last executing test programs: 1m44.963889094s ago: executing program 2 (id=3): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bridge_slave_0\x00', 0x0}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b63, 0x3) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@bridge_delvlan={0x30, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x7, 0x7}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x2}}}]}, 0x30}}, 0x4000) 1m44.201571269s ago: executing program 2 (id=14): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x12f) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000380)={0x7, &(0x7f0000000280)=[{0x200, 0x2, 0x4, 0x1}, {0x75, 0x8, 0x7f, 0x6}, {0x9, 0x2, 0x5, 0xffffffff}, {0xff, 0x36, 0x6, 0x9cd}, {0x1, 0x3, 0x54, 0x80000000}, {0x800, 0x1, 0x9, 0x8}, {0x1000, 0x6, 0xad, 0x5}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@dev, @in6=@ipv4={""/10, ""/2, @private}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000000500)=0xe8) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000003c0)=@sg0, r2, &(0x7f0000000540)='./mnt\x00') sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000c00078005001500000000000500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x58}}, 0x0) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8414, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000100)=[{}, {}, {}], &(0x7f0000000180)=0x18) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x1fa) write$P9_RUNLINKAT(r4, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 1m43.202267073s ago: executing program 2 (id=19): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000200)=0x10) open_tree(r0, &(0x7f0000000000)='./file0\x00', 0x100) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000440)={r1, @in6={{0xa, 0x4e21, 0x4, @empty, 0x1}}, 0x1, 0x3}, 0x90) 1m42.686087278s ago: executing program 2 (id=21): r0 = gettid() openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x2000000000}, {}, 0x0, 0xffffffff, 0x1}, {{@in6=@mcast1, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x43}, 0x0, 0x0, 0x0, 0x4}}, 0xe4) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x2) fsopen(0x0, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2c41, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000600), 0x22902, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x1}, 0x20) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='\n', 0x1) 1m42.083709036s ago: executing program 2 (id=23): r0 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) close(r0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dir0\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='mtd0\x00', &(0x7f0000000100)='./dir0\x00', &(0x7f0000000140)='jffs2\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./dir0\x00', 0x0, 0x20, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x3d, 0x0, &(0x7f0000000340)) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/kernel/mm/ksm/merge_across_nodes\x00', 0x2, 0x0) write(r2, &(0x7f00000002c0)='1', 0x1) futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20023000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) r3 = dup(r0) write$binfmt_elf64(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c46f2092da32a0200000400000002003e00ffffffffb80100000000000040000000000d00000002000000000010f9001a2d0800380001"], 0x78) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1m41.265144671s ago: executing program 2 (id=28): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15f) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f00000008c0)={0x1, 0x1, 0x2, 0x9, 0x3}) ioctl$VT_RELDISP(r0, 0x5605) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x141000, 0x0) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000e40)={0x2f, @loopback, 0x0, 0x0, 'dh\x00', 0x1, 0xef, 0x2e}, 0x2c) socket$unix(0x1, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/mapper/control\x00', 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x24000080) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6000000024c6cd8b3426fd40000000000a0000003c7b322621c986db5a000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c0002800500010000000000100001800c0002800500010000000000378af30ab008d71cc61e217cd0cd1d208d32b06fbef9c5b60868c9fa71daebdd3f782746ce093c"], 0x60}}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001451cced3f65a52000000000", @ANYRESDEC=r1, @ANYRESHEX=r3, @ANYBLOB="0100000003"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_lsm={0x6, 0x6, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r4, @ANYBLOB="0000000000000000c30100000001000095"], &(0x7f0000000a00)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x24}, 0x94) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400220050000305160000000000000000008847", @ANYRESHEX=r2, @ANYBLOB="5aefd6051edf2c855587ebeec79bff22c8fbb598cc51f20129821962971543c3d25cb83e4748cb9f1ced06148c8028894e9bb90f5fcfb763fe054a76f41fbecd7c255a91e8950e6614f8aa13ae4a90d4babbb73051cd463150db583454b0c917d52af0118b790eea51dbb569419d00c8bbe4b72192912dff89b240baed2e60fb6a1f301a9adc83e300213017106795973faa7473bedbb83e19cd1cf07be1897b58bf9e8898fb4703bb5183fb3f8bd10d076cdd0efa0e3a9f0ebcf7a6476d315bd2656838ea3cfa13c184b0c2489df75f9688b024a93dc38736de52701c0764829507ed"], 0xc3}, 0x1, 0x100000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = socket(0x29, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000600), 0x4000000000001f2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000e80)) fstat(r5, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r2, &(0x7f0000000ac0)='./dev/mapper/control\x00', 0x100, 0x8, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000400)='./dev/mapper/control\x00', r6, r7) ioctl(r2, 0xc138fd03, &(0x7f0000000240)="04000000000000000000000038010000000000000200000000000000fffffe000000000000000fffff000000000000002e2e36") r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r2) sendmsg$TIPC_NL_KEY_FLUSH(r8, &(0x7f0000000e00)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="06000000d6589480bf1653db768ea5e0f1c717be9b1e9ae9cae6", @ANYRES16=r9, @ANYBLOB="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"], 0x1b0}, 0x1, 0x0, 0x0, 0x20000080}, 0x4040891) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r2) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100fdfffffffcffffff460000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00000000000c008f0000000000008002000c009000fffffffffffffd7fd075069df02d2f27695ab58e0b17b215a9bf1f80b395cb426e39370fb5cb1367de1a6a5c5606bb530300551746b796483d8d5c3844c7f29827d1ec85b244a1d090c32e0ea06ede0492496f662555a448e86541"], 0x54}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 1m25.722746214s ago: executing program 32 (id=28): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15f) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f00000008c0)={0x1, 0x1, 0x2, 0x9, 0x3}) ioctl$VT_RELDISP(r0, 0x5605) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x141000, 0x0) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000e40)={0x2f, @loopback, 0x0, 0x0, 'dh\x00', 0x1, 0xef, 0x2e}, 0x2c) socket$unix(0x1, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/mapper/control\x00', 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x24000080) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6000000024c6cd8b3426fd40000000000a0000003c7b322621c986db5a000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c0002800500010000000000100001800c0002800500010000000000378af30ab008d71cc61e217cd0cd1d208d32b06fbef9c5b60868c9fa71daebdd3f782746ce093c"], 0x60}}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001451cced3f65a52000000000", @ANYRESDEC=r1, @ANYRESHEX=r3, @ANYBLOB="0100000003"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_lsm={0x6, 0x6, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r4, @ANYBLOB="0000000000000000c30100000001000095"], &(0x7f0000000a00)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x24}, 0x94) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400220050000305160000000000000000008847", @ANYRESHEX=r2, @ANYBLOB="5aefd6051edf2c855587ebeec79bff22c8fbb598cc51f20129821962971543c3d25cb83e4748cb9f1ced06148c8028894e9bb90f5fcfb763fe054a76f41fbecd7c255a91e8950e6614f8aa13ae4a90d4babbb73051cd463150db583454b0c917d52af0118b790eea51dbb569419d00c8bbe4b72192912dff89b240baed2e60fb6a1f301a9adc83e300213017106795973faa7473bedbb83e19cd1cf07be1897b58bf9e8898fb4703bb5183fb3f8bd10d076cdd0efa0e3a9f0ebcf7a6476d315bd2656838ea3cfa13c184b0c2489df75f9688b024a93dc38736de52701c0764829507ed"], 0xc3}, 0x1, 0x100000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = socket(0x29, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000600), 0x4000000000001f2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000e80)) fstat(r5, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r2, &(0x7f0000000ac0)='./dev/mapper/control\x00', 0x100, 0x8, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000400)='./dev/mapper/control\x00', r6, r7) ioctl(r2, 0xc138fd03, &(0x7f0000000240)="04000000000000000000000038010000000000000200000000000000fffffe000000000000000fffff000000000000002e2e36") r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r2) sendmsg$TIPC_NL_KEY_FLUSH(r8, &(0x7f0000000e00)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="06000000d6589480bf1653db768ea5e0f1c717be9b1e9ae9cae6", @ANYRES16=r9, @ANYBLOB="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"], 0x1b0}, 0x1, 0x0, 0x0, 0x20000080}, 0x4040891) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r2) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100fdfffffffcffffff460000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00000000000c008f0000000000008002000c009000fffffffffffffd7fd075069df02d2f27695ab58e0b17b215a9bf1f80b395cb426e39370fb5cb1367de1a6a5c5606bb530300551746b796483d8d5c3844c7f29827d1ec85b244a1d090c32e0ea06ede0492496f662555a448e86541"], 0x54}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 25.364091586s ago: executing program 1 (id=684): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000880)=@filter={'filter\x00', 0xe, 0x4, 0x388, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0xd0000000, 0xd0, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x8, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) 25.291394332s ago: executing program 1 (id=685): r0 = io_uring_setup(0x6619, &(0x7f00000000c0)={0x0, 0xaeab, 0x0, 0x2, 0x36f}) io_uring_register$IORING_REGISTER_MEM_REGION(r0, 0x22, &(0x7f0000000140)={&(0x7f0000000180)={0x0, 0x0, 0x1, 0x6992, 0x5}, 0x1}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) io_uring_setup(0x6619, &(0x7f00000000c0)={0x0, 0xaeab, 0x0, 0x2, 0x36f}) (async) io_uring_register$IORING_REGISTER_MEM_REGION(r0, 0x22, &(0x7f0000000140)={&(0x7f0000000180)={0x0, 0x0, 0x1, 0x6992, 0x5}, 0x1}, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) (async) 25.291141068s ago: executing program 1 (id=686): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0) syz_open_procfs(0x0, &(0x7f00000006c0)='pagemap\x00') socket$inet_sctp(0x2, 0x1, 0x84) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score\x00') r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) open(&(0x7f0000000240)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x147fc2, 0x120) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r6) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x14, r7, 0x48212b8952c3aff5, 0x70bd27}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x700) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r5], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 24.920684818s ago: executing program 1 (id=687): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 64) mount$bind(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async, rerun: 64) mount$bind(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async, rerun: 64) mount$bind(0x0, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) (rerun: 64) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='mountinfo\x00') read$FUSE(r1, &(0x7f0000000240)={0x2020}, 0x2038) close_range(r0, r0, 0x2) (async) ioctl$FBIOBLANK(r0, 0x4611, 0x2) 24.867262507s ago: executing program 1 (id=689): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x121800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x200005, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0xf58, 0x30, 0x25, 0x0, 0x0, {}, [{0xf44, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x4}, [{}, {}, {}, {0x0, 0x0, 0x4000000}, {}, {}, {0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x100}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}], [{}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0xf0, 0x2, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x24, 0x4, [{0x1, 0xff, 0x4, 0x6}, {0x6, 0x9, 0x1, 0x3}, {0x8, 0xa, 0x9, 0xe5ad}, {0x2, 0xfd, 0x3, 0x7}]}]}, {0xa4, 0x6, "aef41341fdedc57514e9e6b7c9a7d6c6f2710911ea3f03808c1cd540f74547537bf4bd3de3af39a159c644fdacd41501de3816424920bd50948bb71277cbcb3af35a087dfca43335c1d1f7676239b2932026b5e5e0d02760eb4305f349000de9580b5ad411948e208801ff4e11df28aa70701228e871fa62bd8e1d2b3abd2494e13f35b5933263a1b9ee64b0161ef7cc4e38117db59c3db871f9eb7078642fdf"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xf58}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000400)="05", 0x1, 0x4009, &(0x7f0000000440)={0x11, 0x10, r3, 0x1, 0x3, 0x6, @remote}, 0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000000706010400000000000000002200000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0xc886) 24.57840051s ago: executing program 1 (id=690): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}]}, &(0x7f0000000080)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000140)={0x6, 0x5c, 0x204, 0x401, 0x80000000, 0xb2b, 0x400, 0x0, r1}, &(0x7f0000000180)=0x20) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='prev_state.function ~', 0x15) 24.532931431s ago: executing program 33 (id=690): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}]}, &(0x7f0000000080)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000140)={0x6, 0x5c, 0x204, 0x401, 0x80000000, 0xb2b, 0x400, 0x0, r1}, &(0x7f0000000180)=0x20) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='prev_state.function ~', 0x15) 4.370966895s ago: executing program 4 (id=920): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000340)={0x1, 0x103, 0x1, {0xfffffffd, 0x2, 0x404, 0x9}}) 4.317686589s ago: executing program 4 (id=921): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000fc0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000001240)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001280)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001300)=[@text64={0x40, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x600) 4.061059335s ago: executing program 4 (id=922): r0 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r1, &(0x7f00000008c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x2000, &(0x7f00000028c0)={&(0x7f0000002980)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x5c, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f0000004b40)='./file0\x00', 0x0, 0xffffffffffffffff, 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f0000004b80)='./file0\x00', 0x0, 0x2d) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000880)={0x18, 0x5e, 0xe25, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}, 0x18}], 0x1}, 0x0) 3.129652374s ago: executing program 4 (id=928): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40) (async) r4 = socket(0x10, 0x3, 0x0) (async) setuid(0xee01) setsockopt$sock_int(r4, 0x1, 0x21, &(0x7f0000000280)=0x8, 0x4) (async) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000001c0)={0x1d, r6}, 0x10) (async) sendmsg$can_bcm(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)=ANY=[@ANYBLOB="0500000002080000"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) (async) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x6, 0x4, 0xa4, 0x7fff0003}]}) close_range(r7, 0xffffffffffffffff, 0x0) 2.030844574s ago: executing program 3 (id=933): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x4040810) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x5c, 0x10, 0x401, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x4288}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @mcast1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x5c}}, 0x2000000) 1.700008521s ago: executing program 4 (id=936): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000540)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0xd000, 0x2, 0x10004, 0xfffffffe, 0x0, [{0x2, 0x1, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x40, '\x00', 0x3}, {0xff, 0x7f, 0xd3, '\x00', 0x68}, {0x0, 0x9, 0xf5, '\x00', 0xf}, {0x7, 0x5, 0x6}, {0x0, 0x3, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x3, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x7}, {0xbc, 0xd, 0xa, '\x00', 0x6}, {0x0, 0x3, 0x7c, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0xa}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x6, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x4, '\x00', 0x8}, {0x5, 0xc, 0x4, '\x00', 0xd}, {0x7, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x83, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x6}, {0x10, 0x1, 0x3, '\x00', 0x10}, {0xd, 0x23, 0xf3, '\x00', 0x4}, {0x0, 0x6, 0x4}]}}) 1.6761113s ago: executing program 3 (id=938): pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000001700)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001740)=0x1, 0x4) connect$inet(r1, &(0x7f0000001780)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000017c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, 0x0, 0x0, 0x4008440) 865.60365ms ago: executing program 5 (id=939): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000001cc0), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000001d00)={0x0, 0xfffffffd, 0x1000, 0x0, 0xfffffffe}, &(0x7f0000001d80)=0x0, &(0x7f0000001dc0)=0x0, &(0x7f0000001e00)=0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x50) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x6}, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000001000010600000000000000000d000300626172657564703000000000300012000c00010062617265756470002000020006000100"], 0x60}}, 0x0) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000200)={0x200000000000001}, 0x8) sendto$inet6(r7, 0x0, 0x0, 0x4c881, &(0x7f0000000240)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="4c000000100001060000000000000000000000000000000000000000000000010b00033264756d6d7930000008001f0004000000180012000a00010064"], 0x4c}], 0x1, 0x0, 0x0, 0x4040001}, 0x0) setns(0xc9, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1, 0x0, 0x0, 0x44800}, 0x4004810) sendmmsg$inet6(r7, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)=' ', 0xfdef}], 0x1}}], 0x1, 0x4000000) sendmmsg$inet6(r7, &(0x7f0000000400)=[{{&(0x7f0000000440)={0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x800}, 0x1c, &(0x7f0000000480)=[{0x0}], 0x1, &(0x7f00000004c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x200}}, @dstopts={{0x20, 0x29, 0x37, {0xff, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0x6}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}], 0x68}}], 0x1, 0x4000000) r9 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000600), 0x14001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xe, 0x6, &(0x7f00000009c0)=ANY=[@ANYBLOB="b702000001000000b703000000000000b7040000000000008500000032000000b7000000010000009500000000000000"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a40)={@map=r12, r13, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r12, &(0x7f0000000ac0)='\x00\x00\x00\x00', &(0x7f0000000b00)=@tcp=r10}, 0x20) sendto(r11, &(0x7f0000000b40)="01020304", 0x4, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r9, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x7, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}, ["", "", "", "", ""]}, 0x14}}, 0x44811) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x11, &(0x7f0000000600)=ANY=[], &(0x7f0000000640)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) r14 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000001e40)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001ec0)=@new_dev={0x2, 0x1bd, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1}}}, &(0x7f0000001f00)=0x0) r17 = syz_open_dev$ublk_chdev(&(0x7f0000001f40), r14, 0x2) syz_ublk_setup_queues(r17, r16, &(0x7f0000001f80)={0x0, 0xfa81, 0x0, 0x3, 0x28e, 0x0, r1}, &(0x7f0000002000)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb8c3, 0x1000, 0x2, 0x1af, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdb3a, 0x2, 0xffffffff, 0x330, 0x0, r1}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766c, 0x1000, 0x0, 0x20, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x4, 0x0, 0x1fe}}], 0x4, &(0x7f0000000040)={0x2e, 0x4, 0x0, r17, 0xc0107524, 0x0, 0x0, 0x0, 0x1, {0x10}, 0x0, r15, '\x00', {0x2, 0x79, 0x0, 0x0}}, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r18, 0xb, &(0x7f0000000000)=[@ioring_restriction_sqe_flags_required={0x3, 0x11}, @ioring_restriction_sqe_flags_required={0x3, 0x11}, @ioring_restriction_sqe_flags_allowed={0x2, 0x24}], 0x3) 864.303635ms ago: executing program 3 (id=941): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x9}) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000140)={0x3c4, r1, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x39c, 0x84, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xe417}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xffff8001}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x22ff40f8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xf}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1000}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8}]}]}, {0xbc, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1f, 0x1, @random="b8ee5003743646efb8224ef1300d6926203c926486a7d742d65139"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1e, 0x1, @random="5ce05bcc730e3337fdd9577453b5e5f7723c2c6e030b6f3c2334"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x2}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x2000000}, @NL80211_BAND_LC={0x8, 0x5, 0x1}, @NL80211_BAND_LC={0x8, 0x5, 0x1c0}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xfff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x1}, @NL80211_BAND_LC={0x8, 0x5, 0xf}]}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x7, 0x1, @random="997fa7"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xf54}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3b2}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="d20e897a81ce"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x5}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x5}, @NL80211_BAND_LC={0x8, 0x5, 0x921f}, @NL80211_BAND_6GHZ={0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xc}]}]}, {0xb0, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1c, 0x1, @random="1128d2189e9f48d31aeb7e76475dbe3bbd0f42db0c74bc44"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1e, 