09: 0000000000000000 [ 171.523724][T13030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 171.523734][T13030] R13: 00007f4b5f826038 R14: 00007f4b5f825fa0 R15: 00007ffeac624068 [ 171.523758][T13030] [ 171.614149][ T61] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 171.765051][ T61] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.768419][ T61] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 171.772499][ T61] usb 6-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 171.774594][T13033] FAULT_INJECTION: forcing a failure. [ 171.774594][T13033] name failslab, interval 1, probability 0, space 0, times 0 [ 171.777906][ T61] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.782919][T13033] CPU: 0 UID: 0 PID: 13033 Comm: syz.9.2027 Tainted: G L syzkaller #0 PREEMPT(full) [ 171.782947][T13033] Tainted: [L]=SOFTLOCKUP [ 171.782954][T13033] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 171.782965][T13033] Call Trace: [ 171.782972][T13033] [ 171.782979][T13033] dump_stack_lvl+0x100/0x190 [ 171.783009][T13033] should_fail_ex.cold+0x5/0xa [ 171.783035][T13033] should_failslab+0xc2/0x120 [ 171.783060][T13033] __kmalloc_cache_noprof+0x91/0x6c0 [ 171.783088][T13033] ? ima_collect_measurement+0x94f/0xb30 [ 171.783118][T13033] ? process_measurement+0xdfe/0x2350 [ 171.783137][T13033] ? ima_file_check+0xc3/0x110 [ 171.783153][T13033] ? configfs_read_iter+0x53c/0x6f0 [ 171.783180][T13033] configfs_read_iter+0x53c/0x6f0 [ 171.783205][T13033] __kernel_read+0x397/0xad0 [ 171.783235][T13033] ? __pfx___kernel_read+0x10/0x10 [ 171.783281][T13033] integrity_kernel_read+0x7e/0xb0 [ 171.783308][T13033] ? __pfx_integrity_kernel_read+0x10/0x10 [ 171.783348][T13033] ? ima_calc_file_hash_tfm+0x236/0x350 [ 171.783373][T13033] ima_calc_file_hash_tfm+0x25e/0x350 [ 171.783395][T13033] ? __pfx_ima_calc_file_hash_tfm+0x10/0x10 [ 171.783444][T13033] ? vfs_open+0x98/0x3f0 [ 171.783464][T13033] ? ima_alloc_tfm+0x21a/0x2e0 [ 171.783488][T13033] ima_calc_file_hash+0x167/0x380 [ 171.783510][T13033] ima_collect_measurement+0x94f/0xb30 [ 171.783542][T13033] ? __pfx_ima_collect_measurement+0x10/0x10 [ 171.783577][T13033] ? process_measurement+0x5ab/0x2350 [ 171.783597][T13033] ? is_bad_inode+0xd/0x40 [ 171.783614][T13033] ? xattr_resolve_name+0x27d/0x3f0 [ 171.783638][T13033] ? vfs_getxattr_alloc+0xec/0x350 [ 171.783664][T13033] ? ima_get_hash_algo+0x241/0x400 [ 171.783692][T13033] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 171.783724][T13033] ? process_measurement+0xdfe/0x2350 [ 171.783741][T13033] process_measurement+0xdfe/0x2350 [ 171.783768][T13033] ? __pfx_process_measurement+0x10/0x10 [ 171.783822][T13033] ? __configfs_open_file+0x6ca/0x9c0 [ 171.783847][T13033] ima_file_check+0xc3/0x110 [ 171.783867][T13033] ? __pfx_ima_file_check+0x10/0x10 [ 171.783909][T13033] security_file_post_open+0xc4/0x210 [ 171.783939][T13033] path_openat+0x985/0x4280 [ 171.783969][T13033] ? __pfx_path_openat+0x10/0x10 [ 171.783996][T13033] do_file_open+0x20e/0x430 [ 171.784018][T13033] ? __pfx_do_file_open+0x10/0x10 [ 171.784055][T13033] ? alloc_fd+0x471/0x7a0 [ 171.784078][T13033] ? do_getname+0x191/0x390 [ 171.784103][T13033] do_sys_openat2+0x10f/0x1e0 [ 171.784126][T13033] ? __pfx_do_sys_openat2+0x10/0x10 [ 171.784149][T13033] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 171.784175][T13033] ? __fget_files+0x21f/0x3d0 [ 171.784196][T13033] __x64_sys_openat+0x12d/0x210 [ 171.784220][T13033] ? __pfx___x64_sys_openat+0x10/0x10 [ 171.784242][T13033] ? ksys_write+0x1ac/0x250 [ 171.784276][T13033] do_syscall_64+0x115/0x870 [ 171.784297][T13033] ? clear_bhb_loop+0x40/0x90 [ 171.784320][T13033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.784339][T13033] RIP: 0033:0x7f4b5f59e019 [ 171.784356][T13033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.784373][T13033] RSP: 002b:00007f4b604bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 171.784392][T13033] RAX: ffffffffffffffda RBX: 00007f4b5f825fa0 RCX: 00007f4b5f59e019 [ 171.784403][T13033] RDX: 0000000000020003 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 171.784413][T13033] RBP: 00007f4b604bb090 R08: 0000000000000000 R09: 0000000000000000 [ 171.784425][T13033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 171.784435][T13033] R13: 00007f4b5f826038 R14: 00007f4b5f825fa0 R15: 00007ffeac624068 [ 171.784459][T13033] [ 171.787432][ T42] audit: type=1800 audit(1785460975.773:1466): pid=13033 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.2027" name="ifname" dev="configfs" ino=59656 res=0 errno=0 [ 171.795466][ T5743] Bluetooth: hci0: command tx timeout [ 171.812787][T11234] usb 13-1: USB disconnect, device number 4 [ 171.815299][ T61] usb 6-1: config 0 descriptor?? [ 172.025154][T13040] FAULT_INJECTION: forcing a failure. [ 172.025154][T13040] name failslab, interval 1, probability 0, space 0, times 0 [ 172.029060][T13040] CPU: 0 UID: 0 PID: 13040 Comm: syz.8.2030 Tainted: G L syzkaller #0 PREEMPT(full) [ 172.029079][T13040] Tainted: [L]=SOFTLOCKUP [ 172.029083][T13040] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 172.029090][T13040] Call Trace: [ 172.029095][T13040] [ 172.029100][T13040] dump_stack_lvl+0x100/0x190 [ 172.029120][T13040] should_fail_ex.cold+0x5/0xa [ 172.029134][T13040] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 172.029162][T13040] should_failslab+0xc2/0x120 [ 172.029191][T13040] kmem_cache_alloc_noprof+0x91/0x6a0 [ 172.029206][T13040] ? skb_clone+0x190/0x400 [ 172.029243][T13040] skb_clone+0x190/0x400 [ 172.029258][T13040] netlink_deliver_tap+0xaed/0xcc0 [ 172.029281][T13040] netlink_unicast+0x62b/0x850 [ 172.029294][T13040] ? __pfx_netlink_unicast+0x10/0x10 [ 172.029311][T13040] netlink_sendmsg+0x8b0/0xda0 [ 172.029331][T13040] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.029347][T13040] ? selinux_socket_sendmsg+0x198/0x2f0 [ 172.029375][T13040] ____sys_sendmsg+0xa4d/0xbe0 [ 172.029398][T13040] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.029415][T13040] ? __pfx_____sys_sendmsg+0x10/0x10 [ 172.029450][T13040] ___sys_sendmsg+0x190/0x1e0 [ 172.029478][T13040] ? __pfx____sys_sendmsg+0x10/0x10 [ 172.029504][T13040] ? __lock_acquire+0x49f/0x1a40 [ 172.029529][T13040] ? get_pid_task+0x106/0x250 [ 172.029572][T13040] __sys_sendmsg+0x160/0x210 [ 172.029588][T13040] ? __pfx___sys_sendmsg+0x10/0x10 [ 172.029610][T13040] do_syscall_64+0x115/0x870 [ 172.029626][T13040] ? clear_bhb_loop+0x40/0x90 [ 172.029640][T13040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.029652][T13040] RIP: 0033:0x7f37adb9e019 [ 172.029662][T13040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.029674][T13040] RSP: 002b:00007f37ae9c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.029685][T13040] RAX: ffffffffffffffda RBX: 00007f37ade25fa0 RCX: 00007f37adb9e019 [ 172.029693][T13040] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 172.029700][T13040] RBP: 00007f37ae9c7090 R08: 0000000000000000 R09: 0000000000000000 [ 172.029706][T13040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.029713][T13040] R13: 00007f37ade26038 R14: 00007f37ade25fa0 R15: 00007ffc2c843dc8 [ 172.029727][T13040] [ 172.249121][T13016] NFSD: Failed to start, no listeners configured. [ 172.279405][T13047] netlink: 108 bytes leftover after parsing attributes in process `syz.8.2032'. [ 172.284409][T13047] netlink: 108 bytes leftover after parsing attributes in process `syz.8.2032'. [ 172.290240][T13047] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 172.318213][T13017] netlink: 'syz.1.2021': attribute type 20 has an invalid length. [ 172.336938][T13017] netlink: 'syz.1.2021': attribute type 20 has an invalid length. [ 172.353587][ T8307] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.358281][ T8307] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.361819][ T8307] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.365665][ T8307] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.546485][ T42] audit: type=1800 audit(1785460976.543:1467): pid=13053 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.2034" name="ifname" dev="configfs" ino=59761 res=0 errno=0 [ 172.777981][ T61] usb 6-1: string descriptor 0 read error: -71 [ 172.780888][ T61] usb 6-1: USB disconnect, device number 19 [ 172.851595][T13058] FAULT_INJECTION: forcing a failure. [ 172.851595][T13058] name failslab, interval 1, probability 0, space 0, times 0 [ 172.857158][T13058] CPU: 3 UID: 0 PID: 13058 Comm: syz.9.2036 Tainted: G L syzkaller #0 PREEMPT(full) [ 172.857179][T13058] Tainted: [L]=SOFTLOCKUP [ 172.857184][T13058] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 172.857191][T13058] Call Trace: [ 172.857196][T13058] [ 172.857201][T13058] dump_stack_lvl+0x100/0x190 [ 172.857248][T13058] should_fail_ex.cold+0x5/0xa [ 172.857266][T13058] should_failslab+0xc2/0x120 [ 172.857284][T13058] kmem_cache_alloc_noprof+0x91/0x6a0 [ 172.857299][T13058] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 172.857318][T13058] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 172.857337][T13058] mmu_topup_memory_caches+0x25/0x170 [ 172.857356][T13058] kvm_mmu_load+0xe2/0x2570 [ 172.857372][T13058] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 172.857385][T13058] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 172.857400][T13058] ? __pfx_kvm_mmu_load+0x10/0x10 [ 172.857415][T13058] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 172.857430][T13058] ? kvm_check_and_inject_events+0x873/0x12a0 [ 172.857448][T13058] ? record_steal_time+0x3a0/0xbb0 [ 172.857463][T13058] vcpu_run+0x3aaa/0x5de0 [ 172.857487][T13058] ? __pfx_vcpu_run+0x10/0x10 [ 172.857510][T13058] ? rcu_is_watching+0x12/0xc0 [ 172.857531][T13058] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 172.857549][T13058] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 172.857577][T13058] kvm_vcpu_ioctl+0x730/0x1700 [ 172.857592][T13058] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 172.857606][T13058] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 172.857622][T13058] ? do_vfs_ioctl+0x226/0x13e0 [ 172.857641][T13058] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 172.857660][T13058] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 172.857686][T13058] ? __fget_files+0x215/0x3d0 [ 172.857699][T13058] ? hook_file_ioctl_common+0x140/0x440 [ 172.857717][T13058] ? selinux_file_ioctl+0x13b/0x290 [ 172.857736][T13058] ? selinux_file_ioctl+0xb6/0x290 [ 172.857755][T13058] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 172.857770][T13058] __x64_sys_ioctl+0x18e/0x210 [ 172.857789][T13058] do_syscall_64+0x115/0x870 [ 172.857804][T13058] ? clear_bhb_loop+0x40/0x90 [ 172.857819][T13058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.857831][T13058] RIP: 0033:0x7f4b5f59e019 [ 172.857842][T13058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.857854][T13058] RSP: 002b:00007f4b604bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 172.857866][T13058] RAX: ffffffffffffffda RBX: 00007f4b5f825fa0 RCX: 00007f4b5f59e019 [ 172.857874][T13058] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 172.857881][T13058] RBP: 00007f4b604bb090 R08: 0000000000000000 R09: 0000000000000000 [ 172.857888][T13058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 172.857895][T13058] R13: 00007f4b5f826038 R14: 00007f4b5f825fa0 R15: 00007ffeac624068 [ 172.857910][T13058] [ 172.903441][ T5833] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 173.135682][ T5833] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.140226][ T5833] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.144278][ T5833] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 173.149661][ T5833] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 173.153599][ T5833] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.159173][ T5833] usb 13-1: config 0 descriptor?? [ 173.211979][T13062] FAULT_INJECTION: forcing a failure. [ 173.211979][T13062] name failslab, interval 1, probability 0, space 0, times 0 [ 173.216815][T13062] CPU: 2 UID: 0 PID: 13062 Comm: syz.9.2037 Tainted: G L syzkaller #0 PREEMPT(full) [ 173.216834][T13062] Tainted: [L]=SOFTLOCKUP [ 173.216838][T13062] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 173.216845][T13062] Call Trace: [ 173.216849][T13062] [ 173.216854][T13062] dump_stack_lvl+0x100/0x190 [ 173.216875][T13062] should_fail_ex.cold+0x5/0xa [ 173.216891][T13062] should_failslab+0xc2/0x120 [ 173.216907][T13062] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 173.216923][T13062] ? __pfx___file_ref_put+0x10/0x10 [ 173.216936][T13062] ? ima_collect_measurement+0x531/0xb30 [ 173.216953][T13062] krealloc_node_align_noprof+0x321/0x3e0 [ 173.216970][T13062] ima_collect_measurement+0x531/0xb30 [ 173.216987][T13062] ? __pfx_ima_collect_measurement+0x10/0x10 [ 173.217009][T13062] ? process_measurement+0x5ab/0x2350 [ 173.217021][T13062] ? is_bad_inode+0xd/0x40 [ 173.217031][T13062] ? xattr_resolve_name+0x27d/0x3f0 [ 173.217046][T13062] ? vfs_getxattr_alloc+0xec/0x350 [ 173.217062][T13062] ? ima_get_hash_algo+0x241/0x400 [ 173.217080][T13062] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 173.217101][T13062] ? process_measurement+0xdfe/0x2350 [ 173.217112][T13062] process_measurement+0xdfe/0x2350 [ 173.217128][T13062] ? __pfx_process_measurement+0x10/0x10 [ 173.217160][T13062] ? __configfs_open_file+0x6ca/0x9c0 [ 173.217176][T13062] ima_file_check+0xc3/0x110 [ 173.217189][T13062] ? __pfx_ima_file_check+0x10/0x10 [ 173.217205][T13062] security_file_post_open+0xc4/0x210 [ 173.217259][T13062] path_openat+0x985/0x4280 [ 173.217278][T13062] ? __pfx_path_openat+0x10/0x10 [ 173.217294][T13062] do_file_open+0x20e/0x430 [ 173.217307][T13062] ? __pfx_do_file_open+0x10/0x10 [ 173.217329][T13062] ? alloc_fd+0x471/0x7a0 [ 173.217343][T13062] ? do_getname+0x191/0x390 [ 173.217364][T13062] do_sys_openat2+0x10f/0x1e0 [ 173.217379][T13062] ? __pfx_do_sys_openat2+0x10/0x10 [ 173.217394][T13062] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 173.217410][T13062] ? __fget_files+0x21f/0x3d0 [ 173.217424][T13062] __x64_sys_openat+0x12d/0x210 [ 173.217439][T13062] ? __pfx___x64_sys_openat+0x10/0x10 [ 173.217454][T13062] ? ksys_write+0x1ac/0x250 [ 173.217476][T13062] do_syscall_64+0x115/0x870 [ 173.217490][T13062] ? clear_bhb_loop+0x40/0x90 [ 173.217504][T13062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.217516][T13062] RIP: 0033:0x7f4b5f59e019 [ 173.217527][T13062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.217538][T13062] RSP: 002b:00007f4b604bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 173.217550][T13062] RAX: ffffffffffffffda RBX: 00007f4b5f825fa0 RCX: 00007f4b5f59e019 [ 173.217557][T13062] RDX: 0000000000020003 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 173.217564][T13062] RBP: 00007f4b604bb090 R08: 0000000000000000 R09: 0000000000000000 [ 173.217571][T13062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 173.217577][T13062] R13: 00007f4b5f826038 R14: 00007f4b5f825fa0 R15: 00007ffeac624068 [ 173.217592][T13062] [ 173.217821][ T42] audit: type=1800 audit(1785460977.213:1468): pid=13062 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.2037" name="ifname" dev="configfs" ino=58965 res=0 errno=0 [ 173.382942][T13068] FAULT_INJECTION: forcing a failure. [ 173.382942][T13068] name failslab, interval 1, probability 0, space 0, times 0 [ 173.387040][T13068] CPU: 3 UID: 0 PID: 13068 Comm: syz.1.2039 Tainted: G L syzkaller #0 PREEMPT(full) [ 173.387060][T13068] Tainted: [L]=SOFTLOCKUP [ 173.387064][T13068] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 173.387070][T13068] Call Trace: [ 173.387076][T13068] [ 173.387081][T13068] dump_stack_lvl+0x100/0x190 [ 173.387103][T13068] should_fail_ex.cold+0x5/0xa [ 173.387118][T13068] should_failslab+0xc2/0x120 [ 173.387135][T13068] kmem_cache_alloc_noprof+0x91/0x6a0 [ 173.387149][T13068] ? skb_clone+0x190/0x400 [ 173.387166][T13068] skb_clone+0x190/0x400 [ 173.387181][T13068] nfnetlink_rcv_batch+0x1c8/0x2880 [ 173.387208][T13068] ? kmem_cache_free+0x127/0x6b0 [ 173.387221][T13068] ? __lock_acquire+0x49f/0x1a40 [ 173.387238][T13068] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 173.387253][T13068] ? find_held_lock+0x2b/0x80 [ 173.387271][T13068] ? avc_has_perm_noaudit+0x145/0x3b0 [ 173.387288][T13068] ? __asan_memset+0x23/0x50 [ 173.387299][T13068] ? __nla_validate_parse+0x1e7/0x28b0 [ 173.387315][T13068] ? __pfx___nla_validate_parse+0x10/0x10 [ 173.387326][T13068] ? rcu_is_watching+0x12/0xc0 [ 173.387344][T13068] ? cap_capable+0x107/0x430 [ 173.387362][T13068] ? __nla_parse+0x40/0x60 [ 173.387375][T13068] nfnetlink_rcv+0x3bd/0x440 [ 173.387389][T13068] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 173.387412][T13068] netlink_unicast+0x585/0x850 [ 173.387426][T13068] ? __pfx_netlink_unicast+0x10/0x10 [ 173.387441][T13068] netlink_sendmsg+0x8b0/0xda0 [ 173.387454][T13068] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.387466][T13068] ? selinux_socket_sendmsg+0x198/0x2f0 [ 173.387487][T13068] ____sys_sendmsg+0xa4d/0xbe0 [ 173.387503][T13068] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.387516][T13068] ? __pfx_____sys_sendmsg+0x10/0x10 [ 173.387539][T13068] ___sys_sendmsg+0x190/0x1e0 [ 173.387558][T13068] ? __pfx____sys_sendmsg+0x10/0x10 [ 173.387575][T13068] ? __lock_acquire+0x49f/0x1a40 [ 173.387589][T13068] ? get_pid_task+0x106/0x250 [ 173.387614][T13068] __sys_sendmsg+0x160/0x210 [ 173.387629][T13068] ? __pfx___sys_sendmsg+0x10/0x10 [ 173.387650][T13068] do_syscall_64+0x115/0x870 [ 173.387664][T13068] ? clear_bhb_loop+0x40/0x90 [ 173.387678][T13068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.387690][T13068] RIP: 0033:0x7fe45f99e019 [ 173.387700][T13068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.387712][T13068] RSP: 002b:00007fe460851028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.387724][T13068] RAX: ffffffffffffffda RBX: 00007fe45fc25fa0 RCX: 00007fe45f99e019 [ 173.387731][T13068] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 173.387738][T13068] RBP: 00007fe460851090 R08: 0000000000000000 R09: 0000000000000000 [ 173.387745][T13068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.387751][T13068] R13: 00007fe45fc26038 R14: 00007fe45fc25fa0 R15: 00007ffcafe866a8 [ 173.387766][T13068] [ 173.571573][ T5833] hid_parser_main: 4086 callbacks suppressed [ 173.571596][ T5833] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 173.576405][ T5833] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 173.578717][ T5833] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 173.581017][ T5833] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 173.583372][ T5833] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 173.595442][ T5833] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 173.706555][T13070] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 173.831510][T13082] netlink: 'syz.0.2043': attribute type 21 has an invalid length. [ 173.844504][T13055] IPv6: NLM_F_CREATE should be specified when creating new route [ 173.874795][ T5743] Bluetooth: hci0: command tx timeout [ 173.896406][ T42] audit: type=1400 audit(1785460977.893:1469): avc: denied { ioctl } for pid=13081 comm="syz.0.2043" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 173.903276][ T5840] usb 13-1: USB disconnect, device number 5 [ 173.955367][ T42] audit: type=1400 audit(1785460977.953:1470): avc: denied { write } for pid=13085 comm="syz.0.2044" name="strings" dev="configfs" ino=11001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 173.973236][ T42] audit: type=1400 audit(1785460977.963:1471): avc: denied { write } for pid=13085 comm="syz.0.2044" name="functions" dev="configfs" ino=10999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 173.985105][ T42] audit: type=1400 audit(1785460977.973:1472): avc: denied { mounton } for pid=13085 comm="syz.0.2044" path="/154/config" dev="configfs" ino=2129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 174.421888][ T8878] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.559395][ T8878] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.613295][ T5753] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 174.618691][ T5753] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 174.628646][ T5753] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 174.642930][ T5753] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 174.650965][ T5753] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 174.679943][ T8878] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 174.832325][ T8878] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.035370][T13093] xfrm0 speed is unknown, defaulting to 1000 [ 175.107602][ T8878] bridge_slave_1: left allmulticast mode [ 175.109795][ T8878] bridge_slave_1: left promiscuous mode [ 175.112113][ T8878] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.119817][ T8878] bridge_slave_0: left allmulticast mode [ 175.122020][ T8878] bridge_slave_0: left promiscuous mode [ 175.124826][ T8878] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.278607][ T7779] smbdirect: ib_dev[syz1] removed [ 175.346849][ T8878]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.352974][ T8878]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.358510][ T8878]  (unregistering): Released all slaves [ 175.363416][ T8878] bond0 (unregistering): Released all slaves [ 175.390336][ T5818] xfrm0 speed is unknown, defaulting to 1000 [ 175.392392][ T5818] infiniband syz1: ib_query_port failed (-19) [ 175.603956][T13093] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.606501][T13093] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.608909][T13093] bridge_slave_0: entered allmulticast mode [ 175.611638][T13093] bridge_slave_0: entered promiscuous mode [ 175.617279][ T5451] 8021q: adding VLAN 0 to HW filter on device eth17 [ 175.640201][ T8878] tipc: Left network mode [ 175.658627][T13093] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.663631][T13093] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.670848][T13093] bridge_slave_1: entered allmulticast mode [ 175.675043][T13093] bridge_slave_1: entered promiscuous mode [ 175.721705][T13093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.733149][T13093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.753164][ T42] kauditd_printk_skb: 106 callbacks suppressed [ 175.753182][ T42] audit: type=1400 audit(1785460979.733:1579): avc: denied { write } for pid=13123 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.823012][T13093] team0: Port device team_slave_0 added [ 175.829652][ T42] audit: type=1400 audit(1785460979.823:1580): avc: denied { write } for pid=13128 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.842007][T13093] team0: Port device team_slave_1 added [ 175.854029][T13127] FAULT_INJECTION: forcing a failure. [ 175.854029][T13127] name failslab, interval 1, probability 0, space 0, times 0 [ 175.864875][T13127] CPU: 3 UID: 0 PID: 13127 Comm: syz.9.2051 Tainted: G L syzkaller #0 PREEMPT(full) [ 175.864908][T13127] Tainted: [L]=SOFTLOCKUP [ 175.864914][T13127] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 175.864925][T13127] Call Trace: [ 175.864933][T13127] [ 175.864941][T13127] dump_stack_lvl+0x100/0x190 [ 175.864972][T13127] should_fail_ex.cold+0x5/0xa [ 175.864997][T13127] should_failslab+0xc2/0x120 [ 175.865024][T13127] kmem_cache_alloc_noprof+0x91/0x6a0 [ 175.865050][T13127] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 175.865080][T13127] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 175.865111][T13127] mmu_topup_memory_caches+0x25/0x170 [ 175.865140][T13127] kvm_mmu_load+0xe2/0x2570 [ 175.865165][T13127] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 175.865185][T13127] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 175.865234][T13127] ? __pfx_kvm_mmu_load+0x10/0x10 [ 175.865258][T13127] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 175.865280][T13127] ? kvm_check_and_inject_events+0x873/0x12a0 [ 175.865306][T13127] ? record_steal_time+0x3a0/0xbb0 [ 175.865328][T13127] vcpu_run+0x3aaa/0x5de0 [ 175.865365][T13127] ? __pfx_vcpu_run+0x10/0x10 [ 175.865400][T13127] ? rcu_is_watching+0x12/0xc0 [ 175.865437][T13127] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 175.865465][T13127] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 175.865498][T13127] kvm_vcpu_ioctl+0x730/0x1700 [ 175.865521][T13127] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 175.865542][T13127] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 175.865567][T13127] ? do_vfs_ioctl+0x226/0x13e0 [ 175.865595][T13127] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 175.865620][T13127] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 175.865661][T13127] ? __fget_files+0x215/0x3d0 [ 175.865681][T13127] ? hook_file_ioctl_common+0x140/0x440 [ 175.865709][T13127] ? selinux_file_ioctl+0x13b/0x290 [ 175.865736][T13127] ? selinux_file_ioctl+0xb6/0x290 [ 175.865765][T13127] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 175.865788][T13127] __x64_sys_ioctl+0x18e/0x210 [ 175.865816][T13127] do_syscall_64+0x115/0x870 [ 175.865839][T13127] ? clear_bhb_loop+0x40/0x90 [ 175.865861][T13127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.865880][T13127] RIP: 0033:0x7f4b5f59e019 [ 175.865897][T13127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.865915][T13127] RSP: 002b:00007f4b604bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 175.865933][T13127] RAX: ffffffffffffffda RBX: 00007f4b5f825fa0 RCX: 00007f4b5f59e019 [ 175.865961][T13127] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 175.865972][T13127] RBP: 00007f4b604bb090 R08: 0000000000000000 R09: 0000000000000000 [ 175.865982][T13127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 175.865991][T13127] R13: 00007f4b5f826038 R14: 00007f4b5f825fa0 R15: 00007ffeac624068 [ 175.866015][T13127] [ 175.874208][ T5451] 8021q: adding VLAN 0 to HW filter on device eth18 [ 175.977821][T13093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.980878][T13093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 175.989341][T13093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.017412][ T8878] hsr_slave_0: left promiscuous mode [ 176.021012][ T8878] hsr_slave_1: left promiscuous mode [ 176.024013][ T8878] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.027192][ T8878] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.031838][ T8878] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.039489][ T8878] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.057545][ T8878] veth1_macvtap: left promiscuous mode [ 176.061724][ T8878] veth0_macvtap: left promiscuous mode [ 176.063662][ T8878] veth1_vlan: left promiscuous mode [ 176.065433][ T8878] veth0_vlan: left promiscuous mode [ 176.292823][ T8878] team0 (unregistering): Port device team_slave_1 removed [ 176.306136][ T8878] team0 (unregistering): Port device team_slave_0 removed [ 176.365730][T13135] openvswitch: netlink: IP tunnel dst address not specified [ 176.438036][T13093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.441487][T13093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.453823][T13093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.467682][T13132] FAULT_INJECTION: forcing a failure. [ 176.467682][T13132] name failslab, interval 1, probability 0, space 0, times 0 [ 176.476395][T13132] CPU: 2 UID: 0 PID: 13132 Comm: syz.9.2052 Tainted: G L syzkaller #0 PREEMPT(full) [ 176.476426][T13132] Tainted: [L]=SOFTLOCKUP [ 176.476433][T13132] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 176.476443][T13132] Call Trace: [ 176.476450][T13132] [ 176.476458][T13132] dump_stack_lvl+0x100/0x190 [ 176.476490][T13132] should_fail_ex.cold+0x5/0xa [ 176.476514][T13132] should_failslab+0xc2/0x120 [ 176.476557][T13132] kmem_cache_alloc_noprof+0x91/0x6a0 [ 176.476582][T13132] ? audit_log_start+0x29d/0x930 [ 176.476606][T13132] audit_log_start+0x29d/0x930 [ 176.476626][T13132] ? __pfx_audit_log_start+0x10/0x10 [ 176.476657][T13132] integrity_audit_message+0x10c/0x4f0 [ 176.476686][T13132] ? take_dentry_name_snapshot+0x30b/0x7c0 [ 176.476714][T13132] ? __pfx_integrity_audit_message+0x10/0x10 [ 176.476758][T13132] ? take_dentry_name_snapshot+0x310/0x7c0 [ 176.476789][T13132] integrity_audit_msg+0x41/0x60 [ 176.476818][T13132] ima_collect_measurement+0x79a/0xb30 [ 176.476848][T13132] ? __pfx_ima_collect_measurement+0x10/0x10 [ 176.476885][T13132] ? process_measurement+0x5ab/0x2350 [ 176.476907][T13132] ? is_bad_inode+0xd/0x40 [ 176.476924][T13132] ? xattr_resolve_name+0x27d/0x3f0 [ 176.476954][T13132] ? vfs_getxattr_alloc+0xec/0x350 [ 176.476981][T13132] ? ima_get_hash_algo+0x241/0x400 [ 176.477008][T13132] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 176.477042][T13132] ? process_measurement+0xdfe/0x2350 [ 176.477060][T13132] process_measurement+0xdfe/0x2350 [ 176.477089][T13132] ? __pfx_process_measurement+0x10/0x10 [ 176.477144][T13132] ? __configfs_open_file+0x6ca/0x9c0 [ 176.477172][T13132] ima_file_check+0xc3/0x110 [ 176.477193][T13132] ? __pfx_ima_file_check+0x10/0x10 [ 176.477245][T13132] security_file_post_open+0xc4/0x210 [ 176.477277][T13132] path_openat+0x985/0x4280 [ 176.477307][T13132] ? __pfx_path_openat+0x10/0x10 [ 176.477335][T13132] do_file_open+0x20e/0x430 [ 176.477356][T13132] ? __pfx_do_file_open+0x10/0x10 [ 176.477394][T13132] ? alloc_fd+0x471/0x7a0 [ 176.477417][T13132] ? do_getname+0x191/0x390 [ 176.477443][T13132] do_sys_openat2+0x10f/0x1e0 [ 176.477467][T13132] ? __pfx_do_sys_openat2+0x10/0x10 [ 176.477491][T13132] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 176.477516][T13132] ? __fget_files+0x21f/0x3d0 [ 176.477540][T13132] __x64_sys_openat+0x12d/0x210 [ 176.477564][T13132] ? __pfx___x64_sys_openat+0x10/0x10 [ 176.477586][T13132] ? ksys_write+0x1ac/0x250 [ 176.477637][T13132] do_syscall_64+0x115/0x870 [ 176.477659][T13132] ? clear_bhb_loop+0x40/0x90 [ 176.477681][T13132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.477702][T13132] RIP: 0033:0x7f4b5f59e019 [ 176.477718][T13132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.477736][T13132] RSP: 002b:00007f4b604bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 176.477758][T13132] RAX: ffffffffffffffda RBX: 00007f4b5f825fa0 RCX: 00007f4b5f59e019 [ 176.477770][T13132] RDX: 0000000000020003 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 176.477781][T13132] RBP: 00007f4b604bb090 R08: 0000000000000000 R09: 0000000000000000 [ 176.477792][T13132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 176.477803][T13132] R13: 00007f4b5f826038 R14: 00007f4b5f825fa0 R15: 00007ffeac624068 [ 176.477829][T13132] [ 176.477939][T13132] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 176.514242][T13135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5517 sclass=netlink_route_socket pid=13135 comm=syz.8.2053 [ 176.525019][T13132] audit: out of memory in audit_log_start [ 176.663057][T13093] hsr_slave_0: entered promiscuous mode [ 176.669871][T13093] hsr_slave_1: entered promiscuous mode [ 176.697564][T13140] FAULT_INJECTION: forcing a failure. [ 176.697564][T13140] name failslab, interval 1, probability 0, space 0, times 0 [ 176.702666][T13140] CPU: 3 UID: 0 PID: 13140 Comm: syz.9.2054 Tainted: G L syzkaller #0 PREEMPT(full) [ 176.702712][T13140] Tainted: [L]=SOFTLOCKUP [ 176.702719][T13140] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 176.702730][T13140] Call Trace: [ 176.702737][T13140] [ 176.702745][T13140] dump_stack_lvl+0x100/0x190 [ 176.702776][T13140] should_fail_ex.cold+0x5/0xa [ 176.702802][T13140] should_failslab+0xc2/0x120 [ 176.702828][T13140] __kmalloc_cache_noprof+0x91/0x6c0 [ 176.702858][T13140] ? nf_tables_newtable+0xd0a/0x1a90 [ 176.702892][T13140] nf_tables_newtable+0xd0a/0x1a90 [ 176.702921][T13140] ? __pfx_nf_tables_newtable+0x10/0x10 [ 176.702950][T13140] ? __nla_parse+0x40/0x60 [ 176.702974][T13140] nfnetlink_rcv_batch+0x1410/0x2880 [ 176.703013][T13140] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 176.703037][T13140] ? find_held_lock+0x2b/0x80 [ 176.703071][T13140] ? avc_has_perm_noaudit+0x145/0x3b0 [ 176.703132][T13140] ? __nla_parse+0x40/0x60 [ 176.703154][T13140] nfnetlink_rcv+0x3bd/0x440 [ 176.703178][T13140] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 176.703208][T13140] netlink_unicast+0x585/0x850 [ 176.703231][T13140] ? __pfx_netlink_unicast+0x10/0x10 [ 176.703257][T13140] netlink_sendmsg+0x8b0/0xda0 [ 176.703280][T13140] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.703300][T13140] ? selinux_socket_sendmsg+0x198/0x2f0 [ 176.703349][T13140] ____sys_sendmsg+0xa4d/0xbe0 [ 176.703377][T13140] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.703397][T13140] ? __pfx_____sys_sendmsg+0x10/0x10 [ 176.703436][T13140] ___sys_sendmsg+0x190/0x1e0 [ 176.703472][T13140] ? __pfx____sys_sendmsg+0x10/0x10 [ 176.703499][T13140] ? __lock_acquire+0x49f/0x1a40 [ 176.703522][T13140] ? get_pid_task+0x106/0x250 [ 176.703565][T13140] __sys_sendmsg+0x160/0x210 [ 