last executing test programs: 11m39.057515935s ago: executing program 0 (id=2648): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x48}}, 0x4008004) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, 0x0, &(0x7f0000000280)) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)=0x24) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x29c, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x1d4, 0x3d8, 0x3d8, 0x1d4, 0x3d8, 0x3, 0x0, {[{{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @remote}, [0xff000000, 0x0, 0xff000000, 0xff], [0xffffffff, 0xffffff00, 0xffffffff, 0xffffff00], 'lo\x00', 'virt_wifi0\x00', {0xff}, {0xff}, 0x87, 0x5, 0x2, 0x8}, 0x0, 0xec, 0x110, 0x0, {}, [@common=@mh={{0x24}, {"c8b1"}}, @inet=@rpfilter={{0x24}, {0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0xd, 0x47}}}, {{@ipv6={@empty, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0xff000000, 0xffffff00, 0xff], [0xff000000, 0xff000000, 0xffffffff, 0xff], 'veth1_to_team\x00', 'gretap0\x00', {}, {0xff}, 0x33, 0x75, 0x5, 0x60}, 0x0, 0xa4, 0xc4}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2f8) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'ip6_vti0\x00', 0x0, 0x4, 0xf8, 0xa, 0x5, 0xd6, @local, @local, 0x1ff40, 0x80a0, 0x1e, 0x7}}) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="4000000010000304000000000000000000000400", @ANYRES32=r5, @ANYBLOB="00000000450000002000128008000100677470001400028008000700ffffffff05000500000000002df751d2250e2a0d7b6562037cc3ab9e17663b9312b0523a6b07d44e3cf28c81884c9b538ea8bf943a4da83a2d0c2cdb6dda4c86942f09050acdd3b0c9f0f7fdafb4291763994d7593fb12288abee7f106b1403969b3f320d36157abb1fb9f05c84e1e00b53f755f8099ea2ed8"], 0x40}}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_SREGS2(r6, 0x8140aecc, &(0x7f0000000300)) r7 = openat$vim2m(0xffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f00000005c0)=0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000300)=@newtaction={0x4c, 0x58, 0x284f, 0x0, 0x0, {}, [{0x38, 0x1, [@m_connmark={0x34, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) r9 = openat$dma_heap(0xffffff9c, &(0x7f0000000000), 0x189400, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r9, 0x4004f50d, &(0x7f0000000040)=0x1) 11m38.876037373s ago: executing program 0 (id=2650): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r1 = openat$bsg(0xffffff9c, &(0x7f0000000000)='/dev/bsg/0:0:0:0\x00', 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2, 0x20}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x4a}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r2, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004600)={0x18, 0x1404, 0x1, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x48081}, 0x4) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, &(0x7f0000000240)={0x3, 0x0, &(0x7f00000000c0), 0x0}, 0x20) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f0000000200)=[{{}, {0x80000000, 0x0}}, {{}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f00000001c0)={{r6, r5, 0x1, [0x0, 0xf7df]}, {r6, r7, 0x4, [0x6]}, 0x1, [0x8, 0x3df]}) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x1000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_newvlan={0x18, 0x76, 0x709, 0x2, 0x2, {0x7, 0x2}}, 0x18}, 0x1, 0x5502000000000000, 0x0, 0x8804}, 0x4080) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x50, 0x1402, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$SNDCTL_TMR_CONTINUE(r8, 0x5404) write$sequencer(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="810100"], 0x8) syz_clone(0x800, &(0x7f0000000440)="0a0f80e0e5a9ae912e8c67002978fa180bf90a02759aade72da3de2d00e21f5ffa1b482696b73c2673f4921851ebfbad1762c844ae1d6afb1559df1bb2e8d8ebc5ad91cd0a0afbdec6c18d0a5cd41318509d265b659591d0e2ba48af02ce8eda703dcfb3a1d28581fc94ca80056a9496b9cd41cc5202eced353ced21d7ab5b67a1cdf029048ad0e47a72bc3cf59457f1cab156236648cffff4f7634c8c0ca701ca39af26af4f1418b0beb73ec5cccf18fa2a903e", 0xb4, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)="e703e79fcb2a5952e91b14db5cc583b216731de43ddcad74675277caaf14db4e6fc0690b84b1839a2474d288f0ae1b92c481531e910d2cebb0919375538116cfcc85146afd2a99c494ff83a86916c60f0d6b8a3d187855bef8eb08a114ae70351472a957ae2ca9e5eddf45f5c52e20f02988dde4e5297deb1a1df3ef340c21addc9049f2f0a924f6a72f2040fb27dc61c25869acd4bf01fd8130") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_int(r10, &(0x7f0000000040)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) sendfile(r11, r11, 0x0, 0x2) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20020, &(0x7f0000000500)={[{@gid}]}) ioctl$BSG_IO(r1, 0x2285, &(0x7f0000000380)={0x51, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfff, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffe, 0x30, 0x0, 0x10008, 0x20}) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r12, 0x401c5820, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 11m38.694268536s ago: executing program 0 (id=2651): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x6}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f0000000580)=""/191, &(0x7f0000000480)=0xbf) listen(r4, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="e4", 0x1, 0x20040002, &(0x7f0000000000)={0xa, 0x4e20, 0x8000, @private1, 0x2}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002cc0)=[{{&(0x7f00000004c0)={0xa, 0x4e20, 0x2cc8, @mcast1, 0x4}, 0x1c, &(0x7f0000001880)=[{&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000001640)="41133cbc498c82fffee04497356c6ee7335cec016ecd749fc73b8289628ffb47539d63a4184bb85ceab2354e26b34375a3d18eed298f49fa741e2dd4ae113c42c51305e569990757f1626c6cc1997fa0eaf10d9b6610d680019eece09d6c9cb0dc5953969dbd249fb941f485674419aa", 0x70}, {&(0x7f00000016c0)="a97a0bb7a5919ee539639b8765200325da2f158dbb7a53f3ae280cf2abce65092a3552864e62ef4d1a43f1ad74ac8c3d4c380e0ceef389d0b5af4560f27fcd225d0bb02c4095b07949ab45e0132d087569c166e4346444c9d8ba502f47a25745733c93f467f5bbb18e97785f5421bd6159f90cff7411bd86969223b6c79b24478d1888ceb4bbfa36734bba1267cc2403c1280b219ac5111055e63b0e23b3481a4288491f1812a686f6028a1046e87a28899326f557051d16d6a98e73a1aaa4973c2ec3007d59f970c742197101de", 0xce}, {&(0x7f00000017c0)="18fd01b335fb01a818a8c1d7019b9fa8effdf2dceea902a062fede056f8fe63b0ffaf9659545b6771553d02ae639f2b71ef9c3e4ab86c577c1e2343c319654c243353bbaeb850bd4d9664c4ef3f5ea1ceb5dfd0a7ccd9c61e99146161a6ad6b3e3e3fdf805411963dcbae2e63211732586d8612b198218cf20cea87419cc7f189f10b2d90880fb5fa5b58c4396d7ed33b8ce1b83fe3daf9bf98d45", 0x9b}], 0x4, &(0x7f00000018c0)=[@pktinfo={{0x20, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x23}}}}, @hopopts={{0x1c, 0x29, 0x36, {0x6c, 0x0, '\x00', [@pad1]}}}, @dstopts={{0x64, 0x29, 0x37, {0x2f, 0x9, '\x00', [@calipso={0x7, 0x48, {0x1, 0x10, 0x7, 0x1, [0x4734, 0x7ffffffc, 0xe000000000000000, 0x3, 0x5, 0x7, 0x8, 0x6]}}, @pad1]}}}, @flowinfo={{0x10, 0x29, 0xb, 0xfe}}], 0xb0}}, {{&(0x7f0000001980)={0xa, 0x4e24, 0x0, @mcast2, 0x1f2}, 0x1c, &(0x7f0000002c00), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="10000000290000003e0000006b0000003400000029000001390000000004011000000000fe800000000000000000000000000037fc00"/68], 0x44}}], 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x10000000000000}, &(0x7f0000000340)=0x18) preadv(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x2, 0x8) accept4$x25(r4, 0x0, 0x0, 0x80800) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x100000000005, 0x20, 0x3, 0x2, 0x80000000106c, 0x100, 0x8000000000000, 0x80000004000080, 0x1c00000, 0x8, 0x0, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x23, 0x4, 0x0, 0x0, &(0x7f0000000040)) 11m37.668011844s ago: executing program 0 (id=2656): r0 = accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) recvfrom$llc(r0, &(0x7f00000000c0)=""/2, 0x2, 0x20, &(0x7f0000000100)={0x1a, 0x320, 0x9, 0x1, 0x2, 0x7, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 11m37.667601988s ago: executing program 0 (id=2657): syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0xc114) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_UQji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x9) fsetxattr$security_capability(r3, &(0x7f0000000000), 0x0, 0x0, 0x1) fchown(r3, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x1f, 0x7ffdd000, 0x8000}], 0x320000) kexec_load(0x2, 0x0, 0x0, 0x80000) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='iso9660\x00', 0x1008081, 0x0) 11m37.186172438s ago: executing program 0 (id=2658): mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) openat(0xffffffffffffff9c, 0x0, 0x10a942, 0x9f667fd378a54ed4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10119, 0x2, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x9d) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="6e028000542b13f600000000000000", @ANYRES32=0x0, @ANYBLOB], 0x50) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) mbind(&(0x7f0000c9c000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x100000000000002, 0x9, 0x1) socket(0x25, 0x801, 0x7) write$evdev(r1, &(0x7f00000000c0), 0x0) msgsnd(0x0, 0x0, 0x2000, 0x8cff) msgctl$IPC_RMID(0x0, 0x0) 11m37.133248662s ago: executing program 32 (id=2658): mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) openat(0xffffffffffffff9c, 0x0, 0x10a942, 0x9f667fd378a54ed4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10119, 0x2, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x9d) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="6e028000542b13f600000000000000", @ANYRES32=0x0, @ANYBLOB], 0x50) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) mbind(&(0x7f0000c9c000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x100000000000002, 0x9, 0x1) socket(0x25, 0x801, 0x7) write$evdev(r1, &(0x7f00000000c0), 0x0) msgsnd(0x0, 0x0, 0x2000, 0x8cff) msgctl$IPC_RMID(0x0, 0x0) 6m14.805565151s ago: executing program 1 (id=4152): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000001040)={0x33, "5151893ce68a3a512cae7f60b8de6c6b1027ba427f3d79716245d015c28c5626", 0x400, 0xfe000000, 0x7, 0x8, 0x1}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000040)={0x0, 0x5, 0x200c}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r2 = socket$inet(0x2, 0x3, 0xd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x7, 0x0, 0x0, 0xfffffffb}]}) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x0, 0x400) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) ioctl$FE_GET_INFO(r3, 0x80a86f3d, &(0x7f0000000140)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$binfmt_misc(r6, &(0x7f0000000100)="d8", 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newlink={0x2c, 0x10, 0x5, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, r9, 0x0, 0x401}, [@IFLA_XDP={0x4}, @IFLA_PROTO_DOWN={0x5, 0x27, 0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f00000010c0)={0x1980900, 0x9, @name="6c14f9104c575323652bb05c9764e27d0235e28510452c132c1eaa54d11e47a7"}) 6m13.812337392s ago: executing program 1 (id=4157): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, 0x0, 0x40004) 6m13.811939604s ago: executing program 1 (id=4158): setresuid(0x0, 0xee00, 0x0) r0 = io_uring_setup(0x3235, &(0x7f0000000440)={0x0, 0x40068c3, 0x800, 0x0, 0x31c}) setrlimit(0x40000000000008, &(0x7f0000000000)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=ANY=[@ANYBLOB="80010000100033060000000000000000ac141400000000000000000000000000e000000200"/64, @ANYRES32=r0, @ANYBLOB="20f1efe4fadbbbcf86f842e03d9c3348f91bd132545275819f6bb6", @ANYBLOB="2001000000000000000000000000000200000000320000007f000001000069ae76640000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000047f100000000000000000000000a0000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001200616567697332353600"/312], 0x180}}, 0x0) r2 = io_uring_setup(0x3f6d, &(0x7f0000000280)={0x0, 0x193d, 0x5482, 0x2, 0xff}) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf5) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e26, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000180)=0x10) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r7, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="020000001000030402000000000000000000350400", @ANYRES8=r7, @ANYBLOB="0003000000000000240012800b000100621932b2c7726964676500001400028005001600"/48], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4485c) setresgid(0x0, 0xffffffffffffffff, r8) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x3000) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r10, &(0x7f0000000080)=[{&(0x7f0000001440)=""/4106, 0x100a}], 0x1, 0x300, 0x0) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc2c45512, &(0x7f00000003c0)={{0x9, 0x1, 0xe, 0x6, 'syz0\x00', 0x73}, 0x0, [0xfffffd5f, 0xfffffffe, 0x5, 0x687, 0x74859516, 0x6, 0x40000002, 0x4, 0x6, 0x2, 0x8000, 0xc59, 0x4a13, 0xa, 0x6, 0x8, 0xfffffff8, 0xfffffff8, 0x10, 0xc, 0x7ff, 0x9, 0xc, 0x7, 0x10000, 0xacb, 0x10000, 0x3, 0x81, 0xffffff7e, 0x3, 0x5, 0x15, 0x1, 0x10000, 0x2, 0x10000, 0x4, 0x8, 0x7, 0xfffffff7, 0x200, 0x1, 0x1, 0x5, 0x1, 0x1, 0xffffff95, 0x1, 0x5354fdb3, 0x6, 0x9, 0xcd, 0xb, 0x4, 0xfff, 0x2, 0x6, 0x800, 0x3, 0x80000000, 0x8, 0xa, 0x7, 0x4, 0x5, 0xc, 0x81, 0x1ff, 0x3, 0x7, 0x101, 0x6, 0x2020000, 0x2, 0xfffffffa, 0x6, 0x3, 0xffffffc0, 0x0, 0x800004, 0x3ff, 0x0, 0x275, 0x2, 0x4, 0x9, 0x0, 0x2, 0x3ff, 0x81, 0x6, 0x8, 0x893a, 0x3, 0x800, 0xf38f, 0xd926, 0x200002, 0x1, 0x80000002, 0x3, 0x9, 0x3, 0x3, 0x4, 0x6, 0x10000, 0x200, 0x32284b62, 0x5, 0x48f, 0xdd00, 0xb, 0xfffff801, 0x7bd5, 0x7, 0xfffffbff, 0x6, 0x2, 0x10000, 0x1, 0x1, 0x549ac63b, 0x1, 0x4, 0x8001, 0x2]}) sendmsg$can_bcm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000400800000008000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0], 0x80}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="010000000b0e00000300000000000000", @ANYRES64=0x0, @ANYRESHEX, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000002"], 0x80}}, 0x11) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/243, 0x0, 0x80a0000}) io_uring_enter(r2, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18) 6m12.834787376s ago: executing program 1 (id=4164): getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000440)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6, 0x7}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000008280)=@newtaction={0x2c68, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x6, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0x33c, 0x1, [@m_ctinfo={0xcc, 0x1a, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x9, 0x3, 0x1, 0x1, 0x1ff}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x9, 0xf0, 0x0, 0x1034, 0x10000}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x3, 0x6, 0x2, 0x4, 0x100}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x7}]}, {0x4e, 0x6, "33d0671b3a2bd269d0a9307e66622175608a831068e819920f563185630845c94d4d26280d0d1e9b36252ef7e5c94776938026f6b4d0411ed85b8b08a562d6a4101ac38399834f0bf15c"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbmod={0x12c, 0x3, 0x0, 0x0, {{0xb}, {0x94, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="c7a0542597ff"}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_PARMS={0x20, 0x2, {{0x4, 0x7, 0x1, 0xdac3, 0x80000000}, 0x2}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_PARMS={0x20, 0x2, {{0xffffffff, 0xd, 0x10000000, 0x1, 0x100000}, 0x1}}]}, {0x70, 0x6, "60156768045b87c81e9bcd10e69699dfb80a41622a777d4017d3c83888c60e3f4a8c9ad6533870e90dff006cea0646fbe91e07a0ed6a2e77f917f5f132159597009b17b6c9841a438cb3b2412ccb5980b9035dbad090ae27765f365fd416a93ea070874d82e08cd24eda5d7e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_vlan={0x140, 0x20, 0x0, 0x0, {{0x9}, {0x60, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3, 0x1ff, 0x3, 0x100, 0xffffff18}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xba5}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x8e5}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xa95}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0xb7, 0x6, "dea4eb425782124ab9b0057f2e2878dedcff17dbfb88226298ee83da329f495aade0166d60629752b87d8b75bdcfc4be1ead1f7e3c3711f09d7ded9be39417030f9283937c74b8d80a55e2ea96eab7029110d2c09307c6ef50d4100a41317e0146eef3c43ae7022389615236d17062bf5c51f132ad4c440d9202ba05156f4034e6911559f616f23b1c6735a42ad69dcbbd6ed6662117e19f9dfe6b36cf907f5aa89aaacc29a0459a4edfadeb5ca4fbe4ed5382"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, {0x598, 0x1, [@m_connmark={0x160, 0x13, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x2, 0x2, 0x4, 0x1}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xe, 0x8, 0xfffffff5, 0x7}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x2, 0xd40b, 0x8}, 0xd}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x3, 0x4, 0x0, 0x4}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x100, 0x6, 0x2d8, 0xa}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x80000001, 0x6, 0x4}, 0x44}}]}, {0x85, 0x6, "39f322fbe8a44daad066100a3fe3f4095165c04acd9ee99811c84ef68ebbb5bf0295ba824fce079fa6dfc9334687ec019a1d923a9a5a80ace8b99c717241cfaf70b3456639212fb79dbbf481e45af0908636f6f6deea11960126c4b6edabccbe5f4de718b93595ec4f6e2d7e07d8d131d27572ac2f2dc9fcea9274c27a2042184c"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ctinfo={0x3c, 0xa, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7c}]}, {0x5, 0x6, "c1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbmod={0x12c, 0x19, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x20, 0x2, {{0x5, 0x8, 0xffffffffffffffff, 0x10000, 0x2}, 0xe}}]}, {0xe0, 0x6, "b10343136eae930b656522d6d6e3355880bb04d72f253971cdf05316a2e0b7e11a4745dd51e39e8ac5f45bde4d76ff7fd599df58c6e12df41358e011e93a0f0e8dfcea16ceecb4bd5bb090467567808b4125983edd6f9491c861a42a06fd103441cf6aa6fd1c399b363620a9b7b0dc4dc37ffd481ff4e77bb6a146a51397333872e367de28188488b84b1f27d7c1052f8b764d96b87615727c1614492d8126a1e1914b30772c2540b4bb12f903e7e580b619cadf12be6c3a65e743a17ffb232cfdeae7326a5572ae311a4caa2446a6b2ae01c20ec2df4b41a13f60ed"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_csum={0xd4, 0x5, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x3, 0xffffffffffffffff, 0x6, 0x3}}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x3, 0x1, 0x6, 0x10001}, 0x1f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x1a50, 0x10000000, 0x4}, 0x1d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x0, 0x20000000, 0x6, 0x8}, 0x1e}}]}, {0x38, 0x6, "85097f74bfdabf6420639c04e5f51d4b4e48e7bfa02d56cfaa8e35c3ebefa060f7d35f52f026b022e89a25d9232045d2ff98e7cf"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_connmark={0x1f8, 0x18, 0x0, 0x0, {{0xd}, {0x100, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x4, 0x8, 0x0, 0x7fffffff}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xa57a, 0x100, 0x2, 0x4, 0x7}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x2, 0x1d, 0x8}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0x0, 0x5, 0x0, 0xfffff234}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x1, 0x6, 0xc3ed, 0x23e5}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x203, 0x18a, 0x1, 0xfffff25e}, 0x8000}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3ff, 0x0, 0x6, 0x80000000, 0x200}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x0, 0x1, 0x100, 0x3ff}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x3, 0x3, 0x4, 0x7}, 0x5}}]}, {0xca, 0x6, "c58131706030005f57f25839c01d171b766c796c0bff33c86c2c6d3969dfee008407733954769398d9a4f9687c1b82b549e2241e593ae7499496be80b2c20b1d6bbe8a500dff3613ba5e2f05ce18ceb5a278459f10f2fe0bd4689ee19087e92ec58cc7c591a309796539fd213c9156a8aed1c6a464a93c7ce7ae729072e22ec0e81c7a6231a08cb226e1a9632bbd11fe862644acde66bc35ce908d767c18e57fb50d14e8c920fa4294352dc3600a053d37ba2765b584598a2d7a061fe8de982feb32866cd544"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, {0x12a4, 0x1, [@m_tunnel_key={0x120, 0x5, 0x0, 0x0, {{0xf}, {0x70, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x4a6}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @broadcast}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x10000, 0x80, 0x20000000, 0x40, 0x9}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @loopback}]}, {0x81, 0x6, "3c4f3b4417dda31ee26fa95de188c7e8d06c964fbf65a3f060f7830a60454cc4a8b51ba6b3ec8e81a5bc25d7cbba363b5203849ea1d4001f3dfd3de94dbf646e6b36d06cc2b14a354a9c0ff1185c0213f2fa2a633866d719b22d3434ec6acd2822f663694ffb3d604f882c89ec3381d60c6214c56522a437860e602d7c"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x1054, 0x12, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ife={0x88, 0xe, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x3c, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xfff}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xe2c0}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x102000}, @IFE_META_SKBMARK={0x8}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xe}, @IFE_META_PRIO={0x4, 0x3, @void}]}]}, {0x21, 0x6, "e941b78c6c928edd2c414d81058f3c046ee07a26021b46aa48e43cb5a1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_ctinfo={0xa4, 0xc, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x8001, 0x1, 0x3, 0xab46, 0x9}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x2}]}, {0x4e, 0x6, "cb4af324becf3b336874df90b9c0ec884d6a9a05e277c8486c941a040669a64580858dd4c63e8621761f1f0a23e6e51c05520f000ee707744b121f942463f1b85a08d1f4bc5ab490345c"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}, {0x1068, 0x1, [@m_ife={0x1064, 0xe, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x7}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_TYPE={0x6, 0x5, 0x6}, @TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_TYPE={0x6, 0x5, 0x7ff}, @TCA_IFE_TYPE={0x6, 0x5, 0x8}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x2c68}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000002100), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000001f80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001f40)={&(0x7f0000000400)={0x20, r3, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="bac4fbe5bb06"}]}, 