0x1, @random="d424ba03c52f2f02408bf839e5018ed9faa173df5adbcff7de7f"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x11, 0x1, @random="d34855c22b5c0901e058cb8ead"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x6}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xfffffff8}, @NL80211_BAND_LC={0x8, 0x5, 0x6}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xfffffffe}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xc}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x18, 0x1, @random="d7f9c142abbb2351d6d75074e82aba9f02a8440d"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x5f}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}]}, {0x84, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0xffffffff}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x3}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x6}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x40000000}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xffff}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="b2f71be656d5"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7a2d}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, {0xb4, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x44, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x40}, @NL80211_BAND_5GHZ={0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7f}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x61}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x80000001}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x3ff}, @NL80211_BAND_LC={0x8, 0x5, 0x8000}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xfff}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x1}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x81}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x44, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x35}, @NL80211_BAND_LC={0x8, 0x5, 0x10000}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x457a11f0}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x1}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xda1}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x1ff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x3}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x4}]}]}]}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x5a8}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0xffff}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x34048080}, 0x8044) 728.49654ms ago: executing program 5 (id=943): r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) write$qrtrtun(r0, &(0x7f0000000000)="43b4e10f8ef1e9a75483abfe1dcbaace34ae2d57459db76be76edc054a051c63c7b15c497e17a35c639afb5ac66665ccee7b90ce7237159aeb3f74f7450482ed546e6bb7d8fbac0d4a26ccd308a82e3d8d38cb2fb7506fd427127262712a348978dec4", 0x63) (async) r1 = fanotify_init(0xf00, 0x2) fanotify_mark(r1, 0x105, 0x8971, r0, 0x0) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async, rerun: 64) file_setattr(r0, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x800, 0xfffffe01, 0x881}, 0x18, 0x1000) (rerun: 64) 728.416038ms ago: executing program 4 (id=944): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000)=0xfffffffe, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_usb_connect(0x0, 0x3a, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010002000000404f1004000001010200010902200001010080320904000002000000000705810200020007050202"], 0x0) openat2(r3, &(0x7f0000000300)='./dev\x00', &(0x7f0000000340)={0x8209c0, 0x41}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/ttyUSB0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x8, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000100)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) capset(0x0, &(0x7f0000000180)={0x25b7, 0x2, 0x4000540a, 0xb, 0x8, 0xdbf}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f00007fe000/0x800000)=nil) 727.445684ms ago: executing program 3 (id=945): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000340)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/crypto/af_alg_restrict\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='0', 0x1) close(r1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-sm4-aesni-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="000102030405060708090a0b0c0d0e0f", 0x10) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="000102030405060708090a0b0c0d0e0f000102030405060708090a0b0c0d0e0f", 0x20}], 0x1, &(0x7f0000000300)=[@op={0x0, 0x117, 0x3, 0x1}, @iv={0x0, 0x117, 0x2, 0x10, '\x00'/16}]}, 0x0) read$alg(r3, &(0x7f0000000380)=""/32, 0x20) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 727.315052ms ago: executing program 5 (id=946): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r1, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) r3 = syz_open_dev$vbi(&(0x7f0000000440), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, '\x00', @bt={0x8, 0x40, 0x8, 0x8, 0x1ea, 0x3, 0x3, 0x1}}) r4 = socket(0x5, 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x20, 0xfffffffc, 0xdc64}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000001c0)={'syztnl1\x00', 0x0}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x418, 0x208, 0x208, 0xffffffff, 0x2b0, 0x168, 0x380, 0x380, 0xffffffff, 0x380, 0x380, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x130, 0x168, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "48ae43e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e22, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) 652.077283ms ago: executing program 0 (id=948): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000580)=ANY=[@ANYBLOB="82db3dd540efb766bbbbbbbb86dd607f00ef00142c00fe8000000000000000000000000000bbff0200000000000000000000000000012b0000000000000000000000000c907801000000"], 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0x6}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x2, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a312000000038000000030a01040000000000000000010000010900010073797a30000000000c0002"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r7, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) r10 = syz_open_dev$dri(&(0x7f00000004c0), 0x0, 0x0) r11 = syz_open_dev$dri(&(0x7f0000000600), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r11, 0xc02064b2, &(0x7f0000000640)={0x200, 0x4f, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r11, 0xc02064b2, &(0x7f0000000680)={0x1, 0x3, 0x9}) r12 = syz_open_dev$dri(&(0x7f00000006c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r12, 0xc02064b2, &(0x7f0000000700)={0x8, 0x404d, 0x2ba9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r10, 0xc02064b2, &(0x7f0000000740)={0x5, 0x2, 0x10007}) r13 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x1, &(0x7f00000007c0)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r13, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="280000006900080026bd7000ff08000100000000000800010001000000bb3800da90afe1d26d80591499547d698c8018a367905d8b0c0fa3ecbf706b4b423920e6426d61ac7e1507007d1d8f0f92d1df35458ec965f179e2e5a79d1d411aac70161f4a67d9b573d6343c276d504c7908d94ebfd6e8d02dcddf55318b456e"], 0x28}, 0x1, 0x0, 0x0, 0x22004002}, 0x4040800) r14 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r14) 651.889164ms ago: executing program 5 (id=949): pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000001700)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001740)=0x1, 0x4) connect$inet(r1, &(0x7f0000001780)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000017c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, 0x0, 0x0, 0x4008440) 585.583018ms ago: executing program 3 (id=950): openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000540)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0xd000, 0x2, 0x10004, 0xfffffffe, 0x0, [{0x2, 0x1, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x40, '\x00', 0x3}, {0xff, 0x7f, 0xd3, '\x00', 0x68}, {0x0, 0x9, 0xf5, '\x00', 0xf}, {0x7, 0x5, 0x6}, {0x0, 0x3, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x3, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x7}, {0xbc, 0xd, 0xa, '\x00', 0x6}, {0x0, 0x3, 0x7c, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0xa}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x6, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x4, '\x00', 0x8}, {0x5, 0xc, 0x4, '\x00', 0xd}, {0x7, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x83, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x6}, {0x10, 0x1, 0x3, '\x00', 0x10}, {0xd, 0x23, 0xf3, '\x00', 0x4}, {0x0, 0x6, 0x4}]}}) 584.257284ms ago: executing program 5 (id=951): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000fc0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000001240)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001280)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001300)=[@text64={0x40, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x2000000) 352.231566ms ago: executing program 0 (id=952): r0 = accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) recvmsg(r0, &(0x7f0000000300)={&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/249, 0xf9}, {&(0x7f00000001c0)=""/206, 0xce}], 0x2}, 0x2003) sendmsg(r1, &(0x7f0000001bc0)={&(0x7f0000000340)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x80, &(0x7f0000001880)=[{&(0x7f00000003c0)="35e1a87de8a3caeca0ee9c3c834e440e754f57553c1d7f4c89eb21ad41dc79b6b8ddab865ee48441df64f7c3e16373174a1747fc6b19a130868d10958dc0ba36c903df80e6e2a61e6326074bd3e0029bc31069163b0b54979c072b45d42a44b011795766bfaa2cb87f21d9dab1653d90e49c5f275298948b7df74b1e81e0a3ec079c6eb9cfe9dd59858ac6473b4cea55bfcccd3627b7261f7a248d713fc7f488ebb23ff4178099909ed60baece97518322c7adb322a30792efa61ec4af06250925b138116c39e703ce6936d03c03b9e85f20d39e19e8", 0xd6}, {&(0x7f00000004c0)="8d2124fb7c61a175697c54b7ec08a0222c9b9c9419239db733ddeb23e6a73cd60de79562a7ae0ae66595cd812a7b41d90defd29849188d955a1215fa83260a5869009d5c7f20c7917826", 0x4a}, {&(0x7f0000000540)="88def961d80f838529ec24ac767efa5241edac1427d21e8cfdc57c67d7775cee4b7e292418cbf4385596a4a5924b8e21a3662785e08bb7c13bfc6a4c5f688250b21aa8a015cef0375a17cd10f475d18ca7d58eb4ba337c916fefe279521a6ab37ae40977c1705b1de82e3fc8cd3898330b85b59676f5ef3d0a005b429f3be08fa1ce4f75a176550c3e2b506fb0f6fa1f84606a98494bdcf17e76ae", 0x9b}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001600)="1e0b8f0d3db328fda649a82de5e7741e09dd5f0a1fce4008a5280cff", 0x1c}, {&(0x7f0000001640)="b4634ff9eb3692ec43f6312ae06e8a15f94a876ac14c6b80ec67846e097f3c6753cb45946df110ddbf94742fc5fc7d4d37f11a50675f12eed38a53025c5d38552fd7", 0x42}, {&(0x7f00000016c0)="0ac29d7b39b74d8185da9089cf1b50adda823eed8e4ad14eb58eca23290cb1a69e126244d03a5db3ca4691c42f9cc1eb90a7599c5dbc393d052b564a583f0e1427b20c9c437764a3aa276efa38a15980fc8ee0f2092b1aa1589335909c54436ddde826e9fc1b9fe884a374efa6f7bbdecd0c8047deffbc7013d09c37a1891ddecd88341e1b0267712c", 0x89}, {&(0x7f0000001780)="f6fdeefa221b133561d32ae812b616efbc1250d873dda53e9ed1c227fd7f0729832ca415dedf23a898c3ec64be96e70d142c97133de15f55517e72dd63f973ba689445b9e036ff09d3cca89301e57480d847fd5eaec136a32f3dfd7356c362a933e3917488cebdca1cb526150dd357c0b8ea5097abd0ac1228944ee5bd5ac78492eb9b", 0x83}, {&(0x7f0000001840)="ab9fda17", 0x4}], 0x9, &(0x7f0000001940)=[{0xf0, 0x102, 0x4, "016ae2ed22e11ec99b19da08227817635ce1064096df01ac86303c04fad6c565fc3bbf4cb9c1c4a30474981fe66eaf2ce47b367b0af3853f907a571f1051e54d98de203e852a4d69aaa17dcfa30a48489f12383be83f5b5d2685ac7fe83bde802e7534bddc33e43493da212af762e40bed21aafdb0e488b563fc6d2ac04b8429bd678d4a0c2982bedb7a38f305b2dcf550eba41fa9dfcf2f629f73ed34543568bf86f52203c02a7122d9b96e4d4690e338d8ff9eb264a32b542929e5df47c47577a72d5a5f933f78a6bcce8828ffb30303f6005592207bdf81"}, {0x110, 0x0, 0xfffffff6, "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"}, {0x70, 0x10a, 0x830, "6426ff29a0a2e48f068d352c3152c44129d0ad13f7f396ba76bf1845b808f0ee1b6d7998f975c1ca32dd8f7e04f15f2d6d7f844c4230c1f2a5787322d0c8f020f3adf626d90f6bedf188f1184f34b9d8c1839e23d904b99b86"}], 0x270}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001c40), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000001d80)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001c80)={0x90, r3, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_vlan\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3f}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vcan0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x90}, 0x1, 0x0, 0x0, 0x80}, 0x400001c) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000001f00)={'gre0\x00', &(0x7f0000001dc0)={'ip_vti0\x00', 0x0, 0x1, 0x40, 0xdb3, 0x1, {{0x3d, 0x4, 0x1, 0x1, 0xf4, 0x68, 0x0, 0x79, 0x2f, 0x0, @remote, @multicast1, {[@rr={0x7, 0x17, 0xcf, [@loopback, @dev={0xac, 0x14, 0x14, 0x1e}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x29}]}, @cipso={0x86, 0x25, 0x3, [{0x7, 0xf, "f4b9e15a4b7a2533e4471b77af"}, {0x1, 0x10, "c53c278ec94a1ff8cede79a706c2"}]}, @noop, @ssrr={0x89, 0x7, 0x5a, [@rand_addr=0x64010101]}, @ssrr={0x89, 0xf, 0x57, [@private=0xa010100, @rand_addr=0x64010100, @multicast2]}, @lsrr={0x83, 0x17, 0x4, [@empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback]}, @timestamp={0x44, 0x20, 0x53, 0x0, 0xf, [0xe, 0x0, 0x0, 0x48, 0x100, 0xf8, 0x9]}, @timestamp_prespec={0x44, 0x54, 0x90, 0x3, 0x3, [{@rand_addr=0x64010100, 0x3}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x5}, {@remote, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@rand_addr=0x64010100, 0x2}, {@loopback, 0x6}, {@private=0xa010100, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xf}, {@remote, 0x1}, {@rand_addr=0x3, 0xed}]}]}}}}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000001f40)={@local, 0x52, r4}) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000002080)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002040)={&(0x7f0000001fc0)={0x58, r3, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}, @NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:restorecond_var_run_t:s0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x800) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000020c0), 0x3) r5 = socket(0x2, 0x4, 0x5) ioctl$XFS_IOC_COMMIT_RANGE(r5, 0x40585883, &(0x7f0000002100)={r0, 0x0, 0x2, 0x1, 0x40, 0x4, [0x0, 0x5acff3f4, 0x3, 0x5, 0x7, 0x6]}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000021c0), r1) sendmsg$TIPC_CMD_SET_NETID(r5, &(0x7f0000002280)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002240)={&(0x7f0000002200)={0x24, r6, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x5}}, ["", ""]}, 0x24}}, 0x10040001) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002300), r5) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000002400)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002340)={0x4c, r7, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) bind$llc(r0, &(0x7f0000002440)={0x1a, 0x304, 0x1, 0x1, 0x9, 0x6}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000024c0)={0x4, &(0x7f0000002480)=[{0xfa1b, 0x7, 0x2, 0x8}, {0x7, 0x8, 0x40, 0x2}, {0x1000, 0x6, 0x6, 0xa1}, {0xfff, 0xf0, 0x6, 0x3}]}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002540), r5) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000002680)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002640)={&(0x7f0000002580)={0xb0, r8, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x41}}}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xfff}, @NL80211_ATTR_DISABLE_HT={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x100}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}], @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xffff}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x1, {0x7, 0x81, 0x8, 0xa}}}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_MAC_HINT={0xa}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x3800000, {0x3, 0x7, 0x175, 0x3}}}, @NL80211_ATTR_USE_RRM={0x4}]}, 0xb0}}, 0x4840) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$NET_DM_CMD_STOP(r2, &(0x7f0000002780)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002740)={&(0x7f0000002700)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x20008090) r9 = gettid() ptrace(0x4208, r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000002880)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002840)={&(0x7f0000002800)={0x34, r6, 0x600, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x14, 0x9, @l2={'ib', 0x3a, 'bond0\x00'}}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x911) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002900), r2) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r10, &(0x7f00000029c0)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002980)={&(0x7f0000002940)={0x14, r11, 0x203, 0x70bd25, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x2000c804) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000002a40), r5) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000002b00)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a80)={0x3c, r12, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x300000d0}, 0x840) 285.803868ms ago: executing program 5 (id=953): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000540)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0xd000, 0x2, 0x10004, 0xfffffffe, 0x0, [{0x2, 0x1, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x40, '\x00', 0x3}, {0xff, 0x7f, 0xd3, '\x00', 0x68}, {0x0, 0x9, 0xf5, '\x00', 0xf}, {0x7, 0x5, 0x6}, {0x0, 0x3, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x3, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x7}, {0xbc, 0xd, 0xa, '\x00', 0x6}, {0x0, 0x3, 0x7c, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0xa}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x6, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x4, '\x00', 0x8}, {0x5, 0xc, 0x4, '\x00', 0xd}, {0x7, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x83, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x6}, {0x10, 0x1, 0x3, '\x00', 0x10}, {0xd, 0x23, 0xf3, '\x00', 0x4}, {0x0, 0x6, 0x4}]}}) 285.246782ms ago: executing program 0 (id=954): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000004c0)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000500)={0x2, &(0x7f0000000540)=[{0x30, 0xc, 0x3, 0xfffff030}, {0x6, 0x0, 0x2, 0x50ab}]}) sendmmsg$inet_sctp(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)='a', 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000000100)=[{&(0x7f0000000140)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000402"], 0x30}], 0x1, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="8d6d2dbd7000a27a24ef2b361b2808000300", @ANYRES32=0x0, @ANYBLOB="0c009900040000004a0000000400cc001c0070000400040005000200000000000400040005000100000000000a00180003030303030300000400cc00"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x80) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x44000, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x75, 0x182) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0xa1, 0x3b, 0x400, 0x270bd24, 0x25dfdbfb, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x8081}, 0xc048) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000380)=@usbdevfs_connect={0x5}) 274.664823ms ago: executing program 3 (id=955): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000004c0)=[{&(0x7f00000016c0)="99", 0x1}], 0x1, 0x3) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000001700)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000001740)=0x1, 0x4) connect$inet(r2, &(0x7f0000001780)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000017c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f000000b980)=[{{&(0x7f00000001c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10, &(0x7f0000001900)=[{&(0x7f0000000200)="ddc593a1f4", 0x5}, {&(0x7f0000000500)="4cdb93c66e9c7d4f9162b9202055422a5d8c871aa4c1121159da31bbd2f3978b72844336836961b59408a66f5a8d43bc2cb68e32417017226fd34063e6566cc359f58d32c95f35521e2a05b1bb6f95dc45453f7e51da30149e", 0x59}, {&(0x7f0000000580)="4754e582d053bc39236cafe4d1eab23495fa06eb890105c8b9d2", 0x1a}, {&(0x7f0000001800)="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", 0xff}], 0x4, &(0x7f0000001c40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x3f}, @multicast2}}}, @ip_retopts={{0x70, 0x0, 0x7, {[@ssrr={0x89, 0x2b, 0x59, [@multicast2, @broadcast, @local, @multicast2, @remote, @empty, @multicast1, @local, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x23, 0xd0, [@multicast1, @empty, @rand_addr=0x64010102, @multicast1, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x10}, @multicast2, @rand_addr=0x64010100]}, @generic={0x44, 0xf, "8fc98f62775bf29388694dac82"}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xdb}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3ff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @multicast2}}}], 0xf8}}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001d40)="9a94bb6ff697e2659c89c80b23aed75395d2abc7403aa1818ebc7ec903ea49f6844ca1fe321b0d9d44b538c43016b673cf437407044e9c170f84150d95690932b1f01be8f7bdad1149d9ff97c2ed0558ef68b19a94bee3f45037529fbbde1deeb95a5a7c06d3822093475ff9c94659cb57297448a95fcdffa40442fa65b10b26d8553cb2f1a7cfe601a085121030e14b01adbb594526f3daac84443c996aee1b5042f55f2fbe7c08cd6200d77d267a1dd57f141b40683aaed678b42ef4ed378728ff586441f3e76e71758c9d4c67262dc358d12ebefbbc409327477c65ca6dcbda37584b57bcaae61fa7", 0xea}, {&(0x7f0000001e40)="e371ff39569fc1648c4a148f8d6fad90d8c9adaa41aba315027df18c774af682a842d752b46ffb51a99742df7ecd8aaab2418fb2d769", 0x36}, {&(0x7f0000001e80)="b1bdbc078b4314d8596ee9c29237b52e881bf5ac10f337f1eafbae726d7f13458698b8479869c4bf711bb2923112cc90c5904be971edeb3a4c633df037fa8d70cd34e8967d22ff44b541600cccf22df8f14c180305a3685c196411e88b0899d682839b42d9758fd4e58850fdfad8e64128be150592f255dab35070849dd8f3f0f31e3e1376c0ead27fc10dd27df4de03eeb4ede2769d3d0861f932ba32595f72945a2cf662dc4056602681", 0xab}], 0x3, &(0x7f0000001f80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @rand_addr=0x64010100}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x400}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0xa0}}, {{0x0, 