last executing test programs: 9m1.404515569s ago: executing program 1 (id=315): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1de) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='0', 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000702000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000007000000b7050000400000006a0a80fe000000008500000053000000b7000000000000009500001000000000a80501363034fdb117168bd07ba00af739d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945f105d802f5132143c0a9fc7a84452569957c1002ed7d4d8e17f791f4798c8eb483e9973320d046c3126c6afcfd84de03352c69b3edff5be26f8ffa5f8f2879021c2ea53ea79acd7fb38dd1abb75aa393cea26d465637d11f705000000473e7b7c4ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057844f226ef4e912f01a201e694e3806e8c70e8b69524cd19f7525d8d66bb766f7f3f918c86a70252236800001897133af94a5a4cfc794d8b9d7c33632152c48eaf302f0b2e0c252b00000000000000006f1bbefbe08de65e3762e194ba4cae8b13535d7d11ee917bca4885bbf597a14ab2458efce78510d86272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36bed435000025ecd201d2ffb0a7fa4f5d11060cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b9d86329bd5b4697336112b0b8754ce3574046bf6114d1a88597850b77378fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f3faf37ebdfccea0c002ad2b42047c9ec43193ccf617dbf8a12b4f189edbf9fb7c42b1f435ccd4d96822e6b70100912c92e3943e9c4f45d8bcd528fa8a3ea847f10e9b2506f3bb506f1d7fbde8010000000000a073d0de5538ab42e170b3baae34c35987b0dda497ac3f5e97e6e6aeea15c6d5ed24310100000003bb6030f84b63aaf8690db0221b1705c501f802ff59b4e683efa4b6e77e042072bd2ac37d413008ec9eb8166f6e28b49a77ed91befc65315896f88a8fb1dd679fb4c515f8b7a5b7aca6a251a89d47b728502f7e621cc0e3ba04000000c149ee6601728c750d304197c22da8650579475afd96187d881e93b42a5fdfd686d8900c44c67133dad58037fda65885a15a429edfe3027a5ebf95254744f10fd607bc3300b94932b8d944e0b083bbd86b19cb074577a25ff581d92af08a06f857310a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6a1def886c95676dce6a8194479700a02b92bdc8d05eae1f24fdd7b80d1bb404c22f681594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4c2d7acf1dfe79d6771903b76e21190c22d641030e1ddacf006c3116e1803af20a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f0001000077339b4200000000108a3c87b19d5b9a00c75d84a92d6dcf00ba96edf35ede0e2b57c26e94801b498924166bde57d5f24258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548971d5d16296dd08e020000007a27310d5d01f8a8a0f5212d7f628f554afea715ccbc66cbb1016490f5d579308cb3188cf2fcaf67e0c16443d526ba4b968f07ae362c2133c168313e84beb871203880dd453c45d0a137d7f5a8b039dbfa62fb2b4214f8e69f967bf1fbd89e77fcca110000000800000000000000f8877994ebdc35f7efd41e3babd9b3782edd6776d5b6cb4ecd72c9de9b5503747d71440378cf2c2c7ea2dc5febb654a867f853713cf4c0bb322fbbe446d18dee4c821275ef18259cafc346c8b3b9fb0f3adcf6ea310a6b9a3f59e29a5909ea047fb61affb4bc8bbea1fb761b8933795b1a91358a7791aa843d07020e8bb6fc18458c49ac6313e7165b7d9f65e94a62b69f1011b94340cdb7303f01e5cdb5682ddf73d65c3de1d88dd7496d6345d5b9de0223988056a53e19a8b96b9640bc6c09d3c2ff894d626b57c776ed53f94d5e22ff148061b37f72bd92924cb1d0a725e19b264346b7cae0251a850de78316503f3c3d395c7e3f04fc8d52583327cd2341ce4b2d092815376299686f41353b2823814563011a2223b9dd00000000000000000000003a131374a3371cb3e2a9bb4d798b91cefa444501f40b7c9589e8c0bb6c82123d2b45ce905d0903b32ecf30e828c71a07a83f3275f3d661d1af0ffbd5d7f0"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 9m1.167189995s ago: executing program 1 (id=316): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r0) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000d40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x54, r2, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x1771de2af059c3cf}, 0x80c0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bd612a7b6726dd273aa1db06d6529f7379717ac3f8140000000000000001705e7d10bd2fab25d244a27dad188215068acbbdb3f5ec82836ba5357dce37872f49fc9b73644a0be83e3088de6b61b9b6da8a69bda2561230a377a872744193232250eb3928d5e4be57a9529f0023f1c2425eb077ec4c9df52130ded40a8ff1d2285f5589fb82ef24e8cc8cbe29db94c8fff73eb566870bfdcffab34e75c90e91ebd0d014baf27951cda67d6c67244793e211bf0470b46c387a5ff223935498f3081c655f6d47c665eb7fe6073518240c9b2987b6b1ff07214316174b483d8e53517bc2ae4a9f2f2bef665712ca5b64f1ef3325e6923da065934f0184bec45759641aa2f42e6b5f06123b5b239573a1c8e033b07982f6fd3149840c5106f6974d8e201242f662014e44ed9a647569170cf7468fc4ee2c2f80f89c9b2a9c04bd3e7d5434282b29e3ec1911d005017bf06c9b8bf88349b466cf691cb74fc9b182207805b01999f2962198288583575c64f3f485aaf3fe1bd16f15cc45", @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf251a00000018000180140002006e657464657673696d30000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20008080}, 0x4000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r3) r5 = socket(0x2c, 0x803, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000dc0), r5) r8 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r8, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @empty}}, 0x24) listen(r8, 0x5) recvmsg(r8, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x40) sendmsg$TIPC_CMD_GET_LINKS(r6, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x24, r7, 0x8, 0x70bd29, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0xd06}}, ["", ""]}, 0x24}}, 0x881) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x7, 0x8000, 0x0, 0x7, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2, @rand_addr=0x64010102}}}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f2, &(0x7f0000000500)={'syztnl1\x00', 0x0}) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x30, r4, 0xc3219fe22fdf3a2b, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x57f}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x40000) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000000), 0xc, &(0x7f00000006c0)={&(0x7f0000000380)={0x314, r4, 0x4, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7a9a}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0xd8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc1}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x4, @loopback, 0x101}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x400, @private1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2a0b457d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8acd4c29}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6aeb7a72}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6168}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x63d9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}]}, @TIPC_NLA_BEARER={0xa4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth1_virt_wifi\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6gre0\x00'}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x500}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbd}]}]}]}, 0x314}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004881) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'syztnl0\x00', &(0x7f0000000740)={'gretap0\x00', 0x0, 0x1, 0x20c54a2559a53eb2, 0x4, 0x4, {{0x25, 0x4, 0x3, 0x6, 0x94, 0x68, 0x0, 0x9, 0x29, 0x0, @remote, @multicast2, {[@rr={0x7, 0x1b, 0x72, [@loopback, @dev={0xac, 0x14, 0x14, 0x35}, @multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x26}, @broadcast]}, @timestamp={0x44, 0x18, 0x26, 0x0, 0x6, [0x7, 0x3ff, 0x5, 0x0, 0x4]}, @lsrr={0x83, 0x17, 0xee, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @local, @empty]}, @timestamp_addr={0x44, 0x2c, 0x30, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x37}, 0x5}, {@loopback, 0x5}, {@loopback, 0xb}, {@loopback, 0x2}, {@empty, 0x6b}]}, @ra={0x94, 0x4, 0x1}, @end, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000008c0)={'syztnl1\x00', &(0x7f0000000840)={'gre0\x00', 0x0, 0x40, 0x8000, 0x8, 0x5f3, {{0x14, 0x4, 0x1, 0x6, 0x50, 0x67, 0x0, 0x93, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @dev={0xac, 0x14, 0x14, 0xd}, {[@lsrr={0x83, 0xf, 0xfb, [@rand_addr=0x64010100, @private=0xa010102, @loopback]}, @rr={0x7, 0x23, 0x8a, [@broadcast, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x14}, @local, @empty, @dev={0xac, 0x14, 0x14, 0x3d}, @multicast1]}, @rr={0x7, 0x7, 0xb2, [@rand_addr=0x64010102]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000980)={0x1, 0x58, &(0x7f0000000900)}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000009c0)={'wg1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000a80)={'erspan0\x00', &(0x7f0000000a00)={'gre0\x00', 0x0, 0x873f, 0x8000, 0x9, 0x597f18c1, {{0x10, 0x4, 0x3, 0x34, 0x40, 0x66, 0x0, 0xe, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@generic={0x44, 0xa, "de11049598c3ad8c"}, @generic={0x88, 0xe, "dfbd4a98c4573dee60cd80ef"}, @rr={0x7, 0x13, 0x5a, [@rand_addr=0x64010101, @broadcast, @rand_addr=0x64010100, @remote]}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f00000012c0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001280)={&(0x7f0000001000)={0x24c, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x238, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x114, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5c}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '=\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '-#^[,\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '$}*{):\\{\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'hsr0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '!,}#.\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_BITS={0x50, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'hsr0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xeef}]}]}, @ETHTOOL_A_BITSET_MASK={0xa4, 0x5, "58445c76cb8d8e18522ce0e86f52003702f727a257e29121fa1807ebc7f1274fe26c989462d8e2a0b667e23592f370d538e305cfcff0546a61fb7f083e6aedbd523982d88758125737378c9286ddb99a886628e6636ba4f7d5da2bc2e6de7791ca70c55cae666fb97f9b576a7887ed9d297c69c5bd37f1364633defcf44a7c0d2a990ba73d9741df814ceba15fde4548c79d5d42f9bd6c2c9768f75f645ace1d"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1000}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000ac0)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000c40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000ec0)={0x114, r1, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x8800}, 0x24044005) 9m0.610259515s ago: executing program 1 (id=318): capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000200)={0x200003, 0x200003, 0x801, 0x80000001, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./bus\x00', 0x1d8) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xf0ffffffffffff) 9m0.441998429s ago: executing program 1 (id=319): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@initr0, @alu={0x7, 0x1, 0xb, 0x0, 0x0, 0x8}]}, &(0x7f0000000000)='GPL\x00', 0x8}, 0x94) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$packet(0x11, 0x3, 0x300) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r2}, 0x20) (async) socket(0x10, 0x803, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x9ffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000000000), &(0x7f0000000100)='%+9llu \x00'}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18070000000000000000000000800000851000000300000018110000", @ANYRES32=r4, @ANYBLOB="00000000000000009500007b00000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) r5 = fsopen(&(0x7f0000000180)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async) r6 = fsmount(r5, 0x0, 0x9) quotactl_fd$Q_GETQUOTA(r6, 0xffffffff80000701, 0x0, 0x0) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f00000002c0)={0x4, 0x4}, 0x4) 9m0.257669227s ago: executing program 1 (id=320): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000040)=0x10, 0x4) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x42000, 0x22) mkdir(&(0x7f0000000400)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='myproc\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {r4, 0x8}}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='myproc/modules\x00', 0x0, 0x0) read(r5, &(0x7f0000000540)=""/1000, 0x3e8) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f00000000c0)='\x00', &(0x7f0000000100)='./file0\x00', r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket(0xa, 0x5, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) ptrace(0x10, r6) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r6, 0x10, &(0x7f0000000040)={0x100000001}) 8m59.172593986s ago: executing program 1 (id=323): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x89, &(0x7f0000000080), &(0x7f0000000140)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0) fchdir(r1) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./bus\x00', 0x1d8) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) ioctl$PTP_EXTTS_REQUEST2(r2, 0xc0046686, 0x0) linkat(r2, &(0x7f0000000280)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) membarrier(0x10, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x30, r5, 0x5, 0x70bd29, 0x1fffe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}, 0x30}}, 0x4000004) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) truncate(&(0x7f0000000000)='./cgroup\x00', 0x3) 8m58.80032188s ago: executing program 3 (id=325): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') lseek(r1, 0x2004, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setuid(0xee01) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r1}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000080}, 0x8045) r3 = io_uring_setup(0xa4d, &(0x7f00000007c0)={0x0, 0xc89e, 0x200, 0xb, 0x1cf}) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000300)={0x0, &(0x7f00000000c0)=[@nested_vmlaunch={0x12f, 0x18}, @wr_crn={0x67, 0x20, {0x2, 0x5}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @guest_nat=0x6806, 0xffff, 0x5, 0xff}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @wr_crn={0x67, 0x20, {0x3, 0x1cefb9d0}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @guest32=0x4802, 0x80, 0x8, 0xffff}}], 0x110}) r5 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r6], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x5, 0x5, 0x2000, 0x1000, &(0x7f0000ff4000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000280)={0x7}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) inotify_init() r7 = getpid() r8 = getpid() syz_pidfd_open(r8, 0x0) r9 = openat$cgroup(r1, &(0x7f0000000700)='syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000740)={0x8000000, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000380), {0xc}, &(0x7f0000000400)=""/13, 0xd, &(0x7f00000005c0)=""/223, &(0x7f00000006c0)=[r7, r8], 0x2, {r9}}, 0x58) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r10, 0x0, 0xc8, &(0x7f0000000480)=0x1, 0x1) 8m57.962421145s ago: executing program 3 (id=328): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, 0x0, 0x6, 0xc, 0x100, 0x6, 0x180107, r1}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r5) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xc0701, 0x0) write$sequencer(r6, &(0x7f0000002100)=ANY=[@ANYBLOB="04000000000000008108"], 0x10) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {0xfff2, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x20048081}, 0x0) 8m56.603751621s ago: executing program 3 (id=332): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/lvs/new_id\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='1d6b 0001 0\x00', 0xc) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/lvs/bind\x00', 0x1, 0x0) write(r4, &(0x7f0000000200)='1-0:1.0\x00', 0x7) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x1, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 8m55.368009274s ago: executing program 3 (id=342): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r0 = socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000500)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000e9258d41626947356d043c1ab481505a9d7717af19fb0ca51886f875789dedb3248f534357d8a372017052ba8e8e8dbdea47e7a7e743ac2c430dc8936ecd7a574c9b6cabb22485bfa9247ae58724884a0001209feccfaf3666c762bd3df85b9dd511d15f454d05f3fef5296ee60a3e4915eb8583f103e3469016e25e9f032f491a18f2da1e1c9dd8c5013f2525dfcb373bb375cafc01e8cb", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000500"/28], 0x48) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x80000001}, @TCA_U32_FLAGS={0x8, 0xb, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044041}, 0x4040050) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x3c, 0x0, 0x0, 0x200}, {0x6, 0x8, 0x6}]}) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$NILFS_IOCTL_SET_SUINFO(r1, 0x40186e8d, &(0x7f0000000280)={&(0x7f00000001c0), 0x0, 0x20, 0x51d, 0x2}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r3, r7, &(0x7f0000775000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x70bd25, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_ID={0x8, 0x6}, @NHA_OIF={0x8}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c001}, 0x240048c0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000000)) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000003c0)=0x0, &(0x7f00000004c0)=0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@ifindex=r9, 0x11, 0x1, 0x5, &(0x7f00000001c0)=[0x0], 0x1, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0]}, 0x40) ioctl$KVM_RUN(r7, 0xae80, 0x0) r10 = socket(0x6, 0x5, 0xab) connect$inet(r10, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) ptrace(0x10, r2) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x10, &(0x7f0000000040)={0x100000001}) 8m53.028753577s ago: executing program 3 (id=335): r0 = syz_open_dev$dvb_demux(&(0x7f0000000180), 0x9, 0x13d402) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20a40, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc1b}, 0x28) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6, 0xe, 0x4, 0x4, 0x2, 0x1000, 0xf1, 0x0, 0x7fffffffffffb, 0x5, 0x0, 0x1, 0x0, 0x5, 0x0, 0xbde], 0x1000, 0x3c4210}) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000200)={0x200000, 0x0, 0x2b}, 0x18) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40408d6}, 0x24000010) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r0, 0x6f2d, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x17a) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) r7 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000000)={'gretap0\x00', &(0x7f0000000080)=@ethtool_dump={0x3f, 0x7ffd, 0x2b2}}) syz_open_dev$dri(&(0x7f00000001c0), 0x1, 0x282202) write(r4, &(0x7f0000000100)='select \n', 0x10) write(r4, &(0x7f0000000100)='file read /etc/passwd 0xffffffffffffffff}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x89, &(0x7f0000000080), &(0x7f0000000140)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0) fchdir(r1) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./bus\x00', 0x1d8) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) ioctl$PTP_EXTTS_REQUEST2(r2, 0xc0046686, 0x0) linkat(r2, &(0x7f0000000280)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) membarrier(0x10, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x30, r5, 0x5, 0x70bd29, 0x1fffe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}, 0x30}}, 0x4000004) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) truncate(&(0x7f0000000000)='./cgroup\x00', 