last executing test programs: 42.216243109s ago: executing program 0 (id=616): setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0xa, &(0x7f00000000c0)=0x5, 0x4) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x800, 0x5d}}}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x13c}, 0x1, 0x0, 0x0, 0x22044080}, 0x818) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'ipvlan0\x00', &(0x7f0000000000)=@ethtool_cmd={0x3, 0x8, 0x3, 0xb, 0x6, 0x6, 0xa, 0xd7, 0x2, 0x1, 0x3ff, 0x2, 0x3, 0x80, 0x3, 0x9, [0x800, 0x9]}}) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, 0x0) syz_usb_connect(0x3, 0x9bb, &(0x7f0000000780)={{0x12, 0x1, 0x201, 0x34, 0x47, 0x39, 0x20, 0x19d2, 0x1261, 0x329f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a9, 0x4, 0x4, 0x4, 0x40, 0x9, "", [{{0x9, 0x4, 0x4b, 0x3, 0x0, 0xff, 0xff, 0xff, 0xf9, [@uac_control={{0xa, 0x24, 0x1, 0x100, 0xa}}]}}, {{0x9, 0x4, 0xdb, 0x2, 0x10, 0x8a, 0x50, 0x2f, 0xdf, [@generic={0x79, 0x30, "a43a4e82be67b13b284abb24b7ea402f8823f8e6f490a2b4f247279781599bf0ee0009318c96dd782f2fc2137f5676d1423b15192fd6958751688ab696c0f203e4cad83b3e9b854cfca770217a21ca57cb0193a613379d8a7a4258daa087c55f07815155198e631d809c34a59d39f9002a6293f5dcb598"}], [{{0x9, 0x5, 0x6, 0x0, 0x400, 0x83, 0x5, 0x4f}}, {{0x9, 0x5, 0xb, 0x3, 0x40, 0x9, 0x10, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x4}, @generic={0xd8, 0x31, "4120050e60641b037d90f8db227497c4cd95bcad59a95cc60e9ee2a0215dac5795a8229b80de046dfcd2c8d984dfc198faa4b0b9fc1e295f7f9391e9b2090d26314a0baec7f611ad5b1594183aa72e4d005a2e02795a5baed5a97522a4052deecced60888006cb31a0672a19c3aada266fbe555bc0d2526027807af8cae52f993fa2484294133b42d1f9b0baf79c8ef5f58f5a0cc015807a2adf858cf3aa8d2950a945a75e7df8edb6f908afa5d1f9228f09f6750c25d48d9b8c7cd8772ed615763428b87d43960bc1ddd9ab3f4ccfbbe2d939aea7b2"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0xff, 0xf, 0xff, [@generic={0xbe, 0x8, "5986733b8b7ff333d36c150b2ba0780fb9bfe9fd4ba5badf1d4a3b5a3dae3c182c6fbad40dbe8abac52112e9bf13f5a4b95b5edf26c4def86d2d7020d36e07fcae7ae3f24d73838de8fa6a87ac9242fb55fab346b7d8bae7a35f01b52163d830de322ceccd54245c646d36405efefd5c751659b94f8ac93ec8ce58a7321e141b1fa62469e9afa4abf88439c137e605a4cac496efd46069661bf14b0ce07d207b6f22a9d7b73fb0b312f70144089e23c6791d955e80707841c701fa6e"}, @generic={0x9b, 0x6, "2951521c76cb82f717c8b1a5acae0db5287d01eabe7870477bd59a181746c498cb6253fab4d071098867bb0a0e61ec2cb3391fd08fae93dd85a3e7749f96bb2398ef476ef267881363df10905e0f1ff0e007ed8461a607cf74a894132421c5cc36fa0d0eb140e0aa526f0b0608a73f9eed8b6ad3c9370dc766f7b6de69b093d962426eb8f769f9d86633bfcb3883669d78312a79373e1ce9b7"}]}}, {{0x9, 0x5, 0x3, 0xc, 0x3ff, 0x9, 0x2, 0xb9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x7}]}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x13, 0x5, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0x9}, @generic={0xd7, 0x22, "7f4a832a6dd100c2cecd2b0f4e17d8ee3f21a9b9e8a6aedd481ee31e9843a97092dea6f5cac6437ed2b4b31874855410b3d5ba8e5abd60bbca50eb3467ec48fdb8ef157c5d7ec72f0da780947eac97197190ddb3a1e6bc7b173c16aff05ce9088de53467142fa501a43d129151813f5270f081ae0f34bcb563fd47d3b66a3555abe03666e37a91a148b4305d857cbe366fc7e6ec2b979c480aa2765502b51951abbff11d6c65fee54c4a488a2f0345ada34ed02f43b6fb138362b9b370ca88220d27d7af441dd6f2c7f7891045a19af9dcb2e9752d"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x4, 0x6, 0x2}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x7, 0x0, 0x2}}, {{0x9, 0x5, 0x8, 0xc, 0x8, 0xae, 0xff, 0x3}}, {{0x9, 0x5, 0x2, 0x4, 0x40, 0x8b, 0x4, 0xac}}, {{0x9, 0x5, 0xe, 0x0, 0x3af, 0xc, 0x8, 0x4}}, {{0x9, 0x5, 0x0, 0x18, 0x3ff, 0x84, 0x5, 0x2}}, {{0x9, 0x5, 0x8, 0x0, 0x400, 0xd7, 0x8, 0xa3}}, {{0x9, 0x5, 0x0, 0x4, 0x200, 0x3, 0x81, 0xf8, [@generic={0x33, 0x4, "3a19cf216ae75b61528776fc554fb770801e6e94a25f74a44d17f334fbd6b7f3794334d4bd825bce23e0ea61fdae8fb58c"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x0, 0x0, 0x9}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x4, 0x2, 0x4, [@generic={0xd6, 0x7, "290a9e9d98e6b01742dd57f5601495558bdc852c9881ff4674a2d6b49ba5a6e12dec2109069a76bd39d878ac7ec0d325042d6d807a4d5cd29716a162c6b3dc12a1ed9bd8bd32875653f1ee4de217e6b5bab880dc138de5ce4701bcf016a140e7cdf6b24f9ba20da504b428b0f26ae3ffae10735e969857f41e94fff806cb3a3b016b93f5cc7e109812f8ddabb92fc230ece2fd845a7a1273a140c2802ff225015d2f8e0dc7e6d8c03ed64c5a479fd1be878552fd1e246c3fc3e61670b8d07aace86ba03f16866a0c8401a032c0ebd7747142502a"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x3ff, 0x7, 0x4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0x8}]}}]}}, {{0x9, 0x4, 0x9c, 0x1, 0x1, 0x48, 0x7a, 0xe6, 0x6, [@hid_hid={0x9, 0x21, 0x9, 0x7, 0x1, {0x22, 0x876}}], [{{0x9, 0x5, 0x0, 0x1, 0x9b4997d287a03120, 0x7, 0xf1, 0x80}}]}}, {{0x9, 0x4, 0x4d, 0xfa, 0xd, 0x3, 0x1a, 0x2, 0xd, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x7, 0xf6ce}, [@ncm={0x6, 0x24, 0x1a, 0x5, 0xc}, @country_functional={0x6, 0x24, 0x7, 0x2, 0x5}, @mdlm={0x15, 0x24, 0x12, 0x7}, @country_functional={0x10, 0x24, 0x7, 0x36, 0x24b, [0x880, 0xfc7, 0x4, 0x1ff, 0xc3]}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x4}, @mdlm={0x15, 0x24, 0x12, 0x8}]}, @cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xffff, 0x980, 0x8}, [@mbim={0xc, 0x24, 0x1b, 0x800, 0x9, 0x9, 0x8, 0xfaa6, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x6, 0xf, 0x2}]}], [{{0x9, 0x5, 0x49dfb01b6e015f70, 0x1, 0x400, 0x5, 0x7a, 0x40}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x5, 0x9, 0xbe}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x51, 0x81, 0x3}}, {{0x9, 0x5, 0x7, 0xc, 0x200, 0x4, 0xa, 0x2}}, {{0x9, 0x5, 0xa, 0x1, 0x400, 0x9, 0x5, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x2b2913859897440a, 0xb, 0xff}]}}, {{0x9, 0x5, 0x3, 0x4, 0x20, 0x7, 0x3c, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0x782}, @generic={0xef, 0x28, "0128b90aef68d0b79da65b4ad330de8f5d8b9aacf7823e3fd9f5148dab20d4138fafe11de0cd0989ef1cf372732859d5a40f9422bf5d61b5789039af7367a3993bdf1b307d2c555ca4c281043dc703fd645e097f2c39d2b9fdf70876286ca0cc8b497ba8e19e936fdc0296be0a2d59638f12073a8dc15f25026bd24102ce9665e6a56ec2968e7749e80d6d1aa131aa17af9f708633b7fc2afa7a760ae199e5b6522a332b4c104feb3de75e96dcd4c988a639880c42f2262afb9a9346c71d1548c79fef5e17a232203e069e59ae0daec3fa102a5f36f4e0f8ca1dd47e1a431c30ea0db5d05ed323f37e6c83a6d4"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x2b, 0xe9, 0x5f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xff}, @generic={0xf3, 0x24, "babdeb87f344635303488207e2608c7ee791c9af972866aa8eb44ae02db8578ff9cc0eee336fd27fa1e57a8590adb4db825ce6300e2c8fcf066a2bd192a5a7fc5bf753dfbabdaafce5c9439ca5471239cdc38bd9037cc7b624ffe8a8e6ae186d50555869c875dcd48fe7597a21a564f01eea76b06f66378f98682667712d806ac6657814855cfa7a49a723130f70b281d9b098a0d74bd5176a7e7095a113e276301673a7fdb3976f570f8b7f96aba0eba38dde5dfc7cd997454018587f4953060d12cf6da730466e9d118a2c8deffad856888fdfac5f535af7afb44022f2bb10c4b03307651cb27ba5e4b35525396d015b"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x40, 0x3, 0xf8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0xe2ca}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x4}]}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0xe8, 0x1, 0x2e, [@generic={0x79, 0x9, "28e63b35ec676c66de7f10757824b985141cc3bddf7e4b76a5208bc80f7dcba50c7923c9e591193cdc806dcbc774aa9fd2ba4cc3acf8b4ac2e3a8cfcc730e69d675224c35d808badc89b47d4f19ebcf10e46f1b5b32f5ee1792f7afa9178cf2ed5429c338245e800812ed53db4fa422c3a18358c9a4b78"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x8, 0x7, 0x7b, [@generic={0xa3, 0x0, "e39ee93c4d64e4e13ac04bc74e2c39c7c36c84a2b43ddb9f219a38d0f3635c7a9bd395c4f34e253f9efe0434171f0fa94e68652281d3a534b571668b784482a6411c6f84273207fa0dfe7c55c996973565fc5b6dcd89835d93b5919b3634f9fad7e7deb86553b8436748f1642d755a55c8545216513582e3a427bce0abd0bae2c7937d5b854604fcad8d6d77a6b22134d4d6a93c352235064531b71901ebbb7e66"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x40}]}}, {{0x9, 0x5, 0x0, 0x8, 0x3ff, 0x7, 0x5, 0x2}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0xaa, 0xf}}, {{0x9, 0x5, 0xf, 0xc, 0x8, 0x3, 0xe, 0x7}}]}}]}}]}}, &(0x7f0000001480)={0xa, &(0x7f0000001140)={0xa, 0x6, 0x300, 0x84, 0x0, 0xff, 0x40, 0x3}, 0x33, &(0x7f0000000100)={0x5, 0xf, 0x33, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x1, 0x6, 0x5}, @wireless={0xb, 0x10, 0x1, 0x8, 0x24, 0x82, 0x2, 0x5, 0x40}, @wireless={0xb, 0x10, 0x1, 0x2, 0x18, 0x5, 0x9, 0xffff, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x6, 0x6, 0x95}, @ptm_cap={0x3}]}, 0x6, [{0x16, &(0x7f00000011c0)=ANY=[@ANYBLOB="16039696945c1fcdb6f6580d83e70c88835ea9282a52"]}, {0x37, &(0x7f0000001200)=@string={0x37, 0x3, "1d4dd46e5422741bdfd637e40c7319746f9c80b2dc979b7d4de3fe75d5f836df0f7e1db4bb23dcaf2a1dfaeaee99eafadb2d514623"}}, {0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x446}}, {0xc7, &(0x7f0000001280)=@string={0xc7, 0x3, "b688974542dcdca3627572606a1bafa4f0b6e1e9ba42b40543ee1db2428b122aa8c16b0d4ae7c6e6bf3d3c4f4c8fad8b9329b27b19992dcc03b9257177487af34f48fc1471cf8c492f47886d5e0bc74b70d2fb50a9989a3c0ac80f96863cdfb4e2342e8ab29cf696ebcc12c56f8f2d32c79b1fe982183f31a9f65bc37d8cf708550dab44d5a99eba06be82daab79c89642a9467ea7a615356e46100397ea2ffcf8163f63e2401157879a8d96ade6443772725531dcc70487bdc88c572ccb334c22a40c1d71"}}, {0x82, &(0x7f0000001380)=@string={0x82, 0x3, "adb005ca5d0cf45147cf463c002d81338f7b4c55657ea2e5f7d57b30eab1ce8266e219fdb4168adf38ff7c4ea137347021f6987b0661a18e4f851bfa0f7b15915239a7f1a79687a24415ac2a2c33c5c2efc6779d0f6ac83432158e72110ddbd288e0fcba2e2a68de6b1971d5575ecc8e68185ac91f6437b9c150aa7c3da5f3eb"}}, {0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0x4001}}]}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) splice(r2, 0x0, r1, 0x0, 0x10000807, 0x0) 39.099220162s ago: executing program 0 (id=631): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40041, 0x0) writev(r0, &(0x7f0000001540)=[{&(0x7f00000003c0)="95", 0x1}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) close(0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={0xffffffffffffffff, r1, 0x25, 0x0, @void}, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) unshare(0x62040200) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99925bd700000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0) 38.975722352s ago: executing program 0 (id=635): clock_getres(0x17, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@getnexthop={0x20, 0x76, 0xa11, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8}]}, 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000180)={0x95, 0xc, 0x1, 0x8, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', @mcast2, @ipv4={'\x00', '\xff\xff', @local}, @local]}, 0x68) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff07000000", @ANYRES32=r5, @ANYBLOB="20000100", @ANYRES32=r7, @ANYBLOB="000104000000000000000000000000000000000186dd0000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl(r1, 0x8b1a, &(0x7f0000000040)) syz_clone(0x80000000, &(0x7f0000000000)="1d411aebc73ed44aee7ef2146104135a796f3256e0", 0x15, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)="07079342944393e8df0c4f8ea3113d0ce90fe449a0bf") sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x439, 0x70bd2a, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0x4}]}}}]}, 0x3c}}, 0x0) 37.135356371s ago: executing program 0 (id=640): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xd}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) 36.77051391s ago: executing program 0 (id=642): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x2, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e20, 0x0, 0x4e21, 0x202, 0x2, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, {0x0, 0x0, 0xc, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0x2, 0x4, 0x0, 0x10}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2c}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) mount(0x0, &(0x7f00000000a0)='./proc\x00', &(0x7f00000000e0)='proc\x00', 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000180), 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='1', 0x1) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) r4 = memfd_create(&(0x7f0000000a40)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x06t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\x04n0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81\xbd\xd5\x00\x00C6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x1c\xd11\xfc\xa7\x93E\xff\xff\xd0\xac\b\x01\x10\xcc\xcd\x9a0\xd83\xb6\r\xbb\xe1u_KUd3l\x862\xa8I\xa7\x8f\xfb\xed\xdbn\xbd\xbe\xf0+a\xc8JC\x03:&9\xae\xb8\xd8TdMf[\x1c\n#\x87\xfc\x81O`\x19P\x142~|\xdf\xbc\xaf\xe4^\xac\xa5\xfbyy\xcb\f\x14}g\xa7\xc2\xe1\xa9\xdf\xbf\xdbV\x94:\xa6I\xa9\x15\x0f', 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r5, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r5) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r4, 0x0) 34.45050551s ago: executing program 0 (id=660): setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0xa, &(0x7f00000000c0)=0x5, 0x4) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x800, 0x5d}}}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x13c}, 0x1, 0x0, 0x0, 0x22044080}, 0x818) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'ipvlan0\x00', &(0x7f0000000000)=@ethtool_cmd={0x3, 0x8, 0x3, 0xb, 0x6, 0x6, 0xa, 0xd7, 0x2, 0x1, 0x3ff, 0x2, 0x3, 0x80, 0x3, 0x9, [0x800, 0x9]}}) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, 0x0) syz_usb_connect(0x3, 0x9bb, &(0x7f0000000780)={{0x12, 0x1, 0x201, 0x34, 0x47, 0x39, 0x20, 0x19d2, 0x1261, 0x329f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a9, 0x4, 0x4, 0x4, 0x40, 0x9, "", [{{0x9, 0x4, 0x4b, 0x3, 0x0, 0xff, 0xff, 0xff, 0xf9, [@uac_control={{0xa, 0x24, 0x1, 0x100, 0xa}}]}}, {{0x9, 0x4, 0xdb, 0x2, 0x10, 0x8a, 0x50, 0x2f, 0xdf, [@generic={0x79, 0x30, "a43a4e82be67b13b284abb24b7ea402f8823f8e6f490a2b4f247279781599bf0ee0009318c96dd782f2fc2137f5676d1423b15192fd6958751688ab696c0f203e4cad83b3e9b854cfca770217a21ca57cb0193a613379d8a7a4258daa087c55f07815155198e631d809c34a59d39f9002a6293f5dcb598"}], [{{0x9, 0x5, 0x6, 0x0, 0x400, 0x83, 0x5, 0x4f}}, {{0x9, 0x5, 0xb, 0x3, 0x40, 0x9, 0x10, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x4}, @generic={0xd8, 0x31, "4120050e60641b037d90f8db227497c4cd95bcad59a95cc60e9ee2a0215dac5795a8229b80de046dfcd2c8d984dfc198faa4b0b9fc1e295f7f9391e9b2090d26314a0baec7f611ad5b1594183aa72e4d005a2e02795a5baed5a97522a4052deecced60888006cb31a0672a19c3aada266fbe555bc0d2526027807af8cae52f993fa2484294133b42d1f9b0baf79c8ef5f58f5a0cc015807a2adf858cf3aa8d2950a945a75e7df8edb6f908afa5d1f9228f09f6750c25d48d9b8c7cd8772ed615763428b87d43960bc1ddd9ab3f4ccfbbe2d939aea7b2"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0xff, 0xf, 0xff, [@generic={0xbe, 0x8, "5986733b8b7ff333d36c150b2ba0780fb9bfe9fd4ba5badf1d4a3b5a3dae3c182c6fbad40dbe8abac52112e9bf13f5a4b95b5edf26c4def86d2d7020d36e07fcae7ae3f24d73838de8fa6a87ac9242fb55fab346b7d8bae7a35f01b52163d830de322ceccd54245c646d36405efefd5c751659b94f8ac93ec8ce58a7321e141b1fa62469e9afa4abf88439c137e605a4cac496efd46069661bf14b0ce07d207b6f22a9d7b73fb0b312f70144089e23c6791d955e80707841c701fa6e"}, @generic={0x9b, 0x6, "2951521c76cb82f717c8b1a5acae0db5287d01eabe7870477bd59a181746c498cb6253fab4d071098867bb0a0e61ec2cb3391fd08fae93dd85a3e7749f96bb2398ef476ef267881363df10905e0f1ff0e007ed8461a607cf74a894132421c5cc36fa0d0eb140e0aa526f0b0608a73f9eed8b6ad3c9370dc766f7b6de69b093d962426eb8f769f9d86633bfcb3883669d78312a79373e1ce9b7"}]}}, {{0x9, 0x5, 0x3, 0xc, 0x3ff, 0x9, 0x2, 0xb9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x7}]}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x13, 0x5, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0x9}, @generic={0xd7, 0x22, "7f4a832a6dd100c2cecd2b0f4e17d8ee3f21a9b9e8a6aedd481ee31e9843a97092dea6f5cac6437ed2b4b31874855410b3d5ba8e5abd60bbca50eb3467ec48fdb8ef157c5d7ec72f0da780947eac97197190ddb3a1e6bc7b173c16aff05ce9088de53467142fa501a43d129151813f5270f081ae0f34bcb563fd47d3b66a3555abe03666e37a91a148b4305d857cbe366fc7e6ec2b979c480aa2765502b51951abbff11d6c65fee54c4a488a2f0345ada34ed02f43b6fb138362b9b370ca88220d27d7af441dd6f2c7f7891045a19af9dcb2e9752d"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x4, 0x6, 0x2}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x7, 0x0, 0x2}}, {{0x9, 0x5, 0x8, 0xc, 0x8, 0xae, 0xff, 0x3}}, {{0x9, 0x5, 0x2, 0x4, 0x40, 0x8b, 0x4, 0xac}}, {{0x9, 0x5, 0xe, 0x0, 0x3af, 0xc, 0x8, 0x4}}, {{0x9, 0x5, 0x0, 0x18, 0x3ff, 0x84, 0x5, 0x2}}, {{0x9, 0x5, 0x8, 0x0, 0x400, 0xd7, 0x8, 0xa3}}, {{0x9, 0x5, 0x0, 0x4, 0x200, 0x3, 0x81, 0xf8, [@generic={0x33, 0x4, "3a19cf216ae75b61528776fc554fb770801e6e94a25f74a44d17f334fbd6b7f3794334d4bd825bce23e0ea61fdae8fb58c"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x0, 0x0, 0x9}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x4, 0x2, 0x4, [@generic={0xd6, 0x7, "290a9e9d98e6b01742dd57f5601495558bdc852c9881ff4674a2d6b49ba5a6e12dec2109069a76bd39d878ac7ec0d325042d6d807a4d5cd29716a162c6b3dc12a1ed9bd8bd32875653f1ee4de217e6b5bab880dc138de5ce4701bcf016a140e7cdf6b24f9ba20da504b428b0f26ae3ffae10735e969857f41e94fff806cb3a3b016b93f5cc7e109812f8ddabb92fc230ece2fd845a7a1273a140c2802ff225015d2f8e0dc7e6d8c03ed64c5a479fd1be878552fd1e246c3fc3e61670b8d07aace86ba03f16866a0c8401a032c0ebd7747142502a"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x3ff, 0x7, 0x4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0x8}]}}]}}, {{0x9, 0x4, 0x9c, 0x1, 0x1, 0x48, 0x7a, 0xe6, 0x6, [@hid_hid={0x9, 0x21, 0x9, 0x7, 0x1, {0x22, 0x876}}], [{{0x9, 0x5, 0x0, 0x1, 0x9b4997d287a03120, 0x7, 0xf1, 0x80}}]}}, {{0x9, 0x4, 0x4d, 0xfa, 0xd, 0x3, 0x1a, 0x2, 0xd, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x7, 0xf6ce}, [@ncm={0x6, 0x24, 0x1a, 0x5, 0xc}, @country_functional={0x6, 0x24, 0x7, 0x2, 0x5}, @mdlm={0x15, 0x24, 0x12, 0x7}, @country_functional={0x10, 0x24, 0x7, 0x36, 0x24b, [0x880, 0xfc7, 0x4, 0x1ff, 0xc3]}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x4}, @mdlm={0x15, 0x24, 0x12, 0x8}]}, @cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xffff, 0x980, 0x8}, [@mbim={0xc, 0x24, 0x1b, 0x800, 0x9, 0x9, 0x8, 0xfaa6, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x6, 0xf, 0x2}]}], [{{0x9, 0x5, 0x49dfb01b6e015f70, 0x1, 0x400, 0x5, 0x7a, 0x40}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x5, 0x9, 0xbe}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x51, 0x81, 0x3}}, {{0x9, 0x5, 0x7, 0xc, 0x200, 0x4, 0xa, 0x2}}, {{0x9, 0x5, 0xa, 0x1, 0x400, 0x9, 0x5, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x2b2913859897440a, 0xb, 0xff}]}}, {{0x9, 0x5, 0x3, 0x4, 0x20, 0x7, 0x3c, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0x782}, @generic={0xef, 0x28, "0128b90aef68d0b79da65b4ad330de8f5d8b9aacf7823e3fd9f5148dab20d4138fafe11de0cd0989ef1cf372732859d5a40f9422bf5d61b5789039af7367a3993bdf1b307d2c555ca4c281043dc703fd645e097f2c39d2b9fdf70876286ca0cc8b497ba8e19e936fdc0296be0a2d59638f12073a8dc15f25026bd24102ce9665e6a56ec2968e7749e80d6d1aa131aa17af9f708633b7fc2afa7a760ae199e5b6522a332b4c104feb3de75e96dcd4c988a639880c42f2262afb9a9346c71d1548c79fef5e17a232203e069e59ae0daec3fa102a5f36f4e0f8ca1dd47e1a431c30ea0db5d05ed323f37e6c83a6d4"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x2b, 0xe9, 0x5f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xff}, @generic={0xf3, 0x24, "babdeb87f344635303488207e2608c7ee791c9af972866aa8eb44ae02db8578ff9cc0eee336fd27fa1e57a8590adb4db825ce6300e2c8fcf066a2bd192a5a7fc5bf753dfbabdaafce5c9439ca5471239cdc38bd9037cc7b624ffe8a8e6ae186d50555869c875dcd48fe7597a21a564f01eea76b06f66378f98682667712d806ac6657814855cfa7a49a723130f70b281d9b098a0d74bd5176a7e7095a113e276301673a7fdb3976f570f8b7f96aba0eba38dde5dfc7cd997454018587f4953060d12cf6da730466e9d118a2c8deffad856888fdfac5f535af7afb44022f2bb10c4b03307651cb27ba5e4b35525396d015b"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x40, 0x3, 0xf8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0xe2ca}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x4}]}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0xe8, 0x1, 0x2e, [@generic={0x79, 0x9, "28e63b35ec676c66de7f10757824b985141cc3bddf7e4b76a5208bc80f7dcba50c7923c9e591193cdc806dcbc774aa9fd2ba4cc3acf8b4ac2e3a8cfcc730e69d675224c35d808badc89b47d4f19ebcf10e46f1b5b32f5ee1792f7afa9178cf2ed5429c338245e800812ed53db4fa422c3a18358c9a4b78"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x8, 0x7, 0x7b, [@generic={0xa3, 0x0, "e39ee93c4d64e4e13ac04bc74e2c39c7c36c84a2b43ddb9f219a38d0f3635c7a9bd395c4f34e253f9efe0434171f0fa94e68652281d3a534b571668b784482a6411c6f84273207fa0dfe7c55c996973565fc5b6dcd89835d93b5919b3634f9fad7e7deb86553b8436748f1642d755a55c8545216513582e3a427bce0abd0bae2c7937d5b854604fcad8d6d77a6b22134d4d6a93c352235064531b71901ebbb7e66"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x40}]}}, {{0x9, 0x5, 0x0, 0x8, 0x3ff, 0x7, 0x5, 0x2}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0xaa, 0xf}}, {{0x9, 0x5, 0xf, 0xc, 0x8, 0x3, 0xe, 0x7}}]}}]}}]}}, &(0x7f0000001480)={0xa, &(0x7f0000001140)={0xa, 0x6, 0x300, 0x84, 0x0, 0xff, 0x40, 0x3}, 0x33, &(0x7f0000000100)={0x5, 0xf, 0x33, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x1, 0x6, 0x5}, @wireless={0xb, 0x10, 0x1, 0x8, 0x24, 0x82, 0x2, 0x5, 0x40}, @wireless={0xb, 0x10, 0x1, 0x2, 0x18, 0x5, 0x9, 0xffff, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x6, 0x6, 0x95}, @ptm_cap={0x3}]}, 0x6, [{0x16, &(0x7f00000011c0)=ANY=[@ANYBLOB="16039696945c1fcdb6f6580d83e70c88835ea9282a52"]}, {0x37, &(0x7f0000001200)=@string={0x37, 0x3, "1d4dd46e5422741bdfd637e40c7319746f9c80b2dc979b7d4de3fe75d5f836df0f7e1db4bb23dcaf2a1dfaeaee99eafadb2d514623"}}, {0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x446}}, {0xc7, &(0x7f0000001280)=@string={0xc7, 0x3, "b688974542dcdca3627572606a1bafa4f0b6e1e9ba42b40543ee1db2428b122aa8c16b0d4ae7c6e6bf3d3c4f4c8fad8b9329b27b19992dcc03b9257177487af34f48fc1471cf8c492f47886d5e0bc74b70d2fb50a9989a3c0ac80f96863cdfb4e2342e8ab29cf696ebcc12c56f8f2d32c79b1fe982183f31a9f65bc37d8cf708550dab44d5a99eba06be82daab79c89642a9467ea7a615356e46100397ea2ffcf8163f63e2401157879a8d96ade6443772725531dcc70487bdc88c572ccb334c22a40c1d71"}}, {0x82, &(0x7f0000001380)=@string={0x82, 0x3, "adb005ca5d0cf45147cf463c002d81338f7b4c55657ea2e5f7d57b30eab1ce8266e219fdb4168adf38ff7c4ea137347021f6987b0661a18e4f851bfa0f7b15915239a7f1a79687a24415ac2a2c33c5c2efc6779d0f6ac83432158e72110ddbd288e0fcba2e2a68de6b1971d5575ecc8e68185ac91f6437b9c150aa7c3da5f3eb"}}, {0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0x4001}}]}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) splice(r2, 0x0, r1, 0x0, 0x10000807, 0x0) 19.847976598s ago: executing program 1 (id=781): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x402) pwrite64(r4, 0x0, 0x39, 0x26c) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r5 = socket(0x400000000010, 0x3, 0x1fc) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=@getsa={0x50, 0x12, 0x0, 0x70bd27, 0x25dfdbfb, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0xa, 0x6c}, [@address_filter={0x28, 0x1a, {@in6=@private0, @in=@broadcast, 0x2, 0x8, 0x10}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000050}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r7, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xd}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) 19.699142086s ago: executing program 1 (id=783): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xd}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) (fail_nth: 7) 19.47703452s ago: executing program 32 (id=660): setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0xa, &(0x7f00000000c0)=0x5, 0x4) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x800, 0x5d}}}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x13c}, 0x1, 0x0, 0x0, 0x22044080}, 0x818) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'ipvlan0\x00', &(0x7f0000000000)=@ethtool_cmd={0x3, 0x8, 0x3, 0xb, 0x6, 0x6, 0xa, 0xd7, 0x2, 0x1, 0x3ff, 0x2, 0x3, 0x80, 0x3, 0x9, [0x800, 0x9]}}) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, 0x0) syz_usb_connect(0x3, 0x9bb, &(0x7f0000000780)={{0x12, 0x1, 0x201, 0x34, 0x47, 0x39, 0x20, 0x19d2, 0x1261, 0x329f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a9, 0x4, 0x4, 0x4, 0x40, 0x9, "", [{{0x9, 0x4, 0x4b, 0x3, 0x0, 0xff, 0xff, 0xff, 0xf9, [@uac_control={{0xa, 0x24, 0x1, 0x100, 0xa}}]}}, {{0x9, 0x4, 0xdb, 0x2, 0x10, 0x8a, 0x50, 0x2f, 0xdf, [@generic={0x79, 0x30, "a43a4e82be67b13b284abb24b7ea402f8823f8e6f490a2b4f247279781599bf0ee0009318c96dd782f2fc2137f5676d1423b15192fd6958751688ab696c0f203e4cad83b3e9b854cfca770217a21ca57cb0193a613379d8a7a4258daa087c55f07815155198e631d809c34a59d39f9002a6293f5dcb598"}], [{{0x9, 0x5, 0x6, 0x0, 0x400, 0x83, 0x5, 0x4f}}, {{0x9, 0x5, 0xb, 0x3, 0x40, 0x9, 0x10, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x4}, @generic={0xd8, 0x31, "4120050e60641b037d90f8db227497c4cd95bcad59a95cc60e9ee2a0215dac5795a8229b80de046dfcd2c8d984dfc198faa4b0b9fc1e295f7f9391e9b2090d26314a0baec7f611ad5b1594183aa72e4d005a2e02795a5baed5a97522a4052deecced60888006cb31a0672a19c3aada266fbe555bc0d2526027807af8cae52f993fa2484294133b42d1f9b0baf79c8ef5f58f5a0cc015807a2adf858cf3aa8d2950a945a75e7df8edb6f908afa5d1f9228f09f6750c25d48d9b8c7cd8772ed615763428b87d43960bc1ddd9ab3f4ccfbbe2d939aea7b2"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0xff, 