176.703589][T13140] ? __pfx___sys_sendmsg+0x10/0x10 [ 176.703627][T13140] do_syscall_64+0x115/0x870 [ 176.703649][T13140] ? clear_bhb_loop+0x40/0x90 [ 176.703672][T13140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.703692][T13140] RIP: 0033:0x7f4b5f59e019 [ 176.703708][T13140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.703727][T13140] RSP: 002b:00007f4b604bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.703746][T13140] RAX: ffffffffffffffda RBX: 00007f4b5f825fa0 RCX: 00007f4b5f59e019 [ 176.703759][T13140] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 176.703770][T13140] RBP: 00007f4b604bb090 R08: 0000000000000000 R09: 0000000000000000 [ 176.703781][T13140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.703792][T13140] R13: 00007f4b5f826038 R14: 00007f4b5f825fa0 R15: 00007ffeac624068 [ 176.703819][T13140] [ 176.795396][ T5753] Bluetooth: hci1: command tx timeout [ 176.801634][ T42] audit: type=1400 audit(1785460980.773:1581): avc: denied { write } for pid=13141 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.883662][T13148] ipt_REJECT: TCP_RESET invalid for non-tcp [ 176.883919][T13147] ipt_REJECT: TCP_RESET invalid for non-tcp [ 176.908352][ T42] audit: type=1400 audit(1785460980.903:1582): avc: denied { write } for pid=13149 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.914308][T13151] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 176.984952][ T5451] 8021q: adding VLAN 0 to HW filter on device eth19 [ 176.992860][ T42] audit: type=1800 audit(1785460980.983:1583): pid=13151 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.2057" name="ifname" dev="configfs" ino=60001 res=0 errno=0 [ 177.184243][T13093] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.220038][ T42] audit: type=1400 audit(1785460981.213:1584): avc: denied { write } for pid=13159 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.297752][T13093] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.311764][ T42] audit: type=1400 audit(1785460981.303:1585): avc: denied { write } for pid=13165 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.354486][ T5451] 8021q: adding VLAN 0 to HW filter on device eth20 [ 177.452104][T13170] FAULT_INJECTION: forcing a failure. [ 177.452104][T13170] name failslab, interval 1, probability 0, space 0, times 0 [ 177.456542][T13170] CPU: 0 UID: 0 PID: 13170 Comm: syz.8.2061 Tainted: G L syzkaller #0 PREEMPT(full) [ 177.456564][T13170] Tainted: [L]=SOFTLOCKUP [ 177.456568][T13170] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 177.456575][T13170] Call Trace: [ 177.456580][T13170] [ 177.456584][T13170] dump_stack_lvl+0x100/0x190 [ 177.456606][T13170] should_fail_ex.cold+0x5/0xa [ 177.456622][T13170] should_failslab+0xc2/0x120 [ 177.456638][T13170] kmem_cache_alloc_noprof+0x91/0x6a0 [ 177.456653][T13170] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 177.456670][T13170] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 177.456688][T13170] mmu_topup_memory_caches+0x25/0x170 [ 177.456706][T13170] kvm_mmu_load+0xe2/0x2570 [ 177.456721][T13170] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 177.456733][T13170] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 177.456747][T13170] ? __pfx_kvm_mmu_load+0x10/0x10 [ 177.456762][T13170] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 177.456776][T13170] ? kvm_check_and_inject_events+0x873/0x12a0 [ 177.456793][T13170] ? record_steal_time+0x3a0/0xbb0 [ 177.456807][T13170] vcpu_run+0x3aaa/0x5de0 [ 177.456834][T13170] ? __pfx_vcpu_run+0x10/0x10 [ 177.456865][T13170] ? rcu_is_watching+0x12/0xc0 [ 177.456896][T13170] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 177.456925][T13170] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 177.456954][T13170] kvm_vcpu_ioctl+0x730/0x1700 [ 177.456968][T13170] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 177.456981][T13170] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 177.456997][T13170] ? do_vfs_ioctl+0x226/0x13e0 [ 177.457015][T13170] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 177.457032][T13170] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 177.457062][T13170] ? __fget_files+0x215/0x3d0 [ 177.457075][T13170] ? hook_file_ioctl_common+0x140/0x440 [ 177.457092][T13170] ? selinux_file_ioctl+0x13b/0x290 [ 177.457109][T13170] ? selinux_file_ioctl+0xb6/0x290 [ 177.457128][T13170] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 177.457141][T13170] __x64_sys_ioctl+0x18e/0x210 [ 177.457159][T13170] do_syscall_64+0x115/0x870 [ 177.457174][T13170] ? clear_bhb_loop+0x40/0x90 [ 177.457189][T13170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.457228][T13170] RIP: 0033:0x7f37adb9e019 [ 177.457243][T13170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.457256][T13170] RSP: 002b:00007f37ae9c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 177.457269][T13170] RAX: ffffffffffffffda RBX: 00007f37ade25fa0 RCX: 00007f37adb9e019 [ 177.457276][T13170] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 177.457283][T13170] RBP: 00007f37ae9c7090 R08: 0000000000000000 R09: 0000000000000000 [ 177.457289][T13170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 177.457296][T13170] R13: 00007f37ade26038 R14: 00007f37ade25fa0 R15: 00007ffc2c843dc8 [ 177.457311][T13170] [ 177.579549][T13093] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.716866][T13176] FAULT_INJECTION: forcing a failure. [ 177.716866][T13176] name failslab, interval 1, probability 0, space 0, times 0 [ 177.722135][T13176] CPU: 2 UID: 0 PID: 13176 Comm: syz.8.2062 Tainted: G L syzkaller #0 PREEMPT(full) [ 177.722164][T13176] Tainted: [L]=SOFTLOCKUP [ 177.722171][T13176] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 177.722182][T13176] Call Trace: [ 177.722213][T13176] [ 177.722221][T13176] dump_stack_lvl+0x100/0x190 [ 177.722323][T13176] should_fail_ex.cold+0x5/0xa [ 177.722369][T13176] should_failslab+0xc2/0x120 [ 177.722408][T13176] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 177.722433][T13176] ? __alloc_skb+0x140/0x710 [ 177.722492][T13176] __alloc_skb+0x140/0x710 [ 177.722510][T13176] ? __alloc_skb+0x5b7/0x710 [ 177.722528][T13176] ? __pfx___alloc_skb+0x10/0x10 [ 177.722549][T13176] ? lockdep_init_map_type+0x5c/0x250 [ 177.722590][T13176] audit_log_start+0x350/0x930 [ 177.722612][T13176] ? __pfx_audit_log_start+0x10/0x10 [ 177.722642][T13176] integrity_audit_message+0x10c/0x4f0 [ 177.722705][T13176] ? take_dentry_name_snapshot+0x30b/0x7c0 [ 177.722741][T13176] ? __pfx_integrity_audit_message+0x10/0x10 [ 177.722768][T13176] ? take_dentry_name_snapshot+0x310/0x7c0 [ 177.722797][T13176] integrity_audit_msg+0x41/0x60 [ 177.722824][T13176] ima_collect_measurement+0x79a/0xb30 [ 177.722852][T13176] ? __pfx_ima_collect_measurement+0x10/0x10 [ 177.722891][T13176] ? process_measurement+0x5ab/0x2350 [ 177.722910][T13176] ? is_bad_inode+0xd/0x40 [ 177.722927][T13176] ? xattr_resolve_name+0x27d/0x3f0 [ 177.722950][T13176] ? vfs_getxattr_alloc+0xec/0x350 [ 177.722976][T13176] ? ima_get_hash_algo+0x241/0x400 [ 177.723004][T13176] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 177.723036][T13176] ? process_measurement+0xdfe/0x2350 [ 177.723054][T13176] process_measurement+0xdfe/0x2350 [ 177.723113][T13176] ? __pfx_process_measurement+0x10/0x10 [ 177.723168][T13176] ? __configfs_open_file+0x6ca/0x9c0 [ 177.723205][T13176] ima_file_check+0xc3/0x110 [ 177.723226][T13176] ? __pfx_ima_file_check+0x10/0x10 [ 177.723251][T13176] security_file_post_open+0xc4/0x210 [ 177.723294][T13176] path_openat+0x985/0x4280 [ 177.723324][T13176] ? __pfx_path_openat+0x10/0x10 [ 177.723367][T13176] do_file_open+0x20e/0x430 [ 177.723387][T13176] ? __pfx_do_file_open+0x10/0x10 [ 177.723425][T13176] ? alloc_fd+0x471/0x7a0 [ 177.723448][T13176] ? do_getname+0x191/0x390 [ 177.723473][T13176] do_sys_openat2+0x10f/0x1e0 [ 177.723513][T13176] ? __pfx_do_sys_openat2+0x10/0x10 [ 177.723536][T13176] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 177.723615][T13176] ? __fget_files+0x21f/0x3d0 [ 177.723639][T13176] __x64_sys_openat+0x12d/0x210 [ 177.723664][T13176] ? __pfx___x64_sys_openat+0x10/0x10 [ 177.723687][T13176] ? ksys_write+0x1ac/0x250 [ 177.723724][T13176] do_syscall_64+0x115/0x870 [ 177.723747][T13176] ? clear_bhb_loop+0x40/0x90 [ 177.723770][T13176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.723790][T13176] RIP: 0033:0x7f37adb9e019 [ 177.723807][T13176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.723826][T13176] RSP: 002b:00007f37ae9c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 177.723866][T13176] RAX: ffffffffffffffda RBX: 00007f37ade25fa0 RCX: 00007f37adb9e019 [ 177.723878][T13176] RDX: 0000000000020003 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 177.723889][T13176] RBP: 00007f37ae9c7090 R08: 0000000000000000 R09: 0000000000000000 [ 177.723902][T13176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 177.723914][T13176] R13: 00007f37ade26038 R14: 00007f37ade25fa0 R15: 00007ffc2c843dc8 [ 177.723940][T13176] [ 177.874437][T13176] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 177.950890][T13178] __nla_validate_parse: 6 callbacks suppressed [ 177.950910][T13178] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2063'. [ 177.952004][T13093] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.016502][T13184] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2066'. [ 178.060183][T13187] FAULT_INJECTION: forcing a failure. [ 178.060183][T13187] name failslab, interval 1, probability 0, space 0, times 0 [ 178.065579][T13187] CPU: 3 UID: 0 PID: 13187 Comm: syz.8.2067 Tainted: G L syzkaller #0 PREEMPT(full) [ 178.065608][T13187] Tainted: [L]=SOFTLOCKUP [ 178.065615][T13187] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 178.065625][T13187] Call Trace: [ 178.065632][T13187] [ 178.065639][T13187] dump_stack_lvl+0x100/0x190 [ 178.065671][T13187] should_fail_ex.cold+0x5/0xa [ 178.065695][T13187] should_failslab+0xc2/0x120 [ 178.065720][T13187] __kmalloc_noprof+0xfc/0x820 [ 178.065740][T13187] ? __kasan_kmalloc+0xaa/0xb0 [ 178.065761][T13187] ? nla_strdup+0xc3/0x150 [ 178.065805][T13187] nla_strdup+0xc3/0x150 [ 178.065832][T13187] nf_tables_newtable+0xd9c/0x1a90 [ 178.065887][T13187] ? __pfx_nf_tables_newtable+0x10/0x10 [ 178.065914][T13187] ? __nla_parse+0x40/0x60 [ 178.065935][T13187] nfnetlink_rcv_batch+0x1410/0x2880 [ 178.065974][T13187] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 178.065996][T13187] ? find_held_lock+0x2b/0x80 [ 178.066027][T13187] ? avc_has_perm_noaudit+0x145/0x3b0 [ 178.066074][T13187] ? __nla_parse+0x40/0x60 [ 178.066094][T13187] nfnetlink_rcv+0x3bd/0x440 [ 178.066116][T13187] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 178.066145][T13187] netlink_unicast+0x585/0x850 [ 178.066174][T13187] ? __pfx_netlink_unicast+0x10/0x10 [ 178.066199][T13187] netlink_sendmsg+0x8b0/0xda0 [ 178.066220][T13187] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.066241][T13187] ? selinux_socket_sendmsg+0x198/0x2f0 [ 178.066272][T13187] ____sys_sendmsg+0xa4d/0xbe0 [ 178.066299][T13187] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.066318][T13187] ? __pfx_____sys_sendmsg+0x10/0x10 [ 178.066361][T13187] ___sys_sendmsg+0x190/0x1e0 [ 178.066391][T13187] ? __pfx____sys_sendmsg+0x10/0x10 [ 178.066417][T13187] ? __lock_acquire+0x49f/0x1a40 [ 178.066439][T13187] ? get_pid_task+0x106/0x250 [ 178.066483][T13187] __sys_sendmsg+0x160/0x210 [ 178.066505][T13187] ? __pfx___sys_sendmsg+0x10/0x10 [ 178.066540][T13187] do_syscall_64+0x115/0x870 [ 178.066563][T13187] ? clear_bhb_loop+0x40/0x90 [ 178.066585][T13187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.066603][T13187] RIP: 0033:0x7f37adb9e019 [ 178.066619][T13187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.066635][T13187] RSP: 002b:00007f37ae9c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.066655][T13187] RAX: ffffffffffffffda RBX: 00007f37ade25fa0 RCX: 00007f37adb9e019 [ 178.066667][T13187] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 178.066678][T13187] RBP: 00007f37ae9c7090 R08: 0000000000000000 R09: 0000000000000000 [ 178.066688][T13187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.066698][T13187] R13: 00007f37ade26038 R14: 00007f37ade25fa0 R15: 00007ffc2c843dc8 [ 178.066723][T13187] [ 178.130506][T13093] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 178.187813][T13093] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 178.191236][T13190] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2068'. [ 178.191835][T13093] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 178.206593][T13190] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2068'. [ 178.214074][T13093] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 178.217868][T13093] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 178.218907][T13190] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2068'. [ 178.233859][T13093] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 178.238559][T13093] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 178.246028][T13093] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 178.342114][T13093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.351851][T13093] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.357784][T10717] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.360182][T10717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.370617][T10717] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.372914][T10717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.470473][T13200] FAULT_INJECTION: forcing a failure. [ 178.470473][T13200] name failslab, interval 1, probability 0, space 0, times 0 [ 178.474952][T13200] CPU: 0 UID: 0 PID: 13200 Comm: syz.8.2070 Tainted: G L syzkaller #0 PREEMPT(full) [ 178.474971][T13200] Tainted: [L]=SOFTLOCKUP [ 178.474976][T13200] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 178.474982][T13200] Call Trace: [ 178.474987][T13200] [ 178.474992][T13200] dump_stack_lvl+0x100/0x190 [ 178.475012][T13200] should_fail_ex.cold+0x5/0xa [ 178.475028][T13200] should_failslab+0xc2/0x120 [ 178.475049][T13200] kmem_cache_alloc_noprof+0x91/0x6a0 [ 178.475064][T13200] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 178.475083][T13200] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 178.475101][T13200] mmu_topup_memory_caches+0x25/0x170 [ 178.475120][T13200] kvm_mmu_load+0xe2/0x2570 [ 178.475136][T13200] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 178.475149][T13200] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 178.475162][T13200] ? __pfx_kvm_mmu_load+0x10/0x10 [ 178.475177][T13200] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 178.475192][T13200] ? kvm_check_and_inject_events+0x873/0x12a0 [ 178.475208][T13200] ? record_steal_time+0x3a0/0xbb0 [ 178.475222][T13200] vcpu_run+0x3aaa/0x5de0 [ 178.475244][T13200] ? __pfx_vcpu_run+0x10/0x10 [ 178.475266][T13200] ? rcu_is_watching+0x12/0xc0 [ 178.475287][T13200] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 178.475304][T13200] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 178.475325][T13200] kvm_vcpu_ioctl+0x730/0x1700 [ 178.475339][T13200] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 178.475353][T13200] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 178.475368][T13200] ? do_vfs_ioctl+0x226/0x13e0 [ 178.475387][T13200] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 178.475404][T13200] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 178.475430][T13200] ? __fget_files+0x215/0x3d0 [ 178.475442][T13200] ? hook_file_ioctl_common+0x140/0x440 [ 178.475459][T13200] ? selinux_file_ioctl+0x13b/0x290 [ 178.475477][T13200] ? selinux_file_ioctl+0xb6/0x290 [ 178.475496][T13200] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 178.475509][T13200] __x64_sys_ioctl+0x18e/0x210 [ 178.475527][T13200] do_syscall_64+0x115/0x870 [ 178.475542][T13200] ? clear_bhb_loop+0x40/0x90 [ 178.475556][T13200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.475568][T13200] RIP: 0033:0x7f37adb9e019 [ 178.475579][T13200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.475590][T13200] RSP: 002b:00007f37ae9c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 178.475602][T13200] RAX: ffffffffffffffda RBX: 00007f37ade25fa0 RCX: 00007f37adb9e019 [ 178.475609][T13200] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 178.475616][T13200] RBP: 00007f37ae9c7090 R08: 0000000000000000 R09: 0000000000000000 [ 178.475623][T13200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 178.475630][T13200] R13: 