0x3) 8m36.392342836s ago: executing program 33 (id=340): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x800000) pwrite64(r0, &(0x7f0000000100)="0000004200000000010000000008", 0xe, 0x1be) pwrite64(r0, &(0x7f0000000110)="55aa", 0x2, 0x1fe) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) 2m32.129718055s ago: executing program 4 (id=3289): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x3, 0x5, 0x72dc, 0x3, 0x1, {0x0, 0x9, 0x7, 0x1, 0x89, 0xd615, 0x9, 0x4, 0x80000001, 0x8000, 0x2, 0x0, 0x0, 0x3, 0x1}}, {0x0, 0x13}}}, 0xa0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c00018006000600843b00000c000280080017"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc038563b, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1}) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x20, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r3 = semget$private(0x0, 0x4, 0x2) semctl$GETPID(r3, 0x0, 0xb, &(0x7f0000000000)=""/231) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000004c0)=@setlink={0x96, 0x13, 0x10, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x35625, 0x40040}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_vlan\x00'}, @IFLA_ADDRESS={0xffffff9d, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x48000) 2m32.070208401s ago: executing program 4 (id=3291): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc8c0}, 0x2) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7103"], 0xb6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 2m28.997959039s ago: executing program 4 (id=3308): r0 = syz_open_dev$video(&(0x7f00000000c0), 0x8, 0x82341) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0x1, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x14d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x6, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x40000001, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x4, 0x80003e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x2, 0x3, 0x5, 0x6, 0x8, 0x4, 0x80000001, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c9, 0xc, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x74, 0xea4, 0x0, 0x8, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0xffffff75, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x7], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x17, 0x1c, 0x120000, 0x3, 0x8, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x108, 0x9606, 0x7, 0x2, 0x4, 0x8006, 0xfffffffe, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x20006c1f, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) (fail_nth: 1) 2m28.780885165s ago: executing program 4 (id=3311): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newtfilter={0x84, 0x2c, 0xf3f, 0x70fd28, 0x25dddbbf, {0x0, 0x0, 0x0, r2, {0x5, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x54, 0x2, [@TCA_BASIC_EMATCHES={0x50, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x44, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x0, 0x7, 0x5}, {{0x1, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}}}, @TCF_EM_IPT={0x2c, 0x2, 0x0, 0x0, {{0x6, 0x9, 0x6}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) (fail_nth: 1) 2m28.570597162s ago: executing program 4 (id=3313): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xfff2, 0xf}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x92, 0x4, 0x7, 0xffeffffc}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}}, 0x4c800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$tipc(0x1e, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000500)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3f}, 0x80, &(0x7f0000000080)=[{&(0x7f00000002c0)='\r', 0x1}], 0x1}, 0x4) 2m28.35278268s ago: executing program 4 (id=3315): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) sendmmsg$sock(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="c9", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, r2, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0xffffffffffffffff, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r2, r3, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f00000000c0)=0x58, 0x5) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000601, r2, &(0x7f0000000080)={0x5, 0x7fffffffffffffff, 0x1, 0x3}) 2m12.805792024s ago: executing program 34 (id=3315): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) sendmmsg$sock(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="c9", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, r2, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0xffffffffffffffff, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r2, r3, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f00000000c0)=0x58, 0x5) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000601, r2, &(0x7f0000000080)={0x5, 0x7fffffffffffffff, 0x1, 0x3}) 1m1.156073129s ago: executing program 0 (id=3700): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbfe, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) (fail_nth: 7) 1m1.028366751s ago: executing program 0 (id=3703): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x1, 0x28, 0xe4d, 0x80, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x7543, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ecm(0xfa13646e8d91cf2d, 0x69, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x57, 0x1, 0x1, 0x5d, 0x80, 0x4, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x4, {{0x7, 0x24, 0x6, 0x0, 0x0, "cb1f"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x0, 0x401}, [@mbim={0xc, 0x24, 0x1b, 0x2, 0x7, 0x8, 0x2, 0x3, 0xf1}, @obex={0x5, 0x24, 0x15, 0xfffd}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x470, 0x9, 0xf1, 0x7}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x5, 0x40, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x3, 0x5, 0xfc}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x5, 0x3, 0x0, 0x8, 0x4}, 0x60, &(0x7f0000000780)={0x5, 0xf, 0x60, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0xc8, "a7e14ff9125acbce3df033d0acb4cc10"}, @generic={0x3d, 0x10, 0x4, "1c7c744e2b640462ce5644878bfe5319b37efdaff938ed718cea39951d045351ed3cff48a28dcc2f4495653bab6a7c323256cc4ade77a58b871e"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0xb7, 0x2, 0xfb94}]}, 0x6, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x82c}}, {0xdf, &(0x7f0000000280)=@string={0xdf, 0x3, "c17fe184921345a323c443bc70fdec17885a59f28d7ff680f6df2988f78029b71c6c8d75e057b14be275b7a724d6522047d96edca797fcaf0e12c1d686b417c0b8fed1a924d742ab2940da4da6fda346abf224373225fb7a330e369300555d20bc793f5a6a230ac2520a747734ae2d4412d74c22c027dc355f2e79eedc763d5346529cf78040c89eeb69fe8470c117eec29653df5c45b995d8b3700aad00d02a99bb9e208ab6ea552a67b0e386846ce2a8f29fb790be30d00b5d4df1106f016ee35281331e6f1ea6494863c307c31847680919c271c30286543b21fc3a"}}, {0x9c, &(0x7f0000000380)=@string={0x9c, 0x3, "efe4bb8a6fbca917e685007d41c0e3d987988ba206f4ee6693fc24e3f72a10aeb760c56c43a219cc5e28b1a1cc4a90f041c6a9e2d12d3b21dbcb5a94f7114ed990c568b3888c2557c8b3cefcb775484e1505dfbfe08526e73660d2e1601b534387ac6ee1a525fc720fd00bf03bcf55c4336c8e51232c716762a3e84f0872084b397eb29ed0512d07eba450a34ed79a5071f7596b5d27fcbf463b"}}, {0xfffffffffffffea2, &(0x7f00000006c0)=@string={0x0, 0x3, "18e4651e54cf5af647d92ba077080f6a52b428790a5ebf0d9ccf1b1b458641a87f434b8d3b3fde85f4a7b5026c23c31639b5b53e0625511fefbae4e1c790bc690f9f3b530e7e052fede6c47ca4b0b28eb4d5c76a02cb6aece6644904c844e227f18a531782fbbec91e51c2bdc9220a5adeee697a52ab192afb841248269e4126a85150ac12c198278b8c3bdd1b252012e1042e176aece38032ea133ee2674ed1768767ef770b5f0169754531b4b7fc"}}, {0x62, &(0x7f0000000480)=@string={0x62, 0x3, "82c566a8927412a245b30a4c354a8b979ce1a8e62852283e4fb1e94dae6d432ebde1da93782c9b1a5699832d16f4703c6643dd488c87c6201171289610295e86d7b25b57604bdc3d3e5e17222ee8eb80f461f757ce871fc835c3dd5745267625"}}, {0xfb, &(0x7f0000000540)=@string={0xfb, 0x3, "3f67a0162981ddf895d76af8cac033656f2fd93746efc3e3ac5f2c8cdab2aa3b4cf9d40c13f3921d01be730308adc98b19c1d0fea9fbd3991e9ffbfc422173ba1a6b90a051dc087d73651512a66442a077d5fbc3fc4e3748c67fd4f546f1b524d3a0d46791cc613ec6fda91ec6315690e324795b6a4428c6524e0bb6409cb3666b12061cab180e335815be7bf095863d2f478bd35b4384b3710d8d37c1dcbbf58c26f66fea41d52180d468be61cc176e94ce89bcd7d0d9dd9839fe338f70b8557d3bb50a33e9bd4a56370694e6052b4a33d7892f8491fb0ea26eb1896c5d607cc88f9f0d8bcb16bcb48be00cfe834ca370adcbb9147eb89c32"}}]}) syz_usb_control_io(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000500)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x6, 0x4, 0x3, 0x33, 0x20, 0x66, 0x0, 0x3d, 0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x44, 0x4, "0f24"}]}}, {0x1e, 0xb, 0x0, @loopback}}}}}, 0x0) socket(0x840000000002, 0x3, 0x100) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3000a}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 58.850179805s ago: executing program 0 (id=3710): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r2, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r1, 0x407, 0x4100004) (async) fcntl$setpipe(r1, 0x407, 0x4100004) write$eventfd(r1, &(0x7f0000001100)=0xffffffffffffffff, 0x8) syz_open_dev$cec(&(0x7f0000000180), 0x0, 0x400) (async) r3 = syz_open_dev$cec(&(0x7f0000000180), 0x0, 0x400) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)={0x20, r4, 0x3, 0x70bd27, 0x25dbdbfb, {}, [{{0x8, 0x1, r7}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x4004044) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)={0x20, r4, 0x3, 0x70bd27, 0x25dbdbfb, {}, [{{0x8, 0x1, r7}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x4004044) ioctl$CEC_ADAP_G_CONNECTOR_INFO(r3, 0x8044610a, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r9, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r9, 0x0) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r8, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0xc8a) writev(r8, &(0x7f0000000300)=[{&(0x7f00000005c0)='n', 0x1}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) recvfrom(r8, &(0x7f0000000140)=""/146, 0x92, 0x10000, 0x0, 0x0) 58.628253122s ago: executing program 0 (id=3711): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20008080) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x1f00, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300c6a41dee000000003a49490834eb16000f0200230a0001006f776e657200f0000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) 58.560511745s ago: executing program 0 (id=3712): r0 = socket$inet(0x2, 0x3, 0x4) socket$inet(0x2, 0x3, 0x8) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x10202, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000080)=0x3) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x79) sendmmsg$inet(r0, &(0x7f0000001600)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}], 0x1, 0x10040000) 58.560131808s ago: executing program 0 (id=3713): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000200), 0x5ac02, 0x0) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_TIMESTAMP_INFO(r0, 0xc0106440, &(0x7f0000000280)={0x2, 0xff, &(0x7f0000000240)}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r3, 0x0, 0x0) listen(r3, 0x10) r4 = syz_open_dev$radio(&(0x7f0000000240), 0x2, 0x2) ioctl$VIDIOC_S_FREQUENCY(r4, 0x402c5639, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mount$9p_virtio(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) renameat(r5, &(0x7f0000000080)='./file1\x00', r5, &(0x7f0000000000)='./file0\x00') r7 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x200) ioctl$NBD_DISCONNECT(r7, 0xab08) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r8, 0xc0045006, &(0x7f0000000100)=0x60) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x6}]}) close_range(r9, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$l2tp(0x2, 0x2, 0x73) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000000), 0x208e24b) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 42.748131408s ago: executing program 35 (id=3713): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000200), 0x5ac02, 0x0) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_TIMESTAMP_INFO(r0, 0xc0106440, &(0x7f0000000280)={0x2, 0xff, &(0x7f0000000240)}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r3, 0x0, 0x0) listen(r3, 0x10) r4 = syz_open_dev$radio(&(0x7f0000000240), 0x2, 0x2) ioctl$VIDIOC_S_FREQUENCY(r4, 0x402c5639, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mount$9p_virtio(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) renameat(r5, &(0x7f0000000080)='./file1\x00', r5, &(0x7f0000000000)='./file0\x00') r7 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x200) ioctl$NBD_DISCONNECT(r7, 0xab08) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r8, 0xc0045006, &(0x7f0000000100)=0x60) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x6}]}) close_range(r9, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$l2tp(0x2, 0x2, 0x73) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000000), 0x208e24b) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 5.889971412s ago: executing program 5 (id=3994): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d00000905820200040000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x1, 0x28, 0xe4d, 0x80, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x7543, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 5.889562227s ago: executing program 2 (id=3995): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x8d, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000080)={{0x5, 0x1, 0x0, 0x8, 'syz1\x00', 0x200}, 0x0, 0x20, 0x9, 0x0, 0x0, 0xf2, 'syz0\x00', 0x0}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[], 0x0, 0x80, 0x0, 0x0, 0xf9}, 0x28) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) readv(r2, &(0x7f0000000300)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000140)={0x2, 0x0, @ioapic={0x40000, 0x3587, 0x2, 0xee1, 0x0, [{0x4, 0x4, 0x80, '\x00', 0x45}, {0x8, 0x8, 0x2, '\x00', 0xa}, {0x0, 0x5, 0x7, '\x00', 0x9}, {0x7, 0x0, 0x7, '\x00', 0x40}, {0xd0, 0x4f, 0x7, '\x00', 0x8}, {0xd6, 0x7, 0x7, '\x00', 0x1}, {0x6, 0x40, 0x3, '\x00', 0xf2}, {0x80, 0x8, 0x7, '\x00', 0xff}, {0x5, 0x2, 0x8, '\x00', 0x9d}, {0x4, 0x6, 0xff, '\x00', 0x4}, {0x6, 0x4, 0xce, '\x00', 0xd}, {0xc7, 0x7, 0x0, '\x00', 0x6c}, {0xc, 0xc, 0x5}, {0xbf, 0xa, 0xa2, '\x00', 0xff}, {0x5, 0x0, 0x4, '\x00', 0x1}, {0x0, 0x7, 0x3, '\x00', 0x8}, {0x6, 0x7, 0x5, '\x00', 0x8}, {0x9, 0xb2, 0x5}, {0x2, 0x7, 0x2, '\x00', 0xb7}, {0x2, 0x2e, 0x5, '\x00', 0x5}, {0x8, 0xc, 0x6, '\x00', 0x3}, {0x40, 0xba, 0xca, '\x00', 0x7}, {0xff, 0x14, 0xf, '\x00', 0xa}, {0x9b, 0x9, 0xa, '\x00', 0x1}]}}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f00000009c0)={&(0x7f0000000580)={{@my=0x0, 0xa}, {@my=0x0, 0x7}, 0x400, "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"}, 0x418, 0x4}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0100000005181d3dc829fc394a30b1b80300008f00000000000001cfb269680238cf02da0052a905bbb150a70100000000"], 0x48) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) r5 = socket(0xa, 0x3, 0xff) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000000)={r5}) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r9, 0x2a) bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="0d99dba6bd67e737daf20000290000000089f1b779d10000000000000021791db1945a54622750af7752bf633c63e60fbfc789fda9dbd3f98d34c29c5e264c2ceaae0fd45b2ed97cb0b5847999ac8add29e4ebcef3e49aacb6ce495740096dce1b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="be63d876dab1b23ccc70f2348186516843244b394a5fc5e979e1cd50ff1a78491cbee64cde7904a350939485bff40b87c3369895630c60d78310c3d2c0cc908dc4fc515f5520c25e98f627032ab958300712f64987bb8cc696aff7ccf9670772f75488fc95a6217b7e6aac7e7e356253e57bac88dbff8662cc8e7f8b242910e8b9b1dce3ad54c15e34d0aa0ff90b3035cbe7883c77ce", @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r7}, &(0x7f0000000000), &(0x7f0000000040)=r8}, 0x20) write(r6, &(0x7f0000000100)='zstd', 0x4) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0xf266, r4}, 0x38) 5.009180269s ago: executing program 2 (id=4004): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f000000b780)={&(0x7f0000000000)=ANY=[], 0x268}, 0x1, 0x0, 0x0, 0x4891}, 0x800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="040029bd7000ffdbdf250500ee000f0000000800ef00010000000800ef00080000000800ef000c00"/54], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x195cca5d971a8eb3) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="60000000100001060000000000000000000000000000000000000000000000000d000300626172657564703000000000300012000c00010062617265756470002000020006000100b5120000060002008847000006000300e8030000040004"], 0x60}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0xfe80, &(0x7f0000004a00)=[{&(0x7f0000000440)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400220000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4000000004c94215d121cd0c53e27eec317", 0xd8}], 0x1}, 0x800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f00000000c0)={0x6a, 0x3, 0x4, {0x1, @vbi={0x10000, 0xfffff7f3, 0x9, 0x20385655, [0x0, 0x4], [0x1, 0x6], 0x1}}, 0x88}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRES16=r5, @ANYRES16=r2, @ANYRESOCT=r6, @ANYRES32=r7, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}, 0x1, 0x0, 0x0, 0x200c8880}, 0x0) io_uring_enter(r6, 0x1029, 0x76d7, 0x8, &(0x7f0000000580)={[0xfffffffffffffff9]}, 0x8) 4.849760068s ago: executing program 2 (id=4007): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x1801a, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0xa) r2 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0xc0b45545, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000040)={[0xffff, 0xfffffffffffffffe, 0x2e, 0xa50, 0xffff, 0xffff, 0x5, 0x7, 0x6, 0xfc, 0x6, 0x1, 0x100, 0x40000000001, 0x0, 0x9], 0x1, 0x360200}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x10815, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}}, 0x50) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xf2, 0x5, 0x0, '\x00', 0x8001}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) openat$cgroup_devices(r3, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) 4.599991888s ago: executing program 6 (id=4011): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 3.999325198s ago: executing program 2 (id=4014): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x400) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xfff2, 0xf}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x92, 0x4, 0x7, 0xffeffffc}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}}, 0x4c800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$tipc(0x1e, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000500)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3f}, 0x80, &(0x7f0000000080)=[{&(0x7f00000002c0)='\r', 0x1}], 0x1}, 0x4) 3.837394092s ago: executing program 5 (id=4016): r0 = socket$inet(0x2, 0x3, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x8) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) sendmmsg$inet(r0, &(0x7f0000001600)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}], 0x1, 0x10040000) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x9, 