0xf, 0xff, [@generic={0xbe, 0x8, "5986733b8b7ff333d36c150b2ba0780fb9bfe9fd4ba5badf1d4a3b5a3dae3c182c6fbad40dbe8abac52112e9bf13f5a4b95b5edf26c4def86d2d7020d36e07fcae7ae3f24d73838de8fa6a87ac9242fb55fab346b7d8bae7a35f01b52163d830de322ceccd54245c646d36405efefd5c751659b94f8ac93ec8ce58a7321e141b1fa62469e9afa4abf88439c137e605a4cac496efd46069661bf14b0ce07d207b6f22a9d7b73fb0b312f70144089e23c6791d955e80707841c701fa6e"}, @generic={0x9b, 0x6, "2951521c76cb82f717c8b1a5acae0db5287d01eabe7870477bd59a181746c498cb6253fab4d071098867bb0a0e61ec2cb3391fd08fae93dd85a3e7749f96bb2398ef476ef267881363df10905e0f1ff0e007ed8461a607cf74a894132421c5cc36fa0d0eb140e0aa526f0b0608a73f9eed8b6ad3c9370dc766f7b6de69b093d962426eb8f769f9d86633bfcb3883669d78312a79373e1ce9b7"}]}}, {{0x9, 0x5, 0x3, 0xc, 0x3ff, 0x9, 0x2, 0xb9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x7}]}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x13, 0x5, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0x9}, @generic={0xd7, 0x22, "7f4a832a6dd100c2cecd2b0f4e17d8ee3f21a9b9e8a6aedd481ee31e9843a97092dea6f5cac6437ed2b4b31874855410b3d5ba8e5abd60bbca50eb3467ec48fdb8ef157c5d7ec72f0da780947eac97197190ddb3a1e6bc7b173c16aff05ce9088de53467142fa501a43d129151813f5270f081ae0f34bcb563fd47d3b66a3555abe03666e37a91a148b4305d857cbe366fc7e6ec2b979c480aa2765502b51951abbff11d6c65fee54c4a488a2f0345ada34ed02f43b6fb138362b9b370ca88220d27d7af441dd6f2c7f7891045a19af9dcb2e9752d"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x4, 0x6, 0x2}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x7, 0x0, 0x2}}, {{0x9, 0x5, 0x8, 0xc, 0x8, 0xae, 0xff, 0x3}}, {{0x9, 0x5, 0x2, 0x4, 0x40, 0x8b, 0x4, 0xac}}, {{0x9, 0x5, 0xe, 0x0, 0x3af, 0xc, 0x8, 0x4}}, {{0x9, 0x5, 0x0, 0x18, 0x3ff, 0x84, 0x5, 0x2}}, {{0x9, 0x5, 0x8, 0x0, 0x400, 0xd7, 0x8, 0xa3}}, {{0x9, 0x5, 0x0, 0x4, 0x200, 0x3, 0x81, 0xf8, [@generic={0x33, 0x4, "3a19cf216ae75b61528776fc554fb770801e6e94a25f74a44d17f334fbd6b7f3794334d4bd825bce23e0ea61fdae8fb58c"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x0, 0x0, 0x9}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x4, 0x2, 0x4, [@generic={0xd6, 0x7, "290a9e9d98e6b01742dd57f5601495558bdc852c9881ff4674a2d6b49ba5a6e12dec2109069a76bd39d878ac7ec0d325042d6d807a4d5cd29716a162c6b3dc12a1ed9bd8bd32875653f1ee4de217e6b5bab880dc138de5ce4701bcf016a140e7cdf6b24f9ba20da504b428b0f26ae3ffae10735e969857f41e94fff806cb3a3b016b93f5cc7e109812f8ddabb92fc230ece2fd845a7a1273a140c2802ff225015d2f8e0dc7e6d8c03ed64c5a479fd1be878552fd1e246c3fc3e61670b8d07aace86ba03f16866a0c8401a032c0ebd7747142502a"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x3ff, 0x7, 0x4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0x8}]}}]}}, {{0x9, 0x4, 0x9c, 0x1, 0x1, 0x48, 0x7a, 0xe6, 0x6, [@hid_hid={0x9, 0x21, 0x9, 0x7, 0x1, {0x22, 0x876}}], [{{0x9, 0x5, 0x0, 0x1, 0x9b4997d287a03120, 0x7, 0xf1, 0x80}}]}}, {{0x9, 0x4, 0x4d, 0xfa, 0xd, 0x3, 0x1a, 0x2, 0xd, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x7, 0xf6ce}, [@ncm={0x6, 0x24, 0x1a, 0x5, 0xc}, @country_functional={0x6, 0x24, 0x7, 0x2, 0x5}, @mdlm={0x15, 0x24, 0x12, 0x7}, @country_functional={0x10, 0x24, 0x7, 0x36, 0x24b, [0x880, 0xfc7, 0x4, 0x1ff, 0xc3]}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x4}, @mdlm={0x15, 0x24, 0x12, 0x8}]}, @cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xffff, 0x980, 0x8}, [@mbim={0xc, 0x24, 0x1b, 0x800, 0x9, 0x9, 0x8, 0xfaa6, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x6, 0xf, 0x2}]}], [{{0x9, 0x5, 0x49dfb01b6e015f70, 0x1, 0x400, 0x5, 0x7a, 0x40}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x5, 0x9, 0xbe}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x51, 0x81, 0x3}}, {{0x9, 0x5, 0x7, 0xc, 0x200, 0x4, 0xa, 0x2}}, {{0x9, 0x5, 0xa, 0x1, 0x400, 0x9, 0x5, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x2b2913859897440a, 0xb, 0xff}]}}, {{0x9, 0x5, 0x3, 0x4, 0x20, 0x7, 0x3c, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0x782}, @generic={0xef, 0x28, "0128b90aef68d0b79da65b4ad330de8f5d8b9aacf7823e3fd9f5148dab20d4138fafe11de0cd0989ef1cf372732859d5a40f9422bf5d61b5789039af7367a3993bdf1b307d2c555ca4c281043dc703fd645e097f2c39d2b9fdf70876286ca0cc8b497ba8e19e936fdc0296be0a2d59638f12073a8dc15f25026bd24102ce9665e6a56ec2968e7749e80d6d1aa131aa17af9f708633b7fc2afa7a760ae199e5b6522a332b4c104feb3de75e96dcd4c988a639880c42f2262afb9a9346c71d1548c79fef5e17a232203e069e59ae0daec3fa102a5f36f4e0f8ca1dd47e1a431c30ea0db5d05ed323f37e6c83a6d4"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x2b, 0xe9, 0x5f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xff}, @generic={0xf3, 0x24, "babdeb87f344635303488207e2608c7ee791c9af972866aa8eb44ae02db8578ff9cc0eee336fd27fa1e57a8590adb4db825ce6300e2c8fcf066a2bd192a5a7fc5bf753dfbabdaafce5c9439ca5471239cdc38bd9037cc7b624ffe8a8e6ae186d50555869c875dcd48fe7597a21a564f01eea76b06f66378f98682667712d806ac6657814855cfa7a49a723130f70b281d9b098a0d74bd5176a7e7095a113e276301673a7fdb3976f570f8b7f96aba0eba38dde5dfc7cd997454018587f4953060d12cf6da730466e9d118a2c8deffad856888fdfac5f535af7afb44022f2bb10c4b03307651cb27ba5e4b35525396d015b"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x40, 0x3, 0xf8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0xe2ca}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x4}]}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0xe8, 0x1, 0x2e, [@generic={0x79, 0x9, "28e63b35ec676c66de7f10757824b985141cc3bddf7e4b76a5208bc80f7dcba50c7923c9e591193cdc806dcbc774aa9fd2ba4cc3acf8b4ac2e3a8cfcc730e69d675224c35d808badc89b47d4f19ebcf10e46f1b5b32f5ee1792f7afa9178cf2ed5429c338245e800812ed53db4fa422c3a18358c9a4b78"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x8, 0x7, 0x7b, [@generic={0xa3, 0x0, "e39ee93c4d64e4e13ac04bc74e2c39c7c36c84a2b43ddb9f219a38d0f3635c7a9bd395c4f34e253f9efe0434171f0fa94e68652281d3a534b571668b784482a6411c6f84273207fa0dfe7c55c996973565fc5b6dcd89835d93b5919b3634f9fad7e7deb86553b8436748f1642d755a55c8545216513582e3a427bce0abd0bae2c7937d5b854604fcad8d6d77a6b22134d4d6a93c352235064531b71901ebbb7e66"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x40}]}}, {{0x9, 0x5, 0x0, 0x8, 0x3ff, 0x7, 0x5, 0x2}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0xaa, 0xf}}, {{0x9, 0x5, 0xf, 0xc, 0x8, 0x3, 0xe, 0x7}}]}}]}}]}}, &(0x7f0000001480)={0xa, &(0x7f0000001140)={0xa, 0x6, 0x300, 0x84, 0x0, 0xff, 0x40, 0x3}, 0x33, &(0x7f0000000100)={0x5, 0xf, 0x33, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x1, 0x6, 0x5}, @wireless={0xb, 0x10, 0x1, 0x8, 0x24, 0x82, 0x2, 0x5, 0x40}, @wireless={0xb, 0x10, 0x1, 0x2, 0x18, 0x5, 0x9, 0xffff, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x6, 0x6, 0x95}, @ptm_cap={0x3}]}, 0x6, [{0x16, &(0x7f00000011c0)=ANY=[@ANYBLOB="16039696945c1fcdb6f6580d83e70c88835ea9282a52"]}, {0x37, &(0x7f0000001200)=@string={0x37, 0x3, "1d4dd46e5422741bdfd637e40c7319746f9c80b2dc979b7d4de3fe75d5f836df0f7e1db4bb23dcaf2a1dfaeaee99eafadb2d514623"}}, {0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x446}}, {0xc7, &(0x7f0000001280)=@string={0xc7, 0x3, "b688974542dcdca3627572606a1bafa4f0b6e1e9ba42b40543ee1db2428b122aa8c16b0d4ae7c6e6bf3d3c4f4c8fad8b9329b27b19992dcc03b9257177487af34f48fc1471cf8c492f47886d5e0bc74b70d2fb50a9989a3c0ac80f96863cdfb4e2342e8ab29cf696ebcc12c56f8f2d32c79b1fe982183f31a9f65bc37d8cf708550dab44d5a99eba06be82daab79c89642a9467ea7a615356e46100397ea2ffcf8163f63e2401157879a8d96ade6443772725531dcc70487bdc88c572ccb334c22a40c1d71"}}, {0x82, &(0x7f0000001380)=@string={0x82, 0x3, "adb005ca5d0cf45147cf463c002d81338f7b4c55657ea2e5f7d57b30eab1ce8266e219fdb4168adf38ff7c4ea137347021f6987b0661a18e4f851bfa0f7b15915239a7f1a79687a24415ac2a2c33c5c2efc6779d0f6ac83432158e72110ddbd288e0fcba2e2a68de6b1971d5575ecc8e68185ac91f6437b9c150aa7c3da5f3eb"}}, {0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0x4001}}]}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) splice(r2, 0x0, r1, 0x0, 0x10000807, 0x0) 19.419895119s ago: executing program 1 (id=788): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0xff0f}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 19.419552138s ago: executing program 1 (id=789): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000010000107000040000000001a0a0000000600010011"], 0x1c}, 0x1, 0x0, 0x0, 0x4004090}, 0x10e29d924c95358a) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42902, 0x0) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='ip_vti0\x00', 0x54) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x4, 0x0, 0x3, r3}, 0x10) r4 = socket(0x400000000010, 0x3, 0x0) r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$tcp_mem(r5, &(0x7f00000000c0)={0x40, 0x20, 0x3, 0x20, 0x6}, 0x48) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) shutdown(r4, 0x1) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) preadv(r7, &(0x7f0000001500)=[{&(0x7f00000002c0)=""/4084, 0xff4}], 0x1, 0x202, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@TCA_STAB={0x54, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x3, 0x9, 0x6, 0x1, 0x5, 0xf, 0x1}}, {0x6, 0x2, [0xf]}}, {{0x1c, 0x1, {0x4, 0x17, 0x3, 0x10, 0x1, 0x7, 0x8, 0x5}}, {0xe, 0x2, [0xde8, 0xf2f, 0x9, 0x8, 0xb4bc]}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x50, 0x2c, 0xd27, 0x870b525, 0x8000, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {}, {0xa, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @private0={0xfc, 0x0, '\x00', 0x1}}]}}]}, 0x50}}, 0x0) 19.289217121s ago: executing program 1 (id=792): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/nullb0/queue/nr_requests\x00', 0x2, 0x0) execveat(r0, 0x0, &(0x7f0000000100)={[&(0x7f0000000000)='\x00']}, &(0x7f0000000380)={[&(0x7f0000000140)='sysfs\x00', &(0x7f00000001c0)='sysfs\x00', &(0x7f0000000200)='sysfs\x00', &(0x7f0000000240)='*,\'\x00', &(0x7f0000000280)='sysfs\x00', &(0x7f00000002c0)='sysfs\x00', &(0x7f0000000300)='sysfs\x00', &(0x7f0000000340)='sysfs\x00']}, 0x400) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xf, r2, 0x5, &(0x7f0000000340)) recvmmsg(r1, &(0x7f00000035c0)=[{{&(0x7f0000000400)=@xdp, 0x80, &(0x7f0000001600)=[{&(0x7f0000000480)=""/102, 0x66}, {&(0x7f0000000500)=""/239, 0xef}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x3, &(0x7f0000001640)=""/38, 0x26}}, {{&(0x7f0000001680)=@sco={0x1f, @none}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001700)=""/34, 0x22}], 0x1}, 0x1}, {{&(0x7f0000001780)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000001980)=[{&(0x7f0000001800)=""/78, 0x4e}, {&(0x7f0000001880)=""/2, 0x2}, {&(0x7f00000018c0)=""/146, 0x92}], 0x3, &(0x7f00000019c0)=""/79, 0x4f}}, {{&(0x7f0000001a40)=@x25, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001ac0)=""/147, 0x93}, {&(0x7f0000001b80)=""/97, 0x61}, {&(0x7f0000001c00)=""/2, 0x2}], 0x3}, 0x8}, {{&(0x7f0000001c80)=@ieee802154, 0x80, &(0x7f0000002240)=[{&(0x7f0000001d00)=""/22, 0x16}, {&(0x7f0000001d40)=""/167, 0xa7}, {&(0x7f0000001e00)=""/147, 0x93}, {&(0x7f0000001ec0)=""/189, 0xbd}, {&(0x7f0000001f80)=""/62, 0x3e}, {&(0x7f0000001fc0)=""/135, 0x87}, {&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/105, 0x69}, {&(0x7f00000021c0)=""/77, 0x4d}], 0x9, &(0x7f0000002300)=""/115, 0x73}, 0x4}, {{&(0x7f0000002380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000002400)=""/13, 0xd}, {&(0x7f0000002440)=""/125, 0x7d}, {&(0x7f00000024c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003500)=""/151, 0x97}, 0x8c6}], 0x6, 0x2000, 0x0) 19.220202143s ago: executing program 1 (id=793): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./nfsd\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000300)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000}) write(r0, &(0x7f0000000080)="4d42a899a9653ddc365f6a93a5cc1836", 0x10) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x30, r3, 0x1, 0x70bd29, 0x25dfcbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_CAPABILITY={0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4048004) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000002300)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000022c0)={&(0x7f00000021c0)={0xdc, r5, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_RULES={0xc0, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x10001}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffffffd9}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7fffffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x400002}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xae}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1ff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5064}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xee1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x100000}]}]}]}, 0xdc}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) (async) r6 = syz_open_procfs(0x0, &(0x7f0000002180)='net/xfrm_stat\x00') read$FUSE(r6, &(0x7f0000000080)={0x2020}, 0x2020) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000000000001b00000018000180140002006475"], 0x2c}}, 0x0) (async, rerun: 64) ioctl(0xffffffffffffffff, 0xc138fd0e, &(0x7f0000000000)="040000000000000000000000380100003801") (async, rerun: 64) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000002000200000000003f1ff8f3693dff9b7c87a397f70ba65eea7748a943d8e2c14f6321e99c5d8e7fef8985476a"], 0x48) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r7, 0xc138fd05, &(0x7f0000000000)="040000000200000000007c2fc2") (async, rerun: 32) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=@deltaction={0xf4, 0x31, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x100}}, {0x14, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xbfcd2aa}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x40010}, 0x43) (rerun: 32) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/ieee80211/phy0/aql_enable\x00', 0x2, 0x0) write$binfmt_register(r8, 0x0, 0x0) 7.475939929s ago: executing program 3 (id=891): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x1702, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xd}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) 5.718717339s ago: executing program 3 (id=895): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x125842, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000200), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000140)=0x2000) (async) ppoll(&(0x7f00000003c0)=[{r1, 0x90}, {r0, 0xc000}], 0x2, 0x0, 0x0, 0x0) (async) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f00000002c0)=0x1) (async) read$dsp(r1, &(0x7f0000000180)=""/67, 0x43) (async) mount(0x0, &(0x7f0000000040)='./file3\x00', &(0x7f0000000000)='smb3\x00', 0x0, &(0x7f0000000380)='acl') (async) r2 = socket$netlink(0x10, 0x3, 0x15) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x4}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8983, &(0x7f0000000600)={0x6, 'veth0_virt_wifi\x00', {0x9}, 0x6}) (async) r7 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f00000007c0)={'#! ', './file3', [{0x20, 'acl'}, {0x20, '-[*$'}], 0xa, "d3bd1b068da46adc2bcac0afc03f913887d2155bcb77fa96da1409893a018ccb02fdf6993e1b58d1bccd154755ad30ebc336bffa4eef85df5a357b41446c87ae5e9340000d7ba7a2f889f48083becbd49ab64e22eb3b1933a2745229e16a22969a306c92216a98cd13a83bd6dfd4212bfc08b61005efe84d87fe3d093535359a6c6e6c92b748ae2c0d6622e00b7864d87480cf0813040070e39f4b9e7db6a47979f2413a216ece91f9ac7e1c7bb89c6f6edcfc06664ce8015ed1e791fe497147756f5026e4a87c359850bfee812c271ca0819fbb23d8"}, 0xea) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x4000010, r5, 0x0) (async) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r8, 0x40046210, &(0x7f0000000200)=0x1) (async) r9 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x141000) ioctl$FE_GET_PROPERTY(r9, 0x80106f53, &(0x7f00000016c0)={0x37, &(0x7f0000000440)=[{0x22, '\x00', @data=0x1000001, 0x80000001}]}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f00000002c0)=0xffffffff80000000, 0x8) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000640)={@fda={0x66646185, 0x3, 0x0, 0x5}, @fd={0x66642a85, 0x0, r2}, @flat=@binder={0x73622a85, 0x0, 0x2}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000280)=[@free_buffer={0x40086303, r7}], 0x0, 0x0, 0x0}) sendmsg$netlink(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x4}, 0x8801) 5.714560439s ago: executing program 3 (id=897): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000fcdbdf2530000000080006000000000018000180140002006272696467655f736c6176655f31"], 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x800) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r6, 0x48212b8952c3aff5, 0x70bd27, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x2000c754) 5.609932598s ago: executing program 3 (id=899): prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES8], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000400)='ecryptfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/nd/devices/pfn0.0/align\x00', 0x1, 0x0) write(r1, &(0x7f0000000900)='2097152', 0x7) rename(&(0x7f00000001c0)='./sys/class/graphics/fbcon/rotate\x00', &(0x7f0000000240)='./sys/class/graphics/fbcon/rotate\x00') r2 = creat(&(0x7f0000000140)='./sys/class/graphics/fbcon/rotate\x00', 0x17d) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000040)={0xfff8, 0x6, 0x4, 0x5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000039000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f00000017c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x1}], 0x1}}, {{&(0x7f00000002c0)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000100)="a7", 0x1}], 0x1e}}], 0x2, 0x0) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000300)=@assoc_value={0x0}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f00000003c0)={r8, 0x0, 0x20}, 0xc) 5.410249123s ago: executing program 3 (id=900): r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040f0400011620"], 0x7) (async) symlinkat(0x0, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x54, r3, 0x1, 0xfffffffd, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x38, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xff, 0xa, 0x6, 0x1, 0xbb5, 0xa6f6, 0xffff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0x71f, 0xf, 0x1, 0x3ff, 0x7277, 0x6]}}]}]}]}, 0x54}}, 0x0) (async) r5 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r5, 0x28, 0x0, &(0x7f00000002c0)=0x62, 0x8) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000000)) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x7}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x2040000) r6 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf64(r6, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x9, 0x7, 0xc, 0x7fffffff, 0x3, 0x3e, 0xc8, 0x39, 0x40, 0x311, 0x6, 0x3, 0x38, 0x1, 0x890d, 0x0, 0x5bf1}, [{0x3, 0x4, 0x8, 0x7, 0x45d9, 0x1, 0x0, 0x1}], "3e5c9bcf432e3ca4cd391945ec1d387597ab7af5064629fbafa36280f6900c1f062164c9f10b4fc7ec35db79ef31a5734a786f4be82c3fa50785b03463821ca60ea7ec7c3ff8886039076a4bd17ecf6c8ffca8115fd9ed9cee9586793ede7c5cbf4093245841126fd78687c03780adb04bf7cf3b", ['\x00']}, 0x1ec) 4.969951591s ago: executing program 3 (id=901): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys_mnt\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys_mnt/bus/virtio/devices/virtio0/vendor\x00', 0x0, 0x0) read(r1, &(0x7f0000000700), 0x100) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, 0x0, 0x631df, 0x100}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x90}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008045}, 0x0) 4.938219057s ago: executing program 33 (id=901): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys_mnt\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys_mnt/bus/virtio/devices/virtio0/vendor\x00', 0x0, 0x0) read(r1, &(0x7f0000000700), 0x100) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, 0x0, 0x631df, 0x100}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x90}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008045}, 0x0) 4.242202702s ago: executing program 34 (id=793): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./nfsd\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000300)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000}) write(r0, &(0x7f0000000080)="4d42a899a9653ddc365f6a93a5cc1836", 0x10) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x30, r3, 0x1, 0x70bd29, 0x25dfcbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_CAPABILITY={0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4048004) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000002300)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000022c0)={&(0x7f00000021c0)={0xdc, r5, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_RULES={0xc0, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x10001}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffffffd9}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7fffffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x400002}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xae}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1ff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5064}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xee1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x100000}]}]}]}, 0xdc}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) (async) r6 = syz_open_procfs(0x0, &(0x7f0000002180)='net/xfrm_stat\x00') read$FUSE(r6, &(0x7f0000000080)={0x2020}, 0x2020) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000000000001b00000018000180140002006475"], 0x2c}}, 0x0) (async, rerun: 64) ioctl(0xffffffffffffffff, 0xc138fd0e, &(0x7f0000000000)="040000000000000000000000380100003801") (async, rerun: 64) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000002000200000000003f1ff8f3693dff9b7c87a397f70ba65eea7748a943d8e2c14f6321e99c5d8e7fef8985476a"], 0x48) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r7, 0xc138fd05, &(0x7f0000000000)="040000000200000000007c2fc2") (async, rerun: 32) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=@deltaction={0xf4, 0x31, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x100}}, {0x14, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xbfcd2aa}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x40010}, 0x43) (rerun: 32) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/ieee80211/phy0/aql_enable\x00', 0x2, 0x0) write$binfmt_register(r8, 0x0, 0x0) 1.585548202s ago: executing program 2 (id=932): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@deltfilter={0x24, 0x2d, 0x300, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x9, 0xe}, {0x8, 0xffe0}}}, 0x24}}, 0x10) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r3, 0xc008561c, &(0x7f00000001c0)={0x980914, 0x8081, @value=0x20000007}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x108, 0x0, 0x65dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xffe0}, {0xffff, 0x7ff8}, {0xfff2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0xffffff22}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000002c0000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) r8 = socket$xdp(0x2c, 0x3, 0x0) sendmmsg(r8, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000003d40), 0x32, &(0x7f0000001c40)=[{0x1010, 0x308, 0x5, "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"}, {0xd0, 0x6, 0x4, "41883385a8f50e4e88aaa86e6ab91b82a6845db4e733acd076a7f8c08c763099393f25cde6b2b4fe941b9a6d7247d36eeea9827c86db0e51a55fd25df02d7b4ca3cb53446e422ce46d4dc9c138aff39c0ced0ff06e3efd34690c625ac214c9b2bf9aae60de423d9ec1bbd292f23cf9dfd6fc682a57fc6202a1cf0cfe2d2b5c19411e164436217905ba42d82c3a9025d2aeb83c152b9598fd12fca55b18fcf02244c510c9c22dcf9e7a821783f3e3446ae3c55c6d0ffb20b9111541792560"}, {0xe8, 0x10f, 0x8006d, "62d5cb59bc9fd256212307002cf283fce1ac6083f22fed9d9a6733c75b689ee9dfcf94bd54eb573ff035a0f3a58b4936f19b74228f281631c005b5ecdad46d535777d02d3ba1a043eaa21b2b5541c12fed41c11410e98a5cfe1da1a79f1a020847c44c864d7c6ba7bcf88ab4041c89f2c713dcb6ab8d73a0903dca501ca993174bb9250c4a44228af6cde7fc7c5dc4d4e630b3669b12be1d9b11c3c35f49db947a89bdda9b1edbf10141fcb98a58122f727fd845b848ef86399c76ef6ce5bda7aef5a89762ff7113265271fe595d32761fcb8ff73ef6"}, {0x50, 0x1, 0x0, "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"}, {0x108, 0x10c, 0x7ffe, "f8f4f235e1d928ff33b85a8402b641c3bb0c311d59dc3103ffaad8ff5ede29915086b6bbb331dde29e6941e415885e1756510b315ace8f08fc29bbc658f2742b848a9859840164293a5233ad87d3fb72ca7b74dca9c1b09e78d077c1e79c7bed57be98f2c32f824fa24b96a499043f51cc02641229538ff18aac4d7e8f9f1d20b69465a1f9c5abf60c19513b734a4950cbb71531270ee26b3f56a74b0cec4b8c8bb7dd2fbb19fcca7b366207815299c5dd4b15df7396e04085419fc4e88cc7a6329248cc6ef58fe357cbed45b9cd2e051df0644500e2cfe07b0405e94a449a9fcefbd8d259d3554b970856a206d1b485dea0"}], 0x1320}}], 0x1, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, 0xd45, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00'], 0x2c}, 0x1, 0x0, 0x0, 0x42}, 0x2810) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{}, &(0x7f0000001a40), &(0x7f0000001bc0)=r7}, 0x20) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r9, 