last executing test programs: 5.870443611s ago: executing program 3 (id=10): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mlock2(&(0x7f0000bae000/0x2000)=nil, 0x2000, 0x1) mount(&(0x7f0000000000)=@filename='mtd0/file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) getgroups(0x3, &(0x7f0000000180)=[0xffffffffffffffff, 0xee01, 0x0]) lchown(&(0x7f00000000c0)='./file0\x00', 0x0, r1) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0xa0181) writev(r2, &(0x7f0000002e00)=[{&(0x7f0000000a40)="fdcb", 0x2}, {0x0}], 0x2) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x0, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r3, r4, 0x5, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x40}}, 0x30) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) 5.780244271s ago: executing program 3 (id=16): syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x130, 0x0, 0x2, {0x0, 0x3, 0x0, '\x00', {0x7ff, 0x4, 0xadf, 0x13, 0x0, 0xffffffffffffffff, 0xc000, '\x00', 0x4, 0x7, 0x0, 0x3, {0x1, 0x9}, {0x4000000000006, 0xfffffffa}, {0x2000001, 0xb}, {0x4, 0xa00}, 0x1, 0x6, 0x1, 0x7}}}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x106, 0x2}}, 0x20) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a000a0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0xa}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 5.521238745s ago: executing program 3 (id=18): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x5078, 0xc00, 0x2, 0x0, 0x0, 0x0}, &(0x7f0000000040), &(0x7f00000002c0), &(0x7f0000000100)) socket$rds(0x15, 0x5, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000400)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x0, 0x2}, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a030000000007000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x566, 0x3004, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x15, 0x87}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0xfb, 0x2, 0x5}}]}}}]}}]}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3fffc, 0x180, 0x2, 0x0, 0xf1, 0x0, 0x7fffffffffffe, 0x3, 0x4003, 0x8, 0x0, 0x45, 0xfffffffffffffffd, 0x7], 0x200000, 0x1c6017}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.161441567s ago: executing program 3 (id=36): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x40025b0c, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x140, 0x30, 0x9, 0x0, 0x25dfdbfb, {}, [{0x12c, 0x1, [@m_gact={0x128, 0x14, 0x0, 0x0, {{0x9}, {0x88, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6a0, 0x3, 0x10000000, 0x3, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x29b, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8000, 0x57c, 0xffffffffffffffff, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0xe2, 0x3a6c9a2a, 0x7, 0x40, 0xdb9a}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x8, 0x2, 0x401, 0xa}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1ac9, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1823, 0x7}}]}, {0x77, 0x6, "eef6564941bacd11d50a2cf8bbe02fb8db7da7460f83a029e65345c94c0257d984b474eb7af2bb91d89bb7d7c6b3136afe174d77cfa7c461850aa553e91761a7d451fd7fb8cfc414d5610313def86cf64f2b6a23a9d0a69e3954ebc8ea747b9b0d57a310e796dad1eba814161adbfc31d864ca"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.82965365s ago: executing program 3 (id=51): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000004100)={0x2020}, 0x2020) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@local, 0x2}, @hyper, 0x0, 0xd4d, 0x5e}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9, 0x269}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000980)=0x7e) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write(r3, &(0x7f0000000000)="300000001c00010401000000000000002d000000010000008000000105000100580000000a0002000000000000000000300000001c00010401000000000000002d000000010000008000000105000100590000000a0002000000000000000000300000001c00010401000000000000002d000000010000008000000105000100", 0x80) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xef) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) 2.73961841s ago: executing program 3 (id=54): openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) capset(&(0x7f00000001c0)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x5}) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=@base={0xa, 0x15, 0x363d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000180), 0x3, r0}, 0x38) (async, rerun: 32) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (rerun: 32) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040)=0x4, 0x4) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) (async, rerun: 64) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (rerun: 64) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x200000000009, 0x0, 0xfffffffffffffffe, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000003, 0xc591, 0xfda, 0xfffffffffffffffe, 0xffffffffffffffff, 0x3, 0xb3, 0x48d], 0xeeee8000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r3, 0xae80, 0x0) (rerun: 32) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r0, &(0x7f0000001940), &(0x7f00000002c0)=""/187}, 0x20) (async, rerun: 32) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) (rerun: 32) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRESOCT=r4, @ANYRESOCT=0x0], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.320454752s ago: executing program 2 (id=63): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) (async) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00"], 0xc) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) (async) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x30, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000041000701feffffff00800000017c0000040042801c00018010000400cab1893a20b8d2a93521800a0800188004006d80040002"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000140)={0x801, r2}, 0x0) (async) landlock_restrict_self(r0, 0x0) (async) r3 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x30, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x200000, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f00000002c0)={0x20, r4}, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r5, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfe, 0x20, 0x7fff7ffc}]}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0/file0/file0\x00'}) (async) close_range(r6, 0xffffffffffffffff, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x9) 2.260976014s ago: executing program 2 (id=64): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b04000000000000000002006a000900020073797a32000000000900010073797a3000000000240004802000018007000100637400001400028008000140000000170800024000000002050007401400000014000000110001"], 0x80}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000070a01040000000000000000020000000c00034000000002000000020900020073797a32000000000900010073797a30"], 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x20000014) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fdb000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000001c0)="d8df7e23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b9500200000f01c8b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0x60}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fdf000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x1b, 0x0, 0x0) r8 = semget(0x0, 0x4, 0x10) semctl$IPC_STAT(r8, 0x0, 0x2, &(0x7f0000000340)=""/131) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r10 = eventfd2(0x5a, 0x800) ioctl$VHOST_SET_VRING_CALL(r9, 0x4008af21, &(0x7f0000000140)={0x3, r10}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000280)={[0x2000000000000001, 0xb, 0x486, 0xfc, 0xb6e, 0xa7, 0x5, 0xc, 0xf, 0xffffbfff, 0x2, 0x9, 0x800, 0x20000000000f9, 0x1000, 0x4000400000000], 0x8080000, 0x44005}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1.739858236s ago: executing program 2 (id=73): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') mmap(&(0x7f0000c58000/0x3000)=nil, 0x3000, 0x2000008, 0x1a910, r0, 0xb818c000) r1 = open_tree(r0, &(0x7f0000000300)='mnt\x00', 0x88101) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x89101) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffb000/0x2000)=nil) munmap(&(0x7f0000004000/0x3000)=nil, 0x3000) move_mount(r1, 0x0, r2, 0x0, 0x46) syz_usb_connect(0x5, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904000006ff000000070581"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./my_debugfs\x00', 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x10, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) mount(0x0, &(0x7f0000000200)='./my_debugfs\x00', &(0x7f00000002c0)='ceph\x00', 0x80000c, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_debugfs/usb/devices\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000021c0)={0x2020}, 0x2020) symlinkat(&(0x7f0000000100)='./my_debugfs/file0\x00', r0, &(0x7f0000000180)='mnt\x00') bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="b4080000000000406910280000000000de080000000000009500000000000000908ba6f7b7ec622138e4f5e6b517b0eb2b2e368f26d9215ce732bf1c5e9273150ecf4df793e1a70586c1c3b67cfb99a59472e14215bed3c2542a79"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) 1.250675417s ago: executing program 0 (id=80): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_int(r0, 0x1, 0x8, 0x0, &(0x7f0000000280)) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x6) read$char_usb(r1, &(0x7f0000000000)=""/136, 0x88) socket$inet(0x2, 0x4000000000000001, 0x0) (async) getsockopt$sock_int(r0, 0x1, 0x8, 0x0, &(0x7f0000000280)) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x6) (async) read$char_usb(r1, &(0x7f0000000000)=""/136, 0x88) (async) 1.247999199s ago: executing