0x800000000004, @tid=r1}, &(0x7f00000000c0)) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000080)=r1) 3.809751672s ago: executing program 5 (id=4017): r0 = syz_open_dev$video(&(0x7f00000000c0), 0x8, 0x82341) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0x1, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x14d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x6, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x40000001, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x4, 0x80003e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x2, 0x3, 0x5, 0x6, 0x8, 0x4, 0x80000001, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c9, 0xc, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x74, 0xea4, 0x0, 0x8, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0xffffff75, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x7], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x17, 0x1c, 0x120000, 0x3, 0x8, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x108, 0x9606, 0x7, 0x2, 0x4, 0x8006, 0xfffffffe, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x20006c1f, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 3.679978234s ago: executing program 6 (id=4018): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r1, 0x0, 0x11, 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@volatile}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4004) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x0, 0x6e6bc0}}, 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x800, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x800, 0x1000, 0x0, 0xa, 0x20}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}, 0x0, 0x6e6bbc}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) 3.630328513s ago: executing program 5 (id=4019): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r1, 0x26}, &(0x7f0000000fc0)=ANY=[@ANYBLOB='enc=pkcs1 hash=md5'], 0x0, 0x0) 3.629663583s ago: executing program 5 (id=4020): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r3], 0x50}}, 0x2) (fail_nth: 12) 3.579064248s ago: executing program 6 (id=4021): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x20800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xfff3}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xfff2, 0x7}}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 671.202216ms ago: executing program 5 (id=4022): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x48, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x18, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x4}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc8c0}, 0x2) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB='q'], 0xb6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 670.43163ms ago: executing program 6 (id=4023): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xfff2, 0xffe0}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x4800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000500)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3f}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\r', 0x1}], 0x1}, 0x4) 666.431938ms ago: executing program 2 (id=4024): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000003c0)={'8255\x00', [0x140, 0x0, 0xd, 0x0, 0x2, 0x4, 0x4, 0x2, 0x7, 0x2c731, 0x4000004, 0x7, 0x2009, 0x8, 0x4ce, 0x9e9b, 0x103, 0x80000006, 0x6, 0x0, 0x7, 0x2, 0x2f, 0x81, 0xffd, 0x6, 0xab, 0x1, 0x283, 0x8001, 0x400006]}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@fallback=r2, 0x11, 0x0, 0x4, &(0x7f0000000240)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket(0x5, 0x2, 0x9) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r5], 0x50}}, 0x2) getpid() 526.446301ms ago: executing program 7 (id=4025): r0 = socket(0x40000000015, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000180)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000400)={0x60, 0x1, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x4, 0x0, 0x0, 0x7, 0x3, 0xd, 0x41, 0x1a}) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000000c0)=0xd95, 0x4019e2060d4e3ac7) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000800)={0x0, &(0x7f0000000380)=[@nested_amd_inject_event={0x180, 0x38, {0x0, 0x40, 0x2, 0x2749fb2b}}, @wrmsr={0x65, 0x20, {0x95d, 0x38b}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x4, 0x5, 0x5, 0x3}}, @in_dx={0x69, 0x20, {0x194b, 0x6}}, @nested_create_vm={0x12d, 0x18}, @nested_load_syzos={0x136, 0x60, {0x3, 0x7, [@set_irq_handler={0xc8, 0x20, {0x68}}, @nested_amd_invlpga={0x17d, 0x20, {0xeeee0000, 0xf2f3}}]}}, @rdmsr={0x66, 0x18, {0x226}}, @set_irq_handler={0xc8, 0x20, {0xeb, 0x1}}, @nested_amd_clgi={0x17f, 0x10}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x7, 0x80}}, @nested_vmresume={0x130, 0x18, 0x3}, @wr_crn={0x67, 0x20, {0x0, 0x5}}, @enable_nested={0x12c, 0x18}, @wr_crn={0x67, 0x20, {0x2, 0x3e20}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @host_nat=0x6c08, 0x8, 0x1000, 0xfffffffffffffffe}}, @nested_create_vm={0x12d, 0x18, 0x2}, @nested_amd_clgi={0x17f, 0x10}, @wr_crn={0x67, 0x20, {0x0, 0x2}}, @nested_amd_invlpga={0x17d, 0x20, {0x80a0000, 0x9afd}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest16=0x800, 0x4cad, 0x9, 0x77}}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0xd1, 0x4, 0x5, 0x2}}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x5d6, 0x0, 0x3, 0x4}}, @nested_amd_stgi={0x17e, 0x10}, @nested_load_syzos={0x136, 0xd0, {0x2, 0x2, [@nested_amd_vmload={0x182, 0x18, 0x2}, @wrmsr={0x65, 0x20, {0x951, 0xa4}}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0x2c, 0x3, 0x8, 0x1}}, @in_dx={0x69, 0x20, {0x55c2, 0x6}}, @set_irq_handler={0xc8, 0x20, {0x6d, 0x1}}]}}], 0x468}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) 526.094437ms ago: executing program 2 (id=4026): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 524.666601ms ago: executing program 6 (id=4027): mount(&(0x7f0000000b40)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='qnx6\x00', 0x20000a, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8010) (async, rerun: 64) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44094}, 0x20000000) (async, rerun: 64) r1 = socket$inet6(0xa, 0x2, 0x3b3) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x149000, 0x1) (async) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x0, 0x3, 0x8, 0x1, 0xfbff}, &(0x7f00000000c0)=0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f00000012c0)={0x4, 0x8}, 0x10) 470.165254ms ago: executing program 6 (id=4028): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x1) close(r1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0xffffffffffffff38, &(0x7f00000004c0)={&(0x7f0000000200)={0x30, r5, 0x1, 0x70bd25, 0x3, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x2400c046) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r6, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x49, 0x69}}}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1000}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x8001}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r8 = openat$pmem0(0xffffffffffffff9c, &(0x7f00000009c0), 0x42800, 0x0) ioctl$BLKREPORTZONE(r8, 0xc0101282, &(0x7f0000001300)={0x7}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x28, r10, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0xc}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x8040) 228.39524ms ago: executing program 7 (id=4029): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000000c0)=0xd95, 0x4019e2060d4e3ac7) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) (fail_nth: 12) 227.221495ms ago: executing program 7 (id=4030): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r1, 0x3ba0, &(0x7f0000000400)={0x48}) r2 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r2}, &(0x7f0000000fc0)=ANY=[@ANYBLOB='enc=pkcs1 hash=md5'], 0x0, 0x0) 140.028723ms ago: executing program 7 (id=4031): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000002c0)=[@in6={0xa, 0x4e23, 0x2, @remote, 0x3}, @in6={0xa, 0x4e24, 0x8001, @loopback, 0x27ca}], 0x38) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f0000000080)=0x8) mknod(&(0x7f0000000000)='./file0\x00', 0x8000, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='xfs\x00', 0x10080, &(0x7f00000000c0)='norecovery') r1 = socket$inet6(0xa, 0x1, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000100)='fusectl\x00', 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x3507, 0x0, 0x0, 0x4}}, 0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@remote}}, &(0x7f0000000400)=0xe8) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f00000000c0)=@filename='./file0\x00', r2, &(0x7f0000000440)) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 80.259231ms ago: executing program 7 (id=4032): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xfff3}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xfff2, 0x7}}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 0s ago: executing program 7 (id=4033): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x400) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xfff2, 0xf}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x92, 0x4, 0x7, 0xffeffffc}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}}, 0x4c800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$tipc(0x1e, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000500)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3f}, 0x80, &(0x7f0000000080)=[{&(0x7f00000002c0)='\r', 0x1}], 0x1}, 0x4) kernel console output (not intermixed with test programs): 294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.3663" name="file3" dev="tmpfs" ino=1661 res=0 errno=0 [ 687.541772][T18193] CIFS mount error: No usable UNC path provided in device string! [ 687.541772][T18193] [ 687.545685][T18193] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 687.582568][ T42] audit: type=1800 audit(2000000553.359:13176): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 687.625940][T18200] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 687.702253][T18203] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3666'. [ 687.714006][T18205] netlink: 'syz.6.3667': attribute type 11 has an invalid length. [ 687.763743][T18209] FAULT_INJECTION: forcing a failure. [ 687.763743][T18209] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 687.765092][T18207] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3668'. [ 687.769342][T18209] CPU: 3 UID: 0 PID: 18209 Comm: syz.6.3669 Tainted: G L syzkaller #0 PREEMPT(full) [ 687.769372][T18209] Tainted: [L]=SOFTLOCKUP [ 687.769378][T18209] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 687.769389][T18209] Call Trace: [ 687.769397][T18209] [ 687.769407][T18209] dump_stack_lvl+0x100/0x190 [ 687.769492][T18209] should_fail_ex.cold+0x5/0xa [ 687.769518][T18209] _copy_to_user+0x32/0xd0 [ 687.769557][T18209] simple_read_from_buffer+0xcb/0x170 [ 687.769591][T18209] proc_fail_nth_read+0x1af/0x230 [ 687.769616][T18209] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 687.769640][T18209] ? rw_verify_area+0xce/0x6d0 [ 687.769676][T18209] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 687.769700][T18209] vfs_read+0x1e4/0xb40 [ 687.769722][T18209] ? __pfx_vfs_read+0x10/0x10 [ 687.769739][T18209] ? __fget_files+0x215/0x3d0 [ 687.769763][T18209] ? __fget_files+0x21f/0x3d0 [ 687.769791][T18209] ksys_read+0x12a/0x250 [ 687.769810][T18209] ? __pfx_ksys_read+0x10/0x10 [ 687.769826][T18209] ? v4l2_ioctl+0x1c5/0x250 [ 687.769888][T18209] do_syscall_64+0x115/0x870 [ 687.769920][T18209] ? clear_bhb_loop+0x70/0xc0 [ 687.769941][T18209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.769960][T18209] RIP: 0033:0x7ff1e1d5e90e [ 687.769977][T18209] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 687.769993][T18209] RSP: 002b:00007ff1e2c51fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 687.770014][T18209] RAX: ffffffffffffffda RBX: 00007ff1e2c526c0 RCX: 00007ff1e1d5e90e [ 687.770028][T18209] RDX: 000000000000000f RSI: 00007ff1e2c520a0 RDI: 0000000000000004 [ 687.770038][T18209] RBP: 00007ff1e2c52090 R08: 0000000000000000 R09: 0000000000000000 [ 687.770049][T18209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 687.770059][T18209] R13: 00007ff1e2026038 R14: 00007ff1e2025fa0 R15: 00007ffd36c63118 [ 687.770084][T18209] [ 687.815572][T18211] netlink: 900 bytes leftover after parsing attributes in process `syz.6.3670'. [ 687.816910][ T1302] block nbd0: Possible stuck request ffff888028d5e000: control (read@0,1024B). Runtime 180 seconds [ 687.821985][T18212] syzkaller1: entered promiscuous mode [ 687.822009][T18212] syzkaller1: entered allmulticast mode [ 687.856820][ T1302] block nbd0: Possible stuck request ffff888028d5e1c0: control (read@1024,1024B). Runtime 180 seconds [ 687.861552][ T1302] block nbd0: Possible stuck request ffff888028d5e380: control (read@2048,1024B). Runtime 180 seconds [ 687.866112][ T1302] block nbd0: Possible stuck request ffff888028d5e540: control (read@3072,1024B). Runtime 180 seconds [ 687.927387][T18211] netlink: 900 bytes leftover after parsing attributes in process `syz.6.3670'. [ 688.308171][T18227] binder: 18225:18227 ioctl c0306201 200000000640 returned -22 [ 688.321081][T18227] device-mapper: ioctl: only supply one of name or uuid, cmd(9) [ 688.324936][T18227] netlink: 'syz.2.3674': attribute type 1 has an invalid length. [ 688.328159][T18227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3674'. [ 691.667570][T18239] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 691.730859][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 691.730880][ T42] audit: type=1800 audit(2000000557.509:13180): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 691.743999][T18244] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 691.900048][T18255] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 695.343759][ T42] audit: type=1800 audit(2000000561.119:13181): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 695.402448][ T42] audit: type=1800 audit(2000000561.179:13182): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 695.423305][ T42] audit: type=1800 audit(2000000561.189:13183): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=327075 res=0 errno=0 [ 695.600904][ T5755] Bluetooth: hci2: unexpected event for opcode 0x0803 [ 696.272067][ T42] audit: type=1800 audit(2000000562.029:13184): pid=18292 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.3690" name="/" dev="fuse" ino=1 res=0 errno=0 [ 696.327325][ T42] audit: type=1800 audit(2000000562.099:13185): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 696.589729][ T4770] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 696.740422][ T4770] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 696.745509][ T4770] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 696.750977][ T4770] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 696.757349][ T4770] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.761125][ T4770] usb 7-1: Product: syz [ 696.762996][ T4770] usb 7-1: Manufacturer: syz [ 696.765048][ T4770] usb 7-1: SerialNumber: syz [ 696.782132][ T4770] cdc_mbim 7-1:1.0: skipping garbage [ 696.793848][ T42] audit: type=1800 audit(2000000562.569:13186): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=327102 res=0 errno=0 [ 696.802274][ T42] audit: type=1800 audit(2000000562.569:13187): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=327134 res=0 errno=0 [ 696.811544][ T42] audit: type=1800 audit(2000000562.569:13188): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=327109 res=0 errno=0 [ 696.820860][ T42] audit: type=1800 audit(2000000562.569:13189): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=327110 res=0 errno=0 [ 696.995415][T18301] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 697.638728][T18301] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 697.642402][ T4770] cdc_mbim 7-1:1.0: setting tx_max = 16384 [ 697.647743][ T4770] cdc_mbim 7-1:1.0: cdc-wdm0: USB WDM device [ 697.659611][ T4770] wwan wwan0: port wwan0mbim0 attached [ 698.652552][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 700.060637][ T4770] cdc_mbim 7-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 7e:3b:4f:f4:af:53 [ 700.080106][ T42] audit: type=1800 audit(2000000565.849:13190): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=327131 res=0 errno=0 [ 700.090523][ T4770] usb 7-1: USB disconnect, device number 90 [ 700.096323][ T4770] cdc_mbim 7-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 700.109707][ T42] audit: type=1800 audit(2000000565.849:13191): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=327132 res=0 errno=0 [ 700.124260][ T42] audit: type=1800 audit(2000000565.859:13192): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=327111 res=0 errno=0 [ 700.134837][ T42] audit: type=1800 audit(2000000565.859:13193): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=327133 res=0 errno=0 [ 700.145964][ T42] audit: type=1800 audit(2000000565.879:13194): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 700.157348][ T42] audit: type=1800 audit(2000000565.879:13195): pid=9060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=327482 res=0 errno=0 [ 700.306101][T18337] FAULT_INJECTION: forcing a failure. [ 700.306101][T18337] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 700.311732][T18337] CPU: 2 UID: 0 PID: 18337 Comm: syz.5.3705 Tainted: G L syzkaller #0 PREEMPT(full) [ 700.311762][T18337] Tainted: [L]=SOFTLOCKUP [ 700.311774][T18337] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 700.311784][T18337] Call Trace: [ 700.311792][T18337] [ 700.311799][T18337] dump_stack_lvl+0x100/0x190 [ 700.311830][T18337] should_fail_ex.cold+0x5/0xa [ 700.311854][T18337] _copy_from_user+0x2e/0xd0 [ 700.311882][T18337] kstrtouint_from_user+0xd6/0x1d0 [ 700.311903][T18337] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 700.311924][T18337] ? __lock_acquire+0x49f/0x1a40 [ 700.311974][T18337] proc_fail_nth_write+0x83/0x220 [ 700.312000][T18337] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 700.312030][T18337] vfs_write+0x2aa/0x1050 [ 700.312051][T18337] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 700.312076][T18337] ? __pfx_vfs_write+0x10/0x10 [ 700.312094][T18337] ? __fget_files+0x215/0x3d0 [ 700.312121][T18337] ? __fget_files+0x21f/0x3d0 [ 700.312150][T18337] ksys_write+0x12a/0x250 [ 700.312169][T18337] ? __pfx_ksys_write+0x10/0x10 [ 700.312194][T18337] do_syscall_64+0x115/0x870 [ 700.312217][T18337] ? clear_bhb_loop+0x70/0xc0 [ 700.312240][T18337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.312259][T18337] RIP: 0033:0x7f7ca595e90e [ 700.312276][T18337] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 700.312293][T18337] RSP: 002b:00007f7ca67c7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 700.312313][T18337] RAX: ffffffffffffffda RBX: 00007f7ca67c86c0 RCX: 00007f7ca595e90e [ 700.312325][T18337] RDX: 0000000000000001 RSI: 00007f7ca67c80a0 RDI: 0000000000000005 [ 700.312336][T18337] RBP: 00007f7ca67c8090 R08: 0000000000000000 