0x0, &(0x7f0000005500)=[{&(0x7f0000002040)="862cc64680dc02ebd15c09f6dc252a1dfd2a00ffe2deda13379adae1f8f016edd0ed68059a303c4c4016e4ef4497324e9dd7565399828d18898481e1aa0bb06e0128aaaef5611914f5959cc38de236e9b777342ff25cf0665f810c493a3a8d020bfe0d3b96360150c735b91ecfe9a886f08f5636ed9108b1506ede980697786be6f29593527197149c55e05a32a3b8211f3296d7e5445690b2329f07c0381c674f83c7612381fb4cdc3fe397d3b922a702dcb82c71395f6ff1c88d4c7d387bbea6a1eec64f0b69c876477006b2f31f377c7fda249875dddd237c90dddfd6475fcb7dc7614df31a5ccebd03a0ff07dd7fd2e25de929b5cb40fbddf6b86dbefd0a61d6a0bdffb75b84b9877c382dc8356b934428828714034968372777c2b75d836954e6abe60285b42c6e7e4ce03147b6af347ab31a29beabfad1efae9cefd9ddf2b2d9d44426f9d80f0b2dc4b8fcc0206a53d141f0d5e0e79e9f48dd5240b9a01d7823e5edaf647caa745966b723fc2039c12d96568be21244fe27a4197e5b160603d4ddcea5d9a11b152e4fb4b829aa7eb3825a239e5a090287902dbe6f93f01baca3640bcddbd3b2b27655482145e9597c7cb9ad3b8400f0449cfdfce5a2aeb09cb23ab00d7b38e4809c73d4cd3676968de316846410fcbbcb2124562278bc0f7070ce42d689549e0d4e109feca9c553aa80b6163bd691f90cc6659932c20fd83255f14456ab2e1d3c3456deefb3ad51583fab86421b92c4dfee6eaaa8eb6f1fc403f1db21fbe67057fbad7c2c23ab8c4e9a0c6342f9c691524fb0a94be8e9ab5eaf5806a7f7a7b37ab785ac4eec6e8ac84320ba3c4234ed200b32a15362464c309a521df3c1b244a79525037d5eb6ca1e7805c3c7c29b1684555156ce11cd0ea2c6c7c793d7232928ed6b3c4ccdf9ed5c566d5f5cbe62269cf6d85b64272bd2286178bc3db2509e9e4a1d0ff4594b6750db95c0fc333b54bffbb08fd62350e867b812efaf8c4c36a9636ce7a46b923d06d29fccb9bfcca7c318a20a4d381d682c2135881b79ac529b2554c70f4397eea547551398663c863e140f48bc54f8491b0ca3371188b2d0dda39a1ebcdac4ec915fc72ba3c59df6aa89b18f5aae594e401e8eb6f00b92d935e5a061cadf67eff9e99b66b9ff1f620134da84c48bef2853b0e8007e9fc88495f34fb886cbbbcb0847d90ed1e8f385aa322544aa594d452b8542d815c0fcbc695938fad7bff58b75b32166213c29e96b1f57dc6000c70bb0c95e08497cee0a95d036839d84c0018855e1f0853fd2f418d68a5b1529bfabc7309a935934cd6e5361afd51b85927ea469524e9c2550efe77c9d5ec89477c48a36c9452578ddafae25b3d48cf75d1115fd0f9ed2c1d14a5d4e7ceb42ba719512e4a145a65adae1d513cd5b34f8b6d0eb8745d3e2257b34e2c8e4c45bff5f4391095322ee6c19eefc935d318da5ae75c6d4b9dfbc1278f76ddb9f7fc06a8a619ecc10d5a7dcaa1d921d5d7fc6d145e73256a2f2c7edc65dfa5a3bc3d987eed75fc82c72ef0e9d2cb011d4c72e89de99a90ac623d60f98d44afb8d827a96a4ee21fa8b2fba00052fb9001115f857aba684d60c85f4a785dbaad804e1e646deba8e668f436107ac80e5189b84ff0b8c15a5bd2da101100e4159467a826c862f1fb0e15c88e82df24cac9e83d84783b487efe8ead7d68d22ee798502033762d1c218f687460f4e69f8850c7f1abc7f5e953c90f99007c18f6205ff7b81e65905ffd8dcc5a276f5eaf938c98ac9b83ba8ceeb8044fd03098077d7ae6e328360cbdf326443828633c31a7e00d8d81da767af1f27ca4f5629c1d8eaad233454dd8d152ed9c4696c0848225ad9c244eb52a891343d98c99473836d363528abb7e339710867dfbe6c743f62834f214b077176941fb5dbc5d82b94dc41c059901c27d3faa54c42d7ab89e07678e419495c3f82354de8252ff557f6afb96b906cc352a6ebc4128dfc908681bac14b3acec04d36d8a42acd49428069adb5c09d5f0fee34e0c68dbdab40ca94a435a9ff004d285237668aef2e70dbb29d7fd2e32d3295c8e00d31c00097d34a8b47b180d9c22ded47763a5da8823837d417dde8df1b838a0f5f9b99430df6cb24323b831906a75a8e55b9cd4ae148ea03d0c2249ff278e770ff86149d32d077d4d8878389b715de704984b2dfa7d623ab961b5ea06d946bf2e5e86cefc834d96ffd9d82af2bb2efa3133d77972a3d53a670d7c505ff5de8ba75d5823f246f55598003905ca46eb325f84d3bc2e3e8a8212a67137d4a67b4089d72d7ca31f21a91709ff1e736ca9c9ace5f2cfee923804d511764dab4e6a121015dbdcd0c9f7489cd16ea563d0839d842660555e957e37c14fc0f1456af2596a0d09cbc57e0ad1abf8987cbe9ee88ddeb8cb094bad99edf9fc22b7997f2167331f2b9a92e750b6c9d90e7db84dd3b4db719b7b5a81caef5644c936720a1e87cad057dbeb02fb91dedb261e8eba89930cc8c3d9b541c38256bacbeefa036c60b6fb141b577d49496a2539b6b23a7ffd658ea5dea2b54bff05adb8abbec89d8f767d0cac12e10cfa8b715361a20cc29a882df7974b15896df6f791f680830b1c780d8dfee8d15378b6ffaa07d40a72cd43ab9d28648a5e62c07ee3513bc6f4ee5893cd0c1f5a702272103403024b116d42f68c22df3f3ca043e93d346c5c4e0cb7393c898073246db27135c502d5c77d55f9a2752408f0cabbef5c2a239767a4140212471ca28b967cb36471785cc43444b7c9575e8ebbcefdb1819a3f2bde82e2a2d645c1d9b4f16c4b90b88b91a27635b5722ae012525c4d72efcab2d2bc8ff5f4416483b29d76f419e1b54b4567a8ca77b4ec03f1add6edd8a1271d720885fbe89387e65e8c06dcf6aad0c17f26d2d955fdfb2912a7114698581cd00ec870d0819eaf5bd75e007a2dbb54ce9dad04e32c4794dfa66e5e686a0f5519eabdb89441c23876b7c7dc91bf292251063be06804d23c1367719074e939a93f528172b5b4e570457bf7abfb38b78ed299be0976a3b1b7798185298437fa4adc48fa3fcbc9c578b61cd62c7a2c142fff8b467f308eb2af3d65bd8b6b3ec195bae1517edaae2d94bc195e88daf4f526711ec9b728f7ce30759734ae4cedeb4927e39d4e1b72246c767027d2c8ecdff506e8f57b78d572c4e809ee8a02e2893c06f5a3b29c119242e4d76aef2dbc1843ab466040a66659aff9f1fa5eb6c50b27103daec1b5c4337a6a0ed349cf76455fc605ffd73eb6f1df35703c8602ffae444fe2e669f204f090d289d960fa4516106ab3c393e26bfce93116c6b44533542d5eed1567e54b083297db383d299e788e0f937dca81681b777a3a4a1e875d9e2335bd66f2eb7c2039b96cb0ebc5beaffbd3af5fe7015b939835916b0d49a3e4665760193476735fd4a8867c009ae799ac47aee3826db361109e3f8acd141c12a4b30a97be7cce8d9b7090de647b1536a5a03dae952a77d6821f1a7c2f07ce5630fd65fd225af5f3ed8ae5c9a6be70e0fd843940e04497a503aba3107bcbf6213c4144e5acb4b56ef3380c67a10b48a79c01ce6309ac3e86b65be5a216de79e64bdb02ea8442c8ad7642859867022b467373e471f3897f1b91f925cdc10b5110848b9488d28a150cb3b8ea71a8c193b839d5e2591c2f743fd0a324d616d3da1fc8e31733b99833d080abce8dcace36e89f72c685dfdf9a270c3435b22605cac595f0082979a314eff1c606311705223e5fa26c904058e977495c507df7741dcb800a9c202078a00aef7f8391d52af4f8a2f3f4650c60be182f8b06d4e47a9a3cb387055787c42ffbd7c8560c1c8c4d4e73aafefb0fc35f0a9102f221535db4be65f821a0645a1ff81bfe16b67767bf4d28caab7f63c61cbd6d6f101f5ddeb8bbcd468e790caa0a105b1081cf9a97d02610b797b4263b6754ac68f587d2dfccee628d634d4da7c9d342dfba7e7d0bc3a0575aa4ca137c10f9231d7733d554fd646e5711228d75addb820220f896bddb46176d811001b7fcd9e4cd9774749b5acfbf2f8994f52dc1c714b80e13f3d2fc1dbb1f5357ea1ff1d3ca72a62d449fc95e08dd11983ba41314910b078f819c5b2a9b9befef683094f41572028c3416b3668e3288c69245498a59d325b1684c8a3e2633ce30129c75993c063647e7188f225780196c5a4768f0a00ab333fe82f3284c4704cfd8efefa766021274937a1a60743111f1d68bf398b3fdb3ddf701fda092155818b1cfeda82dbd6914001b4c159488d3efe5e725f155f3eb20ba357855036c2a00d6c00b2aae9a9b4ee3b6ba74e91b5f5630e4b902d53d376a02f806628e902c0867b57e4be25d4be9763b61f49dcd57d725096ffe8418d71de25645eaf8a7a80167151aa18735229cb49cdf07976c432dc4b726f011e125487fcd42e6d18d92834133a478230a5a24e27db937f8cdf9d7aaa2cd6826501b1d3f7fd64cd1ed4f1511aacfa51db6d8d88ad2bcefa62024c2697d3d58ad0fe3bb5dc7defd4c609b94f616752a3d8ea93c85426c53214d6787d8466cf6350a8401061e012e951e15f94bf47e7524d5bce949c958891844707e62fddfe16d7c332989b5a86a12d0c1524acff34ce5047bbb5214dd8dab3e45888151cacd17b15f3e4f0513ff1998fde040a3ff557c5cd8df9b44722bec08c3b1d506bbd2f30496a7db30f52e2fd8165f199fff5a05c76e8ab7b7b67c6aa040905277ad9a4a0913b34125888acf493ccb9d31b6dd5d942834fc9b1213217710b4ab713565c208f4cd2484c2ffcf2f2069692c1bc359077908184caba56434cad03b0b06f747ed78d730a62e0092ad980d53bbabf0759d83f0622cd444a3f31fdc8abf8651b73eaf7f965628d44d3740268a6647121644746846a8978e1cd60580c2b7dd99e23b92ad1f8160276274a551a7ca2a3778eb37d890cf7c0a0bb6a6419d5f090f803c653e8594e3e4150833d8af07e1f553700877404d2c26ac9b976397944a4d100ab5e3f7ec4303b1697e582506eb06c35df93656ce276b8f32f55827b994af503f90d7628e6cbe62f0c8aca1b4be21e505793a21e591695f31c9fceb0d28a357b9a5559cb5584891c2b8f250302fdb47a31d13de9d4b2d03a32912a2b3230cd148c4d26a64f0157f5b87f774b69bd3f06d57e873ef09ac1b1e75515e122ee10080617bf01ebf3a35903d3295a956f94493c6ef1292aabbcdea74bd16b3aa30095cbb7646a807ccec4bf486f195610d86d9db540c656dc030906504edb15669034b8cf435999f691bbf6956c4773000943c60752ac8c958e56c5c5ff46522409783f86748771c5df74acbc7fc6d0416b66914e01132749a1439caad55ec509ef5473b664f1f3a789748309d7a1cbe77cbb9474b36543f645128f146ae81fd2001576eff5457fcbc79952c314c963ec9851d18da90bb078502e36f2b9a71962bae283f02efca5fa43a208414bcee5a0da7c375076a7a32f386d74b4a542afd378c96e15c18e28c64b6018379c6a2189f69aa285026ec80ec1e430d5d0e30998ed897152319690d2984217d9ee14d6c34b86f1b2923a69b19da76308faa4333a0f2585718049b1d69f4faa601fedd9107d43181b81158bb39440cf0aff8270b33168ba70fe8df652cef5109ce30f974af607c439530e13f03add68f9461cb6e87ee0d13912b48d95bf68d69b01ba055a7ee2b745a842cbbb0410727468782bebb5555d8ab463a16c1c154605503acfe66e369af820ee6ad574eacd8f34", 0x1000}, {&(0x7f0000003040)="0b36e6656cc967ba1e8f67a9900d8c9660b393fffcec051f8632fe6c9904595bf05ea4b9e6f849f2c8d36cc1e238c66f99bb69f7f401bf0fc4fd1942ba9073b6a186db76ce3bd7df46cf53f60513f21c09575dd382a304e1b97bb59ab236b5168defa718ade939af3d", 0x69}, {&(0x7f00000030c0)="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", 0x1000}, {&(0x7f00000040c0)="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", 0x1000}, {&(0x7f00000050c0)="80ade79ae0794a987eac14ba805b6775f8cb0cd23ea8653e597d6d69cea9a2bb6725314ceabf6ad739daeba4f1779b44cd3bcf9c72beefe3631d922220e84ee0c7f60344bdd97c1e7205c1f563c442956f8a420abee04ac5cc57aabd1595af797f7b8d626dfc33e288674de2ddc3c7aac2a1cb4571b6b628bc232601fdb25f584ed9b635a2c28720bc8ea5f68f80685c5f08dfe2c4bd7c8058b0e146ed6036d3c369fae8a69250f847236bffa5bf57600e7268e38d8712b42320ee00fccb22ae0a5bcb96eb39b7374853a0", 0xcb}, {&(0x7f00000051c0)="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", 0xfa}, {&(0x7f00000052c0)="5c51ff3ce6442649d1a98108e825f248c85a74bd2e92b3a5b177ce43bf8f90470bc633e50b44263978801eb577b225a407a8442ca456689326bb625fb46a353aa3f8a99dcbc3dae1bb121d9afdd479848550260efe057152b0aa231451c62abca7f1f40cde166315c2469e94f24cba64736393169f4c65d6bf61485f38e4bb8229549552e195b4c2c5b1a4be43ce803b44704a28aa8fe1f4dbf978b8e1e948fdc10e442ae06a61643272d9ad21110dbc849e2ec968054473a5ea78a93935e4eec593a0fb5cb3b79d49604c978368ec81518e3b757f45a628d24f5bffd10d95cddc3d1d9a7de4c002b36914e569", 0xed}, {&(0x7f00000053c0)="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", 0xfb}, {&(0x7f00000054c0)="4e47aa9125bcef0fd78a752130a886bd294087", 0x13}], 0x9, &(0x7f00000055c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11}}, @ip_ttl={{0x14, 0x0, 0x2, 0xd3ca}}, @ip_retopts={{0x94, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0xbc, 0x3, 0x9, [{@rand_addr=0x64010101, 0xd}, {@remote, 0x1}, {@multicast1, 0x8}]}, @timestamp_prespec={0x44, 0x2c, 0xb6, 0x3, 0x1, [{@loopback, 0x2}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x2}, {@private=0xa010102, 0x3}, {@multicast2, 0x5}, {@remote, 0x3ff}]}, @rr={0x7, 0x3, 0x3d}, @timestamp={0x44, 0x10, 0x33, 0x0, 0xc, [0x3, 0x1ff, 0x40]}, @lsrr={0x83, 0x27, 0xc6, [@loopback, @loopback, @multicast1, @empty, @multicast1, @multicast1, @rand_addr=0x64010102, @remote, @loopback]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffffb7}}], 0xf8}}, {{0x0, 0x0, &(0x7f0000005800)=[{&(0x7f0000005700)="31ddb19e21e72a3ca2b235ab88", 0xd}, {&(0x7f0000005740)="8f909a7871596aa28a2133a1b97717d562ad51ce1a20d0ac93827b110f56efbc062750740afd4fce51ba937aaedfb6d1bad79836039219196a6aa68c7a94484a564809f4b0ff24c591e153ce7373aaf54743a199a8c097ccc3470b6acc81e378d3000e18df63737074823ad54c7b0c3f24c7736d43a28e8c2a2e905eed309975b17ed4ea99e7f210cb8d6d85afc4388e37c0972b5cf44bf0c32944bf718734b25c444634d4939288e8af202ecf025b5d6a5f554f9f6c2d73acdd283693", 0xbd}], 0x2, &(0x7f0000005900)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x74}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0x7c, 0x0, 0x7, {[@cipso={0x86, 0x3e, 0x2, [{0x5, 0xc, "b0893f5951f03d05ed14"}, {0x6, 0xc, "2212b7b909705969b2de"}, {0x7, 0xb, "cfee2e0d8ec01e0012"}, {0x7, 0x7, "7490d3a971"}, {0x1, 0x2}, {0x0, 0xc, "f5c26ba571471c82391e"}]}, @timestamp={0x44, 0xc, 0x14, 0x0, 0x8, [0x6, 0x9]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x18, 0xdc, 0x0, 0x3, [0x7fff, 0x80000000, 0xb, 0x7, 0x4]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @empty}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_retopts={{0x74, 0x0, 0x7, {[@generic={0x86, 0xb, "60cc496b99484bb157"}, @rr={0x7, 0x17, 0xaa, [@remote, @local, @loopback, @dev={0xac, 0x14, 0x14, 0x3f}, @local]}, @cipso={0x86, 0x1d, 0x3, [{0x2, 0xd, "5959531ede9fcf785928c2"}, {0x0, 0x4, 'Pf'}, {0x5, 0x6, "a225cd20"}]}, @ssrr={0x89, 0xf, 0x5d, [@broadcast, @local, @multicast1]}, @rr={0x7, 0x13, 0xdc, [@dev={0xac, 0x14, 0x14, 0x42}, @loopback, @dev={0xac, 0x14, 0x14, 0x1e}, @dev={0xac, 0x14, 0x14, 0x40}]}, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffff7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0x1c8}}], 0x4, 0x4008440) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) 129.065218ms ago: executing program 0 (id=956): socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}], 0x90}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) socket$pppl2tp(0x18, 0x1, 0x1) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x8100, 0x0) dup(r2) 128.334254ms ago: executing program 0 (id=957): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e80)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x49}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r1 = socket$inet6(0xa, 0x3, 0xff) sendto$inet6(r1, &(0x7f0000000500)="6000000000080065010000003b000000000000ffffffff0000000000000000000000000000013b00", 0x28, 0x0, &(0x7f0000000540)={0xa, 0x6, 0x0, @loopback, 0x1}, 0x4e) 0s ago: executing program 0 (id=958): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x4000, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x6, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r1, 0x5, 0x21, 0x0, 0x0, 0x0, 0x8001, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='270', 0x3) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="220000000400000010"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f00000000c0), &(0x7f0000000480)=r4}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0x1d, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6e7f}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_val={0x18, 0x9, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0xca}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0xf9, &(0x7f0000000640)=""/249, 0x40f00, 0x42, '\x00', 0x0, @fallback=0x1, r2, 0x8, &(0x7f0000000740)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000780)={0x1, 0xf, 0x7515, 0x22}, 0x10, 0x0, r2, 0x5, &(0x7f00000007c0)=[r2, r2, r2, r2, r2, r2, r2, r2], &(0x7f0000000800)=[{0x3, 0x1, 0x6, 0xc}, {0x4, 0x5, 0x7, 0x3}, {0x0, 0x1, 0x7}, {0x0, 0x2, 0xe, 0x6}, {0x4, 0x3, 0xf, 0x4}], 0x10, 0xfffffff1}, 0x94) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000940)=[r4, r5, r2, r3, r3, r2], 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80), 0x8, &(0x7f0000000cc0)={[{@index_on}]}) mount(0x0, &(0x7f0000000280)='./config\x00', &(0x7f00000002c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r6, &(0x7f0000000ac0)='dummy_udc.0', 0xb) kernel console output (not intermixed with test programs): 489982][ T7473] ___sys_sendmsg+0x190/0x1e0 [ 167.489998][ T7473] ? __pfx____sys_sendmsg+0x10/0x10 [ 167.490018][ T7473] ? get_pid_task+0x106/0x250 [ 167.490039][ T7473] ? find_held_lock+0x2b/0x80 [ 167.490064][ T7473] __sys_sendmsg+0x160/0x210 [ 167.490076][ T7473] ? __pfx___sys_sendmsg+0x10/0x10 [ 167.490112][ T7473] do_syscall_64+0x123/0x790 [ 167.490131][ T7473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.490143][ T7473] RIP: 0033:0x7fc72479f559 [ 167.490153][ T7473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.490163][ T7473] RSP: 002b:00007fc7256ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.490174][ T7473] RAX: ffffffffffffffda RBX: 00007fc724a25fa0 RCX: 00007fc72479f559 [ 167.490181][ T7473] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 167.490187][ T7473] RBP: 00007fc7256ee090 R08: 0000000000000000 R09: 0000000000000000 [ 167.490194][ T7473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.490200][ T7473] R13: 00007fc724a26038 R14: 00007fc724a25fa0 R15: 00007ffffe42c058 [ 167.490215][ T7473] [ 167.588016][ T5754] Bluetooth: hci4: command 0x0c1a tx timeout [ 167.588053][ T5754] Bluetooth: hci2: command 0x0c1a tx timeout [ 167.588071][ T5754] Bluetooth: hci1: command 0x0c1a tx timeout [ 167.609873][ T7483] Unsupported ieee802154 address type: 0 [ 167.610590][ T7483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.386'. [ 167.610606][ T7483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.386'. [ 167.635344][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.635390][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.635417][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.635440][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.671655][ T7489] netlink: 20 bytes leftover after parsing attributes in process `syz.4.387'. [ 167.736294][ T842] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 167.766730][ T5839] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 167.843176][ T7502] capability: warning: `syz.4.389' uses deprecated v2 capabilities in a way that may be insecure [ 167.846279][ T7502] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 167.846294][ T7502] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 167.846388][ T7502] overlayfs: failed to get uuid (39/file1, err=-13); falling back to uuid=null. [ 167.898293][ T5839] usb 8-1: device descriptor read/64, error -71 [ 167.918578][ T842] usb 6-1: New USB device found, idVendor=426b, idProduct=0002, bcdDevice= 0.00 [ 167.919399][ T842] usb 6-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 87, changing to 10 [ 167.919415][ T842] usb 6-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 167.919428][ T842] usb 6-1: config 1 interface 0 has no altsetting 0 [ 167.919443][ T842] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.127056][ T7471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.127360][ T7471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.140731][ T5839] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 168.145831][ T842] usb 6-1: string descriptor 0 read error: -71 [ 168.148948][ T842] usbhid 6-1:1.0: can't add hid device: -71 [ 168.148991][ T842] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 168.151874][ T842] usb 6-1: USB disconnect, device number 4 [ 168.271830][ T5839] usb 8-1: device descriptor read/64, error -71 [ 168.393139][ T5839] usb usb8-port1: attempt power cycle [ 168.634155][ T7533] netlink: 36 bytes leftover after parsing attributes in process `syz.0.394'. [ 168.634177][ T7533] netlink: 16 bytes leftover after parsing attributes in process `syz.0.394'. [ 168.634206][ T7533] netlink: 36 bytes leftover after parsing attributes in process `syz.0.394'. [ 168.715798][ T7537] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 168.747761][ T7539] siw: device registration error -23 [ 168.756741][ T5839] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 168.777497][ T5839] usb 8-1: device descriptor read/8, error -71 [ 168.782404][ T7541] FAULT_INJECTION: forcing a failure. [ 168.782404][ T7541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.782426][ T7541] CPU: 2 UID: 0 PID: 7541 Comm: syz.1.398 Tainted: G L syzkaller #0 PREEMPT(full) [ 168.782441][ T7541] Tainted: [L]=SOFTLOCKUP [ 168.782445][ T7541] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 168.782452][ T7541] Call Trace: [ 168.782456][ T7541] [ 168.782460][ T7541] dump_stack_lvl+0x100/0x190 [ 168.782481][ T7541] should_fail_ex.cold+0x5/0xa [ 168.782497][ T7541] _copy_from_iter+0x1f4/0x1690 [ 168.782515][ T7541] ? __asan_memset+0x23/0x50 [ 168.782534][ T7541] ? __pfx__copy_from_iter+0x10/0x10 [ 168.782556][ T7541] ? __pfx___alloc_skb+0x10/0x10 [ 168.782586][ T7541] netlink_sendmsg+0x94a/0x1020 [ 168.782608][ T7541] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.782631][ T7541] ? selinux_socket_sendmsg+0x198/0x2f0 [ 168.782661][ T7541] ? ____sys_sendmsg+0xa4d/0xbe0 [ 168.782682][ T7541] ____sys_sendmsg+0xa4d/0xbe0 [ 168.782696][ T7541] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.782708][ T7541] ? __pfx_____sys_sendmsg+0x10/0x10 [ 168.782726][ T7541] ? lock_acquire+0x1d1/0x380 [ 168.782739][ T7541] ? get_pid_task+0x2a/0x250 [ 168.782755][ T7541] ___sys_sendmsg+0x190/0x1e0 [ 168.782772][ T7541] ? __pfx____sys_sendmsg+0x10/0x10 [ 168.782787][ T7541] ? get_pid_task+0x106/0x250 [ 168.782807][ T7541] ? find_held_lock+0x2b/0x80 [ 168.782831][ T7541] __sys_sendmsg+0x160/0x210 [ 168.782843][ T7541] ? __pfx___sys_sendmsg+0x10/0x10 [ 168.782862][ T7541] do_syscall_64+0x123/0x790 [ 168.782881][ T7541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.782893][ T7541] RIP: 0033:0x7fa574f9f559 [ 168.782903][ T7541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.782914][ T7541] RSP: 002b:00007fa575d8a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.782925][ T7541] RAX: ffffffffffffffda RBX: 00007fa575225fa0 RCX: 00007fa574f9f559 [ 168.782932][ T7541] RDX: 000000000000c818 RSI: 0000200000000080 RDI: 0000000000000003 [ 168.782939][ T7541] RBP: 00007fa575d8a090 R08: 0000000000000000 R09: 0000000000000000 [ 168.782945][ T7541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.782955][ T7541] R13: 00007fa575226038 R14: 00007fa575225fa0 R15: 00007ffc7a818388 [ 168.782978][ T7541] [ 168.808616][ T7543] xt_hashlimit: size too large, truncated to 1048576 [ 168.875628][ T7548] process 'syz.1.401' launched './file0' with NULL argv: empty string added [ 168.877882][ T68] Bluetooth: hci0: command 0x0401 tx timeout [ 169.029248][ T5839] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 169.060059][ T5839] usb 8-1: device descriptor read/8, error -71 [ 169.115989][ T7563] IPv6: NLM_F_CREATE should be specified when creating new route [ 169.116220][ T7563] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 169.116231][ T7563] IPv6: NLM_F_CREATE should be set when creating new route [ 169.116281][ T7563] IPv6: NLM_F_CREATE should be set when creating new route [ 169.116301][ T7563] IPv6: NLM_F_CREATE should be set when creating new route [ 169.119781][ T7563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.406'. [ 169.119919][ T7563] openvswitch: netlink: Message has 8 unknown bytes. [ 169.120683][ T7563] overlayfs: failed to resolve './file0/file0': -2 [ 169.181793][ T5839] usb usb8-port1: unable to enumerate USB device [ 169.210997][ T5901] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 169.211419][ T3378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.373071][ T5901] usb 9-1: Using ep0 maxpacket: 32 [ 169.373574][ T5901] usb 9-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 169.374454][ T5901] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 128, changing to 11 [ 169.374470][ T5901] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 169.374483][ T5901] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 169.376197][ T5901] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.376209][ T5901] usb 9-1: Product: syz [ 169.376216][ T5901] usb 9-1: Manufacturer: syz [ 169.376223][ T5901] usb 9-1: SerialNumber: syz [ 169.377602][ T5901] usb 9-1: config 0 descriptor?? [ 169.389195][ T7572] ip_tables: iptables: counters copy to user failed while replacing table [ 169.411554][ T5901] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input9 [ 169.420516][ T5126] xpad 9-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 169.429811][ T5126] xpad 9-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 169.440809][ T5126] xpad 9-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 169.442097][ T5126] xpad 9-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 169.486545][ T6352] xpad 9-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 169.497223][ T5126] xpad 9-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 169.509012][ T5126] xpad 9-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 169.511395][ T5126] xpad 9-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 169.529412][ T7581] xt_hashlimit: size too large, truncated to 1048576 [ 169.584205][ T7561] xpad 9-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 169.685782][ T5754] Bluetooth: hci2: command 0x0c1a tx timeout [ 169.685825][ T5754] Bluetooth: hci4: command 0x0c1a tx timeout [ 169.685874][ T68] Bluetooth: hci1: command 0x0c1a tx timeout [ 169.719306][ T7586] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 169.730048][ T7586] cramfs: wrong magic [ 169.744638][ T5839] usb 9-1: USB disconnect, device number 8 [ 169.807367][ T7589] syz.0.413 (7589): /proc/7588/oom_adj is deprecated, please use /proc/7588/oom_score_adj instead. [ 170.127815][ T7603] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 170.128499][ T7603] VFS: Can't find a romfs filesystem on dev nullb0. [ 170.128499][ T7603] [ 170.174065][ T7605] syzkaller0: entered promiscuous mode [ 170.174078][ T7605] syzkaller0: entered allmulticast mode [ 170.180287][ T7607] 9pnet_virtio: no channels available for device syz [ 170.252980][ T3378] net_ratelimit: 1 callbacks suppressed [ 170.252994][ T3378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.363029][ T7621] FAULT_INJECTION: forcing a failure. [ 170.363029][ T7621] name failslab, interval 1, probability 0, space 0, times 0 [ 170.363077][ T7621] CPU: 2 UID: 0 PID: 7621 Comm: syz.1.423 Tainted: G L syzkaller #0 PREEMPT(full) [ 170.363094][ T7621] Tainted: [L]=SOFTLOCKUP [ 170.363098][ T7621] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 170.363106][ T7621] Call Trace: [ 170.363126][ T7621] [ 170.363131][ T7621] dump_stack_lvl+0x100/0x190 [ 170.363185][ T7621] should_fail_ex.cold+0x5/0xa [ 170.363203][ T7621] should_failslab+0xc2/0x120 [ 170.363224][ T7621] __kmalloc_cache_noprof+0x91/0x6d0 [ 170.363237][ T7621] ? __io_uring_add_tctx_node+0x179/0x4f0 [ 170.363287][ T7621] __io_uring_add_tctx_node+0x179/0x4f0 [ 170.363302][ T7621] ? security_inode_alloc+0x261/0x2c0 [ 170.363320][ T7621] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 170.363336][ T7621] ? __anon_inode_getfile+0x17c/0x280 [ 170.363354][ T7621] io_uring_setup.cold+0x19c4/0x1c7e [ 170.363368][ T7621] ? __pfx_io_uring_setup+0x10/0x10 [ 170.363384][ T7621] ? find_held_lock+0x2b/0x80 [ 170.363411][ T7621] ? xfd_validate_state+0x129/0x190 [ 170.363427][ T7621] __x64_sys_io_uring_setup+0xc2/0x170 [ 170.363445][ T7621] do_syscall_64+0x123/0x790 [ 170.363531][ T7621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.363544][ T7621] RIP: 0033:0x7fa574f9f559 [ 170.363554][ T7621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.363566][ T7621] RSP: 002b:00007fa575d89fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 170.363591][ T7621] RAX: ffffffffffffffda RBX: 0000200000000640 RCX: 00007fa574f9f559 [ 170.363598][ T7621] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000001c0b [ 170.363606][ T7621] RBP: 00007fa575036b20 R08: 0000000000000000 R09: 0000000000000000 [ 170.363613][ T7621] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 170.363619][ T7621] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc7a818388 [ 170.363635][ T7621] [ 170.410477][ T7627] xt_hashlimit: size too large, truncated to 1048576 [ 170.517912][ T7641] autofs: Unknown parameter './file0' [ 170.563070][ T7644] netlink: 16 bytes leftover after parsing attributes in process `syz.0.431'. [ 170.563116][ T7646] netlink: 16 bytes leftover after parsing attributes in process `syz.0.431'. [ 170.607714][ T7656] ip_tables: iptables: counters copy to user failed while replacing table [ 170.669120][ T43] kauditd_printk_skb: 35 callbacks suppressed [ 170.669140][ T43] audit: type=1400 audit(1793040728.927:608): avc: denied { nlmsg_read } for pid=7664 comm="syz.1.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 170.693171][ T5901] wacom 0003:056A:003F.0004: hidraw1: USB HID v0.00 Gamepad [syz0] on syz0 [ 170.717447][ T43] audit: type=1400 audit(1793040728.976:609): avc: denied { mount } for pid=7669 comm="syz.0.438" name="/" dev="rpc_pipefs" ino=19058 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 170.735208][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.771464][ T43] audit: type=1400 audit(1793040729.026:610): avc: denied { unmount } for pid=5745 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 170.799724][ T7676] xt_hashlimit: size too large, truncated to 1048576 [ 170.871482][ T7681] syz_tun: entered allmulticast mode [ 170.874936][ T7681] pimreg: entered allmulticast mode [ 170.882240][ T7681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.440'. [ 170.892818][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.894253][ T43] audit: type=1400 audit(1793040729.145:611): avc: denied { create } for pid=7680 comm="syz.1.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 170.894799][ T43] audit: type=1400 audit(1793040729.145:612): avc: denied { ioctl } for pid=7680 comm="syz.1.440" path="socket:[19082]" dev="sockfs" ino=19082 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 170.895085][ T43] audit: type=1400 audit(1793040729.145:613): avc: denied { bind } for pid=7680 comm="syz.1.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 170.895530][ T43] audit: type=1400 audit(1793040729.145:614): avc: denied { write } for pid=7680 comm="syz.1.440" path="socket:[19082]" dev="sockfs" ino=19082 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 170.901832][ T7681] tipc: Started in network mode [ 170.901848][ T7681] tipc: Node identity ac1414aa, cluster identity 4711 [ 170.902383][ T7681] tipc: New replicast peer: 172.20.20.187 [ 170.902692][ T7681] tipc: Enabled bearer , priority 10 [ 170.903376][ T7681] netlink: 52 bytes leftover after parsing attributes in process `syz.1.440'. [ 170.906387][ T5838] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.906574][ T5838] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.906595][ T5838] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.910497][ T7681] netlink: 64 bytes leftover after parsing attributes in process `syz.1.440'. [ 170.919438][ T7680] syz_tun: left allmulticast mode [ 170.919562][ T7680] pimreg: left allmulticast mode [ 170.977167][ T68] Bluetooth: hci0: command 0x0401 tx timeout [ 171.074295][ T7705] gfs2: error -5 reading superblock [ 171.139996][ T43] audit: type=1400 audit(1793040729.403:615): avc: denied { execute } for pid=7707 comm="syz.3.446" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=17376 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 171.141244][ T7710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.447'. [ 171.146663][ T43] audit: type=1400 audit(1793040729.403:616): avc: denied { create } for pid=7709 comm="syz.1.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 171.148298][ T43] audit: type=1400 audit(1793040729.403:617): avc: denied { ioctl } for pid=7709 comm="syz.1.447" path="socket:[19102]" dev="sockfs" ino=19102 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 171.191906][ T36] nvmet: connect request for invalid subsystem testsubsys! [ 171.192820][ T7710] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 171.300825][ T3378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.470861][ T7745] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 171.477321][ T7745] block device autoloading is deprecated and will be removed. [ 171.570226][ T68] Bluetooth: hci1: unexpected event for opcode 0x0404 [ 171.582868][ T842] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 171.713233][ T842] usb 5-1: device descriptor read/64, error -71 [ 171.784022][ T68] Bluetooth: hci4: command 0x0c1a tx timeout [ 171.784061][ T5087] Bluetooth: hci2: command 0x0c1a tx timeout [ 171.955193][ T842] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 172.037615][ T5105] tipc: Node number set to 2886997162 [ 172.098097][ T842] usb 5-1: device descriptor read/64, error -71 [ 172.110796][ T5087] Bluetooth: hci1: unexpected event 0x1c length: 3 < 5 [ 172.219016][ T842] usb usb5-port1: attempt power cycle [ 172.348898][ T3378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.479426][ T10] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 172.569955][ T842] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 172.591626][ T842] usb 5-1: device descriptor read/8, error -71 [ 172.620306][ T10] usb 8-1: device descriptor read/64, error -71 [ 172.842067][ T842] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 172.862870][ T842] usb 5-1: device descriptor read/8, error -71 [ 172.872389][ T10] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 172.973466][ T842] usb usb5-port1: unable to enumerate USB device [ 173.013284][ T10] usb 8-1: device descriptor read/64, error -71 [ 173.124468][ T10] usb usb8-port1: attempt power cycle [ 173.396359][ T3378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.466617][ T10] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 173.499559][ T10] usb 8-1: device descriptor read/8, error -71 [ 173.758740][ T10] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 173.790305][ T10] usb 8-1: device descriptor read/8, error -71 [ 173.810931][ T5839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.901192][ T10] usb usb8-port1: unable to enumerate USB device [ 174.443986][ T3378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.804683][ T7793] xt_hashlimit: size too large, truncated to 1048576 [ 174.848887][ T7795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.911311][ T7797] __nla_validate_parse: 4 callbacks suppressed [ 174.911332][ T7797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.468'. [ 175.145545][ T7803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.471'. [ 175.408244][ T7764] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 175.491498][ T3378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.614524][ T7822] syzkaller1: entered allmulticast mode [ 175.702908][ T7825] netlink: 24 bytes leftover after parsing attributes in process `syz.4.477'. [ 175.891741][ T43] kauditd_printk_skb: 17 callbacks suppressed [ 175.891760][ T43] audit: type=1400 audit(1793040734.108:635): avc: denied { bind } for pid=7830 comm="syz.4.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 175.893319][ T43] audit: type=1400 audit(1793040734.108:636): avc: denied { write } for pid=7830 comm="syz.4.479" path="socket:[19452]" dev="sockfs" ino=19452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 175.927485][ T43] audit: type=1400 audit(1793040734.148:637): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 176.204292][ T7839] syzkaller0: entered promiscuous mode [ 176.204314][ T7839] syzkaller0: entered allmulticast mode [ 176.207439][ T43] audit: type=1400 audit(1793040734.426:638): avc: denied { getopt } for pid=7838 comm="syz.3.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 176.226460][ T43] audit: type=1400 audit(1793040734.436:639): avc: denied { setopt } for pid=7838 comm="syz.3.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 176.228678][ T43] audit: type=1400 audit(1793040734.446:640): avc: denied { mount } for pid=7838 comm="syz.3.483" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 176.249401][ T43] audit: type=1400 audit(1793040734.466:641): avc: denied { create } for pid=7843 comm="syz.0.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 176.249783][ T43] audit: type=1400 audit(1793040734.466:642): avc: denied { connect } for pid=7843 comm="syz.0.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 176.250242][ T43] audit: type=1400 audit(1793040734.466:643): avc: denied { getopt } for pid=7843 comm="syz.0.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 176.312950][ T43] audit: type=1400 audit(1793040734.526:644): avc: denied { write } for pid=7849 comm="syz.0.485" name="functions" dev="configfs" ino=10259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 176.334494][ T7850] FAULT_INJECTION: forcing a failure. [ 176.334494][ T7850] name failslab, interval 1, probability 0, space 0, times 0 [ 176.334529][ T7850] CPU: 0 UID: 0 PID: 7850 Comm: syz.0.485 Tainted: G L syzkaller #0 PREEMPT(full) [ 176.334558][ T7850] Tainted: [L]=SOFTLOCKUP [ 176.334566][ T7850] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 176.334577][ T7850] Call Trace: [ 176.334600][ T7850] [ 176.334610][ T7850] dump_stack_lvl+0x100/0x190 [ 176.334690][ T7850] should_fail_ex.cold+0x5/0xa [ 176.334721][ T7850] should_failslab+0xc2/0x120 [ 176.334755][ T7850] kmem_cache_alloc_noprof+0x92/0x6a0 [ 176.334782][ T7850] ? __kernfs_new_node+0xd2/0xa10 [ 176.334812][ T7850] __kernfs_new_node+0xd2/0xa10 [ 176.334842][ T7850] ? __pfx___kernfs_new_node+0x10/0x10 [ 176.334870][ T7850] ? lock_acquire+0x1d1/0x380 [ 176.334893][ T7850] ? kernfs_root+0x23/0x2a0 [ 176.334909][ T7850] ? find_held_lock+0x2b/0x80 [ 176.334934][ T7850] ? kernfs_root+0xee/0x2a0 [ 176.334952][ T7850] ? kernfs_root+0xee/0x2a0 [ 176.334980][ T7850] kernfs_new_node+0x194/0x200 [ 176.335006][ T7850] ? __pfx_kernfs_new_node+0x10/0x10 [ 176.335039][ T7850] __kernfs_create_file+0x53/0x350 [ 176.335071][ T7850] sysfs_add_file_mode_ns+0x207/0x3c0 [ 176.335099][ T7850] internal_create_group+0x593/0xfb0 [ 176.335127][ T7850] ? kobject_init_and_add+0x129/0x180 [ 176.335268][ T7850] ? __pfx_internal_create_group+0x10/0x10 [ 176.335288][ T7850] ? __pfx_kobject_init_and_add+0x10/0x10 [ 176.335314][ T7850] ? ecm_bind+0x848/0xc00 [ 176.335413][ T7850] ? __driver_probe_device+0x210/0x460 [ 176.335462][ T7850] ? driver_probe_device+0x4a/0x140 [ 176.335477][ T7850] ? __driver_attach+0x21f/0x5b0 [ 176.335492][ T7850] ? bus_for_each_dev+0x13e/0x1d0 [ 176.335518][ T7850] ? bus_add_driver+0x305/0x5b0 [ 176.335544][ T7850] ? driver_register+0x1e2/0x360 [ 176.335566][ T7850] internal_create_groups+0x9d/0x150 [ 176.335591][ T7850] netdev_queue_update_kobjects+0x115/0x6f0 [ 176.335664][ T7850] netdev_register_kobject+0x2e9/0x410 [ 176.335693][ T7850] register_netdevice+0x15b6/0x25a0 [ 176.335734][ T7850] ? __pfx_register_netdevice+0x10/0x10 [ 176.335768][ T7850] register_netdev+0x34/0x50 [ 176.335792][ T7850] gether_register_netdev+0x93/0x130 [ 176.335818][ T7850] ecm_bind+0x848/0xc00 [ 176.335844][ T7850] ? gser_bind+0x130/0x410 [ 176.335862][ T7850] ? usb_gstrings_attach+0x474/0x920 [ 176.335906][ T7850] ? __pfx_ecm_bind+0x10/0x10 [ 176.335933][ T7850] usb_add_function+0x219/0x890 [ 176.335964][ T7850] configfs_composite_bind+0xd83/0x1960 [ 176.336004][ T7850] gadget_bind_driver+0x28c/0xbf0 [ 176.336033][ T7850] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 176.336060][ T7850] ? __pfx_gadget_bind_driver+0x10/0x10 [ 176.336091][ T7850] really_probe+0x241/0xa60 [ 176.336113][ T7850] __driver_probe_device+0x210/0x460 [ 176.336126][ T7850] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 176.336172][ T7850] driver_probe_device+0x4a/0x140 [ 176.336195][ T7850] __driver_attach+0x21f/0x5b0 [ 176.336217][ T7850] ? __pfx___driver_attach+0x10/0x10 [ 176.336237][ T7850] bus_for_each_dev+0x13e/0x1d0 [ 176.336265][ T7850] ? __pfx_bus_for_each_dev+0x10/0x10 [ 176.336290][ T7850] ? bus_add_driver+0x2b5/0x5b0 [ 176.336319][ T7850] bus_add_driver+0x305/0x5b0 [ 176.336350][ T7850] driver_register+0x1e2/0x360 [ 176.336376][ T7850] usb_gadget_register_driver_owner+0x132/0x210 [ 176.336434][ T7850] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 176.336463][ T7850] configfs_write_iter+0x302/0x4e0 [ 176.336492][ T7850] vfs_write+0x6af/0x1050 [ 176.336554][ T7850] ? __pfx_configfs_write_iter+0x10/0x10 [ 176.336583][ T7850] ? __pfx_vfs_write+0x10/0x10 [ 176.336605][ T7850] ? find_held_lock+0x2b/0x80 [ 176.336653][ T7850] ksys_write+0x12a/0x250 [ 176.336677][ T7850] ? __pfx_ksys_write+0x10/0x10 [ 176.336709][ T7850] do_syscall_64+0x123/0x790 [ 176.336743][ T7850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.336764][ T7850] RIP: 0033:0x7f8dacb9f559 [ 176.336782][ T7850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.336801][ T7850] RSP: 002b:00007f8dada34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 176.336842][ T7850] RAX: ffffffffffffffda RBX: 00007f8dace25fa0 RCX: 00007f8dacb9f559 [ 176.336856][ T7850] RDX: 000000000000000b RSI: 0000200000000ac0 RDI: 0000000000000006 [ 176.336868][ T7850] RBP: 00007f8dacc36b20 R08: 0000000000000000 R09: 0000000000000000 [ 176.336880][ T7850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.336892][ T7850] R13: 00007f8dace26038 R14: 00007f8dace25fa0 R15: 00007ffe3c169998 [ 176.336923][ T7850] [ 176.344175][ T7852] ip_tables: iptables: counters copy to user failed while replacing table [ 176.345258][ T7852] ip_tables: iptables: counters copy to user failed while replacing table [ 176.346298][ T7850] udc dummy_udc.0: failed to start g1: -12 [ 176.346316][ T7850] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -12 [ 176.354189][ T7850] UDC core: g1: couldn't find an available UDC or it's busy [ 176.355880][ T7853] netlink: 16 bytes leftover after parsing attributes in process `syz.4.486'. [ 176.355907][ T7853] netlink: 76 bytes leftover after parsing attributes in process `syz.4.486'. [ 176.356268][ T7852] netlink: 16 bytes leftover after parsing attributes in process `syz.4.486'. [ 176.356289][ T7852] netlink: 76 bytes leftover after parsing attributes in process `syz.4.486'. [ 176.553399][ T7872] Invalid logical block size (1388) [ 176.558876][ T3378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.859010][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.583083][ T3378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.392626][ T7895] gfs2: error -5 reading superblock [ 178.628645][ T3378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.032193][ T5839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.381871][ T7858] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 179.385842][ T7857] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 179.487490][ T7916] FAULT_INJECTION: forcing a failure. [ 179.487490][ T7916] name failslab, interval 1, probability 0, space 0, times 0 [ 179.487512][ T7916] CPU: 0 UID: 0 PID: 7916 Comm: syz.3.499 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.487527][ T7916] Tainted: [L]=SOFTLOCKUP [ 179.487531][ T7916] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 179.487537][ T7916] Call Trace: [ 179.487541][ T7916] [ 179.487548][ T7916] dump_stack_lvl+0x100/0x190 [ 179.487569][ T7916] should_fail_ex.cold+0x5/0xa [ 179.487585][ T7916] should_failslab+0xc2/0x120 [ 179.487601][ T7916] kmem_cache_alloc_noprof+0x92/0x6a0 [ 179.487616][ T7916] ? ptlock_alloc+0x1f/0x70 [ 179.487629][ T7916] ptlock_alloc+0x1f/0x70 [ 179.487640][ T7916] pte_alloc_one+0x82/0x3d0 [ 179.487657][ T7916] __pte_alloc+0x6d/0x380 [ 179.487671][ T7916] ? __pfx___pte_alloc+0x10/0x10 [ 179.487684][ T7916] ? walk_pgd_range+0x13ca/0x1e00 [ 179.487696][ T7916] ? walk_pgd_range+0x13ca/0x1e00 [ 179.487711][ T7916] walk_pgd_range+0xb94/0x1e00 [ 179.487729][ T7916] ? __pfx_guard_install_set_pte+0x10/0x10 [ 179.487745][ T7916] ? __pfx_guard_install_pte_entry+0x10/0x10 [ 179.487762][ T7916] ? ima_match_policy+0x8b8/0x23e0 [ 179.487795][ T7916] ? __pfx_guard_install_set_pte+0x10/0x10 [ 179.487813][ T7916] ? __pfx_guard_install_set_pte+0x10/0x10 [ 179.487830][ T7916] ? __pfx_guard_install_set_pte+0x10/0x10 [ 179.487847][ T7916] ? __pfx_walk_pgd_range+0x10/0x10 [ 179.487864][ T7916] __walk_page_range+0x171/0x850 [ 179.487877][ T7916] ? __lock_acquire+0x5c0/0x1f40 [ 179.487892][ T7916] ? find_held_lock+0x2b/0x80 [ 179.487914][ T7916] walk_page_range_vma_unsafe+0x209/0x8f0 [ 179.487930][ T7916] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 179.487955][ T7916] madvise_guard_install+0x421/0x790 [ 179.487975][ T7916] ? __pfx_madvise_guard_install+0x10/0x10 [ 179.487994][ T7916] ? __pfx_guard_install_pud_entry+0x10/0x10 [ 179.488010][ T7916] ? __pfx_guard_install_pmd_entry+0x10/0x10 [ 179.488026][ T7916] ? __pfx_guard_install_pte_entry+0x10/0x10 [ 179.488044][ T7916] ? __pfx_guard_install_set_pte+0x10/0x10 [ 179.488065][ T7916] madvise_vma_behavior+0xc02/0x2350 [ 179.488078][ T7916] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 179.488094][ T7916] ? lock_vma_under_rcu+0x25/0x590 [ 179.488110][ T7916] ? lock_vma_under_rcu+0x1f9/0x590 [ 179.488127][ T7916] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 179.488144][ T7916] ? lock_acquire+0x1d1/0x380 [ 179.488183][ T7916] madvise_walk_vmas+0x870/0xc50 [ 179.488194][ T7916] ? __pfx___futex_wait+0x10/0x10 [ 179.488206][ T7916] ? __pfx_try_to_wake_up+0x10/0x10 [ 179.488219][ T7916] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 179.488231][ T7916] ? __pfx_futex_wake_mark+0x10/0x10 [ 179.488247][ T7916] ? find_held_lock+0x2b/0x80 [ 179.488263][ T7916] ? futex_wake+0x4ea/0x5e0 [ 179.488276][ T7916] madvise_do_behavior+0x1ea/0x510 [ 179.488288][ T7916] ? __pfx_madvise_do_behavior+0x10/0x10 [ 179.488297][ T7916] ? futex_wait+0x11e/0x370 [ 179.488313][ T7916] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 179.488330][ T7916] do_madvise+0x238/0x290 [ 179.488340][ T7916] ? __pfx_do_madvise+0x10/0x10 [ 179.488349][ T7916] ? do_futex+0x190/0x440 [ 179.488368][ T7916] ? rcu_is_watching+0x13/0xc0 [ 179.488430][ T7916] __x64_sys_madvise+0xa9/0x110 [ 179.488443][ T7916] ? lockdep_hardirqs_on+0x7d/0x110 [ 179.488462][ T7916] do_syscall_64+0x123/0x790 [ 179.488479][ T7916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.488492][ T7916] RIP: 0033:0x7fc72479f559 [ 179.488501][ T7916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.488512][ T7916] RSP: 002b:00007fc7256ac028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 179.488523][ T7916] RAX: ffffffffffffffda RBX: 00007fc724a26180 RCX: 00007fc72479f559 [ 179.488530][ T7916] RDX: 0000000000000066 RSI: 0000000000400000 RDI: 0000200000bc0000 [ 179.488537][ T7916] RBP: 00007fc724836b20 R08: 0000000000000000 R09: 0000000000000000 [ 179.488543][ T7916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.488550][ T7916] R13: 00007fc724a26218 R14: 00007fc724a26180 R15: 00007ffffe42c058 [ 179.488564][ T7916] [ 179.494236][ T7918] FAULT_INJECTION: forcing a failure. [ 179.494236][ T7918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.494255][ T7918] CPU: 0 UID: 0 PID: 7918 Comm: syz.3.499 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.494270][ T7918] Tainted: [L]=SOFTLOCKUP [ 179.494274][ T7918] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 179.494280][ T7918] Call Trace: [ 179.494284][ T7918] [ 179.494288][ T7918] dump_stack_lvl+0x100/0x190 [ 179.494307][ T7918] should_fail_ex.cold+0x5/0xa [ 179.494322][ T7918] _copy_from_user+0x2e/0xd0 [ 179.494343][ T7918] memdup_user+0x6b/0xe0 [ 179.494356][ T7918] strndup_user+0x78/0xe0 [ 179.494369][ T7918] __x64_sys_mount+0x136/0x310 [ 179.494382][ T7918] ? __pfx___x64_sys_mount+0x10/0x10 [ 179.494398][ T7918] do_syscall_64+0x123/0x790 [ 179.494416][ T7918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.494427][ T7918] RIP: 0033:0x7fc72479f559 [ 179.494437][ T7918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.494447][ T7918] RSP: 002b:00007fc72568b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 179.494458][ T7918] RAX: ffffffffffffffda RBX: 00007fc724a26270 RCX: 00007fc72479f559 [ 179.494465][ T7918] RDX: 0000200000000a40 RSI: 0000200000000a00 RDI: 0000000000000000 [ 179.494471][ T7918] RBP: 00007fc724836b20 R08: 0000000000000000 R09: 0000000000000000 [ 179.494478][ T7918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.494484][ T7918] R13: 00007fc724a26308 R14: 00007fc724a26270 R15: 00007ffffe42c058 [ 179.494497][ T7918] [ 179.506033][ T5087] Bluetooth: hci0: unexpected event for opcode 0x2031 [ 179.609685][ T7925] ªªªªª»: renamed from dummy0 (while UP) [ 179.676086][ T6025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.791953][ T7928] netlink: 148 bytes leftover after parsing attributes in process `syz.3.503'. [ 179.868079][ T7933] overlayfs: conflicting lowerdir path [ 180.105278][ T7943] xt_hashlimit: size too large, truncated to 1048576 [ 180.232593][ T7949] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 180.389024][ T7957] gfs2: error -5 reading superblock [ 180.445276][ T7968] netlink: 32 bytes leftover after parsing attributes in process `syz.1.514'. [ 180.517621][ T7968] ecryptfs_get_tree: kern_path() failed [ 180.522055][ T7968] Reading sb failed; rc = [-2] [ 180.719467][ T3378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.720428][ T7981] xt_hashlimit: size too large, truncated to 1048576 [ 180.766949][ T7983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.875492][ T7987] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 180.877841][ T7989] netlink: 40 bytes leftover after parsing attributes in process `syz.3.520'. [ 180.890242][ T7989] 9pnet_virtio: no channels available for device syz [ 180.970278][ T7994] netlink: Conntrack attr has 8 unknown bytes [ 180.970298][ T7994] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.970585][ T7994] netlink: 24 bytes leftover after parsing attributes in process `syz.4.518'. [ 180.974185][ T7992] gfs2: error -5 reading superblock [ 181.028937][ T43] kauditd_printk_skb: 19 callbacks suppressed [ 181.028950][ T43] audit: type=1400 audit(1793040739.221:664): avc: denied { read } for pid=7996 comm="syz.3.522" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 181.028974][ T43] audit: type=1400 audit(1793040739.221:665): avc: denied { open } for pid=7996 comm="syz.3.522" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 181.082217][ T7949] rtrs_client L2644: : init_conns() failed: err=-ERESTARTSYS path=@ip:27.0.0.1 [:0] [ 181.084605][ T43] audit: type=1400 audit(1793040739.281:666): avc: denied { map } for pid=7996 comm="syz.3.522" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 181.794659][ T3378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.126402][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.297496][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.897116][ T6025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.007236][ T6025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.372463][ T43] audit: type=1400 audit(1793040742.381:667): avc: denied { map } for pid=8011 comm="syz.4.528" path="socket:[20879]" dev="sockfs" ino=20879 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 184.372510][ T43] audit: type=1400 audit(1793040742.381:668): avc: denied { read } for pid=8011 comm="syz.4.528" path="socket:[20879]" dev="sockfs" ino=20879 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 184.372545][ T43] audit: type=1400 audit(1793040742.381:669): avc: denied { write } for pid=8011 comm="syz.4.528" path="socket:[20879]" dev="sockfs" ino=20879 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 184.374377][ T43] audit: type=1400 audit(1793040742.381:670): avc: denied { mount } for pid=8011 comm="syz.4.528" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 184.377918][ T43] audit: type=1400 audit(1793040742.381:671): avc: denied { remount } for pid=8011 comm="syz.4.528" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 184.421234][ T8012] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1. [ 184.435830][ T43] audit: type=1400 audit(1793040742.428:672): avc: denied { unmount } for pid=6369 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 184.456315][ T8024] xt_hashlimit: size too large, truncated to 1048576 [ 184.483932][ T8028] openvswitch: netlink: Duplicate or invalid key (type 0). [ 184.486661][ T8029] gfs2: error -5 reading superblock [ 184.610977][ T8036] 9pnet_virtio: no channels available for device syz [ 184.616246][ T8036] 9pnet_virtio: no channels available for device syz [ 184.616479][ T8036] 9pnet_virtio: no channels available for device syz [ 184.639899][ T43] audit: type=1400 audit(1793040742.624:673): avc: denied { ioctl } for pid=8034 comm="syz.0.534" path="socket:[18331]" dev="sockfs" ino=18331 ioctlcmd=0x662a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 184.753244][ T5087] Bluetooth: hci4: unexpected event for opcode 0x1408 [ 185.050605][ T8063] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input13 [ 185.079970][ T8063] netlink: 28 bytes leftover after parsing attributes in process `syz.0.541'. [ 185.079987][ T8063] netlink: 32 bytes leftover after parsing attributes in process `syz.0.541'. [ 185.080007][ T8063] netlink: 28 bytes leftover after parsing attributes in process `syz.0.541'. [ 185.437296][ T5087] Bluetooth: hci4: unexpected event for opcode 0x1408 [ 185.449509][ T8073] input: syz0 as /devices/virtual/input/input14 [ 185.470906][ T8075] netlink: 32 bytes leftover after parsing attributes in process `syz.1.545'. [ 185.806979][ T8086] iommufd_mock iommufd_mock0: Adding to iommu group 5 [ 185.817177][ T8086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.548'. [ 185.817569][ T8086] xt_cgroup: path and classid specified [ 186.022135][ T8099] xt_hashlimit: size too large, truncated to 1048576 [ 186.044564][ T8093] net_ratelimit: 7 callbacks suppressed [ 186.044583][ T8093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.048289][ T8093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.048738][ T8093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.054578][ T8093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.061093][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.119682][ T8103] ip_tables: iptables: counters copy to user failed while replacing table [ 186.150107][ T8092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.157682][ T8105] netlink: 64 bytes leftover after parsing attributes in process `syz.0.555'. [ 186.158008][ T8105] netlink: 40 bytes leftover after parsing attributes in process `syz.0.555'. [ 186.229532][ T3378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.560838][ T8133] xt_hashlimit: size too large, truncated to 1048576 [ 187.007627][ T43] kauditd_printk_skb: 4 callbacks suppressed [ 187.007646][ T43] audit: type=1400 audit(1793040744.842:678): avc: denied { ioctl } for pid=8136 comm="syz.0.565" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb70d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 187.254632][ T5087] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 187.254692][ T5087] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 187.255921][ T43] audit: type=1400 audit(1793040745.076:679): avc: denied { watch } for pid=8152 comm="syz.4.572" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 187.290690][ T43] audit: type=1400 audit(1793040745.104:680): avc: denied { write } for pid=8149 comm="syz.0.570" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 187.291511][ T43] audit: type=1400 audit(1793040745.104:681): avc: denied { ioctl } for pid=8149 comm="syz.0.570" path="/dev/binderfs/binder1" dev="binder" ino=5 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 187.341037][ T6025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.069564][ T8179] [U] [ 188.069577][ T8179] [U] ( [ 188.069583][ T8179] [U]  [ 188.069598][ T8179] [U] [ 188.069604][ T8179] [U]  [ 188.069730][ T8179] [U] [ 188.069756][ T8179] [U] [ 188.069782][ T8179] [U] [ 188.069924][ T8179] [U] [ 188.069950][ T8179] [U] [ 188.069975][ T8179] [U] [ 188.069999][ T8179] [U] [ 188.070126][ T8179] [U] [ 188.070151][ T8179] [U] [ 188.070178][ T8179] [U] [ 188.070204][ T8179] [U] [ 188.070335][ T8179] [U] [ 188.070360][ T8179] [U] [ 188.070383][ T8179] [U] [ 188.070408][ T8179] [U] [ 188.073873][ T8177] [U] [ 188.113887][ T8182] netlink: 'syz.4.578': attribute type 1 has an invalid length. [ 188.128913][ T8182] 8021q: adding VLAN 0 to HW filter on device bond3 [ 188.142053][ T8182] bond3: (slave gretap1): making interface the new active one [ 188.145701][ T8182] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 188.228009][ T43] audit: type=1400 audit(1793040745.984:682): avc: denied { ioctl } for pid=8188 comm="syz.4.581" path="socket:[21124]" dev="sockfs" ino=21124 ioctlcmd=0x8919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 188.229017][ T43] audit: type=1400 audit(1793040745.984:683): avc: denied { connect } for pid=8188 comm="syz.4.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 188.230093][ T43] audit: type=1400 audit(1793040745.984:684): avc: denied { setopt } for pid=8188 comm="syz.4.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 188.230373][ T43] audit: type=1400 audit(1793040745.984:685): avc: denied { bind } for pid=8188 comm="syz.4.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 188.232203][ T8192] xt_hashlimit: size too large, truncated to 1048576 [ 188.232446][ T43] audit: type=1400 audit(1793040745.984:686): avc: denied { setopt } for pid=8188 comm="syz.4.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 188.288361][ T8194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.352152][ T43] audit: type=1400 audit(1793040746.096:687): avc: denied { write } for pid=8195 comm="syz.1.583" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 188.396633][ T8203] netlink: 'syz.1.586': attribute type 1 has an invalid length. [ 188.415218][ T8203] 8021q: adding VLAN 0 to HW filter on device bond4 [ 188.441262][ T8206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.588'. [ 188.559459][ T5087] Bluetooth: hci1: unexpected event for opcode 0x0404 [ 188.587360][ T8219] overlayfs: failed to verify upper root origin [ 188.841774][ T8226] xt_hashlimit: size too large, truncated to 1048576 [ 189.061421][ T3378] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 189.200360][ T3378] usb 8-1: device descriptor read/64, error -71 [ 189.241431][ T8241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.596'. [ 189.267261][ T8241] team0: Port device team_slave_0 removed [ 189.326658][ T8241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.596'. [ 189.326772][ T8241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.596'. [ 189.326900][ T8241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.596'. [ 189.327011][ T8241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.596'. [ 189.327143][ T8241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.596'. [ 189.450529][ T8246] netlink: 'syz.0.598': attribute type 2 has an invalid length. [ 189.456648][ T3378] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 189.627832][ T3378] usb 8-1: device descriptor read/64, error -71 [ 189.734535][ T66] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 189.747845][ T3378] usb usb8-port1: attempt power cycle [ 189.873355][ T66] usb 6-1: device descriptor read/64, error -71 [ 190.068706][ T8269] 9pnet_virtio: no channels available for device syz [ 190.129813][ T3378] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 190.141046][ T66] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 190.162621][ T3378] usb 8-1: device descriptor read/8, error -71 [ 190.279475][ T66] usb 6-1: device descriptor read/64, error -71 [ 190.322335][ T842] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 190.397263][ T66] usb usb6-port1: attempt power cycle [ 190.439731][ T3378] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 190.461570][ T3378] usb 8-1: device descriptor read/8, error -71 [ 190.493118][ T842] usb 9-1: Using ep0 maxpacket: 8 [ 190.493596][ T842] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 190.494453][ T842] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 190.494496][ T842] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 190.494507][ T842] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 190.494519][ T842] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 190.494530][ T842] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 190.494549][ T842] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.579067][ T3378] usb usb8-port1: unable to enumerate USB device [ 190.714171][ T842] usb 9-1: usb_control_msg returned -32 [ 190.714197][ T842] usbtmc 9-1:16.0: can't read capabilities [ 190.760372][ T66] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 190.782349][ T66] usb 6-1: device descriptor read/8, error -71 [ 190.789839][ T8271] xt_l2tp: unknown flags: 16 [ 191.049107][ T66] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 191.071884][ T66] usb 6-1: device descriptor read/8, error -71 [ 191.093743][ T8282] usb 9-1: usbtmc_ioctl_clear_out_halt returned -32 [ 191.106755][ T8284] program syz.0.610 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 191.188012][ T66] usb usb6-port1: unable to enumerate USB device [ 191.317256][ T8289] nbd: must specify a device to reconfigure [ 191.787546][ T6025] net_ratelimit: 5 callbacks suppressed [ 191.787565][ T6025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.637882][ T8314] sd 0:0:0:0: PR command failed: 1026 [ 192.637942][ T8314] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 192.637978][ T8314] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 192.897746][ T3378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.072554][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.283469][ T842] usb 9-1: USB disconnect, device number 9 [ 194.009427][ T3378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.123470][ T8326] program syz.4.622 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 194.123506][ T8326] ata1.00: invalid service action 31 [ 194.372198][ T66] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 194.533243][ T66] usb 9-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 194.535615][ T66] usb 9-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 194.535642][ T66] usb 9-1: config 0 interface 0 has no altsetting 0 [ 194.535668][ T66] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.540017][ T66] usb 9-1: config 0 descriptor?? [ 194.542898][ T8326] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 194.766192][ T66] usbhid 9-1:0.0: can't add hid device: -71 [ 194.766275][ T66] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 194.768399][ T66] usb 9-1: USB disconnect, device number 10 [ 195.120909][ T3378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.629508][ T8304] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 195.740372][ T8338] netlink: 'syz.3.626': attribute type 1 has an invalid length. [ 195.750793][ T3378] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 195.779205][ T8338] bond2: entered promiscuous mode [ 195.779551][ T8338] 8021q: adding VLAN 0 to HW filter on device bond2 [ 195.808904][ T8345] netlink: NAT attribute has 4 unknown bytes [ 195.808932][ T8345] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.816055][ T8338] vlan2: entered allmulticast mode [ 195.816070][ T8338] bond2: entered allmulticast mode [ 195.824140][ T8338] bond2: (slave bridge2): making interface the new active one [ 195.824156][ T8338] bridge2: entered promiscuous mode [ 195.824243][ T8338] bridge2: entered allmulticast mode [ 195.825304][ T8338] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 195.883003][ T8352] __nla_validate_parse: 126 callbacks suppressed [ 195.883015][ T8352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.629'. [ 195.891511][ T8352] Illegal XDP return value 8352 on prog (id 130) dev syz_tun, expect packet loss! [ 195.912702][ T3378] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 195.914064][ T3378] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.133265][ T8332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.133642][ T8332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.145239][ T8332] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 196.147628][ T8332] netlink: 12 bytes leftover after parsing attributes in process `syz.4.624'. [ 196.149219][ T3378] cdc_acm 9-1:1.0: ttyACM0: USB ACM device [ 196.231829][ T3378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.265055][ T8366] team0 (unregistering): Port device team_slave_0 removed [ 196.268813][ T8366] team0 (unregistering): Port device team_slave_1 removed [ 196.317259][ T5839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.596247][ T8373] Bluetooth: ISO socket layer initialized [ 196.597576][ T68] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 196.597823][ T68] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 196.791195][ T8388] overlayfs: missing 'lowerdir' [ 196.926504][ T43] kauditd_printk_skb: 7 callbacks suppressed [ 196.926522][ T43] audit: type=1400 audit(1793040754.125:695): avc: denied { read } for pid=8389 comm="syz.0.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 196.950153][ T43] audit: type=1800 audit(1793040754.144:696): pid=8390 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.640" name="file0" dev="overlay" ino=1140 res=0 errno=0 [ 197.090070][ T43] audit: type=1400 audit(1793040754.275:697): avc: denied { read } for pid=8395 comm="syz.0.642" name="btrfs-control" dev="devtmpfs" ino=1339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 197.090502][ T43] audit: type=1400 audit(1793040754.275:698): avc: denied { open } for pid=8395 comm="syz.0.642" path="/dev/btrfs-control" dev="devtmpfs" ino=1339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 197.091310][ T43] audit: type=1400 audit(1793040754.275:699): avc: denied { ioctl } for pid=8395 comm="syz.0.642" path="/dev/btrfs-control" dev="devtmpfs" ino=1339 ioctlcmd=0xaeba scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 197.343178][ T6025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.392731][ T8403] netlink: 200 bytes leftover after parsing attributes in process `syz.1.644'. [ 197.398954][ T8403] binder: 8402:8403 ioctl 89f1 2000000003c0 returned -22 [ 197.430255][ T8405] netlink: 20 bytes leftover after parsing attributes in process `syz.1.645'. [ 197.538814][ T8410] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 197.541712][ T43] audit: type=1400 audit(1793040754.696:700): avc: denied { shutdown } for pid=8408 comm="syz.3.646" laddr=::ac14:14aa lport=51780 faddr=fc01:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 198.081194][ T43] audit: type=1804 audit(1793040755.211:701): pid=8429 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.654" name="/newroot/207/file1" dev="tmpfs" ino=1162 res=1 errno=0 [ 198.093023][ T43] audit: type=1400 audit(1793040755.220:702): avc: denied { ioctl } for pid=8428 comm="syz.0.654" path="/dev/nullb0" dev="devtmpfs" ino=705 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 198.219150][ T6025] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 198.412552][ T6025] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 198.415896][ T6025] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 198.415916][ T6025] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 198.415929][ T6025] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 198.419890][ T6025] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.419905][ T6025] usb 6-1: Product: syz [ 198.419912][ T6025] usb 6-1: Manufacturer: syz [ 198.419919][ T6025] usb 6-1: SerialNumber: syz [ 198.422589][ T6025] usb 6-1: config 0 descriptor?? [ 198.424632][ T8425] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 198.455516][ T3378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.497028][ T6025] rc_core: IR keymap rc-streamzap not found [ 198.497039][ T6025] Registered IR keymap rc-empty [ 198.498791][ T6025] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 198.500939][ T6025] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input15 [ 198.587323][ T8442] netlink: 'syz.3.656': attribute type 1 has an invalid length. [ 198.602988][ T8442] bond3: entered promiscuous mode [ 198.603353][ T8442] 8021q: adding VLAN 0 to HW filter on device bond3 [ 198.622698][ T8442] 8021q: adding VLAN 0 to HW filter on device bond3 [ 198.623029][ T8442] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 198.623040][ T8442] bond3: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 198.630623][ T8442] bond3: (slave gre1): making interface the new active one [ 198.630637][ T8442] gre1: entered promiscuous mode [ 198.632520][ T8442] bond3: (slave gre1): Enslaving as an active interface with an up link [ 198.636766][ T8442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.656'. [ 198.646395][ T8442] bond3 (unregistering): (slave gre1): Releasing backup interface [ 198.646412][ T8442] gre1: left promiscuous mode [ 198.651922][ T8442] bond3 (unregistering): Released all slaves [ 198.663647][ T6025] usb 6-1: USB disconnect, device number 9 [ 198.816316][ T8446] FAULT_INJECTION: forcing a failure. [ 198.816316][ T8446] name failslab, interval 1, probability 0, space 0, times 0 [ 198.816352][ T8446] CPU: 3 UID: 0 PID: 8446 Comm: syz.3.657 Tainted: G L syzkaller #0 PREEMPT(full) [ 198.816369][ T8446] Tainted: [L]=SOFTLOCKUP [ 198.816373][ T8446] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 198.816380][ T8446] Call Trace: [ 198.816394][ T8446] [ 198.816400][ T8446] dump_stack_lvl+0x100/0x190 [ 198.816457][ T8446] should_fail_ex.cold+0x5/0xa [ 198.816480][ T8446] should_failslab+0xc2/0x120 [ 198.816508][ T8446] __kmalloc_noprof+0xfc/0x840 [ 198.816522][ T8446] ? trace_kmalloc+0xeb/0x110 [ 198.816539][ T8446] ? lsm_blob_alloc+0x68/0x90 [ 198.816572][ T8446] lsm_blob_alloc+0x68/0x90 [ 198.816585][ T8446] security_sk_alloc+0x2d/0x290 [ 198.816602][ T8446] sk_prot_alloc+0x12a/0x2a0 [ 198.816668][ T8446] sk_alloc+0x36/0xe80 [ 198.816681][ T8446] __netlink_create+0x5e/0x2c0 [ 198.816705][ T8446] ? __wake_up+0x3f/0x60 [ 198.816717][ T8446] netlink_create+0x29b/0x610 [ 198.816733][ T8446] ? __pfx_genl_bind+0x10/0x10 [ 198.816744][ T8446] ? __pfx_genl_unbind+0x10/0x10 [ 198.816756][ T8446] ? __pfx_genl_release+0x10/0x10 [ 198.816771][ T8446] __sock_create+0x339/0x860 [ 198.816790][ T8446] __sys_socket+0x14d/0x260 [ 198.816806][ T8446] ? __pfx___sys_socket+0x10/0x10 [ 198.816828][ T8446] __x64_sys_socket+0x72/0xb0 [ 198.816844][ T8446] ? lockdep_hardirqs_on+0x7d/0x110 [ 198.816930][ T8446] do_syscall_64+0x123/0x790 [ 198.816952][ T8446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.816963][ T8446] RIP: 0033:0x7fc7247a0dc7 [ 198.816974][ T8446] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.816985][ T8446] RSP: 002b:00007fc7256ecf98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 198.817009][ T8446] RAX: ffffffffffffffda RBX: 00007fc724a25fa0 RCX: 00007fc7247a0dc7 [ 198.817016][ T8446] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 198.817023][ T8446] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 198.817030][ T8446] R10: 0000200000000740 R11: 0000000000000286 R12: 0000000000000000 [ 198.817037][ T8446] R13: 00007fc724a26038 R14: 00007fc724a25fa0 R15: 00007ffffe42c058 [ 198.817054][ T8446] [ 198.819028][ T5087] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 199.049738][ T43] audit: type=1400 audit(1793040756.109:703): avc: denied { bind } for pid=8448 comm="syz.0.