program 0 (id=81): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff15, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff15, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={@private2, @mcast2, @rand_addr=' \x01\x00', 0x4, 0x3, 0xb, 0x0, 0x9bd, 0x100}) 1.181090166s ago: executing program 0 (id=82): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80803, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfd000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x48d, 0x0, 0xffffffff}]}) (async) ioctl$KVM_GET_XSAVE(r3, 0x9000aea4, &(0x7f0000000580)) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000021000/0x18000)=nil, 0x0, 0x0, 0xe8, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_newneigh={0x24, 0x1c, 0x1, 0x70bd28, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x0, 0x60, 0x4}, [@NDA_DST_IPV4={0x8, 0x1, @empty}]}, 0x24}}, 0x8004) (async) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x4e20, @broadcast}}}, 0x88) (async) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6410, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r11 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) (async) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r11, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r12, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x200, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, r13, 0x3, 0x71061}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}]}, 0x3c}}, 0x24008044) (async) fsetxattr$security_ima(r4, &(0x7f0000000180), &(0x7f00000001c0)=@v1={0x2, "de1bd707575e75bedb"}, 0xa, 0x0) (async) ioctl$KVM_GET_SREGS2(r7, 0x8140aecc, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="c40000001000010400000000ffdbdf85621ff6af", @ANYRES32=0x0, @ANYBLOB="4b190300401000001c0012800b0001006d616373656300000c00028005000d0002000000880016806000018014000a00000002000000000002000000000000002800010008000000ffffffffffff00000000000000000000000000000000000000000000000000000c000700090000007f00000014000a00030000000000000000800000000000002400018025b60b00a70000000000000006000000000000000c0007000080000005000000"], 0xc4}, 0x1, 0x0, 0x0, 0x404d818}, 0x0) 899.076842ms ago: executing program 0 (id=85): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x80) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) (async) setitimer(0x2, 0x0, 0x0) (async) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000070605000000000000000000010000020500010097"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x21) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x4091) r2 = syz_io_uring_setup(0x3d1a, &(0x7f0000000480)={0x0, 0x46df, 0x800, 0x1, 0x802eb, 0x0, r1}, &(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000000)) io_uring_enter(r2, 0x0, 0x42c9, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, &(0x7f0000000040)=[0x80], 0x2) (async) io_uring_enter(r2, 0x47fa, 0x0, 0x0, 0x0, 0x0) (async) recvmsg(r0, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) 580.795718ms ago: executing program 2 (id=89): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0xa1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000001c0)=0x10, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001500010026bd7000fedbdf250aa920c8", @ANYRES32=0x0, @ANYBLOB="140001b6524cd300fe805c00000000000000000072b3ba5ddce755180aac36295bea8b8b54953d55fb9234fae2210f22a2da717d8f338d3554ba4ec9a3ad09823ef9edd647361829191e89c71745031e75941c1c757518433b005a540000333e3adebd218afe05c81085a9316775e32f1ee79f4f3f97295b79d0a2de233566090dfcb92b04e27983b6fe2f97625941c57479301e05bbe7bea7256f3b4c6ecf4754f5d89be200c39ee95812f5135b3e4d45eb4e0eeecffdec17702d3fe8c6cdfd5cbcbfd34c5fc0e21b67b67ad1dcf119da3a680d4feba6b6c058adddf460e20db929df14c098e4c960f86981c84354ac5fd89dfa93a025e139795d1dc052cc190f60f945a1743cde6ac4f77f0f390b8677a12aff2f4f48af163f29ce10d308b6884e1a1b5705103420b316a9eeb17054daaa3e8416e9a093c7ab8bda29021dbf9292be77f903604e50e200"/346], 0x2c}, 0x1, 0x0, 0x0, 0x80d5}, 0x10) 491.283622ms ago: executing program 2 (id=90): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x4, 0x4, 0x8}, 0x50) 490.184186ms ago: executing program 2 (id=91): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$swradio(&(0x7f0000000100), 0x0, 0x2) pread64(r1, &(0x7f0000000000)=""/38, 0x26, 0x4) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000240)=@multiplanar_userptr={0x5, 0xb, 0x4, 0x0, 0x8001, {0x77359400}, {0x1, 0xc, 0x5, 0x2, 0x63, 0xd, "934be2d4"}, 0xffffffff, 0x2, {0x0}, 0x2}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0xe000202b}) epoll_pwait(r4, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r5 = dup3(r2, r4, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000300)={0x200f}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_G_AUDOUT(r1, 0x80345631, &(0x7f0000000040)) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'ip6tnl0\x00', 0x0, 0x2f, 0x8, 0xde, 0x1, 0x4, @dev={0xfe, 0x80, '\x00', 0x3a}, @private2, 0x8000, 0x8000, 0x1, 0xb8}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0xd, &(0x7f00000003c0)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3dbe9f45bfdbd4be}}], &(0x7f0000000440)='syzkaller\x00', 0x7fff, 0x0, 0x0, 0x40f00, 0x1, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0x10, 0x10, 0x1}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000005c0)=[r5, r5], &(0x7f0000000600)=[{0x5, 0x4, 0xb}, {0x4, 0x2, 0xd, 0x3}, {0x3, 0x3, 0xd, 0xa}, {0x4, 0x5, 0xd}], 0x10, 0xfffffc00}, 0x94) sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="349f4d00", @ANYRES16=r8, @ANYBLOB="01002bbd7000fedbdf252100000009001f0070687931000000000c00050000030000000000000500200000000000"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x10) 201.448693ms ago: executing program 1 (id=96): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00') preadv(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) (async) writev(r2, &(0x7f00000003c0), 0x100000000000022d) (async) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) write(r1, &(0x7f00000002c0)='-', 0x1) (async) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_emit_ethernet(0x4a, &(0x7f0000000880)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "05e000", 0x14, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x4}}}}}}}, 0x0) 200.313102ms ago: executing program 1 (id=97): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="480000001000010027bd7000fbd9dfa500000000", @ANYRES32, @ANYBLOB="104e0600d5ba2259280012800900010076657468000000001800028014000100000000000206e9b43d"], 0x7c}, 0x1, 0x0, 0x0, 0x404c000}, 0x2) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendto$x25(r1, &(0x7f0000000000)="31eae092266bc6d1182dbc", 0xb, 0x8040000, &(0x7f0000000080), 0x12) 140.401337ms ago: executing program 1 (id=98): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e24, @private=0xa010102}, @in6={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x41}, 0x7}, @in={0x2, 0x4e21, @local}], 0x4c) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r1, &(0x7f0000000080)={0x27, 0x0, 0xffffffffffffffff, 0x2}, 0x10) readv(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/247, 0xf7}, {&(0x7f00000001c0)=""/69, 0x45}], 0x2) r2 = accept4$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000002c0)=0x1c, 0x80800) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000300), &(0x7f0000000340)=0x4) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f00000004c0)={@phonet={0x23, 0x5, 0x4, 0x8}, {&(0x7f0000000380)=""/218, 0xda}, &(0x7f0000000480), 0x2}, 0xa0) ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x40046f01, &(0x7f0000000580)=0x101) ioctl$VHOST_VDPA_SET_VRING_ENABLE(0xffffffffffffffff, 0x4008af75, &(0x7f00000005c0)={0x0, 0x10}) r4 = syz_open_dev$sndpcmp(&(0x7f0000000600), 0x9, 0xe0501) lseek(r3, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r4, 0x80184151, &(0x7f0000000740)={0x0, &(0x7f0000000640)="29a4cca5b1f320bea8bbb5293ade7c1ee837add9622aca44c23bec5f0a381a6fc7be8747738cb3d81f361d4d8c5efde5cdc755aadc92a23dfa7f7eb9db071c6149f82a11a75cc8fca278986795c22b9b54d3d726c01923f9da09c54144fe878d768f14bef5da824e1b5a349e1dae54f6ad7daffecfab3d1fd0023081ec46e639e9cca29003fc42e22a950317f846e76212f33a08f3291c824933427813a1f86477c36f1c4c03b28998f30f609d6c8ac6238da2fa91acb22f542fe3ab63312ae86e2848e5db8b23ea08d1ede98001bdc187496838a1d806", 0xd7}) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000780)={0x1f, @none, 0x1}, 0xa) r5 = syz_open_dev$mtd(&(0x7f00000007c0), 0x100000001, 0x200000) ioctl$OTPLOCK(r5, 0x800c4d10, &(0x7f0000000800)={0x5, 0x1ff, 0x3}) r6 = socket$rxrpc(0x21, 0x2, 0x14) setsockopt$RXRPC_SECURITY_KEY(r6, 0x110, 0x1, &(0x7f0000000840)='/dev/snd/pcmC#D#p\x00', 0x12) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x3ff, 0x9, 0x100}, 0x0) r7 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f00000008c0), &(0x7f0000000900)=0x4) r8 = openat$cgroup_ro(r7, &(0x7f0000000940)='memory.stat\x00', 0x0, 0x0) ioctl$VIDIOC_DQEVENT(r8, 0x80885659, &(0x7f0000000980)={0x0, @motion_det}) ioctl$VIDIOC_ENUMSTD(r8, 0xc0485619, &(0x7f0000000a40)={0x0, 0x8f75b22fbdda9b5c, "8e21d06f6d296170039d66642781164e761690abdb58894f", {0x0, 0x7}, 0x6}) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000ec0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f80)={'syztnl1\x00', &(0x7f0000000f00)={'ip6_vti0\x00', 0x0, 0x29, 0x80, 0x3, 0x2, 0xb, @ipv4={'\x00', '\xff\xff', @broadcast}, @empty, 0x8, 0x80, 0x2, 0xff}}) sendmsg$inet6(r9, &(0x7f0000001200)={&(0x7f0000000ac0)={0xa, 0x4e20, 0x200, @empty, 0x2}, 0x1c, &(0x7f0000000e40)=[{&(0x7f0000000b00)="b3852656971f647281c1585202104990bc37360f8ae1250266010b99d76aaa4b137ed8bc31147761764eb60b9179d430ee042814117d79ac241d4c40cb4916d2f28c194f10a98a2926cd4136bcfd1832674e05d441cb59ac6b57d8abbd520a3b80a589eb0bdab87c4ee10db1b1e251094f07f180e8502ad360c9367bcb", 