00007f37ade26038 R14: 00007f37ade25fa0 R15: 00007ffc2c843dc8 [ 178.475644][T13200] [ 178.772311][T13093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.823481][T13093] veth0_vlan: entered promiscuous mode [ 178.832868][T13093] veth1_vlan: entered promiscuous mode [ 178.835663][ T5753] Bluetooth: hci1: command tx timeout [ 178.873622][T13093] veth0_macvtap: entered promiscuous mode [ 178.882291][T13093] veth1_macvtap: entered promiscuous mode [ 178.898809][T13093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.908548][T13093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.943073][ T5817] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.954587][ T5817] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.022913][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.028511][ T5817] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.032889][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.036465][ T5817] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.074135][T10717] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.077816][T10717] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.134739][T13225] FAULT_INJECTION: forcing a failure. [ 179.134739][T13225] name failslab, interval 1, probability 0, space 0, times 0 [ 179.152505][T13225] CPU: 1 UID: 0 PID: 13225 Comm: syz.1.2073 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.152528][T13225] Tainted: [L]=SOFTLOCKUP [ 179.152532][T13225] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 179.152539][T13225] Call Trace: [ 179.152550][T13225] [ 179.152555][T13225] dump_stack_lvl+0x100/0x190 [ 179.152625][T13225] should_fail_ex.cold+0x5/0xa [ 179.152651][T13225] should_failslab+0xc2/0x120 [ 179.152677][T13225] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 179.152693][T13225] ? sidtab_sid2str_get+0x17a/0x670 [ 179.152733][T13225] kmemdup_noprof+0x29/0x60 [ 179.152746][T13225] sidtab_sid2str_get+0x17a/0x670 [ 179.152760][T13225] security_sid_to_context_core+0x35a/0x6d0 [ 179.152786][T13225] selinux_lsmprop_to_secctx+0xe4/0x1b0 [ 179.152807][T13225] ? __pfx_selinux_lsmprop_to_secctx+0x10/0x10 [ 179.152826][T13225] ? skb_put+0x138/0x180 [ 179.152869][T13225] security_lsmprop_to_secctx+0x146/0x1a0 [ 179.152897][T13225] audit_log_subj_ctx+0x346/0x450 [ 179.152914][T13225] ? ktime_get_coarse_real_ts64+0x187/0x1f0 [ 179.152929][T13225] ? map_id_range_up+0x2ce/0x3b0 [ 179.152943][T13225] ? __pfx_audit_log_subj_ctx+0x10/0x10 [ 179.152955][T13225] ? audit_log_format+0xe8/0x130 [ 179.152968][T13225] audit_log_task_context+0x7f/0xb0 [ 179.152980][T13225] ? __pfx_audit_log_task_context+0x10/0x10 [ 179.152994][T13225] integrity_audit_message+0x24d/0x4f0 [ 179.153014][T13225] ? __pfx_integrity_audit_message+0x10/0x10 [ 179.153037][T13225] ? take_dentry_name_snapshot+0x310/0x7c0 [ 179.153073][T13225] integrity_audit_msg+0x41/0x60 [ 179.153098][T13225] ima_collect_measurement+0x79a/0xb30 [ 179.153124][T13225] ? __pfx_ima_collect_measurement+0x10/0x10 [ 179.153151][T13225] ? process_measurement+0x5ab/0x2350 [ 179.153163][T13225] ? is_bad_inode+0xd/0x40 [ 179.153174][T13225] ? xattr_resolve_name+0x27d/0x3f0 [ 179.153214][T13225] ? vfs_getxattr_alloc+0xec/0x350 [ 179.153231][T13225] ? ima_get_hash_algo+0x241/0x400 [ 179.153250][T13225] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 179.153270][T13225] ? process_measurement+0xdfe/0x2350 [ 179.153282][T13225] process_measurement+0xdfe/0x2350 [ 179.153298][T13225] ? __pfx_process_measurement+0x10/0x10 [ 179.153342][T13225] ? __configfs_open_file+0x6ca/0x9c0 [ 179.153370][T13225] ima_file_check+0xc3/0x110 [ 179.153387][T13225] ? __pfx_ima_file_check+0x10/0x10 [ 179.153402][T13225] security_file_post_open+0xc4/0x210 [ 179.153421][T13225] path_openat+0x985/0x4280 [ 179.153441][T13225] ? __pfx_path_openat+0x10/0x10 [ 179.153457][T13225] do_file_open+0x20e/0x430 [ 179.153470][T13225] ? __pfx_do_file_open+0x10/0x10 [ 179.153493][T13225] ? alloc_fd+0x471/0x7a0 [ 179.153506][T13225] ? do_getname+0x191/0x390 [ 179.153523][T13225] do_sys_openat2+0x10f/0x1e0 [ 179.153538][T13225] ? __pfx_do_sys_openat2+0x10/0x10 [ 179.153553][T13225] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 179.153600][T13225] ? __fget_files+0x21f/0x3d0 [ 179.153614][T13225] __x64_sys_openat+0x12d/0x210 [ 179.153629][T13225] ? __pfx___x64_sys_openat+0x10/0x10 [ 179.153644][T13225] ? ksys_write+0x1ac/0x250 [ 179.153666][T13225] do_syscall_64+0x115/0x870 [ 179.153679][T13225] ? clear_bhb_loop+0x40/0x90 [ 179.153694][T13225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.153706][T13225] RIP: 0033:0x7fe45f99e019 [ 179.153717][T13225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.153729][T13225] RSP: 002b:00007fe460851028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 179.153746][T13225] RAX: ffffffffffffffda RBX: 00007fe45fc25fa0 RCX: 00007fe45f99e019 [ 179.153754][T13225] RDX: 0000000000020003 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 179.153761][T13225] RBP: 00007fe460851090 R08: 0000000000000000 R09: 0000000000000000 [ 179.153768][T13225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 179.153775][T13225] R13: 00007fe45fc26038 R14: 00007fe45fc25fa0 R15: 00007ffcafe866a8 [ 179.153789][T13225] [ 179.683011][T13238] FAULT_INJECTION: forcing a failure. [ 179.683011][T13238] name failslab, interval 1, probability 0, space 0, times 0 [ 179.688021][T13238] CPU: 0 UID: 0 PID: 13238 Comm: syz.8.2077 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.688040][T13238] Tainted: [L]=SOFTLOCKUP [ 179.688044][T13238] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 179.688051][T13238] Call Trace: [ 179.688055][T13238] [ 179.688060][T13238] dump_stack_lvl+0x100/0x190 [ 179.688082][T13238] should_fail_ex.cold+0x5/0xa [ 179.688098][T13238] should_failslab+0xc2/0x120 [ 179.688114][T13238] __kvmalloc_node_noprof+0x116/0x970 [ 179.688130][T13238] ? bucket_table_alloc.isra.0+0x88/0x460 [ 179.688158][T13238] bucket_table_alloc.isra.0+0x88/0x460 [ 179.688174][T13238] __rhashtable_init_noprof+0x43a/0x890 [ 179.688190][T13238] __rhltable_init_noprof+0x28/0x70 [ 179.688205][T13238] nf_tables_newtable+0xf30/0x1a90 [ 179.688244][T13238] ? __pfx_nf_tables_newtable+0x10/0x10 [ 179.688261][T13238] ? __nla_parse+0x40/0x60 [ 179.688280][T13238] nfnetlink_rcv_batch+0x1410/0x2880 [ 179.688304][T13238] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 179.688319][T13238] ? find_held_lock+0x2b/0x80 [ 179.688345][T13238] ? avc_has_perm_noaudit+0x145/0x3b0 [ 179.688373][T13238] ? __nla_parse+0x40/0x60 [ 179.688386][T13238] nfnetlink_rcv+0x3bd/0x440 [ 179.688400][T13238] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 179.688419][T13238] netlink_unicast+0x585/0x850 [ 179.688439][T13238] ? __pfx_netlink_unicast+0x10/0x10 [ 179.688455][T13238] netlink_sendmsg+0x8b0/0xda0 [ 179.688468][T13238] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.688481][T13238] ? selinux_socket_sendmsg+0x198/0x2f0 [ 179.688501][T13238] ____sys_sendmsg+0xa4d/0xbe0 [ 179.688521][T13238] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.688533][T13238] ? __pfx_____sys_sendmsg+0x10/0x10 [ 179.688556][T13238] ___sys_sendmsg+0x190/0x1e0 [ 179.688575][T13238] ? __pfx____sys_sendmsg+0x10/0x10 [ 179.688592][T13238] ? __lock_acquire+0x49f/0x1a40 [ 179.688606][T13238] ? get_pid_task+0x106/0x250 [ 179.688632][T13238] __sys_sendmsg+0x160/0x210 [ 179.688647][T13238] ? __pfx___sys_sendmsg+0x10/0x10 [ 179.688668][T13238] do_syscall_64+0x115/0x870 [ 179.688685][T13238] ? clear_bhb_loop+0x40/0x90 [ 179.688699][T13238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.688710][T13238] RIP: 0033:0x7f37adb9e019 [ 179.688721][T13238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.688733][T13238] RSP: 002b:00007f37ae9c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.688746][T13238] RAX: ffffffffffffffda RBX: 00007f37ade25fa0 RCX: 00007f37adb9e019 [ 179.688753][T13238] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 179.688760][T13238] RBP: 00007f37ae9c7090 R08: 0000000000000000 R09: 0000000000000000 [ 179.688766][T13238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.688773][T13238] R13: 00007f37ade26038 R14: 00007f37ade25fa0 R15: 00007ffc2c843dc8 [ 179.688788][T13238] [ 179.829273][T13244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2079'. [ 179.835698][T13244] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2079'. [ 179.990978][T13252] FAULT_INJECTION: forcing a failure. [ 179.990978][T13252] name failslab, interval 1, probability 0, space 0, times 0 [ 179.998369][T13252] CPU: 1 UID: 0 PID: 13252 Comm: syz.8.2083 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.998390][T13252] Tainted: [L]=SOFTLOCKUP [ 179.998394][T13252] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 179.998401][T13252] Call Trace: [ 179.998414][T13252] [ 179.998420][T13252] dump_stack_lvl+0x100/0x190 [ 179.998496][T13252] should_fail_ex.cold+0x5/0xa [ 179.998522][T13252] should_failslab+0xc2/0x120 [ 179.998549][T13252] __kmalloc_cache_noprof+0x91/0x6c0 [ 179.998569][T13252] ? ima_d_path+0xc9/0x260 [ 179.998608][T13252] ima_d_path+0xc9/0x260 [ 179.998622][T13252] ? __pfx_ima_d_path+0x10/0x10 [ 179.998637][T13252] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 179.998666][T13252] process_measurement+0x1b25/0x2350 [ 179.998683][T13252] ? __pfx_process_measurement+0x10/0x10 [ 179.998714][T13252] ? __configfs_open_file+0x6ca/0x9c0 [ 179.998736][T13252] ima_file_check+0xc3/0x110 [ 179.998749][T13252] ? __pfx_ima_file_check+0x10/0x10 [ 179.998765][T13252] security_file_post_open+0xc4/0x210 [ 179.998794][T13252] path_openat+0x985/0x4280 [ 179.998819][T13252] ? __pfx_path_openat+0x10/0x10 [ 179.998835][T13252] do_file_open+0x20e/0x430 [ 179.998848][T13252] ? __pfx_do_file_open+0x10/0x10 [ 179.998870][T13252] ? alloc_fd+0x471/0x7a0 [ 179.998885][T13252] ? do_getname+0x191/0x390 [ 179.998902][T13252] do_sys_openat2+0x10f/0x1e0 [ 179.998921][T13252] ? __pfx_do_sys_openat2+0x10/0x10 [ 179.998935][T13252] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 179.998984][T13252] ? __fget_files+0x21f/0x3d0 [ 179.998997][T13252] __x64_sys_openat+0x12d/0x210 [ 179.999013][T13252] ? __pfx___x64_sys_openat+0x10/0x10 [ 179.999027][T13252] ? ksys_write+0x1ac/0x250 [ 179.999055][T13252] do_syscall_64+0x115/0x870 [ 179.999074][T13252] ? clear_bhb_loop+0x40/0x90 [ 179.999097][T13252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.999114][T13252] RIP: 0033:0x7f37adb9e019 [ 179.999131][T13252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.999148][T13252] RSP: 002b:00007f37ae9c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 179.999173][T13252] RAX: ffffffffffffffda RBX: 00007f37ade25fa0 RCX: 00007f37adb9e019 [ 179.999183][T13252] RDX: 0000000000020003 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 179.999192][T13252] RBP: 00007f37ae9c7090 R08: 0000000000000000 R09: 0000000000000000 [ 179.999202][T13252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 179.999211][T13252] R13: 00007f37ade26038 R14: 00007f37ade25fa0 R15: 00007ffc2c843dc8 [ 179.999235][T13252] [ 180.139653][T13264] FAULT_INJECTION: forcing a failure. [ 180.139653][T13264] name failslab, interval 1, probability 0, space 0, times 0 [ 180.143682][T13264] CPU: 1 UID: 0 PID: 13264 Comm: syz.8.2088 Tainted: G L syzkaller #0 PREEMPT(full) [ 180.143700][T13264] Tainted: [L]=SOFTLOCKUP [ 180.143704][T13264] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 180.143711][T13264] Call Trace: [ 180.143716][T13264] [ 180.143721][T13264] dump_stack_lvl+0x100/0x190 [ 180.143741][T13264] should_fail_ex.cold+0x5/0xa [ 180.143757][T13264] should_failslab+0xc2/0x120 [ 180.143773][T13264] __kvmalloc_node_noprof+0x116/0x970 [ 180.143789][T13264] ? bucket_table_alloc.isra.0+0x88/0x460 [ 180.143817][T13264] bucket_table_alloc.isra.0+0x88/0x460 [ 180.143832][T13264] __rhashtable_init_noprof+0x43a/0x890 [ 180.143848][T13264] __rhltable_init_noprof+0x28/0x70 [ 180.143863][T13264] nf_tables_newtable+0xf70/0x1a90 [ 180.143911][T13264] ? __pfx_nf_tables_newtable+0x10/0x10 [ 180.143932][T13264] ? __nla_parse+0x40/0x60 [ 180.143949][T13264] nfnetlink_rcv_batch+0x1410/0x2880 [ 180.143988][T13264] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 180.144004][T13264] ? find_held_lock+0x2b/0x80 [ 180.144035][T13264] ? avc_has_perm_noaudit+0x145/0x3b0 [ 180.144064][T13264] ? __nla_parse+0x40/0x60 [ 180.144077][T13264] nfnetlink_rcv+0x3bd/0x440 [ 180.144091][T13264] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 180.144110][T13264] netlink_unicast+0x585/0x850 [ 180.144129][T13264] ? __pfx_netlink_unicast+0x10/0x10 [ 180.144145][T13264] netlink_sendmsg+0x8b0/0xda0 [ 180.144158][T13264] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.144171][T13264] ? selinux_socket_sendmsg+0x198/0x2f0 [ 180.144190][T13264] ____sys_sendmsg+0xa4d/0xbe0 [ 180.144222][T13264] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.144235][T13264] ? __pfx_____sys_sendmsg+0x10/0x10 [ 180.144258][T13264] ___sys_sendmsg+0x190/0x1e0 [ 180.144278][T13264] ? __pfx____sys_sendmsg+0x10/0x10 [ 180.144295][T13264] ? __lock_acquire+0x49f/0x1a40 [ 180.144309][T13264] ? get_pid_task+0x106/0x250 [ 180.144336][T13264] __sys_sendmsg+0x160/0x210 [ 180.144350][T13264] ? __pfx___sys_sendmsg+0x10/0x10 [ 180.144373][T13264] do_syscall_64+0x115/0x870 [ 180.144387][T13264] ? clear_bhb_loop+0x40/0x90 [ 180.144401][T13264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.144413][T13264] RIP: 0033:0x7f37adb9e019 [ 180.144423][T13264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.144434][T13264] RSP: 002b:00007f37ae9c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.144446][T13264] RAX: ffffffffffffffda RBX: 00007f37ade25fa0 RCX: 00007f37adb9e019 [ 180.144453][T13264] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 180.144460][T13264] RBP: 00007f37ae9c7090 R08: 0000000000000000 R09: 0000000000000000 [ 180.144467][T13264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 180.144474][T13264] R13: 00007f37ade26038 R14: 00007f37ade25fa0 R15: 00007ffc2c843dc8 [ 180.144488][T13264] [ 180.281153][T13275] binder: 13274:13275 ioctl 40489426 2000000002c0 returned -22 [ 180.286641][T13276] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2089'. [ 180.290383][T13276] binder: BINDER_SET_CONTEXT_MGR already set [ 180.298206][T13276] binder: 13274:13276 ioctl 4018620d 200000000100 returned -16 [ 180.302237][T13275] binder: 13274:13275 ioctl 40186f02 200000000340 returned -22 [ 180.306493][T13275] binder_alloc: 13274: binder_alloc_buf, no vma [ 180.407031][T13278] FAULT_INJECTION: forcing a failure. [ 180.407031][T13278] name failslab, interval 1, probability 0, space 0, times 0 [ 180.412147][T13278] CPU: 0 UID: 0 PID: 13278 Comm: syz.8.2090 Tainted: G L syzkaller #0 PREEMPT(full) [ 180.412168][T13278] Tainted: [L]=SOFTLOCKUP [ 180.412184][T13278] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 180.412191][T13278] Call Trace: [ 180.412196][T13278] [ 180.412201][T13278] dump_stack_lvl+0x100/0x190 [ 180.412222][T13278] should_fail_ex.cold+0x5/0xa [ 180.412238][T13278] should_failslab+0xc2/0x120 [ 180.412254][T13278] kmem_cache_alloc_noprof+0x91/0x6a0 [ 180.412270][T13278] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 180.412288][T13278] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 180.412307][T13278] mmu_topup_memory_caches+0x25/0x170 [ 180.412326][T13278] kvm_mmu_load+0xe2/0x2570 [ 180.412342][T13278] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 180.412354][T13278] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 180.412368][T13278] ? __pfx_kvm_mmu_load+0x10/0x10 [ 180.412383][T13278] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 180.412403][T13278] ? kvm_check_and_inject_events+0x873/0x12a0 [ 180.412420][T13278] ? record_steal_time+0x3a0/0xbb0 [ 180.412434][T13278] vcpu_run+0x3aaa/0x5de0 [ 180.412457][T13278] ? __pfx_vcpu_run+0x10/0x10 [ 180.412478][T13278] ? rcu_is_watching+0x12/0xc0 [ 180.412499][T13278] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 180.412516][T13278] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 180.412537][T13278] kvm_vcpu_ioctl+0x730/0x1700 [ 180.412552][T13278] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 180.412566][T13278] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 180.412584][T13278] ? do_vfs_ioctl+0x226/0x13e0 [ 180.412603][T13278] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 180.412623][T13278] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 