R09: 0000000000000000 [ 700.312346][T18337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 700.312357][T18337] R13: 00007f7ca5c26038 R14: 00007f7ca5c25fa0 R15: 00007ffe952c2928 [ 700.312383][T18337] [ 700.329385][T18335] Mount JFS Failure: -22 [ 700.331956][ T4770] wwan wwan0: port wwan0mbim0 disconnected [ 700.333284][T18335] jfs_mount failed w/return code = -22 [ 700.499297][T18351] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3708'. [ 700.630083][ T5871] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 700.780083][ T5871] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 700.784263][ T5871] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 700.788112][ T5871] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 700.793717][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.797522][ T5871] usb 5-1: Product: syz [ 700.800808][ T5871] usb 5-1: Manufacturer: syz [ 700.803692][ T5871] usb 5-1: SerialNumber: syz [ 700.818933][ T5871] cdc_mbim 5-1:1.0: skipping garbage [ 701.024660][T18339] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 701.635784][T18339] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 701.638396][ T5871] cdc_mbim 5-1:1.0: setting tx_max = 16384 [ 701.645242][ T5871] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 701.650364][ T5871] wwan wwan0: port wwan0mbim0 attached [ 702.407461][ T42] kauditd_printk_skb: 13 callbacks suppressed [ 702.407480][ T42] audit: type=1800 audit(2000000568.189:13209): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 702.608042][ T42] audit: type=1800 audit(2000000568.389:13210): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 702.684175][ T42] audit: type=1800 audit(2000000568.459:13211): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 702.713506][ T42] audit: type=1800 audit(2000000568.489:13212): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 702.745405][ T42] audit: type=1800 audit(2000000568.519:13213): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=327804 res=0 errno=0 [ 702.876586][ T42] audit: type=1326 audit(2000000568.659:13214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18371 comm="syz.0.3713" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f032259e0d9 code=0x0 [ 704.190328][ T5871] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 92:9d:11:9a:c6:8e [ 704.204541][ T42] audit: type=1800 audit(2000000569.979:13215): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=327691 res=0 errno=0 [ 704.209703][ T5871] usb 5-1: USB disconnect, device number 56 [ 704.221747][ T5871] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 704.229527][ T42] audit: type=1800 audit(2000000569.979:13216): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=327692 res=0 errno=0 [ 704.237016][ T42] audit: type=1800 audit(2000000569.979:13217): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=327671 res=0 errno=0 [ 704.249527][ T42] audit: type=1800 audit(2000000569.979:13218): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=327693 res=0 errno=0 [ 704.300899][T18376] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3714'. [ 704.323566][T18376] syzkaller1: entered promiscuous mode [ 704.330419][T18376] syzkaller1: entered allmulticast mode [ 704.392885][ T5871] wwan wwan0: port wwan0mbim0 disconnected [ 704.498072][T18390] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3717'. [ 704.887904][ T24] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 705.040243][ T24] usb 7-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 705.044071][ T24] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 705.047482][ T24] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 705.052982][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.055782][ T24] usb 7-1: Product: syz [ 705.057543][ T24] usb 7-1: Manufacturer: syz [ 705.059352][ T24] usb 7-1: SerialNumber: syz [ 705.063216][T18398] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 705.068734][T18398] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 705.073120][ T24] usbserial_generic 7-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 705.077196][ T24] usbserial_generic 7-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 705.081477][ T24] usbserial_generic 7-1:1.0: generic converter detected [ 705.180098][ T24] usb 7-1: generic converter now attached to ttyUSB0 [ 705.516027][ T1474] usb 7-1: USB disconnect, device number 91 [ 705.555238][ T1474] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 705.561859][ T1474] usbserial_generic 7-1:1.0: device disconnected [ 706.214148][T18402] SELinux: syz.2.3722 (18402) wrote to checkreqprot. This is no longer supported. [ 708.093455][ T42] kauditd_printk_skb: 25 callbacks suppressed [ 708.093476][ T42] audit: type=1400 audit(2000000573.869:13244): avc: denied { ioctl } for pid=18403 comm="syz.6.3723" path="socket:[73279]" dev="sockfs" ino=73279 ioctlcmd=0x942d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 708.155388][T18406] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 708.172540][ T5755] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 708.519594][ T9] usb 10-1: new high-speed USB device number 58 using dummy_hcd [ 708.669586][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 708.673918][ T9] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 708.681193][ T9] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 708.685957][ T9] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 708.689807][ T9] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 708.694379][ T9] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 708.699037][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.707668][ T42] audit: type=1800 audit(2000000574.479:13245): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=328733 res=0 errno=0 [ 708.711837][ T9] hub 10-1:1.0: bad descriptor, ignoring hub [ 708.719971][ T42] audit: type=1800 audit(2000000574.499:13246): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=328762 res=0 errno=0 [ 708.724112][ T9] hub 10-1:1.0: probe with driver hub failed with error -5 [ 708.728859][ T42] audit: type=1800 audit(2000000574.499:13247): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=328740 res=0 errno=0 [ 708.741059][ T42] audit: type=1800 audit(2000000574.499:13248): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=328741 res=0 errno=0 [ 708.748212][ T9] cdc_wdm 10-1:1.0: skipping garbage [ 708.749799][ T42] audit: type=1800 audit(2000000574.499:13249): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=328742 res=0 errno=0 [ 708.766968][ T42] audit: type=1800 audit(2000000574.539:13250): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=328790 res=0 errno=0 [ 708.770051][ T9] cdc_wdm 10-1:1.0: skipping garbage [ 708.783313][ T42] audit: type=1800 audit(2000000574.559:13251): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=328809 res=0 errno=0 [ 708.788402][ T9] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 708.794715][ T9] cdc_wdm 10-1:1.0: Unknown control protocol [ 709.189229][T18422] input: syz0 as /devices/virtual/input/input81 [ 709.195744][ T42] audit: type=1800 audit(2000000574.969:13252): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=328856 res=0 errno=0 [ 709.211493][ T42] audit: type=1800 audit(2000000574.969:13253): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=328871 res=0 errno=0 [ 709.278844][T18428] xt_hashlimit: size too large, truncated to 1048576 [ 709.589595][T14940] usb 7-1: new high-speed USB device number 92 using dummy_hcd [ 709.604239][T16032] usb 10-1: USB disconnect, device number 58 [ 709.609586][ T9] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 709.739589][T16032] usb 10-1: new full-speed USB device number 59 using dummy_hcd [ 709.740384][T14940] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 709.747254][T14940] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 709.751583][T14940] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 709.756815][T14940] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 709.760849][ T9] usb 11-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 709.761248][T14940] usb 7-1: Manufacturer: syz [ 709.763812][ T9] usb 11-1: too many configurations: 9, using maximum allowed: 8 [ 709.768045][T14940] usb 7-1: config 0 descriptor?? [ 709.768968][ T9] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 709.775380][ T9] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 709.779322][ T9] usb 11-1: config 0 interface 0 has no altsetting 0 [ 709.782942][ T9] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 709.786019][ T9] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 709.789511][ T9] usb 11-1: config 0 interface 0 has no altsetting 0 [ 709.792849][ T9] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 709.795894][ T9] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 709.799317][ T9] usb 11-1: config 0 interface 0 has no altsetting 0 [ 709.802458][ T9] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 709.805655][ T9] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 709.809282][ T9] usb 11-1: config 0 interface 0 has no altsetting 0 [ 709.812501][ T9] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 709.815482][ T9] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 709.818930][ T9] usb 11-1: config 0 interface 0 has no altsetting 0 [ 709.821982][ T9] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 709.825149][ T9] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 709.829293][ T9] usb 11-1: config 0 interface 0 has no altsetting 0 [ 709.829658][T14940] rc_core: IR keymap rc-hauppauge not found [ 709.832943][ T9] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 709.834272][T14940] Registered IR keymap rc-empty [ 709.838040][ T9] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 709.841869][T14940] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 709.844288][ T9] usb 11-1: config 0 interface 0 has no altsetting 0 [ 709.845557][ T9] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 709.851035][T14940] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input82 [ 709.853781][ T9] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 709.861526][ T9] usb 11-1: config 0 interface 0 has no altsetting 0 [ 709.867687][ T9] usb 11-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 709.870643][ T9] usb 11-1: Product: syz [ 709.872207][ T9] usb 11-1: Manufacturer: syz [ 709.874099][ T9] usb 11-1: SerialNumber: syz [ 709.877674][ T9] usb 11-1: config 0 descriptor?? [ 709.882666][ T9] yurex 11-1:0.0: USB YUREX device now attached to Yurex #0 [ 709.890573][T16032] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 709.899079][T16032] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 709.904244][T16032] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 709.907590][T16032] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 709.912108][T16032] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.920369][T18419] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 709.928547][T16032] hub 10-1:1.0: bad descriptor, ignoring hub [ 709.934909][T16032] hub 10-1:1.0: probe with driver hub failed with error -5 [ 709.943127][T16032] cdc_wdm 10-1:1.0: skipping garbage [ 709.944962][T16032] cdc_wdm 10-1:1.0: skipping garbage [ 709.955259][T16032] cdc_wdm 10-1:1.0: cdc-wdm1: USB WDM device [ 709.957351][T16032] cdc_wdm 10-1:1.0: Unknown control protocol [ 709.996398][T14940] usb 7-1: USB disconnect, device number 92 [ 710.087076][ T9] usb 11-1: USB disconnect, device number 6 [ 710.095380][ T9] yurex 11-1:0.0: USB YUREX #0 now disconnected [ 710.230425][T16032] usb 10-1: USB disconnect, device number 59 [ 710.812642][ T5755] Bluetooth: hci2: unexpected cc 0x1407 length: 11 > 9 [ 710.815698][ T5755] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 710.951012][T14940] usb 10-1: new full-speed USB device number 60 using dummy_hcd [ 711.110167][T14940] usb 10-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 711.114253][T14940] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 711.118506][T14940] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 711.122374][T14940] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 711.127773][T14940] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.130892][T14940] usb 10-1: Product: syz [ 711.132239][T14940] usb 10-1: Manufacturer: syz [ 711.133688][T14940] usb 10-1: SerialNumber: syz [ 711.136707][T14940] usb 10-1: config 0 descriptor?? [ 711.143733][T18454] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 711.199593][T14940] rc_core: IR keymap rc-streamzap not found [ 711.201848][T14940] Registered IR keymap rc-empty [ 711.204631][T14940] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0 [ 711.211344][T14940] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0/input83 [ 711.411228][T14940] usb 10-1: USB disconnect, device number 60 [ 711.451008][T18482] netlink: 596 bytes leftover after parsing attributes in process `syz.2.3748'. [ 711.880255][T18493] FAULT_INJECTION: forcing a failure. [ 711.880255][T18493] name failslab, interval 1, probability 0, space 0, times 0 [ 711.888118][T18493] CPU: 1 UID: 0 PID: 18493 Comm: syz.6.3752 Tainted: G L syzkaller #0 PREEMPT(full) [ 711.888138][T18493] Tainted: [L]=SOFTLOCKUP [ 711.888143][T18493] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 711.888150][T18493] Call Trace: [ 711.888157][T18493] [ 711.888164][T18493] dump_stack_lvl+0x100/0x190 [ 711.888184][T18493] should_fail_ex.cold+0x5/0xa [ 711.888201][T18493] should_failslab+0xc2/0x120 [ 711.888217][T18493] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 711.888235][T18493] ? __alloc_skb+0x140/0x710 [ 711.888264][T18493] __alloc_skb+0x140/0x710 [ 711.888278][T18493] ? __alloc_skb+0x5b7/0x710 [ 711.888292][T18493] ? __pfx___alloc_skb+0x10/0x10 [ 711.888304][T18493] ? __asan_memset+0x23/0x50 [ 711.888316][T18493] ? __alloc_skb+0x4e9/0x710 [ 711.888328][T18493] ? __alloc_skb+0x5b7/0x710 [ 711.888343][T18493] create_monitor_ctrl_event+0x3b/0x450 [ 711.888367][T18493] mgmt_cmd_complete+0x2da/0x5a0 [ 711.888382][T18493] start_discovery_internal+0x70b/0x830 [ 711.888396][T18493] ? __pfx_start_discovery_internal+0x10/0x10 [ 711.888409][T18493] ? do_raw_read_unlock+0x3f/0x70 [ 711.888425][T18493] ? _raw_read_unlock+0x28/0x50 [ 711.888438][T18493] ? __pfx_mgmt_init_hdev+0x10/0x10 [ 711.888453][T18493] hci_sock_sendmsg+0x154e/0x2620 [ 711.888469][T18493] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 711.888482][T18493] ? selinux_socket_sendmsg+0x198/0x2f0 [ 711.888508][T18493] sock_write_iter+0x53a/0x5b0 [ 711.888520][T18493] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 711.888532][T18493] ? __pfx_sock_write_iter+0x10/0x10 [ 711.888547][T18493] ? bpf_lsm_file_permission+0x9/0x10 [ 711.888565][T18493] ? security_file_permission+0x76/0x210 [ 711.888577][T18493] ? rw_verify_area+0xce/0x6d0 [ 711.888594][T18493] vfs_write+0x6ac/0x1050 [ 711.888605][T18493] ? __pfx_sock_write_iter+0x10/0x10 [ 711.888621][T18493] ? __pfx_vfs_write+0x10/0x10 [ 711.888634][T18493] ? find_held_lock+0x2b/0x80 [ 711.888662][T18493] ksys_write+0x1f8/0x250 [ 711.888677][T18493] ? __pfx_ksys_write+0x10/0x10 [ 711.888704][T18493] do_syscall_64+0x115/0x870 [ 711.888724][T18493] ? clear_bhb_loop+0x70/0xc0 [ 711.888744][T18493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.888762][T18493] RIP: 0033:0x7ff1e1d9e0d9 [ 711.888779][T18493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 711.888794][T18493] RSP: 002b:00007ff1e2c52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 711.888812][T18493] RAX: ffffffffffffffda RBX: 00007ff1e2025fa0 RCX: 00007ff1e1d9e0d9 [ 711.888823][T18493] RDX: 0000000000000007 RSI: 0000200000000000 RDI: 0000000000000004 [ 711.888833][T18493] RBP: 00007ff1e2c52090 R08: 0000000000000000 R09: 0000000000000000 [ 711.888845][T18493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 711.888855][T18493] R13: 00007ff1e2026038 R14: 00007ff1e2025fa0 R15: 00007ffd36c63118 [ 711.888872][T18493] [ 712.141983][T18507] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 712.146235][T18507] block device autoloading is deprecated and will be removed. [ 712.257471][T18507] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 712.348773][T18526] bridge1: entered promiscuous mode [ 712.352024][T18526] bridge1: entered allmulticast mode [ 712.453597][T18521] IPVS: length: 177 != 8 [ 712.580001][ T41] IPVS: starting estimator thread 0... [ 712.672493][T18532] IPVS: using max 24 ests per chain, 57600 per kthread [ 712.724868][T18537] netlink: 828 bytes leftover after parsing attributes in process `syz.2.3767'. [ 712.758346][T18539] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.3768'. [ 712.765935][T18539] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 712.786670][T18540] netlink: 828 bytes leftover after parsing attributes in process `syz.2.3767'. [ 713.834748][T18583] netlink: 'syz.5.3778': attribute type 1 has an invalid length. [ 713.838296][T18583] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3778'. [ 717.109314][T18585] evm: overlay not supported [ 717.141759][ T42] kauditd_printk_skb: 93 callbacks suppressed [ 717.141823][ T42] audit: type=1400 audit(2000000582.919:13347): avc: denied { remount } for pid=18584 comm="syz.5.3779" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 717.159358][T18585] overlayfs: failed to get index nlink (file0/file1, err=-61) [ 717.169025][ T42] audit: type=1400 audit(2000000582.939:13348): avc: denied { map } for pid=18584 comm="syz.5.3779" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 717.220359][ T42] audit: type=1800 audit(2000000582.989:13349): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=330443 res=0 errno=0 [ 717.237652][ T42] audit: type=1800 audit(2000000583.009:13350): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=330453 res=0 errno=0 [ 717.348648][ T42] audit: type=1804 audit(2000000583.039:13351): pid=18600 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.3783" name="/newroot/313/sec/tomoyo/profile" dev="securityfs" ino=3101 res=1 errno=0 [ 717.612136][ T1474] usb 7-1: new full-speed USB device number 93 using dummy_hcd [ 717.681253][ T9] usb 10-1: new full-speed USB device number 61 using dummy_hcd [ 717.804774][ T1474] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 717.825038][ T1474] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 717.827910][ T1474] usb 7-1: config 0 has no interface number 0 [ 717.843922][ T1474] usb 7-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 717.848224][ T1474] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 717.853254][ T9] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 717.853445][ T1474] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 717.863310][ T1474] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 717.866053][ T1474] usb 7-1: Product: syz [ 717.867399][ T1474] usb 7-1: SerialNumber: syz [ 717.870837][ T1474] usb 7-1: config 0 descriptor?? [ 717.875736][ T9] usb 10-1: config 0 has an invalid