0xc01864c1, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) getsockopt$inet_int(r6, 0x0, 0x42, 0x0, &(0x7f0000000180)) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000440)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900600000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000ba00000000b9c50d0000b800c80000b8010000000f01d90f300fc79d53bf0000c4e16dd3010f2202", 0x52}], 0x0, 0x6, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00'}) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES64=r4], 0x7) 1.270093082s ago: executing program 4 (id=936): prctl$PR_SET_IO_FLUSHER(0x50, 0x0) r0 = syz_open_dev$I2C(&(0x7f00000002c0), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r2, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) signalfd(r3, 0x0, 0x0) ioctl$I2C_TIMEOUT(r0, 0x702, 0x3) 1.219386728s ago: executing program 4 (id=937): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000580)="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", 0x12c}, {&(0x7f0000000400)="9c758d708fd85ce7956fecadde316073bedda10ad9e4335cdb1ab10a617e886fd1b5d46c1c64c13614563efba1fcdaf5172d9c4928bbebc6958e52c192", 0x3d}, {&(0x7f0000000440)="d5958e9464e5797a02ac32daf09066f0c4a12717d4af7eaa2a568d2986899420dcce42694e3e86bd93174f8ea1791277e409ab216f6763e1c9ce641cf6fe78ed83a3d606c21cda8c82f439faf2fd0000", 0x50}], 0x3) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 1.198163064s ago: executing program 4 (id=938): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(r0, &(0x7f00000000c0)=""/94, 0x5e, 0x58) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x8080, &(0x7f0000000100)='discard') 1.038083966s ago: executing program 2 (id=940): brk(0x9cd3) brk(0xe0) brk(0x101) brk(0xffffffffffffcfa6) brk(0x0) brk(0xac65) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r0, 0x7aa, &(0x7f0000000040)={{@my=0x1, 0xa}, 0x7, 0xfffffff9}) brk(0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x9a8f, 0x20, 0x3, 0xc6}, &(0x7f0000000140)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2e57, 0x2, 0x3, 0x170}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd46a, 0x4000, 0x0, 0x38c}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6217, 0x0, 0x0, 0x27d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9c8d, 0x40, 0x2, 0x1fc}}], 0x4, &(0x7f00000013c0)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x9}, 0x0, 0x0, '\x00', {0x1, 0xa5c, 0x0, &(0x7f00000003c0)=@buf_1k="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"}}, &(0x7f0000001440)) r3 = eventfd2(0x6, 0x80000) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000001480)=r3, 0x1) brk(0x7) r4 = socket$inet_udp(0x2, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000014c0), 0x60000, 0x0) brk(0x2) brk(0x2) r5 = socket$inet(0x2, 0x2, 0x80000000) brk(0x9) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000001500)={{0x1, 0x1, 0x18, r4, {0x6}}, './file0\x00'}) setsockopt$MRT6_DEL_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f0000001540)={{0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x42}, 0x400}, {0xa, 0xc5a8, 0x2, @remote, 0x2bc2}, 0x1, {[0x100000, 0x8, 0x7, 0xffffffff, 0x7, 0x4, 0xfffffff8, 0x1]}}, 0x5c) brk(0x10) brk(0x101) brk(0x7) brk(0xc55c) brk(0xfffffffffffffff7) brk(0x0) brk(0x2) 979.517834ms ago: executing program 4 (id=941): r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000001c0)=0x4, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0000000906010200000000000000000502ffff240007801800018014000240fe8000000000000000000000000000aa08000a40000000020900020073797a31000000000500010007"], 0x4c}}, 0x4000080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) write(r3, &(0x7f0000000700)='\x00'/24, 0x18) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, 0x8, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000040}, 0x804) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000030605000000000000050000000000000500010007"], 0x1c}}, 0x20000090) 920.200204ms ago: executing program 2 (id=942): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c000000190001ef27bd7000000000ff0a140000000000020024000008001e000000000008000400", @ANYRES32=0x0, @ANYBLOB], 0x2c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2380000000009019078ac1e0001ac1414aa3f25000000006800186371ae9b1c0300"/63], 0x0) 915.494123ms ago: executing program 2 (id=943): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000048000), 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) (async) exit(0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000a80)=0x1, 0x4) 830.247647ms ago: executing program 4 (id=944): r0 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r1 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 32) mq_unlink(&(0x7f0000003080)=':@\'!,+}!\x00') (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abb7000fddbdf250900020073797a30000000000800410073697600140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x40008c0}, 0x4400) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000002c0)={&(0x7f0000000140)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], 0x1, 0x3, 0x3, 0x2}) (async) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) (rerun: 32) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000180)=[r6], &(0x7f00000000c0)=[0x2], &(0x7f0000000f40)=[r5, r5], &(0x7f0000000040), 0x0, 0x2000}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000480)={0x200, 0x1, &(0x7f0000000340)=[r2], &(0x7f0000000380)=[0xf, 0x6, 0x0, 0x8, 0x3fd, 0x0], &(0x7f00000003c0), &(0x7f0000000400)=[0x424, 0x7, 0xc2a8, 0x2f, 0xb6f2, 0x9, 0xfffffffffffffffb, 0x54a9, 0x6, 0x8], 0x0, 0x2ec}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) (rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@gettfilter={0x4c, 0x2e, 0x4, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff3}, {0x6, 0xf}, {0xffff, 0x7}}, [{0x8, 0xb, 0x10}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x66bf}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x5891}, 0x0) 829.761225ms ago: executing program 5 (id=945): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x903c00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r3, &(0x7f0000000840)=[{&(0x7f0000000000)=@in={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@sndinfo={0x20, 0x84, 0x2, {0x2, 0x200, 0xb54, 0xffff070d}}], 0x20, 0xd0}], 0x1, 0x10) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000040)={0x10, 0xfffff801}) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f00009b3000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000240)="b9800000c00f3235004000000f30b9fa000000130f01d9300d76c4020a1bf7b805000000b90000c0fe0f3cae0a41d941d90066b841000f00d0ba00e500000f30660fc775022e0fba600c983166b85766baa00066ed00d0", 0x57}], 0x1, 0x1, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 828.85926ms ago: executing program 6 (id=907): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x0, 0x500}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 750.219782ms ago: executing program 6 (id=946): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000600), 0x2008800, &(0x7f0000000640)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r1, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, r2, {0x7, 0x2b, 0xfffffffe, 0x300040ac, 0x0, 0xfffb, 0x6, 0xfffffffe, 0x0, 0x0, 0x1, 0x100}}, 0x50) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x169000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xf}}, './file0\x00'}) close(r1) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./lower/dir1\x00', 0x1ff) mount$overlay(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000200), 0x0, &(0x7f00000005c0)={[{@lowerdir={'lowerdir', 0x3d, 'lower'}}, {@upperdir={'upperdir', 0x3d, 'upper'}}, {@workdir={'workdir', 0x3d, './mnt'}}]}) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./mnt/dir1\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./mnt/dir2\x00', 0x1) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x9, 0x7, 0xfffff001}, 0x10) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000a0)='./proc/net/afs/cells\x00', 0x2, 0x0) write(r6, &(0x7f0000000180)="61646420206f6f73797a205b959b86c2038af739ac7ce85b1980981f94ea922cca2e2045096e3b58cd2c18b3ffd4d8d8725257bd7534fad339b98b74ad76ceaf04ad12bd0f6b7e78e77de62fc12e724fe08e1e6f0318a33d60e7c5747aa64a65b6fa5edf11a745f5aa89796672611fc76df92ab1a4d716b740733f969554b324885bc81435681dc8dd9b8a63ee618c5ed31ce810a1868954249311e9a23e9fcb3df5cbed706333cdb519ad4f3c7230cd3742a3b88f08280f0eb33499969c0d88d5cd9b108397bff94a463097efc9637d98a89bb16e87b09e5d52", 0xda) 748.012962ms ago: executing program 4 (id=947): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x101200, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001080), 0x800, 0x0) ioctl$CDROM_CLEAR_OPTIONS(r1, 0x5321, 0x10) ioctl$CDROMPLAYBLK(r1, 0x5317, &(0x7f00000010c0)={0x7, 0x5}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x400000009) mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r3 = open(&(0x7f0000000040)='./file1\x00', 0x808400, 0x43) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f0000000140)='./file0\x00') mkdirat(r3, &(0x7f0000000340)='./file0\x00', 0xf3) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r4, 0x0) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x31, 0xfffc, 0x360, 0x2}, 0x8, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r1], 0x28}, 0x1, 0x0, 0x0, 0x4048081}, 0xc8c1) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001000ff05143a13600e12080005007a010401a80016002000034004", 0x39}], 0x1}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0xfe33) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f00000000c0)) 667.065429ms ago: executing program 5 (id=948): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x4) fchdir(r1) mkdirat(r1, &(0x7f0000000140)='./bus\x00', 0x11d) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x3, 'vlan0\x00', {0x4}, 0x5}) r2 = socket(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000000040)=0x9, 0x4) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@xino_auto}]}) 579.620219ms ago: executing program 5 (id=949): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000000)=0x40013, 0x4) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000080)={0x6b19, 0x1, 0xffff, 0x400e0a, 0x7c, "203c5e0000ff765e000080fffffffffffffff2", 0x8, 0x5}) mremap(&(0x7f0000ec2000/0x2000)=nil, 0x2000, 0x600000, 0x7, &(0x7f0000a00000/0x600000)=nil) munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000100)=ANY=[], 0x9) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000002c0)=[@in6={0xa, 0x4e23, 0x100, @empty, 0x100ff}], 0x1c) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, &(0x7f0000000040)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) r6 = socket(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x29, 0x5, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r10, {0xf, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xe5}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x2000000) sendto$inet6(r5, &(0x7f0000000080)="800009e92208a1ce", 0xfdef, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010025bd7b9e58aa817000fcdbdf254400000008000300", @ANYRES32=r12, @ANYBLOB="040008010400cc000a0018000703030303030000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4008080) socket$xdp(0x2c, 0x3, 0x0) 459.916862ms ago: executing program 5 (id=950): r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x9e9, 0x80200) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0xfffffffd, 0xe, 0x793, 0x6, r0, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5, 0xe}, 0x50) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/ttyGS0\x00', 0x2, 0x0) write(r2, &(0x7f0000000a00)='t', 0x1) (async) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0000000600000004000000ffffff0f01000000", @ANYRES32=r1], 0x50) 399.94366ms ago: executing program 5 (id=951): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000180)={'pim6reg\x00', 0x2}) (async) mount(&(0x7f0000000000)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='afs\x00', 0xc4049, &(0x7f0000000340)='debqg') fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x800, 0x7ff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r1, r2) (async, rerun: 32) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 32) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 399.481675ms ago: executing program 5 (id=952): r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r1 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$XFS_IOC_READLINK_BY_HANDLE(r0, 0xc038586c, &(0x7f00000001c0)={r1, &(0x7f00000000c0)='+#}-\x00', 0x10880, &(0x7f0000000100)={@_ha_fsid={[0x5802, 0x2]}, {0x0, 0x0, 0xfffffff9, 0xffff}}, 0x1acc, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x3}) syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x2) (async) r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x2) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000240)=0x70a502d2) (async) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000240)=0x70a502d2) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000280)={0x55, 0x6954, 0x4, {0x6, 0x6474}, {0x0, 0x2}, @ramp={0x6, 0xfff, {0xfe00, 0x7, 0x1ff, 0x200}}}) (async) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000280)={0x55, 0x6954, 0x4, {0x6, 0x6474}, {0x0, 0x2}, @ramp={0x6, 0xfff, {0xfe00, 0x7, 0x1ff, 0x200}}}) fcntl$dupfd(r0, 0x406, r1) (async) r3 = fcntl$dupfd(r0, 0x406, r1) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)=@newqdisc={0xe4, 0x24, 0x200, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x10, 0xd}, {0x0, 0x10}, {0x1, 0xd}}, [@TCA_STAB={0xb0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x9, 0x4, 0x8000, 0x0, 0x8, 0x4, 0x4}}, {0xc, 0x2, [0x1, 0xd1, 0x5, 0x6]}}, {{0x1c, 0x1, {0x7, 0x6, 0x81, 0x3, 0x0, 0x2, 0xd1, 0x6}}, {0x10, 0x2, [0xfffa, 0xe, 0x8, 0x40, 0x1, 0x5]}}, {{0x1c, 0x1, {0x2, 0xf8, 0x4, 0x6, 0x1, 0x3, 0xfe, 0x5}}, {0xe, 0x2, [0xfff, 0x0, 0x4, 0x3, 0x0]}}, {{0x1c, 0x1, {0x7, 0x1, 0x5, 0x8, 0x0, 0x4, 0x5, 0x6}}, {0x10, 0x2, [0x4fec, 0x2, 0x7564, 0x9, 0x80, 0x5]}}]}, @TCA_RATE={0x6, 0x5, {0x40, 0xf8}}, @TCA_RATE={0x6, 0x5, {0x5, 0x1}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4000005}, 0x44002) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)=@newqdisc={0xe4, 0x24, 0x200, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x10, 0xd}, {0x0, 0x10}, {0x1, 0xd}}, [@TCA_STAB={0xb0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x9, 0x4, 0x8000, 0x0, 0x8, 0x4, 0x4}}, {0xc, 0x2, [0x1, 0xd1, 0x5, 0x6]}}, {{0x1c, 0x1, {0x7, 0x6, 0x81, 0x3, 0x0, 0x2, 0xd1, 0x6}}, {0x10, 0x2, [0xfffa, 0xe, 0x8, 0x40, 0x1, 0x5]}}, {{0x1c, 0x1, {0x2, 0xf8, 0x4, 0x6, 0x1, 0x3, 0xfe, 0x5}}, {0xe, 0x2, [0xfff, 0x0, 0x4, 0x3, 0x0]}}, {{0x1c, 0x1, {0x7, 0x1, 0x5, 0x8, 0x0, 0x4, 0x5, 0x6}}, {0x10, 0x2, [0x4fec, 0x2, 0x7564, 0x9, 0x80, 0x5]}}]}, @TCA_RATE={0x6, 0x5, {0x40, 0xf8}}, @TCA_RATE={0x6, 0x5, {0x5, 0x1}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4000005}, 0x44002) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r2, 0x40786e88, &(0x7f0000000800)={{&(0x7f00000004c0)=[{0x30000, 0x7, 0x6, {0x5d79c44c, 0x6}, 0x6, 0x4, 0x3}, {0x3, 0x100, 0x3ff, {0x1, 0x8000}, 0x1, 0x2, 0x2}, {0x2, 0x65, 0x5, {0x1, 0xffffffffffff3e9d}, 0x7, 0x400, 0x8}, {0xd5, 0x8, 0x0, {0xffffffffffff493d, 0x8}, 0x3, 0x7f34d137, 0x4}, {0xfffffffffffffffa, 0x2c3, 0x9, {0x1, 0x2}, 0x1, 0xbb, 0x1}], 0x5, 0x40, 0x8}, {&(0x7f0000000600)=[{0xfe08, 0x2}, {0x1625}, {0x7ff, 0x2}, {0xfe8a, 0x5}, {0xffffffffffffff62, 0x6}, {0x2, 0x1}, {0x7fffffffffffffff, 0x8001}], 0x7, 0x10, 0x9, 0x5}, {&(0x7f0000000680)=[0x80000000, 0x9, 0x7, 0x15, 0xd41], 0x5, 0x8, 0x7, 0x400}, {&(0x7f00000006c0)=[{0x81, 0x6, 0x1, 0x5, 0x6e0d67ba}, {0x10, 0x1, 0x6, 0x1, 0x3}, {0x8, 0x8, 0x1, 0x6b, 0x4}, {0x7, 0xfffffffffffffffb, 0x9, 0x8, 0x3ff}, {0xe62, 0x100000000, 0x9, 0x2, 0x6}], 0x5, 0x28, 0x1, 0xb3}, {&(0x7f00000007c0)=[0x4, 0x8], 0x2, 0x8, 0x1, 0x3}}) (async) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r2, 0x40786e88, &(0x7f0000000800)={{&(0x7f00000004c0)=[{0x30000, 0x7, 0x6, {0x5d79c44c, 0x6}, 0x6, 0x4, 0x3}, {0x3, 0x100, 0x3ff, {0x1, 0x8000}, 0x1, 0x2, 0x2}, {0x2, 0x65, 0x5, {0x1, 0xffffffffffff3e9d}, 0x7, 0x400, 0x8}, {0xd5, 0x8, 0x0, {0xffffffffffff493d, 0x8}, 0x3, 0x7f34d137, 0x4}, {0xfffffffffffffffa, 0x2c3, 0x9, {0x1, 0x2}, 0x1, 0xbb, 0x1}], 0x5, 0x40, 0x8}, {&(0x7f0000000600)=[{0xfe08, 0x2}, {0x1625}, {0x7ff, 0x2}, {0xfe8a, 0x5}, {0xffffffffffffff62, 0x6}, {0x2, 0x1}, {0x7fffffffffffffff, 0x8001}], 0x7, 0x10, 0x9, 0x5}, {&(0x7f0000000680)=[0x80000000, 0x9, 0x7, 0x15, 0xd41], 0x5, 0x8, 0x7, 0x400}, {&(0x7f00000006c0)=[{0x81, 0x6, 0x1, 0x5, 0x6e0d67ba}, {0x10, 0x1, 0x6, 0x1, 0x3}, {0x8, 0x8, 0x1, 0x6b, 0x4}, {0x7, 0xfffffffffffffffb, 0x9, 0x8, 0x3ff}, {0xe62, 0x100000000, 0x9, 0x2, 0x6}], 0x5, 0x28, 0x1, 0xb3}, {&(0x7f00000007c0)=[0x4, 0x8], 0x2, 0x8, 0x1, 0x3}}) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_TIMEOUT(r6, 0x0, 0x486, &(0x7f00000008c0), &(0x7f0000000900)=0xc) read(r4, &(0x7f0000000940)=""/208, 0xd0) write$cgroup_subtree(r0, &(0x7f0000000a40), 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000a40), 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r7, 0x84, 0x3, &(0x7f0000000a80), &(0x7f0000000ac0)=0x4) r8 = dup(r1) ioctl$XFS_IOC_GET_RESBLKS(r1, 0x80105873, &(0x7f0000000b00)) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000b40)=""/24) write(r8, &(0x7f0000000b80)="4ed4c3cef0ad864cb52080ccee7c80f221b69188d0af911697365789dd106a85756fe2e2d8d670d3a79e1bb5c0b9c04aafca60e6a4a63168a49e2f27232cefbbc2e292256d94beface587d2118ca05c05b577188b523f0f03d60edb162247c7eb1", 0x61) syz_usbip_server_init(0x4) write(r3, &(0x7f0000000c00)="d022de8474fea2886d96243000e1e4aceb732a9ebb887f602e29d6c526d58f894dbe55eea8792f333faa5d46c55082c6c0952d2917e32ccbddb5b70c74985a428b8c5532efa5a4399b017c04257d69edaaf2e9c368c3118babbe63f50d5b7014dfadf93d5bb61521d479a9407fae06e2e4bbeaf23b1c3d77b5145df69ff4c8e87c405d236675c1efe5a81134d75878a150bbe13450a5b6ed7e8b1f5386df491f89b3c67421cf35a396365a2f839cc1937d7c7438a51f94f2bd3991ae390baf84fabad2331be77dc1d81f6c1cfe9ae18cdd246c9917014bc2a252", 0xda) (async) write(r3, &(0x7f0000000c00)="d022de8474fea2886d96243000e1e4aceb732a9ebb887f602e29d6c526d58f894dbe55eea8792f333faa5d46c55082c6c0952d2917e32ccbddb5b70c74985a428b8c5532efa5a4399b017c04257d69edaaf2e9c368c3118babbe63f50d5b7014dfadf93d5bb61521d479a9407fae06e2e4bbeaf23b1c3d77b5145df69ff4c8e87c405d236675c1efe5a81134d75878a150bbe13450a5b6ed7e8b1f5386df491f89b3c67421cf35a396365a2f839cc1937d7c7438a51f94f2bd3991ae390baf84fabad2331be77dc1d81f6c1cfe9ae18cdd246c9917014bc2a252", 0xda) r9 = openat$cgroup_ro(r3, &(0x7f0000000d00)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r9, 0x8983, &(0x7f0000000d40)={0x2, 'ip6gre0\x00', {0x8}, 0x5}) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r9, 0x8983, &(0x7f0000000d40)={0x2, 'ip6gre0\x00', {0x8}, 0x5}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000dc0), r8) sendmsg$IPVS_CMD_DEL_DAEMON(r10, &(0x7f0000000fc0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x14c, r11, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2b}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1c}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x901}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x93bd045d}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x13}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x33}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x48094}, 0x4000054) ioctl$XFS_IOC_START_COMMIT(r8, 0x80585882, &(0x7f0000001000)={0xffffffffffffffff}) close_range(r6, r12, 0x2) 319.325µs ago: executing program 2 (id=953): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x8035, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xd}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) 0s ago: executing program 2 (id=954): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz1\x00', {0xa, 0x5, 0x8}, 0x19, [0x7f, 0x7, 0x2, 0x9, 0x8d6, 0x9c0, 0xffff, 0x7f, 0x7ff, 0x7, 0x0, 0x5, 0xffffffff, 0x8, 0x4, 0x0, 0xcb37, 0xd, 0x60, 0x3, 0xfff, 0x2, 0x400, 0x2, 0x101, 0x6624a6a6, 0x1, 0xffffc4e3, 0x4, 0x5, 0x3ff, 0x0, 0xc, 0xbc4, 0x1, 0xff, 0x401, 0x4, 0xa, 0xca0, 0x7, 0x80, 0x7, 0x10001, 0x7fffffff, 0x4, 0xc4d7, 0x5, 0x4, 0x3ff, 0x6, 0x6, 0x1, 0x1, 0x2, 0x5c0, 0x40, 0x7, 0x10000, 0x31, 0x10001, 0x8000, 0x2, 0x3], [0xfffff83f, 0xffffffff, 0x6, 0xe7, 0x9, 0xc7, 0x40, 0x24, 0xfffffffe, 0x200, 0x1, 0x81, 0x4, 0x8, 0xa, 0x0, 0xf, 0xd, 0x3, 0xef, 0x5, 0x7, 0xa, 0x93c, 0x3, 0x5, 0x1, 0x1, 0x8, 0x8, 0x7, 0x6, 0x1, 0x73f, 0x84ca, 0x6, 0x48, 0x3b0, 0xffffff3d, 0x7, 0x4, 0x4, 0x6, 0x89b4, 0x0, 0x6, 0x10, 0x6, 0x9, 0x0, 0x1, 0x6, 0xa, 0x3, 0x2a1e, 0x66, 0x7ff, 0xc1, 0xf, 0x7f, 0x2, 0x1, 0x7fff, 0x8], [0x7, 0x1, 0x25, 0xfecf, 0x3, 0x9, 0x3, 0x0, 0x7, 0x7f, 0x4, 0x80, 0x4, 0x1, 0x2, 0x0, 0x1000, 0xfded, 0x4c, 0x1, 0x6ba, 0x1, 0x2, 0x3, 0x4, 0x4, 0x1000, 0x2, 0xbc, 0x2, 0x7, 0x1, 0xf7, 0xd0, 0xfffffff9, 0x1000, 0x7cd, 0x7a, 0x6, 0x3, 0x5, 0x8405, 0x0, 0x8, 0x7ff, 0x81, 0x3ff, 0x0, 0xffffffff, 0x4, 0x10001, 0x4, 0xa012, 0xd913, 0x7, 0x2, 0x7, 0x1, 0x0, 0xa, 0x3, 0x9, 0x8001, 0x7], [0x3, 0x6, 0x2, 0x84, 0xdc2, 0xd72, 0x5, 0x2ef, 0x6, 0x7fffffff, 0x5, 0x3, 0x101, 0x8000, 0x8b4d, 0x9, 0x2411, 0x80000001, 0x5, 0x2800000, 0x9, 0x2, 0x3, 0xa23, 0xffffffff, 0x3ff, 0x47, 0xffffff7b, 0x10, 0x4, 0xfff, 0x6, 0x401, 0xf, 0x5, 0x6, 0xfe44, 0x94, 0x8, 0x9, 0xfffffffc, 0x4, 0xf, 0xd2c, 0xe000000, 0x3, 0x14000, 0x9, 0x3, 0x8, 0x8001, 0xf, 0xfffffffe, 0x5a4, 0x9, 0x6, 0xfffffffb, 0x7fffffff, 0x3, 0x4, 0xfffffab0, 0x800, 0x6, 0x1]}, 0x45c) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000070a01040000000000000000020000000c00d44000001000000000020900020073797a32000000000900010073797a30"], 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x20000014) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) (async) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) (async) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x100) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="000000001f0000001a007f"]) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r7) sendmsg$NLBL_UNLABEL_C_LIST(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r8, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0xc024) r9 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) pread64(r9, &(0x7f0000000080)=""/151, 0x97, 0x8) (async) write$binfmt_misc(r9, &(0x7f0000000000)="c4b1431ec7aa4f218bc0d2814d72a7ac8d9026e0560337f09648a0b66cf0af8baf5267856eecfe956ea4914bc6cd707b19f5028b76ed3b932c3d25865a5ab6edc96566a1c332f97d417839be3304fe759cb1a300e32d14d2e33255", 0x5b) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000000000/0x11000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x100000001, 0x0, 0x0, 0xa00, 0x67, 0x0, 0x4d, 0x5f}) (async) r10 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000680)='./proc/net/afs/rootcell\x00', &(0x7f00000006c0)={0x200000, 0x0, 0x2}, 0x18) renameat2(r10, &(0x7f0000000700)='./proc/net/afs/rootcell\x00', r9, &(0x7f0000000740)='./proc/net/afs/rootcell\x00', 0x5) (async) r11 = dup(r1) write$UHID_INPUT(r11, &(0x7f0000002100)={0x18, {"a2e3ad2119c70e0d8a267fd5d89dcd939b324d078b089b3b0838721a0890e0878f0e1ac6e7049b3d63959b509a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b32320d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70d998ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f0000000c558cdc0a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5af098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000108000e0a37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62437264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d637545c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4953a9737d214060005ea6f1783e287b3bee96e3a726eafe2fd12a78d1f48c13b64df07847754b8010000009bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f577dcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b2fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2010891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d3a6df40babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57ccb938e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f794c9eee11987f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b4907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d847dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e7832b625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859add50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db87195301000000aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d0d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f39a9817139a206fc76957227ffff2de20a4b8e3737fbb4d600000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de4f8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3442bab515b0000348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de0000d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60559516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bdc8f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d8872fe174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62f46fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f980000000203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00", 