0x20}}, 0x48000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bpf(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0), 0x4, 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x389e870, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x6) recvmmsg(r4, &(0x7f0000005540)=[{{&(0x7f0000000300)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/13, 0xd}, {&(0x7f0000000480)=""/197, 0xc5}], 0x2, &(0x7f00000005c0)=""/115, 0x73}, 0x5}, {{&(0x7f0000000640)=@phonet, 0x80, &(0x7f0000001900)=[{&(0x7f00000006c0)=""/59, 0x3b}, {&(0x7f0000000700)=""/192, 0xc0}, {&(0x7f00000007c0)=""/122, 0x7a}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/190, 0xbe}], 0x5}, 0x9}, {{&(0x7f0000001940)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000001d00)=[{&(0x7f00000019c0)=""/164, 0xa4}, {&(0x7f0000001a80)=""/243, 0xf3}, {&(0x7f0000001b80)=""/10, 0xa}, {&(0x7f0000001bc0)=""/9, 0x9}, {&(0x7f0000001c00)=""/222, 0xde}], 0x5, &(0x7f0000001d40)=""/184, 0xb8}, 0x8}, {{&(0x7f0000001e00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000003d80)=[{&(0x7f0000001e80)=""/160, 0xa0}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)}, {&(0x7f00000039c0)=""/181, 0xb5}, {&(0x7f0000003a80)=""/234, 0xea}, {&(0x7f0000003b80)=""/14, 0xe}, {&(0x7f0000003bc0)=""/194, 0xc2}, {&(0x7f0000003cc0)=""/97, 0x61}, {&(0x7f0000003d40)=""/42, 0x2a}], 0x9, &(0x7f0000003e00)=""/16, 0x10}, 0x1}, {{&(0x7f0000003e40)=@nl=@proc, 0x80, &(0x7f0000005480)=[{&(0x7f0000003ec0)=""/205, 0xcd}, {&(0x7f0000002040)=""/173, 0xad}, {&(0x7f0000004080)=""/246, 0xf6}, {&(0x7f0000004180)=""/4096, 0x1000}, {&(0x7f0000001fc0)=""/125, 0x7d}, {&(0x7f0000005200)=""/118, 0x76}, {&(0x7f0000005280)=""/173, 0xad}, {&(0x7f0000005340)=""/18, 0x12}, {&(0x7f0000005380)=""/222, 0xde}], 0x9, &(0x7f0000005500)=""/19, 0x13}, 0x8001}], 0x5, 0x2000, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x3f, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) 6m11.244262674s ago: executing program 1 (id=4174): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)=0x0) ioprio_set$pid(0x1, r2, 0x2004) mount(&(0x7f00000001c0)=@filename='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) pread64(0xffffffffffffffff, &(0x7f0000002240)=""/237, 0xfdef, 0x4eb) write$binfmt_aout(r1, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x44, 0x107, 0xfffffffe, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0x145}, @nested={0x4, 0x1}]}, 0x1c}}, 0xc000) r4 = openat$vimc0(0xffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f00000004c0)={0x1, 0x1, [0x7f, 0x4, 0xa, 0xd, 0x7, 0x9, 0xfffffff8, 0x63]}) getsockopt$inet_opts(r1, 0x0, 0xd, 0x0, &(0x7f00000000c0)) 6m11.078723993s ago: executing program 1 (id=4177): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r0 = syz_open_pts(0xffffffffffffffff, 0x4000) dup3(r0, 0xffffffffffffffff, 0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x200}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x5}, {0x4}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'sit0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) acct(&(0x7f0000000040)='./file0\x00') setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x40002, 0x0) ioctl$FBIOPUTCMAP(r4, 0x4605, &(0x7f0000000180)={0xffffffc1, 0x1, &(0x7f00000000c0)=[0x5], &(0x7f0000000080), &(0x7f0000000100), 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) mkdirat$cgroup(r5, &(0x7f0000000000)='syz0\x00', 0x1ff) r6 = openat$cgroup_devices(r5, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f00000000c0)={'c', ' *:* ', 'w\x00'}, 0x8) 6m10.992535582s ago: executing program 33 (id=4177): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r0 = syz_open_pts(0xffffffffffffffff, 0x4000) dup3(r0, 0xffffffffffffffff, 0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x200}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x5}, {0x4}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'sit0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) acct(&(0x7f0000000040)='./file0\x00') setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x40002, 0x0) ioctl$FBIOPUTCMAP(r4, 0x4605, &(0x7f0000000180)={0xffffffc1, 0x1, &(0x7f00000000c0)=[0x5], &(0x7f0000000080), &(0x7f0000000100), 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) mkdirat$cgroup(r5, &(0x7f0000000000)='syz0\x00', 0x1ff) r6 = openat$cgroup_devices(r5, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f00000000c0)={'c', ' *:* ', 'w\x00'}, 0x8) 2m44.394394984s ago: executing program 3 (id=5407): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x40000, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_MOVE(r2, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, 0x23, 0x301, 0x270bd23, 0x25dfdbfe, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x220188d8) write$cgroup_devices(r1, &(0x7f0000000080)={'c', ' *:* ', 'rwm\x00'}, 0xa) r4 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_SET_XCRS(r4, 0x4188aea7, &(0x7f0000000440)={0x6, 0xfffffffe, [{0xe}, {0x7}, {0x8, 0x0, 0x7}, {0xeb, 0x0, 0x4}, {0x0, 0x0, 0x4}, {0xf48, 0x0, 0x400001}, {0x8b33, 0x0, 0x80000001}, {0x81, 0x0, 0x800}, {0x9d39, 0x0, 0x100}, {0x5, 0x0, 0x177b}, {0x80}, {0xc3, 0x0, 0x1}, {0x9, 0x0, 0x3fb}, {0xfffffffe, 0x0, 0x5}, {0x100, 0x0, 0x2}, {0x80000001, 0x0, 0x6}]}) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_role_change={{0x12, 0x8}, {0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x44}}}, 0xb) 2m44.361976922s ago: executing program 3 (id=5408): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2m43.956057938s ago: executing program 3 (id=5411): syz_clone3(&(0x7f0000000240)={0x20000, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0}, 0xfffffc7c) r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x11, r1, 0x800000000000) r2 = io_uring_setup(0x1ddd, &(0x7f0000000440)={0x0, 0x40000000, 0x1000, 0x3, 0x8}) io_uring_register$IORING_UNREGISTER_PBUF_RING(r2, 0x17, &(0x7f0000000300)={0x0}, 0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000001, 0x30, r3, 0x28a84000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x4b, 0x1, 0x20000000000001, 0x2, 0x0) close(r0) recvfrom(r3, 0x0, 0x0, 0x22, 0x0, 0x0) r4 = syz_open_dev$mtd(&(0x7f0000000080), 0x5, 0x28e280) syz_open_dev$mtd(&(0x7f00000000c0), 0x4af4, 0x880) ioctl$ECCGETLAYOUT(r4, 0x81484d11, &(0x7f0000000700)) recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000003000000000000002d0e00001801000020696c2500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300008445ffff8500000006000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000b40100850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r5}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="34000000200025a729bd7000fddbdf250a0000cdff000001120000000800060000000005000017004e224e221500150002000000"], 0x34}}, 0x0) acct(&(0x7f0000000040)='./file0\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x242, 0x121) socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_netprio_ifpriomap(r7, &(0x7f0000000140), 0x2, 0x0) 2m42.859568674s ago: executing program 3 (id=5415): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) syz_ublk_setup_io_uring(0x20, 0x0, &(0x7f0000000000)=0x0, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, 0x0, r2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x88840, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) syz_usb_connect(0x3, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b000100000000090437"], 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x800) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x202040, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, 0x0) r4 = getpgid(0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r5 = syz_pidfd_open(r4, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, 0x0) r9 = pidfd_getfd(r5, r5, 0x0) setns(r9, 0x8000000) 2m41.572475615s ago: executing program 3 (id=5425): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x0, 0x8000) r2 = signalfd(r1, &(0x7f00000000c0)={[0x2, 0x9]}, 0x8) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000100)) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000000)=0xe2) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000180)={0x2, r5, 0x7fffffff, 0x4, 0xffffe7c7, 0xe, 0x9}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f0000000400)={0x4, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000680)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000740)={0x8001, r7, r8}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r3, 0xc01864b0, &(0x7f0000000080)={r5, r7, 0x8, 0x4, 0x40}) timer_settime(r0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r9, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r10 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000200), 0x141080, 0x0) r11 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r11, @ANYBLOB="270e28bd70000000000004"], 0x14}, 0x1, 0x40030000000000}, 0x4000) sendmsg$SMC_PNETID_DEL(r10, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r11, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000040}, 0x2004c051) writev(r9, &(0x7f00000006c0)=[{&(0x7f0000000840)="e55ada0a26b834f902c337d74e5e7238720efb7f8ec4d0727d476db4c872aa904427840eab3b36d1ed0bfbd7d7e69c6ddb2d8226eb56e81bf8ed7bc36a3881f90a5727aff51762c4b5d02893baa44c4fcebd4fc1c1136289c57bb6b9cac240b24cc199cc7edaeaad975966a70c5ca43e81ba4cc0232281bdf279b9b7425198f2bdba0dca17ac5f36268368465090c8440b9760a36dbd8c3c802ddfefc112ebc32dc8b4647b588da74e1bfa3832615c74474e82bf0b93b1de336368ffd64d25c5e41478", 0xc3}, {&(0x7f0000000a00)="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", 0xf3d}], 0x2) 2m41.338307659s ago: executing program 3 (id=5426): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_usbip_server_init(0x1) syz_usb_connect$uac2(0x5, 0xe2, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000300000010"], 0x0) syz_usb_connect$uac3(0x2, 0xc7, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x499, 0x1002, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb5, 0x3, 0x1, 0x9, 0x50, 0xc, {0x8, 0xb, 0x2, 0x2, 0x1, 0x24, 0x30, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x1f, 0x6}, [@mixer_unit={0xa, 0x24, 0x5, 0x1, 0x80, "ef73aba299"}, @power_domain={0xb, 0x24, 0x10, 0x81, 0x8001, 0x3, 0x3, "2099"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x1b, 0x8, 0x4, 0x4, 0x9, 0x5, 0x0, 0xf}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x5, 0x2, 0x2, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xfe, 0x6, 0xb7, {0xa, 0x25, 0x25, 0x1, 0x7f, 0xee7e}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0x5, 0x0, 0x5, 0xb}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0x2, 0xb3, 0xd8}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xb8, 0x4, 0x2, {0xa, 0x25, 0x25, 0x1, 0x3, 0xff01}}}}}}}}]}}, 0x0) recvmsg$inet_nvme(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f0000000340)=""/29, 0x1d}, 0x10000) r2 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r2, 0x2) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) write$usbip_server(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000300000001"], 0x35) syz_emit_ethernet(0x45, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf, 0x0, 0x0, @private2, @local, {[], "223427d5c9a46b9fa14172170a0135"}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = syz_open_dev$vim2m(0x0, 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) close_range(r4, r4, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r5, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000040000000100000080"], 0x1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r6, @ANYBLOB="0000000000000000690300000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 2m41.192339087s ago: executing program 34 (id=5426): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_usbip_server_init(0x1) syz_usb_connect$uac2(0x5, 0xe2, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000300000010"], 0x0) syz_usb_connect$uac3(0x2, 0xc7, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x499, 0x1002, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb5, 0x3, 0x1, 0x9, 0x50, 0xc, {0x8, 0xb, 0x2, 0x2, 0x1, 0x24, 0x30, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x1f, 0x6}, [@mixer_unit={0xa, 0x24, 0x5, 0x1, 0x80, "ef73aba299"}, @power_domain={0xb, 0x24, 0x10, 0x81, 0x8001, 0x3, 0x3, "2099"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x1b, 0x8, 0x4, 0x4, 0x9, 0x5, 0x0, 0xf}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x5, 0x2, 0x2, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xfe, 0x6, 0xb7, {0xa, 0x25, 0x25, 0x1, 0x7f, 0xee7e}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0x5, 0x0, 0x5, 0xb}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0x2, 0xb3, 0xd8}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xb8, 0x4, 0x2, {0xa, 0x25, 0x25, 0x1, 0x3, 0xff01}}}}}}}}]}}, 0x0) recvmsg$inet_nvme(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f0000000340)=""/29, 0x1d}, 0x10000) r2 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r2, 0x2) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) write$usbip_server(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000300000001"], 0x35) syz_emit_ethernet(0x45, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf, 0x0, 0x0, @private2, @local, {[], "223427d5c9a46b9fa14172170a0135"}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = syz_open_dev$vim2m(0x0, 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) close_range(r4, r4, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r5, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000040000000100000080"], 0x1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r6, @ANYBLOB="0000000000000000690300000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 7.31593046s ago: executing program 6 (id=6182): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={@empty, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x9, 0x0, 0x0, 0x500, 0x0, 0x4d30356, r2}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', r2, 0x29, 0x86, 0x0, 0xe, 0x2e, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x7800, 0x80, 0x5, 0x9}}) (fail_nth: 5) 7.160364671s ago: executing program 6 (id=6183): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) r2 = gettid() r3 = epoll_create1(0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000140)={0x30000018}) timer_create(0x3, &(0x7f0000000040)={0x0, 0x11, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x5) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000340)='scalable', 0xfffd) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r5 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006df57108e2042414ebc7010203010902380003960000000904cc070002596105052406000105240006000d240f01900800000000070008060600000011090401"], 0x0) syz_usb_control_io$cdc_ncm(r5, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000), 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000840)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0x3, [{{0x2, 0x0, @empty}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e21, @empty}}]}, 0x1fffc) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67db3e6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b19abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f0000000000f8e10238d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r7, 0x18000000000002a0, 0xfe2a, 0x0, &(0x7f0000001840)="b9ff0307683a268cb8091a99888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) ioctl$KDSETMODE(r0, 0x4b45, 0x1000000000004) 5.151363839s ago: executing program 2 (id=6193): r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x5, 0x113000) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x80804120, &(0x7f0000000140)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r2, r3, 0x0, 0x200000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES64=r3, @ANYRES64=r2], 0xb0}, 0x1, 0x0, 0x0, 0x24000850}, 0x0) 5.053924328s ago: executing program 2 (id=6194): openat$kvm(0xffffff9c, &(0x7f0000000140), 0x800, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) accept4$bt_l2cap(r6, 0x0, 0x0, 0x800) sendmsg$IPVS_CMD_NEW_SERVICE(r5, 0x0, 0x4c814) sendmsg$nl_route_sched(r2, 0x0, 0x0) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, 0x0, 0x0, 0x4000800) 4.605346396s ago: executing program 2 (id=6195): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2d, 0x2, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000300), 0x6, 0x11b080) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) iopl(0x3) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) timer_settime(0x0, 0x236bd4336e4642df, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000a0000000500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x400c050}, 0x0) 4.214443599s ago: executing program 4 (id=6196): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc01c5868, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000040)='broute\x00', 0x20000, &(0x7f0000000080)={@align=0xffff, {0x8, 0x4, 0x80, 0x5}}, 0x8, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000240)=0x3153}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0cc5640, &(0x7f00000002c0)={0x0, @sliced={0x58, [0x4bc7, 0x5, 0x100, 0x0, 0x9, 0x5, 0x100, 0x8, 0x0, 0x4, 0x7, 0x1, 0x1, 0x4, 0x0, 0x6, 0x4, 0x6, 0x4, 0x100, 0x6, 0x2000, 0xfffe, 0x7, 0x8, 0x2, 0x10, 0xb, 0x1, 0x8, 0x1000, 0xc9c, 0x54b9, 0x800, 0x3, 0xfffd, 0x4800, 0x8001, 0x4, 0x1, 0x2, 0x9, 0x6, 0x1ff, 0xef98, 0xffff, 0x7ff, 0x8], 0x7}}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x2, 0x1, 0x0) ioctl$XFS_IOC_FSBULKSTAT(r0, 0xc0105865, &(0x7f0000000600)={&(0x7f00000003c0)=0x5, 0x1000, &(0x7f0000000500)=[{}], &(0x7f00000005c0)}) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000440)={'broute\x00', 0x0, 0x4, 0x0, [0x9dd, 0x1, 0x7, 0x7, 0xa8, 0x4], 0x0, 0x0, 0x0}, &(0x7f00000004c0)=0x78) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000100)={'filter\x00', 0x0, 0x3, 0x0, [0x3, 0x2800000000000, 0x6, 0x9cf, 0x0, 0x7], 0x0, 0x0, 0x0}, &(0x7f0000000180)=0x78) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x4, 0x0, [0xfffffffffffffffa, 0x0, 0x0, 0xc, 0xfffffffffffffff4, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x78) 3.661652548s ago: executing program 6 (id=6197): openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) r1 = syz_open_dev$sndctrl(&(0x7f0000001280), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f00000002c0)={0xa, 0x6, 0xff, 0x3, 'syz0\x00', 0x4}) syslog(0x2, &(0x7f0000000080)=""/27, 0x1b) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) syslog(0x2, &(0x7f0000001500)=""/43, 0xfffffffffffffef5) read(r2, 0x0, 0x5e) 3.434218822s ago: executing program 4 (id=6198): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xa930bb9f3fd061f5) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@empty, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {}, {0x2}}, {{@in6=@loopback, 0x404d3, 0x2b}, 0x0, @in=@empty, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe4) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b800000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000100000000000000000000000000000a0000000000090000000000000000000000000000000800"/108], 0xb8}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000001c0)=0x2, 0x4) sendmsg$key(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x17) 3.341386973s ago: executing program 2 (id=6199): sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x1) socket$kcm(0x23, 0x5, 0x0) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r0 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r0, &(0x7f0000000000), 0xd4ba103) 3.087895254s ago: executing program 5 (id=6200): r0 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0x4, 0x7, 0x0, 0x1}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000200)=@ipv4_newroute={0xac, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_ENCAP={0x88, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x84, 0x1, {{}, [@private2, @private0={0xfc, 0x0, '\x00', 0x1}, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x41}, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}]}, 0xac}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4761f580}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x800448d4, &(0x7f0000000040)={0x1, 0x3f, "f8ff00", 0xff, 0x3}) getsockopt$sock_timeval(r5, 0x1, 0x15, 0x0, &(0x7f0000000600)) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r7 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r7, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) setsockopt$inet6_opts(r7, 0x29, 0x36, 0x0, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000000c0)={0x28, r9, 0x1, 0x10000, 0x25dfdbfd, {{0x8}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x1}}}}}, 0x28}}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r10 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r10, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe4, 0x2, 0x0, 0x2}) mount$9p_virtio(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x8c9030, &(0x7f0000000280)=ANY=[@ANYBLOB="7472616e733d76697274696f2c6d73f6f6653dadd0303030303030303030303030373962632c616e616d653d002c686173682c53707072616973652c6f626a5f747970653d706167656d6170002c00b9232bd77fbef7c9e25447aad78700dca96adcab50c065944b2a35ce876b02a8cbd10f382c76683c5cf8dfa612c964466f6cc61dd8426e52b6e1ffb29f633037decb89c20f3eb569ee"]) fcntl$getown(r2, 0x9) 2.756489328s ago: executing program 2 (id=6201): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x141041, 0x0) openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r4, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000) r5 = socket$kcm(0x10, 0x2, 0x4) fcntl$getown(r5, 0x9) sendmsg$inet(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000023c0)=""/4095, 0xfff}, {&(0x7f0000000cc0)=""/4096, 0x1000}], 