180.412657][T13278] ? __fget_files+0x215/0x3d0 [ 180.412674][T13278] ? hook_file_ioctl_common+0x140/0x440 [ 180.412699][T13278] ? selinux_file_ioctl+0x13b/0x290 [ 180.412726][T13278] ? selinux_file_ioctl+0xb6/0x290 [ 180.412755][T13278] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 180.412775][T13278] __x64_sys_ioctl+0x18e/0x210 [ 180.412798][T13278] do_syscall_64+0x115/0x870 [ 180.412813][T13278] ? clear_bhb_loop+0x40/0x90 [ 180.412827][T13278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.412839][T13278] RIP: 0033:0x7f37adb9e019 [ 180.412848][T13278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.412860][T13278] RSP: 002b:00007f37ae9c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 180.412872][T13278] RAX: ffffffffffffffda RBX: 00007f37ade25fa0 RCX: 00007f37adb9e019 [ 180.412880][T13278] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 180.412889][T13278] RBP: 00007f37ae9c7090 R08: 0000000000000000 R09: 0000000000000000 [ 180.412896][T13278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 180.412904][T13278] R13: 00007f37ade26038 R14: 00007f37ade25fa0 R15: 00007ffc2c843dc8 [ 180.412918][T13278] [ 180.441897][T13282] openvswitch: netlink: Actions may not be safe on all matching packets [ 180.544105][T13283] openvswitch: netlink: Actions may not be safe on all matching packets [ 180.749661][T13296] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 180.766239][T13298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2095'. [ 180.769490][T13298] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2095'. [ 180.891213][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 180.891224][ T42] audit: type=1800 audit(1785460984.883:1591): pid=13310 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.2099" name="ifname" dev="configfs" ino=61772 res=0 errno=0 [ 180.896589][T13312] FAULT_INJECTION: forcing a failure. [ 180.896589][T13312] name failslab, interval 1, probability 0, space 0, times 0 [ 180.902041][T13310] FAULT_INJECTION: forcing a failure. [ 180.902041][T13310] name failslab, interval 1, probability 0, space 0, times 0 [ 180.908735][T13312] CPU: 0 UID: 0 PID: 13312 Comm: syz.1.2100 Tainted: G L syzkaller #0 PREEMPT(full) [ 180.908755][T13312] Tainted: [L]=SOFTLOCKUP [ 180.908759][T13312] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 180.908767][T13312] Call Trace: [ 180.908778][T13312] [ 180.908783][T13312] dump_stack_lvl+0x100/0x190 [ 180.908858][T13312] should_fail_ex.cold+0x5/0xa [ 180.908891][T13312] should_failslab+0xc2/0x120 [ 180.908917][T13312] __kmalloc_noprof+0xfc/0x820 [ 180.908930][T13312] ? lockdep_init_map_type+0x5c/0x250 [ 180.908954][T13312] ? nft_trans_alloc+0x1d/0x2d0 [ 180.909024][T13312] nft_trans_alloc+0x1d/0x2d0 [ 180.909044][T13312] nf_tables_newtable+0x1363/0x1a90 [ 180.909068][T13312] ? __pfx_nf_tables_newtable+0x10/0x10 [ 180.909092][T13312] ? __nla_parse+0x40/0x60 [ 180.909143][T13312] nfnetlink_rcv_batch+0x1410/0x2880 [ 180.909197][T13312] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 180.909215][T13312] ? find_held_lock+0x2b/0x80 [ 180.909233][T13312] ? avc_has_perm_noaudit+0x145/0x3b0 [ 180.909277][T13312] ? __nla_parse+0x40/0x60 [ 180.909294][T13312] nfnetlink_rcv+0x3bd/0x440 [ 180.909313][T13312] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 180.909336][T13312] netlink_unicast+0x585/0x850 [ 180.909365][T13312] ? __pfx_netlink_unicast+0x10/0x10 [ 180.909384][T13312] netlink_sendmsg+0x8b0/0xda0 [ 180.909397][T13312] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.909413][T13312] ? selinux_socket_sendmsg+0x198/0x2f0 [ 180.909441][T13312] ____sys_sendmsg+0xa4d/0xbe0 [ 180.909481][T13312] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.909500][T13312] ? __pfx_____sys_sendmsg+0x10/0x10 [ 180.909528][T13312] ___sys_sendmsg+0x190/0x1e0 [ 180.909547][T13312] ? __pfx____sys_sendmsg+0x10/0x10 [ 180.909564][T13312] ? __lock_acquire+0x49f/0x1a40 [ 180.909578][T13312] ? get_pid_task+0x106/0x250 [ 180.909618][T13312] __sys_sendmsg+0x160/0x210 [ 180.909640][T13312] ? __pfx___sys_sendmsg+0x10/0x10 [ 180.909668][T13312] do_syscall_64+0x115/0x870 [ 180.909719][T13312] ? clear_bhb_loop+0x40/0x90 [ 180.909735][T13312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.909747][T13312] RIP: 0033:0x7fe45f99e019 [ 180.909759][T13312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.909771][T13312] RSP: 002b:00007fe460851028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.909789][T13312] RAX: ffffffffffffffda RBX: 00007fe45fc25fa0 RCX: 00007fe45f99e019 [ 180.909797][T13312] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 180.909803][T13312] RBP: 00007fe460851090 R08: 0000000000000000 R09: 0000000000000000 [ 180.909810][T13312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 180.909816][T13312] R13: 00007fe45fc26038 R14: 00007fe45fc25fa0 R15: 00007ffcafe866a8 [ 180.909831][T13312] [ 180.910380][T13310] CPU: 2 UID: 0 PID: 13310 Comm: syz.9.2099 Tainted: G L syzkaller #0 PREEMPT(full) [ 180.910412][T13310] Tainted: [L]=SOFTLOCKUP [ 180.910417][T13310] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 180.910424][T13310] Call Trace: [ 180.910428][T13310] [ 180.910433][T13310] dump_stack_lvl+0x100/0x190 [ 180.910451][T13310] should_fail_ex.cold+0x5/0xa [ 180.910466][T13310] should_failslab+0xc2/0x120 [ 180.910481][T13310] __kmalloc_cache_noprof+0x91/0x6c0 [ 180.910501][T13310] ? ima_d_path+0xc9/0x260 [ 180.910526][T13310] ima_d_path+0xc9/0x260 [ 180.910539][T13310] ? __pfx_ima_d_path+0x10/0x10 [ 180.910555][T13310] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 180.910577][T13310] process_measurement+0x1b25/0x2350 [ 180.910595][T13310] ? __pfx_process_measurement+0x10/0x10 [ 180.910627][T13310] ? __configfs_open_file+0x6ca/0x9c0 [ 180.910650][T13310] ima_file_check+0xc3/0x110 [ 180.910663][T13310] ? __pfx_ima_file_check+0x10/0x10 [ 180.910678][T13310] security_file_post_open+0xc4/0x210 [ 180.910705][T13310] path_openat+0x985/0x4280 [ 180.910729][T13310] ? __pfx_path_openat+0x10/0x10 [ 180.910745][T13310] do_file_open+0x20e/0x430 [ 180.910759][T13310] ? __pfx_do_file_open+0x10/0x10 [ 180.910781][T13310] ? alloc_fd+0x471/0x7a0 [ 180.910796][T13310] ? do_getname+0x191/0x390 [ 180.910812][T13310] do_sys_openat2+0x10f/0x1e0 [ 180.910827][T13310] ? __pfx_do_sys_openat2+0x10/0x10 [ 180.910842][T13310] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 180.910863][T13310] ? __fget_files+0x21f/0x3d0 [ 180.910877][T13310] __x64_sys_openat+0x12d/0x210 [ 180.910892][T13310] ? __pfx___x64_sys_openat+0x10/0x10 [ 180.910907][T13310] ? ksys_write+0x1ac/0x250 [ 180.910929][T13310] do_syscall_64+0x115/0x870 [ 180.910942][T13310] ? clear_bhb_loop+0x40/0x90 [ 180.910956][T13310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.910968][T13310] RIP: 0033:0x7f4b5f59e019 [ 180.910979][T13310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.910990][T13310] RSP: 002b:00007f4b604bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 180.911001][T13310] RAX: ffffffffffffffda RBX: 00007f4b5f825fa0 RCX: 00007f4b5f59e019 [ 180.911008][T13310] RDX: 0000000000020003 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 180.911016][T13310] RBP: 00007f4b604bb090 R08: 0000000000000000 R09: 0000000000000000 [ 180.911022][T13310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 180.911029][T13310] R13: 00007f4b5f826038 R14: 00007f4b5f825fa0 R15: 00007ffeac624068 [ 180.911044][T13310] [ 181.110670][ T5753] Bluetooth: hci1: command tx timeout [ 181.341164][ T42] audit: type=1400 audit(1785460985.333:1592): avc: denied { watch watch_reads } for pid=13327 comm="syz.1.2105" path="/517/file0" dev="tmpfs" ino=2743 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 181.463512][ T5744] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 181.575788][T13338] FAULT_INJECTION: forcing a failure. [ 181.575788][T13338] name failslab, interval 1, probability 0, space 0, times 0 [ 181.581081][T13338] CPU: 1 UID: 0 PID: 13338 Comm: syz.8.2109 Tainted: G L syzkaller #0 PREEMPT(full) [ 181.581111][T13338] Tainted: [L]=SOFTLOCKUP [ 181.581117][T13338] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 181.581129][T13338] Call Trace: [ 181.581136][T13338] [ 181.581144][T13338] dump_stack_lvl+0x100/0x190 [ 181.581196][T13338] should_fail_ex.cold+0x5/0xa [ 181.581224][T13338] should_failslab+0xc2/0x120 [ 181.581249][T13338] __kmalloc_noprof+0xfc/0x820 [ 181.581270][T13338] ? __kasan_kmalloc+0xaa/0xb0 [ 181.581292][T13338] ? nla_strdup+0xc3/0x150 [ 181.581326][T13338] nla_strdup+0xc3/0x150 [ 181.581354][T13338] nf_tables_addchain.constprop.0+0x83b/0x1ca0 [ 181.581393][T13338] ? nft_chain_lookup+0x59c/0xa60 [ 181.581415][T13338] ? __kasan_kmalloc+0xaa/0xb0 [ 181.581437][T13338] ? __pfx_nf_tables_addchain.constprop.0+0x10/0x10 [ 181.581490][T13338] ? nla_strcmp+0xff/0x130 [ 181.581519][T13338] ? nft_table_lookup.part.0+0x1e3/0x230 [ 181.581541][T13338] nf_tables_newchain+0x17c3/0x2d30 [ 181.581568][T13338] ? net_generic+0xc7/0x2a0 [ 181.581591][T13338] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 181.581618][T13338] ? __nla_validate_parse+0x1e7/0x28b0 [ 181.581641][T13338] ? __pfx_nf_tables_newchain+0x10/0x10 [ 181.581670][T13338] ? __pfx___nla_validate_parse+0x10/0x10 [ 181.581700][T13338] ? __nla_parse+0x40/0x60 [ 181.581722][T13338] nfnetlink_rcv_batch+0x1410/0x2880 [ 181.581759][T13338] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 181.581785][T13338] ? find_held_lock+0x2b/0x80 [ 181.581818][T13338] ? avc_has_perm_noaudit+0x145/0x3b0 [ 181.581867][T13338] ? __nla_parse+0x40/0x60 [ 181.581889][T13338] nfnetlink_rcv+0x3bd/0x440 [ 181.581912][T13338] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 181.581943][T13338] netlink_unicast+0x585/0x850 [ 181.581967][T13338] ? __pfx_netlink_unicast+0x10/0x10 [ 181.581993][T13338] netlink_sendmsg+0x8b0/0xda0 [ 181.582022][T13338] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.582044][T13338] ? selinux_socket_sendmsg+0x198/0x2f0 [ 181.582092][T13338] ____sys_sendmsg+0xa4d/0xbe0 [ 181.582120][T13338] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.582142][T13338] ? __pfx_____sys_sendmsg+0x10/0x10 [ 181.582182][T13338] ___sys_sendmsg+0x190/0x1e0 [ 181.582212][T13338] ? __pfx____sys_sendmsg+0x10/0x10 [ 181.582238][T13338] ? __lock_acquire+0x49f/0x1a40 [ 181.582261][T13338] ? get_pid_task+0x106/0x250 [ 181.582307][T13338] __sys_sendmsg+0x160/0x210 [ 181.582331][T13338] ? __pfx___sys_sendmsg+0x10/0x10 [ 181.582367][T13338] do_syscall_64+0x115/0x870 [ 181.582389][T13338] ? clear_bhb_loop+0x40/0x90 [ 181.582412][T13338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.582432][T13338] RIP: 0033:0x7f37adb9e019 [ 181.582450][T13338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.582468][T13338] RSP: 002b:00007f37ae9c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 181.582487][T13338] RAX: ffffffffffffffda RBX: 00007f37ade25fa0 RCX: 00007f37adb9e019 [ 181.582499][T13338] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 181.582509][T13338] RBP: 00007f37ae9c7090 R08: 0000000000000000 R09: 0000000000000000 [ 181.582520][T13338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 181.582531][T13338] R13: 00007f37ade26038 R14: 00007f37ade25fa0 R15: 00007ffc2c843dc8 [ 181.582557][T13338] [ 181.745428][ T5744] usb 14-1: config 1 has an invalid descriptor of length 246, skipping remainder of the config [ 181.749740][ T61] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 181.753074][ T5744] usb 14-1: too many endpoints for config 1 interface 0 altsetting 48: 236, using maximum allowed: 30 [ 181.757926][ T5744] usb 14-1: config 1 interface 0 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 236 [ 181.764637][ T5744] usb 14-1: config 1 interface 0 has no altsetting 0 [ 181.765003][ T42] audit: type=1326 audit(1785460985.763:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13339 comm="syz.8.2110" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f37adb9e019 code=0x0 [ 181.769084][ T5744] usb 14-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 181.780714][ T5744] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 181.785108][ T5744] usb 14-1: Product: syz [ 181.786937][ T5744] usb 14-1: Manufacturer: syz [ 181.915359][ T61] usb 6-1: config 0 has no interfaces? [ 181.917712][ T61] usb 6-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 181.920941][ T61] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.925115][ T61] usb 6-1: config 0 descriptor?? [ 182.013074][T13326] team0: Device vlan2 is already an upper device of the team interface [ 182.090908][ T5744] navman 14-1:1.0: navman converter detected [ 182.097554][ T5744] usb 14-1: navman converter now attached to ttyUSB0 [ 182.101303][ T5744] usb 14-1: USB disconnect, device number 2 [ 182.109007][ T5744] navman ttyUSB0: navman converter now disconnected from ttyUSB0 [ 182.112486][ T5744] navman 14-1:1.0: device disconnected [ 182.137246][ T1484] usb 6-1: USB disconnect, device number 20 [ 182.272115][T13343] FAULT_INJECTION: forcing a failure. [ 182.272115][T13343] name failslab, interval 1, probability 0, space 0, times 0 [ 182.278943][T13343] CPU: 3 UID: 0 PID: 13343 Comm: syz.2.2111 Tainted: G L syzkaller #0 PREEMPT(full) [ 182.278970][T13343] Tainted: [L]=SOFTLOCKUP [ 182.278977][T13343] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 182.278991][T13343] Call Trace: [ 182.278998][T13343] [ 182.279006][T13343] dump_stack_lvl+0x100/0x190 [ 182.279035][T13343] should_fail_ex.cold+0x5/0xa [ 182.279058][T13343] should_failslab+0xc2/0x120 [ 182.279081][T13343] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 182.279105][T13343] ? sidtab_sid2str_get+0x17a/0x670 [ 182.279129][T13343] kmemdup_noprof+0x29/0x60 [ 182.279150][T13343] sidtab_sid2str_get+0x17a/0x670 [ 182.279171][T13343] security_sid_to_context_core+0x35a/0x6d0 [ 182.279202][T13343] selinux_lsmprop_to_secctx+0xe4/0x1b0 [ 182.279231][T13343] ? __pfx_selinux_lsmprop_to_secctx+0x10/0x10 [ 182.279259][T13343] ? skb_put+0x138/0x180 [ 182.279288][T13343] security_lsmprop_to_secctx+0x146/0x1a0 [ 182.279314][T13343] audit_log_subj_ctx+0x346/0x450 [ 182.279333][T13343] ? ktime_get_coarse_real_ts64+0x187/0x1f0 [ 182.279376][T13343] ? map_id_range_up+0x2ce/0x3b0 [ 182.279398][T13343] ? __pfx_audit_log_subj_ctx+0x10/0x10 [ 182.279418][T13343] ? audit_log_format+0xe8/0x130 [ 182.279439][T13343] audit_log_task_context+0x7f/0xb0 [ 182.279457][T13343] ? __pfx_audit_log_task_context+0x10/0x10 [ 182.279480][T13343] integrity_audit_message+0x24d/0x4f0 [ 182.279509][T13343] ? __pfx_integrity_audit_message+0x10/0x10 [ 182.279535][T13343] ? take_dentry_name_snapshot+0x310/0x7c0 [ 182.279564][T13343] integrity_audit_msg+0x41/0x60 [ 182.279591][T13343] ima_collect_measurement+0x79a/0xb30 [ 182.279619][T13343] ? __pfx_ima_collect_measurement+0x10/0x10 [ 182.279653][T13343] ? process_measurement+0x5ab/0x2350 [ 182.279672][T13343] ? is_bad_inode+0xd/0x40 [ 182.279688][T13343] ? xattr_resolve_name+0x27d/0x3f0 [ 182.279711][T13343] ? vfs_getxattr_alloc+0xec/0x350 [ 182.279733][T13343] ? ima_get_hash_algo+0x241/0x400 [ 182.279760][T13343] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 182.279790][T13343] ? process_measurement+0xdfe/0x2350 [ 182.279807][T13343] process_measurement+0xdfe/0x2350 [ 182.279833][T13343] ? __pfx_process_measurement+0x10/0x10 [ 182.279883][T13343] ? __configfs_open_file+0x6ca/0x9c0 [ 182.279907][T13343] ima_file_check+0xc3/0x110 [ 182.279926][T13343] ? __pfx_ima_file_check+0x10/0x10 [ 182.279950][T13343] security_file_post_open+0xc4/0x210 [ 182.279977][T13343] path_openat+0x985/0x4280 [ 182.280010][T13343] ? __pfx_path_openat+0x10/0x10 [ 182.280035][T13343] do_file_open+0x20e/0x430 [ 182.280055][T13343] ? __pfx_do_file_open+0x10/0x10 [ 182.280090][T13343] ? alloc_fd+0x471/0x7a0 [ 182.280110][T13343] ? do_getname+0x191/0x390 [ 182.280135][T13343] do_sys_openat2+0x10f/0x1e0 [ 182.280157][T13343] ? __pfx_do_sys_openat2+0x10/0x10 [ 182.280179][T13343] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 182.280202][T13343] ? __fget_files+0x21f/0x3d0 [ 182.280224][T13343] __x64_sys_openat+0x12d/0x210 [ 182.280246][T13343] ? __pfx___x64_sys_openat+0x10/0x10 [ 182.280266][T13343] ? ksys_write+0x1ac/0x250 [ 182.280300][T13343] do_syscall_64+0x115/0x870 [ 182.280319][T13343] ? clear_bhb_loop+0x40/0x90 [ 182.280340][T13343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.280357][T13343] RIP: 0033:0x7f316c19e019 [ 182.280372][T13343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.280387][T13343] RSP: 