0x1000}}, 0x1006) kernel console output (not intermixed with test programs): 2.736200][ T8341] RAX: ffffffffffffffda RBX: 00007fa7e3825fa0 RCX: 00007fa7e359e159 [ 132.736211][ T8341] RDX: 0000000020000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 132.736222][ T8341] RBP: 00007fa7e44b8090 R08: 0000000000000000 R09: 0000000000000000 [ 132.736233][ T8341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.736243][ T8341] R13: 00007fa7e3826038 R14: 00007fa7e3825fa0 R15: 00007ffdc1034518 [ 132.736269][ T8341] [ 132.788315][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.788382][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.169633][ T5811] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 133.352169][ T5811] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 133.359855][ T5811] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.359935][ T5811] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 133.359983][ T5811] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 133.360019][ T5811] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 133.360039][ T5811] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 133.360056][ T5811] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 133.360075][ T5811] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 133.360094][ T5811] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 133.360113][ T5811] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 133.360131][ T5811] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 133.360149][ T5811] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 133.360167][ T5811] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 133.360185][ T5811] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 133.360201][ T5811] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 133.360218][ T5811] usb 8-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 133.366140][ T5811] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.366162][ T5811] usb 8-1: Product: syz [ 133.366173][ T5811] usb 8-1: Manufacturer: syz [ 133.366184][ T5811] usb 8-1: SerialNumber: syz [ 133.369155][ T8346] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 133.369294][ T8346] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 133.369422][ T8346] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 133.369661][ T8346] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 133.369811][ T8346] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 133.369963][ T8346] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 133.370094][ T8346] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 133.370171][ T8346] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 133.370310][ T8346] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 133.370456][ T8346] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 133.370604][ T8346] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 133.377131][ T5811] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected [ 133.378313][ T5811] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 7 [ 133.387208][ T5811] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 133.388544][ T5811] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6 [ 133.392255][ T5811] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 133.696115][ T8352] random: crng reseeded on system resumption [ 133.722746][ T8352] lo speed is unknown, defaulting to 1000 [ 133.799162][ T8356] FAULT_INJECTION: forcing a failure. [ 133.799162][ T8356] name fail_futex, interval 1, probability 0, space 0, times 0 [ 133.799241][ T8356] CPU: 1 UID: 0 PID: 8356 Comm: syz.1.758 Not tainted syzkaller #0 PREEMPT(full) [ 133.799264][ T8356] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 133.799272][ T8356] Call Trace: [ 133.799276][ T8356] [ 133.799281][ T8356] dump_stack_lvl+0x100/0x190 [ 133.799300][ T8356] should_fail_ex.cold+0x5/0xa [ 133.799329][ T8356] get_futex_key+0x293/0x14f0 [ 133.799345][ T8356] ? __pfx_get_futex_key+0x10/0x10 [ 133.799359][ T8356] ? __mutex_unlock_slowpath+0x35d/0x930 [ 133.799375][ T8356] futex_wake+0xf4/0x5e0 [ 133.799392][ T8356] ? __pfx_futex_wake+0x10/0x10 [ 133.799410][ T8356] ? lock_acquire+0x1d1/0x380 [ 133.799421][ T8356] ? detach_task_ctx_data+0x83/0x490 [ 133.799451][ T8356] do_futex+0x2b2/0x440 [ 133.799466][ T8356] ? __pfx_do_futex+0x10/0x10 [ 133.799479][ T8356] ? __might_fault+0xc5/0x140 [ 133.799497][ T8356] mm_exit_exec_release+0x256/0x2f0 [ 133.799510][ T8356] do_exit+0x707/0x2ae0 [ 133.799526][ T8356] ? __pfx_do_exit+0x10/0x10 [ 133.799540][ T8356] ? do_raw_spin_lock+0x128/0x260 [ 133.799552][ T8356] ? find_held_lock+0x2b/0x80 [ 133.799566][ T8356] ? get_signal+0x7e0/0x21e0 [ 133.799579][ T8356] do_group_exit+0xd5/0x2a0 [ 133.799593][ T8356] get_signal+0x1ec7/0x21e0 [ 133.799608][ T8356] ? find_held_lock+0x2b/0x80 [ 133.799623][ T8356] ? __pfx_get_signal+0x10/0x10 [ 133.799635][ T8356] ? do_futex+0x190/0x440 [ 133.799650][ T8356] arch_do_signal_or_restart+0x91/0x7e0 [ 133.799667][ T8356] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 133.799690][ T8356] exit_to_user_mode_loop+0x139/0x700 [ 133.799703][ T8356] ? rcu_is_watching+0x13/0xc0 [ 133.799718][ T8356] do_syscall_64+0x661/0x790 [ 133.799731][ T8356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.799742][ T8356] RIP: 0033:0x7f645579e159 [ 133.799751][ T8356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.799761][ T8356] RSP: 002b:00007f645659b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 133.799772][ T8356] RAX: fffffffffffffe00 RBX: 00007f6455a26098 RCX: 00007f645579e159 [ 133.799779][ T8356] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6455a26098 [ 133.799785][ T8356] RBP: 00007f6455a26090 R08: 0000000000000000 R09: 0000000000000000 [ 133.799792][ T8356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.799798][ T8356] R13: 00007f6455a26128 R14: 00007fff231d3550 R15: 00007fff231d3638 [ 133.799812][ T8356] [ 133.928878][ T8362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.761'. [ 133.959127][ T8362] 8021q: adding VLAN 0 to HW filter on device bond9 [ 134.023633][ T8365] block2mtd: too many arguments [ 134.059778][ T8371] netlink: 132 bytes leftover after parsing attributes in process `syz.2.764'. [ 134.219221][ T8373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.765'. [ 134.236381][ T8373] 8021q: adding VLAN 0 to HW filter on device bond10 [ 134.246351][ T8373] bond10: (slave ip6erspan0): making interface the new active one [ 134.249677][ T8373] bond10: (slave ip6erspan0): Enslaving as an active interface with an up link [ 134.300055][ T8376] FAULT_INJECTION: forcing a failure. [ 134.300055][ T8376] name failslab, interval 1, probability 0, space 0, times 0 [ 134.300144][ T8376] CPU: 3 UID: 0 PID: 8376 Comm: syz.2.766 Not tainted syzkaller #0 PREEMPT(full) [ 134.300168][ T8376] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 134.300177][ T8376] Call Trace: [ 134.300181][ T8376] [ 134.300186][ T8376] dump_stack_lvl+0x100/0x190 [ 134.300207][ T8376] should_fail_ex.cold+0x5/0xa [ 134.300231][ T8376] should_failslab+0xc2/0x120 [ 134.300244][ T8376] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 134.300257][ T8376] ? alloc_inode+0x183/0x250 [ 134.300277][ T8376] alloc_inode+0x183/0x250 [ 134.300293][ T8376] iget_locked+0x1d9/0x6d0 [ 134.300310][ T8376] ? __pfx_iget_locked+0x10/0x10 [ 134.300326][ T8376] ? kernfs_root+0xee/0x2a0 [ 134.300340][ T8376] ? kernfs_root+0xee/0x2a0 [ 134.300356][ T8376] kernfs_get_inode+0x46/0x470 [ 134.300371][ T8376] kernfs_iop_lookup+0x1a7/0x2d0 [ 134.300388][ T8376] __lookup_slow+0x155/0x320 [ 134.300405][ T8376] lookup_slow+0x50/0x70 [ 134.300420][ T8376] link_path_walk+0x1377/0x1cc0 [ 134.300436][ T8376] path_openat+0x1ac/0x2440 [ 134.300451][ T8376] ? __pfx_path_openat+0x10/0x10 [ 134.300468][ T8376] do_file_open+0x20e/0x430 [ 134.300482][ T8376] ? __pfx_do_file_open+0x10/0x10 [ 134.300500][ T8376] ? __pfx_kfree_link+0x10/0x10 [ 134.300515][ T8376] ? _raw_spin_unlock+0x28/0x50 [ 134.300532][ T8376] ? alloc_fd+0x471/0x7a0 [ 134.300549][ T8376] do_sys_openat2+0x10f/0x1e0 [ 134.300563][ T8376] ? __pfx_do_sys_openat2+0x10/0x10 [ 134.300578][ T8376] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 134.300592][ T8376] ? __fget_files+0x21f/0x3d0 [ 134.300606][ T8376] __x64_sys_openat+0x12d/0x210 [ 134.300621][ T8376] ? __pfx___x64_sys_openat+0x10/0x10 [ 134.300635][ T8376] ? ksys_write+0x1ac/0x250 [ 134.300649][ T8376] do_syscall_64+0x123/0x790 [ 134.300664][ T8376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.300675][ T8376] RIP: 0033:0x7fc631b9e159 [ 134.300684][ T8376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.300695][ T8376] RSP: 002b:00007fc632ae3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 134.300707][ T8376] RAX: ffffffffffffffda RBX: 00007fc631e25fa0 RCX: 00007fc631b9e159 [ 134.300714][ T8376] RDX: 0000000000000002 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 134.300723][ T8376] RBP: 00007fc632ae3090 R08: 0000000000000000 R09: 0000000000000000 [ 134.300729][ T8376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 134.300736][ T8376] R13: 00007fc631e26038 R14: 00007fc631e25fa0 R15: 00007ffd4b4c7918 [ 134.300750][ T8376] [ 134.511261][ T8381] random: crng reseeded on system resumption [ 134.533879][ T8381] lo speed is unknown, defaulting to 1000 [ 134.585388][ T8381] FAULT_INJECTION: forcing a failure. [ 134.585388][ T8381] name failslab, interval 1, probability 0, space 0, times 0 [ 134.585480][ T8381] CPU: 3 UID: 0 PID: 8381 Comm: syz.2.768 Not tainted syzkaller #0 PREEMPT(full) [ 134.585504][ T8381] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 134.585513][ T8381] Call Trace: [ 134.585517][ T8381] [ 134.585522][ T8381] dump_stack_lvl+0x100/0x190 [ 134.585541][ T8381] should_fail_ex.cold+0x5/0xa [ 134.585558][ T8381] should_failslab+0xc2/0x120 [ 134.585572][ T8381] __kmalloc_cache_noprof+0x91/0x6d0 [ 134.585588][ T8381] ? xfrm_policy_inexact_alloc_bin+0x550/0x1e30 [ 134.585603][ T8381] ? xfrm_policy_inexact_alloc_bin+0x594/0x1e30 [ 134.585619][ T8381] xfrm_policy_inexact_alloc_bin+0x594/0x1e30 [ 134.585635][ T8381] ? __pfx_xfrm_policy_inexact_alloc_bin+0x10/0x10 [ 134.585652][ T8381] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 134.585666][ T8381] xfrm_policy_inexact_insert+0x1e/0x1d0 [ 134.585680][ T8381] xfrm_policy_insert+0x5a5/0x820 [ 134.585696][ T8381] xfrm_add_policy+0x33c/0x6c0 [ 134.585709][ T8381] ? rcu_is_watching+0x13/0xc0 [ 134.585729][ T8381] ? __pfx_xfrm_add_policy+0x10/0x10 [ 134.585747][ T8381] ? __nla_parse+0x40/0x60 [ 134.585761][ T8381] ? __pfx_xfrm_add_policy+0x10/0x10 [ 134.585774][ T8381] xfrm_user_rcv_msg+0x483/0xd80 [ 134.585788][ T8381] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 134.585799][ T8381] ? look_up_lock_class+0x64/0x120 [ 134.585813][ T8381] ? register_lock_class+0x3f/0x7b0 [ 134.585839][ T8381] ? rcu_is_watching+0x13/0xc0 [ 134.585853][ T8381] ? trace_contention_end+0x126/0x160 [ 134.585866][ T8381] ? __mutex_lock+0x26c/0x1bd0 [ 134.585880][ T8381] netlink_rcv_skb+0x159/0x420 [ 134.585896][ T8381] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 134.585907][ T8381] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 134.585933][ T8381] xfrm_netlink_rcv+0x71/0x90 [ 134.585949][ T8381] netlink_unicast+0x585/0x850 [ 134.585967][ T8381] ? __pfx_netlink_unicast+0x10/0x10 [ 134.585986][ T8381] netlink_sendmsg+0x8b0/0xda0 [ 134.586004][ T8381] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.586020][ T8381] ? selinux_socket_sendmsg+0x198/0x2f0 [ 134.586040][ T8381] ____sys_sendmsg+0xa4d/0xbe0 [ 134.586052][ T8381] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.586069][ T8381] ? __pfx_____sys_sendmsg+0x10/0x10 [ 134.586087][ T8381] ___sys_sendmsg+0x190/0x1e0 [ 134.586102][ T8381] ? __pfx____sys_sendmsg+0x10/0x10 [ 134.586116][ T8381] ? futex_wait+0x11e/0x370 [ 134.586137][ T8381] ? find_held_lock+0x2b/0x80 [ 134.586162][ T8381] __sys_sendmsg+0x160/0x210 [ 134.586172][ T8381] ? __pfx___sys_sendmsg+0x10/0x10 [ 134.586189][ T8381] do_syscall_64+0x123/0x790 [ 134.586202][ T8381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.586214][ T8381] RIP: 0033:0x7fc631b9e159 [ 134.586224][ T8381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.586235][ T8381] RSP: 002b:00007fc632ae3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.586247][ T8381] RAX: ffffffffffffffda RBX: 00007fc631e25fa0 RCX: 00007fc631b9e159 [ 134.586254][ T8381] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 134.586260][ T8381] RBP: 00007fc631c35024 R08: 0000000000000000 R09: 0000000000000000 [ 134.586266][ T8381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.586272][ T8381] R13: 00007fc631e26038 R14: 00007fc631e25fa0 R15: 00007ffd4b4c7918 [ 134.586286][ T8381] [ 134.764579][ T8388] netlink: 'syz.2.769': attribute type 7 has an invalid length. [ 134.764646][ T8388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.769'. [ 134.764701][ T8388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.769'. [ 134.835120][ T8366] 9pnet_fd: p9_fd_create_tcp (8366): problem connecting socket to 127.0.0.1 [ 134.925061][ T8392] FAULT_INJECTION: forcing a failure. [ 134.925061][ T8392] name failslab, interval 1, probability 0, space 0, times 0 [ 134.925140][ T8392] CPU: 3 UID: 0 PID: 8392 Comm: syz.2.771 Not tainted syzkaller #0 PREEMPT(full) [ 134.925174][ T8392] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 134.925187][ T8392] Call Trace: [ 134.925194][ T8392] [ 134.925201][ T8392] dump_stack_lvl+0x100/0x190 [ 134.925232][ T8392] should_fail_ex.cold+0x5/0xa [ 134.925258][ T8392] should_failslab+0xc2/0x120 [ 134.925279][ T8392] __kmalloc_cache_noprof+0x91/0x6d0 [ 134.925306][ T8392] ? tcf_chain_create+0x98/0x370 [ 134.925330][ T8392] tcf_chain_create+0x98/0x370 [ 134.925354][ T8392] __tcf_chain_get+0x153/0x1b0 [ 134.925380][ T8392] tc_new_tfilter+0x626/0x24c0 [ 134.925414][ T8392] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 134.925436][ T8392] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 134.925459][ T8392] ? __pfx_tc_new_tfilter+0x10/0x10 [ 134.925492][ T8392] ? __lock_acquire+0x4c5/0x1ec0 [ 134.925523][ T8392] ? lock_acquire+0x1d1/0x380 [ 134.925540][ T8392] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 134.925561][ T8392] ? find_held_lock+0x2b/0x80 [ 134.925585][ T8392] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 134.925606][ T8392] ? __pfx_tc_new_tfilter+0x10/0x10 [ 134.925632][ T8392] rtnetlink_rcv_msg+0x95e/0xe90 [ 134.925654][ T8392] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 134.925680][ T8392] ? ref_tracker_free+0x37e/0x6c0 [ 134.925705][ T8392] netlink_rcv_skb+0x159/0x420 [ 134.925732][ T8392] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 134.925754][ T8392] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 134.925789][ T8392] ? netlink_deliver_tap+0x1ae/0xcc0 [ 134.925819][ T8392] netlink_unicast+0x585/0x850 [ 134.925848][ T8392] ? __pfx_netlink_unicast+0x10/0x10 [ 134.925882][ T8392] netlink_sendmsg+0x8b0/0xda0 [ 134.925912][ T8392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.925941][ T8392] ? selinux_socket_sendmsg+0x198/0x2f0 [ 134.925973][ T8392] ____sys_sendmsg+0xa4d/0xbe0 [ 134.925994][ T8392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.926022][ T8392] ? __pfx_____sys_sendmsg+0x10/0x10 [ 134.926050][ T8392] ? lock_acquire+0x1d1/0x380 [ 134.926067][ T8392] ? get_pid_task+0x2a/0x250 [ 134.926093][ T8392] ___sys_sendmsg+0x190/0x1e0 [ 134.926125][ T8392] ? __pfx____sys_sendmsg+0x10/0x10 [ 134.926148][ T8392] ? get_pid_task+0x106/0x250 [ 134.926182][ T8392] ? find_held_lock+0x2b/0x80 [ 134.926221][ T8392] __sys_sendmsg+0x160/0x210 [ 134.926237][ T8392] ? __pfx___sys_sendmsg+0x10/0x10 [ 134.926269][ T8392] do_syscall_64+0x123/0x790 [ 134.926292][ T8392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.926311][ T8392] RIP: 0033:0x7fc631b9e159 [ 134.926326][ T8392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.926342][ T8392] RSP: 002b:00007fc632ae3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.926359][ T8392] RAX: ffffffffffffffda RBX: 00007fc631e25fa0 RCX: 00007fc631b9e159 [ 134.926371][ T8392] RDX: 0000000020000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 134.926383][ T8392] RBP: 00007fc632ae3090 R08: 0000000000000000 R09: 0000000000000000 [ 134.926394][ T8392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.926404][ T8392] R13: 00007fc631e26038 R14: 00007fc631e25fa0 R15: 00007ffd4b4c7918 [ 134.926430][ T8392] [ 135.419429][ T8411] random: crng reseeded on system resumption [ 135.447208][ T8411] lo speed is unknown, defaulting to 1000 [ 135.493771][ T8411] FAULT_INJECTION: forcing a failure. [ 135.493771][ T8411] name failslab, interval 1, probability 0, space 0, times 0 [ 135.504416][ T8411] CPU: 2 UID: 0 PID: 8411 Comm: syz.1.777 Not tainted syzkaller #0 PREEMPT(full) [ 135.504481][ T8411] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 135.504495][ T8411] Call Trace: [ 135.504503][ T8411] [ 135.504511][ T8411] dump_stack_lvl+0x100/0x190 [ 135.504546][ T8411] should_fail_ex.cold+0x5/0xa [ 135.504575][ T8411] should_failslab+0xc2/0x120 [ 135.504600][ T8411] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 135.504622][ T8411] ? __alloc_skb+0x140/0x710 [ 135.504655][ T8411] __alloc_skb+0x140/0x710 [ 135.504683][ T8411] ? __alloc_skb+0x5b7/0x710 [ 135.504717][ T8411] ? __pfx___alloc_skb+0x10/0x10 [ 135.504752][ T8411] ? __lock_acquire+0x4c5/0x1ec0 [ 135.504785][ T8411] xfrm_send_policy_notify+0x5ad/0x1b30 [ 135.504818][ T8411] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 135.504843][ T8411] ? km_policy_notify+0x33/0x240 [ 135.504881][ T8411] ? __local_bh_enable_ip+0xa5/0x120 [ 135.504907][ T8411] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 135.504936][ T8411] km_policy_notify+0xb3/0x240 [ 135.504972][ T8411] xfrm_add_policy+0x452/0x6c0 [ 135.504999][ T8411] ? rcu_is_watching+0x13/0xc0 [ 135.505027][ T8411] ? __pfx_xfrm_add_policy+0x10/0x10 [ 135.505060][ T8411] ? __nla_parse+0x40/0x60 [ 135.505108][ T8411] ? __pfx_xfrm_add_policy+0x10/0x10 [ 135.505142][ T8411] xfrm_user_rcv_msg+0x483/0xd80 [ 135.505172][ T8411] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 135.505194][ T8411] ? look_up_lock_class+0x64/0x120 [ 135.505220][ T8411] ? register_lock_class+0x3f/0x7b0 [ 135.505277][ T8411] ? rcu_is_watching+0x13/0xc0 [ 135.505306][ T8411] ? trace_contention_end+0x126/0x160 [ 135.505333][ T8411] ? __mutex_lock+0x26c/0x1bd0 [ 135.505364][ T8411] netlink_rcv_skb+0x159/0x420 [ 135.505398][ T8411] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 135.505423][ T8411] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 135.505475][ T8411] xfrm_netlink_rcv+0x71/0x90 [ 135.505509][ T8411] netlink_unicast+0x585/0x850 [ 135.505547][ T8411] ? __pfx_netlink_unicast+0x10/0x10 [ 135.505591][ T8411] netlink_sendmsg+0x8b0/0xda0 [ 135.505630][ T8411] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.505664][ T8411] ? selinux_socket_sendmsg+0x198/0x2f0 [ 135.505704][ T8411] ____sys_sendmsg+0xa4d/0xbe0 [ 135.505729][ T8411] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.505765][ T8411] ? __pfx_____sys_sendmsg+0x10/0x10 [ 135.505807][ T8411] ___sys_sendmsg+0x190/0x1e0 [ 135.505838][ T8411] ? __pfx____sys_sendmsg+0x10/0x10 [ 135.505867][ T8411] ? futex_wait+0x11e/0x370 [ 135.505912][ T8411] ? find_held_lock+0x2b/0x80 [ 135.505961][ T8411] __sys_sendmsg+0x160/0x210 [ 135.505985][ T8411] ? __pfx___sys_sendmsg+0x10/0x10 [ 135.506024][ T8411] do_syscall_64+0x123/0x790 [ 135.506061][ T8411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.506091][ T8411] RIP: 0033:0x7f645579e159 [ 135.506111][ T8411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.506140][ T8411] RSP: 002b:00007f64565bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.506165][ T8411] RAX: ffffffffffffffda RBX: 00007f6455a25fa0 RCX: 00007f645579e159 [ 135.506180][ T8411] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 135.506194][ T8411] RBP: 00007f6455835024 R08: 0000000000000000 R09: 0000000000000000 [ 135.506207][ T8411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.506221][ T8411] R13: 00007f6455a26038 R14: 00007f6455a25fa0 R15: 00007fff231d3638 [ 135.506253][ T8411] [ 135.582562][ T8416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.778'. [ 135.612899][ T8416] bond14: entered promiscuous mode [ 135.925258][ T8422] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 136.048531][ T30] usb 8-1: USB disconnect, device number 18 [ 136.070435][ T30] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 136.077271][ T30] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 136.086981][ T30] keyspan 8-1:1.0: device disconnected [ 136.132502][ T8429] FAULT_INJECTION: forcing a failure. [ 136.132502][ T8429] name failslab, interval 1, probability 0, space 0, times 0 [ 136.132573][ T8429] CPU: 3 UID: 0 PID: 8429 Comm: syz.1.783 Not tainted syzkaller #0 PREEMPT(full) [ 136.132600][ T8429] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 136.132609][ T8429] Call Trace: [ 136.132613][ T8429] [ 136.132618][ T8429] dump_stack_lvl+0x100/0x190 [ 136.132641][ T8429] should_fail_ex.cold+0x5/0xa [ 136.132661][ T8429] should_failslab+0xc2/0x120 [ 136.132676][ T8429] __kmalloc_cache_noprof+0x91/0x6d0 [ 136.132693][ T8429] ? __tcf_proto_lookup_ops+0xcf/0x100 [ 136.132708][ T8429] ? fl_init+0x45/0x2c0 [ 136.132723][ T8429] fl_init+0x45/0x2c0 [ 136.132736][ T8429] ? __pfx_fl_classify+0x10/0x10 [ 136.132749][ T8429] tc_new_tfilter+0xff8/0x24c0 [ 136.132771][ T8429] ? avc_has_perm_noaudit+0x30/0x3b0 [ 136.132786][ T8429] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 136.132802][ T8429] ? __pfx_tc_new_tfilter+0x10/0x10 [ 136.132824][ T8429] ? __lock_acquire+0x4c5/0x1ec0 [ 136.132843][ T8429] ? lock_acquire+0x1d1/0x380 [ 136.132855][ T8429] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 136.132869][ T8429] ? find_held_lock+0x2b/0x80 [ 136.132885][ T8429] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 136.132899][ T8429] ? __pfx_tc_new_tfilter+0x10/0x10 [ 136.132917][ T8429] rtnetlink_rcv_msg+0x95e/0xe90 [ 136.132931][ T8429] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 136.132946][ T8429] ? __lock_acquire+0x4c5/0x1ec0 [ 136.132959][ T8429] ? __netlink_lookup+0xa9/0x900 [ 136.133036][ T8429] netlink_rcv_skb+0x159/0x420 [ 136.133055][ T8429] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 136.133071][ T8429] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 136.133094][ T8429] ? netlink_deliver_tap+0x1ae/0xcc0 [ 136.133115][ T8429] netlink_unicast+0x585/0x850 [ 136.133135][ T8429] ? __pfx_netlink_unicast+0x10/0x10 [ 136.133161][ T8429] netlink_sendmsg+0x8b0/0xda0 [ 136.133182][ T8429] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.133202][ T8429] ? selinux_socket_sendmsg+0x198/0x2f0 [ 136.133223][ T8429] ____sys_sendmsg+0xa4d/0xbe0 [ 136.133238][ T8429] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.133257][ T8429] ? __pfx_____sys_sendmsg+0x10/0x10 [ 136.133275][ T8429] ? lock_acquire+0x1d1/0x380 [ 136.133288][ T8429] ? get_pid_task+0x2a/0x250 [ 136.133305][ T8429] ___sys_sendmsg+0x190/0x1e0 [ 136.133321][ T8429] ? __pfx____sys_sendmsg+0x10/0x10 [ 136.133337][ T8429] ? get_pid_task+0x106/0x250 [ 136.133359][ T8429] ? find_held_lock+0x2b/0x80 [ 136.133388][ T8429] __sys_sendmsg+0x160/0x210 [ 136.133400][ T8429] ? __pfx___sys_sendmsg+0x10/0x10 [ 136.133420][ T8429] do_syscall_64+0x123/0x790 [ 136.133436][ T8429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.133449][ T8429] RIP: 0033:0x7f645579e159 [ 136.133460][ T8429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.133471][ T8429] RSP: 002b:00007f64565bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.133484][ T8429] RAX: ffffffffffffffda RBX: 00007f6455a25fa0 RCX: 00007f645579e159 [ 136.133492][ T8429] RDX: 0000000020000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 136.133499][ T8429] RBP: 00007f64565bc090 R08: 0000000000000000 R09: 0000000000000000 [ 136.133506][ T8429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.133513][ T8429] R13: 00007f6455a26038 R14: 00007f6455a25fa0 R15: 00007fff231d3638 [ 136.133529][ T8429] [ 136.320245][ T8439] random: crng reseeded on system resumption [ 136.348221][ T8439] lo speed is unknown, defaulting to 1000 [ 136.409117][ T8446] FAULT_INJECTION: forcing a failure. [ 136.409117][ T8446] name failslab, interval 1, probability 0, space 0, times 0 [ 136.409204][ T8446] CPU: 0 UID: 0 PID: 8446 Comm: syz.3.786 Not tainted syzkaller #0 PREEMPT(full) [ 136.409241][ T8446] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 136.409254][ T8446] Call Trace: [ 136.409260][ T8446] [ 136.409266][ T8446] dump_stack_lvl+0x100/0x190 [ 136.409297][ T8446] should_fail_ex.cold+0x5/0xa [ 136.409322][ T8446] should_failslab+0xc2/0x120 [ 136.409345][ T8446] __kmalloc_cache_noprof+0x91/0x6d0 [ 136.409373][ T8446] ? xfrm_policy_alloc+0x9f/0x420 [ 136.409395][ T8446] xfrm_policy_alloc+0x9f/0x420 [ 136.409413][ T8446] xfrm_policy_construct+0x30/0x6c0 [ 136.409452][ T8446] xfrm_add_policy+0x2a8/0x6c0 [ 136.409471][ T8446] ? __pfx___nla_validate_parse+0x10/0x10 [ 136.409496][ T8446] ? rcu_is_watching+0x13/0xc0 [ 136.409518][ T8446] ? __pfx_xfrm_add_policy+0x10/0x10 [ 136.409542][ T8446] ? __nla_parse+0x40/0x60 [ 136.409563][ T8446] ? __pfx_xfrm_add_policy+0x10/0x10 [ 136.409582][ T8446] xfrm_user_rcv_msg+0x483/0xd80 [ 136.409603][ T8446] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 136.409620][ T8446] ? kfree_skbmem+0x19f/0x210 [ 136.409661][ T8446] ? consume_skb+0xd6/0x110 [ 136.409707][ T8446] ? rcu_is_watching+0x13/0xc0 [ 136.409732][ T8446] ? trace_contention_end+0x126/0x160 [ 136.409754][ T8446] ? __mutex_lock+0x26c/0x1bd0 [ 136.409781][ T8446] netlink_rcv_skb+0x159/0x420 [ 136.409814][ T8446] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 136.409836][ T8446] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 136.409883][ T8446] xfrm_netlink_rcv+0x71/0x90 [ 136.409915][ T8446] netlink_unicast+0x585/0x850 [ 136.409948][ T8446] ? __pfx_netlink_unicast+0x10/0x10 [ 136.409987][ T8446] netlink_sendmsg+0x8b0/0xda0 [ 136.410023][ T8446] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.410055][ T8446] ? selinux_socket_sendmsg+0x198/0x2f0 [ 136.410090][ T8446] ____sys_sendmsg+0xa4d/0xbe0 [ 136.410114][ T8446] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.410148][ T8446] ? __pfx_____sys_sendmsg+0x10/0x10 [ 136.410186][ T8446] ___sys_sendmsg+0x190/0x1e0 [ 136.410215][ T8446] ? __pfx____sys_sendmsg+0x10/0x10 [ 136.410249][ T8446] ? futex_wait+0x11e/0x370 [ 136.410295][ T8446] ? find_held_lock+0x2b/0x80 [ 136.410345][ T8446] __sys_sendmsg+0x160/0x210 [ 136.410367][ T8446] ? __pfx___sys_sendmsg+0x10/0x10 [ 136.410407][ T8446] do_syscall_64+0x123/0x790 [ 136.410434][ T8446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.410456][ T8446] RIP: 0033:0x7fa7e359e159 [ 136.410474][ T8446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.410495][ T8446] RSP: 002b:00007fa7e4497028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.410515][ T8446] RAX: ffffffffffffffda RBX: 00007fa7e3826090 RCX: 00007fa7e359e159 [ 136.410530][ T8446] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 136.410574][ T8446] RBP: 00007fa7e3635024 R08: 0000000000000000 R09: 0000000000000000 [ 136.410588][ T8446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.410601][ T8446] R13: 00007fa7e3826128 R14: 00007fa7e3826090 R15: 00007ffdc1034518 [ 136.410629][ T8446] [ 136.523782][ T5733] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 136.525894][ T8455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.791'. [ 136.528914][ T5733] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 136.536442][ T5733] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 136.542418][ T5733] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 136.545951][ T5733] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 136.599025][ T8455] bond9: entered allmulticast mode [ 136.659675][ T42] kauditd_printk_skb: 61 callbacks suppressed [ 136.660056][ T42] audit: type=1400 audit(1788412284.360:1759): avc: denied { sys_module } for pid=8450 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 136.669801][ T5833] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 136.670238][ T42] audit: type=1800 audit(1788412284.370:1760): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16140 res=0 errno=0 [ 136.670410][ T42] audit: type=1400 audit(1788412284.380:1761): avc: denied { ioctl } for pid=8447 comm="syz.2.790" path="/dev/raw-gadget" dev="devtmpfs" ino=848 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 136.771955][ T42] audit: type=1400 audit(1788412284.480:1762): avc: denied { create } for pid=8461 comm="syz.3.