0x2}, 0x40000000) close(r2) r6 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) flistxattr(r7, &(0x7f0000000000)=""/11, 0xb) readv(r6, &(0x7f0000000ec0)=[{&(0x7f0000000700)=""/230, 0xe6}], 0x1) readv(r6, &(0x7f0000000040), 0x2000000000000213) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) sendto$inet6(r8, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r8, 0x84, 0x5, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x38}}}}, 0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e23, @empty}}}, 0x84) close(0x3) 2.75616269s ago: executing program 4 (id=6202): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x19) read(r1, 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESDEC, @ANYBLOB="5072c95233c0e07bb02bfc15b59b71d674201f1d013d856cbaea05c5a56068bcf918519aa20f03a84c2b0dd5f739b2d2d4f6eae1dcea34b7499a165ceba9a15ce5c05e7c003d0bbc4a4af787c70ff5080778ad90c78cdcf329ec426e355dda6cc1dbee1edd72aa72d0ddd1ff0b941021347812fe", @ANYRESOCT=r1, @ANYRES8=0x0, @ANYRES32, @ANYRES8=r1, @ANYRESOCT=r1, @ANYRESDEC=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a484f0cf51ab0000000060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000001c000480180001800d00010073796e70726f80140000001100010000000000000000000100000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x2404c810) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000002500010125bd7000fb5afffe08000000040003"], 0x18}, 0x1, 0x0, 0x0, 0x4048957}, 0x28040) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) socket$unix(0x1, 0x5, 0x0) (async, rerun: 32) socket(0xa, 0x1, 0x3) (async, rerun: 32) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socket$igmp6(0xa, 0x3, 0x2) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) (async) socket$inet_sctp(0x2, 0x1, 0x84) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x202, 0x0) (async) pipe2(&(0x7f0000001cc0), 0x800) (async) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x4e22, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) (async, rerun: 64) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) 2.361560249s ago: executing program 4 (id=6203): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0xf5, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420000061a7b9fdd672bad09dfb78c7699874e891a0c7f120ffffffffffff000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 2.062361662s ago: executing program 4 (id=6204): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x40110) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000001540)=""/4092}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 1.91164858s ago: executing program 4 (id=6205): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x1, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) write$P9_RREADLINK(r2, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x80000007, 0x1}, 0x1c) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x2) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad7, 0x10000, 0x3}, &(0x7f0000000040), 0x0, &(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040)={0xfffffeff}) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r7, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="481b0000121400022bbd7000fedbdf250800030000000000080003000400000008004b0013000000080015000500000008004b0013000000080001000000000008004b0013000000"], 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000080) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, 0x0, 0x0) 1.709046984s ago: executing program 5 (id=6206): unshare(0x2040080) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x4, 0x8, 0x7, 0x8, 0x5d, @private0, @private1, 0x20, 0x8000, 0xc, 0x5}}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl(r2, 0xbffff000, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001c00)={'syztnl0\x00', 0x0}) 1.703399849s ago: executing program 6 (id=6207): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2d, 0x2, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000300), 0x6, 0x11b080) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) iopl(0x3) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, 0x0, 0x0) 1.413293564s ago: executing program 2 (id=6208): syz_emit_ethernet(0x4c8, &(0x7f0000000500)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2f, 0x4ba, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x4a6, 0x0, @gue={{0x2, 0x0, 0x0, 0x1, 0x100, @val=0x80}, "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"}}}}}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) prlimit64(0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d00)) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d00000000"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x2d, 0xfffffffffffffff9) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffe8d, 0x0, 0x1, 0x0, 0x0, 0x20044884}, 0x40080) socket$inet_smc(0x2b, 0x1, 0x0) read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) r5 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r5, &(0x7f0000002240)=""/226, 0xe2, 0x104eb) 1.379870254s ago: executing program 5 (id=6209): r0 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x1, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) close(r0) mq_unlink(&(0x7f0000000000)='eth0\xff') 1.229061129s ago: executing program 5 (id=6210): sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x1) socket$kcm(0x23, 0x5, 0x0) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r0 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r0, &(0x7f0000000000), 0xd4ba103) 1.089972142s ago: executing program 5 (id=6211): r0 = fsopen(&(0x7f0000000200)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x8, 0x3000000, 0x0, 0x0) 886.909108ms ago: executing program 5 (id=6212): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001740), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42792000) sendmmsg$alg(r2, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)="c5819a2febe547b77613f75a6a272712ffec0f9ef243703f3144d41c881010667ca0b6eb3cf00f", 0x27}, {&(0x7f0000000080)="e5197b73b461aa28e26ce9a5c1233a", 0xf}], 0x2, &(0x7f0000000440), 0x0, 0x24000000}], 0x1, 0x20000040) recvmmsg(r2, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000000b00)=""/189, 0xbd}], 0x1}, 0x4994}], 0x1, 0x2122, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000400)={0x1, 0xfffff6ea}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r5, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x2000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r4, 0x0, 0x0, 0x80000) sendmmsg$unix(r6, &(0x7f0000008ac0)=[{{&(0x7f0000000b00)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004}}, {{&(0x7f0000000fc0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x2, 0x4008000) unshare(0x4000000) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000040)=0x8) 320.932434ms ago: executing program 6 (id=6213): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x40110) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000001540)=""/4092}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 0s ago: executing program 6 (id=6214): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000b80)='net/sco\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sched_setattr(0x0, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(r4, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r6, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r6, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)="5338a3848b25e258a25f9dae13ed", 0xe}], 0x1}}], 0x1, 0x20008000) recvmsg(r6, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x5c}, 0x123) shutdown(r6, 0x1) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x13c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000804) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r7, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0x0, 0x0, 0x0}}) kernel console output (not intermixed with test programs): R15: 0000000000000000 [ 1275.985353][T25696] [ 1276.412140][T25704] fuse: fd is not a fuse device [ 1276.602662][ T845] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1276.773699][ T845] usb 7-1: Using ep0 maxpacket: 8 [ 1276.778807][ T845] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1276.781420][ T845] usb 7-1: config 0 has no interface number 0 [ 1276.785973][ T845] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1276.795525][ T845] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1276.808478][ T845] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1276.820257][ T845] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1276.837739][ T845] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1276.840613][ T845] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.844448][ T845] usb 7-1: config 0 descriptor?? [ 1276.849521][ T42] audit: type=1326 audit(1784731284.941:3417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25722 comm="syz.5.5736" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x0 [ 1276.863608][ T845] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1277.004605][T25724] FAULT_INJECTION: forcing a failure. [ 1277.004605][T25724] name failslab, interval 1, probability 0, space 0, times 0 [ 1277.008738][T25724] CPU: 1 UID: 0 PID: 25724 Comm: syz.4.5734 Tainted: G L syzkaller #0 PREEMPT(full) [ 1277.008758][T25724] Tainted: [L]=SOFTLOCKUP [ 1277.008762][T25724] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1277.008769][T25724] Call Trace: [ 1277.008774][T25724] [ 1277.008780][T25724] dump_stack_lvl+0x100/0x190 [ 1277.008798][T25724] should_fail_ex.cold+0x5/0xa [ 1277.008812][T25724] should_failslab+0xc2/0x120 [ 1277.008827][T25724] __kvmalloc_node_noprof+0x116/0x970 [ 1277.008842][T25724] ? percpu_ref_init+0xec/0x3f0 [ 1277.008854][T25724] ? io_alloc_cache_init+0x38/0x170 [ 1277.008870][T25724] io_alloc_cache_init+0x38/0x170 [ 1277.008884][T25724] io_uring_setup.cold+0x4b5/0x1c2e [ 1277.008902][T25724] ? rcu_read_lock_any_held+0x6a/0xa0 [ 1277.008916][T25724] ? find_held_lock+0x2b/0x80 [ 1277.008930][T25724] ? __pfx_io_uring_setup+0x10/0x10 [ 1277.008978][T25724] ? ksys_write+0x190/0x250 [ 1277.008998][T25724] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1277.009023][T25724] ? fput+0x79/0x100 [ 1277.009035][T25724] ? ksys_write+0x1ac/0x250 [ 1277.009051][T25724] ? __pfx_ksys_write+0x10/0x10 [ 1277.009069][T25724] __ia32_sys_io_uring_setup+0xc2/0x170 [ 1277.009088][T25724] __do_fast_syscall_32+0xe7/0x970 [ 1277.009099][T25724] ? lockdep_hardirqs_on+0x78/0x100 [ 1277.009118][T25724] do_fast_syscall_32+0x32/0x70 [ 1277.009130][T25724] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1277.009145][T25724] RIP: 0023:0xf6feefec [ 1277.009160][T25724] Code: Unable to access opcode bytes at 0xf6feefc2. [ 1277.009166][T25724] RSP: 002b:00000000f53dd43c EFLAGS: 00000286 ORIG_RAX: 00000000000001a9 [ 1277.009177][T25724] RAX: ffffffffffffffda RBX: 0000000000000e26 RCX: 0000000080000808 [ 1277.009184][T25724] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1277.009191][T25724] RBP: 00000000f53dd4fc R08: 0000000000000000 R09: 0000000000000000 [ 1277.009198][T25724] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1277.009205][T25724] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1277.009218][T25724] [ 1278.021371][T25745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5741'. [ 1278.975937][T25755] random: crng reseeded on system resumption [ 1279.174245][T25760] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5745'. [ 1279.259881][T25764] tipc: Enabled bearer , priority 0 [ 1279.264620][T25764] syzkaller0: entered promiscuous mode [ 1279.266493][T25764] syzkaller0: entered allmulticast mode [ 1279.271309][T25764] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1279.304476][T25764] tipc: Resetting bearer [ 1279.311772][T25763] tipc: Resetting bearer [ 1279.336377][T25763] tipc: Disabling bearer [ 1279.384356][T25773] overlayfs: missing 'lowerdir' [ 1279.529115][T18318] usb 7-1: USB disconnect, device number 6 [ 1279.537897][T18318] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 1280.000451][ T5856] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 1280.162502][ T5856] usb 7-1: config 150 has an invalid interface number: 204 but max is 2 [ 1280.168158][ T5856] usb 7-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1280.173783][ T5856] usb 7-1: config 150 has no interface number 0 [ 1280.175871][ T5856] usb 7-1: config 150 interface 204 has no altsetting 0 [ 1280.182189][ T5856] usb 7-1: config 150 interface 1 has no altsetting 0 [ 1280.190019][ T5856] usb 7-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1280.192976][ T5856] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.195485][ T5856] usb 7-1: Product: syz [ 1280.196797][ T5856] usb 7-1: Manufacturer: syz [ 1280.198706][ T5856] usb 7-1: SerialNumber: syz [ 1280.254359][T25786] random: crng reseeded on system resumption [ 1280.479764][ T5856] xr_serial 7-1:150.204: skipping garbage [ 1280.482549][ T5856] xr_serial 7-1:150.204: xr_serial converter detected [ 1281.133222][T13368] usb 11-1: new full-speed USB device number 7 using dummy_hcd [ 1281.318824][T13368] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1281.323794][T13368] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1281.328161][T13368] usb 11-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1281.331444][T13368] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1281.336982][T13368] usb 11-1: config 0 descriptor?? [ 1281.782267][T25811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1281.789482][T25811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1282.879958][ T5856] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 1282.882060][ T5856] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1282.897148][ T5856] usb 7-1: USB disconnect, device number 7 [ 1282.900138][ T5856] xr_serial 7-1:150.204: device disconnected [ 1283.127937][ T42] audit: type=1326 audit(1784731290.809:3418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25837 comm="syz.4.5771" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 1283.136240][ T42] audit: type=1326 audit(1784731290.809:3419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25837 comm="syz.4.5771" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 1283.142769][ T42] audit: type=1326 audit(1784731290.819:3420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25837 comm="syz.4.5771" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 1283.149844][ T42] audit: type=1326 audit(1784731290.828:3421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25837 comm="syz.4.5771" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 1283.157030][ T42] audit: type=1326 audit(1784731290.837:3422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25837 comm="syz.4.5771" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 1283.164630][ T42] audit: type=1326 audit(1784731290.847:3423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25837 comm="syz.4.5771" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 1283.463540][ T42] audit: type=1326 audit(1784731291.127:3424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25837 comm="syz.4.5771" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 1283.471418][ T42] audit: type=1326 audit(1784731291.127:3425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25837 comm="syz.4.5771" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 1284.080256][T13368] usbhid 11-1:0.0: can't add hid device: -71 [ 1284.086461][T13368] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 1284.099057][T13368] usb 11-1: USB disconnect, device number 7 [ 1284.157146][T13295] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1284.497551][T25868] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5777'. [ 1284.506096][T25868] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5777'. [ 1284.551905][T13368] usb 11-1: new full-speed USB device number 8 using dummy_hcd [ 1284.623866][T25859] lo speed is unknown, defaulting to 1000 [ 1284.714371][T13368] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1284.720064][T13368] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1284.728025][T13368] usb 11-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1284.731773][T13368] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.747476][T13368] usb 11-1: config 0 descriptor?? [ 1285.551349][T25852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1285.560155][T25852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1285.829388][T25898] lo speed is unknown, defaulting to 1000 [ 1286.140591][T25905] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5783'. [ 1286.720863][ T61] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 1286.886967][ T61] usb 7-1: not running at top speed; connect to a high speed hub [ 1286.891580][ T61] usb 7-1: config 3 has an invalid interface number: 161 but max is 0 [ 1286.894710][ T61] usb 7-1: config 3 has no interface number 0 [ 1286.896980][ T61] usb 7-1: config 3 interface 161 altsetting 2 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 1286.900436][ T61] usb 7-1: config 3 interface 161 altsetting 2 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 1286.904198][ T61] usb 7-1: config 3 interface 161 has no altsetting 0 [ 1286.907548][ T61] usb 7-1: language id specifier not provided by device, defaulting to English [ 1286.926431][ T61] usb 7-1: New USB device found, idVendor=19d2, idProduct=1084, bcdDevice=50.4f [ 1286.929378][ T61] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.404402][T13368] usbhid 11-1:0.0: can't add hid device: -71 [ 1287.421819][T13368] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 1287.435610][T13368] usb 11-1: USB disconnect, device number 8 [ 1287.997418][ T61] option 7-1:3.161: GSM modem (1-port) converter detected [ 1288.020499][ T61] usb 7-1: USB disconnect, device number 8 [ 1288.028980][ T61] option 7-1:3.161: device disconnected [ 1289.105780][T25965] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1289.931824][T25980] FAULT_INJECTION: forcing a failure. [ 1289.931824][T25980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1289.937103][T25980] CPU: 3 UID: 0 PID: 25980 Comm: syz.6.5803 Tainted: G L syzkaller #0 PREEMPT(full) [ 1289.937133][T25980] Tainted: [L]=SOFTLOCKUP [ 1289.937140][T25980] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1289.937151][T25980] Call Trace: [ 1289.937157][T25980] [ 1289.937164][T25980] dump_stack_lvl+0x100/0x190 [ 1289.937192][T25980] should_fail_ex.cold+0x5/0xa [ 1289.937212][T25980] _copy_from_user+0x2e/0xd0 [ 1289.937232][T25980] move_addr_to_kernel+0x65/0x170 [ 1289.937252][T25980] get_compat_msghdr+0x3c7/0x480 [ 1289.937267][T25980] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1289.937287][T25980] ? _kstrtoull+0x13c/0x1f0 [ 1289.937298][T25980] ? __pfx__kstrtoull+0x10/0x10 [ 1289.937310][T25980] ___sys_sendmsg+0x1b6/0x1e0 [ 1289.937328][T25980] ? __pfx____sys_sendmsg+0x10/0x10 [ 1289.937345][T25980] ? __lock_acquire+0x49f/0x1a40 [ 1289.937377][T25980] __sys_sendmmsg+0x309/0x440 [ 1289.937392][T25980] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1289.937405][T25980] ? find_held_lock+0x2b/0x80 [ 1289.937422][T25980] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1289.937447][T25980] ? fput+0x79/0x100 [ 1289.937460][T25980] ? ksys_write+0x1ac/0x250 [ 1289.937479][T25980] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 1289.937495][T25980] ? lockdep_hardirqs_on+0x78/0x100 [ 1289.937513][T25980] __do_fast_syscall_32+0xe7/0x970 [ 1289.937524][T25980] ? lockdep_hardirqs_on+0x78/0x100 [ 1289.937548][T25980] do_fast_syscall_32+0x32/0x70 [ 1289.937565][T25980] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1289.937588][T25980] RIP: 0023:0xf702efec [ 1289.937611][T25980] Code: Unable to access opcode bytes at 0xf702efc2. [ 1289.937620][T25980] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 1289.937635][T25980] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000440 [ 1289.937643][T25980] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1289.937650][T25980] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1289.937656][T25980] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1289.937663][T25980] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1289.937677][T25980] [ 1290.027339][T25984] random: crng reseeded on system resumption [ 1290.461339][ T61] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 1290.507735][T26003] FAULT_INJECTION: forcing a failure. [ 1290.507735][T26003] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1290.511456][T26003] CPU: 1 UID: 0 PID: 26003 Comm: syz.4.5810 Tainted: G L syzkaller #0 PREEMPT(full) [ 1290.511475][T26003] Tainted: [L]=SOFTLOCKUP [ 1290.511480][T26003] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1290.511487][T26003] Call Trace: [ 1290.511492][T26003] [ 1290.511497][T26003] dump_stack_lvl+0x100/0x190 [ 1290.511515][T26003] should_fail_ex.cold+0x5/0xa [ 1290.511528][T26003] strncpy_from_user+0x3b/0x2d0 [ 1290.511546][T26003] do_getname+0x78/0x390 [ 1290.511561][T26003] user_path_at+0x26/0x60 [ 1290.511578][T26003] bpf_uprobe_multi_link_attach+0x540/0x1600 [ 1290.511592][T26003] ? find_held_lock+0x2b/0x80 [ 1290.511609][T26003] ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10 [ 1290.511621][T26003] ? __fget_files+0x21f/0x3d0 [ 1290.511640][T26003] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1290.511659][T26003] __sys_bpf+0x414f/0x4e80 [ 1290.511675][T26003] ? __pfx___sys_bpf+0x10/0x10 [ 1290.511686][T26003] ? find_held_lock+0x2b/0x80 [ 1290.511699][T26003] ? get_pid_task+0xfc/0x250 [ 1290.511712][T26003] ? get_pid_task+0xfc/0x250 [ 1290.511729][T26003] ? proc_fail_nth_write+0x9f/0x220 [ 1290.511744][T26003] ? find_held_lock+0x2b/0x80 [ 1290.511760][T26003] ? rcu_read_lock_any_held+0x6a/0xa0 [ 1290.511774][T26003] ? find_held_lock+0x2b/0x80 [ 1290.511786][T26003] ? ksys_write+0x190/0x250 [ 1290.511803][T26003] ? ksys_write+0x190/0x250 [ 1290.511830][T26003] ? fput+0x79/0x100 [ 1290.511842][T26003] ? __ia32_sys_bpf+0xcc/0x170 [ 1290.511853][T26003] __ia32_sys_bpf+0xcc/0x170 [ 1290.511865][T26003] ? __do_fast_syscall_32+0x98/0x970 [ 1290.511878][T26003] __do_fast_syscall_32+0xe7/0x970 [ 1290.511889][T26003] ? lockdep_hardirqs_on+0x78/0x100 [ 1290.511908][T26003] do_fast_syscall_32+0x32/0x70 [ 1290.511920][T26003] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1290.511935][T26003] RIP: 0023:0xf6feefec [ 1290.511950][T26003] Code: Unable to access opcode bytes at 0xf6feefc2. [ 1290.511956][T26003] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 1290.511968][T26003] RAX: ffffffffffffffda RBX: 000000000000001c RCX: 00000000800012c0 [ 1290.511975][T26003] RDX: 000000000000003c RSI: 0000000000000000 RDI: 0000000000000000 [ 1290.511982][T26003] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1290.511992][T26003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1290.511999][T26003] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1290.512013][T26003] [ 1290.599978][ T61] usb 11-1: device descriptor read/64, error -71 [ 1290.737462][T26008] syzkaller0: entered promiscuous mode [ 1290.739877][T26008] syzkaller0: entered allmulticast mode [ 1290.856152][ T61] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 1290.994744][ T61] usb 11-1: device descriptor read/64, error -71 [ 1291.003651][T26015] random: crng reseeded on system resumption [ 1291.114416][ T61] usb usb11-port1: attempt power cycle [ 1291.246738][T26029] : renamed from vlan0 (while UP) [ 1291.396796][T23609] Bluetooth: hci1: Frame reassembly failed (-84) [ 1291.475478][ T61] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 1291.497304][ T61] usb 11-1: device descriptor read/8, error -71 [ 1291.550422][T13295] usb 9-1: new full-speed USB device number 71 using dummy_hcd [ 1291.722630][T13295] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1291.726620][T13295] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1291.729710][T13295] usb 9-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1291.733235][T13295] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1291.737940][T13295] usb 9-1: config 0 descriptor?? [ 1291.753510][ T61] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 1291.778525][ T61] usb 11-1: device descriptor read/8, error -71 [ 1291.892408][ T61] usb usb11-port1: unable to enumerate USB device [ 1292.190575][T26033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1292.191946][T26042] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5824'. [ 1292.195005][T26033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1293.574028][T15948] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1293.659512][ T42] audit: type=1326 audit(1784731300.674:3426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26064 comm="syz.2.5833" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1293.677474][ T42] audit: type=1326 audit(1784731300.674:3427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26064 comm="syz.2.5833" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1293.684900][ T42] audit: type=1326 audit(1784731300.674:3428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26064 comm="syz.2.5833" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1293.698547][ T42] audit: type=1326 audit(1784731300.674:3429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26064 comm="syz.2.5833" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1293.706802][ T42] audit: type=1326 audit(1784731300.674:3430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26064 comm="syz.2.5833" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1293.714234][ T42] audit: type=1326 audit(1784731300.674:3431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26064 comm="syz.2.5833" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1293.721234][ T42] audit: type=1326 audit(1784731300.674:3432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26064 comm="syz.2.5833" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1293.728481][ T42] audit: type=1326 audit(1784731300.674:3433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26064 comm="syz.2.5833" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1293.735826][ T42] audit: type=1326 audit(1784731300.674:3434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26064 comm="syz.2.5833" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1293.743568][ T42] audit: type=1326 audit(1784731300.674:3435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26064 comm="syz.2.5833" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1293.975417][T26070] lo speed is unknown, defaulting to 1000 [ 1294.588835][T26083] random: crng reseeded on system resumption [ 1294.696088][T13295] usbhid 9-1:0.0: can't add hid device: -71 [ 1294.698158][T13295] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1294.705848][T13295] usb 9-1: USB disconnect, device number 71 [ 1294.786860][T26084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1295.060367][T26094] lo speed is unknown, defaulting to 1000 [ 1295.450147][T13295] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 1295.612993][T13295] usb 7-1: not running at top speed; connect to a high speed hub [ 1295.617464][T13295] usb 7-1: config 3 has an invalid interface number: 161 but max is 0 [ 1295.621425][T13295] usb 7-1: config 3 has no interface number 0 [ 1295.624010][T13295] usb 7-1: config 3 interface 161 altsetting 2 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 1295.628588][T13295] usb 7-1: config 3 interface 161 has no altsetting 0 [ 1295.633309][T13295] usb 7-1: language id specifier not provided by device, defaulting to English [ 1295.669960][T13295] usb 7-1: New USB device found, idVendor=19d2, idProduct=1084, bcdDevice=50.4f [ 1295.677704][T13295] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.043228][T26106] Bluetooth: MGMT ver 1.23 [ 1296.222890][T13295] option 7-1:3.161: GSM modem (1-port) converter detected [ 1296.232264][T13295] usb 7-1: USB disconnect, device number 9 [ 1296.239555][T13295] option 7-1:3.161: device disconnected [ 1296.759451][T26122] FAULT_INJECTION: forcing a failure. [ 1296.759451][T26122] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1296.763519][T26122] CPU: 3 UID: 0 PID: 26122 Comm: syz.4.5846 Tainted: G L syzkaller #0 PREEMPT(full) [ 1296.763538][T26122] Tainted: [L]=SOFTLOCKUP [ 1296.763543][T26122] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1296.763550][T26122] Call Trace: [ 1296.763555][T26122] [ 1296.763559][T26122] dump_stack_lvl+0x100/0x190 [ 1296.763578][T26122] should_fail_ex.cold+0x5/0xa [ 1296.763591][T26122] _copy_to_user+0x32/0xd0 [ 1296.763609][T26122] simple_read_from_buffer+0xcb/0x170 [ 1296.763628][T26122] proc_fail_nth_read+0x1af/0x230 [ 1296.763643][T26122] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1296.763658][T26122] ? rw_verify_area+0xce/0x6d0 [ 1296.763674][T26122] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1296.763687][T26122] vfs_read+0x1e4/0xb40 [ 1296.763706][T26122] ? __pfx_vfs_read+0x10/0x10 [ 1296.763721][T26122] ? find_held_lock+0x2b/0x80 [ 1296.763736][T26122] ? __fget_files+0x215/0x3d0 [ 1296.763755][T26122] ? __fget_files+0x21f/0x3d0 [ 1296.763775][T26122] ksys_read+0x12a/0x250 [ 1296.763791][T26122] ? __pfx_ksys_read+0x10/0x10 [ 1296.763812][T26122] do_int80_emulation+0x14b/0x720 [ 1296.763826][T26122] asm_int80_emulation+0x1a/0x20 [ 1296.763838][T26122] RIP: 0023:0xf71271eb [ 1296.763849][T26122] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1296.763860][T26122] RSP: 002b:00000000f53dd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1296.763872][T26122] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f53dd5d0 [ 1296.763879][T26122] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1296.763886][T26122] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1296.763892][T26122] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1296.763899][T26122] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1296.763913][T26122] [ 1297.309310][ T61] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 1297.486115][ T61] usb 7-1: config 150 has an invalid interface number: 204 but max is 2 [ 1297.491544][ T61] usb 7-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1297.499351][ T61] usb 7-1: config 150 has no interface number 0 [ 1297.510050][ T61] usb 7-1: config 150 interface 204 has no altsetting 0 [ 1297.518987][ T61] usb 7-1: config 150 interface 1 has no altsetting 0 [ 1297.526119][ T61] usb 7-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1297.531215][ T61] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.535526][ T61] usb 7-1: Product: syz [ 1297.538174][ T61] usb 7-1: Manufacturer: syz [ 1297.540419][ T61] usb 7-1: SerialNumber: syz [ 1297.581916][T26137] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5854'. [ 1297.815952][ T61] xr_serial 7-1:150.204: skipping garbage [ 1297.820178][ T61] xr_serial 7-1:150.204: xr_serial converter detected [ 1300.207343][ T61] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 1300.209994][ T61] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1300.216667][ T61] usb 7-1: USB disconnect, device number 10 [ 1300.220024][ T61] xr_serial 7-1:150.204: device disconnected [ 1300.354494][T26214] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1300.359816][T26214] block device autoloading is deprecated and will be removed. [ 1300.408147][T13295] usb 9-1: new full-speed USB device number 72 using dummy_hcd [ 1300.510370][T26214] FAULT_INJECTION: forcing a failure. [ 1300.510370][T26214] name failslab, interval 1, probability 0, space 0, times 0 [ 1300.515940][T26214] CPU: 3 UID: 0 PID: 26214 Comm: syz.2.5877 Tainted: G L syzkaller #0 PREEMPT(full) [ 1300.515987][T26214] Tainted: [L]=SOFTLOCKUP [ 1300.515993][T26214] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1300.516004][T26214] Call Trace: [ 1300.516010][T26214] [ 1300.516017][T26214] dump_stack_lvl+0x100/0x190 [ 1300.516042][T26214] should_fail_ex.cold+0x5/0xa [ 1300.516062][T26214] should_failslab+0xc2/0x120 [ 1300.516083][T26214] __kmalloc_noprof+0xfc/0x820 [ 1300.516102][T26214] ? tomoyo_encode2+0xfb/0x3c0 [ 1300.516127][T26214] tomoyo_encode2+0xfb/0x3c0 [ 1300.516151][T26214] tomoyo_encode+0x29/0x50 [ 1300.516170][T26214] tomoyo_realpath_from_path+0x18c/0x690 [ 1300.516197][T26214] tomoyo_path_number_perm+0x23c/0x580 [ 1300.516215][T26214] ? tomoyo_path_number_perm+0x22e/0x580 [ 1300.516235][T26214] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1300.516253][T26214] ? get_pid_task+0x106/0x250 [ 1300.516292][T26214] ? find_held_lock+0x2b/0x80 [ 1300.516310][T26214] ? __fget_files+0x215/0x3d0 [ 1300.516332][T26214] ? hook_file_ioctl_common+0x140/0x440 [ 1300.516350][T26214] ? __fget_files+0x215/0x3d0 [ 1300.516375][T26214] ? __fget_files+0x21f/0x3d0 [ 1300.516402][T26214] security_file_ioctl_compat+0xd3/0x230 [ 1300.516422][T26214] __ia32_compat_sys_ioctl+0xc2/0x360 [ 1300.516446][T26214] __do_fast_syscall_32+0xe7/0x970 [ 1300.516462][T26214] ? lockdep_hardirqs_on+0x78/0x100 [ 1300.516487][T26214] do_fast_syscall_32+0x32/0x70 [ 1300.516504][T26214] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1300.516524][T26214] RIP: 0023:0xf708efec [ 1300.516545][T26214] Code: Unable to access opcode bytes at 0xf708efc2. [ 1300.516553][T26214] RSP: 002b:00000000f545c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1300.516570][T26214] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000932 [ 1300.516580][T26214] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000000 [ 1300.516590][T26214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1300.516599][T26214] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1300.516608][T26214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1300.516629][T26214] [ 1300.516667][T26214] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1300.604898][T26214] md: md2 stopped. [ 1300.668037][T13295] usb 9-1: config 150 has an invalid interface number: 204 but max is 2 [ 1300.671108][T13295] usb 9-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1300.675994][T13295] usb 9-1: config 150 has no interface number 0 [ 1300.688226][T13295] usb 9-1: config 150 interface 204 has no altsetting 0 [ 1300.694203][T13295] usb 9-1: config 150 interface 1 has no altsetting 0 [ 1300.702580][T13295] usb 9-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1300.706265][T13295] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.709694][T13295] usb 9-1: Product: syz [ 1300.711729][T13295] usb 9-1: Manufacturer: syz [ 1300.714229][T13295] usb 9-1: SerialNumber: syz [ 1301.061066][T13295] xr_serial 9-1:150.204: skipping garbage [ 1301.064295][T13295] xr_serial 9-1:150.204: xr_serial converter detected [ 1301.289152][T26242] fuse: fd is not a fuse device [ 1301.303316][T26242] fuse: fd is not a fuse device [ 1301.320994][T26242] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5885'. [ 1301.363399][T26244] fuse: fd is not a fuse device [ 1301.547984][T26254] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1301.551452][T26254] block device autoloading is deprecated and will be removed. [ 1301.705997][T26264] md: md2 stopped. [ 1301.730093][T26266] FAULT_INJECTION: forcing a failure. [ 1301.730093][T26266] name failslab, interval 1, probability 0, space 0, times 0 [ 1301.742118][T26266] CPU: 3 UID: 0 PID: 26266 Comm: syz.6.5893 Tainted: G L syzkaller #0 PREEMPT(full) [ 1301.742165][T26266] Tainted: [L]=SOFTLOCKUP [ 1301.742172][T26266] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1301.742180][T26266] Call Trace: [ 1301.742185][T26266] [ 1301.742190][T26266] dump_stack_lvl+0x100/0x190 [ 1301.742209][T26266] should_fail_ex.cold+0x5/0xa [ 1301.742223][T26266] should_failslab+0xc2/0x120 [ 1301.742238][T26266] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 1301.742253][T26266] ? __alloc_skb+0x5b7/0x710 [ 1301.742265][T26266] ? __alloc_skb+0x140/0x710 [ 1301.742279][T26266] __alloc_skb+0x140/0x710 [ 1301.742290][T26266] ? __alloc_skb+0x5b7/0x710 [ 1301.742302][T26266] ? __pfx___alloc_skb+0x10/0x10 [ 1301.742331][T26266] netlink_alloc_large_skb+0x69/0x150 [ 1301.742351][T26266] netlink_sendmsg+0x680/0xda0 [ 1301.742370][T26266] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1301.742394][T26266] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1301.742415][T26266] ____sys_sendmsg+0xa4d/0xbe0 [ 1301.742431][T26266] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1301.742449][T26266] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1301.742472][T26266] ___sys_sendmsg+0x190/0x1e0 [ 1301.742490][T26266] ? __pfx____sys_sendmsg+0x10/0x10 [ 1301.742513][T26266] ? find_held_lock+0x2b/0x80 [ 1301.742535][T26266] __sys_sendmsg+0x160/0x210 [ 1301.742549][T26266] ? __pfx___sys_sendmsg+0x10/0x10 [ 1301.742566][T26266] ? __pfx_ksys_write+0x10/0x10 [ 1301.742586][T26266] __do_fast_syscall_32+0xe7/0x970 [ 1301.742599][T26266] ? lockdep_hardirqs_on+0x78/0x100 [ 1301.742617][T26266] do_fast_syscall_32+0x32/0x70 [ 1301.742629][T26266] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1301.742644][T26266] RIP: 0023:0xf702efec [ 1301.742660][T26266] Code: Unable to access opcode bytes at 0xf702efc2. [ 1301.742665][T26266] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1301.742677][T26266] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 1301.742685][T26266] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 1301.742691][T26266] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1301.742698][T26266] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1301.742705][T26266] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1301.742719][T26266] [ 1302.589868][T26292] FAULT_INJECTION: forcing a failure. [ 1302.589868][T26292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1302.594704][T26292] CPU: 2 UID: 0 PID: 26292 Comm: syz.6.5903 Tainted: G L syzkaller #0 PREEMPT(full) [ 1302.594724][T26292] Tainted: [L]=SOFTLOCKUP [ 1302.594728][T26292] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1302.594735][T26292] Call Trace: [ 1302.594740][T26292] [ 1302.594746][T26292] dump_stack_lvl+0x100/0x190 [ 1302.594763][T26292] should_fail_ex.cold+0x5/0xa [ 1302.594791][T26292] _copy_to_iter+0x5a4/0x1720 [ 1302.594810][T26292] ? __pfx__copy_to_iter+0x10/0x10 [ 1302.594827][T26292] ? transaction_log_show+0x5d6/0x710 [ 1302.594846][T26292] seq_read_iter+0xdab/0x1270 [ 1302.594870][T26292] seq_read+0x344/0x4d0 [ 1302.594887][T26292] ? __pfx_seq_read+0x10/0x10 [ 1302.594906][T26292] ? lock_acquire+0x1b9/0x370 [ 1302.594929][T26292] full_proxy_read+0x135/0x1a0 [ 1302.594942][T26292] ? __pfx_full_proxy_read+0x10/0x10 [ 1302.594953][T26292] vfs_read+0x1e4/0xb40 [ 1302.594973][T26292] ? __pfx_vfs_read+0x10/0x10 [ 1302.594989][T26292] ? find_held_lock+0x2b/0x80 [ 1302.595003][T26292] ? __fget_files+0x215/0x3d0 [ 1302.595022][T26292] ? __fget_files+0x21f/0x3d0 [ 1302.595043][T26292] ksys_read+0x12a/0x250 [ 1302.595060][T26292] ? __pfx_ksys_read+0x10/0x10 [ 1302.595076][T26292] ? ksys_write+0x1ac/0x250 [ 1302.595092][T26292] ? __pfx_ksys_write+0x10/0x10 [ 1302.595112][T26292] __do_fast_syscall_32+0xe7/0x970 [ 1302.595125][T26292] ? lockdep_hardirqs_on+0x78/0x100 [ 1302.595144][T26292] do_fast_syscall_32+0x32/0x70 [ 1302.595156][T26292] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1302.595171][T26292] RIP: 0023:0xf702efec [ 1302.595185][T26292] Code: Unable to access opcode bytes at 0xf702efc2. [ 1302.595191][T26292] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 1302.595203][T26292] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080004800 [ 1302.595210][T26292] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000 [ 1302.595217][T26292] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1302.595224][T26292] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1302.595231][T26292] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1302.595245][T26292] [ 1303.082046][T26305] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1303.084141][T26305] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1303.087583][T26305] vhci_hcd vhci_hcd.0: Device attached [ 1303.367440][ T5856] usb 42-1: SetAddress Request (10) to port 0 [ 1303.369537][ T5856] usb 42-1: new SuperSpeed USB device number 10 using vhci_hcd [ 1303.449649][T13295] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 1303.451822][T13295] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1303.463121][T13295] usb 9-1: USB disconnect, device number 72 [ 1303.466580][T13295] xr_serial 9-1:150.204: device disconnected [ 1303.656180][T26306] vhci_hcd: connection reset by peer [ 1303.658214][T12808] vhci_hcd vhci_hcd.2: stop threads [ 1303.659979][T12808] vhci_hcd vhci_hcd.2: release socket [ 1303.661966][T12808] vhci_hcd vhci_hcd.2: disconnect device [ 1303.846195][T26323] FAULT_INJECTION: forcing a failure. [ 1303.846195][T26323] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1303.851413][T26323] CPU: 0 UID: 0 PID: 26323 Comm: syz.4.5911 Tainted: G L syzkaller #0 PREEMPT(full) [ 1303.851434][T26323] Tainted: [L]=SOFTLOCKUP [ 1303.851438][T26323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1303.851445][T26323] Call Trace: [ 1303.851450][T26323] [ 1303.851454][T26323] dump_stack_lvl+0x100/0x190 [ 1303.851472][T26323] should_fail_ex.cold+0x5/0xa [ 1303.851485][T26323] _copy_from_user+0x2e/0xd0 [ 1303.851503][T26323] move_addr_to_kernel+0x65/0x170 [ 1303.851521][T26323] get_compat_msghdr+0x3c7/0x480 [ 1303.851536][T26323] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1303.851553][T26323] ? _kstrtoull+0x13c/0x1f0 [ 1303.851564][T26323] ? __pfx__kstrtoull+0x10/0x10 [ 1303.851576][T26323] ___sys_sendmsg+0x1b6/0x1e0 [ 1303.851594][T26323] ? __pfx____sys_sendmsg+0x10/0x10 [ 1303.851610][T26323] ? __lock_acquire+0x49f/0x1a40 [ 1303.851644][T26323] __sys_sendmmsg+0x309/0x440 [ 1303.851659][T26323] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1303.851671][T26323] ? find_held_lock+0x2b/0x80 [ 1303.851688][T26323] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1303.851718][T26323] ? fput+0x79/0x100 [ 1303.851730][T26323] ? ksys_write+0x1ac/0x250 [ 1303.851750][T26323] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 1303.851765][T26323] ? lockdep_hardirqs_on+0x78/0x100 [ 1303.851783][T26323] __do_fast_syscall_32+0xe7/0x970 [ 1303.851794][T26323] ? lockdep_hardirqs_on+0x78/0x100 [ 1303.851813][T26323] do_fast_syscall_32+0x32/0x70 [ 1303.851824][T26323] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1303.851839][T26323] RIP: 0023:0xf6feefec [ 1303.851854][T26323] Code: Unable to access opcode bytes at 0xf6feefc2. [ 1303.851859][T26323] RSP: 002b:00000000f53bc50c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 1303.851871][T26323] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080002f00 [ 1303.851878][T26323] RDX: 0000000000000001 RSI: 0000000020004000 RDI: 0000000000000000 [ 1303.851885][T26323] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1303.851892][T26323] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1303.851898][T26323] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1303.851912][T26323] [ 1305.576033][T26349] Cannot find del_set index 14804 as target [ 1305.833563][T26349] ipip0: entered promiscuous mode [ 1307.393167][T26377] 9p: Bad value for 'rfdno' [ 1307.521927][T26383] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5935'. [ 1307.527223][T26383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1307.560087][T26381] FAULT_INJECTION: forcing a failure. [ 1307.560087][T26381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1307.562412][T26389] binder: 