interface number: 8 but max is 0 [ 717.875743][ T1474] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 717.875763][ T9] usb 10-1: config 0 has no interface number 0 [ 717.884267][ T9] usb 10-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 717.885845][ T1474] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.8/input/input84 [ 717.889415][ T42] audit: type=1800 audit(2000000583.659:13352): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=330565 res=0 errno=0 [ 717.901480][ T9] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 717.906150][ T9] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 32772, setting to 64 [ 717.911236][ T42] audit: type=1800 audit(2000000583.659:13353): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=330596 res=0 errno=0 [ 717.928224][ T42] audit: type=1800 audit(2000000583.659:13354): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=330572 res=0 errno=0 [ 717.937781][ T42] audit: type=1800 audit(2000000583.659:13355): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=330573 res=0 errno=0 [ 717.946333][ T9] usb 10-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 717.949839][ T9] usb 10-1: Product: syz [ 717.951577][ T9] usb 10-1: SerialNumber: syz [ 717.953311][ T42] audit: type=1800 audit(2000000583.679:13356): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=330594 res=0 errno=0 [ 717.963923][ T9] usb 10-1: config 0 descriptor?? [ 717.968802][ T9] cm109 10-1:0.8: invalid payload size 64, expected 4 [ 717.973966][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.8/input/input85 [ 718.105521][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 718.185973][ C0] cm109 10-1:0.8: cm109_urb_irq_callback: urb status -71 [ 718.425151][ T1474] usb 7-1: USB disconnect, device number 93 [ 718.435866][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 718.435897][ C0] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 718.453468][ T1474] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 718.478830][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 718.479106][T16032] usb 10-1: USB disconnect, device number 61 [ 718.481009][ C0] cm109 10-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 718.499023][ T1302] block nbd0: Possible stuck request ffff888028d5e000: control (read@0,1024B). Runtime 210 seconds [ 718.503519][ T1302] block nbd0: Possible stuck request ffff888028d5e1c0: control (read@1024,1024B). Runtime 210 seconds [ 718.504167][T16032] cm109 10-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 718.507775][ T1302] block nbd0: Possible stuck request ffff888028d5e380: control (read@2048,1024B). Runtime 210 seconds [ 718.507809][ T1302] block nbd0: Possible stuck request ffff888028d5e540: control (read@3072,1024B). Runtime 210 seconds [ 718.740319][ T66] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 718.747371][ T66] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 718.810035][ T66] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 718.866604][ T66] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 718.907659][ T66] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 720.997660][ T5755] Bluetooth: hci5: command tx timeout [ 721.601951][T18651] FAULT_INJECTION: forcing a failure. [ 721.601951][T18651] name failslab, interval 1, probability 0, space 0, times 0 [ 721.617195][T18651] CPU: 1 UID: 0 PID: 18651 Comm: syz.5.3794 Tainted: G L syzkaller #0 PREEMPT(full) [ 721.617217][T18651] Tainted: [L]=SOFTLOCKUP [ 721.617221][T18651] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 721.617228][T18651] Call Trace: [ 721.617232][T18651] [ 721.617237][T18651] dump_stack_lvl+0x100/0x190 [ 721.617258][T18651] should_fail_ex.cold+0x5/0xa [ 721.617273][T18651] should_failslab+0xc2/0x120 [ 721.617289][T18651] __kmalloc_node_noprof+0x101/0x830 [ 721.617304][T18651] ? __pfx___up_read+0x10/0x10 [ 721.617321][T18651] ? crypto_create_tfm_node+0x8d/0x3b0 [ 721.617339][T18651] crypto_create_tfm_node+0x8d/0x3b0 [ 721.617354][T18651] ? __pfx_rsassa_pkcs1_init_tfm+0x10/0x10 [ 721.617370][T18651] crypto_spawn_tfm2+0x62/0xc0 [ 721.617383][T18651] rsassa_pkcs1_init_tfm+0x39/0xb0 [ 721.617396][T18651] crypto_sig_init_tfm+0xba/0xf0 [ 721.617414][T18651] crypto_create_tfm_node+0x171/0x3b0 [ 721.617429][T18651] crypto_alloc_tfm_node+0x102/0x260 [ 721.617445][T18651] software_key_query+0x35a/0xe30 [ 721.617463][T18651] ? __pfx_software_key_query+0x10/0x10 [ 721.617485][T18651] ? __pfx_software_key_query+0x10/0x10 [ 721.617501][T18651] query_asymmetric_key+0x104/0x160 [ 721.617516][T18651] keyctl_pkey_params_get_2+0x1c6/0x3f0 [ 721.617530][T18651] ? __pfx_keyctl_pkey_params_get_2+0x10/0x10 [ 721.617542][T18651] ? find_held_lock+0x2b/0x80 [ 721.617552][T18651] ? ksys_write+0x190/0x250 [ 721.617565][T18651] ? __mutex_unlock_slowpath+0x35d/0x930 [ 721.617583][T18651] keyctl_pkey_e_d_s+0xac/0x360 [ 721.617595][T18651] ? __pfx_keyctl_pkey_e_d_s+0x10/0x10 [ 721.617609][T18651] ? ksys_write+0x1ac/0x250 [ 721.617619][T18651] ? __pfx_ksys_write+0x10/0x10 [ 721.617631][T18651] __do_sys_keyctl+0x336/0x5a0 [ 721.617647][T18651] do_syscall_64+0x115/0x870 [ 721.617660][T18651] ? clear_bhb_loop+0x70/0xc0 [ 721.617674][T18651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.617699][T18651] RIP: 0033:0x7f7ca599e0d9 [ 721.617710][T18651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 721.617720][T18651] RSP: 002b:00007f7ca67c8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 721.617732][T18651] RAX: ffffffffffffffda RBX: 00007f7ca5c25fa0 RCX: 00007f7ca599e0d9 [ 721.617739][T18651] RDX: 0000200000000fc0 RSI: 0000200000000180 RDI: 000000000000001a [ 721.617746][T18651] RBP: 00007f7ca67c8090 R08: 0000000000000000 R09: 0000000000000000 [ 721.617752][T18651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 721.617759][T18651] R13: 00007f7ca5c26038 R14: 00007f7ca5c25fa0 R15: 00007ffe952c2928 [ 721.617772][T18651] [ 721.652598][T18655] loop0: detected capacity change from 0 to 16384 [ 721.746367][T18661] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3797'. [ 721.766751][T18661] 8021q: adding VLAN 0 to HW filter on device bond3 [ 721.776895][T18660] loop0: p1 [ 721.789800][T18661] macvlan2: entered promiscuous mode [ 721.792410][T18661] macvlan2: entered allmulticast mode [ 721.796862][T18661] bond3: entered allmulticast mode [ 721.799171][T18661] bond3: entered promiscuous mode [ 721.802576][T18661] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 721.811130][T18661] team0: Port device macvlan2 added [ 721.821242][T18661] syzkaller1: entered promiscuous mode [ 721.823238][T18661] syzkaller1: entered allmulticast mode [ 721.831985][T18621] xfrm0 speed is unknown, defaulting to 1000 [ 721.840378][T18661] netlink: 'syz.5.3797': attribute type 1 has an invalid length. [ 721.851932][T18661] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3797'. [ 722.541394][ T42] kauditd_printk_skb: 47 callbacks suppressed [ 722.541414][ T42] audit: type=1800 audit(2000000588.319:13404): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=338112 res=0 errno=0 [ 722.567045][ T42] audit: type=1800 audit(2000000588.329:13405): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=338122 res=0 errno=0 [ 722.709973][T18713] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3811'. [ 723.056913][ T5755] Bluetooth: hci5: command tx timeout [ 725.129717][ T5755] Bluetooth: hci5: command tx timeout [ 725.879076][ T42] audit: type=1800 audit(2000000591.649:13406): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=339573 res=0 errno=0 [ 725.893694][ T42] audit: type=1800 audit(2000000591.669:13407): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=339749 res=0 errno=0 [ 725.897219][T18745] geneve3: entered allmulticast mode [ 725.953630][T18621] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.956229][T18621] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.958632][T18621] bridge_slave_0: entered allmulticast mode [ 725.962861][T18621] bridge_slave_0: entered promiscuous mode [ 725.968603][T18621] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.971872][T18621] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.971938][T13044] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 725.976844][T18621] bridge_slave_1: entered allmulticast mode [ 725.989174][T18621] bridge_slave_1: entered promiscuous mode [ 726.039033][T18751] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 726.048671][T18621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 726.054285][T18621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 726.073929][T18621] team0: Port device team_slave_0 added [ 726.078050][T18621] team0: Port device team_slave_1 added [ 726.100956][T18621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 726.103812][T18621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 726.113458][T18621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 726.120155][T18621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 726.123091][T18621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 726.133092][T18621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 726.173402][T18621] hsr_slave_0: entered promiscuous mode [ 726.176832][T18621] hsr_slave_1: entered promiscuous mode [ 726.179802][T18621] debugfs: 'hsr0' already exists in 'hsr' [ 726.182091][T18621] Cannot create hsr debugfs directory [ 726.260662][ T42] audit: type=1800 audit(2000000592.029:13408): pid=18621 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=27649 res=0 errno=0 [ 726.269922][ T5794] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 726.271012][ T42] audit: type=1800 audit(2000000592.029:13409): pid=18621 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=27648 res=0 errno=0 [ 726.273679][ T5794] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 726.279992][ T42] audit: type=1800 audit(2000000592.029:13410): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=343663 res=0 errno=0 [ 726.292855][ T5794] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 726.389635][ T5794] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 727.012539][T18766] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3823'. [ 727.101105][T18769] vivid-000: ================= START STATUS ================= [ 727.104361][T18769] vivid-000: Enable Output Cropping: true grabbed [ 727.107041][T18769] vivid-000: Enable Output Composing: true grabbed [ 727.110861][T18769] vivid-000: Enable Output Scaler: true grabbed [ 727.112897][T18769] vivid-000: Tx RGB Quantization Range: Automatic grabbed [ 727.115242][T18769] vivid-000: Transmit Mode: HDMI grabbed [ 727.117057][T18769] vivid-000: Hotplug Present: 0x00000000 [ 727.118870][T18769] vivid-000: RxSense Present: 0x00000000 [ 727.121977][T18769] vivid-000: EDID Present: 0x00000000 [ 727.123688][T18769] vivid-000: ================== END STATUS ================== [ 727.221040][ T5755] Bluetooth: hci5: command tx timeout [ 728.876915][T18740] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 728.894503][T18621] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 728.943899][T18621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 728.948626][T18621] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 728.993433][T18621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 728.997847][T18621] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 729.016606][T18621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 729.020957][T18621] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 729.025775][T18782] xt_cluster: you have exceeded the maximum number of cluster nodes (205 > 32) [ 729.028550][T18621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 729.121310][T18790] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3829'. [ 729.153461][T18621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 729.174136][T18621] 8021q: adding VLAN 0 to HW filter on device team0 [ 729.214933][T18797] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3826'. [ 729.230357][T18797] openvswitch: netlink: Flow actions attr not present in new flow. [ 729.231342][ T8802] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.236153][ T8802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 729.249374][ T8802] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.252097][ T8802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 729.269051][T18778] nft_compat: unsupported protocol 0 [ 729.395190][ T42] audit: type=1800 audit(2000000595.169:13411): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=344108 res=0 errno=0 [ 729.422647][ T42] audit: type=1800 audit(2000000595.179:13412): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=344118 res=0 errno=0 [ 729.448800][T13044] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 729.459578][ T42] audit: type=1400 audit(2000000595.229:13413): avc: denied { shutdown } for pid=18808 comm="syz.5.3834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 729.539697][T14940] usb 7-1: new full-speed USB device number 94 using dummy_hcd [ 729.663164][T18621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 729.702879][T14940] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 729.720679][T14940] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 729.724194][T14940] usb 7-1: config 0 has no interface number 0 [ 729.726887][T14940] usb 7-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 729.739594][T14940] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 729.746459][T14940] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 729.771382][T14940] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 729.775538][T14940] usb 7-1: Product: syz [ 729.777423][T14940] usb 7-1: SerialNumber: syz [ 729.792171][T14940] usb 7-1: config 0 descriptor?? [ 729.793348][ T42] audit: type=1800 audit(2000000595.569:13414): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=344137 res=0 errno=0 [ 729.797550][T14940] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 729.803772][ T42] audit: type=1800 audit(2000000595.569:13415): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=344168 res=0 errno=0 [ 729.816104][ T42] audit: type=1800 audit(2000000595.569:13416): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=344144 res=0 errno=0 [ 729.820779][T14940] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.8/input/input86 [ 729.825564][ T42] audit: type=1800 audit(2000000595.569:13417): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=344145 res=0 errno=0 [ 729.851688][ T42] audit: type=1800 audit(2000000595.629:13418): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=344166 res=0 errno=0 [ 729.869561][ T42] audit: type=1800 audit(2000000595.629:13419): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=344146 res=0 errno=0 [ 729.884157][ T42] audit: type=1800 audit(2000000595.629:13420): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=344167 res=0 errno=0 [ 729.927616][T18621] veth0_vlan: entered promiscuous mode [ 729.940611][T18621] veth1_vlan: entered promiscuous mode [ 729.970291][T18621] veth0_macvtap: entered promiscuous mode [ 729.980509][T18621] veth1_macvtap: entered promiscuous mode [ 729.997089][T18621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 729.999896][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 730.007917][T18621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 730.060091][ T5794] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.065021][ T5794] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.068476][ T5794] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.072685][ T5794] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.265409][ C2] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 730.265771][T16467] usb 7-1: USB disconnect, device number 94 [ 730.268256][ C2] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 730.283364][T16467] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 730.485949][T18842] FAULT_INJECTION: forcing a failure. [ 730.485949][T18842] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 730.491262][T18842] CPU: 3 UID: 0 PID: 18842 Comm: syz.5.3839 Tainted: G L syzkaller #0 PREEMPT(full) [ 730.491282][T18842] Tainted: [L]=SOFTLOCKUP [ 730.491287][T18842] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 730.491294][T18842] Call Trace: [ 730.491299][T18842] [ 730.491304][T18842] dump_stack_lvl+0x100/0x190 [ 730.491325][T18842] should_fail_ex.cold+0x5/0xa [ 730.491341][T18842] _copy_from_user+0x2e/0xd0 [ 730.491358][T18842] move_addr_to_kernel+0x65/0x170 [ 730.491373][T18842] __sys_connect+0xb5/0x170 [ 730.491387][T18842] ? __pfx___sys_connect+0x10/0x10 [ 730.491400][T18842] ? __fget_files+0x21f/0x3d0 [ 730.491419][T18842] ? __pfx_ksys_write+0x10/0x10 [ 730.491433][T18842] __x64_sys_connect+0x72/0xb0 [ 730.491446][T18842] ? lockdep_hardirqs_on+0x78/0x100 [ 730.491466][T18842] do_syscall_64+0x115/0x870 [ 730.491480][T18842] ? clear_bhb_loop+0x70/0xc0 [ 730.491494][T18842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.491506][T18842] RIP: 0033:0x7f7ca599e0d9 [ 730.491518][T18842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 730.491529][T18842] RSP: 002b:00007f7ca67c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 730.491541][T18842] RAX: ffffffffffffffda RBX: 00007f7ca5c25fa0 RCX: 00007f7ca599e0d9 [ 730.491549][T18842] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000005 [ 730.491556][T18842] RBP: 00007f7ca67c8090 R08: 0000000000000000 R09: 0000000000000000 [ 730.491563][T18842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 730.491570][T18842] R13: 00007f7ca5c26038 R14: 00007f7ca5c25fa0 R15: 00007ffe952c2928 [ 730.491592][T18842] [ 730.830023][T18846] cgroup: name respecified [ 730.864906][T18849] jffs2: notice: (18849) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 732.357658][T18807] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 732.407750][ T8802] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.417951][ T8802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.454946][ T8802] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.458041][ T8802] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.521728][T18865] FAULT_INJECTION: forcing a failure. [ 732.521728][T18865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 732.530406][T18865] CPU: 0 UID: 0 PID: 18865 Comm: syz.6.3848 Tainted: G L syzkaller #0 PREEMPT(full) [ 732.530428][T18865] Tainted: [L]=SOFTLOCKUP [ 732.530432][T18865] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 732.530439][T18865] Call Trace: [ 732.530444][T18865] [ 732.530449][T18865] dump_stack_lvl+0x100/0x190 [ 732.530469][T18865] should_fail_ex.cold+0x5/0xa [ 732.530484][T18865] _copy_to_user+0x32/0xd0 [ 732.530502][T18865] simple_read_from_buffer+0xcb/0x170 [ 732.530517][T18865] proc_fail_nth_read+0x1af/0x230 [ 732.530532][T18865] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 732.530546][T18865] ? rw_verify_area+0xce/0x6d0 [ 732.530562][T18865] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 732.530576][T18865] vfs_read+0x1e4/0xb40 [ 732.530588][T18865] ? __pfx_vfs_read+0x10/0x10 [ 732.530598][T18865] ? __fget_files+0x215/0x3d0 [ 732.530614][T18865] ? __fget_files+0x21f/0x3d0 [ 732.530630][T18865] ksys_read+0x12a/0x250 [ 732.530643][T18865] ? __pfx_ksys_read+0x10/0x10 [ 732.530657][T18865] do_syscall_64+0x115/0x870 [ 732.530671][T18865] ? clear_bhb_loop+0x70/0xc0 [ 732.530684][T18865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.530695][T18865] RIP: 0033:0x7ff1e1d5e90e [ 732.530705][T18865] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 732.530746][T18865] RSP: 002b:00007ff1e2c51fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 732.530762][T18865] RAX: ffffffffffffffda RBX: 00007ff1e2c526c0 RCX: 00007ff1e1d5e90e [ 732.530770][T18865] RDX: 000000000000000f RSI: 00007ff1e2c520a0 RDI: 0000000000000004 [ 732.530776][T18865] RBP: 00007ff1e2c52090 R08: 0000000000000000 R09: 0000000000000000 [ 732.530783][T18865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 732.530789][T18865] R13: 00007ff1e2026038 R14: 00007ff1e2025fa0 R15: 00007ffd36c63118 [ 732.530803][T18865] [ 732.533591][T18867] rdma_op ffff888037e7e9f0 conn xmit_rdma 0000000000000000 [ 732.578332][T18870] nbd: socks must be embedded in a SOCK_ITEM attr [ 732.720907][T18884] netlink: 'syz.6.3853': attribute type 29 has an invalid length. [ 732.939858][ T41] usb 10-1: new high-speed USB device number 62 using dummy_hcd [ 732.976591][T18899] netlink: 'syz.6.3857': attribute type 3 has an invalid length. [ 733.075139][ T1045] hid_parser_main: 7 callbacks suppressed [ 733.075175][ T1045] hid-generic 0006:0008:0008.0008: unknown main item tag 0x0 [ 733.080778][ T1045] hid-generic 0006:0008:0008.0008: unknown main item tag 0x0 [ 733.084497][ T1045] hid-generic 0006:0008:0008.0008: unknown main item tag 0x0 [ 733.087366][ T1045] hid-generic 0006:0008:0008.0008: unknown main item tag 0x0 [ 733.092899][ T1045] hid-generic 0006:0008:0008.0008: unknown main item tag 0x0 [ 733.096017][ T41] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 733.100688][ T1045] hid-generic 0006:0008:0008.0008: unknown main item tag 0x0 [ 733.103652][ T41] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 733.106661][ T41] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 733.111187][ T1045] hid-generic 0006:0008:0008.0008: unknown main item tag 0x0 [ 733.114042][ T1045] hid-generic 0006:0008:0008.0008: unknown main item tag 0x0 [ 733.117362][ T1045] hid-generic 0006:0008:0008.0008: unknown main item tag 0x0 [ 733.120871][ T41] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 733.124575][ T41] usb 10-1: Manufacturer: syz [ 733.132229][ T41] usb 10-1: config 0 descriptor?? [ 733.134033][ T1045] hid-generic 0006:0008:0008.0008: unknown main item tag 0x0 [ 733.147267][ T1045] hid-generic 0006:0008:0008.0008: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz1 [ 733.212082][ T41] rc_core: IR keymap rc-hauppauge not found [ 733.213803][ T41] Registered IR keymap rc-empty [ 733.217342][ T41] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0 [ 733.218177][T18909] bond1: Removing last arp target with arp_interval on [ 733.223167][ T41] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0/input87 [ 733.352467][ T24] usb 10-1: USB disconnect, device number 62 [ 733.538520][T18925] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 733.542226][T18925] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 733.668689][T18934] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3866'. [ 733.675830][T18934] syzkaller1: entered promiscuous mode [ 733.677962][T18934] syzkaller1: entered allmulticast mode [ 733.824808][T18940] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 733.960949][T18942] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 734.034150][T18946] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3872'. [ 734.039195][T18946] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3872'. [ 734.056829][T18955] CIFS: VFS: UNC: path must begin with // or \\ [ 734.059295][T18955] Malformed UNC in devname [ 734.059295][T18955] [ 734.062461][T18955] CIFS: VFS: Malformed UNC in devname [ 734.100934][T18957] Bluetooth: ISO socket layer initialized [ 734.107334][T18957] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3875'. [ 734.114970][T18960] vivid-000: ================= START STATUS ================= [ 734.117958][T18960] vivid-000: Enable Output Cropping: true grabbed [ 734.120552][T18960] vivid-000: Enable Output Composing: true grabbed [ 734.123004][T18960] vivid-000: Enable Output Scaler: true grabbed [ 734.125390][T18960] vivid-000: Tx RGB Quantization Range: Automatic grabbed [ 734.128240][T18960] vivid-000: Transmit Mode: HDMI grabbed [ 734.134340][T18960] vivid-000: Hotplug Present: 0x00000000 [ 734.136679][T18960] vivid-000: RxSense Present: 0x00000000 [ 734.139008][T18960] vivid-000: EDID Present: 0x00000000 [ 734.141434][T18960] vivid-000: ================== END STATUS ================== [ 734.413313][T18974] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3880'. [ 735.049751][ T5755] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 735.060195][ T66] Bluetooth: hci2: command 0x041b tx timeout [ 735.092822][ T42] kauditd_printk_skb: 78 callbacks suppressed [ 735.092841][ T42] audit: type=1800 audit(2000000600.869:13499): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17059 res=0 errno=0 [ 735.118369][ T42] audit: type=1800 audit(2000000600.889:13500): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=345718 res=0 errno=0 [ 735.129348][ T42] audit: type=1800 audit(2000000600.899:13501): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=345728 res=0 errno=0 [ 735.216800][ T42] audit: type=1800 audit(2000000600.989:13502): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17059 res=0 errno=0 [ 735.234663][ T42] audit: type=1800 audit(2000000600.999:13503): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35586 res=0 errno=0 [ 735.243791][ T42] audit: type=1800 audit(2000000600.999:13504): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35609 res=0 errno=0 [ 735.245364][T18987] FAULT_INJECTION: forcing a failure. [ 735.245364][T18987] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 735.257173][T18987] CPU: 0 UID: 0 PID: 18987 Comm: syz.5.3884 Tainted: G L syzkaller #0 PREEMPT(full) [ 735.257193][T18987] Tainted: [L]=SOFTLOCKUP [ 735.257198][T18987] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 735.257205][T18987] Call Trace: [ 735.257211][T18987] [ 735.257217][T18987] dump_stack_lvl+0x100/0x190 [ 735.257236][T18987] should_fail_ex.cold+0x5/0xa [ 735.257250][T18987] ? prepare_alloc_pages+0x16d/0x5f0 [ 735.257268][T18987] should_fail_alloc_page+0xeb/0x140 [ 735.257285][T18987] prepare_alloc_pages+0x1f0/0x5f0 [ 735.257303][T18987] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 735.257321][T18987] ? stack_trace_save+0x8e/0xc0 [ 735.257334][T18987] ? __pfx_stack_trace_save+0x10/0x10 [ 735.257346][T18987] ? stack_depot_save_flags+0x27/0x9d0 [ 735.257365][T18987] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 735.257378][T18987] ? kasan_save_stack+0x3f/0x50 [ 735.257391][T18987] ? kasan_save_stack+0x30/0x50 [ 735.257404][T18987] ? kasan_save_track+0x14/0x30 [ 735.257416][T18987] ? __kasan_slab_alloc+0x89/0x90 [ 735.257429][T18987] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 735.257442][T18987] ? security_inode_alloc+0x3b/0x2c0 [ 735.257457][T18987] ? inode_init_always_gfp+0xc6f/0xfb0 [ 735.257471][T18987] ? alloc_inode+0x8e/0x250 [ 735.257487][T18987] ? new_inode+0x22/0x1c0 [ 735.257501][T18987] ? __debugfs_create_file+0x105/0x4f0 [ 735.257548][T18987] ? debugfs_create_file_full+0x41/0x60 [ 735.257563][T18987] ? ref_tracker_dir_debugfs+0x19e/0x2e0 [ 735.257579][T18987] ? alloc_netdev_mqs+0x314/0x15c0 [ 735.257594][T18987] ? rtnl_create_link+0xc13/0xf80 [ 735.257610][T18987] ? rtnl_newlink+0x13bd/0x2380 [ 735.257624][T18987] ? look_up_lock_class+0x64/0x120 [ 735.257637][T18987] ? netlink_rcv_skb+0x159/0x420 [ 735.257651][T18987] ? do_syscall_64+0x115/0x870 [ 735.257664][T18987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.257678][T18987] ? __lock_acquire+0x49f/0x1a40 [ 735.257692][T18987] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 735.257715][T18987] ? policy_nodemask+0xed/0x4f0 [ 735.257733][T18987] alloc_pages_mpol+0x1fb/0x540 [ 735.257749][T18987] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 735.257763][T18987] ? do_raw_spin_lock+0x128/0x260 [ 735.257780][T18987] ? find_held_lock+0x2b/0x80 [ 735.257789][T18987] ? inode_doinit_with_dentry+0x70b/0x1320 [ 735.257809][T18987] alloc_pages_noprof+0x1a/0x160 [ 735.257826][T18987] get_free_pages_noprof+0x10/0xb0 [ 735.257840][T18987] inode_doinit_with_dentry+0x788/0x1320 [ 735.257860][T18987] ? inode_set_ctime_current+0x283/0x850 [ 735.257878][T18987] ? __pfx_inode_doinit_with_dentry+0x10/0x10 [ 735.257895][T18987] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 735.257909][T18987] ? new_inode+0x15a/0x1c0 [ 735.257928][T18987] selinux_d_instantiate+0x26/0x40 [ 735.257944][T18987] security_d_instantiate+0x14c/0x1b0 [ 735.257958][T18987] d_make_persistent+0x64/0x180 [ 735.257975][T18987] __debugfs_create_file+0x25e/0x4f0 [ 735.257993][T18987] debugfs_create_file_full+0x41/0x60 [ 735.258011][T18987] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 735.258028][T18987] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 735.258056][T18987] ? lockdep_init_map_type+0x5c/0x250 [ 735.258072][T18987] ? __pfx_vlan_setup+0x10/0x10 [ 735.258092][T18987] alloc_netdev_mqs+0x314/0x15c0 [ 735.258111][T18987] rtnl_create_link+0xc13/0xf80 [ 735.258128][T18987] rtnl_newlink+0x13bd/0x2380 [ 735.258149][T18987] ? __pfx_rtnl_newlink+0x10/0x10 [ 735.258163][T18987] ? find_held_lock+0x2b/0x80 [ 735.258173][T18987] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 735.258187][T18987] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 735.258201][T18987] ? avc_has_perm_noaudit+0x145/0x3b0 [ 735.258225][T18987] ? find_held_lock+0x2b/0x80 [ 735.258235][T18987] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 735.258250][T18987] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 735.258267][T18987] ? __pfx_rtnl_newlink+0x10/0x10 [ 735.258283][T18987] rtnetlink_rcv_msg+0x95e/0xe90 [ 735.258300][T18987] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 735.258319][T18987] ? __lock_acquire+0x49f/0x1a40 [ 735.258334][T18987] netlink_rcv_skb+0x159/0x420 [ 735.258347][T18987] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 735.258364][T18987] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 735.258381][T18987] ? netlink_deliver_tap+0x1ae/0xcc0 [ 735.258395][T18987] netlink_unicast+0x585/0x850 [ 735.258409][T18987] ? __pfx_netlink_unicast+0x10/0x10 [ 735.258425][T18987] netlink_sendmsg+0x8b0/0xda0 [ 735.258440][T18987] ? __pfx_netlink_sendmsg+0x10/0x10 [ 735.258454][T18987] ? selinux_socket_sendmsg+0x198/0x2f0 [ 735.258472][T18987] ____sys_sendmsg+0xa4d/0xbe0 [ 735.258483][T18987] ? __pfx_netlink_sendmsg+0x10/0x10 [ 735.258497][T18987] ? __pfx_____sys_sendmsg+0x10/0x10 [ 735.258514][T18987] ___sys_sendmsg+0x190/0x1e0 [ 735.258527][T18987] ? __pfx____sys_sendmsg+0x10/0x10 [ 735.258537][T18987] ? __lock_acquire+0x49f/0x1a40 [ 735.258551][T18987] ? get_pid_task+0x106/0x250 [ 735.258576][T18987] __sys_sendmsg+0x160/0x210 [ 735.258591][T18987] ? __pfx___sys_sendmsg+0x10/0x10 [ 735.258613][T18987] do_syscall_64+0x115/0x870 [ 735.258626][T18987] ? clear_bhb_loop+0x70/0xc0 [ 735.258640][T18987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.258651][T18987] RIP: 0033:0x7f7ca599e0d9 [ 735.258663][T18987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 735.258673][T18987] RSP: 002b:00007f7ca67c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 735.258685][T18987] RAX: ffffffffffffffda RBX: 00007f7ca5c25fa0 RCX: 00007f7ca599e0d9 [ 735.258692][T18987] RDX: 0000000000000002 RSI: 0000200000000280 RDI: 0000000000000006 [ 735.258728][T18987] RBP: 00007f7ca67c8090 R08: 0000000000000000 R09: 0000000000000000 [ 735.258736][T18987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 735.258743][T18987] R13: 00007f7ca5c26038 R14: 00007f7ca5c25fa0 R15: 00007ffe952c2928 [ 735.258758][T18987] [ 735.460083][ T41] usb 12-1: new full-speed USB device number 2 using dummy_hcd [ 735.507369][T18994] netlink: 220 bytes leftover after parsing attributes in process `syz.5.3886'. [ 735.512137][T18994] tc_dump_action: action bad kind [ 735.518429][T18994] device-mapper: ioctl: Invalid data size in the ioctl structure: 2821390648 [ 735.521855][T18994] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3886'. [ 735.539557][ T42] audit: type=1400 audit(2000000601.309:13505): avc: denied { create } for pid=18997 comm="syz.6.3888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 735.577029][ T42] audit: type=1400 audit(2000000601.349:13506): avc: denied { read } for pid=19002 comm="syz.2.3890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 735.586239][T18998] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3888'. [ 735.598144][T19001] socket: no more sockets [ 735.610449][ T41] usb 12-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 735.622360][ T41] usb 12-1: config 0 has an invalid interface number: 8 but max is 0 [ 735.628056][ T41] usb 12-1: config 0 has no interface number 0 [ 735.631830][ T41] usb 12-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 735.641179][ T42] audit: type=1800 audit(2000000601.419:13507): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=345755 res=0 errno=0 [ 735.645377][ T41] usb 12-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 735.657500][ T41] usb 12-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 735.665063][ T41] usb 12-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 735.665742][ T42] audit: type=1800 audit(2000000601.439:13508): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=345765 res=0 errno=0 [ 735.668381][ T41] usb 12-1: Product: syz [ 735.678230][ T41] usb 12-1: SerialNumber: syz [ 735.686139][ T41] usb 12-1: config 0 descriptor?? [ 735.698529][ T41] cm109 12-1:0.8: invalid payload size 0, expected 4 [ 735.711038][ T41] input: CM109 USB driver as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.8/input/input88 [ 735.753281][T19015] FAULT_INJECTION: forcing a failure. [ 735.753281][T19015] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 735.757575][T19006] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 735.761577][T19015] CPU: 0 UID: 0 PID: 19015 Comm: syz.5.3893 Tainted: G L syzkaller #0 PREEMPT(full) [ 735.761597][T19015] Tainted: [L]=SOFTLOCKUP [ 735.761601][T19015] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 735.761607][T19015] Call Trace: [ 735.761612][T19015] [ 735.761616][T19015] dump_stack_lvl+0x100/0x190 [ 735.761636][T19015] should_fail_ex.cold+0x5/0xa [ 735.761652][T19015] _copy_from_user+0x2e/0xd0 [ 735.761669][T19015] copy_msghdr_from_user+0x9f/0x4c0 [ 735.761683][T19015] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 735.761697][T19015] ? rcu_is_watching+0x12/0xc0 [ 735.761716][T19015] ? ___sys_recvmsg+0x177/0x1a0 [ 735.761727][T19015] ? kfree+0x1e5/0x6c0 [ 735.761739][T19015] ___sys_recvmsg+0xdd/0x1a0 [ 735.761751][T19015] ? __pfx____sys_recvmsg+0x10/0x10 [ 735.761769][T19015] ? __pfx___might_resched+0x10/0x10 [ 735.761803][T19015] do_recvmmsg+0x2f3/0x740 [ 735.761817][T19015] ? __pfx_do_recvmmsg+0x10/0x10 [ 735.761831][T19015] ? __mutex_unlock_slowpath+0x35d/0x930 [ 735.761849][T19015] ? __fget_files+0x21f/0x3d0 [ 735.761866][T19015] __x64_sys_recvmmsg+0x22a/0x280 [ 735.761882][T19015] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 735.761902][T19015] do_syscall_64+0x115/0x870 [ 735.761915][T19015] ? clear_bhb_loop+0x70/0xc0 [ 735.761929][T19015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.761941][T19015] RIP: 0033:0x7f7ca599e0d9 [ 735.761951][T19015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 735.761962][T19015] RSP: 002b:00007f7ca67c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 735.761974][T19015] RAX: ffffffffffffffda RBX: 00007f7ca5c25fa0 RCX: 00007f7ca599e0d9 [ 735.761981][T19015] RDX: 000000000000036f RSI: 0000200000000d80 RDI: 0000000000000003 [ 735.761987][T19015] RBP: 00007f7ca67c8090 R08: 0000000000000000 R09: 0000000000000000 [ 735.761994][T19015] R10: 0000000000020102 R11: 0000000000000246 R12: 0000000000000002 [ 735.762000][T19015] R13: 00007f7ca5c26038 R14: 00007f7ca5c25fa0 R15: 00007ffe952c2928 [ 735.762014][T19015] [ 735.764847][T19003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 735.901685][T19020] netlink: 'syz.5.3896': attribute type 1 has an invalid length. [ 735.904406][ C3] cm109 12-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 735.904904][T19020] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3896'. [ 735.908030][T19021] tmpfs: Bad value for 'mpol' [ 736.078158][T19032] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3898'. [ 736.118367][T18985] FAULT_INJECTION: forcing a failure. [ 736.118367][T18985] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 736.124245][T18985] CPU: 3 UID: 0 PID: 18985 Comm: syz.7.3883 Tainted: G L syzkaller #0 PREEMPT(full) [ 736.124265][T18985] Tainted: [L]=SOFTLOCKUP [ 736.124269][T18985] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 736.124275][T18985] Call Trace: [ 736.124279][T18985] [ 736.124284][T18985] dump_stack_lvl+0x100/0x190 [ 736.124304][T18985] should_fail_ex.cold+0x5/0xa [ 736.124320][T18985] _copy_from_iter+0x1f4/0x1690 [ 736.124340][T18985] ? __pfx__copy_from_iter+0x10/0x10 [ 736.124373][T18985] ? __pfx___might_resched+0x10/0x10 [ 736.124387][T18985] ? kfree+0x1e5/0x6c0 [ 736.124399][T18985] file_tty_write.isra.0+0x45b/0x890 [ 736.124439][T18985] vfs_write+0x6ac/0x1050 [ 736.124450][T18985] ? __pfx_tty_write+0x10/0x10 [ 736.124465][T18985] ? __pfx_vfs_write+0x10/0x10 [ 736.124474][T18985] ? find_held_lock+0x2b/0x80 [ 736.124493][T18985] ksys_write+0x12a/0x250 [ 736.124504][T18985] ? __pfx_ksys_write+0x10/0x10 [ 736.124521][T18985] do_syscall_64+0x115/0x870 [ 736.124535][T18985] ? clear_bhb_loop+0x70/0xc0 [ 736.124548][T18985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.124560][T18985] RIP: 0033:0x7f093ed9e0d9 [ 736.124571][T18985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 736.124582][T18985] RSP: 002b:00007f093cff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 736.124595][T18985] RAX: ffffffffffffffda RBX: 00007f093f025fa0 RCX: 00007f093ed9e0d9 [ 736.124602][T18985] RDX: 0000000000001006 RSI: 00002000000005c0 RDI: 0000000000000005 [ 736.124609][T18985] RBP: 00007f093cff6090 R08: 0000000000000000 R09: 0000000000000000 [ 736.124615][T18985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 736.124622][T18985] R13: 00007f093f026038 R14: 00007f093f025fa0 R15: 00007ffe6ffb61a8 [ 736.124636][T18985] [ 736.207537][ C3] cm109 12-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 736.210287][ C3] cm109 12-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 736.212934][ C3] cm109 12-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 