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 136.774779][ T42] audit: type=1400 audit(1788412284.480:1763): avc: denied { write } for pid=8461 comm="syz.3.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 136.788884][ T42] audit: type=1400 audit(1788412284.490:1764): avc: denied { read write } for pid=8461 comm="syz.3.794" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 136.788936][ T42] audit: type=1400 audit(1788412284.490:1765): avc: denied { open } for pid=8461 comm="syz.3.794" path="/dev/raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 136.825187][ T8450] lo speed is unknown, defaulting to 1000 [ 136.840152][ T5833] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 136.846103][ T5833] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.846218][ T5833] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 136.846263][ T5833] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 136.846302][ T5833] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 136.846341][ T5833] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 136.846379][ T5833] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 136.846418][ T5833] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 136.846456][ T5833] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 136.846495][ T5833] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 136.846555][ T5833] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 136.846594][ T5833] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 136.846633][ T5833] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 136.846672][ T5833] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 136.846709][ T5833] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 136.846746][ T5833] usb 7-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 136.856081][ T5833] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.856096][ T5833] usb 7-1: Product: syz [ 136.856104][ T5833] usb 7-1: Manufacturer: syz [ 136.856111][ T5833] usb 7-1: SerialNumber: syz [ 136.869399][ T5832] usb 5-1: USB disconnect, device number 2 [ 136.880029][ T8448] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 136.880143][ T8448] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 136.880282][ T8448] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 136.880428][ T8448] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 136.880567][ T8448] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 136.880705][ T8448] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 136.880930][ T8448] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 136.881078][ T8448] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 136.881216][ T8448] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 136.881298][ T8448] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 136.881438][ T8448] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 136.886281][ T42] audit: type=1800 audit(1788412284.580:1766): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34837 res=0 errno=0 [ 136.886308][ T42] audit: type=1800 audit(1788412284.580:1767): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34860 res=0 errno=0 [ 136.887019][ T42] audit: type=1800 audit(1788412284.590:1768): pid=5735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=171434 res=0 errno=0 [ 136.937304][ T5833] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 136.937911][ T5833] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 7 [ 136.955647][ T5833] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 136.957144][ T5833] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 136.965283][ T12] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.966629][ T5833] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 137.050782][ T5875] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 137.061674][ T12] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.209567][ T5875] usb 8-1: Using ep0 maxpacket: 8 [ 137.210139][ T5875] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 137.211581][ T5875] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.211623][ T5875] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.211665][ T5875] usb 8-1: config 0 interface 0 has no altsetting 0 [ 137.211706][ T5875] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.215944][ T5875] usb 8-1: config 0 descriptor?? [ 137.252826][ T12] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.345377][ T12] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.363152][ T8450] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.363316][ T8450] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.363634][ T8450] bridge_slave_0: entered allmulticast mode [ 137.375036][ T8450] bridge_slave_0: entered promiscuous mode [ 137.382398][ T8450] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.383177][ T8450] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.383296][ T8450] bridge_slave_1: entered allmulticast mode [ 137.385648][ T8450] bridge_slave_1: entered promiscuous mode [ 137.423270][ T8450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.432470][ T8450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.464281][ T8450] team0: Port device team_slave_0 added [ 137.468349][ T8450] team0: Port device team_slave_1 added [ 137.496665][ T8450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.499227][ T8450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 137.510165][ T8450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.553368][ T8450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.559909][ T8450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 137.571590][ T8450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.626594][ T5875] hid_parser_main: 21 callbacks suppressed [ 137.629780][ T5875] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 137.632793][ T5875] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 137.636131][ T5875] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 137.640374][ T5875] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 137.643103][ T5875] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 137.646156][ T5875] mcp2221 0003:04D8:00DD.0006: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 137.672502][ T8450] hsr_slave_0: entered promiscuous mode [ 137.673270][ T8450] hsr_slave_1: entered promiscuous mode [ 137.674109][ T8450] debugfs: 'hsr0' already exists in 'hsr' [ 137.674128][ T8450] Cannot create hsr debugfs directory [ 137.718371][ T12] bridge_slave_1: left allmulticast mode [ 137.718440][ T12] bridge_slave_1: left promiscuous mode [ 137.720142][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.732577][ T12] bridge_slave_0: left allmulticast mode [ 137.732690][ T12] bridge_slave_0: left promiscuous mode [ 137.732921][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.984591][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.993315][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.999013][ T12] bond0 (unregistering): Released all slaves [ 138.008415][ T12] bond1 (unregistering): Released all slaves [ 138.030369][ T12] bond2 (unregistering): Released all slaves [ 138.047493][ T12] bond3 (unregistering): Released all slaves [ 138.059082][ T12] bond4 (unregistering): Released all slaves [ 138.070743][ T12] bond5 (unregistering): Released all slaves [ 138.086682][ T12] bond6 (unregistering): Released all slaves [ 138.115833][ T1035] usb 8-1: USB disconnect, device number 19 [ 138.231396][ T12] IPVS: stopping backup sync thread 6415 ... [ 138.564056][ T5442] 8021q: adding VLAN 0 to HW filter on device eth2 [ 138.587366][ T8450] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 138.598229][ T8450] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 138.621860][ T8450] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 138.623750][ T5733] Bluetooth: hci4: command tx timeout [ 138.632449][ T8450] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 138.670089][ T8450] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 138.684176][ T8450] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 138.692375][ T8450] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 138.707465][ T8450] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 138.738664][ T12] hsr_slave_0: left promiscuous mode [ 138.741851][ T12] hsr_slave_1: left promiscuous mode [ 138.742741][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.742776][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.744045][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.744060][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.775347][ T12] veth1_macvtap: left allmulticast mode [ 138.778981][ T12] veth1_macvtap: left promiscuous mode [ 138.781583][ T12] veth0_macvtap: left promiscuous mode [ 138.783502][ T12] veth1_vlan: left promiscuous mode [ 138.785761][ T12] veth0_vlan: left promiscuous mode [ 138.880357][ T8499] netlink: 'syz.3.795': attribute type 2 has an invalid length. [ 139.093144][ T12] team0 (unregistering): Port device team_slave_1 removed [ 139.102947][ T12] team0 (unregistering): Port device team_slave_0 removed [ 139.256621][ T5442] 8021q: adding VLAN 0 to HW filter on device eth3 [ 139.374079][ T8450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.427364][ T8450] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.437992][ T8302] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.438102][ T8302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.461841][ T8315] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.461918][ T8315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.566088][ T5442] 8021q: adding VLAN 0 to HW filter on device eth4 [ 139.570146][ T1525] usb 7-1: USB disconnect, device number 15 [ 139.619096][ T1525] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 139.631461][ T8511] xt_cgroup: path and classid specified [ 139.648154][ T1525] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 139.649635][ T1525] keyspan 7-1:1.0: device disconnected [ 139.723506][ T8521] FAULT_INJECTION: forcing a failure. [ 139.723506][ T8521] name failslab, interval 1, probability 0, space 0, times 0 [ 139.723602][ T8521] CPU: 3 UID: 0 PID: 8521 Comm: syz.2.797 Not tainted syzkaller #0 PREEMPT(full) [ 139.723639][ T8521] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 139.723652][ T8521] Call Trace: [ 139.723659][ T8521] [ 139.723667][ T8521] dump_stack_lvl+0x100/0x190 [ 139.723698][ T8521] should_fail_ex.cold+0x5/0xa [ 139.723720][ T8521] should_failslab+0xc2/0x120 [ 139.723738][ T8521] __kmalloc_cache_noprof+0x91/0x6d0 [ 139.723758][ T8521] ? __tcf_proto_lookup_ops+0xcf/0x100 [ 139.723778][ T8521] ? fl_init+0x45/0x2c0 [ 139.723800][ T8521] fl_init+0x45/0x2c0 [ 139.723817][ T8521] ? __pfx_fl_classify+0x10/0x10 [ 139.723836][ T8521] tc_new_tfilter+0xff8/0x24c0 [ 139.723868][ T8521] ? avc_has_perm_noaudit+0x30/0x3b0 [ 139.723889][ T8521] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 139.723912][ T8521] ? __pfx_tc_new_tfilter+0x10/0x10 [ 139.723943][ T8521] ? __lock_acquire+0x4c5/0x1ec0 [ 139.723976][ T8521] ? lock_acquire+0x1d1/0x380 [ 139.723992][ T8521] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 139.724015][ T8521] ? find_held_lock+0x2b/0x80 [ 139.724039][ T8521] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 139.724059][ T8521] ? __pfx_tc_new_tfilter+0x10/0x10 [ 139.724084][ T8521] rtnetlink_rcv_msg+0x95e/0xe90 [ 139.724107][ T8521] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 139.724133][ T8521] ? ref_tracker_free+0x37e/0x6c0 [ 139.724158][ T8521] netlink_rcv_skb+0x159/0x420 [ 139.724184][ T8521] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 139.724205][ T8521] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 139.724240][ T8521] ? netlink_deliver_tap+0x1ae/0xcc0 [ 139.724271][ T8521] netlink_unicast+0x585/0x850 [ 139.724308][ T8521] ? __pfx_netlink_unicast+0x10/0x10 [ 139.724341][ T8521] netlink_sendmsg+0x8b0/0xda0 [ 139.724370][ T8521] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.724397][ T8521] ? selinux_socket_sendmsg+0x198/0x2f0 [ 139.724429][ T8521] ____sys_sendmsg+0xa4d/0xbe0 [ 139.724451][ T8521] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.724478][ T8521] ? __pfx_____sys_sendmsg+0x10/0x10 [ 139.724503][ T8521] ? lock_acquire+0x1d1/0x380 [ 139.724519][ T8521] ? get_pid_task+0x2a/0x250 [ 139.724542][ T8521] ___sys_sendmsg+0x190/0x1e0 [ 139.724565][ T8521] ? __pfx____sys_sendmsg+0x10/0x10 [ 139.724588][ T8521] ? get_pid_task+0x106/0x250 [ 139.724621][ T8521] ? find_held_lock+0x2b/0x80 [ 139.724661][ T8521] __sys_sendmsg+0x160/0x210 [ 139.724678][ T8521] ? __pfx___sys_sendmsg+0x10/0x10 [ 139.724708][ T8521] do_syscall_64+0x123/0x790 [ 139.724730][ T8521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.724749][ T8521] RIP: 0033:0x7fc631b9e159 [ 139.724764][ T8521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.724781][ T8521] RSP: 002b:00007fc632ae3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.724798][ T8521] RAX: ffffffffffffffda RBX: 00007fc631e25fa0 RCX: 00007fc631b9e159 [ 139.724809][ T8521] RDX: 0000000020000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 139.724819][ T8521] RBP: 00007fc632ae3090 R08: 0000000000000000 R09: 0000000000000000 [ 139.724830][ T8521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.724839][ T8521] R13: 00007fc631e26038 R14: 00007fc631e25fa0 R15: 00007ffd4b4c7918 [ 139.724861][ T8521] [ 139.855317][ T8528] random: crng reseeded on system resumption [ 139.889182][ T8528] lo speed is unknown, defaulting to 1000 [ 140.077476][ T5442] 8021q: adding VLAN 0 to HW filter on device eth5 [ 140.085590][ T8450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.407207][ T8558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.804'. [ 140.483761][ T8450] veth0_vlan: entered promiscuous mode [ 140.495922][ T8450] veth1_vlan: entered promiscuous mode [ 140.511599][ T8450] veth0_macvtap: entered promiscuous mode [ 140.521053][ T8450] veth1_macvtap: entered promiscuous mode [ 140.530809][ T8450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.538457][ T8450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.608929][ T8315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.609942][ T8315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.614972][ T8501] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.615847][ T8501] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.615975][ T8501] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.615995][ T8501] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.675366][ T8302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.675428][ T8302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.699742][ T5733] Bluetooth: hci4: command tx timeout [ 140.925467][ T8570] FAULT_INJECTION: forcing a failure. [ 140.925467][ T8570] name failslab, interval 1, probability 0, space 0, times 0 [ 140.925606][ T8570] CPU: 0 UID: 0 PID: 8570 Comm: syz.4.806 Not tainted syzkaller #0 PREEMPT(full) [ 140.925638][ T8570] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 140.925649][ T8570] Call Trace: [ 140.925658][ T8570] [ 140.925665][ T8570] dump_stack_lvl+0x100/0x190 [ 140.925717][ T8570] should_fail_ex.cold+0x5/0xa [ 140.925738][ T8570] should_failslab+0xc2/0x120 [ 140.925767][ T8570] __kvmalloc_node_noprof+0x113/0x9b0 [ 140.925785][ T8570] ? bucket_table_alloc.isra.0+0x88/0x460 [ 140.925810][ T8570] bucket_table_alloc.isra.0+0x88/0x460 [ 140.925832][ T8570] __rhashtable_init_noprof+0x43a/0x890 [ 140.925855][ T8570] fl_init+0x235/0x2c0 [ 140.925877][ T8570] ? __pfx_fl_classify+0x10/0x10 [ 140.925894][ T8570] tc_new_tfilter+0xff8/0x24c0 [ 140.925922][ T8570] ? avc_has_perm_noaudit+0x30/0x3b0 [ 140.925940][ T8570] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 140.925960][ T8570] ? __pfx_tc_new_tfilter+0x10/0x10 [ 140.925988][ T8570] ? __lock_acquire+0x4c5/0x1ec0 [ 140.926017][ T8570] ? lock_acquire+0x1d1/0x380 [ 140.926032][ T8570] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 140.926049][ T8570] ? find_held_lock+0x2b/0x80 [ 140.926069][ T8570] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 140.926086][ T8570] ? __pfx_tc_new_tfilter+0x10/0x10 [ 140.926108][ T8570] rtnetlink_rcv_msg+0x95e/0xe90 [ 140.926125][ T8570] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 140.926146][ T8570] ? ref_tracker_free+0x37e/0x6c0 [ 140.926166][ T8570] netlink_rcv_skb+0x159/0x420 [ 140.926188][ T8570] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 140.926204][ T8570] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 140.926234][ T8570] ? netlink_deliver_tap+0x1ae/0xcc0 [ 140.926259][ T8570] netlink_unicast+0x585/0x850 [ 140.926284][ T8570] ? __pfx_netlink_unicast+0x10/0x10 [ 140.926312][ T8570] netlink_sendmsg+0x8b0/0xda0 [ 140.926337][ T8570] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.926361][ T8570] ? selinux_socket_sendmsg+0x198/0x2f0 [ 140.926387][ T8570] ____sys_sendmsg+0xa4d/0xbe0 [ 140.926404][ T8570] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.926428][ T8570] ? __pfx_____sys_sendmsg+0x10/0x10 [ 140.926451][ T8570] ? lock_acquire+0x1d1/0x380 [ 140.926466][ T8570] ? get_pid_task+0x2a/0x250 [ 140.926489][ T8570] ___sys_sendmsg+0x190/0x1e0 [ 140.926510][ T8570] ? __pfx____sys_sendmsg+0x10/0x10 [ 140.926559][ T8570] ? get_pid_task+0x106/0x250 [ 140.926586][ T8570] ? find_held_lock+0x2b/0x80 [ 140.926619][ T8570] __sys_sendmsg+0x160/0x210 [ 140.926634][ T8570] ? __pfx___sys_sendmsg+0x10/0x10 [ 140.926660][ T8570] do_syscall_64+0x123/0x790 [ 140.926686][ T8570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.926702][ T8570] RIP: 0033:0x7f398319e159 [ 140.926717][ T8570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.926731][ T8570] RSP: 002b:00007f3984131028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.926747][ T8570] RAX: ffffffffffffffda RBX: 00007f3983425fa0 RCX: 00007f398319e159 [ 140.926764][ T8570] RDX: 0000000020000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 140.926774][ T8570] RBP: 00007f3984131090 R08: 0000000000000000 R09: 0000000000000000 [ 140.926782][ T8570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.926791][ T8570] R13: 00007f3983426038 R14: 00007f3983425fa0 R15: 00007ffc0dc0daf8 [ 140.926813][ T8570] [ 141.082599][ T8572] netlink: 28 bytes leftover after parsing attributes in process `syz.4.807'. [ 141.082664][ T8572] netlink: 32 bytes leftover after parsing attributes in process `syz.4.807'. [ 141.083188][ T8572] netlink: 28 bytes leftover after parsing attributes in process `syz.4.807'. [ 141.083281][ T8572] netlink: 32 bytes leftover after parsing attributes in process `syz.4.807'. [ 141.090204][ T8573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.807'. [ 141.090260][ T8573] bridge_slave_1: left allmulticast mode [ 141.090277][ T8573] bridge_slave_1: left promiscuous mode [ 141.090393][ T8573] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.109993][ T8573] bridge_slave_0: left allmulticast mode [ 141.110044][ T8573] bridge_slave_0: left promiscuous mode [ 141.110181][ T8573] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.277269][ T8579] ubi0: attaching mtd0 [ 141.279292][ T8579] ubi0 error: ubi_attach_mtd_dev: bad VID header (41) or data offsets (105) [ 141.281655][ T8583] ubi0: attaching mtd0 [ 141.281666][ T8583] ubi0 error: ubi_attach_mtd_dev: bad VID header (41) or data offsets (105) [ 141.307245][ T8585] random: crng reseeded on system resumption [ 141.352596][ T8585] lo speed is unknown, defaulting to 1000 [ 141.382745][ T8587] FAULT_INJECTION: forcing a failure. [ 141.382745][ T8587] name failslab, interval 1, probability 0, space 0, times 0 [ 141.387673][ T8587] CPU: 0 UID: 0 PID: 8587 Comm: syz.3.809 Not tainted syzkaller #0 PREEMPT(full) [ 141.387702][ T8587] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 141.387722][ T8587] Call Trace: [ 141.387727][ T8587] [ 141.387732][ T8587] dump_stack_lvl+0x100/0x190 [ 141.387754][ T8587] should_fail_ex.cold+0x5/0xa [ 141.387770][ T8587] should_failslab+0xc2/0x120 [ 141.387785][ T8587] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 141.387797][ T8587] ? sock_alloc_inode+0x26/0x2c0 [ 141.387810][ T8587] ? __pfx_sock_alloc_inode+0x10/0x10 [ 141.387823][ T8587] sock_alloc_inode+0x26/0x2c0 [ 141.387835][ T8587] ? __pfx_sock_alloc_inode+0x10/0x10 [ 141.387846][ T8587] alloc_inode+0x68/0x250 [ 141.387863][ T8587] sock_alloc+0x44/0x280 [ 141.387873][ T8587] ? security_socket_create+0x7f/0x250 [ 141.387888][ T8587] __sock_create+0xc2/0x860 [ 141.387904][ T8587] __sys_socket+0x14d/0x260 [ 141.387918][ T8587] ? __pfx___sys_socket+0x10/0x10 [ 141.387936][ T8587] __x64_sys_socket+0x72/0xb0 [ 141.387949][ T8587] ? lockdep_hardirqs_on+0x7d/0x110 [ 141.387961][ T8587] do_syscall_64+0x123/0x790 [ 141.387975][ T8587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.387986][ T8587] RIP: 0033:0x7fa7e359e159 [ 141.387995][ T8587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.388005][ T8587] RSP: 002b:00007fa7e4497028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 141.388017][ T8587] RAX: ffffffffffffffda RBX: 00007fa7e3826090 RCX: 00007fa7e359e159 [ 141.388025][ T8587] RDX: 0000000000000006 RSI: 0000000000000003 RDI: 0000000000000010 [ 141.388032][ T8587] RBP: 00007fa7e3635024 R08: 0000000000000000 R09: 0000000000000000 [ 141.388039][ T8587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.388046][ T8587] R13: 00007fa7e3826128 R14: 00007fa7e3826090 R15: 00007ffdc1034518 [ 141.388060][ T8587] [ 141.469654][ T8587] socket: no more sockets [ 141.602568][ T8598] FAULT_INJECTION: forcing a failure. [ 141.602568][ T8598] name failslab, interval 1, probability 0, space 0, times 0 [ 141.602651][ T8598] CPU: 3 UID: 0 PID: 8598 Comm: syz.2.813 Not tainted syzkaller #0 PREEMPT(full) [ 141.602685][ T8598] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 141.602699][ T8598] Call Trace: [ 141.602706][ T8598] [ 141.602713][ T8598] dump_stack_lvl+0x100/0x190 [ 141.602738][ T8598] should_fail_ex.cold+0x5/0xa [ 141.602756][ T8598] should_failslab+0xc2/0x120 [ 141.602770][ T8598] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 141.602781][ T8598] ? register_lock_class+0x3f/0x7b0 [ 141.602800][ T8598] ? __d_alloc+0x35/0xa50 [ 141.602817][ T8598] __d_alloc+0x35/0xa50 [ 141.602830][ T8598] ? __lock_acquire+0x4c5/0x1ec0 [ 141.602842][ T8598] d_alloc_parallel+0x105/0x14c0 [ 141.602854][ T8598] ? lock_acquire+0x1d1/0x380 [ 141.602866][ T8598] ? lock_acquire+0x1d1/0x380 [ 141.602876][ T8598] ? lookup_slow+0x42/0x70 [ 141.602892][ T8598] ? __pfx_d_alloc_parallel+0x10/0x10 [ 141.602902][ T8598] ? __pfx___might_resched+0x10/0x10 [ 141.602914][ T8598] ? find_held_lock+0x2b/0x80 [ 141.602931][ T8598] ? down_read+0x13b/0x4c0 [ 141.602951][ T8598] ? __pfx_down_read+0x10/0x10 [ 141.602970][ T8598] __lookup_slow+0x98/0x320 [ 141.602991][ T8598] lookup_slow+0x50/0x70 [ 141.603010][ T8598] link_path_walk+0x1377/0x1cc0 [ 141.603032][ T8598] path_openat+0x1ac/0x2440 [ 141.603053][ T8598] ? __pfx_path_openat+0x10/0x10 [ 141.603073][ T8598] do_file_open+0x20e/0x430 [ 141.603091][ T8598] ? __pfx_do_file_open+0x10/0x10 [ 141.603117][ T8598] ? __pfx_kfree_link+0x10/0x10 [ 141.603133][ T8598] ? _raw_spin_unlock+0x28/0x50 [ 141.603156][ T8598] ? alloc_fd+0x471/0x7a0 [ 141.603183][ T8598] do_sys_openat2+0x10f/0x1e0 [ 141.603204][ T8598] ? __pfx_do_sys_openat2+0x10/0x10 [ 141.603225][ T8598] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 141.603244][ T8598] ? __fget_files+0x21f/0x3d0 [ 141.603265][ T8598] __x64_sys_openat+0x12d/0x210 [ 141.603285][ T8598] ? __pfx___x64_sys_openat+0x10/0x10 [ 141.603305][ T8598] ? ksys_write+0x1ac/0x250 [ 141.603327][ T8598] do_syscall_64+0x123/0x790 [ 141.603349][ T8598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.603367][ T8598] RIP: 0033:0x7fc631b9e159 [ 141.603379][ T8598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.603394][ T8598] RSP: 002b:00007fc632ae3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 141.603411][ T8598] RAX: ffffffffffffffda RBX: 00007fc631e25fa0 RCX: 00007fc631b9e159 [ 141.603422][ T8598] RDX: 0000000000000002 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 141.603433][ T8598] RBP: 00007fc632ae3090 R08: 0000000000000000 R09: 0000000000000000 [ 141.603442][ T8598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 141.603451][ T8598] R13: 00007fc631e26038 R14: 00007fc631e25fa0 R15: 00007ffd4b4c7918 [ 141.603488][ T8598] [ 141.631088][ T8594] FAULT_INJECTION: forcing a failure. [ 141.631088][ T8594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.631117][ T8594] CPU: 3 UID: 0 PID: 8594 Comm: syz.3.812 Not tainted syzkaller #0 PREEMPT(full) [ 141.631159][ T8594] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 141.631172][ T8594] Call Trace: [ 141.631178][ T8594] [ 141.631185][ T8594] dump_stack_lvl+0x100/0x190 [ 141.631215][ T8594] should_fail_ex.cold+0x5/0xa [ 141.631238][ T8594] _copy_to_iter+0x1f3/0x1720 [ 141.631265][ T8594] ? __pfx___skb_try_recv_datagram+0x10/0x10 [ 141.631290][ T8594] ? find_held_lock+0x2b/0x80 [ 141.631318][ T8594] ? __pfx__copy_to_iter+0x10/0x10 [ 141.631344][ T8594] ? __skb_recv_datagram+0x1b2/0x220 [ 141.631369][ T8594] simple_copy_to_iter+0x46/0x90 [ 141.631391][ T8594] __skb_datagram_iter+0x129/0x900 [ 141.631410][ T8594] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 141.631435][ T8594] ? skb_recv_datagram+0x88/0xc0 [ 141.631461][ T8594] skb_copy_datagram_iter+0xa1/0x250 [ 141.631479][ T8594] netlink_recvmsg+0x27e/0xa90 [ 141.631497][ T8594] ? __pfx_netlink_recvmsg+0x10/0x10 [ 141.631512][ T8594] ? __fget_files+0x215/0x3d0 [ 141.631529][ T8594] ? __pfx_netlink_recvmsg+0x10/0x10 [ 141.631545][ T8594] sock_recvmsg+0x1d5/0x220 [ 141.631559][ T8594] __sys_recvfrom+0x1f2/0x2f0 [ 141.631576][ T8594] ? __pfx___sys_recvfrom+0x10/0x10 [ 141.631595][ T8594] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 141.631614][ T8594] ? xfd_validate_state+0x129/0x190 [ 141.631629][ T8594] __x64_sys_recvfrom+0xe0/0x1c0 [ 141.631645][ T8594] ? do_syscall_64+0xae/0x790 [ 141.631659][ T8594] ? lockdep_hardirqs_on+0x7d/0x110 [ 141.631674][ T8594] do_syscall_64+0x123/0x790 [ 141.631689][ T8594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.631705][ T8594] RIP: 0033:0x7fa7e355e98e [ 141.631714][ T8594] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 141.631725][ T8594] RSP: 002b:00007fa7e44b6ee8 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 141.631737][ T8594] RAX: ffffffffffffffda RBX: 00007fa7e44b86c0 RCX: 00007fa7e355e98e [ 141.631744][ T8594] RDX: 0000000000001000 RSI: 00007fa7e44b7000 RDI: 000000000000003a [ 141.631750][ T8594] RBP: 000000000000003a R08: 0000000000000000 R09: 0000000000000000 [ 141.631757][ T8594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000080 [ 141.631763][ T8594] R13: 00007fa7e44b6fb0 R14: 000000000000000c R15: 0000000000000000 [ 141.631777][ T8594] [ 141.753930][ T42] kauditd_printk_skb: 251 callbacks suppressed [ 141.753951][ T42] audit: type=1400 audit(1788412289.460:2018): avc: denied { bind } for pid=8605 comm="syz.2.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 141.754928][ T8606] netlink: 'syz.2.814': attribute type 4 has an invalid length. [ 141.758718][ T42] audit: type=1400 audit(1788412289.460:2019): avc: denied { name_bind } for pid=8605 comm="syz.2.814" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 141.774393][ T8606] netlink: 16 bytes leftover after parsing attributes in process `syz.2.814'. [ 141.774419][ T8606] netlink: 16 bytes leftover after parsing attributes in process `syz.2.814'. [ 141.776644][ T42] audit: type=1400 audit(1788412289.480:2020): avc: denied { write } for pid=8605 comm="syz.2.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 141.776664][ T8606] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=46 sclass=netlink_xfrm_socket pid=8606 comm=syz.2.814 [ 141.895196][ T42] audit: type=1800 audit(1788412289.600:2021): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=179787 res=0 errno=0 [ 142.325405][ T42] audit: type=1800 audit(1788412290.030:2022): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 142.365087][ T8631] FAULT_INJECTION: forcing a failure. [ 142.365087][ T8631] name failslab, interval 1, probability 0, space 0, times 0 [ 142.365188][ T8631] CPU: 1 UID: 0 PID: 8631 Comm: syz.4.815 Not tainted syzkaller #0 PREEMPT(full) [ 142.365222][ T8631] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 142.365235][ T8631] Call Trace: [ 142.365242][ T8631] [ 142.365249][ T8631] dump_stack_lvl+0x100/0x190 [ 142.365283][ T8631] should_fail_ex.cold+0x5/0xa [ 142.365307][ T8631] ? __pfx_fl_change+0x10/0x10 [ 142.365329][ T8631] should_failslab+0xc2/0x120 [ 142.365351][ T8631] ? __pfx_fl_change+0x10/0x10 [ 142.365372][ T8631] __kmalloc_cache_noprof+0x91/0x6d0 [ 142.365416][ T8631] ? fl_change+0x1b7/0x7cd0 [ 142.365440][ T8631] ? __pfx_fl_change+0x10/0x10 [ 142.365461][ T8631] fl_change+0x1b7/0x7cd0 [ 142.365488][ T8631] ? __lock_acquire+0x4c5/0x1ec0 [ 142.365508][ T8631] ? __mutex_lock+0x26c/0x1bd0 [ 142.365530][ T8631] ? tcf_chain0_head_change.isra.0+0x52/0x130 [ 142.365553][ T8631] ? find_held_lock+0x2b/0x80 [ 142.365577][ T8631] ? tcf_chain0_head_change.isra.0+0xec/0x130 [ 142.365602][ T8631] ? __pfx_fl_change+0x10/0x10 [ 142.365621][ T8631] ? fl_get+0x99/0x3d0 [ 142.365639][ T8631] ? find_held_lock+0x2b/0x80 [ 142.365662][ T8631] ? fl_get+0x20a/0x3d0 [ 142.365679][ T8631] ? fl_get+0x20a/0x3d0 [ 142.365704][ T8631] ? fl_get+0x214/0x3d0 [ 142.365722][ T8631] ? __pfx_fl_get+0x10/0x10 [ 142.365744][ T8631] ? __pfx_fl_change+0x10/0x10 [ 142.365764][ T8631] tc_new_tfilter+0x9c3/0x24c0 [ 142.365800][ T8631] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 142.365826][ T8631] ? __pfx_tc_new_tfilter+0x10/0x10 [ 142.365857][ T8631] ? __lock_acquire+0x4c5/0x1ec0 [ 142.365886][ T8631] ? lock_acquire+0x1d1/0x380 [ 142.365903][ T8631] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 142.365925][ T8631] ? find_held_lock+0x2b/0x80 [ 142.365949][ T8631] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 142.365975][ T8631] ? __pfx_tc_new_tfilter+0x10/0x10 [ 142.366001][ T8631] rtnetlink_rcv_msg+0x95e/0xe90 [ 142.366022][ T8631] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 142.366048][ T8631] ? ref_tracker_free+0x37e/0x6c0 [ 142.366069][ T8631] netlink_rcv_skb+0x159/0x420 [ 142.366094][ T8631] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 142.366114][ T8631] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 142.366143][ T8631] ? netlink_deliver_tap+0x1ae/0xcc0 [ 142.366170][ T8631] netlink_unicast+0x585/0x850 [ 142.366197][ T8631] ? __pfx_netlink_unicast+0x10/0x10 [ 142.366226][ T8631] netlink_sendmsg+0x8b0/0xda0 [ 142.366255][ T8631] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.366277][ T8631] ? selinux_socket_sendmsg+0x198/0x2f0 [ 142.366297][ T8631] ____sys_sendmsg+0xa4d/0xbe0 [ 142.366310][ T8631] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.366327][ T8631] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.366344][ T8631] ? lock_acquire+0x1d1/0x380 [ 142.366354][ T8631] ? get_pid_task+0x2a/0x250 [ 142.366372][ T8631] ___sys_sendmsg+0x190/0x1e0 [ 142.366390][ T8631] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.366410][ T8631] ? get_pid_task+0x106/0x250 [ 142.366440][ T8631] ? find_held_lock+0x2b/0x80 [ 142.366479][ T8631] __sys_sendmsg+0x160/0x210 [ 142.366498][ T8631] ? __pfx___sys_sendmsg+0x10/0x10 [ 142.366568][ T8631] do_syscall_64+0x123/0x790 [ 142.366592][ T8631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.366608][ T8631] RIP: 0033:0x7f398319e159 [ 142.366622][ T8631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.366639][ T8631] RSP: 002b:00007f3984131028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.366657][ T8631] RAX: ffffffffffffffda RBX: 00007f3983425fa0 RCX: 00007f398319e159 [ 142.366668][ T8631] RDX: 0000000020000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 142.366681][ T8631] RBP: 00007f3984131090 R08: 0000000000000000 R09: 0000000000000000 [ 142.366690][ T8631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 142.366699][ T8631] R13: 00007f3983426038 R14: 00007f3983425fa0 R15: 00007ffc0dc0daf8 [ 142.366721][ T8631] [ 142.489378][ T42] audit: type=1800 audit(1788412290.190:2023): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 142.501754][ T42] audit: type=1400 audit(1788412290.200:2024): avc: denied { name_bind } for pid=8635 comm="syz.4.816" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 142.501799][ T42] audit: type=1400 audit(1788412290.200:2025): avc: denied { node_bind } for pid=8635 comm="syz.4.816" saddr=fe80::aa src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 142.505509][ T8636] netlink: 'syz.4.816': attribute type 1 has an invalid length. [ 142.505520][ T8636] netlink: 84 bytes leftover after parsing attributes in process `syz.4.816'. [ 142.505529][ T8636] netlink: 'syz.4.816': attribute type 2 has an invalid length. [ 142.505535][ T8636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.816'. [ 142.536373][ T42] audit: type=1800 audit(1788412290.240:2026): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 142.540020][ T42] audit: type=1400 audit(1788412290.250:2027): avc: denied { map_create } for pid=8637 comm="syz.4.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 142.627158][ T8647] random: crng reseeded on system resumption [ 142.688425][ T8649] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.697316][ T8649] bridge_slave_0 (unregistering): left allmulticast mode [ 142.697385][ T8649] bridge_slave_0 (unregistering): left promiscuous mode [ 142.697460][ T8649] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.731593][ T8654] FAULT_INJECTION: forcing a failure. [ 142.731593][ T8654] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.731667][ T8654] CPU: 3 UID: 0 PID: 8654 Comm: syz.2.820 Not tainted syzkaller #0 PREEMPT(full) [ 142.731687][ T8654] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 142.731697][ T8654] Call Trace: [ 142.731703][ T8654] [ 142.731710][ T8654] dump_stack_lvl+0x100/0x190 [ 142.731738][ T8654] should_fail_ex.cold+0x5/0xa [ 142.731762][ T8654] _copy_from_user+0x2e/0xd0 [ 142.731789][ T8654] copy_msghdr_from_user+0x9f/0x4c0 [ 142.731813][ T8654] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 142.731846][ T8654] ___sys_sendmsg+0x106/0x1e0 [ 142.731867][ T8654] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.731907][ T8654] ? futex_wait+0x11e/0x370 [ 142.731942][ T8654] ? find_held_lock+0x2b/0x80 [ 142.731982][ T8654] __sys_sendmsg+0x160/0x210 [ 142.731998][ T8654] ? __pfx___sys_sendmsg+0x10/0x10 [ 142.732023][ T8654] do_syscall_64+0x123/0x790 [ 142.732043][ T8654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.732069][ T8654] RIP: 0033:0x7fc631b9e159 [ 142.732086][ T8654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.732103][ T8654] RSP: 002b:00007fc632ac2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.732136][ T8654] RAX: ffffffffffffffda RBX: 00007fc631e26090 RCX: 00007fc631b9e159 [ 142.732149][ T8654] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 142.732164][ T8654] RBP: 00007fc631c35024 R08: 0000000000000000 R09: 0000000000000000 [ 142.732178][ T8654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.732188][ T8654] R13: 00007fc631e26128 R14: 00007fc631e26090 R15: 00007ffd4b4c7918 [ 142.732208][ T8654] [ 142.748634][ T8647] lo speed is unknown, defaulting to 1000 [ 142.781035][ T5733] Bluetooth: hci4: command tx timeout [ 142.908454][ T8666] FAULT_INJECTION: forcing a failure. [ 142.908454][ T8666] name failslab, interval 1, probability 0, space 0, times 0 [ 142.908526][ T8666] CPU: 0 UID: 0 PID: 8666 Comm: syz.4.822 Not tainted syzkaller #0 PREEMPT(full) [ 142.908551][ T8666] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 142.908559][ T8666] Call Trace: [ 142.908563][ T8666] [ 142.908568][ T8666] dump_stack_lvl+0x100/0x190 [ 142.908588][ T8666] should_fail_ex.cold+0x5/0xa [ 142.908604][ T8666] should_failslab+0xc2/0x120 [ 142.908618][ T8666] __kmalloc_cache_noprof+0x91/0x6d0 [ 142.908634][ T8666] ? kasan_quarantine_put+0x104/0x240 [ 142.908645][ T8666] ? inode_doinit_use_xattr+0x54/0x330 [ 142.908664][ T8666] inode_doinit_use_xattr+0x54/0x330 [ 142.908681][ T8666] inode_doinit_with_dentry+0x10fc/0x1340 [ 142.908701][ T8666] ? __pfx_inode_doinit_with_dentry+0x10/0x10 [ 142.908719][ T8666] ? wake_up_q+0xae/0x130 [ 142.908735][ T8666] selinux_d_instantiate+0x26/0x40 [ 142.908751][ T8666] security_d_instantiate+0x14c/0x1b0 [ 142.908766][ T8666] d_splice_alias_ops+0xd7/0x15b0 [ 142.908778][ T8666] ? __up_read+0x333/0x980 [ 142.908792][ T8666] ? __pfx_d_splice_alias_ops+0x10/0x10 [ 142.908803][ T8666] ? kernfs_iop_lookup+0x234/0x2d0 [ 142.908817][ T8666] ? kernfs_iop_lookup+0x234/0x2d0 [ 142.908835][ T8666] kernfs_iop_lookup+0x23f/0x2d0 [ 142.908851][ T8666] __lookup_slow+0x155/0x320 [ 142.908868][ T8666] lookup_slow+0x50/0x70 [ 142.908884][ T8666] link_path_walk+0x1377/0x1cc0 [ 142.908899][ T8666] path_openat+0x1ac/0x2440 [ 142.908914][ T8666] ? __pfx_path_openat+0x10/0x10 [ 142.908931][ T8666] do_file_open+0x20e/0x430 [ 142.908945][ T8666] ? __pfx_do_file_open+0x10/0x10 [ 142.908976][ T8666] ? __pfx_kfree_link+0x10/0x10 [ 142.908991][ T8666] ? _raw_spin_unlock+0x28/0x50 [ 142.909009][ T8666] ? alloc_fd+0x471/0x7a0 [ 142.909026][ T8666] do_sys_openat2+0x10f/0x1e0 [ 142.909041][ T8666] ? __pfx_do_sys_openat2+0x10/0x10 [ 142.909055][ T8666] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 142.909069][ T8666] ? __fget_files+0x21f/0x3d0 [ 142.909084][ T8666] __x64_sys_openat+0x12d/0x210 [ 142.909099][ T8666] ? __pfx___x64_sys_openat+0x10/0x10 [ 142.909113][ T8666] ? ksys_write+0x1ac/0x250 [ 142.909128][ T8666] do_syscall_64+0x123/0x790 [ 142.909142][ T8666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.909153][ T8666] RIP: 0033:0x7f398319e159 [ 142.909163][ T8666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.909174][ T8666] RSP: 002b:00007f3984131028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 142.909185][ T8666] RAX: ffffffffffffffda RBX: 00007f3983425fa0 RCX: 00007f398319e159 [ 142.909192][ T8666] RDX: 0000000000000002 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 142.909199][ T8666] RBP: 00007f3984131090 R08: 0000000000000000 R09: 0000000000000000 [ 142.909205][ T8666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 142.909212][ T8666] R13: 00007f3983426038 R14: 00007f3983425fa0 R15: 00007ffc0dc0daf8 [ 142.909226][ T8666] [ 143.111807][ T8679] FAULT_INJECTION: forcing a failure. [ 143.111807][ T8679] name failslab, interval 1, probability 0, space 0, times 0 [ 143.111969][ T8679] CPU: 3 UID: 0 PID: 8679 Comm: syz.4.824 Not tainted syzkaller #0 PREEMPT(full) [ 143.111995][ T8679] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 143.112008][ T8679] Call Trace: [ 143.112015][ T8679] [ 143.112023][ T8679] dump_stack_lvl+0x100/0x190 [ 143.112060][ T8679] should_fail_ex.cold+0x5/0xa [ 143.112088][ T8679] ? __pfx_fl_change+0x10/0x10 [ 143.112113][ T8679] should_failslab+0xc2/0x120 [ 143.112136][ T8679] ? __pfx_fl_change+0x10/0x10 [ 143.112161][ T8679] __kmalloc_cache_noprof+0x91/0x6d0 [ 143.112197][ T8679] ? fl_change+0x1b7/0x7cd0 [ 143.112226][ T8679] ? __pfx_fl_change+0x10/0x10 [ 143.112249][ T8679] fl_change+0x1b7/0x7cd0 [ 143.112289][ T8679] ? __lock_acquire+0x4c5/0x1ec0 [ 143.112312][ T8679] ? __mutex_lock+0x26c/0x1bd0 [ 143.112336][ T8679] ? tcf_chain0_head_change.isra.0+0x52/0x130 [ 143.112362][ T8679] ? find_held_lock+0x2b/0x80 [ 143.112389][ T8679] ? tcf_chain0_head_change.isra.0+0xec/0x130 [ 143.112417][ T8679] ? __pfx_fl_change+0x10/0x10 [ 143.112439][ T8679] ? fl_get+0x99/0x3d0 [ 143.112462][ T8679] ? find_held_lock+0x2b/0x80 [ 143.112490][ T8679] ? fl_get+0x20a/0x3d0 [ 143.112511][ T8679] ? fl_get+0x20a/0x3d0 [ 143.112538][ T8679] ? fl_get+0x214/0x3d0 [ 143.112560][ T8679] ? __pfx_fl_get+0x10/0x10 [ 143.112588][ T8679] ? __pfx_fl_change+0x10/0x10 [ 143.112612][ T8679] tc_new_tfilter+0x9c3/0x24c0 [ 143.112655][ T8679] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 143.112685][ T8679] ? __pfx_tc_new_tfilter+0x10/0x10 [ 143.112725][ T8679] ? __lock_acquire+0x4c5/0x1ec0 [ 143.112757][ T8679] ? lock_acquire+0x1d1/0x380 [ 143.112777][ T8679] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 143.112801][ T8679] ? find_held_lock+0x2b/0x80 [ 143.112830][ T8679] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 143.112855][ T8679] ? __pfx_tc_new_tfilter+0x10/0x10 [ 143.112886][ T8679] rtnetlink_rcv_msg+0x95e/0xe90 [ 143.112911][ T8679] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 143.112943][ T8679] ? ref_tracker_free+0x37e/0x6c0 [ 143.112971][ T8679] netlink_rcv_skb+0x159/0x420 [ 143.113003][ T8679] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 143.113027][ T8679] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 143.113067][ T8679] ? netlink_deliver_tap+0x1ae/0xcc0 [ 143.113102][ T8679] netlink_unicast+0x585/0x850 [ 143.113136][ T8679] ? __pfx_netlink_unicast+0x10/0x10 [ 143.113175][ T8679] netlink_sendmsg+0x8b0/0xda0 [ 143.113210][ T8679] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.113245][ T8679] ? selinux_socket_sendmsg+0x198/0x2f0 [ 143.113287][ T8679] ____sys_sendmsg+0xa4d/0xbe0 [ 143.113312][ T8679] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.113345][ T8679] ? __pfx_____sys_sendmsg+0x10/0x10 [ 143.113379][ T8679] ? lock_acquire+0x1d1/0x380 [ 143.113400][ T8679] ? get_pid_task+0x2a/0x250 [ 143.113431][ T8679] ___sys_sendmsg+0x190/0x1e0 [ 143.113461][ T8679] ? __pfx____sys_sendmsg+0x10/0x10 [ 143.113488][ T8679] ? get_pid_task+0x106/0x250 [ 143.113528][ T8679] ? find_held_lock+0x2b/0x80 [ 143.113575][ T8679] __sys_sendmsg+0x160/0x210 [ 143.113597][ T8679] ? __pfx___sys_sendmsg+0x10/0x10 [ 143.113659][ T8679] do_syscall_64+0x123/0x790 [ 143.113688][ T8679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.113710][ T8679] RIP: 0033:0x7f398319e159 [ 143.113729][ T8679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.113750][ T8679] RSP: 002b:00007f3984131028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.113771][ T8679] RAX: ffffffffffffffda RBX: 00007f3983425fa0 RCX: 00007f398319e159 [ 143.113785][ T8679] RDX: 0000000020000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 143.113798][ T8679] RBP: 00007f3984131090 R08: 0000000000000000 R09: 0000000000000000 [ 143.113811][ T8679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 143.113824][ T8679] R13: 00007f3983426038 R14: 00007f3983425fa0 R15: 00007ffc0dc0daf8 [ 143.113854][ T8679] [ 143.565667][ T8715] random: crng reseeded on system resumption [ 143.601964][ T8719] binder: 8718:8719 ioctl c0306201 200000000640 returned -22 [ 143.616693][ T8715] lo speed is unknown, defaulting to 1000 [ 143.619593][ T8721] FAULT_INJECTION: forcing a failure. [ 143.619593][ T8721] name failslab, interval 1, probability 0, space 0, times 0 [ 143.619673][ T8721] CPU: 3 UID: 0 PID: 8721 Comm: syz.3.832 Not tainted syzkaller #0 PREEMPT(full) [ 143.619710][ T8721] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 143.619719][ T8721] Call Trace: [ 143.619724][ T8721] [ 143.619730][ T8721] dump_stack_lvl+0x100/0x190 [ 143.619752][ T8721] should_fail_ex.cold+0x5/0xa [ 143.619770][ T8721] should_failslab+0xc2/0x120 [ 143.619785][ T8721] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 143.619798][ T8721] ? alloc_inode+0x183/0x250 [ 143.619817][ T8721] alloc_inode+0x183/0x250 [ 143.619834][ T8721] iget_locked+0x1d9/0x6d0 [ 143.619850][ T8721] ? __pfx_iget_locked+0x10/0x10 [ 143.619868][ T8721] ? kernfs_root+0xee/0x2a0 [ 143.619883][ T8721] ? kernfs_root+0xee/0x2a0 [ 143.619899][ T8721] kernfs_get_inode+0x46/0x470 [ 143.619914][ T8721] kernfs_iop_lookup+0x1a7/0x2d0 [ 143.619930][ T8721] __lookup_slow+0x155/0x320 [ 143.619947][ T8721] lookup_slow+0x50/0x70 [ 143.619963][ T8721] link_path_walk+0x1377/0x1cc0 [ 143.619979][ T8721] path_openat+0x1ac/0x2440 [ 143.619995][ T8721] ? __pfx_path_openat+0x10/0x10 [ 143.620011][ T8721] do_file_open+0x20e/0x430 [ 143.620025][ T8721] ? __pfx_do_file_open+0x10/0x10 [ 143.620043][ T8721] ? __pfx_kfree_link+0x10/0x10 [ 143.620058][ T8721] ? _raw_spin_unlock+0x28/0x50 [ 143.620077][ T8721] ? alloc_fd+0x471/0x7a0 [ 143.620093][ T8721] do_sys_openat2+0x10f/0x1e0 [ 143.620108][ T8721] ? __pfx_do_sys_openat2+0x10/0x10 [ 143.620122][ T8721] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 143.620136][ T8721] ? __fget_files+0x21f/0x3d0 [ 143.620151][ T8721] __x64_sys_openat+0x12d/0x210 [ 143.620166][ T8721] ? __pfx___x64_sys_openat+0x10/0x10 [ 143.620180][ T8721] ? ksys_write+0x1ac/0x250 [ 143.620195][ T8721] do_syscall_64+0x123/0x790 [ 143.620209][ T8721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.620221][ T8721] RIP: 0033:0x7fa7e359e159 [ 143.620231][ T8721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.620243][ T8721] RSP: 002b:00007fa7e44b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 143.620254][ T8721] RAX: ffffffffffffffda RBX: 00007fa7e3825fa0 RCX: 00007fa7e359e159 [ 143.620261][ T8721] RDX: 0000000000000002 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 143.620268][ T8721] RBP: 00007fa7e44b8090 R08: 0000000000000000 R09: 0000000000000000 [ 143.620275][ T8721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 143.620282][ T8721] R13: 00007fa7e3826038 R14: 00007fa7e3825fa0 R15: 00007ffdc1034518 [ 143.620297][ T8721] [ 143.956694][ T8737] xt_l2tp: invalid flags combination: c [ 144.024449][ T8741] bridge0: entered promiscuous mode [ 144.024527][ T8741] bridge0: entered allmulticast mode [ 144.349622][ T6466] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 144.595236][ T8762] random: crng reseeded on system resumption [ 144.630784][ T8762] lo speed is unknown, defaulting to 1000 [ 144.662383][ T8766] FAULT_INJECTION: forcing a failure. [ 144.662383][ T8766] name fail_futex, interval 1, probability 0, space 0, times 0 [ 144.662439][ T8766] CPU: 3 UID: 0 PID: 8766 Comm: syz.3.843 Not tainted syzkaller #0 PREEMPT(full) [ 144.662465][ T8766] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 144.662474][ T8766] Call Trace: [ 144.662485][ T8766] [ 144.662490][ T8766] dump_stack_lvl+0x100/0x190 [ 144.662537][ T8766] should_fail_ex.cold+0x5/0xa [ 144.662567][ T8766] get_futex_key+0x1d0/0x14f0 [ 144.662583][ T8766] ? __pfx_get_futex_key+0x10/0x10 [ 144.662596][ T8766] ? wakeup_preempt_fair+0x5c3/0xdc0 [ 144.662613][ T8766] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 144.662629][ T8766] futex_wait_setup+0x91/0x540 [ 144.662649][ T8766] __futex_wait+0x19f/0x300 [ 144.662667][ T8766] ? __pfx___futex_wait+0x10/0x10 [ 144.662684][ T8766] ? __pfx_try_to_wake_up+0x10/0x10 [ 144.662698][ T8766] ? futex_hash+0x311/0x400 [ 144.662712][ T8766] ? __pfx_futex_wake_mark+0x10/0x10 [ 144.662731][ T8766] ? find_held_lock+0x2b/0x80 [ 144.662746][ T8766] ? futex_wake+0x4ea/0x5e0 [ 144.662765][ T8766] futex_wait+0xe6/0x370 [ 144.662781][ T8766] ? __pfx_futex_wait+0x10/0x10 [ 144.662800][ T8766] ? percpu_counter_add_batch+0xb9/0x230 [ 144.662822][ T8766] ? errseq_sample+0x51/0x70 [ 144.662838][ T8766] ? file_init_path+0x48e/0x670 [ 144.662853][ T8766] do_futex+0x265/0x440 [ 144.662867][ T8766] ? __pfx_do_futex+0x10/0x10 [ 144.662881][ T8766] ? fd_install+0x223/0x580 [ 144.662896][ T8766] __x64_sys_futex+0x34f/0x4d0 [ 144.662912][ T8766] ? __sys_socket+0xac/0x260 [ 144.662931][ T8766] ? __pfx___x64_sys_futex+0x10/0x10 [ 144.662950][ T8766] do_syscall_64+0x123/0x790 [ 144.662970][ T8766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.662982][ T8766] RIP: 0033:0x7fa7e359e159 [ 144.662992][ T8766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.663004][ T8766] RSP: 002b:00007fa7e44970e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 144.663017][ T8766] RAX: ffffffffffffffda RBX: 00007fa7e3826098 RCX: 00007fa7e359e159 [ 144.663026][ T8766] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa7e3826098 [ 144.663033][ T8766] RBP: 00007fa7e3826090 R08: 0000000000000000 R09: 0000000000000000 [ 144.663040][ T8766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.663047][ T8766] R13: 00007fa7e3826128 R14: 00007ffdc1034430 R15: 00007ffdc1034518 [ 144.663061][ T8766] [ 144.870315][ T5733] Bluetooth: hci4: command tx timeout [ 144.954912][ T8779] FAULT_INJECTION: forcing a failure. [ 144.954912][ T8779] name failslab, interval 1, probability 0, space 0, times 0 [ 144.965267][ T8779] CPU: 0 UID: 0 PID: 8779 Comm: syz.3.848 Not tainted syzkaller #0 PREEMPT(full) [ 144.965287][ T8779] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 144.965294][ T8779] Call Trace: [ 144.965300][ T8779] [ 144.965340][ T8779] dump_stack_lvl+0x100/0x190 [ 144.965364][ T8779] should_fail_ex.cold+0x5/0xa [ 144.965381][ T8779] should_failslab+0xc2/0x120 [ 144.965396][ T8779] kmem_cache_alloc_noprof+0x92/0x6a0 [ 144.965407][ T8779] ? __pfx_map_id_range_down+0x10/0x10 [ 144.965421][ T8779] ? security_inode_alloc+0x3b/0x2c0 [ 144.965440][ T8779] security_inode_alloc+0x3b/0x2c0 [ 144.965457][ T8779] inode_init_always_gfp+0xc6f/0xfb0 [ 144.965475][ T8779] alloc_inode+0x8e/0x250 [ 144.965492][ T8779] iget_locked+0x1d9/0x6d0 [ 144.965510][ T8779] ? __pfx_iget_locked+0x10/0x10 [ 144.965548][ T8779] ? kernfs_root+0xee/0x2a0 [ 144.965562][ T8779] ? kernfs_root+0xee/0x2a0 [ 144.965580][ T8779] kernfs_get_inode+0x46/0x470 [ 144.965594][ T8779] kernfs_iop_lookup+0x1a7/0x2d0 [ 144.965611][ T8779] __lookup_slow+0x155/0x320 [ 144.965630][ T8779] lookup_slow+0x50/0x70 [ 144.965646][ T8779] link_path_walk+0x1377/0x1cc0 [ 144.965663][ T8779] path_openat+0x1ac/0x2440 [ 144.965679][ T8779] ? __pfx_path_openat+0x10/0x10 [ 144.965695][ T8779] do_file_open+0x20e/0x430 [ 144.965709][ T8779] ? __pfx_do_file_open+0x10/0x10 [ 144.965727][ T8779] ? __pfx_kfree_link+0x10/0x10 [ 144.965742][ T8779] ? _raw_spin_unlock+0x28/0x50 [ 144.965760][ T8779] ? alloc_fd+0x471/0x7a0 [ 144.965777][ T8779] do_sys_openat2+0x10f/0x1e0 [ 144.965791][ T8779] ? __pfx_do_sys_openat2+0x10/0x10 [ 144.965807][ T8779] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 144.965822][ T8779] ? __fget_files+0x21f/0x3d0 [ 144.965837][ T8779] __x64_sys_openat+0x12d/0x210 [ 144.965853][ T8779] ? __pfx___x64_sys_openat+0x10/0x10 [ 144.965866][ T8779] ? ksys_write+0x1ac/0x250 [ 144.965881][ T8779] do_syscall_64+0x123/0x790 [ 144.965896][ T8779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.965909][ T8779] RIP: 0033:0x7fa7e359e159 [ 144.965920][ T8779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.965931][ T8779] RSP: 002b:00007fa7e44b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 144.965944][ T8779] RAX: ffffffffffffffda RBX: 00007fa7e3825fa0 RCX: 00007fa7e359e159 [ 144.965951][ T8779] RDX: 0000000000000002 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 144.965959][ T8779] RBP: 00007fa7e44b8090 R08: 0000000000000000 R09: 0000000000000000 [ 144.965965][ T8779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 144.965972][ T8779] R13: 00007fa7e3826038 R14: 00007fa7e3825fa0 R15: 00007ffdc1034518 [ 144.965986][ T8779] [ 145.098675][ T8789] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8789 comm=syz.2.850 [ 145.169913][ T8795] dvmrp1: entered allmulticast mode [ 145.241235][ T8792] device-mapper: ioctl: Empty message received. [ 145.297278][ T8802] random: crng reseeded on system resumption [ 145.333904][ T8802] lo speed is unknown, defaulting to 1000 [ 145.383904][ T8806] FAULT_INJECTION: forcing a failure. [ 145.383904][ T8806] name fail_futex, interval 1, probability 0, space 0, times 0 [ 145.383995][ T8806] CPU: 3 UID: 0 PID: 8806 Comm: syz.2.855 Not tainted syzkaller #0 PREEMPT(full) [ 145.384023][ T8806] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 145.384033][ T8806] Call Trace: [ 145.384039][ T8806] [ 145.384045][ T8806] dump_stack_lvl+0x100/0x190 [ 145.384069][ T8806] should_fail_ex.cold+0x5/0xa [ 145.384088][ T8806] get_futex_key+0x1d0/0x14f0 [ 145.384121][ T8806] ? __pfx_get_futex_key+0x10/0x10 [ 145.384137][ T8806] ? wakeup_preempt_fair+0x5c3/0xdc0 [ 145.384157][ T8806] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 145.384175][ T8806] futex_wait_setup+0x91/0x540 [ 145.384197][ T8806] __futex_wait+0x19f/0x300 [ 145.384216][ T8806] ? __pfx___futex_wait+0x10/0x10 [ 145.384234][ T8806] ? __pfx_try_to_wake_up+0x10/0x10 [ 145.384249][ T8806] ? futex_hash+0x311/0x400 [ 145.384266][ T8806] ? __pfx_futex_wake_mark+0x10/0x10 [ 145.384288][ T8806] ? find_held_lock+0x2b/0x80 [ 145.384304][ T8806] ? futex_wake+0x4ea/0x5e0 [ 145.384324][ T8806] futex_wait+0xe6/0x370 [ 145.384341][ T8806] ? __pfx_futex_wait+0x10/0x10 [ 145.384360][ T8806] ? percpu_counter_add_batch+0xb9/0x230 [ 145.384383][ T8806] ? errseq_sample+0x51/0x70 [ 145.384400][ T8806] ? file_init_path+0x48e/0x670 [ 145.384416][ T8806] do_futex+0x265/0x440 [ 145.384431][ T8806] ? __pfx_do_futex+0x10/0x10 [ 145.384445][ T8806] ? fd_install+0x223/0x580 [ 145.384460][ T8806] __x64_sys_futex+0x34f/0x4d0 [ 145.384476][ T8806] ? __sys_socket+0xac/0x260 [ 145.384491][ T8806] ? __pfx___x64_sys_futex+0x10/0x10 [ 145.384511][ T8806] do_syscall_64+0x123/0x790 [ 145.384526][ T8806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.384540][ T8806] RIP: 0033:0x7fc631b9e159 [ 145.384551][ T8806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.384563][ T8806] RSP: 002b:00007fc632ac20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 145.384575][ T8806] RAX: ffffffffffffffda RBX: 00007fc631e26098 RCX: 00007fc631b9e159 [ 145.384583][ T8806] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc631e26098 [ 145.384590][ T8806] RBP: 00007fc631e26090 R08: 0000000000000000 R09: 0000000000000000 [ 145.384598][ T8806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.384605][ T8806] R13: 00007fc631e26128 R14: 00007ffd4b4c7830 R15: 00007ffd4b4c7918 [ 145.384621][ T8806] [ 146.184721][ T8826] syzkaller0: entered promiscuous mode [ 146.184781][ T8826] syzkaller0: entered allmulticast mode [ 146.184802][ T8828] __nla_validate_parse: 2 callbacks suppressed [ 146.184818][ T8828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.861'. [ 146.359855][ T8841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.865'. [ 146.410551][ T8839] i2c i2c-0: new_device: Missing parameters [ 146.416978][ T8845] FAULT_INJECTION: forcing a failure. [ 146.416978][ T8845] name failslab, interval 1, probability 0, space 0, times 0 [ 146.417050][ T8845] CPU: 3 UID: 0 PID: 8845 Comm: syz.3.866 Tainted: G L syzkaller #0 PREEMPT(full) [ 146.417079][ T8845] Tainted: [L]=SOFTLOCKUP [ 146.417086][ T8845] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 146.417097][ T8845] Call Trace: [ 146.417104][ T8845] [ 146.417110][ T8845] dump_stack_lvl+0x100/0x190 [ 146.417133][ T8845] should_fail_ex.cold+0x5/0xa [ 146.417150][ T8845] should_failslab+0xc2/0x120 [ 146.417167][ T8845] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 146.417181][ T8845] ? alloc_inode+0x183/0x250 [ 146.417201][ T8845] alloc_inode+0x183/0x250 [ 146.417219][ T8845] iget_locked+0x1d9/0x6d0 [ 146.417237][ T8845] ? __pfx_iget_locked+0x10/0x10 [ 146.417254][ T8845] ? kernfs_root+0xee/0x2a0 [ 146.417269][ T8845] ? kernfs_root+0xee/0x2a0 [ 146.417288][ T8845] kernfs_get_inode+0x46/0x470 [ 146.417303][ T8845] kernfs_iop_lookup+0x1a7/0x2d0 [ 146.417321][ T8845] __lookup_slow+0x155/0x320 [ 146.417341][ T8845] lookup_slow+0x50/0x70 [ 146.417359][ T8845] link_path_walk+0x1377/0x1cc0 [ 146.417377][ T8845] path_openat+0x1ac/0x2440 [ 146.417394][ T8845] ? __pfx_path_openat+0x10/0x10 [ 146.417412][ T8845] do_file_open+0x20e/0x430 [ 146.417428][ T8845] ? __pfx_do_file_open+0x10/0x10 [ 146.417448][ T8845] ? __pfx_kfree_link+0x10/0x10 [ 146.417465][ T8845] ? _raw_spin_unlock+0x28/0x50 [ 146.417484][ T8845] ? alloc_fd+0x471/0x7a0 [ 146.417503][ T8845] do_sys_openat2+0x10f/0x1e0 [ 146.417521][ T8845] ? __pfx_do_sys_openat2+0x10/0x10 [ 146.417537][ T8845] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 146.417553][ T8845] ? __fget_files+0x21f/0x3d0 [ 146.417570][ T8845] __x64_sys_openat+0x12d/0x210 [ 146.417586][ T8845] ? __pfx___x64_sys_openat+0x10/0x10 [ 146.417601][ T8845] ? ksys_write+0x1ac/0x250 [ 146.417617][ T8845] do_syscall_64+0x123/0x790 [ 146.417633][ T8845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.417646][ T8845] RIP: 0033:0x7fa7e359e159 [ 146.417657][ T8845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.417674][ T8845] RSP: 002b:00007fa7e44b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 146.417687][ T8845] RAX: ffffffffffffffda RBX: 00007fa7e3825fa0 RCX: 00007fa7e359e159 [ 146.417695][ T8845] RDX: 0000000000000002 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 146.417703][ T8845] RBP: 00007fa7e44b8090 R08: 0000000000000000 R09: 0000000000000000 [ 146.417710][ T8845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 146.417720][ T8845] R13: 00007fa7e3826038 R14: 00007fa7e3825fa0 R15: 00007ffdc1034518 [ 146.417746][ T8845] [ 146.564513][ T8847] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 146.763995][ T42] kauditd_printk_skb: 301 callbacks suppressed [ 146.764048][ T42] audit: type=1400 audit(1788412294.470:2329): avc: denied { mounton } for pid=8855 comm="syz.3.870" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 146.777452][ T8857] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 146.777567][ T8857] qnx6: wrong signature (magic) in superblock #1. [ 146.777573][ T8857] qnx6: unable to read the first superblock [ 146.784272][ T8856] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 146.784287][ T8856] qnx6: wrong signature (magic) in superblock #1. [ 146.784307][ T8856] qnx6: unable to read the first superblock [ 146.791593][ T8856] SELinux: Context system_u:object_r:null_device_t:s0 is not valid (left unmapped). [ 146.792060][ T42] audit: type=1400 audit(1788412294.500:2330): avc: denied { mac_admin } for pid=8855 comm="syz.3.870" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 146.792091][ T42] audit: type=1400 audit(1788412294.500:2331): avc: denied { relabelto } for pid=8855 comm="syz.3.870" name="cgroup" dev="tmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:null_device_t:s0" [ 146.794222][ T42] audit: type=1400 audit(1788412294.500:2332): avc: denied { associate } for pid=8855 comm="syz.3.870" name="cgroup" dev="tmpfs" ino=1267 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:null_device_t:s0" [ 146.828589][ T42] audit: type=1400 audit(1788412294.530:2333): avc: denied { unlink } for pid=5736 comm="syz-executor" name="cgroup" dev="tmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:null_device_t:s0" [ 146.851999][ T42] audit: type=1800 audit(1788412294.560:2334): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16140 res=0 errno=0 [ 146.885495][ T8859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.871'. [ 146.958377][ T42] audit: type=1800 audit(1788412294.660:2335): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16140 res=0 errno=0 [ 146.958663][ T42] audit: type=1400 audit(1788412294.660:2336): avc: denied { map_read map_write } for pid=8790 comm="syz.4.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 146.978564][ T42] audit: type=1400 audit(1788412294.680:2337): avc: denied { read write } for pid=8863 comm="syz.3.872" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 146.978658][ T42] audit: type=1400 audit(1788412294.680:2338): avc: denied { open } for pid=8863 comm="syz.3.872" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 146.987946][ T8864] size and base must be multiples of 4 kiB [ 146.987962][ T8864] CPU: 3 UID: 0 PID: 8864 Comm: syz.3.872 Tainted: G L syzkaller #0 PREEMPT(full) [ 146.987978][ T8864] Tainted: [L]=SOFTLOCKUP [ 146.987982][ T8864] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 146.987989][ T8864] Call Trace: [ 146.987993][ T8864] [ 146.987998][ T8864] dump_stack_lvl+0x100/0x190 [ 146.988017][ T8864] mtrr_add.cold+0x74/0x87 [ 146.988037][ T8864] mtrr_ioctl+0x25a/0xcf0 [ 146.988048][ T8864] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 146.988069][ T8864] ? __pfx_mtrr_ioctl+0x10/0x10 [ 146.988080][ T8864] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 146.988100][ T8864] ? __fget_files+0x34/0x3d0 [ 146.988118][ T8864] ? __pfx_mtrr_ioctl+0x10/0x10 [ 146.988129][ T8864] proc_reg_unlocked_ioctl+0x229/0x320 [ 146.988145][ T8864] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 146.988161][ T8864] __x64_sys_ioctl+0x18e/0x210 [ 146.988180][ T8864] do_syscall_64+0x123/0x790 [ 146.988194][ T8864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.988205][ T8864] RIP: 0033:0x7fa7e359e159 [ 146.988215][ T8864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.988226][ T8864] RSP: 002b:00007fa7e44b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 146.988237][ T8864] RAX: ffffffffffffffda RBX: 00007fa7e3825fa0 RCX: 00007fa7e359e159 [ 146.988245][ T8864] RDX: 0000200000000a00 RSI: 0000000040104d01 RDI: 0000000000000006 [ 146.988251][ T8864] RBP: 00007fa7e3635024 R08: 0000000000000000 R09: 0000000000000000 [ 146.988258][ T8864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.988265][ T8864] R13: 00007fa7e3826038 R14: 00007fa7e3825fa0 R15: 00007ffdc1034518 [ 146.988278][ T8864] [ 147.183225][ T8870] netlink: 'syz.4.873': attribute type 1 has an invalid length. [ 147.232035][ T8870] 8021q: adding VLAN 0 to HW filter on device bond3 [ 147.749834][ T8886] sysfs: Unknown parameter 'erspan0' [ 147.799700][ T8888] binder: BINDER_SET_CONTEXT_MGR already set [ 147.802777][ T8888] binder: 8887:8888 ioctl 4018620d 200000000040 returned -16 [ 147.805904][ T8888] bridge_slave_0: invalid flags given to default FDB implementation [ 147.895196][ T8892] FAULT_INJECTION: forcing a failure. [ 147.895196][ T8892] name failslab, interval 1, probability 0, space 0, times 0 [ 147.895269][ T8892] CPU: 1 UID: 0 PID: 8892 Comm: syz.4.881 Tainted: G L syzkaller #0 PREEMPT(full) [ 147.895305][ T8892] Tainted: [L]=SOFTLOCKUP [ 147.895311][ T8892] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 147.895318][ T8892] Call Trace: [ 147.895323][ T8892] [ 147.895328][ T8892] dump_stack_lvl+0x100/0x190 [ 147.895349][ T8892] should_fail_ex.cold+0x5/0xa [ 147.895365][ T8892] should_failslab+0xc2/0x120 [ 147.895379][ T8892] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 147.895391][ T8892] ? alloc_inode+0x183/0x250 [ 147.895410][ T8892] alloc_inode+0x183/0x250 [ 147.895427][ T8892] iget_locked+0x1d9/0x6d0 [ 147.895444][ T8892] ? __pfx_iget_locked+0x10/0x10 [ 147.895459][ T8892] ? kernfs_root+0xee/0x2a0 [ 147.895473][ T8892] ? kernfs_root+0xee/0x2a0 [ 147.895490][ T8892] kernfs_get_inode+0x46/0x470 [ 147.895504][ T8892] kernfs_iop_lookup+0x1a7/0x2d0 [ 147.895519][ T8892] __lookup_slow+0x155/0x320 [ 147.895539][ T8892] lookup_slow+0x50/0x70 [ 147.895554][ T8892] link_path_walk+0x1377/0x1cc0 [ 147.895570][ T8892] path_openat+0x1ac/0x2440 [ 147.895585][ T8892] ? __pfx_path_openat+0x10/0x10 [ 147.895602][ T8892] do_file_open+0x20e/0x430 [ 147.895616][ T8892] ? __pfx_do_file_open+0x10/0x10 [ 147.895634][ T8892] ? __pfx_kfree_link+0x10/0x10 [ 147.895649][ T8892] ? _raw_spin_unlock+0x28/0x50 [ 147.895666][ T8892] ? alloc_fd+0x471/0x7a0 [ 147.895683][ T8892] do_sys_openat2+0x10f/0x1e0 [ 147.895697][ T8892] ? __pfx_do_sys_openat2+0x10/0x10 [ 147.895712][ T8892] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 147.895726][ T8892] ? __fget_files+0x21f/0x3d0 [ 147.895740][ T8892] __x64_sys_openat+0x12d/0x210 [ 147.895755][ T8892] ? __pfx___x64_sys_openat+0x10/0x10 [ 147.895769][ T8892] ? ksys_write+0x1ac/0x250 [ 147.895784][ T8892] do_syscall_64+0x123/0x790 [ 147.895798][ T8892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.895811][ T8892] RIP: 0033:0x7f398319e159 [ 147.895825][ T8892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.895840][ T8892] RSP: 002b:00007f3984131028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 147.895858][ T8892] RAX: ffffffffffffffda RBX: 00007f3983425fa0 RCX: 00007f398319e159 [ 147.895872][ T8892] RDX: 0000000000000002 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 147.895883][ T8892] RBP: 00007f3984131090 R08: 0000000000000000 R09: 0000000000000000 [ 147.895893][ T8892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 147.895899][ T8892] R13: 00007f3983426038 R14: 00007f3983425fa0 R15: 00007ffc0dc0daf8 [ 147.895914][ T8892] [ 148.172370][ T8904] netlink: 28 bytes leftover after parsing attributes in process `syz.3.887'. [ 148.172439][ T8904] netlink: 28 bytes leftover after parsing attributes in process `syz.3.887'. [ 148.200506][ T8904] e1000e 0000:00:02.0 eth1: entered promiscuous mode [ 148.223635][ T8904] e1000 0000:00:06.0 eth0: entered promiscuous mode [ 148.233931][ T8906] netlink: 44 bytes leftover after parsing attributes in process `syz.2.888'. [ 148.241363][ T8904] debugfs: 'hsr0' already exists in 'hsr' [ 148.241505][ T8904] Cannot create hsr debugfs directory [ 148.248100][ T8908] netlink: 44 bytes leftover after parsing attributes in process `syz.2.888'. [ 148.283748][ T8910] fuse: Bad value for 'fd' [ 148.298119][ T8904] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 148.484197][ T8920] netlink: 16 bytes leftover after parsing attributes in process `syz.4.893'. [ 148.491656][ T8920] CIFS mount error: No usable UNC path provided in device string! [ 148.491656][ T8920] [ 148.491988][ T8920] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 148.494403][ T8920] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8920 comm=syz.4.893 [ 148.549004][ T5733] Bluetooth: Wrong link type (-57) [ 148.561238][ T8923] netlink: 12 bytes leftover after parsing attributes in process `syz.4.894'. [ 148.561320][ T8923] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 148.592262][ T8931] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 148.592319][ T8931] CIFS mount error: No usable UNC path provided in device string! [ 148.592319][ T8931] [ 148.592367][ T8931] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 148.595789][ T8932] binder: 8926:8932 ioctl 8983 200000000600 returned -22 [ 148.599277][ T8927] binder: 8926:8927 ioctl c0306201 200000000180 returned -11 [ 148.639863][ T5825] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 148.800606][ T5825] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 148.802125][ T5825] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.802166][ T5825] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 148.802185][ T5825] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 148.802203][ T5825] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 148.802220][ T5825] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 148.802237][ T5825] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 148.802254][ T5825] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 148.802272][ T5825] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 148.802289][ T5825] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 148.802367][ T5825] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 148.802385][ T5825] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 148.802402][ T5825] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 148.802418][ T5825] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 148.802434][ T5825] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 148.802450][ T5825] usb 7-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 148.804882][ T5825] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.804905][ T5825] usb 7-1: Product: syz [ 148.804916][ T5825] usb 7-1: Manufacturer: syz [ 148.804929][ T5825] usb 7-1: SerialNumber: syz [ 148.819883][ T8915] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 148.819995][ T8915] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 148.820050][ T8915] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 148.820168][ T8915] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 148.820246][ T8915] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 148.820356][ T8915] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 148.820414][ T8915] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 148.820540][ T8915] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 148.820613][ T8915] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 148.820724][ T8915] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 148.820781][ T8915] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 148.824781][ T5825] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 148.826118][ T5825] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 7 [ 148.828461][ T5825] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 148.829341][ T5825] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 148.831385][ T5825] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 150.886063][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.951481][ T66] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 150.953287][ T66] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 150.954136][ T66] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 150.955868][ T66] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 150.956835][ T66] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 151.042163][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.163946][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.334831][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.402333][ T8972] lo speed is unknown, defaulting to 1000 [ 151.540753][ T5875] usb 7-1: USB disconnect, device number 16 [ 151.578748][ T66] Bluetooth: Wrong link type (-57) [ 151.581137][ T5875] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 151.584198][ T9008] netlink: 12 bytes leftover after parsing attributes in process `syz.4.906'. [ 151.584235][ T9008] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 151.597018][ T5875] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 151.597784][ T5875] keyspan 7-1:1.0: device disconnected [ 151.672537][ T13] bridge_slave_1: left allmulticast mode [ 151.672610][ T13] bridge_slave_1: left promiscuous mode [ 151.672803][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.717403][ T13] pim6reg: left allmulticast mode [ 151.730801][ T9017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.909'. [ 151.749907][ T5733] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 151.753604][ T5733] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 151.756215][ T5733] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 151.763170][ T5733] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 151.763743][ T5733] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 151.770913][ T42] kauditd_printk_skb: 291 callbacks suppressed [ 151.770933][ T42] audit: type=1400 audit(2000000003.700:2630): avc: denied { read } for pid=9015 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 151.770978][ T42] audit: type=1400 audit(2000000003.700:2631): avc: denied { open } for pid=9015 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 151.771024][ T42] audit: type=1400 audit(2000000003.710:2632): avc: denied { mounton } for pid=9015 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 151.771317][ T9020] random: crng reseeded on system resumption [ 151.780639][ T42] audit: type=1800 audit(2000000003.720:2633): pid=5745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=187906 res=0 errno=0 [ 151.797101][ T42] audit: type=1800 audit(2000000003.730:2634): pid=5745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=187917 res=0 errno=0 [ 151.818077][ T42] audit: type=1400 audit(2000000003.750:2635): avc: denied { sys_module } for pid=9015 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 151.874172][ T42] audit: type=1400 audit(2000000003.810:2636): avc: denied { mounton } for pid=9019 comm="syz.4.910" path="/37/proc" dev="tmpfs" ino=216 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 151.874742][ T42] audit: type=1400 audit(2000000003.810:2637): avc: denied { mount } for pid=9019 comm="syz.4.910" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 151.875867][ T42] audit: type=1400 audit(2000000003.810:2638): avc: denied { create } for pid=9019 comm="syz.4.