26388:26389 ioctl c0306201 0 returned -14 [ 1307.564122][T26381] CPU: 1 UID: 0 PID: 26381 Comm: syz.6.5934 Tainted: G L syzkaller #0 PREEMPT(full) [ 1307.564142][T26381] Tainted: [L]=SOFTLOCKUP [ 1307.564146][T26381] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1307.564153][T26381] Call Trace: [ 1307.564157][T26381] [ 1307.564162][T26381] dump_stack_lvl+0x100/0x190 [ 1307.564181][T26381] should_fail_ex.cold+0x5/0xa [ 1307.564195][T26381] _copy_to_user+0x32/0xd0 [ 1307.564213][T26381] simple_read_from_buffer+0xcb/0x170 [ 1307.564232][T26381] proc_fail_nth_read+0x1af/0x230 [ 1307.564248][T26381] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1307.564263][T26381] ? rw_verify_area+0xce/0x6d0 [ 1307.564279][T26381] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1307.564293][T26381] vfs_read+0x1e4/0xb40 [ 1307.564311][T26381] ? __pfx_vfs_read+0x10/0x10 [ 1307.564327][T26381] ? find_held_lock+0x2b/0x80 [ 1307.564341][T26381] ? __fget_files+0x215/0x3d0 [ 1307.564360][T26381] ? __fget_files+0x21f/0x3d0 [ 1307.564381][T26381] ksys_read+0x12a/0x250 [ 1307.564397][T26381] ? __pfx_ksys_read+0x10/0x10 [ 1307.564418][T26381] do_int80_emulation+0x14b/0x720 [ 1307.564432][T26381] asm_int80_emulation+0x1a/0x20 [ 1307.564444][T26381] RIP: 0023:0xf71671eb [ 1307.564455][T26381] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1307.564467][T26381] RSP: 002b:00000000f541d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1307.564478][T26381] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f541d5d0 [ 1307.564486][T26381] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1307.564492][T26381] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1307.564499][T26381] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1307.564506][T26381] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1307.564519][T26381] [ 1308.026121][ T61] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 1308.220204][ T61] usb 7-1: config 150 has an invalid interface number: 204 but max is 2 [ 1308.223922][ T61] usb 7-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1308.227879][ T61] usb 7-1: config 150 has no interface number 0 [ 1308.230614][ T61] usb 7-1: config 150 interface 204 has no altsetting 0 [ 1308.232854][ T61] usb 7-1: config 150 interface 1 has no altsetting 0 [ 1308.238090][ T61] usb 7-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1308.241933][ T61] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.245412][ T61] usb 7-1: Product: syz [ 1308.247275][ T61] usb 7-1: Manufacturer: syz [ 1308.249350][ T61] usb 7-1: SerialNumber: syz [ 1308.479876][ T61] xr_serial 7-1:150.204: skipping garbage [ 1308.482040][ T61] xr_serial 7-1:150.204: xr_serial converter detected [ 1308.795315][ T5856] usb 42-1: device descriptor read/8, error -110 [ 1309.185941][T26408] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 1309.234259][ T5856] usb usb42-port1: attempt power cycle [ 1309.842654][ T5856] usb usb42-port1: unable to enumerate USB device [ 1310.200276][T26463] tc action pedit offset 132 out of bounds [ 1310.206607][T26463] tmpfs: Bad value for 'mpol' [ 1310.859274][ T61] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 1310.861373][ T61] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1310.888093][ T61] usb 7-1: USB disconnect, device number 11 [ 1310.898054][ T61] xr_serial 7-1:150.204: device disconnected [ 1311.079118][T26477] ufs: You didn't specify the type of your ufs filesystem [ 1311.079118][T26477] [ 1311.079118][T26477] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1311.079118][T26477] [ 1311.079118][T26477] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1311.091757][T26477] ufs: failed to set blocksize [ 1311.190146][T26488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5961'. [ 1311.195942][T26488] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5961'. [ 1311.201648][T26488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5961'. [ 1311.206863][ T42] kauditd_printk_skb: 201 callbacks suppressed [ 1311.206874][ T42] audit: type=1804 audit(1784731317.090:3637): pid=26489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5960" name="/newroot/122/file1/file0" dev="9p" ino=72876449 res=1 errno=0 [ 1311.239690][T26492] FAULT_INJECTION: forcing a failure. [ 1311.239690][T26492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1311.245440][T26492] CPU: 3 UID: 0 PID: 26492 Comm: syz.4.5962 Tainted: G L syzkaller #0 PREEMPT(full) [ 1311.245460][T26492] Tainted: [L]=SOFTLOCKUP [ 1311.245464][T26492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1311.245472][T26492] Call Trace: [ 1311.245476][T26492] [ 1311.245481][T26492] dump_stack_lvl+0x100/0x190 [ 1311.245499][T26492] should_fail_ex.cold+0x5/0xa [ 1311.245512][T26492] _copy_from_iter+0x1f4/0x1690 [ 1311.245530][T26492] ? __asan_memset+0x23/0x50 [ 1311.245542][T26492] ? __pfx__copy_from_iter+0x10/0x10 [ 1311.245558][T26492] ? __pfx___alloc_skb+0x10/0x10 [ 1311.245576][T26492] netlink_sendmsg+0x808/0xda0 [ 1311.245596][T26492] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1311.245622][T26492] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1311.245643][T26492] ____sys_sendmsg+0xa4d/0xbe0 [ 1311.245658][T26492] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1311.245677][T26492] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1311.245699][T26492] ___sys_sendmsg+0x190/0x1e0 [ 1311.245717][T26492] ? __pfx____sys_sendmsg+0x10/0x10 [ 1311.245741][T26492] ? find_held_lock+0x2b/0x80 [ 1311.245762][T26492] __sys_sendmsg+0x160/0x210 [ 1311.245776][T26492] ? __pfx___sys_sendmsg+0x10/0x10 [ 1311.245793][T26492] ? __pfx_ksys_write+0x10/0x10 [ 1311.245818][T26492] __do_fast_syscall_32+0xe7/0x970 [ 1311.245830][T26492] ? lockdep_hardirqs_on+0x78/0x100 [ 1311.245848][T26492] do_fast_syscall_32+0x32/0x70 [ 1311.245860][T26492] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1311.245875][T26492] RIP: 0023:0xf6feefec [ 1311.245890][T26492] Code: Unable to access opcode bytes at 0xf6feefc2. [ 1311.245895][T26492] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1311.245907][T26492] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 1311.245915][T26492] RDX: 000000000000500c RSI: 0000000000000000 RDI: 0000000000000000 [ 1311.245922][T26492] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1311.245929][T26492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1311.245936][T26492] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1311.245950][T26492] [ 1311.295346][ T5856] usb 11-1: new full-speed USB device number 13 using dummy_hcd [ 1311.516326][ T5856] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1311.526900][ T5856] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1311.531004][ T5856] usb 11-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1311.534714][ T5856] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.542428][ T5856] usb 11-1: config 0 descriptor?? [ 1311.733387][ T41] usb 9-1: new full-speed USB device number 73 using dummy_hcd [ 1311.897809][ T41] usb 9-1: config 150 has an invalid interface number: 204 but max is 2 [ 1311.900764][ T41] usb 9-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1311.904266][ T41] usb 9-1: config 150 has no interface number 0 [ 1311.906715][ T41] usb 9-1: config 150 interface 204 has no altsetting 0 [ 1311.909618][ T41] usb 9-1: config 150 interface 1 has no altsetting 0 [ 1311.915546][ T41] usb 9-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1311.918779][ T41] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1311.921698][ T41] usb 9-1: Product: syz [ 1311.923111][ T41] usb 9-1: Manufacturer: syz [ 1311.924820][ T41] usb 9-1: SerialNumber: syz [ 1311.991321][T26482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1311.997188][T26482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1312.149583][ T41] xr_serial 9-1:150.204: skipping garbage [ 1312.156508][ T41] xr_serial 9-1:150.204: xr_serial converter detected [ 1312.595529][T26512] fuse: fd is not a fuse device [ 1312.602206][T26512] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5968'. [ 1312.893185][T26523] random: crng reseeded on system resumption [ 1313.719515][T15948] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1313.728772][T15948] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1313.733421][T15948] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1313.745562][T15948] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1313.749760][T15948] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1314.132955][T26530] lo speed is unknown, defaulting to 1000 [ 1314.274306][ T5856] usbhid 11-1:0.0: can't add hid device: -71 [ 1314.277081][ T5856] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 1314.284086][ T5856] usb 11-1: USB disconnect, device number 13 [ 1314.405740][T26530] bridge0: port 1(bridge_slave_0) entered blocking state [ 1314.408113][T26530] bridge0: port 1(bridge_slave_0) entered disabled state [ 1314.410727][T26530] bridge_slave_0: entered allmulticast mode [ 1314.414371][T26530] bridge_slave_0: entered promiscuous mode [ 1314.420631][T26530] bridge0: port 2(bridge_slave_1) entered blocking state [ 1314.423020][T26530] bridge0: port 2(bridge_slave_1) entered disabled state [ 1314.425415][T26530] bridge_slave_1: entered allmulticast mode [ 1314.428799][T26530] bridge_slave_1: entered promiscuous mode [ 1314.445706][T26530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1314.450772][T26530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1314.477245][T26530] team0: Port device team_slave_0 added [ 1314.482365][T26530] team0: Port device team_slave_1 added [ 1314.517630][T26530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1314.519829][T26530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1314.528459][T26530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1314.534794][T26530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1314.538201][T26530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1314.550644][T26530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1314.577374][T26530] hsr_slave_0: entered promiscuous mode [ 1314.579859][T26530] hsr_slave_1: entered promiscuous mode [ 1314.582052][T26530] debugfs: 'hsr0' already exists in 'hsr' [ 1314.584098][T26530] Cannot create hsr debugfs directory [ 1314.594614][ T41] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 1314.597616][ T41] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1314.608706][ T41] usb 9-1: USB disconnect, device number 73 [ 1314.621630][ T41] xr_serial 9-1:150.204: device disconnected [ 1315.032842][T26530] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1315.184338][T26530] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1315.254557][T26530] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1315.319312][T26530] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1315.605428][T26530] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1315.612589][T26530] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1315.616569][T26530] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1315.623533][T26530] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1315.627043][T26530] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1315.641460][T26530] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1315.647339][T26530] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1315.653086][T26530] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1315.701966][T26585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5988'. [ 1315.782248][T26530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1315.797681][T26530] 8021q: adding VLAN 0 to HW filter on device team0 [ 1315.811094][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 1315.813850][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1315.823851][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 1315.827023][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1315.846020][T26590] netlink: 'syz.2.5989': attribute type 1 has an invalid length. [ 1315.852332][T26590] netlink: 396 bytes leftover after parsing attributes in process `syz.2.5989'. [ 1315.859853][T26590] loop8: detected capacity change from 0 to 524287999 [ 1315.890932][T26590] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5989'. [ 1315.904217][T15290] buffer_io_error: 341 callbacks suppressed [ 1315.904231][T15290] Buffer I/O error on dev loop8, logical block 65535998, async page read [ 1315.921802][ T34] usb 11-1: new full-speed USB device number 14 using dummy_hcd [ 1316.050514][T23274] Bluetooth: hci1: command tx timeout [ 1316.123001][ T34] usb 11-1: config 150 has an invalid interface number: 204 but max is 2 [ 1316.133727][ T34] usb 11-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1316.143653][ T34] usb 11-1: config 150 has no interface number 0 [ 1316.151684][ T34] usb 11-1: config 150 interface 204 has no altsetting 0 [ 1316.155538][ T34] usb 11-1: config 150 interface 1 has no altsetting 0 [ 1316.161294][ T34] usb 11-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1316.164165][ T34] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.166672][ T34] usb 11-1: Product: syz [ 1316.168339][ T34] usb 11-1: Manufacturer: syz [ 1316.169857][ T34] usb 11-1: SerialNumber: syz [ 1316.228743][T26530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1316.396973][ T34] xr_serial 11-1:150.204: skipping garbage [ 1316.405091][ T34] xr_serial 11-1:150.204: xr_serial converter detected [ 1316.431616][T26530] veth0_vlan: entered promiscuous mode [ 1316.439503][T26530] veth1_vlan: entered promiscuous mode [ 1316.469324][T26530] veth0_macvtap: entered promiscuous mode [ 1316.475718][T26530] veth1_macvtap: entered promiscuous mode [ 1316.491736][T26530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1316.501442][T26530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1316.512314][ T5824] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.518162][ T5824] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.525104][ T5824] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.530060][ T5824] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.635950][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1316.644274][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1316.688336][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1316.690954][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1316.997193][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 1317.231689][T26620] lo speed is unknown, defaulting to 1000 [ 1317.978659][T26634] netlink: 'syz.5.5996': attribute type 13 has an invalid length. [ 1318.164097][T26634] gretap0: refused to change device tx_queue_len [ 1318.172988][T26634] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1318.273824][T23274] Bluetooth: hci1: command tx timeout [ 1318.914649][ T34] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 1318.924785][ T34] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1318.936950][ T34] usb 11-1: USB disconnect, device number 14 [ 1318.942953][ T34] xr_serial 11-1:150.204: device disconnected [ 1320.494738][T23274] Bluetooth: hci1: command tx timeout [ 1320.687117][ T0] NOHZ tick-stop error: local softirq work is pending, handler #92!!! [ 1320.741385][T26675] ptrace attach of ""[26676] was attempted by "/syz-executor exec"[26675] [ 1322.076237][ T24] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 1322.260086][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1322.264215][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1322.268233][ T24] usb 7-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1322.271856][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1322.284669][ T24] usb 7-1: config 0 descriptor?? [ 1322.386795][T26664] lo speed is unknown, defaulting to 1000 [ 1322.717028][T23274] Bluetooth: hci1: command tx timeout [ 1322.865101][T26682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1322.873387][T26682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1324.882504][T26711] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6014'. [ 1324.995077][ T5856] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 1325.025016][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 1325.103864][ T24] usbhid 7-1:0.0: can't add hid device: -71 [ 1325.106628][ T24] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1325.115683][ T24] usb 7-1: USB disconnect, device number 12 [ 1325.169478][ T5856] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1325.175132][ T5856] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1325.185087][ T5856] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1325.195956][ T5856] usb 10-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 1325.198842][ T5856] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1325.205108][ T5856] usb 10-1: config 0 descriptor?? [ 1325.225573][T26707] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1325.998814][T26733] random: crng reseeded on system resumption [ 1326.056263][T26735] lo speed is unknown, defaulting to 1000 [ 1326.317929][ T5856] usbhid 10-1:0.0: can't add hid device: -71 [ 1326.322816][ T5856] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1326.337812][ T5856] usb 10-1: USB disconnect, device number 4 [ 1326.730172][T26738] lo speed is unknown, defaulting to 1000 [ 1326.926756][ T6158] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 1327.090315][ T6158] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1327.095938][ T6158] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1327.103932][ T6158] usb 7-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1327.109511][ T6158] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1327.115897][ T6158] usb 7-1: config 0 descriptor?? [ 1327.577668][T26749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1327.581892][T26749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1327.625445][ T41] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1327.803462][ T41] usb 10-1: Using ep0 maxpacket: 8 [ 1327.807316][ T41] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 1327.810824][ T41] usb 10-1: config 0 has no interface number 0 [ 1327.813710][ T41] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1327.818531][ T41] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1327.822588][ T41] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1327.827852][ T41] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1327.832334][ T41] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1327.835917][ T41] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1327.846121][ T41] usb 10-1: config 0 descriptor?? [ 1327.852330][ T41] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1329.439025][T26776] random: crng reseeded on system resumption [ 1329.916137][ T6158] usbhid 7-1:0.0: can't add hid device: -71 [ 1329.918417][ T6158] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1329.924741][ T6158] usb 7-1: USB disconnect, device number 13 [ 1330.309794][ T34] usb 10-1: USB disconnect, device number 5 [ 1330.317295][ T34] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 1330.523214][T26783] lo speed is unknown, defaulting to 1000 [ 1330.548752][ T5534] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1330.740705][ T5534] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1330.744952][ T5534] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1330.753544][ T5534] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1330.762408][ T5534] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1330.771614][ T5534] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1330.781384][ T5534] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1330.798435][ T5534] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1330.802753][ T5534] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1330.810592][ T5534] usb 7-1: Product: syz [ 1330.812520][ T5534] usb 7-1: Manufacturer: syz [ 1330.826033][T26781] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1330.839100][ T5534] cdc_wdm 7-1:1.0: skipping garbage [ 1330.841635][ T5534] cdc_wdm 7-1:1.0: skipping garbage [ 1330.861834][ T5534] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1330.866851][ T5534] cdc_wdm 7-1:1.0: Unknown control protocol [ 1331.241556][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1331.244008][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1331.246352][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1331.248471][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1331.250676][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1331.252857][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1331.255292][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1331.257379][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1331.259581][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1331.261836][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1331.264020][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1331.266728][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1331.269185][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1331.271637][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1331.273873][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1331.276028][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1331.294107][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1331.296781][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1331.299526][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1331.301746][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1331.734713][T26803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1331.756132][T26803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1331.775471][T26803] IPVS: set_ctl: invalid protocol: 0 1.0.1.0:1280 [ 1331.867096][T14808] usb 7-1: USB disconnect, device number 14 [ 1332.814572][ T5855] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 1332.979062][ T5855] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1332.983374][ T5855] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1332.988542][ T5855] usb 7-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1332.992223][ T5855] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.006177][ T5855] usb 7-1: config 0 descriptor?? [ 1333.090515][T26794] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6038'. [ 1333.766799][T26809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1333.777842][T26809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1334.980082][T26826] lo speed is unknown, defaulting to 1000 [ 1335.516080][T26837] macsec1: entered allmulticast mode [ 1335.519078][T26837] veth1_macvtap: entered allmulticast mode [ 1335.533525][T26837] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6050'. [ 1335.549262][T26837] veth1_macvtap (unregistering): left allmulticast mode [ 1335.606346][T26838] binder_alloc: 26836: binder_alloc_buf size 65496 failed, no address space [ 1335.617315][T26838] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 1335.659738][ T5855] usbhid 7-1:0.0: can't add hid device: -71 [ 1335.662240][ T5855] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1335.684003][ T5855] usb 7-1: USB disconnect, device number 15 [ 1335.796725][T26844] netlink: 'syz.2.6052': attribute type 10 has an invalid length. [ 1335.920200][T26844] syz_tun: entered promiscuous mode [ 1335.937474][T26844] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1336.443551][T26843] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6051'. [ 1337.765713][T26876] random: crng reseeded on system resumption [ 1337.858665][ T5534] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1338.044393][ T5534] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1338.048502][ T5534] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1338.066173][ T5534] usb 7-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 1338.069583][ T5534] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1338.073335][ T5534] usb 7-1: Product: syz [ 1338.074971][ T5534] usb 7-1: Manufacturer: syz [ 1338.076807][ T5534] usb 7-1: SerialNumber: syz [ 1338.529039][T26874] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6059'. [ 1338.657964][T26882] erofs (device loop5): cannot find valid erofs superblock [ 1338.928681][T26891] netlink: 92 bytes leftover after parsing attributes in process `syz.5.6064'. [ 1339.367543][ T5534] usb 7-1: unit 4 not found! [ 1339.455090][ T5534] usb 7-1: USB disconnect, device number 16 [ 1339.741573][T15290] udevd[15290]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1340.814721][T26889] lo speed is unknown, defaulting to 1000 [ 1340.849023][ T61] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1341.010652][ T61] usb 7-1: Using ep0 maxpacket: 8 [ 1341.018098][ T61] usb 7-1: config 0 has no interfaces? [ 1341.024888][ T61] usb 7-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 1341.040967][ T61] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.044971][ T61] usb 7-1: Product: syz [ 1341.046720][ T61] usb 7-1: Manufacturer: syz [ 1341.050025][ T61] usb 7-1: SerialNumber: syz [ 1341.102725][ T61] usb 7-1: config 0 descriptor?? [ 1341.442829][T26907] netlink: 'syz.2.6066': attribute type 2 has an invalid length. [ 1341.450389][T26907] IPVS: Unknown mcast interface: [ 1341.690921][ T5856] usb 7-1: USB disconnect, device number 17 [ 1342.266424][T26928] random: crng reseeded on system resumption [ 1342.340095][T26929] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6069'. [ 1342.448998][T26935] coredump: 484(syz.2.6071): Core dump to core aborted: cannot preserve file permissions [ 1343.252144][T26946] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6074'. [ 1344.148234][T26960] random: crng reseeded on system resumption [ 1344.247424][T26958] batman_adv: batadv0: Adding interface: dummy0 [ 1344.249699][T26958] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1344.258728][T26958] batman_adv: batadv0: Interface activated: dummy0 [ 1344.470145][T26970] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6081'. [ 1344.474184][T26970] netlink: 43 bytes leftover after parsing attributes in process `syz.2.6081'. [ 1344.477942][T26970] netlink: 'syz.2.6081': attribute type 5 has an invalid length. [ 1344.481097][T26970] netlink: 43 bytes leftover after parsing attributes in process `syz.2.6081'. [ 1345.054304][T26956] lo speed is unknown, defaulting to 1000 [ 1345.948851][T26998] ntfs3(sr0): Primary boot signature is not NTFS. [ 1345.965408][T26998] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 1346.439987][T27003] random: crng reseeded on system resumption [ 1346.896061][ T61] usb 9-1: new full-speed USB device number 74 using dummy_hcd [ 1347.132483][ T61] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1347.173997][ T61] usb 9-1: not running at top speed; connect to a high speed hub [ 1347.324532][ T61] usb 9-1: config 3 has an invalid interface number: 161 but max is 0 [ 1347.330031][ T61] usb 9-1: config 3 has no interface number 0 [ 1347.332274][ T61] usb 9-1: config 3 interface 161 altsetting 2 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 1347.352042][ T61] usb 9-1: config 3 interface 161 has no altsetting 0 [ 1347.441578][ T61] usb 9-1: New USB device found, idVendor=19d2, idProduct=1084, bcdDevice=50.4f [ 1347.448904][ T61] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.462380][ T61] usb 9-1: Product: syz [ 1347.464126][ T61] usb 9-1: Manufacturer: syz [ 1347.466134][ T61] usb 9-1: SerialNumber: syz [ 1347.758377][ T61] option 9-1:3.161: GSM modem (1-port) converter detected [ 1347.769845][ T61] usb 9-1: USB disconnect, device number 74 [ 1347.780168][ T61] option 9-1:3.161: device disconnected [ 1347.911926][ T5855] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 1348.084617][ T5855] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1348.088194][ T5855] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1348.091373][ T5855] usb 10-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1348.094714][ T5855] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1348.099119][ T5855] usb 10-1: config 0 descriptor?? [ 1348.346616][T27034] openvswitch: netlink: Flow actions attr not present in new flow. [ 1348.488847][T27034] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6099'. [ 1348.502782][T27034] loop4: detected capacity change from 0 to 2640 [ 1348.524900][T15290] Buffer I/O error on dev loop4, logical block 0, async page read [ 1348.527852][T15290] Buffer I/O error on dev loop4, logical block 0, async page read [ 1348.534024][T15290] Buffer I/O error on dev loop4, logical block 0, async page read [ 1348.542401][T15290] Buffer I/O error on dev loop4, logical block 0, async page read [ 1348.545706][T15290] Buffer I/O error on dev loop4, logical block 0, async page read [ 1348.593297][T27023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1348.597081][T27023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1348.752243][T27040] netlink: 'syz.4.6100': attribute type 21 has an invalid length. [ 1349.098669][T27043] random: crng reseeded on system resumption [ 1349.976764][T27075] lo speed is unknown, defaulting to 1000 [ 1350.744650][T27087] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1350.748837][T27087] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1350.755763][T27087] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1350.946571][T27087] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1350.969159][ T5855] usbhid 10-1:0.0: can't add hid device: -71 [ 1350.987081][ T5855] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1351.369263][ T5855] usb 10-1: USB disconnect, device number 6 [ 1351.744429][T15478] libceph: connect (1)[c::]:6789 error -101 [ 1351.759257][T15478] libceph: mon0 (1)[c::]:6789 connect error [ 1351.846663][T15478] libceph: connect (1)[c::]:6789 error -101 [ 1351.849355][T15478] libceph: mon0 (1)[c::]:6789 connect error [ 1352.513354][T15478] libceph: connect (1)[c::]:6789 error -101 [ 1352.562546][T14808] libceph: connect (1)[c::]:6789 error -101 [ 1352.565320][T15478] libceph: mon0 (1)[c::]:6789 connect error [ 1352.584595][T14808] libceph: mon0 (1)[c::]:6789 connect error [ 1353.138101][T15478] libceph: connect (1)[c::]:6789 error -101 [ 1353.141686][T15478] libceph: mon0 (1)[c::]:6789 connect error [ 1353.189454][T15478] libceph: connect (1)[c::]:6789 error -101 [ 1353.295641][T15478] libceph: mon0 (1)[c::]:6789 connect error [ 1353.816892][T27091] lo speed is unknown, defaulting to 1000 [ 1354.090862][T27100] ceph: No mds server is up or the cluster is laggy [ 1354.093171][T27104] ceph: No mds server is up or the cluster is laggy [ 1355.572464][T14808] usb 11-1: new high-speed USB device number 15 using dummy_hcd [ 1355.753640][T14808] usb 11-1: Using ep0 maxpacket: 32 [ 1355.758288][T14808] usb 11-1: unable to get BOS descriptor or descriptor too short [ 1355.767848][T14808] usb 11-1: string descriptor 0 read error: -22 [ 1355.770475][T14808] usb 11-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 1355.775944][T14808] usb 11-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 1355.941676][T14808] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 1355.947554][T14808] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1355.952042][T14808] dvb-usb: bulk message failed: -22 (2/0) [ 1355.980315][T14808] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1356.101118][T14808] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 1356.104769][T14808] usb 11-1: media controller created [ 1356.116756][T14808] dvb-usb: bulk message failed: -22 (6/0) [ 1356.121592][T14808] dw2102: i2c transfer failed. [ 1356.123493][T14808] dvb-usb: bulk message failed: -22 (6/0) [ 1356.128319][T14808] dw2102: i2c transfer failed. [ 1356.132625][T14808] dvb-usb: bulk message failed: -22 (6/0) [ 1356.137216][T14808] dw2102: i2c transfer failed. [ 1356.141169][T14808] dvb-usb: bulk message failed: -22 (6/0) [ 1356.148814][T14808] dw2102: i2c transfer failed. [ 1356.150712][T14808] dvb-usb: bulk message failed: -22 (6/0) [ 1356.155732][T14808] dw2102: i2c transfer failed. [ 1356.161560][T14808] dvb-usb: bulk message failed: -22 (6/0) [ 1356.166286][T14808] dw2102: i2c transfer failed. [ 1356.168166][T14808] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1356.228350][T14808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1356.673412][T14808] dvb-usb: bulk message failed: -22 (3/0) [ 1356.675440][T14808] dw2102: command 0x0e transfer failed. [ 1356.680317][T14808] dvb-usb: bulk message failed: -22 (3/0) [ 1356.693729][T14808] dw2102: command 0x0e transfer failed. [ 1357.025014][T14808] dvb-usb: bulk message failed: -22 (3/0) [ 1357.027014][T14808] dw2102: command 0x0e transfer failed. [ 1357.029504][T14808] dvb-usb: bulk message failed: -22 (3/0) [ 1357.032052][T14808] dw2102: command 0x0e transfer failed. [ 1357.034321][T14808] dvb-usb: bulk message failed: -22 (1/0) [ 1357.046315][T14808] dw2102: command 0x51 transfer failed. [ 1357.083327][T27132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1357.087150][T27132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1357.547384][T14808] DVB: Unable to find symbol ds3000_attach() [ 1357.550121][T14808] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 1357.698345][T14808] rc_core: IR keymap rc-su3000 not found [ 1357.700138][T14808] Registered IR keymap rc-empty [ 1357.702287][T14808] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0 [ 1357.711112][T14808] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0/input146 [ 1357.723515][T14808] dvb-usb: schedule remote query interval to 150 msecs. [ 1357.729018][T14808] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1357.733839][T14808] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 1357.743394][T14808] usb 11-1: USB disconnect, device number 15 [ 1358.340740][T14808] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 1359.332864][ T5856] usb 7-1: new low-speed USB device number 18 using dummy_hcd [ 1359.505355][ T5856] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1359.507945][ T5856] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1359.519991][ T5856] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1359.533446][ T5856] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1359.546793][ T5856] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1359.552177][ T5856] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1359.555152][ T5856] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1359.570901][ T5856] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1359.586425][ T5856] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1359.597639][ T5856] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1359.610682][ T5856] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1359.616370][ T5856] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1359.622677][ T5856] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1359.632270][ T5856] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1359.638108][ T5856] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1359.646328][ T5856] usb 7-1: string descriptor 0 read error: -22 [ 1359.648416][ T5856] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1359.652836][ T5856] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.669715][ T5856] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1360.451836][T27170] FAULT_INJECTION: forcing a failure. [ 1360.451836][T27170] name failslab, interval 1, probability 0, space 0, times 0 [ 1360.469175][T27170] CPU: 3 UID: 0 PID: 27170 Comm: syz.6.6124 Tainted: G L syzkaller #0 PREEMPT(full) [ 1360.469198][T27170] Tainted: [L]=SOFTLOCKUP [ 1360.469202][T27170] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1360.469209][T27170] Call Trace: [ 1360.469214][T27170] [ 1360.469219][T27170] dump_stack_lvl+0x100/0x190 [ 1360.469251][T27170] should_fail_ex.cold+0x5/0xa [ 1360.469264][T27170] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1360.469286][T27170] should_failslab+0xc2/0x120 [ 1360.469322][T27170] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1360.469337][T27170] ? skb_clone+0x190/0x400 [ 1360.469353][T27170] skb_clone+0x190/0x400 [ 1360.469366][T27170] netlink_deliver_tap+0xaed/0xcc0 [ 1360.469387][T27170] netlink_dump+0x909/0xd00 [ 1360.469405][T27170] ? __pfx_netlink_dump+0x10/0x10 [ 1360.469420][T27170] ? __netlink_lookup+0x65c/0x900 [ 1360.469450][T27170] __netlink_dump_start+0x6d6/0x990 [ 1360.469468][T27170] ? __pfx_tc_dump_tfilter+0x10/0x10 [ 1360.469486][T27170] rtnetlink_rcv_msg+0xb3e/0xe90 [ 1360.469500][T27170] ? __pfx_tc_dump_tfilter+0x10/0x10 [ 1360.469518][T27170] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1360.469532][T27170] ? __pfx_rtnl_dumpit+0x10/0x10 [ 1360.469550][T27170] ? __pfx_tc_dump_tfilter+0x10/0x10 [ 1360.469568][T27170] ? ref_tracker_free+0x37e/0x6c0 [ 1360.469587][T27170] netlink_rcv_skb+0x159/0x420 [ 1360.469605][T27170] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1360.469620][T27170] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1360.469643][T27170] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1360.469662][T27170] netlink_unicast+0x585/0x850 [ 1360.469682][T27170] ? __pfx_netlink_unicast+0x10/0x10 [ 1360.469704][T27170] netlink_sendmsg+0x8b0/0xda0 [ 1360.469723][T27170] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1360.469743][T27170] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1360.469764][T27170] ____sys_sendmsg+0xa4d/0xbe0 [ 1360.469780][T27170] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1360.469799][T27170] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1360.469822][T27170] ___sys_sendmsg+0x190/0x1e0 [ 1360.469841][T27170] ? __pfx____sys_sendmsg+0x10/0x10 [ 1360.469865][T27170] ? find_held_lock+0x2b/0x80 [ 1360.469888][T27170] __sys_sendmsg+0x160/0x210 [ 1360.469901][T27170] ? __pfx___sys_sendmsg+0x10/0x10 [ 1360.469919][T27170] ? __pfx_ksys_write+0x10/0x10 [ 1360.469941][T27170] __do_fast_syscall_32+0xe7/0x970 [ 1360.469953][T27170] ? lockdep_hardirqs_on+0x78/0x100 [ 1360.469972][T27170] do_fast_syscall_32+0x32/0x70 [ 1360.469984][T27170] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1360.469999][T27170] RIP: 0023:0xf702efec [ 1360.470014][T27170] Code: Unable to access opcode bytes at 0xf702efc2. [ 1360.470020][T27170] RSP: 002b:00000000f53fc50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1360.470031][T27170] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080006040 [ 1360.470038][T27170] RDX: 0000000004041080 RSI: 0000000000000000 RDI: 0000000000000000 [ 1360.470045][T27170] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1360.470051][T27170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1360.470058][T27170] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1360.470084][T27170] [ 1360.840853][T27173] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6125'. [ 1361.572870][T27182] lo speed is unknown, defaulting to 1000 [ 1362.485012][ T41] usb 9-1: new high-speed USB device number 75 using dummy_hcd [ 1362.516941][ T61] usb 11-1: new high-speed USB device number 16 using dummy_hcd [ 1362.648749][ T41] usb 9-1: Using ep0 maxpacket: 8 [ 1362.656940][ T41] usb 9-1: config index 0 descriptor too short (expected 9, got 0) [ 1362.660467][ T41] usb 9-1: can't read configurations, error -22 [ 1362.677143][ T61] usb 11-1: Using ep0 maxpacket: 8 [ 1362.680579][ T61] usb 11-1: config 0 has an invalid interface number: 55 but max is 0 [ 1362.683182][ T61] usb 11-1: config 0 has no interface number 0 [ 1362.685500][ T61] usb 11-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1362.690121][ T61] usb 11-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1362.694818][ T61] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1362.699298][ T61] usb 11-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1362.703940][ T61] usb 11-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1362.707181][ T61] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1362.711867][ T61] usb 11-1: config 0 descriptor?? [ 1362.718329][ T61] ldusb 11-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 1362.808048][ T41] usb 9-1: new high-speed USB device number 76 using dummy_hcd [ 1362.987024][ T41] usb 9-1: Using ep0 maxpacket: 8 [ 1362.992596][ T41] usb 9-1: config index 0 descriptor too short (expected 9, got 0) [ 1362.996090][ T41] usb 9-1: can't read configurations, error -22 [ 1362.999638][ T41] usb usb9-port1: attempt power cycle [ 1363.159613][ T845] usb 7-1: USB disconnect, device number 18 [ 1363.372202][ T41] usb 9-1: new high-speed USB device number 77 using dummy_hcd [ 1363.406703][ T41] usb 9-1: Using ep0 maxpacket: 8 [ 1363.491625][ T41] usb 9-1: config index 0 descriptor too short (expected 9, got 0) [ 1363.497605][ T41] usb 9-1: can't read configurations, error -22 [ 1363.513237][ T42] audit: type=1326 audit(1784731366.049:3638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27206 comm="syz.2.6135" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1363.527574][ T42] audit: type=1326 audit(1784731366.049:3639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27206 comm="syz.2.6135" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1363.539391][ T42] audit: type=1326 audit(1784731366.049:3640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27206 comm="syz.2.6135" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1363.546132][ T42] audit: type=1326 audit(1784731366.058:3641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27206 comm="syz.2.6135" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1363.554116][ T42] audit: type=1326 audit(1784731366.058:3642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27206 comm="syz.2.6135" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1363.570046][ T42] audit: type=1326 audit(1784731366.058:3643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27206 comm="syz.2.6135" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1363.587570][ T42] audit: type=1326 audit(1784731366.058:3644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27206 comm="syz.2.6135" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1363.603049][ T42] audit: type=1326 audit(1784731366.058:3645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27206 comm="syz.2.6135" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1363.617401][ T42] audit: type=1326 audit(1784731366.058:3646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27206 comm="syz.2.6135" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1363.624451][ T42] audit: type=1326 audit(1784731366.058:3647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27206 comm="syz.2.6135" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1363.638817][ T41] usb 9-1: new high-speed USB device number 78 using dummy_hcd [ 1363.679602][ T41] usb 9-1: Using ep0 maxpacket: 8 [ 1363.713152][T27210] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6136'. [ 1363.782906][ T41] usb 9-1: config index 0 descriptor too short (expected 9, got 0) [ 1363.788789][ T41] usb 9-1: can't read configurations, error -22 [ 1363.799479][ T41] usb usb9-port1: unable to enumerate USB device [ 1363.848250][T27210] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6136'. [ 1364.632642][ T34] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 1364.795074][ T34] usb 10-1: config 150 has an invalid interface number: 204 but max is 2 [ 1364.799187][ T34] usb 