0x7d}, {&(0x7f0000000b80)="aa599a11d095c08d7b59fe32a728990117e1433985003158e41c5d2807fc4080c9ebc30a2f55131059bed242f64045b67d222802beea5ab1ea33d79f71717f96e6a004b0e42e6203e4be1ff89b02442f6a4423943faaaa04c76f312ade2cc0304af19e88157c427b76db1b22604b233e54cf683ea608366820cc020e151464567a3abdb32d08e65ed007da4db5ef8ddf0779a9b3f891b11124b0158835ae737bbba4a55e586fbcb0255009", 0xab}, {&(0x7f0000000c40)="eaac09d40522246ab5506828ef2b9d03371e2d7bbf4bdc5446aa1039b9bfa05247aad587f4d15fa6d54c9df46dfed0767f3b203171c7de6d4c5d13aa3993f6c8984007eba79f285575ea6c4f9db177de778951ec7066b17464524b25d506593b5a803be93de3caa39539918c670faee9f2197d4d1220008f7f7b54cc0b1b549dc40fe1102af911b883367650ba8a5921132ebfc75d9fcb6780de252b135c34e401696939e952fde5f6e3e2e048fa053e1c41a5dc7479e905ec896770f9748f57d9", 0xc1}, {&(0x7f0000000d40)="f6e3f4ca0e05ab3f39f4d2549eaa1283b62dd83ed07064b6783248ad7477e59b0a2c21566a56626e6e3f743606dc551e0a558e511b01714c5ec05b1f122c317617919dd7a3b5a1b2ae3d077e2e570254400564626fff0842fa8c7b53", 0x5c}, {&(0x7f0000000dc0)="1d39abe43872c4ec6adf47af12cffb30fbde8bf1c319560df6466f0e1a063b725741fba9046fb35e1e4411fda114abbedfa7d9b3a0b6eb39235b2f2a4b0f658d790182e42a2189709865a04f700e4d0d54384d8c55ccbb06d2c2230cc61c5968822253", 0x63}], 0x5, &(0x7f0000001080)=[@tclass={{0x14, 0x29, 0x43, 0x4}}, @tclass={{0x14, 0x29, 0x43, 0x9}}, @pktinfo={{0x24, 0x29, 0x32, {@private0={0xfc, 0x0, '\x00', 0x1}, r10}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x1, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x81}, @padn={0x1, 0x1, [0x0]}]}}}, @rthdrdstopts={{0x78, 0x29, 0x37, {0x6, 0xb, '\x00', [@calipso={0x7, 0x50, {0x3, 0x12, 0x3, 0x8, [0x9, 0x3, 0x6, 0x40, 0x9, 0x81, 0x0, 0x5, 0x40]}}, @ra={0x5, 0x2, 0x4}, @enc_lim={0x4, 0x1, 0x8e}, @jumbo={0xc2, 0x4, 0x7}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2, r11}}}, @hopopts={{0x20, 0x29, 0x36, {0x88, 0x1, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@local}}}], 0x160}, 0x8000) 61.088035ms ago: executing program 1 (id=99): ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x8, 0xfff, 0x887a, 0x4000, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000040)) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x37, 0x0, @val=@netfilter={0x0, 0x1, 0xa143, 0x1}}, 0x20) ioctl$OCFS2_IOC_RESVSP64(r1, 0x4030582a, &(0x7f00000000c0)={0x0, 0x2, 0x9, 0x9, 0x80000001, 0x7}) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x90100, 0x8) faccessat(r2, &(0x7f0000000140)='./file0\x00', 0x1) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x301000, 0x0) ioctl$TCSETAW(r3, 0x5407, &(0x7f00000001c0)={0x3, 0x8, 0xce, 0x8, 0xe, "93061ea48d7ba0a4"}) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x4) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000240)={"cbb525f1fdb881aced480e2a4d092648", 0x0, 0x0, {0x7fffffffffffffff, 0x266}, {0x7, 0x1}, 0x3, [0x1, 0x5, 0x2, 0xc67, 0xac8, 0x2, 0xff, 0x1, 0x7fff, 0x9, 0x8, 0x297, 0xa290, 0x800, 0x100, 0x80000001]}) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000340)=r4) r5 = fspick(r3, &(0x7f0000000380)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f00000003c0)='\\)(@\x00', &(0x7f0000000400)='./file0\x00', r2) ioctl$CDROM_SET_OPTIONS(0xffffffffffffffff, 0x5320, 0x2) mknod(&(0x7f0000000440)='./file0/file0\x00', 0x800, 0x85a) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000480)={"3a388c1e04b6fb34cfc19600b62b6e22", r4, r4, {0x0, 0x68f}, {0x81, 0x9}, 0x3, [0x9, 0xfffffffffffffa89, 0x1, 0x6, 0x1000, 0x3ff, 0x1, 0x3, 0x3, 0x6, 0x8, 0x2, 0x7, 0x80000000, 0x5, 0x6d]}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETINFO(r6, 0xffffffff80000600, r7, &(0x7f0000000680)={0xd, 0x16bf, 0x0, 0x7}) r9 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSTI(r9, 0x5412, &(0x7f00000006c0)=0x3) file_setattr(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x808, 0x9, 0x800, 0x7, 0xfffffff5}, 0x18, 0x100) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000880)={@map, 0x26, 0x1, 0x401, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0]}, 0x40) getdents64(r2, &(0x7f00000008c0)=""/230, 0xe6) lstat(&(0x7f0000000a40)='./file0/file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000b00)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000c00)=0xe8) setxattr$system_posix_acl(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{0x2, 0x7, r7}, {0x2, 0x2, r10}, {0x2, 0x0, r7}, {0x2, 0x1, r11}, {0x2, 0x5, r7}, {0x2, 0x2, 0xee01}], {0x4, 0x4}, [{0x8, 0x5, r8}, {0x8, 0x4, r8}, {0x8, 0x1, r8}], {0x10, 0x2}, {0x20, 0x3}}, 0x6c, 0x2) r12 = syz_ublk_setup_io_uring(0x218f, &(0x7f0000000cc0)={0x0, 0x1233, 0x200, 0x0, 0x324}, &(0x7f0000000d40), &(0x7f0000000d80), &(0x7f0000000dc0)) io_uring_register$IORING_REGISTER_PERSONALITY(r12, 0x9, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x0, 0x8, 0x8010, 0xffffffffffffffff, 0x0) 60.295169ms ago: executing program 0 (id=100): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001100010027bd7000ffdbdf2500000000", @ANYRES32=r0, @ANYRESOCT], 0x34}}, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x100, 0x402000) 890.748µs ago: executing program 1 (id=101): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) setxattr$system_posix_acl(&(0x7f0000000080)='./file0/file1\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000500)={{}, {}, [], {0x4, 0x1}, [], {0x10, 0x2}, {0x20, 0x3}}, 0x24, 0x3) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000700)={&(0x7f0000000240), 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x34, 0x6, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x4040) 510.904µs ago: executing program 0 (id=102): r0 = fanotify_init(0x10, 0x8000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x455, 0x8001001, r1, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) mq_open(&(0x7f0000000140)='!sel\x00ZKs\xc6\a\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00\"$\x1f#\xf5f\x93\xd4\xb1>\a\x1bMpGr\xeaz\x86\'\xcd\x9f\'o\xe9\xe2\x9a\x12?#G}]\x9b\xefy\xc5(\x95v\xbc\x8e\xc9a\xad\xc4\xd4\t\xa63x\x861\xc4\x1a\xe8\xbc\x12\xd5.\x98\xfd\xdc\xee\xe7\xb1\x83\x91\xa7\xc8hsL\x1c\xaa\xc1\xdf|\x0ex\xa9fC\xf4\xd9T\xbcf\xa8\xc6\xb2\x15\x85\x17w\xa9\xf5\x9c\x1d\x8ae\n\x80\xb1\xa1K\xcf\x9d\x17\xe9\x93\xcf\xce\x84U\fvw\xec\xb5o\\^@\x11@\x1eH\xc8\xda\xf1\xad\xd3\xe6_\xea\xbe \x01E\xbdPt\x82\xdb\xb8\xa7IO)X+\x9f@+\x14\x0f\x90\x7fC6\xc7\xdc\xeb/\xde\xea\xaf\xc9>\t\'\xf0\xd8\xde*\x958\xfe\xa2\xa4\xd3A^\xf5\xfe%~w\xf2\xe4.k\x89\xc7\x92\xb2J\xe8\xdc\xb3*\x17L\xc21e\x8e\x19i\xceV\xdd\xc0\xab\xf8\xf26\x14F\t\xc02\x00\xcc\xb4\n\x1e\xd3\x9e\x8e\x88\xc0p|/8\xed2\xd0n\x8e\x7f\xac!x\x8e\a\x11\xeds\x1c\x8aVF\x9b\xaf8\xe7\xae)\x8c\xb4:e\x93\xb6\xee\xce\x00\x00', 0x6e93ebbbcc088cf2, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffd, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x2, 0xffffffeffffffff8, 0x9, 0x8], 0x25000, 0x304}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x48}}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x68346000) ioctl$HIDIOCGRDESC(r2, 0x90044802, &(0x7f0000000100)) fanotify_mark(r0, 0x7e, 0x800003a, r1, 0x0) 0s ago: executing program 1 (id=103): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newtfilter={0x44, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x2}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x1}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x2}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000b00)=@newtfilter={0x44, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x2, 0x2}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x2}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x2}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000800)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x2}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x44}}, 0x40848c0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x401, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x4}}}]}, 0x34}}, 0x20004000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x195a420, &(0x7f00000001c0)={[{@uid={'uid', 0x3d, 0xee01}}]}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r4, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) kernel console output (not intermixed with test programs): [ 29.096184][ T44] audit: type=1400 audit(1790253604.402:115): avc: denied { siginh } for pid=5633 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:17656' (ED25519) to the list of known hosts. [ 29.904688][ T44] audit: type=1400 audit(1790253605.212:116): avc: denied { name_bind } for pid=5640 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 31.249861][ T44] kauditd_printk_skb: 2 callbacks suppressed [ 31.249872][ T44] audit: type=1400 audit(1790253606.562:119): avc: denied { write } for pid=5642 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.285297][ T44] audit: type=1400 audit(1790253606.592:120): avc: denied { write } for pid=5645 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.825568][ T44] audit: type=1400 audit(1790253607.132:121): avc: denied { write } for pid=5648 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.864191][ T44] audit: type=1400 audit(1790253607.172:122): avc: denied { write } for pid=5651 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.174277][ T44] audit: type=1400 audit(1790253607.482:123): avc: denied { write } for pid=5654 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.174444][ T44] audit: type=1400 audit(1790253607.482:124): avc: denied { create } for pid=5654 comm="dhcpcd-run-hook" name="resolv.conf.lapb6.