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 151.876261][ T42] audit: type=1400 audit(2000000003.810:2639): avc: denied { create } for pid=9019 comm="syz.4.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 151.903421][ T13] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 151.983545][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.988047][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.992857][ T13] bond0 (unregistering): Released all slaves [ 151.996072][ T13] bond1 (unregistering): Released all slaves [ 152.004692][ T13] bond2 (unregistering): Released all slaves [ 152.009944][ T13] bond3 (unregistering): Released all slaves [ 152.015870][ T13] bond4 (unregistering): Released all slaves [ 152.021800][ T13] bond5 (unregistering): Released all slaves [ 152.027465][ T13] bond6 (unregistering): Released all slaves [ 152.035568][ T13] bond7 (unregistering): Released all slaves [ 152.042854][ T13] bond8 (unregistering): Released all slaves [ 152.056232][ T13] bond9 (unregistering): Released all slaves [ 152.061628][ T13] bond10 (unregistering): Released all slaves [ 152.066673][ T13] bond11 (unregistering): Released all slaves [ 152.120022][ T9020] lo speed is unknown, defaulting to 1000 [ 152.176917][ T9032] tmpfs: Bad value for 'mpol' [ 152.228167][ T9036] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 152.246054][ T9036] overlayfs: invalid origin (0000) [ 152.258252][ T9036] netlink: 'syz.2.912': attribute type 10 has an invalid length. [ 152.290917][ T9036] team0: Device wg2 is of different type [ 152.337072][ T13] tipc: Disabling bearer [ 152.345037][ T13] tipc: Left network mode [ 152.451217][ T8972] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.451303][ T8972] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.451377][ T8972] bridge_slave_0: entered allmulticast mode [ 152.452217][ T8972] bridge_slave_0: entered promiscuous mode [ 152.454066][ T8972] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.454107][ T8972] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.454162][ T8972] bridge_slave_1: entered allmulticast mode [ 152.455209][ T8972] bridge_slave_1: entered promiscuous mode [ 152.480610][ T8972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.507349][ T8972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.522921][ T9015] lo speed is unknown, defaulting to 1000 [ 152.527432][ T8972] team0: Port device team_slave_0 added [ 152.529341][ T8972] team0: Port device team_slave_1 added [ 152.596336][ T8972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.596396][ T8972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.596717][ T8972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.627218][ T8972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.627278][ T8972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.627327][ T8972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.712317][ T8972] hsr_slave_0: entered promiscuous mode [ 152.713606][ T8972] hsr_slave_1: entered promiscuous mode [ 152.714237][ T8972] debugfs: 'hsr0' already exists in 'hsr' [ 152.714256][ T8972] Cannot create hsr debugfs directory [ 152.763686][ T13] hsr_slave_0: left promiscuous mode [ 152.765736][ T13] hsr_slave_1: left promiscuous mode [ 152.766684][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.766700][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.768548][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.768561][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.774776][ T13] veth1_macvtap: left promiscuous mode [ 152.774807][ T13] veth0_macvtap: left allmulticast mode [ 152.774823][ T13] veth0_macvtap: left promiscuous mode [ 152.774939][ T13] veth1_vlan: left promiscuous mode [ 152.774991][ T13] veth0_vlan: left promiscuous mode [ 152.955293][ T13] team0 (unregistering): Port device team_slave_1 removed [ 152.962852][ T13] team0 (unregistering): Port device team_slave_0 removed [ 153.029602][ T66] Bluetooth: hci0: command tx timeout [ 153.033210][ T6592] smbdirect: ib_dev[syz0] removed [ 153.046362][ T5442] 8021q: adding VLAN 0 to HW filter on device eth6 [ 153.049599][ T30] lo speed is unknown, defaulting to 1000 [ 153.049674][ T30] syz0: Port: 1 Link DOWN [ 153.288882][ T9015] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.288965][ T9015] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.289070][ T9015] bridge_slave_0: entered allmulticast mode [ 153.290045][ T9015] bridge_slave_0: entered promiscuous mode [ 153.299355][ T9015] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.299398][ T9015] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.299511][ T9015] bridge_slave_1: entered allmulticast mode [ 153.300234][ T9015] bridge_slave_1: entered promiscuous mode [ 153.321636][ T8972] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 153.326613][ T8972] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 153.327196][ T8972] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 153.331574][ T8972] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 153.334555][ T9015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.336731][ T9015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.344812][ T8972] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 153.351207][ T8972] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 153.357115][ T8972] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 153.365732][ T8972] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 153.394056][ T9015] team0: Port device team_slave_0 added [ 153.399095][ T9015] team0: Port device team_slave_1 added [ 153.420767][ T9015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.420832][ T9015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.420883][ T9015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.422353][ T9015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.422366][ T9015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.422389][ T9015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.476618][ T9098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.917'. [ 153.517851][ T9015] hsr_slave_0: entered promiscuous mode [ 153.518479][ T9015] hsr_slave_1: entered promiscuous mode [ 153.519078][ T9015] debugfs: 'hsr0' already exists in 'hsr' [ 153.519098][ T9015] Cannot create hsr debugfs directory [ 153.540330][ T9104] netlink: 20 bytes leftover after parsing attributes in process `syz.4.919'. [ 153.540389][ T9104] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 153.571200][ T5442] 8021q: adding VLAN 0 to HW filter on device eth7 [ 153.583622][ T9106] CUSE: unknown device info "" [ 153.585356][ T9106] CUSE: unknown device info "" [ 153.587229][ T9106] CUSE: unknown device info "" [ 153.589020][ T9106] CUSE: unknown device info "" [ 153.591810][ T9106] CUSE: DEVNAME unspecified [ 153.598752][ T9106] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 153.689711][ T8972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.727258][ T9116] UBIFS error (pid: 9116): cannot open "ubi0:testvol", error -19 [ 153.727747][ T8972] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.736115][ T8313] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.736213][ T8313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.741397][ T8313] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.741442][ T8313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.820599][ T66] Bluetooth: hci2: command tx timeout [ 153.849316][ T9015] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 153.858218][ T9015] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 153.862081][ T9125] netlink: 8 bytes leftover after parsing attributes in process `syz.4.925'. [ 153.863841][ T9015] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 153.873622][ T9015] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 153.884053][ T9015] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 153.895340][ T9015] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 153.895939][ T9015] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 153.903109][ T9015] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 153.944971][ T5442] 8021q: adding VLAN 0 to HW filter on device eth8 [ 153.952165][ T9135] netlink: 4 bytes leftover after parsing attributes in process `syz.4.926'. [ 154.005414][ T9015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.021245][ T9015] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.024588][ T8302] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.024638][ T8302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.032836][ T8302] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.032907][ T8302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.175634][ T8972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.201712][ T5442] 8021q: adding VLAN 0 to HW filter on device eth9 [ 154.262127][ T9177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.933'. [ 154.344792][ T8972] veth0_vlan: entered promiscuous mode [ 154.352618][ T8972] veth1_vlan: entered promiscuous mode [ 154.367729][ T8972] veth0_macvtap: entered promiscuous mode [ 154.374202][ T9015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.379237][ T8972] veth1_macvtap: entered promiscuous mode [ 154.388288][ T8972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.395979][ T8972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.439632][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.445364][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.475596][ T8310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.475631][ T8310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.512043][ T8315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.512087][ T8315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.530004][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.530363][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.538079][ T9201] kvm [9200]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 154.538690][ T9201] kvm [9200]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 154.617739][ T9218] ieee802154 phy0 wpan0: encryption failed: -22 [ 154.656591][ T9015] veth0_vlan: entered promiscuous mode [ 154.662523][ T9015] veth1_vlan: entered promiscuous mode [ 154.679499][ T9227] hugetlbfs: Unknown parameter 'discard' [ 154.684666][ T9015] veth0_macvtap: entered promiscuous mode [ 154.687833][ T9015] veth1_macvtap: entered promiscuous mode [ 154.696052][ T9015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.699584][ T9015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.815920][ T8315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.815970][ T8315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.872817][ T8315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.872898][ T8315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.920325][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.920391][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.920414][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.920435][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.109760][ T66] Bluetooth: hci0: command tx timeout [ 155.144604][ T8309] Bluetooth: hci1: Frame reassembly failed (-84) [ 155.163477][ T9264] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 155.163523][ T9264] overlayfs: failed to set xattr on upper [ 155.163547][ T9264] overlayfs: ...falling back to redirect_dir=nofollow. [ 155.163568][ T9264] overlayfs: ...falling back to index=off. [ 155.163594][ T9264] overlayfs: ...falling back to uuid=null. [ 155.163616][ T9264] overlayfs: ...falling back to xino=off. [ 155.221869][ T9268] netlink: 'syz.4.947': attribute type 16 has an invalid length. [ 155.221946][ T9268] netlink: 'syz.4.947': attribute type 3 has an invalid length. [ 155.222329][ T9268] netlink: 132 bytes leftover after parsing attributes in process `syz.4.947'. [ 155.280300][ T5832] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 155.429539][ T5832] usb 11-1: Using ep0 maxpacket: 8 [ 155.430389][ T5832] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 155.431523][ T5832] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 155.431564][ T5832] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 155.431584][ T5832] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 155.431604][ T5832] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 155.431624][ T5832] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 155.431665][ T5832] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.520989][ T9285] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(12) [ 155.521027][ T9285] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 155.521162][ T9285] vhci_hcd vhci_hcd.0: Device attached [ 155.648477][ T5832] usb 11-1: usb_control_msg returned -32 [ 155.648558][ T5832] usbtmc 11-1:16.0: can't read capabilities [ 155.699723][ T5519] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 155.759953][ T5519] usb 47-1: new full-speed USB device number 2 using vhci_hcd [ 155.816957][ T9294] program syz.2.954 is using a deprecated SCSI ioct ** replaying previous printk message ** [ 155.816957][ T9294] program syz.2.954 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 155.819812][ T9294] BUG: unable to handle page fault for address: fffff52000a56200 [ 155.826357][ T9294] #PF: supervisor read access in kernel mode [ 155.828894][ T9294] #PF: error_code(0x0000) - not-present page [ 155.832920][ T9294] PGD 17fff5067 P4D 17fff5067 PUD 1d6ac067 PMD 100f35067 PTE 0 [ 155.836007][ T9294] Oops: Oops: 0000 [#1] SMP KASAN NOPTI [ 155.838343][ T9294] CPU: 2 UID: 0 PID: 9294 Comm: syz.2.954 Tainted: G L syzkaller #0 PREEMPT(full) [ 155.842272][ T9294] Tainted: [L]=SOFTLOCKUP [ 155.843859][ T9294] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 155.847430][ T9294] RIP: 0010:sys_fillrect+0xc77/0x1910 [ 155.849401][ T9294] Code: 00 00 48 8d 3c f5 00 00 00 00 48 89 44 24 20 48 89 7c 24 10 48 89 74 24 30 eb 03 45 89 ef e8 e0 71 93 fc 4c 89 e1 48 c1 e9 03 <42> 80 3c 31 00 0f 85 c0 0a 00 00 48 8b 44 24 08 49 89 2c 24 49 8d [ 155.857044][ T9294] RSP: 0018:ffffc90004c375d8 EFLAGS: 00010a06 [ 155.859277][ T9294] RAX: 0000000000000000 RBX: 0000000000000190 RCX: 1ffff92000a56200 [ 155.862176][ T9294] RDX: ffff888029758000 RSI: ffffffff85787e30 RDI: 0000000000000010 [ 155.865031][ T9294] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000004 [ 155.868088][ T9294] R10: 0000000000000190 R11: 0000000000000000 R12: ffffc900052b1000 [ 155.871204][ T9294] R13: ffffc900052b1000 R14: dffffc0000000000 R15: 0000000000000004 [ 155.874094][ T9294] FS: 00007fc632ae36c0(0000) GS:ffff8880d5d61000(0000) knlGS:0000000000000000 [ 155.877295][ T9294] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 155.879727][ T9294] CR2: fffff52000a56200 CR3: 0000000025e3e000 CR4: 0000000000352ef0 [ 155.882715][ T9294] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 155.885820][ T9294] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 155.889129][ T9294] Call Trace: [ 155.890470][ T9294] [ 155.891563][ T9294] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 155.893832][ T9294] bit_clear+0x17d/0x220 [ 155.895415][ T9294] ? __pfx_bit_clear+0x10/0x10 [ 155.897171][ T9294] ? fb_get_color_depth+0x120/0x250 [ 155.899106][ T9294] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 155.899637][ T5733] Bluetooth: hci2: command tx timeout [ 155.903824][ T9294] __fbcon_clear+0x633/0x760 [ 155.905590][ T9294] ? __pfx_bit_clear+0x10/0x10 [ 155.907396][ T9294] fbcon_scroll+0x48b/0x650 [ 155.909061][ T9294] con_scroll+0x464/0x690 [ 155.910682][ T9294] csi_ECMA.constprop.0+0x1238/0x3b60 [ 155.912655][ T9294] ? find_held_lock+0x2b/0x80 [ 155.914373][ T9294] ? __pfx_csi_ECMA.constprop.0+0x10/0x10 [ 155.916449][ T9294] do_con_write+0x35dc/0x4980 [ 155.918200][ T9294] ? __pfx_do_con_write+0x10/0x10 [ 155.920073][ T9294] con_write+0x23/0xb0 [ 155.921628][ T9294] n_tty_write+0x431/0x1160 [ 155.923370][ T9294] ? __pfx_n_tty_write+0x10/0x10 [ 155.925399][ T9294] ? __kasan_kmalloc+0xaa/0xb0 [ 155.927527][ T9294] ? __pfx_woken_wake_function+0x10/0x10 [ 155.929799][ T9294] ? rcu_is_watching+0x13/0xc0 [ 155.931622][ T9294] ? file_tty_write.isra.0+0x694/0x890 [ 155.933614][ T9294] ? kfree+0x1e5/0x6d0 [ 155.935155][ T9294] ? __pfx_n_tty_write+0x10/0x10 [ 155.937022][ T9294] file_tty_write.isra.0+0x4d2/0x890 [ 155.939372][ T9294] vfs_write+0x6af/0x1050 [ 155.941258][ T9294] ? __pfx_tty_write+0x10/0x10 [ 155.943222][ T9294] ? __pfx_vfs_write+0x10/0x10 [ 155.945053][ T9294] ? find_held_lock+0x2b/0x80 [ 155.946878][ T9294] ksys_write+0x12a/0x250 [ 155.948487][ T9294] ? __pfx_ksys_write+0x10/0x10 [ 155.950293][ T9294] do_syscall_64+0x123/0x790 [ 155.952065][ T9294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.954343][ T9294] RIP: 0033:0x7fc631b9e159 [ 155.956109][ T9294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.963249][ T9294] RSP: 002b:00007fc632ae3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 155.966257][ T9294] RAX: ffffffffffffffda RBX: 00007fc631e25fa0 RCX: 00007fc631b9e159 [ 155.969239][ T9294] RDX: 0000000000001006 RSI: 0000200000002100 RDI: 0000000000000009 [ 155.972354][ T9294] RBP: 00007fc631c35024 R08: 0000000000000000 R09: 0000000000000000 [ 155.975432][ T9294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.978421][ T9294] R13: 00007fc631e26038 R14: 00007fc631e25fa0 R15: 00007ffd4b4c7918 [ 155.981150][ T9294] [ 155.982156][ T9294] Modules linked in: [ 155.983403][ T9294] CR2: fffff52000a56200 [ 155.984738][ T9294] ---[ end trace 0000000000000000 ]--- [ 155.986532][ T9294] RIP: 0010:sys_fillrect+0xc77/0x1910 [ 155.986556][ T9294] Code: 00 00 48 8d 3c f5 00 00 00 00 48 89 44 24 20 48 89 7c 24 10 48 89 74 24 30 eb 03 45 89 ef e8 e0 71 93 fc 4c 89 e1 48 c1 e9 03 <42> 80 3c 31 00 0f 85 c0 0a 00 00 48 8b 44 24 08 49 89 2c 24 49 8d [ 155.986567][ T9294] RSP: 0018:ffffc90004c375d8 EFLAGS: 00010a06 [ 155.986576][ T9294] RAX: 0000000000000000 RBX: 0000000000000190 RCX: 1ffff92000a56200 [ 155.986584][ T9294] RDX: ffff888029758000 RSI: ffffffff85787e30 RDI: 0000000000000010 [ 155.986591][ T9294] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000004 [ 155.986598][ T9294] R10: 0000000000000190 R11: 0000000000000000 R12: ffffc900052b1000 [ 155.986605][ T9294] R13: ffffc900052b1000 R14: dffffc0000000000 R15: 0000000000000004 [ 155.986612][ T9294] FS: 00007fc632ae36c0(0000) GS:ffff8880d5d61000(0000) knlGS:0000000000000000 [ 155.986634][ T9294] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 155.986644][ T9294] CR2: fffff52000a56200 CR3: 0000000025e3e000 CR4: 0000000000352ef0 [ 155.986651][ T9294] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 155.986657][ T9294] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 155.986666][ T9294] Kernel panic - not syncing: Fatal exception [ 156.024518][ T9294] Kernel Offset: disabled [ 156.025969][ T9294] Rebooting in 86400 seconds.. VM DIAGNOSIS: 05:11:43 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88805bbf8640 RCX=ffffffff89955ccc RDX=0000000000000302 RSI=0000000000000000 RDI=ffff88801f280000 RBP=ffff88805bbf8780 RSP=ffffc90000007580 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=000000000000761b R12=ffff88805bbf87fe R13=0000000000000000 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff899560a2 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5b61000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc631b87780 CR3=000000003c46b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001030001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3983f5d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc0dc0dfe6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc0dc0dfe6 00007ffc0dc0dfec ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3983235607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3983235647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39832357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3983235639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0440030020001600 a80104017a000500 08120e60133a1405 ff00100015d8f881 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39833f25f8 00007f39833f25c8 00007f39833f2600 00007f39833f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000f0ef RBX=0000000000000002 RCX=000000000000f0ef RDX=dffffc0000000000 RSI=00000000000ad387 RDI=ffffffff92ab9658 RBP=ffffc900006b0a50 RSP=ffffc900006b0998 R8 =0000000000000000 R9 =0000000000000000 R10=ffffc900006b0a08 R11=000000000000f0ef R12=ffffc900006b0a58 R13=ffffc900006b0a08 R14=ffffc900006b0a3d R15=ffffffff81f0efef RIP=ffffffff81b993b6 RFL=00000a02 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5c61000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055d43df1af40 CR3=0000000055b9b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000003172 656c6c616b7a7973 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffb79b3fc6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffb79b3fc6 00007fffb79b3fcc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f989a635607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f989a635647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f989a6357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f989a635639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 425a98740cb7b5dd cb2ce317292d95c0 c68250c5465daa3f 332f79a8ee55be4d ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000700080006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e8c8f49ff65d14b5 773d1c3bf2eabbe4 e206ae7f40a979d4 2115b65b3df9addf ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 52a2c24b0117996c 24dd8ce19afe1c6c 1fd8c17de71b33d2 bafa84af0b39ae91 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 39bdf2941fa53874 7c7d93c19c832f5a 3696a335cf2174c6 b3891f49df86531f ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8b7eedb6a55034e1 bb50a17858d73411 a8e5efc17566235d 407ce8c8f49ff65d ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 14b5773d1c3bf2ea bbe4e206ae7f40a9 79d42115b65b3df9 addf14705b0df563 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85afe815 RDI=ffffffff9bc63ca0 RBP=ffffffff9bc63c60 RSP=ffffc90004c36ce8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=727265203a465023 R12=0000000000000000 R13=0000000000000020 R14=000000000000000b R15=ffffc90004c37000 RIP=ffffffff85afe83f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fc632ae36c0 ffffffff 00c00000 GS =0000 ffff8880d5d61000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=fffff52000a56200 CR3=0000000025e3e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffffc00 Opmask01=0000000000000000 Opmask02=00000000fc02fefe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc632ae2be0 0000003000000010 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd4b4c7e06 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd4b4c7e06 00007ffd4b4c7e0c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc631c35607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc631c35647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc631c357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc631c35639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3067732f7665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1344500c5546470c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc631df25f8 00007fc631df25c8 00007fc631df2600 00007fc631df25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000002 RCX=0000000000000000 RDX=ffff888029842580 RSI=ffffffff81ff305e RDI=ffff888029842580 RBP=ffff88806a643cc0 RSP=ffffc900040178a0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=000000000000761b R12=ffffed1005308763 R13=0000000000000003 R14=ffffed100d4c8799 R15=0000000000000001 RIP=ffffffff81ff3060 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5e61000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000001080 CR3=000000000eb96000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 357a79732f74656e 2f70756f7267637a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffb79b3fc6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffb79b3fc6 00007fffb79b3fcc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f989a635607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f989a635647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f989a6357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f989a635639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000