10-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1364.802760][ T34] usb 10-1: config 150 has no interface number 0 [ 1364.805511][ T34] usb 10-1: config 150 interface 204 has no altsetting 0 [ 1364.808313][ T34] usb 10-1: config 150 interface 1 has no altsetting 0 [ 1364.813585][ T34] usb 10-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1364.817476][ T34] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1364.820325][ T34] usb 10-1: Product: syz [ 1364.821608][ T34] usb 10-1: Manufacturer: syz [ 1364.823069][ T34] usb 10-1: SerialNumber: syz [ 1365.161317][ T34] xr_serial 10-1:150.204: skipping garbage [ 1365.163765][ T34] xr_serial 10-1:150.204: xr_serial converter detected [ 1365.883555][ T845] usb 11-1: USB disconnect, device number 16 [ 1365.887359][ T845] ldusb 11-1:0.55: LD USB Device #1 now disconnected [ 1366.188035][T27226] lo speed is unknown, defaulting to 1000 [ 1367.051561][T27242] FAULT_INJECTION: forcing a failure. [ 1367.051561][T27242] name failslab, interval 1, probability 0, space 0, times 0 [ 1367.056107][T27242] CPU: 2 UID: 0 PID: 27242 Comm: syz.6.6143 Tainted: G L syzkaller #0 PREEMPT(full) [ 1367.056127][T27242] Tainted: [L]=SOFTLOCKUP [ 1367.056131][T27242] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1367.056138][T27242] Call Trace: [ 1367.056143][T27242] [ 1367.056148][T27242] dump_stack_lvl+0x100/0x190 [ 1367.056166][T27242] should_fail_ex.cold+0x5/0xa [ 1367.056179][T27242] should_failslab+0xc2/0x120 [ 1367.056195][T27242] __kmalloc_noprof+0xfc/0x820 [ 1367.056208][T27242] ? rcu_is_watching+0x12/0xc0 [ 1367.056221][T27242] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1367.056241][T27242] tomoyo_realpath_from_path+0xb6/0x690 [ 1367.056260][T27242] tomoyo_path_perm+0x276/0x460 [ 1367.056273][T27242] ? tomoyo_path_perm+0x262/0x460 [ 1367.056287][T27242] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 1367.056298][T27242] ? find_held_lock+0x2b/0x80 [ 1367.056331][T27242] ? get_pid_task+0xfc/0x250 [ 1367.056363][T27242] ? proc_fail_nth_write+0x9f/0x220 [ 1367.056378][T27242] ? find_held_lock+0x2b/0x80 [ 1367.056399][T27242] ? hook_file_truncate+0xba/0x280 [ 1367.056417][T27242] security_file_truncate+0xb5/0x1e0 [ 1367.056433][T27242] do_ftruncate+0x216/0x8a0 [ 1367.056446][T27242] ? __pfx_do_ftruncate+0x10/0x10 [ 1367.056461][T27242] ksys_ftruncate+0x61/0xb0 [ 1367.056472][T27242] __ia32_compat_sys_ftruncate+0x58/0x80 [ 1367.056484][T27242] __do_fast_syscall_32+0xe7/0x970 [ 1367.056497][T27242] ? lockdep_hardirqs_on+0x78/0x100 [ 1367.056516][T27242] do_fast_syscall_32+0x32/0x70 [ 1367.056528][T27242] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1367.056543][T27242] RIP: 0023:0xf702efec [ 1367.056558][T27242] Code: Unable to access opcode bytes at 0xf702efc2. [ 1367.056563][T27242] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 000000000000005d [ 1367.056575][T27242] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000008 [ 1367.056582][T27242] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1367.056588][T27242] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1367.056595][T27242] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1367.056602][T27242] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1367.056616][T27242] [ 1367.126616][T27242] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1367.296767][T27244] batadv_slave_1: entered promiscuous mode [ 1367.611072][T27244] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6145'. [ 1367.935584][T27243] batadv_slave_1: left promiscuous mode [ 1368.412790][T27257] block nbd4: shutting down sockets [ 1368.654967][ T34] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 1368.657566][ T34] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1368.665963][ T34] usb 10-1: USB disconnect, device number 7 [ 1368.675544][ T34] xr_serial 10-1:150.204: device disconnected [ 1368.725206][T27263] FAULT_INJECTION: forcing a failure. [ 1368.725206][T27263] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1368.756704][T27263] CPU: 2 UID: 0 PID: 27263 Comm: syz.2.6150 Tainted: G L syzkaller #0 PREEMPT(full) [ 1368.756746][T27263] Tainted: [L]=SOFTLOCKUP [ 1368.756767][T27263] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1368.756774][T27263] Call Trace: [ 1368.756779][T27263] [ 1368.756784][T27263] dump_stack_lvl+0x100/0x190 [ 1368.756803][T27263] should_fail_ex.cold+0x5/0xa [ 1368.756816][T27263] _copy_from_iter+0x1f4/0x1690 [ 1368.756836][T27263] ? rcu_is_watching+0x12/0xc0 [ 1368.756850][T27263] ? __pfx__copy_from_iter+0x10/0x10 [ 1368.756867][T27263] ? __kasan_kmalloc+0xaa/0xb0 [ 1368.756881][T27263] ? __kvmalloc_node_noprof+0x36d/0x970 [ 1368.756894][T27263] ? file_tty_write.isra.0+0x694/0x890 [ 1368.756909][T27263] ? rcu_is_watching+0x12/0xc0 [ 1368.756921][T27263] ? file_tty_write.isra.0+0x694/0x890 [ 1368.756934][T27263] ? kfree+0x1e5/0x6c0 [ 1368.756954][T27263] file_tty_write.isra.0+0x45b/0x890 [ 1368.756972][T27263] vfs_write+0x6ac/0x1050 [ 1368.756991][T27263] ? __pfx_tty_write+0x10/0x10 [ 1368.757005][T27263] ? __pfx_vfs_write+0x10/0x10 [ 1368.757021][T27263] ? find_held_lock+0x2b/0x80 [ 1368.757044][T27263] ksys_write+0x12a/0x250 [ 1368.757060][T27263] ? __pfx_ksys_write+0x10/0x10 [ 1368.757076][T27263] ? ksys_write+0x1ac/0x250 [ 1368.757093][T27263] ? __pfx_ksys_write+0x10/0x10 [ 1368.757113][T27263] __do_fast_syscall_32+0xe7/0x970 [ 1368.757125][T27263] ? lockdep_hardirqs_on+0x78/0x100 [ 1368.757144][T27263] do_fast_syscall_32+0x32/0x70 [ 1368.757156][T27263] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1368.757172][T27263] RIP: 0023:0xf708efec [ 1368.757213][T27263] Code: Unable to access opcode bytes at 0xf708efc2. [ 1368.757219][T27263] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 1368.757231][T27263] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001c40 [ 1368.757239][T27263] RDX: 0000000000001006 RSI: 0000000000000000 RDI: 0000000000000000 [ 1368.757246][T27263] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1368.757252][T27263] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1368.757259][T27263] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1368.757274][T27263] [ 1368.900284][ T42] kauditd_printk_skb: 375 callbacks suppressed [ 1368.900297][ T42] audit: type=1326 audit(1784731371.094:4024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27260 comm="syz.4.6149" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 1368.908742][ T42] audit: type=1326 audit(1784731371.094:4023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27260 comm="syz.4.6149" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 1368.915407][ T42] audit: type=1326 audit(1784731371.094:4025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27260 comm="syz.4.6149" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 1368.935106][ T42] audit: type=1326 audit(1784731371.112:4026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27260 comm="syz.4.6149" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 1368.945017][ T42] audit: type=1326 audit(1784731371.112:4027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27260 comm="syz.4.6149" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 1368.952636][ T42] audit: type=1326 audit(1784731371.112:4028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27260 comm="syz.4.6149" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 1368.960254][ T42] audit: type=1326 audit(1784731371.112:4029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27260 comm="syz.4.6149" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 1368.968987][ T42] audit: type=1326 audit(1784731371.112:4030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27260 comm="syz.4.6149" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 1369.001721][ T42] audit: type=1326 audit(1784731371.112:4031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27260 comm="syz.4.6149" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 1369.008927][ T42] audit: type=1326 audit(1784731371.140:4032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27260 comm="syz.4.6149" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 1369.100472][ T1041] bridge0: entered promiscuous mode [ 1369.254162][T27274] tc action pedit offset 132 out of bounds [ 1369.901269][T23274] Bluetooth: hci1: link tx timeout [ 1369.907255][T23274] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1370.770745][T15948] Bluetooth: hci1: link tx timeout [ 1370.779135][T15948] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1371.859142][T27292] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1372.043677][T27286] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6158'. [ 1372.155739][T27286] netlink: 212 bytes leftover after parsing attributes in process `syz.6.6158'. [ 1372.158673][T27286] netlink: 72 bytes leftover after parsing attributes in process `syz.6.6158'. [ 1372.681649][ T41] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 1372.915502][ T41] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1372.919349][ T41] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1372.922661][ T41] usb 10-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1372.925907][ T41] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1372.932772][ T41] usb 10-1: config 0 descriptor?? [ 1372.990228][T23274] Bluetooth: hci1: command 0x0406 tx timeout [ 1373.678326][T27308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1373.685757][T27308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1373.795555][T27319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6167'. [ 1373.799848][T27319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6167'. [ 1374.071427][T27322] FAULT_INJECTION: forcing a failure. [ 1374.071427][T27322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1374.075412][T27322] CPU: 2 UID: 0 PID: 27322 Comm: syz.4.6168 Tainted: G L syzkaller #0 PREEMPT(full) [ 1374.075432][T27322] Tainted: [L]=SOFTLOCKUP [ 1374.075437][T27322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1374.075444][T27322] Call Trace: [ 1374.075448][T27322] [ 1374.075453][T27322] dump_stack_lvl+0x100/0x190 [ 1374.075472][T27322] should_fail_ex.cold+0x5/0xa [ 1374.075485][T27322] _copy_from_user+0x2e/0xd0 [ 1374.075503][T27322] get_compat_msghdr+0xb3/0x480 [ 1374.075531][T27322] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1374.075552][T27322] ___sys_sendmsg+0x1b6/0x1e0 [ 1374.075571][T27322] ? __pfx____sys_sendmsg+0x10/0x10 [ 1374.075596][T27322] ? find_held_lock+0x2b/0x80 [ 1374.075618][T27322] __sys_sendmsg+0x160/0x210 [ 1374.075632][T27322] ? __pfx___sys_sendmsg+0x10/0x10 [ 1374.075649][T27322] ? __pfx_ksys_write+0x10/0x10 [ 1374.075682][T27322] __do_fast_syscall_32+0xe7/0x970 [ 1374.075694][T27322] ? lockdep_hardirqs_on+0x78/0x100 [ 1374.075713][T27322] do_fast_syscall_32+0x32/0x70 [ 1374.075725][T27322] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1374.075740][T27322] RIP: 0023:0xf6feefec [ 1374.075755][T27322] Code: Unable to access opcode bytes at 0xf6feefc2. [ 1374.075760][T27322] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1374.075771][T27322] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 1374.075778][T27322] RDX: 0000000000040004 RSI: 0000000000000000 RDI: 0000000000000000 [ 1374.075785][T27322] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1374.075792][T27322] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1374.075799][T27322] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1374.075813][T27322] [ 1374.420842][ T42] kauditd_printk_skb: 379 callbacks suppressed [ 1374.420866][ T42] audit: type=1326 audit(1784731376.260:4412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27327 comm="syz.4.6171" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 1374.440216][ T42] audit: type=1326 audit(1784731376.260:4413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27327 comm="syz.4.6171" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 1374.453384][ T42] audit: type=1326 audit(1784731376.260:4414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27327 comm="syz.4.6171" exe="/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 1374.463271][ T42] audit: type=1326 audit(1784731376.260:4415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27327 comm="syz.4.6171" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 1374.474117][ T42] audit: type=1326 audit(1784731376.260:4416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27327 comm="syz.4.6171" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 1374.483324][ T42] audit: type=1326 audit(1784731376.260:4417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27327 comm="syz.4.6171" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 1374.493634][ T42] audit: type=1326 audit(1784731376.260:4418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27327 comm="syz.4.6171" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 1374.502762][ T42] audit: type=1326 audit(1784731376.260:4419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27327 comm="syz.4.6171" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 1374.513181][ T42] audit: type=1326 audit(1784731376.260:4420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27327 comm="syz.4.6171" exe="/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 1374.522366][ T42] audit: type=1326 audit(1784731376.260:4421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27327 comm="syz.4.6171" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 1375.654632][ T41] usbhid 10-1:0.0: can't add hid device: -71 [ 1375.662195][ T41] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1375.685687][ T41] usb 10-1: USB disconnect, device number 8 [ 1377.541909][T27360] FAULT_INJECTION: forcing a failure. [ 1377.541909][T27360] name failslab, interval 1, probability 0, space 0, times 0 [ 1377.549224][T27360] CPU: 3 UID: 0 PID: 27360 Comm: syz.5.6179 Tainted: G L syzkaller #0 PREEMPT(full) [ 1377.549245][T27360] Tainted: [L]=SOFTLOCKUP [ 1377.549250][T27360] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1377.549258][T27360] Call Trace: [ 1377.549262][T27360] [ 1377.549267][T27360] dump_stack_lvl+0x100/0x190 [ 1377.549285][T27360] should_fail_ex.cold+0x5/0xa [ 1377.549296][T27360] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1377.549316][T27360] should_failslab+0xc2/0x120 [ 1377.549331][T27360] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1377.549346][T27360] ? skb_clone+0x190/0x400 [ 1377.549361][T27360] skb_clone+0x190/0x400 [ 1377.549375][T27360] netlink_deliver_tap+0xaed/0xcc0 [ 1377.549396][T27360] netlink_unicast+0x62b/0x850 [ 1377.549415][T27360] ? __pfx_netlink_unicast+0x10/0x10 [ 1377.549437][T27360] netlink_sendmsg+0x8b0/0xda0 [ 1377.549457][T27360] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1377.549476][T27360] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1377.549512][T27360] ____sys_sendmsg+0xa4d/0xbe0 [ 1377.549528][T27360] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1377.549550][T27360] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1377.549583][T27360] ___sys_sendmsg+0x190/0x1e0 [ 1377.549611][T27360] ? __pfx____sys_sendmsg+0x10/0x10 [ 1377.549650][T27360] ? find_held_lock+0x2b/0x80 [ 1377.549678][T27360] __sys_sendmsg+0x160/0x210 [ 1377.549693][T27360] ? __pfx___sys_sendmsg+0x10/0x10 [ 1377.549710][T27360] ? __pfx_ksys_write+0x10/0x10 [ 1377.549731][T27360] __do_fast_syscall_32+0xe7/0x970 [ 1377.549748][T27360] ? lockdep_hardirqs_on+0x78/0x100 [ 1377.549767][T27360] do_fast_syscall_32+0x32/0x70 [ 1377.549779][T27360] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1377.549795][T27360] RIP: 0023:0xf704efec [ 1377.549811][T27360] Code: Unable to access opcode bytes at 0xf704efc2. [ 1377.549817][T27360] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1377.549829][T27360] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 1377.549836][T27360] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1377.549843][T27360] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1377.549862][T27360] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1377.549869][T27360] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1377.549884][T27360] [ 1378.241622][T27368] FAULT_INJECTION: forcing a failure. [ 1378.241622][T27368] name failslab, interval 1, probability 0, space 0, times 0 [ 1378.245948][T27368] CPU: 2 UID: 0 PID: 27368 Comm: syz.6.6182 Tainted: G L syzkaller #0 PREEMPT(full) [ 1378.245969][T27368] Tainted: [L]=SOFTLOCKUP [ 1378.245974][T27368] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1378.245981][T27368] Call Trace: [ 1378.245985][T27368] [ 1378.245990][T27368] dump_stack_lvl+0x100/0x190 [ 1378.246009][T27368] should_fail_ex.cold+0x5/0xa [ 1378.246022][T27368] should_failslab+0xc2/0x120 [ 1378.246037][T27368] __kvmalloc_node_noprof+0x116/0x970 [ 1378.246053][T27368] ? alloc_netdev_mqs+0xd7/0x15c0 [ 1378.246068][T27368] ? __pfx_vti6_dev_setup+0x10/0x10 [ 1378.246086][T27368] alloc_netdev_mqs+0xd7/0x15c0 [ 1378.246102][T27368] vti6_locate+0x3f2/0x6d0 [ 1378.246121][T27368] ? __pfx_vti6_locate+0x10/0x10 [ 1378.246142][T27368] vti6_siocdevprivate+0x581/0x760 [ 1378.246162][T27368] ? __pfx_vti6_siocdevprivate+0x10/0x10 [ 1378.246189][T27368] ? full_name_hash+0xbc/0x100 [ 1378.246203][T27368] ? netdev_name_node_lookup+0x107/0x150 [ 1378.246216][T27368] dev_ifsioc+0xc2f/0x1f10 [ 1378.246231][T27368] ? __pfx_dev_ifsioc+0x10/0x10 [ 1378.246243][T27368] ? __pfx___mutex_lock+0x10/0x10 [ 1378.246259][T27368] ? dev_load+0x8e/0x240 [ 1378.246287][T27368] ? dev_load+0x8e/0x240 [ 1378.246304][T27368] dev_ioctl+0x70e/0x1070 [ 1378.246318][T27368] sock_ioctl+0x494/0x6b0 [ 1378.246340][T27368] ? __pfx_sock_ioctl+0x10/0x10 [ 1378.246360][T27368] ? do_vfs_ioctl+0x226/0x13e0 [ 1378.246377][T27368] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1378.246393][T27368] compat_sock_ioctl+0x400/0x760 [ 1378.246413][T27368] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 1378.246430][T27368] ? hook_file_ioctl_common+0x140/0x440 [ 1378.246447][T27368] ? __fget_files+0x21f/0x3d0 [ 1378.246467][T27368] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 1378.246485][T27368] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1378.246502][T27368] __do_fast_syscall_32+0xe7/0x970 [ 1378.246513][T27368] ? lockdep_hardirqs_on+0x78/0x100 [ 1378.246532][T27368] do_fast_syscall_32+0x32/0x70 [ 1378.246543][T27368] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1378.246559][T27368] RIP: 0023:0xf702efec [ 1378.246575][T27368] Code: Unable to access opcode bytes at 0xf702efc2. [ 1378.246581][T27368] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1378.246592][T27368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000089f1 [ 1378.246600][T27368] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 1378.246606][T27368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1378.246613][T27368] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1378.246620][T27368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1378.246634][T27368] [ 1378.412902][T27372] [U]  [ 1378.414325][T27372] [U] K{ [ 1378.417671][T27372] [U] t 1ŠFfˊ`GJgo/mC [ 1378.419862][T27372] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 1378.424491][T27372] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 1378.428905][T27372] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 1378.440515][T27372] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 1378.447881][T27372] [U] T_K5tYJ)c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 1378.451459][T27372] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 1378.455165][T27372] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 1378.518716][T27372] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 1378.521759][T27372] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 1378.528285][T27372] [U] 22Ʃx?0;3u [ 1378.530052][T27372] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 1378.538226][T27372] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 1378.541472][T27372] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 1378.562704][T27372] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 1378.564835][T27372] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 1378.569382][T27372] [U] ec [ 1378.570429][T27372] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 1378.574959][T27372] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 1378.579656][T27372] [U] [ 1378.580536][T27372] [U] [ 1378.581421][T27372] [U] [ 1378.583663][T27372] [U] [ 1378.584609][T27372] [U] [ 1378.585504][T27372] [U] [ 1378.586399][T27372] [U] [ 1378.589795][T27372] [U] [ 1378.590692][T27372] [U] [ 1378.591581][T27372] [U] [ 1378.592455][T27372] [U] [ 1378.593600][T27372] [U] [ 1378.594641][T27372] [U] [ 1378.595547][T27372] [U] [ 1378.596422][T27372] [U] [ 1378.604221][T27372] [U] [ 1378.605372][T27372] [U] [ 1378.606540][T27372] [U] [ 1378.607712][T27372] [U] [ 1378.608887][T27372] [U] [ 1378.611565][T27372] [U] [ 1378.612788][T27372] [U] [ 1378.613969][T27372] [U] [ 1378.615135][T27372] [U] [ 1378.700722][T27372] [U] [ 1378.701605][T27372] [U] [ 1378.702494][T27372] [U] [ 1378.703398][T27372] [U] [ 1378.705920][T27372] [U] [ 1378.706837][T27372] [U] [ 1378.707715][T27372] [U] [ 1378.708593][T27372] [U] [ 1378.709731][T27372] [U] [ 1378.710637][T27372] [U] [ 1378.711514][T27372] [U] [ 1378.712391][T27372] [U] [ 1378.713636][T27372] [U] [ 1378.714546][T27372] [U] [ 1378.715422][T27372] [U] [ 1378.716322][T27372] [U] [ 1378.718438][T27372] [U] [ 1378.719356][T27372] [U] [ 1378.720266][T27372] [U] [ 1378.721168][T27372] [U] [ 1378.722251][T27372] [U] [ 1378.723138][T27372] [U] [ 1378.724288][T27372] [U] [ 1378.725189][T27372] [U] [ 1378.726826][T27372] [U] [ 