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 199.049903][ T43] audit: type=1400 audit(1793040756.109:704): avc: denied { listen } for pid=8448 comm="syz.0.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 199.064809][ T8449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.120590][ T8449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.175556][ T8449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.334175][ T8453] netlink: 32 bytes leftover after parsing attributes in process `syz.1.659'. [ 199.565818][ T6025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.566430][ T5839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.567160][ T8458] xt_hashlimit: size too large, truncated to 1048576 [ 199.692972][ T5087] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 200.010550][ T8474] netlink: 36 bytes leftover after parsing attributes in process `syz.1.667'. [ 200.240602][ T8483] netlink: 24 bytes leftover after parsing attributes in process `syz.1.670'. [ 200.306942][ T8483] netlink: 16 bytes leftover after parsing attributes in process `syz.1.670'. [ 200.448428][ T8506] netlink: 44 bytes leftover after parsing attributes in process `syz.0.676'. [ 200.458445][ T8506] FAULT_INJECTION: forcing a failure. [ 200.458445][ T8506] name failslab, interval 1, probability 0, space 0, times 0 [ 200.458468][ T8506] CPU: 2 UID: 0 PID: 8506 Comm: syz.0.676 Tainted: G L syzkaller #0 PREEMPT(full) [ 200.458483][ T8506] Tainted: [L]=SOFTLOCKUP [ 200.458488][ T8506] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 200.458495][ T8506] Call Trace: [ 200.458499][ T8506] [ 200.458504][ T8506] dump_stack_lvl+0x100/0x190 [ 200.458525][ T8506] should_fail_ex.cold+0x5/0xa [ 200.458543][ T8506] should_failslab+0xc2/0x120 [ 200.458562][ T8506] __kmalloc_noprof+0xfc/0x840 [ 200.458576][ T8506] ? __register_sysctl_table+0xac/0x1650 [ 200.458594][ T8506] __register_sysctl_table+0xac/0x1650 [ 200.458607][ T8506] ? trace_kmalloc+0xeb/0x110 [ 200.458622][ T8506] ? __kasan_kmalloc+0xaa/0xb0 [ 200.458636][ T8506] ? __kmalloc_node_track_caller_noprof+0x35b/0x870 [ 200.458652][ T8506] ? __pfx___register_sysctl_table+0x10/0x10 [ 200.458665][ T8506] ? register_pidns_sysctls+0x48/0x1c0 [ 200.458683][ T8506] ? __asan_memcpy+0x3c/0x60 [ 200.458697][ T8506] register_pidns_sysctls+0x11d/0x1c0 [ 200.458713][ T8506] ? __ns_common_init+0x299/0x4b0 [ 200.458728][ T8506] copy_pid_ns+0x680/0x10a0 [ 200.458744][ T8506] ? copy_utsname+0x466/0x660 [ 200.458756][ T8506] ? __pfx_copy_pid_ns+0x10/0x10 [ 200.458770][ T8506] ? find_held_lock+0x2b/0x80 [ 200.458789][ T8506] ? find_held_lock+0x2b/0x80 [ 200.458811][ T8506] ? copy_utsname+0x466/0x660 [ 200.458828][ T8506] ? copy_utsname+0x466/0x660 [ 200.458851][ T8506] ? put_uts_ns+0xc0/0x270 [ 200.458876][ T8506] create_new_namespaces+0x2aa/0xac0 [ 200.458902][ T8506] unshare_nsproxy_namespaces+0xf2/0x220 [ 200.458918][ T8506] ksys_unshare+0x44f/0x980 [ 200.458931][ T8506] ? __pfx_ksys_unshare+0x10/0x10 [ 200.458953][ T8506] __x64_sys_unshare+0x31/0x40 [ 200.458966][ T8506] do_syscall_64+0x123/0x790 [ 200.458985][ T8506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.458997][ T8506] RIP: 0033:0x7f8dacb9f559 [ 200.459006][ T8506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.459017][ T8506] RSP: 002b:00007f8dada34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 200.459029][ T8506] RAX: ffffffffffffffda RBX: 00007f8dace25fa0 RCX: 00007f8dacb9f559 [ 200.459037][ T8506] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000064000600 [ 200.459044][ T8506] RBP: 00007f8dacc36b20 R08: 0000000000000000 R09: 0000000000000000 [ 200.459052][ T8506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.459059][ T8506] R13: 00007f8dace26038 R14: 00007f8dace25fa0 R15: 00007ffe3c169998 [ 200.459073][ T8506] [ 200.677116][ T3378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.446333][ T6025] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 201.523181][ T68] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 201.524719][ T68] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 201.525607][ T68] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 201.526912][ T68] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 201.527639][ T68] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 201.606999][ T6025] usb 5-1: Using ep0 maxpacket: 32 [ 201.607581][ T6025] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 201.608080][ T6025] usb 5-1: config 0 has no interfaces? [ 201.610021][ T6025] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.610034][ T6025] usb 5-1: Product: syz [ 201.610042][ T6025] usb 5-1: Manufacturer: syz [ 201.610050][ T6025] usb 5-1: SerialNumber: syz [ 201.618897][ T6025] usb 5-1: config 0 descriptor?? [ 201.717788][ T8551] rxe_eth0 speed is unknown, defaulting to 1000 [ 201.788606][ T6025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.829409][ T8551] dummy0 speed is unknown, defaulting to 1000 [ 201.884032][ T6025] usb 9-1: USB disconnect, device number 11 [ 201.978290][ T8581] netlink: 'syz.4.697': attribute type 2 has an invalid length. [ 201.978611][ T5087] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 202.069939][ T8587] macsec1: entered promiscuous mode [ 202.069961][ T8587] bridge0: entered promiscuous mode [ 202.070104][ T8587] macsec1: entered allmulticast mode [ 202.070117][ T8587] bridge0: entered allmulticast mode [ 202.081020][ T8587] __nla_validate_parse: 2 callbacks suppressed [ 202.081032][ T8587] netlink: 4 bytes leftover after parsing attributes in process `syz.3.699'. [ 202.210748][ T8551] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.210811][ T8551] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.210894][ T8551] bridge_slave_0: entered allmulticast mode [ 202.211961][ T8551] bridge_slave_0: entered promiscuous mode [ 202.214617][ T8551] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.214744][ T8551] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.214838][ T8551] bridge_slave_1: entered allmulticast mode [ 202.215991][ T8551] bridge_slave_1: entered promiscuous mode [ 202.241366][ T8551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.245604][ T8551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.268430][ T8551] team0: Port device team_slave_0 added [ 202.271290][ T8551] team0: Port device team_slave_1 added [ 202.291083][ T8551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.291101][ T8551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 202.291122][ T8551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.292527][ T8551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.292540][ T8551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 202.292561][ T8551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.328497][ T8551] hsr_slave_0: entered promiscuous mode [ 202.329405][ T8551] hsr_slave_1: entered promiscuous mode [ 202.329911][ T8551] debugfs: 'hsr0' already exists in 'hsr' [ 202.329928][ T8551] Cannot create hsr debugfs directory [ 202.446245][ T8551] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 202.451761][ T8551] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 202.452582][ T8551] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 202.457521][ T8551] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 202.458298][ T8551] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 202.463596][ T8551] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 202.464396][ T8551] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 202.469029][ T8551] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 202.492187][ T8551] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.492297][ T8551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.492462][ T8551] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.492533][ T8551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.530151][ T8551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.543351][ T169] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.545506][ T169] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.556621][ T8551] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.568699][ T114] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.568745][ T114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.573137][ T114] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.573210][ T114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.815346][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.878365][ T8551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.899741][ T6025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.024805][ T8643] netlink: 224 bytes leftover after parsing attributes in process `syz.4.704'. [ 203.029900][ T8645] capability: warning: `syz.4.704' uses 32-bit capabilities (legacy support in use) [ 203.045190][ T8551] veth0_vlan: entered promiscuous mode [ 203.052545][ T8551] veth1_vlan: entered promiscuous mode [ 203.075634][ T8657] xt_hashlimit: size too large, truncated to 1048576 [ 203.077088][ T8551] veth0_macvtap: entered promiscuous mode [ 203.082249][ T8551] veth1_macvtap: entered promiscuous mode [ 203.097932][ T8551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.108768][ T8551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.137409][ T8341] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.137450][ T8341] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.137482][ T8341] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.137513][ T8341] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.157837][ T5087] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 203.157898][ T5087] Bluetooth: hci2: Injecting HCI hardware error event [ 203.161344][ T5087] Bluetooth: hci2: hardware error 0x00 [ 203.190959][ T43] kauditd_printk_skb: 16 callbacks suppressed [ 203.190972][ T43] audit: type=1400 audit(1793040759.993:721): avc: denied { name_bind } for pid=8662 comm="syz.3.707" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 203.192383][ T238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.192402][ T238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.223474][ T169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.223494][ T169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.230242][ T43] audit: type=1400 audit(1793040760.021:722): avc: denied { getopt } for pid=8667 comm="syz.3.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 203.291177][ T43] audit: type=1400 audit(1793040760.077:723): avc: denied { ioctl } for pid=8667 comm="syz.3.709" path="socket:[25431]" dev="sockfs" ino=25431 ioctlcmd=0x9365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 203.371424][ T8677] x_tables: duplicate underflow at hook 3 [ 203.397936][ T8679] netlink: 144 bytes leftover after parsing attributes in process `syz.5.712'. [ 203.678471][ T8688] netlink: 'syz.5.714': attribute type 10 has an invalid length. [ 203.678550][ T8688] ipvlan0: entered allmulticast mode [ 203.678566][ T8688] veth0_vlan: entered allmulticast mode [ 203.686170][ T8688] team0: Device ipvlan0 failed to register rx_handler [ 203.737301][ T8690] FAULT_INJECTION: forcing a failure. [ 203.737301][ T8690] name failslab, interval 1, probability 0, space 0, times 0 [ 203.737336][ T8690] CPU: 0 UID: 0 PID: 8690 Comm: syz.5.715 Tainted: G L syzkaller #0 PREEMPT(full) [ 203.737363][ T8690] Tainted: [L]=SOFTLOCKUP [ 203.737370][ T8690] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 203.737382][ T8690] Call Trace: [ 203.737390][ T8690] [ 203.737398][ T8690] dump_stack_lvl+0x100/0x190 [ 203.737440][ T8690] should_fail_ex.cold+0x5/0xa [ 203.737471][ T8690] should_failslab+0xc2/0x120 [ 203.737502][ T8690] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 203.737532][ T8690] ? key_alloc+0x423/0x1310 [ 203.737568][ T8690] kmemdup_noprof+0x29/0x60 [ 203.737590][ T8690] key_alloc+0x423/0x1310 [ 203.737630][ T8690] ? __pfx_key_alloc+0x10/0x10 [ 203.737658][ T8690] ? __pfx_sprintf+0x10/0x10 [ 203.737695][ T8690] keyring_alloc+0x44/0xc0 [ 203.737718][ T8690] call_sbin_request_key+0x380/0xd90 [ 203.737754][ T8690] ? __pfx_call_sbin_request_key+0x10/0x10 [ 203.737782][ T8690] ? key_instantiate_and_link+0x39d/0x4b0 [ 203.737810][ T8690] ? key_alloc+0xbb4/0x1310 [ 203.737839][ T8690] ? __pfx_key_instantiate_and_link+0x10/0x10 [ 203.737890][ T8690] ? request_key_auth_new+0x732/0xb50 [ 203.737922][ T8690] ? __pfx_request_key_auth_new+0x10/0x10 [ 203.737961][ T8690] ? __pfx_call_sbin_request_key+0x10/0x10 [ 203.737991][ T8690] request_key_and_link+0x1115/0x1330 [ 203.738025][ T8690] ? __pfx_request_key_and_link+0x10/0x10 [ 203.738053][ T8690] ? __pfx___might_resched+0x10/0x10 [ 203.738079][ T8690] ? __pfx_key_default_cmp+0x10/0x10 [ 203.738100][ T8690] ? __pfx_keyring_search_iterator+0x10/0x10 [ 203.738124][ T8690] ? _copy_from_user+0x59/0xd0 [ 203.738158][ T8690] __do_sys_request_key+0x2a2/0x3c0 [ 203.738182][ T8690] ? __pfx___do_sys_request_key+0x10/0x10 [ 203.738203][ T8690] ? ksys_write+0x1ac/0x250 [ 203.738234][ T8690] do_syscall_64+0x123/0x790 [ 203.738264][ T8690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.738283][ T8690] RIP: 0033:0x7f958239f559 [ 203.738297][ T8690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.738314][ T8690] RSP: 002b:00007f958326a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 203.738333][ T8690] RAX: ffffffffffffffda RBX: 00007f9582625fa0 RCX: 00007f958239f559 [ 203.738344][ T8690] RDX: 0000200000000240 RSI: 00002000000001c0 RDI: 0000200000000180 [ 203.738355][ T8690] RBP: 00007f9582436b20 R08: 0000000000000000 R09: 0000000000000000 [ 203.738366][ T8690] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 203.738378][ T8690] R13: 00007f9582626038 R14: 00007f9582625fa0 R15: 00007ffeaa4fd328 [ 203.738405][ T8690] [ 203.757837][ T68] Bluetooth: hci1: command tx timeout [ 203.796319][ T8692] xt_hashlimit: size too large, truncated to 1048576 [ 203.919200][ T8696] overlayfs: upper fs does not support file handles, falling back to index=off. [ 204.011390][ T6025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.166969][ T8710] x_tables: duplicate underflow at hook 3 [ 204.203862][ T8712] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 204.205718][ T8714] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 204.278014][ T8721] ip_tables: iptables: counters copy to user failed while replacing table [ 204.295251][ T5901] usb 5-1: USB disconnect, device number 13 [ 204.465069][ T43] audit: type=1404 audit(1793040761.181:724): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 204.522020][ T43] audit: type=1404 audit(1793040761.228:725): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 204.533425][ T43] audit: type=1400 audit(1793040761.237:726): avc: denied { create } for pid=8730 comm="syz.0.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 204.533807][ T43] audit: type=1400 audit(1793040761.237:727): avc: denied { module_request } for pid=8730 comm="syz.0.727" kmod="net-pf-2-proto-2-type-2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 204.534741][ T43] audit: type=1400 audit(1793040761.247:728): avc: denied { bind } for pid=8728 comm="syz.5.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 204.535230][ T43] audit: type=1400 audit(1793040761.247:729): avc: denied { accept } for pid=8728 comm="syz.5.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 204.535547][ T43] audit: type=1400 audit(1793040761.247:730): avc: denied { setopt } for pid=8728 comm="syz.5.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 204.731077][ T68] Bluetooth: hci1: Malformed LE Event: 0x1d [ 204.731826][ T8747] ip_tables: iptables: counters copy to user failed while replacing table [ 204.912408][ T8754] rdma_op ffff8880351ada38 conn xmit_rdma 0000000000000000 [ 204.917889][ T8754] netlink: 28 bytes leftover after parsing attributes in process `syz.4.732'. [ 204.917997][ T8754] netlink: 28 bytes leftover after parsing attributes in process `syz.4.732'. [ 204.918078][ T8754] netlink: 28 bytes leftover after parsing attributes in process `syz.4.732'. [ 204.918160][ T8754] netlink: 28 bytes leftover after parsing attributes in process `syz.4.732'. [ 204.918258][ T8754] netlink: 28 bytes leftover after parsing attributes in process `syz.4.732'. [ 204.918365][ T8754] netlink: 28 bytes leftover after parsing attributes in process `syz.4.732'. [ 204.918476][ T8754] netlink: 28 bytes leftover after parsing attributes in process `syz.4.732'. [ 205.123289][ T6025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.381316][ T5087] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 205.897864][ T8788] CacheFiles: Empty directory specified [ 205.934535][ T66] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 205.974679][ T8788] netlink: 'syz.4.739': attribute type 64 has an invalid length. [ 205.977400][ T5087] Bluetooth: hci1: command tx timeout [ 206.063018][ T8660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.084328][ T66] usb 5-1: device descriptor read/64, error -71 [ 206.245080][ T3378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.340569][ T66] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 206.491136][ T66] usb 5-1: device descriptor read/64, error -71 [ 206.607990][ T66] usb usb5-port1: attempt power cycle [ 206.992411][ T66] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 207.014385][ T66] usb 5-1: device descriptor read/8, error -71 [ 207.280907][ T66] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 207.303143][ T66] usb 5-1: device descriptor read/8, error -71 [ 207.345654][ T6025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.420461][ T66] usb usb5-port1: unable to enumerate USB device [ 208.199998][ T5087] Bluetooth: hci1: command tx timeout [ 208.467410][ T6025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.687931][ T8764] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 208.726913][ T8807] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 208.730563][ T43] kauditd_printk_skb: 68 callbacks suppressed [ 208.730574][ T43] audit: type=1400 audit(1793040765.168:799): avc: denied { mount } for pid=8806 comm="syz.3.745" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 208.730974][ T43] audit: type=1400 audit(1793040765.168:800): avc: denied { connect } for pid=8806 comm="syz.3.745" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 208.731334][ T43] audit: type=1400 audit(1793040765.168:801): avc: denied { write } for pid=8806 comm="syz.3.745" laddr=fe80::dcca:6bff:fe4f:f5fd lport=58 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 208.741512][ T43] audit: type=1400 audit(1793040765.177:802): avc: denied { audit_write } for pid=8808 comm="syz.5.746" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 208.748208][ T43] audit: type=1400 audit(1793040765.186:803): avc: denied { unmount } for pid=5751 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 208.794141][ T43] audit: type=1400 audit(1793040765.224:804): avc: denied { name_bind } for pid=8810 comm="syz.3.747" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 208.797782][ T43] audit: type=1400 audit(1793040765.224:805): avc: denied { watch } for pid=8808 comm="syz.5.746" path="/19/bus" dev="tmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 208.797934][ T43] audit: type=1400 audit(1793040765.224:806): avc: denied { watch_sb watch_reads } for pid=8808 comm="syz.5.746" path="/19/bus" dev="tmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 208.800325][ T43] audit: type=1400 audit(1793040765.243:807): avc: denied { ioctl } for pid=8812 comm="syz.4.748" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=26005 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 208.804106][ T43] audit: type=1400 audit(1793040765.243:808): avc: denied { execmem } for pid=8810 comm="syz.3.