736.219269][ C3] cm109 12-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 736.221993][ C3] cm109 12-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 736.224437][ C3] cm109 12-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 736.226944][ C3] cm109 12-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 736.229344][ C3] cm109 12-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 736.232561][ C3] cm109 12-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 736.235662][ C3] cm109 12-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 736.242517][ C3] cm109 12-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 736.245607][ T1045] usb 12-1: USB disconnect, device number 2 [ 736.253324][ T1045] cm109 12-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 736.422360][T19059] 9pnet_virtio: no channels available for device syz [ 736.840018][ T4770] usb 11-1: new full-speed USB device number 7 using dummy_hcd [ 736.990308][ T4770] usb 11-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 736.996202][ T4770] usb 11-1: config 0 has an invalid interface number: 8 but max is 0 [ 737.000062][ T4770] usb 11-1: config 0 has no interface number 0 [ 737.002752][ T4770] usb 11-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 737.008281][ T4770] usb 11-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 737.013021][ T24] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 737.016158][ T4770] usb 11-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 737.023004][ T4770] usb 11-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 737.026425][ T4770] usb 11-1: Product: syz [ 737.028197][ T4770] usb 11-1: SerialNumber: syz [ 737.033017][ T4770] usb 11-1: config 0 descriptor?? [ 737.042349][ T4770] cm109 11-1:0.8: invalid payload size 0, expected 4 [ 737.054142][ T4770] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.8/input/input89 [ 737.180302][ T24] usb 12-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 737.184381][ T24] usb 12-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 737.188958][ T24] usb 12-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 737.194977][ T24] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.197547][ T24] usb 12-1: Product: syz [ 737.199001][ T24] usb 12-1: Manufacturer: syz [ 737.200843][ T24] usb 12-1: SerialNumber: syz [ 737.208078][ T24] ti_usb_3410_5052 12-1:2.0: TI USB 5052 2 port adapter converter detected [ 737.222052][ T24] usb 12-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 737.228892][ T24] usb 12-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 737.251975][ C2] cm109 11-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 737.629017][ T24] usb 11-1: USB disconnect, device number 7 [ 737.629097][ C3] cm109 11-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 737.657881][ T24] cm109 11-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 737.900568][T19077] netlink: 'syz.7.3912': attribute type 1 has an invalid length. [ 737.903107][T19077] netlink: 'syz.7.3912': attribute type 1 has an invalid length. [ 738.889547][ T5871] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 738.976543][T19076] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command, -110 [ 739.029019][ T9] usb 12-1: USB disconnect, device number 3 [ 739.039547][ T9] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 739.044723][ T5871] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 739.058532][ T5871] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 739.064062][ T9] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 739.068443][ T5871] usb 11-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 739.074658][ T9] ti_usb_3410_5052 12-1:2.0: device disconnected [ 739.082402][ T5871] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.091584][ T5871] usb 11-1: Product: syz [ 739.093701][ T5871] usb 11-1: Manufacturer: syz [ 739.096627][ T5871] usb 11-1: SerialNumber: syz [ 739.104297][ T5871] cdc_mbim 11-1:1.0: skipping garbage [ 739.111351][T19096] ip_tables: iptables: counters copy to user failed while replacing table [ 739.308353][T19094] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 739.839636][T14940] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 739.919024][T19094] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 739.923850][ T5871] cdc_mbim 11-1:1.0: setting tx_max = 16384 [ 739.936430][ T5871] cdc_mbim 11-1:1.0: cdc-wdm0: USB WDM device [ 739.942033][ T5871] wwan wwan0: port wwan0mbim0 attached [ 739.949145][ T5871] cdc_mbim 11-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.6-1, CDC MBIM, 4a:bf:5b:b9:f4:2e [ 740.019540][T14940] usb 12-1: Using ep0 maxpacket: 8 [ 740.023629][T14940] usb 12-1: unable to get BOS descriptor or descriptor too short [ 740.028727][T14940] usb 12-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 740.036144][T14940] usb 12-1: config 100 has an invalid interface number: 173 but max is 0 [ 740.042279][T14940] usb 12-1: config 100 has no interface number 0 [ 740.044381][T14940] usb 12-1: config 100 interface 173 altsetting 142 bulk endpoint 0xE has invalid maxpacket 64 [ 740.054068][T14940] usb 12-1: config 100 interface 173 altsetting 142 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 740.059655][T14940] usb 12-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid wMaxPacketSize 0 [ 740.069540][T14940] usb 12-1: config 100 interface 173 has no altsetting 0 [ 740.077289][T14940] usb 12-1: string descriptor 0 read error: -22 [ 740.082160][T14940] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.105375][T19112] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 740.107483][ T42] kauditd_printk_skb: 80 callbacks suppressed [ 740.107499][ T42] audit: type=1800 audit(2000000605.879:13589): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=347011 res=0 errno=0 [ 740.126231][ C0] wdm_int_callback: 9 callbacks suppressed [ 740.126248][ C0] cdc_mbim 11-1:1.0: nonzero urb status received: -71 [ 740.131383][ C0] wdm_int_callback: 9 callbacks suppressed [ 740.131402][ C0] cdc_mbim 11-1:1.0: wdm_int_callback - 0 bytes [ 740.137367][ C0] cdc_mbim 11-1:1.0: nonzero urb status received: -71 [ 740.140200][ C0] cdc_mbim 11-1:1.0: wdm_int_callback - 0 bytes [ 740.143723][ C0] cdc_mbim 11-1:1.0: nonzero urb status received: -71 [ 740.144544][T14940] metro_usb 12-1:100.173: interrupt-out endpoint missing [ 740.146562][ C0] cdc_mbim 11-1:1.0: wdm_int_callback - 0 bytes [ 740.147193][ C0] cdc_mbim 11-1:1.0: nonzero urb status received: -71 [ 740.154217][ C0] cdc_mbim 11-1:1.0: wdm_int_callback - 0 bytes [ 740.156693][ C0] cdc_mbim 11-1:1.0: nonzero urb status received: -71 [ 740.159455][ C0] cdc_mbim 11-1:1.0: wdm_int_callback - 0 bytes [ 740.161853][ C0] cdc_mbim 11-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 740.172338][ T5871] usb 11-1: USB disconnect, device number 8 [ 740.175532][ T5871] cdc_mbim 11-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.6-1, CDC MBIM [ 740.187847][ T42] audit: type=1800 audit(2000000605.919:13590): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=347040 res=0 errno=0 [ 740.196925][ T42] audit: type=1400 audit(2000000605.949:13591): avc: denied { write } for pid=19114 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 740.206268][ T42] audit: type=1800 audit(2000000605.959:13592): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=347018 res=0 errno=0 [ 740.213518][ T42] audit: type=1800 audit(2000000605.959:13593): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=347019 res=0 errno=0 [ 740.221379][ T42] audit: type=1800 audit(2000000605.959:13594): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=347020 res=0 errno=0 [ 740.227998][ T42] audit: type=1800 audit(2000000605.979:13595): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=347069 res=0 errno=0 [ 740.267366][ T42] audit: type=1400 audit(2000000606.039:13596): avc: denied { write } for pid=19117 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 740.320377][T14940] usb 12-1: USB disconnect, device number 4 [ 740.331822][ T5871] wwan wwan0: port wwan0mbim0 disconnected [ 740.408837][ T42] audit: type=1400 audit(2000000606.179:13597): avc: denied { write } for pid=19119 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 740.457441][ T42] audit: type=1400 audit(2000000606.229:13598): avc: denied { write } for pid=19124 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 740.505614][T19127] __nla_validate_parse: 2 callbacks suppressed [ 740.505629][T19127] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3927'. [ 740.609560][ T4770] usb 7-1: new high-speed USB device number 95 using dummy_hcd [ 740.760198][T19133] misc userio: Invalid payload size [ 740.770088][ T4770] usb 7-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 740.778633][ T4770] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 740.783597][ T4770] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 740.794796][ T4770] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.798890][ T4770] usb 7-1: Product: syz [ 740.800455][ T4770] usb 7-1: Manufacturer: syz [ 740.805670][ T4770] usb 7-1: SerialNumber: syz [ 740.817755][T19121] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 740.820399][T19121] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 740.820830][T19135] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3931'. [ 740.829241][ T4770] usbserial_generic 7-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 740.837544][ T4770] usbserial_generic 7-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 740.843166][ T4770] usbserial_generic 7-1:1.0: generic converter detected [ 740.887378][ T4770] usb 7-1: generic converter now attached to ttyUSB0 [ 740.888543][T19136] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3931'. [ 741.066847][T19121] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 741.323754][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 741.326882][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 741.330038][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 741.459282][ T41] usb 7-1: USB disconnect, device number 95 [ 741.465021][ T41] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 741.471389][ T41] usbserial_generic 7-1:1.0: device disconnected [ 742.275822][T19158] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input90 [ 742.429548][ T50] usb 7-1: new high-speed USB device number 96 using dummy_hcd [ 742.590339][ T50] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 742.595331][ T50] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 742.598820][ T50] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 742.611393][ T50] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 742.614919][ T50] usb 7-1: Manufacturer: syz [ 742.623279][ T50] usb 7-1: config 0 descriptor?? [ 742.699597][ T50] rc_core: IR keymap rc-hauppauge not found [ 742.701592][ T50] Registered IR keymap rc-empty [ 742.704156][ T50] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 742.720434][ T50] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input91 [ 744.347585][T19136] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 744.380224][ T10] usb 7-1: USB disconnect, device number 96 [ 744.434938][T19165] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12544 sclass=netlink_route_socket pid=19165 comm=syz.5.3938 [ 744.518266][T19171] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3941'. [ 744.518267][T19167] SELinux: syz.5.3940 (19167) wrote to user. This is no longer supported. [ 744.527321][T19171] hsr_slave_0: left promiscuous mode [ 744.528847][T19167] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 744.532965][T19171] hsr_slave_1: left promiscuous mode [ 744.550520][ T5755] Bluetooth: hci5: unexpected event for opcode 0x200a [ 744.733174][T19169] Mass Storage Function, version: 2009/09/11 [ 744.735171][T19169] LUN: removable file: (no medium) [ 744.740405][T19169] LUN: removable file: (no medium) [ 745.028898][ T5822] nci: nci_rx_work: unknown MT 0x4 [ 745.056547][T19189] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 745.079645][T14940] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 745.250430][T14940] usb 12-1: Using ep0 maxpacket: 8 [ 745.252895][T14940] usb 12-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 745.257263][T14940] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 102, changing to 10 [ 745.261931][T14940] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 24624, setting to 1024 [ 745.265677][T14940] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.271437][T14940] usb 12-1: config 0 descriptor?? [ 745.273281][ T42] kauditd_printk_skb: 64 callbacks suppressed [ 745.273292][ T42] audit: type=1800 audit(2000000611.049:13663): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=347951 res=0 errno=0 [ 745.283782][ T42] audit: type=1800 audit(2000000611.049:13664): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=347980 res=0 errno=0 [ 745.293945][ T42] audit: type=1800 audit(2000000611.049:13665): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=347958 res=0 errno=0 [ 745.301636][ T42] audit: type=1800 audit(2000000611.049:13666): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=347959 res=0 errno=0 [ 745.310274][ T42] audit: type=1800 audit(2000000611.049:13667): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=347960 res=0 errno=0 [ 745.389602][ T42] audit: type=1800 audit(2000000611.059:13668): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=348000 res=0 errno=0 [ 745.491158][T14940] iowarrior 12-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 745.500816][ T42] audit: type=1800 audit(2000000611.279:13669): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=348017 res=0 errno=0 [ 745.529104][T19200] sd 0:0:0:0: PR command failed: 1026 [ 745.532270][T19200] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 745.535306][T19200] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 745.540900][T19200] binder: 19198:19200 ioctl 4018620d 0 returned -22 [ 745.675164][ T42] audit: type=1400 audit(2000000611.449:13670): avc: denied { write } for pid=19201 comm="syz.5.3951" name="c.1" dev="configfs" ino=31959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 745.736768][ T42] audit: type=1400 audit(2000000611.489:13671): avc: denied { unlink } for pid=19201 comm="syz.5.3951" name="ecm.usb0" dev="configfs" ino=32914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=lnk_file permissive=1 [ 746.294990][ T42] audit: type=1800 audit(2000000612.069:13672): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=25819 res=0 errno=0 [ 746.849018][ T5755] Bluetooth: hci4: command 0x0406 tx timeout [ 748.620185][ T1302] block nbd0: Possible stuck request ffff888028d5e000: control (read@0,1024B). Runtime 240 seconds [ 748.624340][ T1302] block nbd0: Possible stuck request ffff888028d5e1c0: control (read@1024,1024B). Runtime 240 seconds [ 748.628568][ T1302] block nbd0: Possible stuck request ffff888028d5e380: control (read@2048,1024B). Runtime 240 seconds [ 748.633435][ T1302] block nbd0: Possible stuck request ffff888028d5e540: control (read@3072,1024B). Runtime 240 seconds [ 748.884143][T19200] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 748.898045][ T5871] usb 12-1: USB disconnect, device number 5 [ 749.016853][T19211] openvswitch: netlink: Unknown key attributes 1 [ 749.041946][T19223] xfrm0 speed is unknown, defaulting to 1000 [ 749.121275][T13044] nci: nci_rx_work: unknown MT 0x4 [ 749.314664][T19247] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3963'. [ 749.366228][T19252] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 750.239369][T19254] netlink: 'syz.2.3965': attribute type 1 has an invalid length. [ 751.828023][T19254] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 751.852241][T19255] veth3: entered allmulticast mode [ 751.916398][ T42] kauditd_printk_skb: 15 callbacks suppressed [ 751.916417][ T42] audit: type=1800 audit(2000000617.689:13688): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17059 res=0 errno=0 [ 751.927206][T19259] FAULT_INJECTION: forcing a failure. [ 751.927206][T19259] name failslab, interval 1, probability 0, space 0, times 0 [ 751.932266][T19259] CPU: 3 UID: 0 PID: 19259 Comm: syz.7.3966 Tainted: G L syzkaller #0 PREEMPT(full) [ 751.932285][T19259] Tainted: [L]=SOFTLOCKUP [ 751.932289][T19259] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 751.932295][T19259] Call Trace: [ 751.932300][T19259] [ 751.932304][T19259] dump_stack_lvl+0x100/0x190 [ 751.932324][T19259] should_fail_ex.cold+0x5/0xa [ 751.932339][T19259] should_failslab+0xc2/0x120 [ 751.932355][T19259] __kmalloc_cache_noprof+0x91/0x6c0 [ 751.932367][T19259] ? mpi_alloc_limb_space+0x31/0x60 [ 751.932383][T19259] ? mpi_alloc+0x46/0x230 [ 751.932398][T19259] mpi_alloc+0x46/0x230 [ 751.932411][T19259] ? mpi_free+0xe6/0x150 [ 751.932423][T19259] mpi_read_raw_data+0xf5/0x430 [ 751.932441][T19259] rsa_set_pub_key+0x14f/0x270 [ 751.932454][T19259] ? __pfx_rsa_set_pub_key+0x10/0x10 [ 751.932469][T19259] ? rsassa_pkcs1_init_tfm+0x7f/0xb0 [ 751.932483][T19259] ? crypto_sig_init_tfm+0xc1/0xf0 [ 751.932502][T19259] rsassa_pkcs1_set_pub_key+0xce/0x1f0 [ 751.932517][T19259] software_key_query+0x451/0xe30 [ 751.932535][T19259] ? __pfx_software_key_query+0x10/0x10 [ 751.932557][T19259] ? __pfx_software_key_query+0x10/0x10 [ 751.932572][T19259] query_asymmetric_key+0x104/0x160 [ 751.932588][T19259] keyctl_pkey_params_get_2+0x1c6/0x3f0 [ 751.932602][T19259] ? __pfx_keyctl_pkey_params_get_2+0x10/0x10 [ 751.932614][T19259] ? find_held_lock+0x2b/0x80 [ 751.932625][T19259] ? ksys_write+0x190/0x250 [ 751.932638][T19259] ? __mutex_unlock_slowpath+0x35d/0x930 [ 751.932655][T19259] keyctl_pkey_e_d_s+0xac/0x360 [ 751.932668][T19259] ? __pfx_keyctl_pkey_e_d_s+0x10/0x10 [ 751.932682][T19259] ? ksys_write+0x1ac/0x250 [ 751.932692][T19259] ? __pfx_ksys_write+0x10/0x10 [ 751.932704][T19259] __do_sys_keyctl+0x336/0x5a0 [ 751.932720][T19259] do_syscall_64+0x115/0x870 [ 751.932733][T19259] ? clear_bhb_loop+0x70/0xc0 [ 751.932746][T19259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.932758][T19259] RIP: 0033:0x7f093ed9e0d9 [ 751.932768][T19259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 751.932778][T19259] RSP: 002b:00007f093cff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 751.932790][T19259] RAX: ffffffffffffffda RBX: 00007f093f025fa0 RCX: 00007f093ed9e0d9 [ 751.932797][T19259] RDX: 0000200000000fc0 RSI: 0000200000000180 RDI: 000000000000001a [ 751.932804][T19259] RBP: 00007f093cff6090 R08: 0000000000000000 R09: 0000000000000000 [ 751.932810][T19259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 751.932817][T19259] R13: 00007f093f026038 R14: 00007f093f025fa0 R15: 00007ffe6ffb61a8 [ 751.932844][T19259] [ 752.048329][ T42] audit: type=1800 audit(2000000617.819:13689): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17059 res=0 errno=0 [ 752.052422][T19225] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 752.089261][T19263] xt_hashlimit: size