002b:00007f316d039028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 182.280405][T13343] RAX: ffffffffffffffda RBX: 00007f316c425fa0 RCX: 00007f316c19e019 [ 182.280416][T13343] RDX: 0000000000020003 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 182.280427][T13343] RBP: 00007f316d039090 R08: 0000000000000000 R09: 0000000000000000 [ 182.280437][T13343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 182.280447][T13343] R13: 00007f316c426038 R14: 00007f316c425fa0 R15: 00007ffeeba3e2c8 [ 182.280471][T13343] [ 182.280516][T13343] audit: error in audit_log_subj_ctx [ 182.434922][ T42] audit: type=1800 audit(1785460986.263:1594): pid=13343 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.2.2111" name="ifname" dev="configfs" ino=62752 res=0 errno=0 [ 182.574717][ T42] audit: type=1400 audit(1785460986.573:1595): avc: denied { remount } for pid=13348 comm="syz.2.2114" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 182.914255][T13375] FAULT_INJECTION: forcing a failure. [ 182.914255][T13375] name failslab, interval 1, probability 0, space 0, times 0 [ 182.919336][T13375] CPU: 3 UID: 0 PID: 13375 Comm: syz.8.2122 Tainted: G L syzkaller #0 PREEMPT(full) [ 182.919356][T13375] Tainted: [L]=SOFTLOCKUP [ 182.919360][T13375] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 182.919376][T13375] Call Trace: [ 182.919381][T13375] [ 182.919386][T13375] dump_stack_lvl+0x100/0x190 [ 182.919407][T13375] should_fail_ex.cold+0x5/0xa [ 182.919423][T13375] should_failslab+0xc2/0x120 [ 182.919439][T13375] __kmalloc_noprof+0xfc/0x820 [ 182.919452][T13375] ? __kasan_kmalloc+0xaa/0xb0 [ 182.919466][T13375] ? nla_strdup+0xc3/0x150 [ 182.919487][T13375] nla_strdup+0xc3/0x150 [ 182.919505][T13375] nf_tables_addchain.constprop.0+0x83b/0x1ca0 [ 182.919529][T13375] ? nft_chain_lookup+0x59c/0xa60 [ 182.919543][T13375] ? __kasan_kmalloc+0xaa/0xb0 [ 182.919556][T13375] ? __pfx_nf_tables_addchain.constprop.0+0x10/0x10 [ 182.919586][T13375] ? nla_strcmp+0xff/0x130 [ 182.919605][T13375] ? nft_table_lookup.part.0+0x1e3/0x230 [ 182.919618][T13375] nf_tables_newchain+0x17c3/0x2d30 [ 182.919636][T13375] ? net_generic+0xc7/0x2a0 [ 182.919648][T13375] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 182.919664][T13375] ? __nla_validate_parse+0x1e7/0x28b0 [ 182.919677][T13375] ? __pfx_nf_tables_newchain+0x10/0x10 [ 182.919695][T13375] ? __pfx___nla_validate_parse+0x10/0x10 [ 182.919712][T13375] ? __nla_parse+0x40/0x60 [ 182.919725][T13375] nfnetlink_rcv_batch+0x1410/0x2880 [ 182.919748][T13375] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 182.919763][T13375] ? find_held_lock+0x2b/0x80 [ 182.919782][T13375] ? avc_has_perm_noaudit+0x145/0x3b0 [ 182.919827][T13375] ? __nla_parse+0x40/0x60 [ 182.919842][T13375] nfnetlink_rcv+0x3bd/0x440 [ 182.919856][T13375] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 182.919874][T13375] netlink_unicast+0x585/0x850 [ 182.919888][T13375] ? __pfx_netlink_unicast+0x10/0x10 [ 182.919903][T13375] netlink_sendmsg+0x8b0/0xda0 [ 182.919916][T13375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.919929][T13375] ? selinux_socket_sendmsg+0x198/0x2f0 [ 182.919949][T13375] ____sys_sendmsg+0xa4d/0xbe0 [ 182.919966][T13375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.919978][T13375] ? __pfx_____sys_sendmsg+0x10/0x10 [ 182.920006][T13375] ___sys_sendmsg+0x190/0x1e0 [ 182.920025][T13375] ? __pfx____sys_sendmsg+0x10/0x10 [ 182.920042][T13375] ? __lock_acquire+0x49f/0x1a40 [ 182.920057][T13375] ? get_pid_task+0x106/0x250 [ 182.920083][T13375] __sys_sendmsg+0x160/0x210 [ 182.920097][T13375] ? __pfx___sys_sendmsg+0x10/0x10 [ 182.920119][T13375] do_syscall_64+0x115/0x870 [ 182.920133][T13375] ? clear_bhb_loop+0x40/0x90 [ 182.920147][T13375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.920159][T13375] RIP: 0033:0x7f37adb9e019 [ 182.920169][T13375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.920180][T13375] RSP: 002b:00007f37ae9c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.920192][T13375] RAX: ffffffffffffffda RBX: 00007f37ade25fa0 RCX: 00007f37adb9e019 [ 182.920199][T13375] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 182.920206][T13375] RBP: 00007f37ae9c7090 R08: 0000000000000000 R09: 0000000000000000 [ 182.920213][T13375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 182.920219][T13375] R13: 00007f37ade26038 R14: 00007f37ade25fa0 R15: 00007ffc2c843dc8 [ 182.920233][T13375] [ 183.118248][T13380] FAULT_INJECTION: forcing a failure. [ 183.118248][T13380] name failslab, interval 1, probability 0, space 0, times 0 [ 183.123703][ T42] audit: type=1800 audit(1785460987.113:1596): pid=13380 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.2124" name="ifname" dev="configfs" ino=63803 res=0 errno=0 [ 183.132647][T13380] CPU: 0 UID: 0 PID: 13380 Comm: syz.8.2124 Tainted: G L syzkaller #0 PREEMPT(full) [ 183.132678][T13380] Tainted: [L]=SOFTLOCKUP [ 183.132684][T13380] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 183.132696][T13380] Call Trace: [ 183.132703][T13380] [ 183.132712][T13380] dump_stack_lvl+0x100/0x190 [ 183.132744][T13380] should_fail_ex.cold+0x5/0xa [ 183.132770][T13380] should_failslab+0xc2/0x120 [ 183.132796][T13380] __kmalloc_noprof+0xfc/0x820 [ 183.132818][T13380] ? ima_alloc_init_template+0x19d/0x6d0 [ 183.132848][T13380] ima_alloc_init_template+0x19d/0x6d0 [ 183.132875][T13380] ima_store_measurement+0x1e3/0x5b0 [ 183.132903][T13380] ? __pfx_ima_store_measurement+0x10/0x10 [ 183.132934][T13380] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 183.132968][T13380] process_measurement+0x19cc/0x2350 [ 183.133002][T13380] ? __pfx_process_measurement+0x10/0x10 [ 183.133056][T13380] ? __configfs_open_file+0x6ca/0x9c0 [ 183.133084][T13380] ima_file_check+0xc3/0x110 [ 183.133105][T13380] ? __pfx_ima_file_check+0x10/0x10 [ 183.133132][T13380] security_file_post_open+0xc4/0x210 [ 183.133163][T13380] path_openat+0x985/0x4280 [ 183.133219][T13380] ? __pfx_path_openat+0x10/0x10 [ 183.133247][T13380] do_file_open+0x20e/0x430 [ 183.133269][T13380] ? __pfx_do_file_open+0x10/0x10 [ 183.133308][T13380] ? alloc_fd+0x471/0x7a0 [ 183.133350][T13380] ? do_getname+0x191/0x390 [ 183.133377][T13380] do_sys_openat2+0x10f/0x1e0 [ 183.133401][T13380] ? __pfx_do_sys_openat2+0x10/0x10 [ 183.133427][T13380] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 183.133452][T13380] ? __fget_files+0x21f/0x3d0 [ 183.133475][T13380] __x64_sys_openat+0x12d/0x210 [ 183.133499][T13380] ? __pfx___x64_sys_openat+0x10/0x10 [ 183.133522][T13380] ? ksys_write+0x1ac/0x250 [ 183.133587][T13380] do_syscall_64+0x115/0x870 [ 183.133610][T13380] ? clear_bhb_loop+0x40/0x90 [ 183.133633][T13380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.133652][T13380] RIP: 0033:0x7f37adb9e019 [ 183.133668][T13380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.133687][T13380] RSP: 002b:00007f37ae9c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 183.133707][T13380] RAX: ffffffffffffffda RBX: 00007f37ade25fa0 RCX: 00007f37adb9e019 [ 183.133719][T13380] RDX: 0000000000020003 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 183.133731][T13380] RBP: 00007f37ae9c7090 R08: 0000000000000000 R09: 0000000000000000 [ 183.133743][T13380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 183.133753][T13380] R13: 00007f37ade26038 R14: 00007f37ade25fa0 R15: 00007ffc2c843dc8 [ 183.133779][T13380] [ 183.243553][ T5753] Bluetooth: hci1: command tx timeout [ 183.258817][ T42] audit: type=1804 audit(1785460987.253:1597): pid=13380 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=add_template_measure cause=ENOMEM comm="syz.8.2124" name="/newroot/118/config/usb_gadget/g1/functions/rndis.usb0/ifname" dev="configfs" ino=63803 res=0 errno=0 [ 183.318957][T13382] overlay: ./file0 is not a directory [ 183.465818][T13386] __nla_validate_parse: 5 callbacks suppressed [ 183.465836][T13386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2126'. [ 183.683629][T13397] FAULT_INJECTION: forcing a failure. [ 183.683629][T13397] name failslab, interval 1, probability 0, space 0, times 0 [ 183.695797][T13397] CPU: 1 UID: 0 PID: 13397 Comm: syz.1.2133 Tainted: G L syzkaller #0 PREEMPT(full) [ 183.695820][T13397] Tainted: [L]=SOFTLOCKUP [ 183.695824][T13397] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 183.695831][T13397] Call Trace: [ 183.695836][T13397] [ 183.695842][T13397] dump_stack_lvl+0x100/0x190 [ 183.695864][T13397] should_fail_ex.cold+0x5/0xa [ 183.695880][T13397] should_failslab+0xc2/0x120 [ 183.695901][T13397] __kmalloc_noprof+0xfc/0x820 [ 183.695920][T13397] ? __kvmalloc_node_noprof+0x36d/0x970 [ 183.695938][T13397] ? nla_strdup+0x51/0x150 [ 183.695967][T13397] ? nft_trans_alloc+0x1d/0x2d0 [ 183.696003][T13397] nft_trans_alloc+0x1d/0x2d0 [ 183.696033][T13397] nf_tables_addchain.constprop.0+0xafa/0x1ca0 [ 183.696069][T13397] ? nft_chain_lookup+0x59c/0xa60 [ 183.696092][T13397] ? __kasan_kmalloc+0xaa/0xb0 [ 183.696115][T13397] ? __pfx_nf_tables_addchain.constprop.0+0x10/0x10 [ 183.696165][T13397] ? nla_strcmp+0xff/0x130 [ 183.696197][T13397] ? nft_table_lookup.part.0+0x1e3/0x230 [ 183.696219][T13397] nf_tables_newchain+0x17c3/0x2d30 [ 183.696248][T13397] ? net_generic+0xc7/0x2a0 [ 183.696270][T13397] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 183.696295][T13397] ? __nla_validate_parse+0x1e7/0x28b0 [ 183.696319][T13397] ? __pfx_nf_tables_newchain+0x10/0x10 [ 183.696352][T13397] ? __pfx___nla_validate_parse+0x10/0x10 [ 183.696381][T13397] ? __nla_parse+0x40/0x60 [ 183.696401][T13397] nfnetlink_rcv_batch+0x1410/0x2880 [ 183.696434][T13397] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 183.696459][T13397] ? find_held_lock+0x2b/0x80 [ 183.696493][T13397] ? avc_has_perm_noaudit+0x145/0x3b0 [ 183.696539][T13397] ? __nla_parse+0x40/0x60 [ 183.696561][T13397] nfnetlink_rcv+0x3bd/0x440 [ 183.696585][T13397] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 183.696614][T13397] netlink_unicast+0x585/0x850 [ 183.696640][T13397] ? __pfx_netlink_unicast+0x10/0x10 [ 183.696664][T13397] netlink_sendmsg+0x8b0/0xda0 [ 183.696688][T13397] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.696708][T13397] ? selinux_socket_sendmsg+0x198/0x2f0 [ 183.696740][T13397] ____sys_sendmsg+0xa4d/0xbe0 [ 183.696766][T13397] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.696786][T13397] ? __pfx_____sys_sendmsg+0x10/0x10 [ 183.696825][T13397] ___sys_sendmsg+0x190/0x1e0 [ 183.696854][T13397] ? __pfx____sys_sendmsg+0x10/0x10 [ 183.696881][T13397] ? __lock_acquire+0x49f/0x1a40 [ 183.696903][T13397] ? get_pid_task+0x106/0x250 [ 183.696948][T13397] __sys_sendmsg+0x160/0x210 [ 183.696972][T13397] ? __pfx___sys_sendmsg+0x10/0x10 [ 183.697008][T13397] do_syscall_64+0x115/0x870 [ 183.697031][T13397] ? clear_bhb_loop+0x40/0x90 [ 183.697055][T13397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.697074][T13397] RIP: 0033:0x7fe45f99e019 [ 183.697091][T13397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.697109][T13397] RSP: 002b:00007fe460851028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.697130][T13397] RAX: ffffffffffffffda RBX: 00007fe45fc25fa0 RCX: 00007fe45f99e019 [ 183.697143][T13397] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 183.697155][T13397] RBP: 00007fe460851090 R08: 0000000000000000 R09: 0000000000000000 [ 183.697189][T13397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 183.697201][T13397] R13: 00007fe45fc26038 R14: 00007fe45fc25fa0 R15: 00007ffcafe866a8 [ 183.697227][T13397] [ 183.708001][T13402] FAULT_INJECTION: forcing a failure. [ 183.708001][T13402] name failslab, interval 1, probability 0, space 0, times 0 [ 183.708027][ T42] audit: type=1800 audit(1785460987.703:1598): pid=13402 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.2134" name="ifname" dev="configfs" ino=61938 res=0 errno=0 [ 183.856001][T13402] CPU: 3 UID: 0 PID: 13402 Comm: syz.2.2134 Tainted: G L syzkaller #0 PREEMPT(full) [ 183.856022][T13402] Tainted: [L]=SOFTLOCKUP [ 183.856026][T13402] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 183.856033][T13402] Call Trace: [ 183.856037][T13402] [ 183.856042][T13402] dump_stack_lvl+0x100/0x190 [ 183.856064][T13402] should_fail_ex.cold+0x5/0xa [ 183.856080][T13402] should_failslab+0xc2/0x120 [ 183.856095][T13402] __kmalloc_noprof+0xfc/0x820 [ 183.856108][T13402] ? __pfx_sprintf+0x10/0x10 [ 183.856134][T13402] ? __x64_sys_openat+0x12d/0x210 [ 183.856150][T13402] ? ima_write_template_field_data+0x59/0x1d0 [ 183.856170][T13402] ima_write_template_field_data+0x59/0x1d0 [ 183.856189][T13402] ima_eventdigest_init_common+0x158/0x460 [ 183.856208][T13402] ? __pfx_ima_eventdigest_init_common+0x10/0x10 [ 183.856234][T13402] ? __kmalloc_noprof+0x343/0x820 [ 183.856247][T13402] ? ima_alloc_init_template+0x19d/0x6d0 [ 183.856263][T13402] ima_alloc_init_template+0x399/0x6d0 [ 183.856280][T13402] ima_store_measurement+0x1e3/0x5b0 [ 183.856295][T13402] ? __pfx_ima_store_measurement+0x10/0x10 [ 183.856314][T13402] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 183.856335][T13402] process_measurement+0x19cc/0x2350 [ 183.856353][T13402] ? __pfx_process_measurement+0x10/0x10 [ 183.856384][T13402] ? __configfs_open_file+0x6ca/0x9c0 [ 183.856401][T13402] ima_file_check+0xc3/0x110 [ 183.856413][T13402] ? __pfx_ima_file_check+0x10/0x10 [ 183.856429][T13402] security_file_post_open+0xc4/0x210 [ 183.856448][T13402] path_openat+0x985/0x4280 [ 183.856467][T13402] ? __pfx_path_openat+0x10/0x10 [ 183.856483][T13402] do_file_open+0x20e/0x430 [ 183.856496][T13402] ? __pfx_do_file_open+0x10/0x10 [ 183.856518][T13402] ? alloc_fd+0x471/0x7a0 [ 183.856532][T13402] ? do_getname+0x191/0x390 [ 183.856549][T13402] do_sys_openat2+0x10f/0x1e0 [ 183.856563][T13402] ? __pfx_do_sys_openat2+0x10/0x10 [ 183.856578][T13402] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 183.856594][T13402] ? __fget_files+0x21f/0x3d0 [ 183.856608][T13402] __x64_sys_openat+0x12d/0x210 [ 183.856623][T13402] ? __pfx___x64_sys_openat+0x10/0x10 [ 183.856638][T13402] ? ksys_write+0x1ac/0x250 [ 183.856660][T13402] do_syscall_64+0x115/0x870 [ 183.856673][T13402] ? clear_bhb_loop+0x40/0x90 [ 183.856688][T13402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.856699][T13402] RIP: 0033:0x7f316c19e019 [ 183.856710][T13402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.856721][T13402] RSP: 002b:00007f316d039028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 183.856733][T13402] RAX: ffffffffffffffda RBX: 00007f316c425fa0 RCX: 00007f316c19e019 [ 183.856740][T13402] RDX: 0000000000020003 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 183.856747][T13402] RBP: 00007f316d039090 R08: 0000000000000000 R09: 0000000000000000 [ 183.856754][T13402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 183.856760][T13402] R13: 00007f316c426038 R14: 00007f316c425fa0 R15: 00007ffeeba3e2c8 [ 183.856774][T13402] [ 183.857755][ T42] audit: type=1804 audit(1785460987.853:1599): pid=13402 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=add_template_measure cause=ENOMEM comm="syz.2.2134" name="/newroot/12/config/usb_gadget/g1/functions/rndis.usb0/ifname" dev="configfs" ino=61938 res=0 errno=0 [ 184.144003][T13419] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2140'. [ 184.182637][T13424] nicvf0: renamed from team0 (while UP) [ 184.198177][T13424] nicvf0: Cannot enslave team device to itself [ 184.200118][T13424] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 184.262041][T13431] FAULT_INJECTION: forcing a failure. [ 184.262041][T13431] name failslab, interval 1, probability 0, space 0, times 0 [ 184.271064][T13431] CPU: 2 UID: 0 PID: 13431 Comm: syz.8.2143 Tainted: G L syzkaller #0 PREEMPT(full) [ 184.271086][T13431] Tainted: [L]=SOFTLOCKUP [ 184.271090][T13431] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 184.271097][T13431] Call Trace: [ 184.271102][T13431] [ 184.271108][T13431] dump_stack_lvl+0x100/0x190 [ 184.271129][T13431] should_fail_ex.cold+0x5/0xa [ 184.271145][T13431] should_failslab+0xc2/0x120 [ 184.271161][T13431] __kvmalloc_node_noprof+0x116/0x970 [ 184.271176][T13431] ? __pfx___mutex_lock+0x10/0x10 [ 184.271192][T13431] ? nf_hook_entries_grow+0x255/0x870 [ 184.271215][T13431] nf_hook_entries_grow+0x255/0x870 [ 184.271234][T13431] ? nft_chain_add+0x59c/0x17a0 [ 184.271254][T13431] __nf_register_net_hook+0x112/0x780 [ 184.271267][T13431] nf_register_net_hook+0xdb/0x170 [ 184.271279][T13431] nf_tables_register_hook.part.0+0x10f/0x1c0 [ 184.271298][T13431] nf_tables_addchain.constprop.0+0xee8/0x1ca0 [ 184.271321][T13431] ? nft_chain_lookup+0x59c/0xa60 [ 184.271334][T13431] ? __kasan_kmalloc+0xaa/0xb0 [ 184.271354][T13431] ? __pfx_nf_tables_addchain.constprop.0+0x10/0x10 [ 184.271385][T13431] ? nla_strcmp+0xff/0x130 [ 184.271407][T13431] ? nft_table_lookup.part.0+0x1e3/0x230 [ 184.271420][T13431] nf_tables_newchain+0x17c3/0x2d30 [ 184.271438][T13431] ? net_generic+0xc7/0x2a0 [ 184.271451][T13431] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 184.271467][T13431] ? __nla_validate_parse+0x1e7/0x28b0 [ 184.271480][T13431] ? __pfx_nf_tables_newchain+0x10/0x10 [ 184.271499][T13431] ? __pfx___nla_validate_parse+0x10/0x10 [ 184.271530][T13431] ? __nla_parse+0x40/0x60 [ 184.271543][T13431] nfnetlink_rcv_batch+0x1410/0x2880 [ 184.271565][T13431] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 184.271580][T13431] ? find_held_lock+0x2b/0x80 [ 184.271600][T13431] ? avc_has_perm_noaudit+0x145/0x3b0 [ 184.271628][T13431] ? __nla_parse+0x40/0x60 [ 184.271640][T13431] nfnetlink_rcv+0x3bd/0x440 [ 184.271655][T13431] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 184.271673][T13431] netlink_unicast+0x585/0x850 [ 184.271687][T13431] ? __pfx_netlink_unicast+0x10/0x10 [ 184.271703][T13431] netlink_sendmsg+0x8b0/0xda0 [ 184.271716][T13431] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.271729][T13431] ? selinux_socket_sendmsg+0x198/0x2f0 [ 184.271749][T13431] ____sys_sendmsg+0xa4d/0xbe0 [ 184.271767][T13431] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.271779][T13431] ? __pfx_____sys_sendmsg+0x10/0x10 [ 184.271803][T13431] ___sys_sendmsg+0x190/0x1e0 [ 184.271822][T13431] ? __pfx____sys_sendmsg+0x10/0x10 [ 184.271839][T13431] ? __lock_acquire+0x49f/0x1a40 [ 184.271854][T13431] ? get_pid_task+0x106/0x250 [ 184.271880][T13431] __sys_sendmsg+0x160/0x210 [ 184.271894][T13431] ? __pfx___sys_sendmsg+0x10/0x10 [ 184.271916][T13431] do_syscall_64+0x115/0x870 [ 184.271929][T13431] ? clear_bhb_loop+0x40/0x90 [ 184.271943][T13431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.271955][T13431] RIP: 0033:0x7f37adb9e019 [ 184.271967][T13431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.271978][T13431] RSP: 002b:00007f37ae9c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.271991][T13431] RAX: ffffffffffffffda RBX: 00007f37ade25fa0 RCX: 00007f37adb9e019 [ 184.271998][T13431] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 184.272005][T13431] RBP: 00007f37ae9c7090 R08: 0000000000000000 R09: 0000000000000000 [ 184.272011][T13431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 184.272018][T13431] R13: 00007f37ade26038 R14: 00007f37ade25fa0 R15: 00007ffc2c843dc8 [ 184.272032][T13431] [ 184.567992][T13435] FAULT_INJECTION: forcing a failure. [ 184.567992][T13435] name failslab, interval 1, probability 0, space 0, times 0 [ 184.573403][T13435] CPU: 2 UID: 0 PID: 13435 Comm: syz.8.2145 Tainted: G L syzkaller #0 PREEMPT(full) [ 184.573425][T13435] Tainted: [L]=SOFTLOCKUP [ 184.573429][T13435] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 184.573436][T13435] Call Trace: [ 184.573441][T13435] [ 184.573445][T13435] dump_stack_lvl+0x100/0x190 [ 184.573466][T13435] should_fail_ex.cold+0x5/0xa [ 184.573483][T13435] should_failslab+0xc2/0x120 [ 184.573512][T13435] __kmalloc_noprof+0xfc/0x820 [ 184.573526][T13435] ? ima_eventdigest_init_common+0x158/0x460 [ 184.573545][T13435] ? ima_write_template_field_data+0x59/0x1d0 [ 184.573564][T13435] ima_write_template_field_data+0x59/0x1d0 [ 184.573584][T13435] ima_eventname_init_common+0x1c6/0x2a0 [ 184.573602][T13435] ? __pfx_ima_eventname_init_common+0x10/0x10 [ 184.573622][T13435] ? ima_alloc_init_template+0x19d/0x6d0 [ 184.573639][T13435] ima_alloc_init_template+0x399/0x6d0 [ 184.573656][T13435] ima_store_measurement+0x1e3/0x5b0 [ 184.573671][T13435] ? __pfx_ima_store_measurement+0x10/0x10 [ 184.573690][T13435] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 184.573712][T13435] process_measurement+0x19cc/0x2350 [ 184.573730][T13435] ? __pfx_process_measurement+0x10/0x10 [ 184.573763][T13435] ? __configfs_open_file+0x6ca/0x9c0 [ 184.573780][T13435] ima_file_check+0xc3/0x110 [ 184.573792][T13435] ? __pfx_ima_file_check+0x10/0x10 [ 184.573808][T13435] security_file_post_open+0xc4/0x210 [ 184.573828][T13435] path_openat+0x985/0x4280 [ 184.573847][T13435] ? __pfx_path_openat+0x10/0x10 [ 184.573864][T13435] do_file_open+0x20e/0x430 [ 184.573877][T13435] ? __pfx_do_file_open+0x10/0x10 [ 184.573902][T13435] ? alloc_fd+0x471/0x7a0 [ 184.573916][T13435] ? do_getname+0x191/0x390 [ 184.573932][T13435] do_sys_openat2+0x10f/0x1e0 [ 184.573947][T13435] ? __pfx_do_sys_openat2+0x10/0x10 [ 184.573963][T13435] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 184.573980][T13435] ? __fget_files+0x21f/0x3d0 [ 184.573994][T13435] __x64_sys_openat+0x12d/0x210 [ 184.574009][T13435] ? __pfx___x64_sys_openat+0x10/0x10 [ 184.574023][T13435] ? ksys_write+0x1ac/0x250 [ 184.574046][T13435] do_syscall_64+0x115/0x870 [ 184.574060][T13435] ? clear_bhb_loop+0x40/0x90 [ 184.574074][T13435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.574086][T13435] RIP: 0033:0x7f37adb9e019 [ 184.574096][T13435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.574108][T13435] RSP: 002b:00007f37ae9c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 184.574119][T13435] RAX: ffffffffffffffda RBX: 00007f37ade25fa0 RCX: 00007f37adb9e019 [ 184.574127][T13435] RDX: 0000000000020003 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 184.574134][T13435] RBP: 00007f37ae9c7090 R08: 0000000000000000 R09: 0000000000000000 [ 184.574141][T13435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 184.574147][T13435] R13: 00007f37ade26038 R14: 00007f37ade25fa0 R15: 00007ffc2c843dc8 [ 184.574162][T13435] [ 184.803447][ T61] usb 14-1: new high-speed USB device number 3 using dummy_hcd [ 184.865601][T13448] overlay: Bad value for 'workdir' [ 184.953450][ T61] usb 14-1: Using ep0 maxpacket: 32 [ 184.957339][ T61] usb 14-1: config 0 has an invalid interface number: 1 but max is 0 [ 184.959937][ T61] usb 14-1: config 0 has no interface number 0 [ 184.965034][ T61] usb 14-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 184.969121][ T61] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.971804][ T61] usb 14-1: Product: syz [ 184.973178][ T61] usb 14-1: Manufacturer: syz [ 184.975888][ T61] usb 14-1: SerialNumber: syz [ 184.978310][T13455] ip6t_srh: unknown srh invflags 51E8 [ 184.978775][ T61] usb 14-1: config 0 descriptor?? [ 184.983737][ T61] usb 14-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 184.986559][ T61] usb 14-1: selecting invalid altsetting 1 [ 184.988774][ T61] usb 14-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 184.992509][ T61] usb 14-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 184.995995][ T61] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 184.998571][ T61] usb 14-1: media controller created [ 185.008773][ T61] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 185.566943][T13459] FAULT_INJECTION: forcing a failure. [ 185.566943][T13459] name failslab, interval 1, probability 0, space 0, times 0 [ 185.571731][T13459] CPU: 0 UID: 0 PID: 13459 Comm: syz.8.2155 Tainted: G L syzkaller #0 PREEMPT(full) [ 185.571751][T13459] Tainted: [L]=SOFTLOCKUP [ 185.571755][T13459] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 185.571762][T13459] Call Trace: [ 185.571767][T13459] [ 185.571773][T13459] dump_stack_lvl+0x100/0x190 [ 185.571796][T13459] should_fail_ex.cold+0x5/0xa [ 185.571813][T13459] should_failslab+0xc2/0x120 [ 185.571829][T13459] __kvmalloc_node_noprof+0x116/0x970 [ 185.571843][T13459] ? __pfx___mutex_lock+0x10/0x10 [ 185.571859][T13459] ? nf_hook_entries_grow+0x255/0x870 [ 185.571882][T13459] nf_hook_entries_grow+0x255/0x870 [ 185.571901][T13459] ? nft_chain_add+0x59c/0x17a0 [ 185.571920][T13459] __nf_register_net_hook+0x112/0x780 [ 185.571933][T13459] nf_register_net_hook+0xdb/0x170 [ 185.571945][T13459] nf_tables_register_hook.part.0+0x10f/0x1c0 [ 185.571965][T13459] nf_tables_addchain.constprop.0+0xee8/0x1ca0 [ 185.571987][T13459] ? nft_chain_lookup+0x59c/0xa60 [ 185.572000][T13459] ? __kasan_kmalloc+0xaa/0xb0 [ 185.572014][T13459] ? __pfx_nf_tables_addchain.constprop.0+0x10/0x10 [ 185.572121][T13459] ? nla_strcmp+0xff/0x130 [ 185.572142][T13459] ? nft_table_lookup.part.0+0x1e3/0x230 [ 185.572155][T13459] nf_tables_newchain+0x17c3/0x2d30 [ 185.572173][T13459] ? net_generic+0xc7/0x2a0 [ 185.572186][T13459] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 185.572202][T13459] ? __nla_validate_parse+0x1e7/0x28b0 [ 185.572215][T13459] ? __pfx_nf_tables_newchain+0x10/0x10 [ 185.572234][T13459] ? __pfx___nla_validate_parse+0x10/0x10 [ 185.572251][T13459] ? __nla_parse+0x40/0x60 [ 185.572263][T13459] nfnetlink_rcv_batch+0x1410/0x2880 [ 185.572286][T13459] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 185.572301][T13459] ? find_held_lock+0x2b/0x80 [ 185.572320][T13459] ? avc_has_perm_noaudit+0x145/0x3b0 [ 185.572348][T13459] ? __nla_parse+0x40/0x60 [ 185.572361][T13459] nfnetlink_rcv+0x3bd/0x440 [ 185.572375][T13459] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 185.572393][T13459] netlink_unicast+0x585/0x850 [ 185.572407][T13459] ? __pfx_netlink_unicast+0x10/0x10 [ 185.572422][T13459] netlink_sendmsg+0x8b0/0xda0 [ 185.572436][T13459] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.572449][T13459] ? selinux_socket_sendmsg+0x198/0x2f0 [ 185.572468][T13459] ____sys_sendmsg+0xa4d/0xbe0 [ 185.572486][T13459] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.572499][T13459] ? __pfx_____sys_sendmsg+0x10/0x10 [ 185.572523][T13459] ___sys_sendmsg+0x190/0x1e0 [ 185.572545][T13459] ? __pfx____sys_sendmsg+0x10/0x10 [ 185.572563][T13459] ? __lock_acquire+0x49f/0x1a40 [ 185.572577][T13459] ? get_pid_task+0x106/0x250 [ 185.572603][T13459] __sys_sendmsg+0x160/0x210 [ 185.572618][T13459] ? __pfx___sys_sendmsg+0x10/0x10 [ 185.572640][T13459] do_syscall_64+0x115/0x870 [ 185.572653][T13459] ? clear_bhb_loop+0x40/0x90 [ 185.572667][T13459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.572679][T13459] RIP: 0033:0x7f37adb9e019 [ 185.572703][T13459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.572715][T13459] RSP: 002b:00007f37ae9c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.572727][T13459] RAX: ffffffffffffffda RBX: 00007f37ade25fa0 RCX: 00007f37adb9e019 [ 185.572734][T13459] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 185.572741][T13459] RBP: 00007f37ae9c7090 R08: 0000000000000000 R09: 0000000000000000 [ 185.572748][T13459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 185.572755][T13459] R13: 00007f37ade26038 R14: 00007f37ade25fa0 R15: 00007ffc2c843dc8 [ 185.572769][T13459] [ 186.083636][T13474] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64784 sclass=netlink_route_socket pid=13474 comm=syz.1.2160 [ 186.093225][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 186.093239][ T42] audit: type=1400 audit(1785460990.083:1603): avc: denied { write } for pid=13473 comm="syz.1.2160" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 186.104973][ T42] audit: type=1400 audit(1785460990.093:1604): avc: denied { write } for pid=13472 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.112363][T13474] netlink: 536 bytes leftover after parsing attributes in process `syz.1.2160'. [ 186.117893][ T61] usb 14-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 186.124960][ T61] zl10353_read_register: readreg error (reg=127, ret==-110) [ 186.128169][T13437] usb 14-1: dvb_usb_ce6230: I2C read not implemented [ 186.158938][ T42] audit: type=1400 audit(1785460990.153:1605): avc: denied { write } for pid=13478 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.177734][ T61] usb 14-1: USB disconnect, device number 3 [ 186.205139][ T5451] veth0_vlan: left promiscuous mode [ 186.218772][ T5434] veth0_vlan: entered promiscuous mode [ 186.248324][ T42] audit: type=1400 audit(1785460990.243:1606): avc: denied { read } for pid=13481 comm="syz.8.2162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 186.301387][ T42] audit: type=1400 audit(1785460990.293:1607): avc: denied { write } for pid=13483 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.345887][ T42] audit: type=1400 audit(1785460990.343:1608): avc: denied { write } for pid=13488 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.480130][ T42] audit: type=1800 audit(1785460990.473:1609): pid=13499 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.2167" name="ifname" dev="configfs" ino=62033 res=0 errno=0 [ 186.700567][T13509] netlink: 'syz.9.2173': attribute type 5 has an invalid length. [ 186.937801][ T42] audit: type=1400 audit(1785460990.933:1610): avc: denied { create } for pid=13512 comm="syz.8.2172" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 186.940518][T13513] vhci_hcd vhci_hcd.0: remove, state 4 [ 186.947908][T13513] usb usb38: USB disconnect, device number 1 [ 187.075146][ T8878] vhci_hcd vhci_hcd.0: stop threads [ 187.076843][ T8878] vhci_hcd vhci_hcd.0: release socket [ 187.079505][ T8878] vhci_hcd vhci_hcd.0: disconnect device [ 187.081402][ T8878] vhci_hcd vhci_hcd.0: stop threads [ 187.083088][ T8878] vhci_hcd vhci_hcd.0: release socket [ 187.085553][T13513] vhci_hcd vhci_hcd.0: USB bus 38 deregistered [ 187.088205][ T8878] vhci_hcd vhci_hcd.0: disconnect device [ 187.090038][ T8878] vhci_hcd vhci_hcd.0: stop threads [ 187.094319][ T8878] vhci_hcd vhci_hcd.0: release socket [ 187.096501][ T8878] vhci_hcd vhci_hcd.0: disconnect device [ 187.098691][ T8878] vhci_hcd vhci_hcd.0: stop threads [ 187.100740][ T8878] vhci_hcd vhci_hcd.0: release socket [ 187.102821][ T8878] vhci_hcd vhci_hcd.0: disconnect device [ 187.105481][ T8878] vhci_hcd vhci_hcd.0: stop threads [ 187.107562][ T8878] vhci_hcd vhci_hcd.0: release socket [ 187.107984][T13513] vhci_hcd vhci_hcd.0: remove, state 4 [ 187.111099][ T8878] ================================================================== [ 187.112829][T13513] usb usb37: USB disconnect, device number 1 [ 187.114526][ T8878] BUG: KASAN: slab-use-after-free in vhci_cleanup_unlink_list+0x44/0x456 [ 187.114558][ T8878] Read of size 4 at addr ffff88802e1f8d90 by task kworker/u32:7/8878 [ 187.114568][ T8878] [ 187.114577][ T8878] CPU: 0 UID: 0 PID: 8878 Comm: kworker/u32:7 Tainted: G S L syzkaller #0 PREEMPT(full) [ 187.114594][ T8878] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 187.114599][ T8878] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 187.114608][ T8878] Workqueue: usbip_event event_handler [ 187.114645][ T8878] Call Trace: [ 187.114650][ T8878] [ 187.114655][ T8878] dump_stack_lvl+0x100/0x190 [ 187.114670][ T8878] print_report+0x13d/0x4b0 [ 187.114689][ T8878] ? __virt_addr_valid+0x239/0x430 [ 187.114712][ T8878] ? vhci_cleanup_unlink_list+0x44/0x456 [ 187.114736][ T8878] kasan_report+0xdf/0x1c0 [ 187.114759][ T8878] ? vhci_cleanup_unlink_list+0x44/0x456 [ 187.114785][ T8878] vhci_cleanup_unlink_list+0x44/0x456 [ 187.114813][ T8878] vhci_shutdown_connection.cold+0x165/0x37c [ 187.114839][ T8878] event_handler+0x216/0x570 [ 187.114856][ T8878] process_one_work+0xa23/0x1940 [ 187.114879][ T8878] ? __pfx_process_one_work+0x10/0x10 [ 187.114900][ T8878] ? __pfx_event_handler+0x10/0x10 [ 187.114916][ T8878] worker_thread+0x5ef/0xe50 [ 187.114936][ T8878] ? __pfx_worker_thread+0x10/0x10 [ 187.114954][ T8878] ? kthread+0x13a/0x450 [ 187.114969][ T8878] ? __pfx_worker_thread+0x10/0x10 [ 187.114986][ T8878] kthread+0x370/0x450 [ 187.115001][ T8878] ? __pfx_kthread+0x10/0x10 [ 187.115017][ T8878] ret_from_fork+0x72b/0xd50 [ 187.115041][ T8878] ? __pfx_ret_from_fork+0x10/0x10 [ 187.115063][ T8878] ? __switch_to+0x800/0x10f0 [ 187.115082][ T8878] ? __pfx_kthread+0x10/0x10 [ 187.115099][ T8878] ret_from_fork_asm+0x1a/0x30 [ 187.115127][ T8878] [ 187.115133][ T8878] [ 187.147116][T13513] vhci_hcd vhci_hcd.0: USB bus 37 deregistered [ 187.147514][ T8878] Allocated by task 1: [ 187.147528][ T8878] kasan_save_stack+0x30/0x50 [ 187.186286][ T8878] kasan_save_track+0x14/0x30 [ 187.187794][ T8878] __kasan_kmalloc+0xaa/0xb0 [ 187.189277][ T8878] __kmalloc_noprof+0x322/0x820 [ 187.190876][ T8878] __usb_create_hcd+0x5e/0xac0 [ 187.192427][ T8878] vhci_hcd_probe+0x1a5/0x4e0 [ 187.193927][ T8878] platform_probe+0x106/0x1d0 [ 187.195454][ T8878] really_probe+0x241/0xa60 [ 187.196893][ T8878] __driver_probe_device+0x20e/0x450 [ 187.198563][ T8878] driver_probe_device+0x4a/0x140 [ 187.200188][ T8878] __device_attach_driver+0x1df/0x320 [ 187.201883][ T8878] bus_for_each_drv+0x159/0x1e0 [ 187.203447][ T8878] __device_attach+0x1e4/0x4d0 [ 187.204948][ T8878] device_initial_probe+0xaf/0xd0 [ 187.206550][ T8878] bus_probe_device+0x64/0x160 [ 187.208054][ T8878] device_add+0x121d/0x1970 [ 187.209548][ T8878] platform_device_add+0x35a/0x800 [ 187.211438][ T8878] platform_device_register_full+0x5cf/0x830 [ 187.213322][ T8878] vhci_hcd_init+0x1a1/0x2f0 [ 187.214812][ T8878] do_one_initcall+0x11d/0x700 [ 187.216329][ T8878] kernel_init_freeable+0x6ea/0x7b0 [ 187.217987][ T8878] kernel_init+0x1f/0x1e0 [ 187.219358][ T8878] ret_from_fork+0x72b/0xd50 [ 187.220858][ T8878] ret_from_fork_asm+0x1a/0x30 [ 187.222381][ T8878] [ 187.223162][ T8878] Freed by task 13513: [ 187.224452][ T8878] kasan_save_stack+0x30/0x50 [ 187.225972][ T8878] kasan_save_track+0x14/0x30 [ 187.227455][ T8878] kasan_save_free_info+0x3b/0x70 [ 187.229039][ T8878] __kasan_slab_free+0x5f/0x80 [ 187.230677][ T8878] kfree+0x22b/0x6c0 SYZFAIL: failed to recv rpc [ 187.231921][ T8878] usb_put_hcd+0x149/0x1f0 [ 187.233517][ T8878] vhci_hcd_remove+0xb5/0x1b0 [ 187.235016][ T8878] platform_remove+0x5f/0x80 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 187.236482][ T8878] device_remove+0xcb/0x180 [ 187.238119][ T8878] device_release_driver_internal+0x44e/0x620 [ 187.240057][ T8878] unbind_store+0xf8/0x110 [ 187.241494][ T8878] drv_attr_store+0x74/0xb0 [ 187.242933][ T8878] sysfs_kf_write+0xf2/0x150 [ 187.243442][ T42] audit: type=1400 audit(1785460991.223:1611): avc: denied { write } for pid=5658 comm="syz-executor" path="pipe:[1739]" dev="pipefs" ino=1739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 187.244432][ T8878] kernfs_fop_write_iter+0x3e0/0x5f0 [ 187.244451][ T8878] vfs_write+0x6ac/0x1050 [ 187.244467][ T8878] ksys_write+0x12a/0x250 [ 187.256572][ T8878] do_syscall_64+0x115/0x870 [ 187.258047][ T8878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.260179][ T8878] [ 187.261204][ T8878] Last potentially related work creation: [ 187.263583][ T8878] kasan_save_stack+0x30/0x50 [ 187.265559][ T8878] kasan_record_aux_stack+0xa7/0xc0 [ 187.267702][ T8878] insert_work+0x36/0x230 [ 187.269513][ T8878] __queue_work+0x9bc/0x12b0 [ 187.271427][ T8878] queue_work_on+0x1a9/0x1e0 [ 187.273356][ T8878] usb_hcd_giveback_urb+0x330/0x4a0 [ 187.275515][ T8878] unlink1+0x418/0x510 [ 187.277230][ T8878] usb_hcd_unlink_urb+0x131/0x210 [ 187.279316][ T8878] usb_kill_urb+0x121/0x320 [ 187.281338][ T8878] hub_quiesce+0x1e9/0x320 [ 187.283433][ T8878] hub_suspend+0x4ab/0x9e0 [ 187.285375][ T8878] usb_suspend_both+0x288/0x950 [ 187.287210][ T8878] usb_runtime_suspend+0x49/0x120 [ 187.288799][ T8878] __rpm_callback+0xc8/0x620 [ 187.290414][ T8878] rpm_callback+0x16a/0x1b0 [ 187.291853][ T8878] rpm_suspend+0x2f4/0x11a0 [ 187.293302][ T8878] __pm_runtime_suspend+0xba/0x1a0 [ 187.295114][ T8878] usb_new_device.cold+0xd61/0x115c [ 187.296747][ T8878] register_root_hub+0x4e6/0x639 [ 187.298366][ T8878] usb_add_hcd.cold+0xccd/0x1158 [ 187.299947][ T8878] vhci_hcd_probe+0x1c2/0x4e0 [ 187.301441][ T8878] platform_probe+0x106/0x1d0 [ 187.302915][ T8878] really_probe+0x241/0xa60 [ 187.304392][ T8878] __driver_probe_device+0x20e/0x450 [ 187.306060][ T8878] driver_probe_device+0x4a/0x140 [ 187.307634][ T8878] __device_attach_driver+0x1df/0x320 [ 187.309312][ T8878] bus_for_each_drv+0x159/0x1e0 [ 187.310868][ T8878] __device_attach+0x1e4/0x4d0 [ 187.312367][ T8878] device_initial_probe+0xaf/0xd0 [ 187.313950][ T8878] bus_probe_device+0x64/0x160 [ 187.315480][ T8878] device_add+0x121d/0x1970 [ 187.316910][ T8878] platform_device_add+0x35a/0x800 [ 187.318530][ T8878] platform_device_register_full+0x5cf/0x830 [ 187.320981][ T8878] vhci_hcd_init+0x1a1/0x2f0 [ 187.322947][ T8878] do_one_initcall+0x11d/0x700 [ 187.324956][ T8878] kernel_init_freeable+0x6ea/0x7b0 [ 187.327157][ T8878] kernel_init+0x1f/0x1e0 [ 187.328962][ T8878] ret_from_fork+0x72b/0xd50 [ 187.330922][ T8878] ret_from_fork_asm+0x1a/0x30 [ 187.332901][ T8878] [ 187.333928][ T8878] Second to last potentially related work creation: [ 187.336620][ T8878] kasan_save_stack+0x30/0x50 [ 187.338583][ T8878] kasan_record_aux_stack+0xa7/0xc0 [ 187.340743][ T8878] insert_work+0x36/0x230 [ 187.342540][ T8878] __queue_work+0x9bc/0x12b0 [ 187.344458][ T8878] queue_work_on+0x1a9/0x1e0 [ 187.346395][ T8878] usb_hcd_giveback_urb+0x3b8/0x4a0 [ 187.348580][ T8878] usb_hcd_submit_urb+0xab7/0x2150 [ 187.350711][ T8878] usb_submit_urb+0x827/0x19b0 [ 187.352261][ T8878] usb_start_wait_urb+0x10e/0x580 [ 187.353850][ T8878] usb_control_msg+0x328/0x4b0 [ 187.355379][ T8878] hub_suspend+0x826/0x9e0 [ 187.356780][ T8878] usb_suspend_both+0x288/0x950 [ 187.358318][ T8878] usb_runtime_suspend+0x49/0x120 [ 187.359927][ T8878] __rpm_callback+0xc8/0x620 [ 187.361394][ T8878] rpm_callback+0x16a/0x1b0 [ 187.362824][ T8878] rpm_suspend+0x2f4/0x11a0 [ 187.364265][ T8878] __pm_runtime_suspend+0xba/0x1a0 [ 187.365900][ T8878] usb_new_device.cold+0xd61/0x115c [ 187.367523][ T8878] register_root_hub+0x4e6/0x639 [ 187.369065][ T8878] usb_add_hcd.cold+0xccd/0x1158 [ 187.370737][ T8878] vhci_hcd_probe+0x1c2/0x4e0 [ 187.372215][ T8878] platform_probe+0x106/0x1d0 [ 187.373800][ T8878] really_probe+0x241/0xa60 [ 187.375237][ T8878] __driver_probe_device+0x20e/0x450 [ 187.376894][ T8878] driver_probe_device+0x4a/0x140 [ 187.378503][ T8878] __device_attach_driver+0x1df/0x320 [ 187.380222][ T8878] bus_for_each_drv+0x159/0x1e0 [ 187.381763][ T8878] __device_attach+0x1e4/0x4d0 [ 187.383291][ T8878] device_initial_probe+0xaf/0xd0 [ 187.384875][ T8878] bus_probe_device+0x64/0x160 [ 187.386407][ T8878] device_add+0x121d/0x1970 [ 187.387834][ T8878] platform_device_add+0x35a/0x800 [ 187.389468][ T8878] platform_device_register_full+0x5cf/0x830 [ 187.391342][ T8878] vhci_hcd_init+0x1a1/0x2f0 [ 187.392792][ T8878] do_one_initcall+0x11d/0x700 [ 187.394301][ T8878] kernel_init_freeable+0x6ea/0x7b0 [ 187.395943][ T8878] kernel_init+0x1f/0x1e0 [ 187.397310][ T8878] ret_from_fork+0x72b/0xd50 [ 187.398758][ T8878] ret_from_fork_asm+0x1a/0x30 [ 187.400560][ T8878] [ 187.401595][ T8878] The buggy address belongs to the object at ffff88802e1f8000 [ 187.401595][ T8878] which belongs to the cache kmalloc-8k of size 8192 [ 187.406639][ T8878] The buggy address is located 3472 bytes inside of [ 187.406639][ T8878] freed 8192-byte region [ffff88802e1f8000, ffff88802e1fa000) [ 187.410880][ T8878] [ 187.411643][ T8878] The buggy address belongs to the physical page: [ 187.413616][ T8878] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2e1f8 [ 187.416410][ T8878] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 187.419790][ T8878] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 187.422116][ T8878] page_type: f5(slab) [ 187.423389][ T8878] raw: 00fff00000000040 ffff88801bc43180 dead000000000122 0000000000000000 [ 187.426051][ T8878] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 187.428676][ T8878] head: 00fff00000000040 ffff88801bc43180 dead000000000122 0000000000000000 [ 187.431361][ T8878] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 187.434030][ T8878] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 187.436704][ T8878] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 187.439371][ T8878] page dumped because: kasan: bad access detected [ 187.441374][ T8878] page_owner tracks the page as allocated [ 187.443140][ T8878] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 10639470872, free_ts 0 [ 187.449112][ T8878] post_alloc_hook+0xfd/0x120 [ 187.450632][ T8878] get_page_from_freelist+0xf48/0x3530 [ 187.452843][ T8878] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 187.455348][ T8878] new_slab+0xa2/0x640 [ 187.457056][ T8878] refill_objects+0xe3/0x410 [ 187.459012][ T8878] __pcs_replace_empty_main+0x376/0x680 [ 187.461318][ T8878] __kmalloc_noprof+0x66d/0x820 [ 187.463356][ T8878] __usb_create_hcd+0x5e/0xac0 [ 187.465367][ T8878] vhci_hcd_probe+0xf3/0x4e0 [ 187.467284][ T8878] platform_probe+0x106/0x1d0 [ 187.469250][ T8878] really_probe+0x241/0xa60 [ 187.471136][ T8878] __driver_probe_device+0x20e/0x450 [ 187.473325][ T8878] driver_probe_device+0x4a/0x140 [ 187.475427][ T8878] __device_attach_driver+0x1df/0x320 [ 187.477684][ T8878] bus_for_each_drv+0x159/0x1e0 [ 187.479555][ T8878] __device_attach+0x1e4/0x4d0 [ 187.481189][ T8878] page_owner free stack trace missing [ 187.483224][ T8878] [ 187.484227][ T8878] Memory state around the buggy address: [ 187.486423][ T8878] ffff88802e1f8c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 187.489654][ T8878] ffff88802e1f8d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 187.492874][ T8878] >ffff88802e1f8d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 187.496127][ T8878] ^ [ 187.498031][ T8878] ffff88802e1f8e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 187.501253][ T8878] ffff88802e1f8e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 187.504542][ T8878] ================================================================== [ 187.523445][ T42] audit: type=1400 audit(1785460991.513:1612): avc: denied { read } for pid=5130 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 187.565552][ T8878] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 187.567862][ T8878] CPU: 1 UID: 0 PID: 8878 Comm: kworker/u32:7 Tainted: G S L syzkaller #0 PREEMPT(full) [ 187.571279][ T8878] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 187.573193][ T8878] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 187.576334][ T8878] Workqueue: usbip_event event_handler [ 187.578079][ T8878] Call Trace: [ 187.579132][ T8878] [ 187.580073][ T8878] dump_stack_lvl+0x100/0x190 [ 187.581564][ T8878] vpanic+0x552/0x970 [ 187.582823][ T8878] ? __pfx_vpanic+0x10/0x10 [ 187.584258][ T8878] ? mark_held_locks+0x40/0x70 [ 187.585784][ T8878] ? vhci_cleanup_unlink_list+0x44/0x456 [ 187.587538][ T8878] panic+0xd1/0xe0 [ 187.588718][ T8878] ? __pfx_panic+0x10/0x10 [ 187.590130][ T8878] ? vhci_cleanup_unlink_list+0x44/0x456 [ 187.591880][ T8878] ? preempt_schedule_common+0x42/0xc0 [ 187.593588][ T8878] ? check_panic_on_warn+0x1f/0x90 [ 187.595210][ T8878] check_panic_on_warn.cold+0x19/0x34 [ 187.596879][ T8878] end_report.part.0+0x3a/0x90 [ 187.598386][ T8878] kasan_report.cold+0xe/0x18 [ 187.599867][ T8878] ? vhci_cleanup_unlink_list+0x44/0x456 [ 187.601624][ T8878] vhci_cleanup_unlink_list+0x44/0x456 [ 187.603336][ T8878] vhci_shutdown_connection.cold+0x165/0x37c [ 187.605234][ T8878] event_handler+0x216/0x570 [ 187.606678][ T8878] process_one_work+0xa23/0x1940 [ 187.608224][ T8878] ? __pfx_process_one_work+0x10/0x10 [ 187.609909][ T8878] ? __pfx_event_handler+0x10/0x10 [ 187.611501][ T8878] worker_thread+0x5ef/0xe50 [ 187.612955][ T8878] ? __pfx_worker_thread+0x10/0x10 [ 187.614553][ T8878] ? kthread+0x13a/0x450 [ 187.615892][ T8878] ? __pfx_worker_thread+0x10/0x10 [ 187.617489][ T8878] kthread+0x370/0x450 [ 187.618770][ T8878] ? __pfx_kthread+0x10/0x10 [ 187.620225][ T8878] ret_from_fork+0x72b/0xd50 [ 187.621684][ T8878] ? __pfx_ret_from_fork+0x10/0x10 [ 187.623316][ T8878] ? __switch_to+0x800/0x10f0 [ 187.624786][ T8878] ? __pfx_kthread+0x10/0x10 [ 187.626262][ T8878] ret_from_fork_asm+0x1a/0x30 [ 187.627768][ T8878] [ 187.629565][ T8878] Kernel Offset: disabled [ 187.630999][ T8878] Rebooting in 86400 seconds.. VM DIAGNOSIS: 01:23:11 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff85a397f0 RDI=ffffffff9ba09b40 RBP=ffffffff9ba09b00 RSP=ffffc90004867508 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3165323038386552 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff37413ba R15=dffffc0000000000 RIP=ffffffff85a39817 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5dda000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f4b60499ff8 CR3=000000001eedd000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeac624556 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeac624556 00007ffeac62455c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4b5f6355ef ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4b5f63562f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4b5f635793 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4b5f635621 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4b5f7f25f8 00007f4b5f7f25c8 00007f4b5f7f2600 00007f4b5f7f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff81fdc7c2 RDX=ffff888025f2ca80 RSI=ffffffff81fdc79c RDI=ffff888025f2ca80 RBP=ffff88806a443520 RSP=ffffc90004ea7588 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000003 R13=ffffed100d4886a5 R14=0000000000000001 R15=ffff88806a53c880 RIP=ffffffff81fdc7a3 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5eda000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200001000000 CR3=0000000055420000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=00000000fec2fefe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 726573755f757063 7265705f65676173 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeeba3e7b6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeeba3e7b6 00007ffeeba3e7bc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f316c2355ef ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f316c23562f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f316c235793 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f316c235621 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000000f 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000348 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000000f 0000000000000000 0000000000000000 0000000000000348 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000008c RBX=0000000000000002 RCX=0000000000000002 RDX=0000000000000002 RSI=ffff88805c39d7b0 RDI=ffff88805c39ca80 RBP=ffffc900054f72f0 RSP=ffffc900054f7250 R8 =0000000000000001 R9 =0000000000000004 R10=0000000000000000 R11=000000000000000a R12=ffff88805c39d7b0 R13=ffff88805c39ca80 R14=0000000000000004 R15=000000000000000a RIP=ffffffff81e5cc52 RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f37ae9c76c0 ffffffff 00c00000 GS =0000 ffff8880d5fda000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b34623ffc CR3=0000000036917000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4b6035d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeac624556 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeac624556 00007ffeac62455c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4b5f6355ef ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4b5f63562f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4b5f635793 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4b5f635621 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4b5f7f2600 00007f4b5f7f25e0 00007f4b5f7f25e8 00007f4b5f7f2618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4b6035d020 00007f4b5f7f25c0 00007f4b5f7f25d0 00007f4b5f7f2610 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4b5f7f25f8 00007f4b5f7f25c8 00007f4b5f7f2600 00007f4b5f7f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080000000 RBX=ffff888037c537f0 RCX=0000000000000010 RDX=ffff8880316da540 RSI=ffffffff81ba7a3d RDI=ffff8880316da540 RBP=888037c537f00000 RSP=ffffc90003f67808 R8 =0000000000000005 R9 =000000000000003f R10=0000000000000010 R11=0000000000000000 R12=0000000000000010 R13=0000000000000001 R14=ffff888035506ffd R15=ffffc90003f67960 RIP=ffffffff820a610b RFL=00000287 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555564a40500 ffffffff 00c00000 GS =0000 ffff8880d60da000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f4b604baff8 CR3=0000000035949000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020081 Opmask01=0000000001000003 Opmask02=0000000002fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c656e72656b2f73 79732f3433352f2e ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c656e72656b2f73 79732f3433352f2e ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcafe86b96 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcafe86b96 00007ffcafe86b9c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe45fa355ef ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe45fa3562f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe45fa35793 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe45fa35621 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000178 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000005 0000000000000000 0000000000000000 0000000000000178 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000