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.174673][ T44] audit: type=1400 audit(1790253607.482:125): avc: denied { write open } for pid=5654 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb6.ipv4ll" dev="tmpfs" ino=1884 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.174913][ T44] audit: type=1400 audit(1790253607.482:126): avc: denied { append } for pid=5654 comm="dhcpcd-run-hook" name="resolv.conf.lapb6.ipv4ll" dev="tmpfs" ino=1884 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.175454][ T44] audit: type=1400 audit(1790253607.482:127): avc: denied { getattr } for pid=5654 comm="dhcpcd-run-hook" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.195186][ T44] audit: type=1400 audit(1790253607.502:128): avc: denied { read } for pid=5657 comm="cmp" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.208714][ T5641] cgroup: Unknown subsys name 'net' [ 32.378774][ T5641] cgroup: Unknown subsys name 'cpuset' [ 32.381315][ T5641] cgroup: Unknown subsys name 'rlimit' [ 32.633061][ T5675] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 33.294261][ T5641] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.493515][ T44] kauditd_printk_skb: 32 callbacks suppressed [ 36.493531][ T44] audit: type=1400 audit(1790253611.802:161): avc: denied { execmem } for pid=5719 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 36.676921][ T44] audit: type=1400 audit(1790253611.992:162): avc: denied { create } for pid=5723 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 36.678485][ T44] audit: type=1400 audit(1790253611.992:163): avc: denied { read write } for pid=5723 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 36.678515][ T44] audit: type=1400 audit(1790253611.992:164): avc: denied { open } for pid=5723 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 36.693012][ T44] audit: type=1400 audit(1790253612.002:165): avc: denied { ioctl } for pid=5723 comm="syz-executor" path="socket:[5871]" dev="sockfs" ino=5871 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 36.718879][ T5726] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 36.723096][ T5735] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 36.723555][ T5735] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 36.724107][ T5735] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 36.724715][ T5731] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 36.725009][ T5735] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 36.725431][ T5733] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 36.725542][ T5735] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 36.726143][ T5735] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 36.726748][ T5731] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 36.727017][ T5733] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 36.727210][ T5731] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 36.728010][ T5735] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 36.729008][ T66] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 36.731635][ T5733] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 36.731934][ T5733] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 36.731937][ T66] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 36.733043][ T5733] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 36.733520][ T66] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 36.733746][ T66] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 36.736044][ T44] audit: type=1400 audit(1790253612.042:166): avc: denied { read } for pid=5723 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 36.736470][ T44] audit: type=1400 audit(1790253612.052:167): avc: denied { open } for pid=5723 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 36.737823][ T44] audit: type=1400 audit(1790253612.052:168): avc: denied { mounton } for pid=5723 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 36.742635][ T44] audit: type=1400 audit(1790253612.052:169): avc: denied { module_request } for pid=5723 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 36.774314][ T44] audit: type=1400 audit(1790253612.082:170): avc: denied { sys_module } for pid=5723 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 37.256843][ T5723] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.256889][ T5723] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.256948][ T5723] bridge_slave_0: entered allmulticast mode [ 37.257773][ T5723] bridge_slave_0: entered promiscuous mode [ 37.287133][ T5723] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.287178][ T5723] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.287236][ T5723] bridge_slave_1: entered allmulticast mode [ 37.288119][ T5723] bridge_slave_1: entered promiscuous mode [ 37.335816][ T5729] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.335896][ T5729] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.335957][ T5729] bridge_slave_0: entered allmulticast mode [ 37.336663][ T5729] bridge_slave_0: entered promiscuous mode [ 37.360674][ T5723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.364468][ T5729] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.364512][ T5729] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.364584][ T5729] bridge_slave_1: entered allmulticast mode [ 37.366453][ T5729] bridge_slave_1: entered promiscuous mode [ 37.379797][ T5723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.458711][ T5723] team0: Port device team_slave_0 added [ 37.464959][ T5729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.467597][ T5729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.468831][ T5723] team0: Port device team_slave_1 added [ 37.475172][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.475236][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.475295][ T5734] bridge_slave_0: entered allmulticast mode [ 37.476100][ T5734] bridge_slave_0: entered promiscuous mode [ 37.493287][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.493358][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.493505][ T5734] bridge_slave_1: entered allmulticast mode [ 37.494754][ T5734] bridge_slave_1: entered promiscuous mode [ 37.521441][ T5729] team0: Port device team_slave_0 added [ 37.521930][ T5723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.521939][ T5723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.521951][ T5723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.523774][ T5729] team0: Port device team_slave_1 added [ 37.544630][ T5723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.544641][ T5723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.544654][ T5723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.563366][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.566269][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.566458][ T5727] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.566531][ T5727] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.566590][ T5727] bridge_slave_0: entered allmulticast mode [ 37.567386][ T5727] bridge_slave_0: entered promiscuous mode [ 37.569355][ T5727] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.569394][ T5727] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.569537][ T5727] bridge_slave_1: entered allmulticast mode [ 37.570343][ T5727] bridge_slave_1: entered promiscuous mode [ 37.577938][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.577947][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.577959][ T5729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.604578][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.604589][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.604602][ T5729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.611379][ T5727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.614418][ T5723] hsr_slave_0: entered promiscuous mode [ 37.614861][ T5723] hsr_slave_1: entered promiscuous mode [ 37.616926][ T5734] team0: Port device team_slave_0 added [ 37.624201][ T5727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.627005][ T5734] team0: Port device team_slave_1 added [ 37.686197][ T5729] hsr_slave_0: entered promiscuous mode [ 37.686655][ T5729] hsr_slave_1: entered promiscuous mode [ 37.686929][ T5729] debugfs: 'hsr0' already exists in 'hsr' [ 37.686989][ T5729] Cannot create hsr debugfs directory [ 37.693892][ T5727] team0: Port device team_slave_0 added [ 37.703040][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.703050][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.703062][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.710590][ T5727] team0: Port device team_slave_1 added [ 37.714356][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.714366][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.714379][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.775661][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.775673][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.775685][ T5727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.780200][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.780211][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.780224][ T5727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.829130][ T5734] hsr_slave_0: entered promiscuous mode [ 37.829598][ T5734] hsr_slave_1: entered promiscuous mode [ 37.829903][ T5734] debugfs: 'hsr0' already exists in 'hsr' [ 37.829915][ T5734] Cannot create hsr debugfs directory [ 37.874756][ T5727] hsr_slave_0: entered promiscuous mode [ 37.875276][ T5727] hsr_slave_1: entered promiscuous mode [ 37.875584][ T5727] debugfs: 'hsr0' already exists in 'hsr' [ 37.875596][ T5727] Cannot create hsr debugfs directory [ 38.020380][ T5723] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.028087][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.039293][ T5723] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.043333][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.043987][ T5723] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.047322][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.057404][ T5723] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.060302][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.113092][ T5729] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.117229][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.118898][ T5729] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.125175][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.127419][ T5729] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.130757][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.131929][ T5729] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.137463][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.198270][ T5734] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.200927][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.201400][ T5734] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.203373][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.214270][ T5734] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.218634][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.219002][ T5734] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.221486][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.277496][ T5723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.303072][ T5727] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.304937][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.305560][ T5727] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.309567][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.309936][ T5727] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.311964][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.317600][ T5723] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.319347][ T5727] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.324476][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.332034][ T240] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.332099][ T240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.342715][ T240] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.342808][ T240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.348624][ T5729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.387623][ T5729] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.391907][ T240] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.391983][ T240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.409610][ T240] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.409655][ T240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.494962][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.513340][ T5727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.515437][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.524338][ T192] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.524383][ T192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.534823][ T240] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.534946][ T240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.537143][ T5727] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.549948][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.550037][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.574495][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.574570][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.719134][ T5723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.756968][ T5723] veth0_vlan: entered promiscuous mode [ 38.762894][ T5723] veth1_vlan: entered promiscuous mode [ 38.789923][ T5723] veth0_macvtap: entered promiscuous mode [ 38.792795][ T5729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.793968][ T5723] veth1_macvtap: entered promiscuous mode [ 38.797472][ T5738] Bluetooth: hci1: command tx timeout [ 38.797617][ T5738] Bluetooth: hci0: command tx timeout [ 38.798140][ T5735] Bluetooth: hci3: command tx timeout [ 38.807116][ T5735] Bluetooth: hci2: command tx timeout [ 38.809912][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.815588][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.848386][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.854364][ T5729] veth0_vlan: entered promiscuous mode [ 38.870464][ T5727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.876535][ T5729] veth1_vlan: entered promiscuous mode [ 38.941303][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.941316][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.941846][ T5729] veth0_macvtap: entered promiscuous mode [ 38.943972][ T5734] veth0_vlan: entered promiscuous mode [ 38.954481][ T5729] veth1_macvtap: entered promiscuous mode [ 38.981229][ T5734] veth1_vlan: entered promiscuous mode [ 38.983960][ T5727] veth0_vlan: entered promiscuous mode [ 38.985580][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.985595][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.986457][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.992275][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.997220][ T5727] veth1_vlan: entered promiscuous mode [ 39.005482][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.029214][ T5734] veth0_macvtap: entered promiscuous mode [ 39.039042][ T5734] veth1_macvtap: entered promiscuous mode [ 39.040050][ T5723] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.055505][ T5727] veth0_macvtap: entered promiscuous mode [ 39.064685][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.066752][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.066807][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.066854][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.066895][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.068455][ T5727] veth1_macvtap: entered promiscuous mode [ 39.080946][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.096448][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.096485][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.096513][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.096532][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.101996][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.109455][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.158870][ T240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.158882][ T240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.178277][ T240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.178289][ T240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.204214][ T5819] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.204463][ T5819] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.205182][ T5819] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.205539][ T5819] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.234248][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.234263][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.305930][ T5819] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.305971][ T5819] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.306000][ T5819] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.446608][ T5884] netlink: 'syz.2.3': attribute type 6 has an invalid length. [ 39.456690][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.456703][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.575528][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.575549][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.003038][ T5895] bridge1: entered promiscuous mode [ 40.044209][ T227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.044227][ T227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.256287][ T5902] process 'syz.3.7' launched '/dev/fd/7' with NULL argv: empty string added [ 40.336639][ T5915] MTD: Couldn't look up 'mtd0/file0': -2 [ 40.463221][ T5932] binder: 5909:5932 ioctl c0306201 200000000080 returned -14 [ 40.758100][ T5942] overlayfs: workdir and upperdir must be separate subtrees [ 40.885972][ T66] Bluetooth: hci3: command tx timeout [ 40.885992][ T66] Bluetooth: hci0: command tx timeout [ 40.886004][ T66] Bluetooth: hci1: command tx timeout [ 40.886078][ T5735] Bluetooth: hci2: command tx timeout [ 40.995872][ T5790] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 41.146741][ T5790] usb 8-1: Using ep0 maxpacket: 16 [ 41.150848][ T5790] usb 8-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 41.153141][ T5790] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.153158][ T5790] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x2 has an invalid bInterval 251, changing to 11 [ 41.153170][ T5790] usb 8-1: config 0 interface 0 has no altsetting 0 [ 41.153185][ T5790] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.176050][ T5790] usb 8-1: config 0 descriptor?? [ 41.284322][ T5964] Zero length message leads to an empty skb [ 41.402240][ T5960] nvme_fabrics: missing parameter 'transport=%s' [ 41.402256][ T5960] nvme_fabrics: missing parameter 'nqn=%s' [ 41.485482][ T5790] usbhid 8-1:0.0: can't add hid device: -71 [ 41.485566][ T5790] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 41.501472][ T5790] usb 8-1: USB disconnect, device number 2 [ 41.528520][ T5960] mmap: syz.0.24 (5960) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 41.617087][ T44] kauditd_printk_skb: 115 callbacks suppressed [ 41.617101][ T44] audit: type=1400 audit(1790253616.932:286): avc: denied { map } for pid=5976 comm="syz.1.30" path="/dev/tty1" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 41.617584][ T44] audit: type=1400 audit(1790253616.932:287): avc: denied { execute } for pid=5976 comm="syz.1.30" path="/dev/tty1" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 41.652398][ T5979] ip_tables: iptables: counters copy to user failed while replacing table [ 41.657028][ T44] audit: type=1400 audit(1790253616.962:288): avc: denied { setopt } for pid=5978 comm="syz.0.