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 208.900231][ T8814] Set syz1 is full, maxelem 256 reached [ 208.971414][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 209.311714][ T8660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.567989][ T3378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.578707][ T5839] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 209.745335][ T5839] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 209.745422][ T5839] usb 5-1: too many configurations: 102, using maximum allowed: 8 [ 209.746500][ T5839] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 209.746521][ T5839] usb 5-1: config 1 has no interface number 0 [ 209.747489][ T5839] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 209.747509][ T5839] usb 5-1: config 1 has no interface number 0 [ 209.748423][ T5839] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 209.748448][ T5839] usb 5-1: config 1 has no interface number 0 [ 209.749911][ T5839] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 209.749929][ T5839] usb 5-1: config 1 has no interface number 0 [ 209.750894][ T5839] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 209.750911][ T5839] usb 5-1: config 1 has no interface number 0 [ 209.753222][ T5839] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 209.753240][ T5839] usb 5-1: config 1 has no interface number 0 [ 209.754177][ T5839] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 209.754196][ T5839] usb 5-1: config 1 has no interface number 0 [ 209.755094][ T5839] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 209.755112][ T5839] usb 5-1: config 1 has no interface number 0 [ 209.757038][ T5839] usb 5-1: New USB device strings: Mfr=219, Product=128, SerialNumber=211 [ 209.757057][ T5839] usb 5-1: Product: syz [ 209.757069][ T5839] usb 5-1: Manufacturer: syz [ 209.757081][ T5839] usb 5-1: SerialNumber: syz [ 209.765610][ T5839] usb 5-1: 3:0 : does not exist [ 209.765627][ T5839] usb 5-1: 3:0 : does not exist [ 209.778573][ T8855] __nla_validate_parse: 26 callbacks suppressed [ 209.778585][ T8855] netlink: 28 bytes leftover after parsing attributes in process `syz.3.757'. [ 209.934190][ T8832] FAULT_INJECTION: forcing a failure. [ 209.934190][ T8832] name fail_futex, interval 1, probability 0, space 0, times 1 [ 209.934224][ T8832] CPU: 2 UID: 0 PID: 8832 Comm: syz.4.752 Tainted: G L syzkaller #0 PREEMPT(full) [ 209.934249][ T8832] Tainted: [L]=SOFTLOCKUP [ 209.934256][ T8832] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 209.934267][ T8832] Call Trace: [ 209.934285][ T8832] [ 209.934293][ T8832] dump_stack_lvl+0x100/0x190 [ 209.934363][ T8832] should_fail_ex.cold+0x5/0xa [ 209.934397][ T8832] get_futex_key+0x28c/0x13e0 [ 209.934426][ T8832] ? __pfx_get_futex_key+0x10/0x10 [ 209.934450][ T8832] ? __mutex_unlock_slowpath+0x35d/0x930 [ 209.934585][ T8832] futex_wake+0xf4/0x5e0 [ 209.934606][ T8832] ? __pfx_futex_wake+0x10/0x10 [ 209.934633][ T8832] ? lock_acquire+0x1d1/0x380 [ 209.934656][ T8832] ? detach_task_ctx_data+0x83/0x490 [ 209.934696][ T8832] do_futex+0x2b2/0x440 [ 209.934725][ T8832] ? __pfx_do_futex+0x10/0x10 [ 209.934750][ T8832] ? __might_fault+0xc5/0x140 [ 209.934778][ T8832] mm_exit_exec_release+0x256/0x2f0 [ 209.934803][ T8832] do_exit+0x707/0x2a40 [ 209.934835][ T8832] ? __pfx_do_exit+0x10/0x10 [ 209.934860][ T8832] ? do_raw_spin_lock+0x128/0x260 [ 209.934888][ T8832] ? find_held_lock+0x2b/0x80 [ 209.934914][ T8832] ? get_signal+0x7e0/0x21e0 [ 209.934939][ T8832] do_group_exit+0xd5/0x2a0 [ 209.934968][ T8832] get_signal+0x1ec7/0x21e0 [ 209.935005][ T8832] ? __pfx_get_signal+0x10/0x10 [ 209.935030][ T8832] ? do_futex+0x190/0x440 [ 209.935059][ T8832] arch_do_signal_or_restart+0x91/0x7e0 [ 209.935089][ T8832] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 209.935133][ T8832] exit_to_user_mode_loop+0x139/0x700 [ 209.935158][ T8832] ? rcu_is_watching+0x13/0xc0 [ 209.935186][ T8832] do_syscall_64+0x661/0x790 [ 209.935231][ T8832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.935249][ T8832] RIP: 0033:0x7f68bd39f559 [ 209.935262][ T8832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.935278][ T8832] RSP: 002b:00007f68be29d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 209.935314][ T8832] RAX: fffffffffffffe00 RBX: 00007f68bd625fa8 RCX: 00007f68bd39f559 [ 209.935326][ T8832] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f68bd625fa8 [ 209.935338][ T8832] RBP: 00007f68bd625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 209.935348][ T8832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 209.935359][ T8832] R13: 00007f68bd626038 R14: 00007fff972aff40 R15: 00007fff972b0028 [ 209.935382][ T8832] [ 209.983002][ T8840] jffs2: notice: (8840) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 210.006975][ T5105] usb 5-1: USB disconnect, device number 18 [ 210.075676][ T8862] ±ÿ: renamed from lo (while UP) [ 210.177603][ T8870] netlink: 4 bytes leftover after parsing attributes in process `syz.4.763'. [ 210.185024][ T8870] erspan0: entered promiscuous mode [ 210.185142][ T8870] macvtap1: entered promiscuous mode [ 210.185238][ T8870] macvtap1: entered allmulticast mode [ 210.185246][ T8870] erspan0: entered allmulticast mode [ 210.192510][ T8870] erspan0: left allmulticast mode [ 210.192593][ T8870] erspan0: left promiscuous mode [ 210.193984][ T8870] macvtap1: left promiscuous mode [ 210.193994][ T8870] macvtap1: left allmulticast mode [ 210.226753][ T8878] binder: 8877:8878 ioctl 4018620d 0 returned -22 [ 210.228114][ T8878] netlink: 'syz.4.765': attribute type 64 has an invalid length. [ 210.228131][ T8878] netlink: 'syz.4.765': attribute type 4 has an invalid length. [ 210.228140][ T8878] netlink: 152 bytes leftover after parsing attributes in process `syz.4.765'. [ 210.242651][ T8878] kvm: user requested TSC rate below hardware speed [ 210.246283][ T8878] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 210.433395][ T5087] Bluetooth: hci1: command tx timeout [ 210.679537][ T6025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.754606][ T8895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.771'. [ 210.771731][ T8899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.771'. [ 210.873649][ T8902] fuse: Bad value for 'fd' [ 210.873843][ T8902] fuse: Bad value for 'fd' [ 210.874027][ T8902] fuse: Bad value for 'fd' [ 210.874204][ T8902] fuse: Bad value for 'fd' [ 210.874394][ T8902] fuse: Bad value for 'fd' [ 210.874571][ T8902] fuse: Bad value for 'fd' [ 210.874753][ T8902] fuse: Bad value for 'fd' [ 210.874939][ T8902] fuse: Bad value for 'fd' [ 210.875145][ T8902] fuse: Bad value for 'fd' [ 210.875331][ T8902] fuse: Bad value for 'fd' [ 210.875517][ T8902] fuse: Bad value for 'fd' [ 210.875695][ T8902] fuse: Bad value for 'fd' [ 210.875876][ T8902] fuse: Bad value for 'fd' [ 210.876094][ T8902] fuse: Bad value for 'fd' [ 210.876318][ T8902] fuse: Bad value for 'fd' [ 210.876508][ T8902] fuse: Bad value for 'fd' [ 210.876709][ T8902] fuse: Bad value for 'fd' [ 210.876897][ T8902] fuse: Bad value for 'fd' [ 210.877079][ T8902] fuse: Bad value for 'fd' [ 210.877258][ T8902] fuse: Bad value for 'fd' [ 210.877444][ T8902] fuse: Bad value for 'fd' [ 210.877677][ T8902] fuse: Bad value for 'fd' [ 210.877884][ T8902] fuse: Bad value for 'fd' [ 210.878073][ T8902] fuse: Bad value for 'fd' [ 210.878253][ T8902] fuse: Bad value for 'fd' [ 210.878436][ T8902] fuse: Bad value for 'fd' [ 210.878616][ T8902] fuse: Bad value for 'fd' [ 210.878798][ T8902] fuse: Bad value for 'fd' [ 210.878977][ T8902] fuse: Bad value for 'fd' [ 210.879154][ T8902] fuse: Bad value for 'fd' [ 210.879341][ T8902] fuse: Bad value for 'fd' [ 210.879519][ T8902] fuse: Bad value for 'fd' [ 210.879698][ T8902] fuse: Bad value for 'fd' [ 211.224493][ T8915] syzkaller0: entered promiscuous mode [ 211.224508][ T8915] syzkaller0: entered allmulticast mode [ 211.318274][ T8921] rxe_eth0 speed is unknown, defaulting to 1000 [ 211.412280][ T8921] dummy0 speed is unknown, defaulting to 1000 [ 211.603576][ T8947] ovs-dp0: entered promiscuous mode [ 211.801494][ T6025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.977499][ T8964] FAULT_INJECTION: forcing a failure. [ 211.977499][ T8964] name failslab, interval 1, probability 0, space 0, times 0 [ 211.977523][ T8964] CPU: 0 UID: 0 PID: 8964 Comm: syz.5.788 Tainted: G L syzkaller #0 PREEMPT(full) [ 211.977540][ T8964] Tainted: [L]=SOFTLOCKUP [ 211.977544][ T8964] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 211.977551][ T8964] Call Trace: [ 211.977567][ T8964] [ 211.977573][ T8964] dump_stack_lvl+0x100/0x190 [ 211.977633][ T8964] should_fail_ex.cold+0x5/0xa [ 211.977650][ T8964] should_failslab+0xc2/0x120 [ 211.977671][ T8964] kmem_cache_alloc_noprof+0x92/0x6a0 [ 211.977685][ T8964] ? __pud_alloc+0x4f6/0x690 [ 211.977700][ T8964] ? __pmd_alloc+0xbf/0x950 [ 211.977718][ T8964] __pmd_alloc+0xbf/0x950 [ 211.977733][ T8964] ? __pud_alloc+0x4fb/0x690 [ 211.977749][ T8964] __handle_mm_fault+0xa9d/0x2f60 [ 211.977764][ T8964] ? __pfx___handle_mm_fault+0x10/0x10 [ 211.977774][ T8964] ? __pfx_mt_find+0x10/0x10 [ 211.977868][ T8964] handle_mm_fault+0x363/0xa20 [ 211.977884][ T8964] __get_user_pages+0x8ae/0x2c30 [ 211.977905][ T8964] ? __pfx___get_user_pages+0x10/0x10 [ 211.977921][ T8964] ? lock_acquire+0x1d1/0x380 [ 211.977934][ T8964] ? mmap_read_lock_maybe_expand+0x1e2/0x3d0 [ 211.977961][ T8964] get_user_pages_remote+0x3d2/0xb10 [ 211.977979][ T8964] ? __pfx_get_user_pages_remote+0x10/0x10 [ 211.978000][ T8964] get_arg_page+0xf4/0x310 [ 211.978014][ T8964] ? __pfx_get_arg_page+0x10/0x10 [ 211.978027][ T8964] ? do_raw_spin_lock+0x128/0x260 [ 211.978042][ T8964] ? alloc_bprm+0x54e/0x9e0 [ 211.978055][ T8964] ? alloc_bprm+0x54e/0x9e0 [ 211.978070][ T8964] copy_string_kernel+0x17d/0x3f0 [ 211.978086][ T8964] ? alloc_bprm+0x596/0x9e0 [ 211.978101][ T8964] do_execveat_common.isra.0+0x2e6/0x580 [ 211.978118][ T8964] __x64_sys_execve+0x93/0xd0 [ 211.978161][ T8964] do_syscall_64+0x123/0x790 [ 211.978182][ T8964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.978194][ T8964] RIP: 0033:0x7f958239f559 [ 211.978205][ T8964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.978217][ T8964] RSP: 002b:00007f958326a028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 211.978246][ T8964] RAX: ffffffffffffffda RBX: 00007f9582625fa0 RCX: 00007f958239f559 [ 211.978255][ T8964] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000016c0 [ 211.978262][ T8964] RBP: 00007f9582436b20 R08: 0000000000000000 R09: 0000000000000000 [ 211.978269][ T8964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.978277][ T8964] R13: 00007f9582626038 R14: 00007f9582625fa0 R15: 00007ffeaa4fd328 [ 211.978293][ T8964] [ 212.445576][ T8976] cgroup: fork rejected by pids controller in /syz3 [ 212.474878][ T842] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 212.563141][ T5839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.611433][ T9074] netlink: 72 bytes leftover after parsing attributes in process `syz.0.795'. [ 212.637856][ T842] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 212.638941][ T842] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.638998][ T842] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 212.639020][ T842] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 212.640615][ T842] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 212.640633][ T842] usb 10-1: Product: syz [ 212.640645][ T842] usb 10-1: Manufacturer: syz [ 212.655578][ T9005] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 212.657836][ T842] garmin_gps 10-1:1.0: Garmin GPS usb/tty converter detected [ 212.663615][ T842] usb 10-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 212.689838][ T9084] netlink: 68 bytes leftover after parsing attributes in process `syz.0.796'. [ 212.876458][ T9111] 9pnet_virtio: no channels available for device syz [ 212.878497][ T9005] FAULT_INJECTION: forcing a failure. [ 212.878497][ T9005] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.878521][ T9005] CPU: 1 UID: 0 PID: 9005 Comm: syz.5.791 Tainted: G L syzkaller #0 PREEMPT(full) [ 212.878536][ T9005] Tainted: [L]=SOFTLOCKUP [ 212.878540][ T9005] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 212.878547][ T9005] Call Trace: [ 212.878552][ T9005] [ 212.878556][ T9005] dump_stack_lvl+0x100/0x190 [ 212.878594][ T9005] should_fail_ex.cold+0x5/0xa [ 212.878612][ T9005] _copy_from_user+0x2e/0xd0 [ 212.878654][ T9005] memdup_user+0x6b/0xe0 [ 212.878668][ T9005] strndup_user+0x78/0xe0 [ 212.878682][ T9005] __x64_sys_mount+0x17f/0x310 [ 212.878696][ T9005] ? __pfx___x64_sys_mount+0x10/0x10 [ 212.878714][ T9005] do_syscall_64+0x123/0x790 [ 212.878733][ T9005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.878745][ T9005] RIP: 0033:0x7f958239f559 [ 212.878754][ T9005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.878764][ T9005] RSP: 002b:00007f958326a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 212.878775][ T9005] RAX: ffffffffffffffda RBX: 00007f9582625fa0 RCX: 00007f958239f559 [ 212.878783][ T9005] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000200000000180 [ 212.878789][ T9005] RBP: 00007f9582436b20 R08: 0000200000000240 R09: 0000000000000000 [ 212.878796][ T9005] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000000 [ 212.878802][ T9005] R13: 00007f9582626038 R14: 00007f9582625fa0 R15: 00007ffeaa4fd328 [ 212.878816][ T9005] [ 212.883294][ T842] usb 10-1: USB disconnect, device number 2 [ 212.888666][ T842] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 212.888969][ T842] garmin_gps 10-1:1.0: device disconnected [ 212.902176][ T3378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.211706][ T5105] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 213.268095][ T9158] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 213.383470][ T5105] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 213.384321][ T5105] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 213.384337][ T5105] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 213.384350][ T5105] usb 5-1: config 0 interface 0 has no altsetting 0 [ 213.385903][ T5105] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 213.385916][ T5105] usb 5-1: Product: syz [ 213.385924][ T5105] usb 5-1: Manufacturer: syz [ 213.385932][ T5105] usb 5-1: SerialNumber: syz [ 213.392597][ T5105] usb 5-1: config 0 descriptor?? [ 213.396214][ T5105] usb 5-1: selecting invalid altsetting 0 [ 213.520030][ T9173] netlink: 64 bytes leftover after parsing attributes in process `syz.5.806'. [ 213.612067][ T5105] usb 5-1: USB disconnect, device number 19 [ 213.883694][ T9196] befs: (nbd5): No write support. Marking filesystem read-only [ 213.884164][ T9196] befs: (nbd5): unable to read superblock [ 213.927412][ T9200] netlink: 16 bytes leftover after parsing attributes in process `syz.5.815'. [ 214.016731][ T6025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.260876][ T9213] xt_hashlimit: size too large, truncated to 1048576 [ 214.357598][ T43] kauditd_printk_skb: 128 callbacks suppressed [ 214.357613][ T43] audit: type=1400 audit(1793040770.436:937): avc: denied { append } for pid=9220 comm="syz.5.822" name="uprobe_events" dev="tracefs" ino=3093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 214.396812][ T43] audit: type=1400 audit(1793040770.464:938): avc: denied { read write } for pid=9217 comm="syz.3.821" name="uinput" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 214.396958][ T43] audit: type=1400 audit(1793040770.464:939): avc: denied { open } for pid=9217 comm="syz.3.821" path="/dev/uinput" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 214.404259][ T43] audit: type=1400 audit(1793040770.474:940): avc: denied { mount } for pid=9224 comm="syz.4.824" name="/" dev="ramfs" ino=28620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 214.415699][ T43] audit: type=1400 audit(1793040770.492:941): avc: denied { shutdown } for pid=9224 comm="syz.4.824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 214.417119][ T43] audit: type=1400 audit(1793040770.492:942): avc: denied { mounton } for pid=9224 comm="syz.4.824" path="/file0" dev="ramfs" ino=28622 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 214.435017][ T9226] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 214.435041][ T9226] overlayfs: failed to set xattr on upper [ 214.435049][ T9226] overlayfs: ...falling back to redirect_dir=nofollow. [ 214.435056][ T9226] overlayfs: ...falling back to index=off. [ 214.435063][ T9226] overlayfs: ...falling back to uuid=null. [ 214.495596][ T9231] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 214.517386][ T43] audit: type=1400 audit(1793040770.586:943): avc: denied { connect } for pid=9232 comm="syz.4.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 214.518882][ T43] audit: type=1400 audit(1793040770.586:944): avc: denied { read write } for pid=9232 comm="syz.4.827" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 214.519061][ T43] audit: type=1400 audit(1793040770.586:945): avc: denied { open } for pid=9232 comm="syz.4.827" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 214.519240][ T9233] program syz.4.827 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 214.555487][ T43] audit: type=1400 audit(1793040770.614:946): avc: denied { write } for pid=9235 comm="syz.4.828" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 214.555873][ T9236] random: crng reseeded on system resumption [ 215.136937][ T6025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.665894][ T9260] netlink: 24 bytes leftover after parsing attributes in process `syz.5.833'. [ 215.711050][ T9268] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 215.747581][ T9272] netlink: 'syz.5.837': attribute type 1 has an invalid length. [ 215.760535][ T9272] bond1: entered promiscuous mode [ 215.760721][ T9272] 8021q: adding VLAN 0 to HW filter on device bond1 [ 215.780797][ T9275] xt_hashlimit: size too large, truncated to 1048576 [ 215.783357][ T9272] 8021q: adding VLAN 0 to HW filter on device bond1 [ 215.783505][ T9272] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 215.783515][ T9272] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 215.785405][ T9272] bond1: (slave xfrm1): making interface the new active one [ 215.785417][ T9272] xfrm1: entered promiscuous mode [ 215.797807][ T9272] xfrm1: left promiscuous mode [ 215.821390][ T5839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.033171][ T9291] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=130 sclass=netlink_route_socket pid=9291 comm=syz.5.844 [ 216.033187][ T9293] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=130 sclass=netlink_route_socket pid=9293 comm=syz.5.844 [ 216.041235][ T9288] netlink: 'syz.3.843': attribute type 10 has an invalid length. [ 216.054849][ T9288] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 216.057608][ T9288] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 216.104271][ T9294] lo: entered promiscuous mode [ 216.104446][ T9294] tunl0: entered promiscuous mode [ 216.106437][ T9294] gre0: entered promiscuous mode [ 216.119879][ T9294] erspan0: entered promiscuous mode [ 216.121467][ T9294] ip_vti0: entered promiscuous mode [ 216.122352][ T9294] ip6_vti0: entered promiscuous mode [ 216.123521][ T9294] sit0: entered promiscuous mode [ 216.125782][ T9294] ip6tnl0: entered promiscuous mode [ 216.126891][ T9294] ip6gre0: entered promiscuous mode [ 216.132764][ T9294] ip6gretap0: entered promiscuous mode [ 216.138894][ T9294] bond0: entered promiscuous mode [ 216.138906][ T9294] bond_slave_0: entered promiscuous mode [ 216.139016][ T9308] xt_hashlimit: size too large, truncated to 1048576 [ 216.139026][ T9294] bond_slave_1: entered promiscuous mode [ 216.142592][ T9294] team0: entered promiscuous mode [ 216.142604][ T9294] team_slave_0: entered promiscuous mode [ 216.142692][ T9294] team_slave_1: entered promiscuous mode [ 216.144134][ T9294] dummy0: entered promiscuous mode [ 216.152293][ T9294] nlmon0: entered promiscuous mode [ 216.153364][ T9294] vxcan0: entered promiscuous mode [ 216.155116][ T9294] vxcan1: entered promiscuous mode [ 216.155971][ T9294] veth0: entered promiscuous mode [ 216.158455][ T9294] veth1: entered promiscuous mode [ 216.164589][ T9294] wg0: entered promiscuous mode [ 216.166605][ T9294] wg1: entered promiscuous mode [ 216.169214][ T9294] wg2: entered promiscuous mode [ 216.170696][ T9294] veth0_to_bridge: entered promiscuous mode [ 216.181061][ T9294] bridge_slave_0: entered promiscuous mode [ 216.184241][ T9294] veth1_to_bridge: entered promiscuous mode [ 216.194555][ T9294] bridge_slave_1: entered promiscuous mode [ 216.195500][ T9294] veth0_to_bond: entered promiscuous mode [ 216.199232][ T9294] veth1_to_bond: entered promiscuous mode [ 216.208097][ T9294] veth0_to_team: entered promiscuous mode [ 216.216891][ T9294] veth1_to_team: entered promiscuous mode [ 216.233927][ T9294] veth0_to_batadv: entered promiscuous mode [ 216.242915][ T9294] batadv_slave_0: entered promiscuous mode [ 216.246959][ T3378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.251254][ T9294] veth1_to_batadv: entered promiscuous mode [ 216.258178][ T9294] batadv_slave_1: entered promiscuous mode [ 216.260975][ T9294] xfrm0: entered promiscuous mode [ 216.262652][ T9294] veth0_to_hsr: entered promiscuous mode [ 216.266136][ T9294] veth1_to_hsr: entered promiscuous mode [ 216.270599][ T9294] hsr0: entered promiscuous mode [ 216.272639][ T9294] veth1_virt_wifi: entered promiscuous mode [ 216.274659][ T9294] veth0_virt_wifi: entered promiscuous mode [ 216.276613][ T9294] virt_wifi0: entered promiscuous mode [ 216.283011][ T9294] vlan0: entered promiscuous mode [ 216.284179][ T9294] vlan1: entered promiscuous mode [ 216.286104][ T9294] macvlan0: entered promiscuous mode [ 216.288347][ T9294] macvlan1: entered promiscuous mode [ 216.291660][ T9294] ipvlan0: entered promiscuous mode [ 216.291737][ T9294] ipvlan1: entered promiscuous mode [ 216.297626][ T9294] macvtap0: entered promiscuous mode [ 216.298742][ T9294] macsec0: entered promiscuous mode [ 216.301798][ T9294] geneve0: entered promiscuous mode [ 216.303024][ T9294] geneve1: entered promiscuous mode [ 216.310379][ T9294] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 216.313677][ T9312] usb usb2: check_ctrlrecip: process 9312 (syz.3.849) requesting ep 01 but needs 81 [ 216.313699][ T9312] usb usb2: usbfs: process 9312 (syz.3.849) did not claim interface 0 before use [ 216.322071][ T9294] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 216.329501][ T9294] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 216.331190][ T9294] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 216.332555][ T9294] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 216.332637][ T9294] gtp0: entered promiscuous mode [ 216.332715][ T9294] veth2: entered promiscuous mode [ 216.332801][ T9294] veth3: entered promiscuous mode [ 216.333032][ T9294] @: entered promiscuous mode [ 216.334877][ T9294] bridge0: entered promiscuous mode [ 216.334984][ T9294] syztnl0: entered promiscuous mode [ 216.335041][ T9294] vcan0: entered promiscuous mode [ 216.354539][ T12] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.354568][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.354597][ T12] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.354618][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.354644][ T12] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.354663][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.354690][ T12] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.354711][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.466877][ T9318] netlink: 32 bytes leftover after parsing attributes in process `syz.0.852'. [ 216.653140][ T6025] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 216.804465][ T9339] netlink: 24 bytes leftover after parsing attributes in process `syz.4.862'. [ 216.812969][ T6025] usb 8-1: Using ep0 maxpacket: 8 [ 216.813455][ T6025] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 216.814320][ T6025] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 216.814333][ T6025] usb 8-1: config 179 has no interface number 0 [ 216.814356][ T6025] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 216.814370][ T6025] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 216.814382][ T6025] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 216.814394][ T6025] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 216.814407][ T6025] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 216.814426][ T6025] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.819102][ T9314] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 217.061718][ T6025] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:179.65/input/input16 [ 217.202800][ T9367] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 217.288107][ T9314] netfs: Cache "CacheFiles" added (type cachefiles) [ 217.288130][ T9314] CacheFiles: File cache on CacheFiles registered [ 217.291214][ T9314] CacheFiles: File cache on CacheFiles unregistering [ 217.291224][ T9314] netfs: Withdrawing cache "CacheFiles" (0 objs) [ 217.293983][ T6023] usb 8-1: USB disconnect, device number 15 [ 217.295684][ C3] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 217.359184][ T6025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.446502][ T9365] [U] J"—E:ÀÆ" [ 217.507313][ T9385] netlink: 'syz.0.877': attribute type 21 has an invalid length. [ 217.508910][ T9385] Cannot find set identified by id 0 to match [ 217.547905][ T9387] xt_hashlimit: size too large, truncated to 1048576 [ 217.691302][ T5087] Bluetooth: hci0: unexpected event for opcode 0x201c [ 218.053808][ T9408] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 218.054280][ T9409] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 218.297981][ T9418] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 218.328362][ T9424] xt_hashlimit: size too large, truncated to 1048576 [ 218.458751][ T6023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.757791][ T6023] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 218.863225][ T9438] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 218.888939][ T5902] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 218.950114][ T6023] usb 5-1: Using ep0 maxpacket: 8 [ 218.950844][ T6023] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 218.951740][ T6023] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 218.951764][ T6023] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.953560][ T6023] usb 5-1: config 0 descriptor?? [ 219.057436][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.176925][ T5902] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 219.181925][ T6023] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 219.444677][ T9457] netlink: 8 bytes leftover after parsing attributes in process `syz.5.897'. [ 219.444783][ T9457] xt_cgroup: path and classid specified [ 219.463479][ T9459] can0: slcan on ttyS3. [ 219.528471][ T9461] netlink: 4340 bytes leftover after parsing attributes in process `syz.0.892'. [ 219.528488][ T9461] openvswitch: netlink: Flow key attr not present in new flow. [ 219.570018][ T6025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.584688][ T9459] can0 (unregistered): slcan off ttyS3. [ 219.719941][ T5902] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 219.756580][ T9439] ceph: No mds server is up or the cluster is laggy [ 219.880061][ T9473] xt_hashlimit: size too large, truncated to 1048576 [ 220.035433][ T9478] netlink: 'syz.4.901': attribute type 1 has an invalid length. [ 220.082254][ T9478] bridge1: entered promiscuous mode [ 220.089785][ T9478] bond4: (slave bridge1): making interface the new active one [ 220.096774][ T9478] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 220.274549][ T9486] kvm: Disabled LAPIC found during irq injection [ 220.274559][ T9486] kvm: apic: phys broadcast and lowest prio [ 220.384945][ T9491] iommufd_mock iommufd_mock0: Adding to iommu group 5 [ 220.450793][ T9498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.907'. [ 220.450859][ T9498] openvswitch: netlink: Message has 8 unknown bytes. [ 220.511453][ T43] kauditd_printk_skb: 37 callbacks suppressed [ 220.511468][ T43] audit: type=1400 audit(1793040776.201:984): avc: denied { map } for pid=9497 comm="syz.4.907" path="/161/file0" dev="tmpfs" ino=895 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 220.511635][ T43] audit: type=1400 audit(1793040776.201:985): avc: denied { execute } for pid=9497 comm="syz.4.907" path="/161/file0" dev="tmpfs" ino=895 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 220.560420][ T43] audit: type=1400 audit(1793040776.238:986): avc: denied { mounton } for pid=9506 comm="syz.4.909" path="/162/config" dev="configfs" ino=2120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 220.567851][ T9508] UDC core: g1: couldn't find an available UDC or it's busy [ 220.586989][ T66] usb 5-1: USB disconnect, device number 20 [ 220.657524][ T43] audit: type=1400 audit(1793040776.332:987): avc: denied { mounton } for pid=9513 comm="syz.5.910" path="/60/file0" dev="tmpfs" ino=355 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 220.657620][ T9514] fuse: Bad value for 'group_id' [ 220.657629][ T9514] fuse: Bad value for 'group_id' [ 220.658925][ T43] audit: type=1400 audit(1793040776.332:988): avc: denied { write } for pid=9513 comm="syz.5.910" name="btrfs-control" dev="devtmpfs" ino=1339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 220.682125][ T6023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.745077][ T43] audit: type=1400 audit(1793040776.407:989): avc: denied { connect } for pid=9517 comm="syz.4.912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 220.799702][ T43] audit: type=1400 audit(1793040776.472:990): avc: denied { shutdown } for pid=9517 comm="syz.4.912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 220.881163][ T9523] xt_hashlimit: size too large, truncated to 1048576 [ 220.977764][ T43] audit: type=1400 audit(1793040776.631:991): avc: denied { setattr } for pid=9526 comm="syz.5.914" name="vmci" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 221.016229][ T43] audit: type=1800 audit(1793040776.669:992): pid=9527 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.5.914" name="/vmci" dev="devtmpfs" ino=707 res=0 errno=0 [ 221.795459][ T6023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.810342][ T9555] __vm_enough_memory: pid: 9555, comm: syz.3.919, bytes: 11728079945728 not enough memory for the allocation [ 221.810367][ T9555] __vm_enough_memory: pid: 9555, comm: syz.3.919, bytes: 11728079945728 not enough memory for the allocation [ 221.810380][ T9555] __vm_enough_memory: pid: 9555, comm: syz.3.919, bytes: 11728079945728 not enough memory for the allocation [ 221.810393][ T9555] __vm_enough_memory: pid: 9555, comm: syz.3.919, bytes: 11728079945728 not enough memory for the allocation [ 221.810405][ T9555] __vm_enough_memory: pid: 9555, comm: syz.3.919, bytes: 11728079945728 not enough memory for the allocation [ 221.810417][ T9555] __vm_enough_memory: pid: 9555, comm: syz.3.919, bytes: 11728079945728 not enough memory for the allocation [ 221.810430][ T9555] __vm_enough_memory: pid: 9555, comm: syz.3.919, bytes: 11728079945728 not enough memory for the allocation [ 221.810443][ T9555] __vm_enough_memory: pid: 9555, comm: syz.3.919, bytes: 11728079945728 not enough memory for the allocation [ 221.810455][ T9555] __vm_enough_memory: pid: 9555, comm: syz.3.919, bytes: 11728079945728 not enough memory for the allocation [ 221.810467][ T9555] __vm_enough_memory: pid: 9555, comm: syz.3.919, bytes: 11728079945728 not enough memory for the allocation [ 222.306371][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.311215][ T43] audit: type=1400 audit(1793040777.876:993): avc: denied { create } for pid=9567 comm="syz.0.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 222.904029][ T68] Bluetooth: hci1: command 0x0405 tx timeout [ 222.904054][ T3378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.919668][ T9598] FAULT_INJECTION: forcing a failure. [ 223.919668][ T9598] name failslab, interval 1, probability 0, space 0, times 0 [ 223.919720][ T9598] CPU: 2 UID: 0 PID: 9598 Comm: syz.0.932 Tainted: G L syzkaller #0 PREEMPT(full) [ 223.919745][ T9598] Tainted: [L]=SOFTLOCKUP [ 223.919751][ T9598] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 223.919762][ T9598] Call Trace: [ 223.919781][ T9598] [ 223.919789][ T9598] dump_stack_lvl+0x100/0x190 [ 223.919864][ T9598] should_fail_ex.cold+0x5/0xa [ 223.919891][ T9598] should_failslab+0xc2/0x120 [ 223.919931][ T9598] __kmalloc_noprof+0xfc/0x840 [ 223.919952][ T9598] ? rcu_is_watching+0x13/0xc0 [ 223.919979][ T9598] ? tomoyo_realpath_from_path+0xb6/0x690 [ 223.920026][ T9598] tomoyo_realpath_from_path+0xb6/0x690 [ 223.920050][ T9598] tomoyo_path_number_perm+0x23c/0x580 [ 223.920075][ T9598] ? tomoyo_path_number_perm+0x22e/0x580 [ 223.920102][ T9598] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 223.920137][ T9598] ? __lock_acquire+0x5c0/0x1f40 [ 223.920199][ T9598] ? __fget_files+0x34/0x3d0 [ 223.920228][ T9598] ? find_held_lock+0x2b/0x80 [ 223.920253][ T9598] ? hook_file_ioctl_common+0x140/0x440 [ 223.920280][ T9598] ? __fget_files+0x21f/0x3d0 [ 223.920309][ T9598] security_file_ioctl+0xd3/0x230 [ 223.920337][ T9598] __x64_sys_ioctl+0xb7/0x210 [ 223.920361][ T9598] do_syscall_64+0x123/0x790 [ 223.920511][ T9598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.920528][ T9598] RIP: 0033:0x7f8dacb9f559 [ 223.920544][ T9598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.920560][ T9598] RSP: 002b:00007f8dada34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 223.920655][ T9598] RAX: ffffffffffffffda RBX: 00007f8dace25fa0 RCX: 00007f8dacb9f559 [ 223.920666][ T9598] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 223.920677][ T9598] RBP: 00007f8dada34090 R08: 0000000000000000 R09: 0000000000000000 [ 223.920687][ T9598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.920697][ T9598] R13: 00007f8dace26038 R14: 00007f8dace25fa0 R15: 00007ffe3c169998 [ 223.920723][ T9598] [ 223.920731][ T9598] ERROR: Out of memory at tomoyo_realpath_from_path. [ 224.027332][ T6023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.105425][ T9605] lo: entered promiscuous mode [ 224.106536][ T9605] bond0: entered promiscuous mode [ 224.106797][ T9605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.107402][ T9605] dummy0: entered promiscuous mode [ 224.110866][ T9605] eql: entered promiscuous mode [ 224.111235][ T9605] ifb0: entered promiscuous mode [ 224.111833][ T9605] ifb1: entered promiscuous mode [ 224.115426][ T9605] e1000 0000:00:06.0 eth0: entered promiscuous mode [ 224.126551][ T9605] e1000e 0000:00:02.0 eth1: entered promiscuous mode [ 224.129671][ T9605] mac80211_hwsim hwsim0 wlan0: entered promiscuous mode [ 224.130704][ T9605] mac80211_hwsim hwsim1 wlan1: entered promiscuous mode [ 224.131869][ T9605] hwsim0: entered promiscuous mode [ 224.132578][ T9605] ieee802154 phy1 wpan1: entered promiscuous mode [ 224.136084][ T9605] teql0: entered promiscuous mode [ 224.136101][ T9605] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 224.136159][ T5901] dummy0 speed is unknown, defaulting to 1000 [ 224.253025][ T9531] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 224.327014][ T9615] netlink: 112 bytes leftover after parsing attributes in process `syz.5.937'. [ 224.414734][ T9625] netlink: 16 bytes leftover after parsing attributes in process `syz.5.939'. [ 224.414760][ T9625] netlink: 20 bytes leftover after parsing attributes in process `syz.5.939'. [ 225.134621][ T9635] xt_hashlimit: size too large, truncated to 1048576 [ 225.160570][ T6023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.294151][ T9648] Cannot find add_set index 65532 as target [ 225.459885][ T6023] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 225.554374][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.641358][ T6023] usb 9-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 225.653586][ T6023] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 225.653611][ T6023] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 225.656623][ T6023] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 225.656642][ T6023] usb 9-1: Product: syz [ 225.656654][ T6023] usb 9-1: Manufacturer: syz [ 225.662157][ T6023] iuu_phoenix 9-1:1.0: iuu_phoenix converter detected [ 225.667196][ T6023] usb 9-1: iuu_phoenix converter now attached to ttyUSB0 [ 225.844829][ T9695] xt_hashlimit: size too large, truncated to 1048576 [ 225.957609][ T43] kauditd_printk_skb: 17 callbacks suppressed [ 225.957626][ T43] audit: type=1400 audit(1793040781.292:1011): avc: denied { listen } for pid=9699 comm="syz.0.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 225.958045][ T43] audit: type=1400 audit(1793040781.292:1012): avc: denied { read } for pid=9699 comm="syz.0.958" lport=41184 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 225.959333][ T9700] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 225.959341][ T9700] overlayfs: missing 'lowerdir' [ 225.985129][ T9700] ------------[ cut here ]------------ [ 225.985139][ T9700] kernel BUG at net/core/dev.c:11443! [ 225.985183][ T9700] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 225.990470][ T9700] CPU: 0 UID: 0 PID: 9700 Comm: syz.0.958 Tainted: G L syzkaller #0 PREEMPT(full) [ 225.995345][ T9700] Tainted: [L]=SOFTLOCKUP [ 225.996688][ T9700] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 225.999733][ T9700] RIP: 0010:register_netdevice+0x1233/0x25a0 [ 226.001652][ T9700] Code: 0f 0b e8 c0 8e 67 f8 48 8d 3d 79 5d af 08 ba ae 2c 00 00 48 c7 c6 00 94 39 8d 67 48 0f b9 3a e9 a5 ee ff ff e8 9e 8e 67 f8 90 <0f> 0b e8 96 8e 67 f8 90 0f 0b 48 8b 5c 24 18 48 8b 6c 24 20 e8 84 [ 226.007457][ T9700] RSP: 0018:ffffc9000363f798 EFLAGS: 00010283 [ 226.009325][ T9700] RAX: 0000000000000ada RBX: 1ffff920006c7efc RCX: ffffc900068d1000 [ 226.011707][ T9700] RDX: 0000000000080000 RSI: ffffffff89a4d4b2 RDI: ffff888040a14b00 [ 226.014146][ T9700] RBP: ffff888024348000 R08: 0000000000000001 R09: 0000000000000000 [ 226.016539][ T9700] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000003 [ 226.018910][ T9700] R13: ffff888024348f10 R14: ffff888024349049 R15: ffff888054aaccbc [ 226.021313][ T9700] FS: 00007f8dada346c0(0000) GS:ffff8880d4940000(0000) knlGS:0000000000000000 [ 226.024535][ T9700] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 226.027141][ T9700] CR2: 0000200000001000 CR3: 00000000589db000 CR4: 0000000000352ef0 [ 226.030120][ T9700] Call Trace: [ 226.031187][ T9700] [ 226.032175][ T9700] ? __pfx_register_netdevice+0x10/0x10 [ 226.033922][ T9700] register_netdev+0x34/0x50 [ 226.035451][ T9700] gether_register_netdev+0x93/0x130 [ 226.037160][ T9700] ecm_bind+0x848/0xc00 [ 226.038468][ T9700] ? gser_bind+0x130/0x410 [ 226.039865][ T9700] ? usb_gstrings_attach+0x474/0x920 [ 226.041531][ T9700] ? __pfx_ecm_bind+0x10/0x10 [ 226.043045][ T9700] usb_add_function+0x219/0x890 [ 226.044609][ T9700] configfs_composite_bind+0xd83/0x1960 [ 226.046366][ T9700] gadget_bind_driver+0x28c/0xbf0 [ 226.047961][ T9700] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 226.049724][ T9700] ? __pfx_gadget_bind_driver+0x10/0x10 [ 226.051378][ T9700] really_probe+0x241/0xa60 [ 226.052848][ T9700] __driver_probe_device+0x210/0x460 [ 226.054513][ T9700] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 226.056397][ T9700] driver_probe_device+0x4a/0x140 [ 226.057984][ T9700] __driver_attach+0x21f/0x5b0 [ 226.059605][ T9700] ? __pfx___driver_attach+0x10/0x10 [ 226.061859][ T9700] bus_for_each_dev+0x13e/0x1d0 [ 226.063887][ T9700] ? __pfx_bus_for_each_dev+0x10/0x10 [ 226.066055][ T9700] ? bus_add_driver+0x2b5/0x5b0 [ 226.068155][ T9700] bus_add_driver+0x305/0x5b0 [ 226.070203][ T9700] driver_register+0x1e2/0x360 [ 226.072243][ T9700] usb_gadget_register_driver_owner+0x132/0x210 [ 226.074792][ T9700] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 226.077149][ T9700] configfs_write_iter+0x302/0x4e0 [ 226.079292][ T9700] vfs_write+0x6af/0x1050 [ 226.081177][ T9700] ? __pfx_configfs_write_iter+0x10/0x10 [ 226.083583][ T9700] ? __pfx_vfs_write+0x10/0x10 [ 226.085663][ T9700] ? find_held_lock+0x2b/0x80 [ 226.087685][ T9700] ksys_write+0x12a/0x250 [ 226.089489][ T9700] ? __pfx_ksys_write+0x10/0x10 [ 226.091527][ T9700] do_syscall_64+0x123/0x790 [ 226.093467][ T9700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.095838][ T9700] RIP: 0033:0x7f8dacb9f559 [ 226.097754][ T9700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.105496][ T9700] RSP: 002b:00007f8dada34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 226.108869][ T9700] RAX: ffffffffffffffda RBX: 00007f8dace25fa0 RCX: 00007f8dacb9f559 [ 226.112136][ T9700] RDX: 000000000000000b RSI: 0000200000000ac0 RDI: 0000000000000007 [ 226.115383][ T9700] RBP: 00007f8dacc36b20 R08: 0000000000000000 R09: 0000000000000000 [ 226.118663][ T9700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.121867][ T9700] R13: 00007f8dace26038 R14: 00007f8dace25fa0 R15: 00007ffe3c169998 [ 226.125185][ T9700] [ 226.126493][ T9700] Modules linked in: [ 226.129084][ T9700] ---[ end trace 0000000000000000 ]--- [ 226.133063][ T9700] RIP: 0010:register_netdevice+0x1233/0x25a0 [ 226.133087][ T9700] Code: 0f 0b e8 c0 8e 67 f8 48 8d 3d 79 5d af 08 ba ae 2c 00 00 48 c7 c6 00 94 39 8d 67 48 0f b9 3a e9 a5 ee ff ff e8 9e 8e 67 f8 90 <0f> 0b e8 96 8e 67 f8 90 0f 0b 48 8b 5c 24 18 48 8b 6c 24 20 e8 84 [ 226.133106][ T9700] RSP: 0018:ffffc9000363f798 EFLAGS: 00010283 [ 226.133117][ T9700] RAX: 0000000000000ada RBX: 1ffff920006c7efc RCX: ffffc900068d1000 [ 226.133125][ T9700] RDX: 0000000000080000 RSI: ffffffff89a4d4b2 RDI: ffff888040a14b00 [ 226.133133][ T9700] RBP: ffff888024348000 R08: 0000000000000001 R09: 0000000000000000 [ 226.133145][ T9700] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000003 [ 226.133151][ T9700] R13: ffff888024348f10 R14: ffff888024349049 R15: ffff888054aaccbc [ 226.133158][ T9700] FS: 00007f8dada346c0(0000) GS:ffff8880d4a40000(0000) knlGS:0000000000000000 [ 226.133193][ T9700] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 226.133203][ T9700] CR2: 00007f95825f4158 CR3: 00000000589db000 CR4: 0000000000352ef0 [ 226.133213][ T9700] Kernel panic - not syncing: Fatal exception [ 226.166613][ T9700] Kernel Offset: disabled [ 226.168239][ T9700] Rebooting in 86400 seconds.. VM DIAGNOSIS: 17:14:58 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000050 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85b33285 RDI=ffffffff9cc845a0 RBP=ffffffff9cc84560 RSP=ffffc9000363ef38 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=7a7973203a6d6d43 R12=0000000000000000 R13=0000000000000050 R14=0000000000000005 R15=ffffc9000363f250 RIP=ffffffff85b332af RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f8dada346c0 ffffffff 00c00000 GS =0000 ffff8880d4940000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000001000 CR3=00000000589db000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe3c169e86 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe3c169e86 00007ffe3c169e8c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8dacc3714a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8dacc37184 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8dacc372e8 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8dacc37176 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8dacdf95f8 00007f8dacdf95c8 00007f8dacdf9600 00007f8dacdf95e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=0000000000000000 RCX=ffffea000459b248 RDX=1ffffd40008b364a RSI=ffff88817fff8290 RDI=ffffea000459b250 RBP=0000000000000000 RSP=ffffc900048e7060 R8 =ffffea000459b200 R9 =0000000000080000 R10=1ffff1102ffff03a R11=dffffc0000000000 R12=ffffea000459b1c8 R13=0000000000000001 R14=ffffea000459b240 R15=ffff88817fff8290 RIP=ffffffff82716ca3 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d4a40000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8da4000020 CR3=000000003cf56000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefffc00 Opmask01=00000000000000ff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555568172860 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fabcabf9e80 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fabcabf9e80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555568173948 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0077617201ffffff ffffffffffbf083a 8003040800061000 1410000600769208 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 003ac00300000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00080007000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ffffffffffffffff ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0108000c017bc400 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0101000004080602 0104cc0004000484 80080001800401c7 100008014ffc0063 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e79735f77732f63 6e79732f67756265 642f6c656e72656b 2f7379732f01ffff ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffc108 0180030008000210 00141000060476a2 0c80040880040010 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000100000100001 08000c017bc40000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=000000000004d558 RCX=0000000000000001 RDX=ffff888025d14b00 RSI=ffffffff828cfb8e RDI=000000000004d558 RBP=0000000000000000 RSP=ffffc90004937430 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=800000004d558007 R13=0000000000000001 R14=dffffc0000000000 R15=ffffea0001355618 RIP=ffffffff820c6396 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d4b40000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b34022ff8 CR3=0000000035525000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 874029bd86a83021 758ad70fefbc2591 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffffe42c546 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffffe42c546 00007ffffe42c54c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc72483714a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc724837184 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc7248372e8 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc724837176 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a48947a8ca66a6a 191992033698d7ba d1b6dfae7a93ba51 ce4ffd0a74502706 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 759930ed5e902e2a 8c8ea2436d73c724 3f0c7b4cd53a8274 707363df180e00d3 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 933628ddac732d6c 9f4f555f6a5d5b02 cf2e20afe8889293 d43446445cb23487 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 71bf4429c3f04bf4 5c2b97c0378e38c4 af856d8dcb10f2e7 99ead47eb1759930 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ed5e902e2a8c8ea2 436d73c7243f0c7b 4cd53a8274707363 df180e00d378e381 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 cc6a0b47c3cc97c0 a899a14347f5aa73 73ce53e191c524ff b0f40948564a4894 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000008 RBX=0000000000000000 RCX=00000000c0000080 RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000000 RBP=0000000000000000 RSP=00000000000006e0 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=0000000000009120 RFL=00010002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0038 0000000000000000 000fffff 00409300 DPL=0 DS [-WA] CS =0050 0000000000000000 0000ffff 00209b00 DPL=0 CS64 [-RA] SS =0038 0000000000000000 000fffff 00409300 DPL=0 DS [-WA] DS =0038 0000000000000000 000fffff 00409300 DPL=0 DS [-WA] FS =0038 0000000000000000 000fffff 00409300 DPL=0 DS [-WA] GS =0038 0000000000000000 000fffff 00409300 DPL=0 DS [-WA] LDT=0008 0000000000001800 000007ff 00408200 DPL=0 LDT TR =00d8 0000000000003a00 000001ff 00008b00 DPL=0 TSS64-busy GDT= 0000000000001000 000007ff IDT= 0000000000003800 000001ff CR0=80000031 CR2=0000000000000000 CR3=0000000000002000 CR4=00002060 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000501 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 874029bd86a83021 758ad70fefbc2591 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffffe42c546 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffffe42c546 00007ffffe42c54c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc72483714a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc724837184 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc7248372e8 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc724837176 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000