1378.727711][T27372] [U] [ 1378.728599][T27372] [U] [ 1378.729505][T27372] [U] [ 1378.730572][T27372] [U] [ 1378.731465][T27372] [U] [ 1378.732352][T27372] [U] [ 1378.733246][T27372] [U] [ 1378.734473][T27372] [U] [ 1378.735371][T27372] [U] [ 1378.736258][T27372] [U] [ 1378.737154][T27372] [U] [ 1378.739310][T27372] [U] [ 1378.740247][T27372] [U] [ 1378.741185][T27372] [U] [ 1378.742109][T27372] [U] [ 1378.743376][T27372] [U] [ 1378.744555][T27372] [U] [ 1378.745498][T27372] [U] [ 1378.746385][T27372] [U] [ 1378.747894][T27372] [U] [ 1378.748862][T27372] [U] [ 1378.749965][T27372] [U] [ 1378.750898][T27372] [U] [ 1378.752072][T27372] [U] [ 1378.752961][T27372] [U] [ 1378.753983][T27372] [U] [ 1378.754857][T27372] [U] [ 1378.791694][ T845] usb 11-1: new full-speed USB device number 17 using dummy_hcd [ 1378.806830][T27372] [U] [ 1378.807743][T27372] [U] [ 1378.808635][T27372] [U] [ 1378.809524][T27372] [U] [ 1378.811711][T27372] [U] [ 1378.812607][T27372] [U] [ 1378.813769][T27372] [U] [ 1378.814609][T27372] [U] [ 1378.815705][T27372] [U] [ 1378.816567][T27372] [U] [ 1378.817786][T27372] [U] [ 1378.818632][T27372] [U] [ 1378.819806][T27372] [U] [ 1378.820683][T27372] [U] [ 1378.821597][T27372] [U] [ 1378.822447][T27372] [U] [ 1378.824342][T27372] [U] [ 1378.825258][T27372] [U] [ 1378.826121][T27372] [U] [ 1378.826966][T27372] [U] [ 1378.827887][T27372] [U] [ 1378.828724][T27372] [U] [ 1378.829581][T27372] [U] [ 1378.830403][T27372] [U] [ 1378.831277][T27372] [U] [ 1378.832120][T27372] [U] [ 1378.832948][T27372] [U] [ 1378.833803][T27372] [U] [ 1378.834959][T27372] [U] [ 1378.835775][T27372] [U] [ 1378.836597][T27372] [U] [ 1378.837439][T27372] [U] [ 1378.838339][T27372] [U] [ 1378.839504][T27372] [U] [ 1378.840535][T27372] [U] [ 1378.841913][T27372] [U] [ 1378.843492][T27372] [U] [ 1378.844378][T27372] [U] [ 1378.845257][T27372] [U] [ 1378.846111][T27372] [U] [ 1378.848616][T27372] [U] [ 1378.849516][T27372] [U] [ 1378.850348][T27372] [U] [ 1378.851190][T27372] [U] [ 1378.854288][T27372] [U] [ 1378.855337][T27372] [U] [ 1378.856451][T27372] [U] [ 1378.857449][T27372] [U] [ 1378.858601][T27372] [U] [ 1378.859445][T27372] [U] [ 1378.860283][T27372] [U] [ 1378.861137][T27372] [U] [ 1378.862064][T27372] [U] [ 1378.862895][T27372] [U] [ 1378.863708][T27372] [U] [ 1378.864682][T27372] [U] [ 1378.866115][T27372] [U] [ 1378.867154][T27372] [U] [ 1378.868039][T27372] [U] [ 1378.868895][T27372] [U] [ 1378.869865][T27372] [U] [ 1378.870689][T27372] [U] [ 1378.871504][T27372] [U] [ 1378.872341][T27372] [U] [ 1378.873217][T27372] [U] [ 1378.874094][T27372] [U] [ 1378.874924][T27372] [U] [ 1378.875735][T27372] [U] [ 1378.876832][T27372] [U] [ 1378.877672][T27372] [U] [ 1378.878497][T27372] [U] [ 1378.879324][T27372] [U] [ 1378.880156][T27372] [U] [ 1378.881058][T27372] [U] [ 1378.881922][T27372] [U] [ 1378.882785][T27372] [U] [ 1378.883665][T27372] [U] [ 1378.884579][T27372] [U] [ 1378.885449][T27372] [U] [ 1378.886310][T27372] [U] [ 1378.887173][T27372] [U] [ 1378.898950][T27372] [U] [ 1378.899843][T27372] [U] [ 1378.900681][T27372] [U] [ 1378.901553][T27372] [U] [ 1378.902494][T27372] [U] [ 1378.903333][T27372] [U] [ 1378.904183][T27372] [U] [ 1378.905009][T27372] [U] [ 1378.905922][T27372] [U] [ 1378.906804][T27372] [U] [ 1378.907661][T27372] [U] [ 1378.908508][T27372] [U] [ 1378.909761][T27372] [U] [ 1378.910607][T27372] [U] [ 1378.911482][T27372] [U] [ 1378.912369][T27372] [U] [ 1378.913342][T27372] [U] [ 1378.914222][T27372] [U] [ 1378.915095][T27372] [U] [ 1378.915969][T27372] [U] [ 1378.916911][T27372] [U] [ 1378.917809][T27372] [U] [ 1378.918681][T27372] [U] [ 1378.919567][T27372] [U] [ 1378.921856][T27372] [U] [ 1378.922747][T27372] [U] [ 1378.923601][T27372] [U] [ 1378.924434][T27372] [U] [ 1378.925824][T27372] [U] [ 1378.926757][T27372] [U] [ 1378.927662][T27372] [U] [ 1378.928534][T27372] [U] [ 1378.931432][T27372] [U] [ 1378.932337][T27372] [U] [ 1378.933235][T27372] [U] [ 1378.934146][T27372] [U] [ 1378.938416][T27372] [U] [ 1378.939338][T27372] [U] [ 1378.940210][T27372] [U] [ 1378.941115][T27372] [U] [ 1378.958181][T27383] tracefs: Bad value for 'uid' [ 1378.960402][T27383] tracefs: Bad value for 'uid' [ 1378.974905][ T845] usb 11-1: config 150 has an invalid interface number: 204 but max is 2 [ 1378.980708][ T845] usb 11-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1378.986754][ T845] usb 11-1: config 150 has no interface number 0 [ 1378.989641][ T845] usb 11-1: config 150 interface 204 has no altsetting 0 [ 1378.992900][ T845] usb 11-1: config 150 interface 1 has no altsetting 0 [ 1378.998819][ T845] usb 11-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1379.002661][ T845] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1379.006598][ T845] usb 11-1: Product: syz [ 1379.008478][ T845] usb 11-1: Manufacturer: syz [ 1379.010504][ T845] usb 11-1: SerialNumber: syz [ 1379.067533][T27372] [U] [ 1379.068467][T27372] [U] [ 1379.069396][T27372] [U] [ 1379.070335][T27372] [U] [ 1379.097613][T27372] [U] [ 1379.098511][T27372] [U] [ 1379.099421][T27372] [U] [ 1379.100336][T27372] [U] [ 1379.101413][T27372] [U] [ 1379.102357][T27372] [U] [ 1379.103269][T27372] [U] [ 1379.104139][T27372] [U] [ 1379.105553][T27372] [U] [ 1379.106632][T27372] [U] [ 1379.107772][T27372] [U] [ 1379.108893][T27372] [U] [ 1379.110346][T27372] [U] [ 1379.111412][T27372] [U] [ 1379.112409][T27372] [U] [ 1379.113490][T27372] [U] [ 1379.114667][T27372] [U] [ 1379.115541][T27372] [U] [ 1379.116510][T27372] [U] [ 1379.117399][T27372] [U] [ 1379.118563][T27372] [U] [ 1379.119466][T27372] [U] [ 1379.120402][T27372] [U] [ 1379.121348][T27372] [U] [ 1379.123140][T27372] [U] [ 1379.123994][T27372] [U] [ 1379.125000][T27372] [U] [ 1379.125992][T27372] [U] [ 1379.126973][T27372] [U] [ 1379.128039][T27372] [U] [ 1379.129369][T27372] [U] [ 1379.130300][T27372] [U] [ 1379.145855][T27372] [U] [ 1379.146798][T27372] [U] [ 1379.147674][T27372] [U] [ 1379.148552][T27372] [U] [ 1379.149613][T27372] [U] [ 1379.150521][T27372] [U] [ 1379.151393][T27372] [U] [ 1379.152452][T27372] [U] [ 1379.154578][T27372] [U] [ 1379.155479][T27372] [U] [ 1379.156346][T27372] [U] [ 1379.157231][T27372] [U] [ 1379.158347][T27372] [U] [ 1379.159236][T27372] [U] [ 1379.160127][T27372] [U] [ 1379.161001][T27372] [U] [ 1379.162150][T27372] [U] [ 1379.163057][T27372] [U] [ 1379.163876][T27372] [U] [ 1379.164651][T27372] [U] [ 1379.170448][T27372] [U] [ 1379.171350][T27372] [U] [ 1379.172395][T27372] [U] [ 1379.173298][T27372] [U] [ 1379.176683][T27372] [U] [ 1379.177924][T27372] [U] [ 1379.178995][T27372] [U] [ 1379.179866][T27372] [U] [ 1379.181303][T27372] [U] [ 1379.182529][T27372] [U] [ 1379.183723][T27372] [U] [ 1379.184624][T27372] [U] [ 1379.185859][T27372] [U] [ 1379.186782][T27372] [U] [ 1379.187735][T27372] [U] [ 1379.188874][T27372] [U] [ 1379.189965][T27372] [U] [ 1379.190842][T27372] [U] [ 1379.191708][T27372] [U] [ 1379.192579][T27372] [U] [ 1379.194086][T27372] [U] [ 1379.195219][T27372] [U] [ 1379.196330][T27372] [U] [ 1379.197446][T27372] [U] [ 1379.198431][T27372] [U] [ 1379.199557][T27372] [U] [ 1379.200652][T27372] [U] [ 1379.201547][T27372] [U] [ 1379.202549][T27372] [U] [ 1379.203622][T27372] [U] [ 1379.204523][T27372] [U] [ 1379.205452][T27372] [U] [ 1379.206374][T27372] [U] [ 1379.208912][T27372] [U] [ 1379.209872][T27372] [U] [ 1379.210834][T27372] [U] [ 1379.211732][T27372] [U] [ 1379.212891][T27372] [U] [ 1379.213779][T27372] [U] [ 1379.214673][T27372] [U] [ 1379.215568][T27372] [U] [ 1379.216587][T27372] [U] [ 1379.217513][T27372] [U] [ 1379.218413][T27372] [U] [ 1379.219312][T27372] [U] [ 1379.221438][T27372] [U] [ 1379.222433][T27372] [U] [ 1379.223380][T27372] [U] [ 1379.224305][T27372] [U] [ 1379.225350][T27372] [U] [ 1379.226298][T27372] [U] [ 1379.227326][T27372] [U] [ 1379.228230][T27372] [U] [ 1379.229625][T27372] [U] [ 1379.230557][T27372] [U] [ 1379.231450][T27372] [U] [ 1379.232355][T27372] [U] [ 1379.238314][T27372] [U] [ 1379.239578][T27372] [U] [ 1379.240785][T27372] [U] [ 1379.242017][T27372] [U] [ 1379.243520][T27372] [U] [ 1379.244752][T27372] [U] [ 1379.245960][T27372] [U] [ 1379.247055][T27372] [U] [ 1379.248374][T27372] [U] [ 1379.249627][T27372] [U] [ 1379.250840][T27372] [U] [ 1379.252344][T27372] [U] [ 1379.256119][T27372] [U] [ 1379.257390][T27372] [U] [ 1379.258577][T27372] [U] [ 1379.258878][ T845] xr_serial 11-1:150.204: skipping garbage [ 1379.259786][T27372] [U] [ 1379.261163][T27372] [U] [ 1379.262366][ T845] xr_serial 11-1:150.204: xr_serial converter detected [ 1379.263434][T27372] [U] [ 1379.263465][T27372] [U] [ 1379.269613][T27372] [U] [ 1379.271698][T27372] [U] [ 1379.272889][T27372] [U] [ 1379.274110][T27372] [U] [ 1379.275299][T27372] [U] [ 1379.276594][T27372] [U] [ 1379.277785][T27372] [U] [ 1379.278922][T27372] [U] [ 1379.280092][T27372] [U] [ 1379.281558][T27372] [U] [ 1379.282754][T27372] [U] [ 1379.283948][T27372] [U] [ 1379.285158][T27372] [U] [ 1379.287260][T27372] [U] [ 1379.288467][T27372] [U] [ 1379.289675][T27372] [U] [ 1379.290852][T27372] [U] [ 1379.335048][T27372] [U] [ 1379.336300][T27372] [U] [ 1379.337504][T27372] [U] [ 1379.338907][T27372] [U] [ 1379.398502][ T61] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1379.430457][T27372] [U] [ 1379.559360][ T61] usb 10-1: Using ep0 maxpacket: 8 [ 1379.562585][ T61] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 1379.565236][ T61] usb 10-1: config 0 has no interface number 0 [ 1379.567162][ T61] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1379.570807][ T61] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1379.580126][ T61] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1379.586198][ T61] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1379.594440][T27394] netlink: 'syz.4.6188': attribute type 2 has an invalid length. [ 1379.594651][ T61] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1379.605465][ T61] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1379.613381][ T61] usb 10-1: config 0 descriptor?? [ 1379.624075][ T61] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1379.998867][T27402] lo speed is unknown, defaulting to 1000 [ 1380.129667][T27406] lo speed is unknown, defaulting to 1000 [ 1380.344869][T27402] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6192'. [ 1380.431488][T27418] syzkaller0: entered promiscuous mode [ 1380.433820][T27418] syzkaller0: entered allmulticast mode [ 1381.348808][T27426] lo speed is unknown, defaulting to 1000 [ 1381.594932][ T845] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 1381.597051][ T845] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1381.606456][ T845] usb 11-1: USB disconnect, device number 17 [ 1381.612168][ T845] xr_serial 11-1:150.204: device disconnected [ 1382.202814][T27433] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6198'. [ 1382.232666][ T34] usb 10-1: USB disconnect, device number 9 [ 1382.286871][ T34] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 1382.643049][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 1384.074047][ T42] kauditd_printk_skb: 780 callbacks suppressed [ 1384.074061][ T42] audit: type=1326 audit(1784731385.292:5202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27477 comm="syz.2.6208" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1384.108839][ T42] audit: type=1326 audit(1784731385.301:5203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27477 comm="syz.2.6208" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1384.133926][ T42] audit: type=1326 audit(1784731385.301:5204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27477 comm="syz.2.6208" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1384.153565][ T42] audit: type=1326 audit(1784731385.301:5205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27477 comm="syz.2.6208" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1384.165452][ T42] audit: type=1326 audit(1784731385.310:5206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27477 comm="syz.2.6208" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1384.175508][ T42] audit: type=1326 audit(1784731385.310:5207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27477 comm="syz.2.6208" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1384.186402][ T42] audit: type=1326 audit(1784731385.310:5208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27477 comm="syz.2.6208" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1384.196518][ T42] audit: type=1326 audit(1784731385.310:5209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27477 comm="syz.2.6208" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1384.217415][ T42] audit: type=1326 audit(1784731385.310:5210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27477 comm="syz.2.6208" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1384.225170][ T42] audit: type=1326 audit(1784731385.310:5211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27477 comm="syz.2.6208" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1384.780529][T27487] lo speed is unknown, defaulting to 1000 [ 1385.496157][T27487] ------------[ cut here ]------------ [ 1385.498191][T27487] inode->i_blocks [ 1385.498204][T27487] WARNING: mm/shmem.c:1431 at shmem_evict_inode+0x8ed/0xbe0, CPU#0: syz.5.6212/27487 [ 1385.503417][T27487] Modules linked in: [ 1385.504998][T27487] CPU: 0 UID: 0 PID: 27487 Comm: syz.5.6212 Tainted: G L syzkaller #0 PREEMPT(full) [ 1385.509346][T27487] Tainted: [L]=SOFTLOCKUP [ 1385.511177][T27487] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1385.515105][T27487] RIP: 0010:shmem_evict_inode+0x8ed/0xbe0 [ 1385.517296][T27487] Code: fe e8 57 43 b5 ff 45 85 ff 75 ac e8 dd 48 b5 ff 48 8b 74 24 28 48 8b 7c 24 30 e8 ae 3d 8d ff e9 e5 fd ff ff e8 c4 48 b5 ff 90 <0f> 0b 90 e9 59 f9 ff ff e8 b6 48 b5 ff 4c 89 e2 48 b8 00 00 00 00 [ 1385.525011][T27487] RSP: 0018:ffffc90004627800 EFLAGS: 00010246 [ 1385.527500][T27487] RAX: 0000000000080000 RBX: ffff8880247755b8 RCX: ffffc90028082000 [ 1385.530434][T27487] RDX: 0000000000080000 RSI: ffffffff8253dffc RDI: ffff888029468000 [ 1385.533419][T27487] RBP: ffffc90004627928 R08: 0000000000000007 R09: 0000000000000000 [ 1385.536406][T27487] R10: 0000000000000008 R11: 0000000000000000 R12: 0000000000000008 [ 1385.539362][T27487] R13: 0000000000000000 R14: ffffed10048eeab3 R15: ffff88801de8b000 [ 1385.542216][T27487] FS: 0000000000000000(0000) GS:ffff888096bf1000(0063) knlGS:00000000f543db40 [ 1385.545279][T27487] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1385.547359][T27487] CR2: 00000000f724e817 CR3: 0000000062859000 CR4: 0000000000352ef0 [ 1385.549929][T27487] Call Trace: [ 1385.551056][T27487] [ 1385.552072][T27487] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1385.554230][T27487] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 1385.556416][T27487] ? find_held_lock+0x2b/0x80 [ 1385.558110][T27487] ? evict+0x37e/0xad0 [ 1385.559819][T27487] ? evict+0x37e/0xad0 [ 1385.561472][T27487] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1385.563629][T27487] evict+0x3c2/0xad0 [ 1385.565178][T27487] ? __pfx_evict+0x10/0x10 [ 1385.567232][T27487] ? iput.part.0+0x981/0x1050 [ 1385.569101][T27487] iput.part.0+0x989/0x1050 [ 1385.570912][T27487] iput+0x35/0x40 [ 1385.572340][T27487] dentry_unlink_inode+0x284/0x470 [ 1385.574375][T27487] dentry_kill+0x25d/0xc20 [ 1385.575978][T27487] dput.part.0+0xd7/0x240 [ 1385.577651][T27487] dput+0x1f/0x30 [ 1385.578972][T27487] __fput+0x519/0xb50 [ 1385.580499][T27487] ? _raw_spin_unlock_irq+0x23/0x50 [ 1385.582487][T27487] task_work_run+0x150/0x240 [ 1385.584102][T27487] ? __pfx_task_work_run+0x10/0x10 [ 1385.586213][T27487] ? userfaultfd_unmap_complete+0x267/0x380 [ 1385.588364][T27487] ? do_mmap+0x93f/0x12f0 [ 1385.589933][T27487] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 1385.591955][T27487] get_signal+0x1bd/0x21e0 [ 1385.593559][T27487] ? up_write+0x2e5/0x5c0 [ 1385.595030][T27487] ? __pfx_get_signal+0x10/0x10 [ 1385.597083][T27487] arch_do_signal_or_restart+0x91/0x7a0 [ 1385.599347][T27487] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1385.601643][T27487] exit_to_user_mode_loop+0x139/0x6f0 [ 1385.603522][T27487] ? rcu_is_watching+0x12/0xc0 [ 1385.605359][T27487] __do_fast_syscall_32+0x701/0x970 [ 1385.607366][T27487] ? lockdep_hardirqs_on+0x78/0x100 [ 1385.609353][T27487] do_fast_syscall_32+0x32/0x70 [ 1385.611188][T27487] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1385.613582][T27487] RIP: 0023:0xf704efec [ 1385.615158][T27487] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1385.622599][T27487] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000c0 [ 1385.625816][T27487] RAX: 0000000080000000 RBX: 0000000080000000 RCX: 0000000000b36000 [ 1385.629240][T27487] RDX: 0000000001000007 RSI: 0000000000038011 RDI: 0000000000000009 [ 1385.632567][T27487] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1385.635610][T27487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1385.638772][T27487] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1385.641837][T27487] [ 1385.643055][T27487] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1385.645812][T27487] CPU: 0 UID: 0 PID: 27487 Comm: syz.5.6212 Tainted: G L syzkaller #0 PREEMPT(full) [ 1385.649909][T27487] Tainted: [L]=SOFTLOCKUP [ 1385.651477][T27487] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1385.655144][T27487] Call Trace: [ 1385.656416][T27487] [ 1385.657574][T27487] dump_stack_lvl+0x100/0x190 [ 1385.659387][T27487] vpanic+0x552/0x970 [ 1385.660811][T27487] ? __pfx_vpanic+0x10/0x10 [ 1385.662348][T27487] panic+0xd1/0xe0 [ 1385.663629][T27487] ? __pfx_panic+0x10/0x10 [ 1385.665128][T27487] check_panic_on_warn.cold+0x19/0x34 [ 1385.666823][T27487] ? shmem_evict_inode+0x8ed/0xbe0 [ 1385.668479][T27487] __warn.cold+0x191/0x318 [ 1385.669924][T27487] __report_bug+0x30f/0x440 [ 1385.671452][T27487] ? shmem_evict_inode+0x8ed/0xbe0 [ 1385.673078][T27487] ? __pfx___report_bug+0x10/0x10 [ 1385.674727][T27487] ? find_held_lock+0x2b/0x80 [ 1385.676297][T27487] ? inode_set_ctime_current+0x9c/0x850 [ 1385.678144][T27487] ? __lock_acquire+0x49f/0x1a40 [ 1385.679791][T27487] ? shmem_evict_inode+0x8ed/0xbe0 [ 1385.681508][T27487] report_bug+0xb2/0x220 [ 1385.682929][T27487] ? shmem_evict_inode+0x8ed/0xbe0 [ 1385.684639][T27487] handle_bug+0x16a/0x2a0 [ 1385.686102][T27487] exc_invalid_op+0x17/0x50 [ 1385.687590][T27487] asm_exc_invalid_op+0x1a/0x20 [ 1385.689110][T27487] RIP: 0010:shmem_evict_inode+0x8ed/0xbe0 [ 1385.690859][T27487] Code: fe e8 57 43 b5 ff 45 85 ff 75 ac e8 dd 48 b5 ff 48 8b 74 24 28 48 8b 7c 24 30 e8 ae 3d 8d ff e9 e5 fd ff ff e8 c4 48 b5 ff 90 <0f> 0b 90 e9 59 f9 ff ff e8 b6 48 b5 ff 4c 89 e2 48 b8 00 00 00 00 [ 1385.697087][T27487] RSP: 0018:ffffc90004627800 EFLAGS: 00010246 [ 1385.699180][T27487] RAX: 0000000000080000 RBX: ffff8880247755b8 RCX: ffffc90028082000 [ 1385.701818][T27487] RDX: 0000000000080000 RSI: ffffffff8253dffc RDI: ffff888029468000 [ 1385.704552][T27487] RBP: ffffc90004627928 R08: 0000000000000007 R09: 0000000000000000 [ 1385.707138][T27487] R10: 0000000000000008 R11: 0000000000000000 R12: 0000000000000008 [ 1385.709602][T27487] R13: 0000000000000000 R14: ffffed10048eeab3 R15: ffff88801de8b000 [ 1385.712163][T27487] ? shmem_evict_inode+0x8ec/0xbe0 [ 1385.713974][T27487] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1385.715799][T27487] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 1385.717851][T27487] ? find_held_lock+0x2b/0x80 [ 1385.719435][T27487] ? evict+0x37e/0xad0 [ 1385.720808][T27487] ? evict+0x37e/0xad0 [ 1385.722207][T27487] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1385.724012][T27487] evict+0x3c2/0xad0 [ 1385.725293][T27487] ? __pfx_evict+0x10/0x10 [ 1385.726775][T27487] ? iput.part.0+0x981/0x1050 [ 1385.728357][T27487] iput.part.0+0x989/0x1050 [ 1385.729812][T27487] iput+0x35/0x40 [ 1385.730965][T27487] dentry_unlink_inode+0x284/0x470 [ 1385.732662][T27487] dentry_kill+0x25d/0xc20 [ 1385.734203][T27487] dput.part.0+0xd7/0x240 [ 1385.735666][T27487] dput+0x1f/0x30 [ 1385.736924][T27487] __fput+0x519/0xb50 [ 1385.738345][T27487] ? _raw_spin_unlock_irq+0x23/0x50 [ 1385.740045][T27487] task_work_run+0x150/0x240 [ 1385.741682][T27487] ? __pfx_task_work_run+0x10/0x10 [ 1385.743400][T27487] ? userfaultfd_unmap_complete+0x267/0x380 [ 1385.745420][T27487] ? do_mmap+0x93f/0x12f0 [ 1385.746893][T27487] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 1385.748934][T27487] get_signal+0x1bd/0x21e0 [ 1385.750450][T27487] ? up_write+0x2e5/0x5c0 [ 1385.751867][T27487] ? __pfx_get_signal+0x10/0x10 [ 1385.753489][T27487] arch_do_signal_or_restart+0x91/0x7a0 [ 1385.755297][T27487] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1385.757380][T27487] exit_to_user_mode_loop+0x139/0x6f0 [ 1385.759176][T27487] ? rcu_is_watching+0x12/0xc0 [ 1385.760784][T27487] __do_fast_syscall_32+0x701/0x970 [ 1385.762523][T27487] ? lockdep_hardirqs_on+0x78/0x100 [ 1385.764271][T27487] do_fast_syscall_32+0x32/0x70 [ 1385.765903][T27487] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1385.767988][T27487] RIP: 0023:0xf704efec [ 1385.769337][T27487] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1385.775538][T27487] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000c0 [ 1385.778308][T27487] RAX: 0000000080000000 RBX: 0000000080000000 RCX: 0000000000b36000 [ 1385.780730][T27487] RDX: 0000000001000007 RSI: 0000000000038011 RDI: 0000000000000009 [ 1385.783323][T27487] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1385.785938][T27487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1385.788556][T27487] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1385.791132][T27487] [ 1385.792891][T27487] Kernel Offset: disabled [ 1385.794154][T27487] Rebooting in 86400 seconds..