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 41.668002][ T44] audit: type=1400 audit(1790253616.992:289): avc: denied { write } for pid=5978 comm="syz.0.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 41.668991][ T5735] Bluetooth: hci0: unexpected cc 0x203e length: 2 > 1 [ 41.728565][ T44] audit: type=1400 audit(1790253617.042:290): avc: denied { create } for pid=5981 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 41.730692][ T44] audit: type=1400 audit(1790253617.042:291): avc: denied { write } for pid=5981 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 41.784039][ T44] audit: type=1400 audit(1790253617.092:292): avc: denied { kexec_image_load } for pid=5981 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 41.839511][ T44] audit: type=1400 audit(1790253617.152:293): avc: denied { create } for pid=5987 comm="syz.2.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 41.840377][ T44] audit: type=1400 audit(1790253617.152:294): avc: denied { ioctl } for pid=5987 comm="syz.2.33" path="socket:[9113]" dev="sockfs" ino=9113 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 41.847416][ T44] audit: type=1400 audit(1790253617.162:295): avc: denied { read } for pid=5987 comm="syz.2.33" path="socket:[9113]" dev="sockfs" ino=9113 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 41.899266][ T5989] syzkaller1: entered promiscuous mode [ 41.899280][ T5989] syzkaller1: entered allmulticast mode [ 41.937250][ T5989] netlink: 132 bytes leftover after parsing attributes in process `syz.2.33'. [ 41.940012][ T5989] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 41.940125][ T5989] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 41.940135][ T5989] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 41.940142][ T5989] UDF-fs: Scanning with blocksize 512 failed [ 41.941296][ T5989] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 41.941364][ T5989] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 41.941374][ T5989] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 41.941381][ T5989] UDF-fs: Scanning with blocksize 1024 failed [ 41.941646][ T5989] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 41.941694][ T5989] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 41.941703][ T5989] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 41.941711][ T5989] UDF-fs: Scanning with blocksize 2048 failed [ 41.941917][ T5989] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 41.941957][ T5989] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 41.941966][ T5989] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 41.941972][ T5989] UDF-fs: Scanning with blocksize 4096 failed [ 41.941976][ T5989] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 42.230827][ T6003] netlink: 830 bytes leftover after parsing attributes in process `syz.0.39'. [ 42.231399][ T6003] netlink: 12 bytes leftover after parsing attributes in process `syz.0.39'. [ 42.231409][ T6003] netlink: 20 bytes leftover after parsing attributes in process `syz.0.39'. [ 42.255831][ T5812] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 42.276388][ T6003] FAULT_INJECTION: forcing a failure. [ 42.276388][ T6003] name failslab, interval 1, probability 0, space 0, times 1 [ 42.276411][ T6003] CPU: 3 UID: 0 PID: 6003 Comm: syz.0.39 Tainted: G L syzkaller #0 PREEMPT(full) [ 42.276427][ T6003] Tainted: [L]=SOFTLOCKUP [ 42.276431][ T6003] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 42.276437][ T6003] Call Trace: [ 42.276442][ T6003] [ 42.276447][ T6003] dump_stack_lvl+0x100/0x190 [ 42.276466][ T6003] should_fail_ex.cold+0x5/0xa [ 42.276483][ T6003] should_failslab+0xc2/0x120 [ 42.276498][ T6003] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 42.276511][ T6003] ? __d_alloc+0x35/0xa50 [ 42.276529][ T6003] __d_alloc+0x35/0xa50 [ 42.276545][ T6003] d_alloc_pseudo+0x1c/0xc0 [ 42.276556][ T6003] alloc_file_pseudo+0x118/0x290 [ 42.276573][ T6003] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 42.276588][ T6003] ? alloc_fd+0x471/0x7a0 [ 42.276604][ T6003] sock_alloc_file+0x50/0x210 [ 42.276620][ T6003] __sys_socket+0x1c0/0x260 [ 42.276631][ T6003] ? __pfx___sys_socket+0x10/0x10 [ 42.276645][ T6003] __x64_sys_socket+0x72/0xb0 [ 42.276655][ T6003] ? lockdep_hardirqs_on+0x7d/0x110 [ 42.276673][ T6003] do_syscall_64+0x123/0x790 [ 42.276692][ T6003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.276717][ T6003] RIP: 0033:0x7fb01e99e159 [ 42.276728][ T6003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.276739][ T6003] RSP: 002b:00007fb01f8c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 42.276750][ T6003] RAX: ffffffffffffffda RBX: 00007fb01ec25fa0 RCX: 00007fb01e99e159 [ 42.276758][ T6003] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000001e [ 42.276764][ T6003] RBP: 00007fb01ea3506b R08: 0000000000000000 R09: 0000000000000000 [ 42.276771][ T6003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 42.276778][ T6003] R13: 00007fb01ec26038 R14: 00007fb01ec25fa0 R15: 00007ffde5d78a98 [ 42.276793][ T6003] [ 42.290698][ T3266] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 42.351093][ T6016] key id 000004d2 not found [ 42.352777][ T6016] geneve1: entered allmulticast mode [ 42.433273][ T6020] overlayfs: invalid origin (0000) [ 42.436698][ T5812] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 42.436917][ T6021] overlay: filesystem on ./bus not supported as upperdir [ 42.437725][ T5812] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 42.437746][ T5812] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 42.437771][ T5812] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.556847][ T6032] syzkaller1: entered promiscuous mode [ 42.556926][ T6032] syzkaller1: entered allmulticast mode [ 42.558833][ T3266] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 42.648415][ T5812] usb 8-1: GET_CAPABILITIES returned 0 [ 42.648451][ T5812] usbtmc 8-1:16.0: can't read capabilities [ 42.854672][ T5812] usb 8-1: USB disconnect, device number 3 [ 42.957019][ T5735] Bluetooth: hci2: command tx timeout [ 42.957042][ T5735] Bluetooth: hci1: command tx timeout [ 42.957056][ T5735] Bluetooth: hci3: command tx timeout [ 43.062608][ T6003] ceph: No mds server is up or the cluster is laggy [ 43.067142][ T5812] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 43.132704][ T6055] ima: policy update completed [ 43.133993][ T6055] team0: entered allmulticast mode [ 43.134005][ T6055] team_slave_0: entered allmulticast mode [ 43.134014][ T6055] team_slave_1: entered allmulticast mode [ 43.366655][ T6062] ima: policy update failed [ 43.450372][ T6072] capability: warning: `syz.3.54' uses 32-bit capabilities (legacy support in use) [ 43.462172][ T6076] netlink: 'syz.2.55': attribute type 7 has an invalid length. [ 43.464476][ T6076] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 43.464490][ T6076] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 43.722414][ T6081] ======================================================= [ 43.722414][ T6081] WARNING: The mand mount option has been deprecated and [ 43.722414][ T6081] and is ignored by this kernel. Remove the mand [ 43.722414][ T6081] option from the mount to silence this warning. [ 43.722414][ T6081] ======================================================= [ 43.724210][ T6081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.57'. [ 43.724228][ T6081] netlink: 12 bytes leftover after parsing attributes in process `syz.1.57'. [ 44.134508][ T6109] kvm [6108]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x1f06 [ 44.134737][ T6109] kvm [6108]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x15b7 [ 44.149261][ T6109] kvm [6108]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x27c4 [ 44.162337][ T6109] kvm [6108]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x5e37 [ 44.162556][ T6109] kvm [6108]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x86e8 [ 44.198882][ T6109] kvm: MONITOR instruction emulated as NOP! [ 44.386666][ T6129] netlink: 12 bytes leftover after parsing attributes in process `syz.0.72'. [ 44.387519][ T6130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.72'. [ 44.403478][ T6129] bond1 (unregistering): Released all slaves [ 44.414650][ T6132] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2710658593 (5421317186 ns) > initial count (1389943112 ns). Using initial count to start timer. [ 44.693819][ T6144] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 44.695944][ T854] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 44.699836][ T6144] FAULT_INJECTION: forcing a failure. [ 44.699836][ T6144] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 44.699856][ T6144] CPU: 2 UID: 0 PID: 6144 Comm: syz.0.76 Tainted: G L syzkaller #0 PREEMPT(full) [ 44.699870][ T6144] Tainted: [L]=SOFTLOCKUP [ 44.699874][ T6144] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 44.699880][ T6144] Call Trace: [ 44.699884][ T6144] [ 44.699889][ T6144] dump_stack_lvl+0x100/0x190 [ 44.699923][ T6144] should_fail_ex.cold+0x5/0xa [ 44.699937][ T6144] ? prepare_alloc_pages+0x16d/0x5b0 [ 44.699960][ T6144] should_fail_alloc_page+0xeb/0x140 [ 44.699976][ T6144] prepare_alloc_pages+0x1f0/0x5b0 [ 44.699992][ T6144] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 44.700009][ T6144] ? check_noncircular+0x97/0x160 [ 44.700023][ T6144] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 44.700035][ T6144] ? check_prev_add+0xfe/0xe60 [ 44.700049][ T6144] ? __lock_acquire+0x5c0/0x1f40 [ 44.700065][ T6144] ? __css_rstat_updated+0x1ce/0x590 [ 44.700089][ T6144] ? lock_acquire+0x1d1/0x380 [ 44.700104][ T6144] ? page_table_check_set+0x11d/0x580 [ 44.700129][ T6144] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 44.700150][ T6144] ? policy_nodemask+0xed/0x4f0 [ 44.700168][ T6144] alloc_pages_mpol+0x201/0x550 [ 44.700183][ T6144] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 44.700198][ T6144] ? __page_table_check_ptes_set+0x1d5/0x530 [ 44.700216][ T6144] folio_alloc_mpol_noprof+0x36/0x260 [ 44.700237][ T6144] vma_alloc_folio_noprof+0xed/0x1d0 [ 44.700262][ T6144] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 44.700284][ T6144] ? rcu_read_unlock+0x2d/0xb0 [ 44.700303][ T6144] do_anonymous_page+0xac9/0x2050 [ 44.700323][ T6144] ? __pfx_do_anonymous_page+0x10/0x10 [ 44.700339][ T6144] ? rcu_read_unlock+0x2d/0xb0 [ 44.700355][ T6144] ? rcu_read_unlock+0x2d/0xb0 [ 44.700371][ T6144] ? __pte_offset_map+0x179/0x310 [ 44.700385][ T6144] __handle_mm_fault+0x1ff3/0x2f60 [ 44.700404][ T6144] ? __pfx___handle_mm_fault+0x10/0x10 [ 44.700420][ T6144] ? pte_offset_map_lock+0x174/0x320 [ 44.700433][ T6144] ? find_held_lock+0x2b/0x80 [ 44.700450][ T6144] ? find_held_lock+0x2b/0x80 [ 44.700471][ T6144] ? follow_page_pte+0x536/0x1050 [ 44.700504][ T6144] handle_mm_fault+0x363/0xa20 [ 44.700532][ T6144] __get_user_pages+0x8ae/0x2c30 [ 44.700556][ T6144] ? check_noncircular+0x97/0x160 [ 44.700567][ T6144] ? __pfx___get_user_pages+0x10/0x10 [ 44.700580][ T6144] ? add_lock_to_list+0x9d/0x1d0 [ 44.700594][ T6144] __gup_longterm_locked+0x279/0x16f0 [ 44.700611][ T6144] ? __pfx___gup_longterm_locked+0x10/0x10 [ 44.700632][ T6144] ? lock_acquire+0x1d1/0x380 [ 44.700649][ T6144] ? xdp_umem_create+0x6dc/0x1200 [ 44.700683][ T6144] pin_user_pages+0x13c/0x160 [ 44.700701][ T6144] ? __pfx_pin_user_pages+0x10/0x10 [ 44.700717][ T6144] ? xdp_umem_create+0x666/0x1200 [ 44.700733][ T6144] xdp_umem_create+0x741/0x1200 [ 44.700752][ T6144] xsk_setsockopt+0x7d8/0xab0 [ 44.700766][ T6144] ? __pfx_xsk_setsockopt+0x10/0x10 [ 44.700780][ T6144] ? find_held_lock+0x2b/0x80 [ 44.700795][ T6144] ? __fget_files+0x215/0x3d0 [ 44.700811][ T6144] ? selinux_socket_setsockopt+0x6a/0x80 [ 44.700824][ T6144] ? __pfx_xsk_setsockopt+0x10/0x10 [ 44.700838][ T6144] do_sock_setsockopt+0xf3/0x1d0 [ 44.700861][ T6144] __sys_setsockopt+0x195/0x220 [ 44.700877][ T6144] __x64_sys_setsockopt+0xbd/0x160 [ 44.700890][ T6144] ? do_syscall_64+0xae/0x790 [ 44.700906][ T6144] ? lockdep_hardirqs_on+0x7d/0x110 [ 44.700922][ T6144] do_syscall_64+0x123/0x790 [ 44.700940][ T6144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.700955][ T6144] RIP: 0033:0x7fb01e99e159 [ 44.700964][ T6144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.700974][ T6144] RSP: 002b:00007fb01f8c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 44.700985][ T6144] RAX: ffffffffffffffda RBX: 00007fb01ec25fa0 RCX: 00007fb01e99e159 [ 44.700992][ T6144] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000005 [ 44.700998][ T6144] RBP: 00007fb01ea3506b R08: 0000000000000020 R09: 0000000000000000 [ 44.701004][ T6144] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 44.701010][ T6144] R13: 00007fb01ec26038 R14: 00007fb01ec25fa0 R15: 00007ffde5d78a98 [ 44.701024][ T6144] [ 44.707567][ T6147] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 44.810207][ T6152] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 44.810226][ T6152] overlayfs: missing 'lowerdir' [ 44.866829][ T854] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 44.867622][ T854] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 44.867644][ T854] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.867655][ T854] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 44.867674][ T854] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.875015][ T854] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 44.875127][ T854] keyspan 7-1:1.0: unsupported endpoint type 0 [ 44.875159][ T854] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1 [ 44.876663][ T854] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 44.876710][ T854] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 44.879938][ T854] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 44.881807][ T854] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 44.881847][ T854] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 44.883189][ T854] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 45.046170][ T5738] Bluetooth: hci3: command tx timeout [ 45.046192][ T5738] Bluetooth: hci1: command tx timeout [ 45.046205][ T5738] Bluetooth: hci2: command tx timeout [ 45.074751][ T6136] ceph: No source [ 45.076936][ T10] usb 7-1: USB disconnect, device number 2 [ 45.081368][ T10] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 45.083373][ T10] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 45.083694][ T10] keyspan 7-1:1.0: device disconnected [ 45.287538][ T6181] syz.0.85 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 45.318112][ T6183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.87'. [ 45.641221][ T6190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.89'. [ 45.641251][ T6190] netlink: 'syz.2.89': attribute type 18 has an invalid length. [ 45.657027][ T6190] netlink: 'syz.2.89': attribute type 18 has an invalid length. [ 45.666020][ T5819] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.666056][ T5819] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.666073][ T5819] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.666090][ T5819] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.686932][ T5735] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 45.686966][ T5735] Bluetooth: hci0: Injecting HCI hardware error event [ 45.687925][ T5735] Bluetooth: hci0: hardware error 0x00 [ 46.125929][ T5812] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 46.286064][ T5812] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0000, bcdDevice= 7.03 [ 46.286695][ T5812] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.289248][ T5812] usb 5-1: Dual-Role OTG device on HNP port [ 46.289448][ T5812] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.289460][ T5812] usb 5-1: Product: HID Gadget [ 46.296167][ C3] ------------[ cut here ]------------ [ 46.296175][ C3] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0 [ 46.296184][ C3] WARNING: drivers/usb/gadget/udc/core.c:124 at usb_ep_enable+0x3e6/0x490, CPU#3: udevd/5745 [ 46.298949][ T6239] CIFS: VFS: UNC: path must begin with // or \\ [ 46.299050][ T6239] CIFS: VFS: Malformed UNC in devname [ 46.318444][ C3] Modules linked in: [ 46.319863][ C3] CPU: 3 UID: 0 PID: 5745 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 46.319923][ T854] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 46.325997][ C3] Tainted: [L]=SOFTLOCKUP [ 46.327284][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 46.330205][ C3] RIP: 0010:usb_ep_enable+0x3f8/0x490 [ 46.331835][ C3] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8d 3d 2a 07 74 09 48 8b 4b 08 40 0f b6 d5 4d 89 e0 48 c7 c6 c0 12 da 8c <67> 48 0f b9 3a bd ea ff ff ff e9 8e fd ff ff 49 c7 c4 60 05 da 8c [ 46.337472][ C3] RSP: 0018:ffffc90000708a00 EFLAGS: 00010046 [ 46.339299][ C3] RAX: dffffc0000000000 RBX: ffff88802b33c0e0 RCX: ffffffff8cda4960 [ 46.341929][ C3] RDX: 0000000000000081 RSI: ffffffff8cda12c0 RDI: ffffffff9152a610 [ 46.344340][ C3] RBP: 0000000000000081 R08: ffffffff8cda05a0 R09: 0000000000000000 [ 46.346790][ C3] R10: 0000000000000000 R11: 0000000000000003 R12: ffffffff8cda05a0 [ 46.349141][ C3] R13: 0000000000000000 R14: ffff88802b33c0e0 R15: ffff8880373f1c18 [ 46.351502][ C3] FS: 00007f8a13fed880(0000) GS:ffff8880d5e53000(0000) knlGS:0000000000000000 [ 46.352079][ T6240] xt_socket: unknown flags 0x58 [ 46.353673][ T6243] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 46.353855][ T6243] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 46.366192][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 46.368282][ C3] CR2: 000000110c3e66be CR3: 000000005546b000 CR4: 0000000000352ef0 [ 46.370650][ C3] Call Trace: [ 46.371722][ C3] [ 46.372711][ C3] hidg_set_alt+0x190/0xa10 [ 46.374398][ C3] ? do_raw_spin_unlock+0x145/0x1e0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 46.376171][ C3] ? rcu_is_watching+0x13/0xc0 [ 46.378482][ C3] composite_setup+0x2ccf/0x9290 [ 46.380543][ C3] ? __lock_acquire+0x5c0/0x1f40 [ 46.382581][ C3] ? __pfx_composite_setup+0x10/0x10 [ 46.384718][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 46.386948][ C3] ? do_raw_spin_lock+0x128/0x260 [ 46.388966][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 46.391115][ C3] ? configfs_composite_setup+0xfb/0x130 [ 46.393400][ C3] configfs_composite_setup+0xfb/0x130 [ 46.395602][ C3] dummy_timer+0x2039/0x3700 [ 46.397554][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 46.400230][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 46.402537][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 46.404653][ C3] ? mark_held_locks+0x40/0x70 [ 46.406617][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 46.408968][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 46.410997][ C3] __hrtimer_run_queues+0x462/0x9c0 [ 46.413077][ C3] hrtimer_run_softirq+0x1ca/0x360 [ 46.415149][ C3] handle_softirqs+0x1e6/0x9d0 [ 46.417086][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 46.419417][ C3] ? _raw_spin_unlock+0x28/0x50 [ 46.421347][ C3] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 46.423598][ C3] __irq_exit_rcu+0x16a/0x210 [ 46.425491][ C3] irq_exit_rcu+0x9/0x30 [ 46.427197][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 46.429372][ C3] [ 46.430564][ C3] [ 46.431732][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 46.434027][ C3] RIP: 0010:__orc_find+0x70/0xf0 [ 46.435976][ C3] Code: ec 72 4e 4c 89 e2 48 29 ea 48 89 d6 48 c1 ea 3f 48 c1 fe 02 48 01 f2 48 d1 fa 48 8d 5c 95 00 48 89 da 48 c1 ea 03 0f b6 34 0a <48> 89 da 83 e2 07 83 c2 03 40 38 f2 7c 05 40 84 f6 75 4b 48 63 13 [ 46.443696][ C3] RSP: 0018:ffffc90003b6f4f8 EFLAGS: 00000a07 [ 46.446116][ C3] RAX: ffffffff91f756f6 RBX: ffffffff916855bc RCX: dffffc0000000000 [ 46.449226][ C3] RDX: 1ffffffff22d0ab7 RSI: 0000000000000000 RDI: ffffffff916855a8 [ 46.452306][ C3] RBP: ffffffff916855b8 R08: ffffffff91f75756 R09: 0000000000000007 [ 46.455421][ C3] R10: 0000000000000200 R11: 0000000000017f37 R12: ffffffff916855c0 [ 46.458540][ C3] R13: ffffffff827f3729 R14: ffffffff916855a8 R15: ffffffff916855b4 [ 46.461618][ C3] ? __kasan_kmalloc+0xa9/0xb0 [ 46.463516][ C3] ? __kasan_kmalloc+0xa9/0xb0 [ 46.465726][ C3] unwind_next_frame+0x2ec/0x2090 [ 46.467749][ C3] ? __kasan_kmalloc+0xaa/0xb0 [ 46.469643][ C3] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 46.472093][ C3] arch_stack_walk+0x94/0xf0 [ 46.473944][ C3] ? __kasan_kmalloc+0xaa/0xb0 [ 46.475844][ C3] stack_trace_save+0x8e/0xc0 [ 46.477635][ C3] ? __pfx_stack_trace_save+0x10/0x10 [ 46.479766][ C3] kasan_save_stack+0x30/0x50 [ 46.481644][ C3] ? kasan_save_stack+0x30/0x50 [ 46.483575][ C3] ? kasan_save_track+0x14/0x30 [ 46.485506][ C3] ? __kasan_kmalloc+0xaa/0xb0 [ 46.487462][ C3] kasan_save_track+0x14/0x30 [ 46.489631][ C3] __kasan_kmalloc+0xaa/0xb0 [ 46.491515][ C3] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 46.493623][ C3] ? kernfs_fop_open+0x9fa/0xd50 [ 46.495625][ C3] kernfs_fop_open+0x9fa/0xd50 [ 46.497541][ C3] do_dentry_open+0x6ab/0x14d0 [ 46.499461][ C3] ? __pfx_kernfs_fop_open+0x10/0x10 [ 46.501578][ C3] vfs_open+0x82/0x3f0 [ 46.503227][ C3] path_openat+0x19fa/0x2440 [ 46.505093][ C3] ? __pfx_path_openat+0x10/0x10 [ 46.507131][ C3] do_file_open+0x20e/0x430 [ 46.508953][ C3] ? __pfx_do_file_open+0x10/0x10 [ 46.511004][ C3] ? _raw_spin_unlock+0x28/0x50 [ 46.513256][ C3] ? alloc_fd+0x471/0x7a0 [ 46.515000][ C3] do_sys_openat2+0x10f/0x1e0 [ 46.516891][ C3] ? __pfx_do_sys_openat2+0x10/0x10 [ 46.519007][ C3] __x64_sys_openat+0x12d/0x210 [ 46.520957][ C3] ? __pfx___x64_sys_openat+0x10/0x10 [ 46.523097][ C3] do_syscall_64+0x123/0x790 [ 46.524936][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.527307][ C3] RIP: 0033:0x7f8a138a7407 [ 46.529131][ C3] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 46.536643][ C3] RSP: 002b:00007ffdff267c50 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 46.540207][ C3] RAX: ffffffffffffffda RBX: 00007f8a13fed880 RCX: 00007f8a138a7407 [ 46.543336][ C3] RDX: 0000000000080000 RSI: 00007ffdff267d80 RDI: ffffffffffffff9c [ 46.546506][ C3] RBP: 000055aae61f1d50 R08: 0000000000000000 R09: 0000000000000000 [ 46.549683][ C3] R10: 0000000000000000 R11: 0000000000000202 R12: 000055aae61f1e40 [ 46.552872][ C3] R13: 00007ffdff267d80 R14: 00007ffdff269ec0 R15: 000055aac9425bcc [ 46.555966][ C3] [ 46.557221][ C3] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 46.560182][ C3] CPU: 3 UID: 0 PID: 5745 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 46.564294][ C3] Tainted: [L]=SOFTLOCKUP [ 46.566365][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 46.570318][ C3] Call Trace: [ 46.571647][ C3] [ 46.572791][ C3] dump_stack_lvl+0x100/0x190 [ 46.574702][ C3] vpanic+0x553/0x970 [ 46.576314][ C3] ? __pfx_vpanic+0x10/0x10 [ 46.578145][ C3] panic+0xd1/0xe0 [ 46.579668][ C3] ? __pfx_panic+0x10/0x10 [ 46.581476][ C3] check_panic_on_warn.cold+0x19/0x34 [ 46.583597][ C3] ? usb_ep_enable+0x3e6/0x490 [ 46.585491][ C3] __warn.cold+0x191/0x318 [ 46.587340][ C3] __report_bug+0x30f/0x440 [ 46.589166][ C3] ? usb_ep_enable+0x3e6/0x490 [ 46.591061][ C3] ? __pfx___report_bug+0x10/0x10 [ 46.593080][ C3] ? try_to_wake_up+0x158/0x1c90 [ 46.595439][ C3] report_bug_entry+0xe2/0x290 [ 46.597338][ C3] ? usb_ep_enable+0x3f8/0x490 [ 46.599300][ C3] handle_bug+0x1cd/0x2a0 [ 46.601015][ C3] exc_invalid_op+0x17/0x50 [ 46.602841][ C3] asm_exc_invalid_op+0x1a/0x20 [ 46.604693][ C3] RIP: 0010:usb_ep_enable+0x3f8/0x490 [ 46.606806][ C3] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8d 3d 2a 07 74 09 48 8b 4b 08 40 0f b6 d5 4d 89 e0 48 c7 c6 c0 12 da 8c <67> 48 0f b9 3a bd ea ff ff ff e9 8e fd ff ff 49 c7 c4 60 05 da 8c [ 46.614195][ C3] RSP: 0018:ffffc90000708a00 EFLAGS: 00010046 [ 46.616699][ C3] RAX: dffffc0000000000 RBX: ffff88802b33c0e0 RCX: ffffffff8cda4960 [ 46.619807][ C3] RDX: 0000000000000081 RSI: ffffffff8cda12c0 RDI: ffffffff9152a610 [ 46.622881][ C3] RBP: 0000000000000081 R08: ffffffff8cda05a0 R09: 0000000000000000 [ 46.626367][ C3] R10: 0000000000000000 R11: 0000000000000003 R12: ffffffff8cda05a0 [ 46.629469][ C3] R13: 0000000000000000 R14: ffff88802b33c0e0 R15: ffff8880373f1c18 [ 46.632558][ C3] hidg_set_alt+0x190/0xa10 [ 46.634395][ C3] ? do_raw_spin_unlock+0x145/0x1e0 [ 46.636511][ C3] ? rcu_is_watching+0x13/0xc0 [ 46.638468][ C3] composite_setup+0x2ccf/0x9290 [ 46.640450][ C3] ? __lock_acquire+0x5c0/0x1f40 [ 46.642430][ C3] ? __pfx_composite_setup+0x10/0x10 [ 46.644514][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 46.646685][ C3] ? do_raw_spin_lock+0x128/0x260 [ 46.648677][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 46.650853][ C3] ? configfs_composite_setup+0xfb/0x130 [ 46.653075][ C3] configfs_composite_setup+0xfb/0x130 [ 46.655658][ C3] dummy_timer+0x2039/0x3700 [ 46.657520][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 46.659862][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 46.662163][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 46.664144][ C3] ? mark_held_locks+0x40/0x70 [ 46.666115][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 46.668446][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 46.670454][ C3] __hrtimer_run_queues+0x462/0x9c0 [ 46.672538][ C3] hrtimer_run_softirq+0x1ca/0x360 [ 46.674623][ C3] handle_softirqs+0x1e6/0x9d0 [ 46.676571][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 46.678664][ C3] ? _raw_spin_unlock+0x28/0x50 [ 46.680581][ C3] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 46.682820][ C3] __irq_exit_rcu+0x16a/0x210 [ 46.684936][ C3] irq_exit_rcu+0x9/0x30 [ 46.686656][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 46.688848][ C3] [ 46.690038][ C3] [ 46.691238][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 46.693625][ C3] RIP: 0010:__orc_find+0x70/0xf0 [ 46.695609][ C3] Code: ec 72 4e 4c 89 e2 48 29 ea 48 89 d6 48 c1 ea 3f 48 c1 fe 02 48 01 f2 48 d1 fa 48 8d 5c 95 00 48 89 da 48 c1 ea 03 0f b6 34 0a <48> 89 da 83 e2 07 83 c2 03 40 38 f2 7c 05 40 84 f6 75 4b 48 63 13 [ 46.703064][ C3] RSP: 0018:ffffc90003b6f4f8 EFLAGS: 00000a07 [ 46.705465][ C3] RAX: ffffffff91f756f6 RBX: ffffffff916855bc RCX: dffffc0000000000 [ 46.708596][ C3] RDX: 1ffffffff22d0ab7 RSI: 0000000000000000 RDI: ffffffff916855a8 [ 46.711739][ C3] RBP: ffffffff916855b8 R08: ffffffff91f75756 R09: 0000000000000007 [ 46.714830][ C3] R10: 0000000000000200 R11: 0000000000017f37 R12: ffffffff916855c0 [ 46.718378][ C3] R13: ffffffff827f3729 R14: ffffffff916855a8 R15: ffffffff916855b4 [ 46.721494][ C3] ? __kasan_kmalloc+0xa9/0xb0 [ 46.723411][ C3] ? __kasan_kmalloc+0xa9/0xb0 [ 46.725319][ C3] unwind_next_frame+0x2ec/0x2090 [ 46.727367][ C3] ? __kasan_kmalloc+0xaa/0xb0 [ 46.729296][ C3] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 46.731755][ C3] arch_stack_walk+0x94/0xf0 [ 46.733579][ C3] ? __kasan_kmalloc+0xaa/0xb0 [ 46.735535][ C3] stack_trace_save+0x8e/0xc0 [ 46.737445][ C3] ? __pfx_stack_trace_save+0x10/0x10 [ 46.739595][ C3] kasan_save_stack+0x30/0x50 [ 46.741484][ C3] ? kasan_save_stack+0x30/0x50 [ 46.743432][ C3] ? kasan_save_track+0x14/0x30 [ 46.745371][ C3] ? __kasan_kmalloc+0xaa/0xb0 [ 46.747289][ C3] kasan_save_track+0x14/0x30 [ 46.749165][ C3] __kasan_kmalloc+0xaa/0xb0 [ 46.751510][ C3] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 46.753616][ C3] ? kernfs_fop_open+0x9fa/0xd50 [ 46.755576][ C3] kernfs_fop_open+0x9fa/0xd50 [ 46.757471][ C3] do_dentry_open+0x6ab/0x14d0 [ 46.759353][ C3] ? __pfx_kernfs_fop_open+0x10/0x10 [ 46.761437][ C3] vfs_open+0x82/0x3f0 [ 46.763071][ C3] path_openat+0x19fa/0x2440 [ 46.764921][ C3] ? __pfx_path_openat+0x10/0x10 [ 46.766987][ C3] do_file_open+0x20e/0x430 [ 46.768432][ C3] ? __pfx_do_file_open+0x10/0x10 [ 46.770029][ C3] ? _raw_spin_unlock+0x28/0x50 [ 46.771539][ C3] ? alloc_fd+0x471/0x7a0 [ 46.772891][ C3] do_sys_openat2+0x10f/0x1e0 [ 46.774340][ C3] ? __pfx_do_sys_openat2+0x10/0x10 [ 46.775881][ C3] __x64_sys_openat+0x12d/0x210 [ 46.777352][ C3] ? __pfx___x64_sys_openat+0x10/0x10 [ 46.779018][ C3] do_syscall_64+0x123/0x790 [ 46.780421][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.782227][ C3] RIP: 0033:0x7f8a138a7407 [ 46.784173][ C3] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 46.789893][ C3] RSP: 002b:00007ffdff267c50 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 46.792423][ C3] RAX: ffffffffffffffda RBX: 00007f8a13fed880 RCX: 00007f8a138a7407 [ 46.794783][ C3] RDX: 0000000000080000 RSI: 00007ffdff267d80 RDI: ffffffffffffff9c [ 46.797137][ C3] RBP: 000055aae61f1d50 R08: 0000000000000000 R09: 0000000000000000 [ 46.799501][ C3] R10: 0000000000000000 R11: 0000000000000202 R12: 000055aae61f1e40 [ 46.801836][ C3] R13: 00007ffdff267d80 R14: 00007ffdff269ec0 R15: 000055aac9425bcc [ 46.804243][ C3] [ 46.805827][ C3] Kernel Offset: disabled [ 46.807160][ C3] Rebooting in 86400 seconds..