too large, truncated to 1048576 [ 752.106167][T19263] xt_hashlimit: invalid rate [ 752.361441][T16467] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 752.383328][T19277] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3973'. [ 752.425912][ T42] audit: type=1800 audit(2000000618.199:13690): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=348942 res=0 errno=0 [ 752.445149][ T42] audit: type=1800 audit(2000000618.199:13691): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=348952 res=0 errno=0 [ 752.496018][T19279] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 752.499974][T16467] usb 12-1: device descriptor read/64, error -71 [ 752.759814][T16467] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 752.890130][T16467] usb 12-1: device descriptor read/64, error -71 [ 752.999874][T16467] usb usb12-port1: attempt power cycle [ 753.069650][ T4770] usb 7-1: new full-speed USB device number 97 using dummy_hcd [ 753.220851][ T4770] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 753.225577][ T4770] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 753.228705][ T4770] usb 7-1: config 0 has no interface number 0 [ 753.232169][ T4770] usb 7-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 753.236463][ T4770] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 753.240716][ T4770] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 753.246337][ T4770] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 753.249817][ T4770] usb 7-1: Product: syz [ 753.251940][ T4770] usb 7-1: SerialNumber: syz [ 753.255901][ T4770] usb 7-1: config 0 descriptor?? [ 753.258764][ T42] audit: type=1800 audit(2000000619.029:13692): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=349064 res=0 errno=0 [ 753.264064][ T4770] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 753.267948][ T42] audit: type=1800 audit(2000000619.039:13693): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=349095 res=0 errno=0 [ 753.270811][ T4770] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.8/input/input92 [ 753.277792][ T42] audit: type=1800 audit(2000000619.039:13694): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=349071 res=0 errno=0 [ 753.290067][ T42] audit: type=1800 audit(2000000619.039:13695): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=349072 res=0 errno=0 [ 753.298447][ T42] audit: type=1800 audit(2000000619.069:13696): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=349093 res=0 errno=0 [ 753.307220][ T42] audit: type=1800 audit(2000000619.069:13697): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=349073 res=0 errno=0 [ 753.349890][T16467] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 753.371981][T16467] usb 12-1: device descriptor read/8, error -71 [ 753.419779][ T1045] usb 10-1: new low-speed USB device number 63 using dummy_hcd [ 753.466949][ C2] cm109 7-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 753.497525][T19300] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 753.572731][ T1045] usb 10-1: unable to get BOS descriptor or descriptor too short [ 753.575560][ T1045] usb 10-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 753.579424][ T1045] usb 10-1: config 100 has an invalid interface number: 173 but max is 0 [ 753.582798][ T1045] usb 10-1: config 100 has no interface number 0 [ 753.585213][ T1045] usb 10-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 753.589170][ T1045] usb 10-1: config 100 interface 173 altsetting 142 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 753.594043][ T1045] usb 10-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid maxpacket 26368, setting to 8 [ 753.597700][ T1045] usb 10-1: config 100 interface 173 has no altsetting 0 [ 753.604950][ T1045] usb 10-1: string descriptor 0 read error: -22 [ 753.607078][ T1045] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.617422][T16467] usb 12-1: new high-speed USB device number 9 using dummy_hcd [ 753.626578][T19295] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 753.629102][T19295] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 753.635605][ T1045] metro_usb 10-1:100.173: Metrologic USB to Serial converter detected [ 753.648880][ T1045] usb 10-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 753.655514][T16467] usb 12-1: device descriptor read/8, error -71 [ 753.716461][ C2] cm109_urb_ctl_callback: 18 callbacks suppressed [ 753.716495][ C2] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 753.716765][ T9] usb 7-1: USB disconnect, device number 97 [ 753.718719][ C2] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 753.731152][ T9] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 753.780734][T16467] usb usb12-port1: unable to enumerate USB device [ 753.845742][T19295] metro-usb ttyUSB0: metrousb_open - failed to configure device, error code=-8 [ 753.850697][ T4770] usb 10-1: USB disconnect, device number 63 [ 753.858673][ T4770] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 753.866973][ T4770] metro_usb 10-1:100.173: device disconnected [ 754.371587][T19313] xfs: Unknown parameter 'usrquota+¼>\ÕL€—»èÖ“ûA`' [ 754.374345][T19313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3986'. [ 754.377876][T19313] hsr_slave_0: left promiscuous mode [ 754.381115][T19313] hsr_slave_1: left promiscuous mode [ 754.759965][T19323] siw: device registration error -23 [ 755.096572][T19311] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 755.116475][T19311] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 755.198933][T19311] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 755.208613][T19311] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 755.226699][T19311] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 755.240805][T19311] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 755.249277][T19311] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 755.251343][T19311] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 755.264359][T19311] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 755.280832][T19311] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 755.285618][T19311] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 755.314319][T19311] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 755.649719][ T1045] usb 10-1: new high-speed USB device number 64 using dummy_hcd [ 755.820433][ T1045] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 755.824910][ T1045] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 755.828762][ T1045] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 755.835739][ T1045] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 755.841805][ T1045] usb 10-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 755.852868][ T1045] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.857425][ T1045] usb 10-1: Product: syz [ 755.859198][ T1045] usb 10-1: Manufacturer: syz [ 755.861599][ T1045] usb 10-1: SerialNumber: syz [ 755.870587][ T1045] cdc_mbim 10-1:1.0: skipping garbage [ 755.895634][T19356] syzkaller1: entered promiscuous mode [ 755.897429][T19356] syzkaller1: entered allmulticast mode [ 756.069687][T19343] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 756.306826][T19367] netlink: 'syz.2.4004': attribute type 4 has an invalid length. [ 756.309327][T19367] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4004'. [ 756.315900][T19367] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 756.317621][T19369] FAULT_INJECTION: forcing a failure. [ 756.317621][T19369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 756.325567][T19369] CPU: 2 UID: 0 PID: 19369 Comm: syz.6.4005 Tainted: G L syzkaller #0 PREEMPT(full) [ 756.325586][T19369] Tainted: [L]=SOFTLOCKUP [ 756.325590][T19369] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 756.325598][T19369] Call Trace: [ 756.325604][T19369] [ 756.325608][T19369] dump_stack_lvl+0x100/0x190 [ 756.325647][T19369] should_fail_ex.cold+0x5/0xa [ 756.325670][T19369] _copy_to_user+0x32/0xd0 [ 756.325698][T19369] simple_read_from_buffer+0xcb/0x170 [ 756.325722][T19369] proc_fail_nth_read+0x1af/0x230 [ 756.325745][T19369] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 756.325759][T19369] ? rw_verify_area+0xce/0x6d0 [ 756.325784][T19369] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 756.325797][T19369] vfs_read+0x1e4/0xb40 [ 756.325809][T19369] ? __pfx_vfs_read+0x10/0x10 [ 756.325819][T19369] ? __fget_files+0x215/0x3d0 [ 756.325835][T19369] ? __fget_files+0x21f/0x3d0 [ 756.325851][T19369] ksys_read+0x12a/0x250 [ 756.325861][T19369] ? __pfx_ksys_read+0x10/0x10 [ 756.325875][T19369] do_syscall_64+0x115/0x870 [ 756.325897][T19369] ? clear_bhb_loop+0x70/0xc0 [ 756.325912][T19369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.325923][T19369] RIP: 0033:0x7ff1e1d5e90e [ 756.325942][T19369] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 756.325953][T19369] RSP: 002b:00007ff1e2c51fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 756.325973][T19369] RAX: ffffffffffffffda RBX: 00007ff1e2c526c0 RCX: 00007ff1e1d5e90e [ 756.325980][T19369] RDX: 000000000000000f RSI: 00007ff1e2c520a0 RDI: 0000000000000003 [ 756.325986][T19369] RBP: 00007ff1e2c52090 R08: 0000000000000000 R09: 0000000000000000 [ 756.325993][T19369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 756.326003][T19369] R13: 00007ff1e2026038 R14: 00007ff1e2025fa0 R15: 00007ffd36c63118 [ 756.326017][T19369] [ 756.412061][ T66] Bluetooth: hci2: command 0x041b tx timeout [ 756.478905][T19377] fuseblk: Unknown parameter 'æd' [ 756.675061][T19343] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 756.879906][ T1045] cdc_mbim 10-1:1.0: bind() failure [ 756.888023][ T1045] cdc_ncm 10-1:1.1: probe with driver cdc_ncm failed with error -71 [ 756.891747][ T1045] cdc_mbim 10-1:1.1: probe with driver cdc_mbim failed with error -71 [ 756.894884][ T1045] usbtest 10-1:1.1: probe with driver usbtest failed with error -71 [ 756.900021][ T1045] usb 10-1: USB disconnect, device number 64 [ 757.014158][ T42] kauditd_printk_skb: 46 callbacks suppressed [ 757.014172][ T42] audit: type=1800 audit(2000000622.789:13744): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17059 res=0 errno=0 [ 757.036925][T19388] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 757.043559][T19388] FAULT_INJECTION: forcing a failure. [ 757.043559][T19388] name failslab, interval 1, probability 0, space 0, times 0 [ 757.047880][T19388] CPU: 3 UID: 0 PID: 19388 Comm: syz.7.4012 Tainted: G L syzkaller #0 PREEMPT(full) [ 757.047904][T19388] Tainted: [L]=SOFTLOCKUP [ 757.047909][T19388] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 757.047918][T19388] Call Trace: [ 757.047924][T19388] [ 757.047930][T19388] dump_stack_lvl+0x100/0x190 [ 757.047955][T19388] should_fail_ex.cold+0x5/0xa [ 757.047974][T19388] should_failslab+0xc2/0x120 [ 757.048010][T19388] kmem_cache_alloc_noprof+0x91/0x6a0 [ 757.048037][T19388] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 757.048067][T19388] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 757.048090][T19388] mmu_topup_memory_caches+0x25/0x170 [ 757.048126][T19388] kvm_mmu_load+0xe2/0x2570 [ 757.048147][T19388] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 757.048169][T19388] ? kvm_lapic_sync_to_vapic+0x208/0x6d0 [ 757.048189][T19388] ? kvm_apic_accept_pic_intr+0xdf/0x1b0 [ 757.048206][T19388] ? __pfx_kvm_mmu_load+0x10/0x10 [ 757.048228][T19388] ? vmx_load_vmcs01+0x9b/0xe0 [ 757.048258][T19388] ? vmx_update_cr8_intercept+0x1fd/0x350 [ 757.048287][T19388] vcpu_run+0x3aaa/0x5de0 [ 757.048320][T19388] ? __pfx_vcpu_run+0x10/0x10 [ 757.048354][T19388] ? rcu_is_watching+0x12/0xc0 [ 757.048394][T19388] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 757.048421][T19388] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 757.048454][T19388] kvm_vcpu_ioctl+0x730/0x1700 [ 757.048477][T19388] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 757.048503][T19388] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 757.048536][T19388] ? do_vfs_ioctl+0x226/0x13e0 [ 757.048567][T19388] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 757.048596][T19388] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 757.048644][T19388] ? __fget_files+0x215/0x3d0 [ 757.048664][T19388] ? hook_file_ioctl_common+0x140/0x440 [ 757.048699][T19388] ? selinux_file_ioctl+0x13b/0x290 [ 757.048725][T19388] ? selinux_file_ioctl+0xb6/0x290 [ 757.048753][T19388] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 757.048774][T19388] __x64_sys_ioctl+0x18e/0x210 [ 757.048793][T19388] do_syscall_64+0x115/0x870 [ 757.048815][T19388] ? clear_bhb_loop+0x70/0xc0 [ 757.048839][T19388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.048857][T19388] RIP: 0033:0x7f093ed9e0d9 [ 757.048874][T19388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 757.048891][T19388] RSP: 002b:00007f093cff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 757.048911][T19388] RAX: ffffffffffffffda RBX: 00007f093f025fa0 RCX: 00007f093ed9e0d9 [ 757.048923][T19388] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 757.048934][T19388] RBP: 00007f093cff6090 R08: 0000000000000000 R09: 0000000000000000 [ 757.048945][T19388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 757.048956][T19388] R13: 00007f093f026038 R14: 00007f093f025fa0 R15: 00007ffe6ffb61a8 [ 757.048980][T19388] [ 757.209626][ T5755] Bluetooth: hci3: command 0x0406 tx timeout [ 757.251418][ T42] audit: type=1800 audit(2000000623.029:13745): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17059 res=0 errno=0 [ 757.289788][ T5755] Bluetooth: hci4: command 0x0406 tx timeout [ 757.292398][T17174] Bluetooth: hci0: command 0x0c1a tx timeout [ 757.418208][ T42] audit: type=1800 audit(2000000623.189:13746): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17059 res=0 errno=0 [ 757.435391][ T42] audit: type=1400 audit(2000000623.209:13747): avc: denied { setattr } for pid=19393 comm="syz.5.4016" path="socket:[77703]" dev="sockfs" ino=77703 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 757.447285][T19396] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4015'. [ 757.491764][T19398] vivid-000: ================= START STATUS ================= [ 757.499508][T19398] vivid-000: Enable Output Cropping: true grabbed [ 757.501476][T19398] vivid-000: Enable Output Composing: true grabbed [ 757.511402][T19398] vivid-000: Enable Output Scaler: true grabbed [ 757.513313][T19398] vivid-000: Tx RGB Quantization Range: Automatic grabbed [ 757.527323][T19398] vivid-000: Transmit Mode: HDMI grabbed [ 757.529109][T19398] vivid-000: Hotplug Present: 0x00000000 [ 757.536705][T19398] vivid-000: RxSense Present: 0x00000000 [ 757.538452][T19398] vivid-000: EDID Present: 0x00000000 [ 757.541323][T19398] vivid-000: ================== END STATUS ================== [ 757.603706][T19402] overlayfs: regular lower layers cannot follow data lower layers [ 757.634251][T19402] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4018'. [ 758.499604][ T66] Bluetooth: hci2: command 0x041b tx timeout [ 759.289849][ T66] Bluetooth: hci3: command 0x0406 tx timeout [ 759.371868][ T66] Bluetooth: hci4: command 0x0406 tx timeout [ 759.371901][ T5755] Bluetooth: hci0: command 0x0c1a tx timeout [ 760.092561][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 760.530722][T19396] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 760.612158][ T42] audit: type=1800 audit(2000000626.389:13748): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=350276 res=0 errno=0 [ 760.639594][ T42] audit: type=1800 audit(2000000626.399:13749): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=350286 res=0 errno=0 [ 760.657411][ T13] nci: nci_ntf_packet: unknown ntf opcode 0x122 [ 760.660068][ T42] audit: type=1400 audit(2000000626.439:13750): avc: denied { create } for pid=19422 comm="syz.2.4024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 760.727575][ T42] audit: type=1800 audit(2000000626.499:13751): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17059 res=0 errno=0 [ 760.742970][T19429] qnx6: unable to read the first superblock [ 760.749760][T19429] qnx6: unable to read the first superblock [ 760.752299][T19429] qnx6: unable to read the first superblock [ 760.855902][ T42] audit: type=1800 audit(2000000626.629:13752): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17059 res=0 errno=0 [ 760.862716][T19441] FAULT_INJECTION: forcing a failure. [ 760.862716][T19441] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 760.866911][T19441] CPU: 0 UID: 0 PID: 19441 Comm: syz.7.4029 Tainted: G L syzkaller #0 PREEMPT(full) [ 760.866930][T19441] Tainted: [L]=SOFTLOCKUP [ 760.866934][T19441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 760.866941][T19441] Call Trace: [ 760.866946][T19441] [ 760.866952][T19441] dump_stack_lvl+0x100/0x190 [ 760.866972][T19441] should_fail_ex.cold+0x5/0xa [ 760.866985][T19441] ? prepare_alloc_pages+0x16d/0x5f0 [ 760.867003][T19441] should_fail_alloc_page+0xeb/0x140 [ 760.867021][T19441] prepare_alloc_pages+0x1f0/0x5f0 [ 760.867039][T19441] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 760.867053][T19441] ? __lock_acquire+0x49f/0x1a40 [ 760.867086][T19441] ? __lock_acquire+0x49f/0x1a40 [ 760.867102][T19441] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 760.867119][T19441] ? find_held_lock+0x2b/0x80 [ 760.867128][T19441] ? is_bpf_text_address+0x8a/0x1a0 [ 760.867152][T19441] ? is_bpf_text_address+0x8a/0x1a0 [ 760.867167][T19441] ? bpf_ksym_find+0x128/0x1c0 [ 760.867184][T19441] ? is_bpf_text_address+0x94/0x1a0 [ 760.867199][T19441] ? kernel_text_address+0x8d/0x100 [ 760.867220][T19441] ? __kernel_text_address+0xd/0x30 [ 760.867233][T19441] ? unwind_get_return_address+0x59/0xa0 [ 760.867251][T19441] ? arch_stack_walk+0xa6/0xf0 [ 760.867269][T19441] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 760.867283][T19441] ? policy_nodemask+0xed/0x4f0 [ 760.867301][T19441] alloc_pages_mpol+0x1fb/0x540 [ 760.867316][T19441] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 760.867332][T19441] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 760.867357][T19441] folio_alloc_mpol_noprof+0x36/0x260 [ 760.867375][T19441] vma_alloc_folio_noprof+0xed/0x1d0 [ 760.867392][T19441] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 760.867409][T19441] ? rcu_read_unlock+0x2d/0xb0 [ 760.867427][T19441] ? rcu_read_unlock+0x2d/0xb0 [ 760.867441][T19441] do_wp_page+0xd75/0x4350 [ 760.867461][T19441] ? __pfx_do_wp_page+0x10/0x10 [ 760.867477][T19441] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 760.867496][T19441] __handle_mm_fault+0x1ab6/0x2a00 [ 760.867510][T19441] ? mt_find+0x45e/0x8e0 [ 760.867526][T19441] ? __pfx___handle_mm_fault+0x10/0x10 [ 760.867536][T19441] ? __pfx_mt_find+0x10/0x10 [ 760.867558][T19441] ? find_vma+0xbf/0x140 [ 760.867571][T19441] ? __pfx_find_vma+0x10/0x10 [ 760.867586][T19441] handle_mm_fault+0x37b/0xa30 [ 760.867599][T19441] do_user_addr_fault+0x74c/0x12f0 [ 760.867614][T19441] exc_page_fault+0x6f/0xd0 [ 760.867628][T19441] asm_exc_page_fault+0x26/0x30 [ 760.867639][T19441] RIP: 0010:__put_user_nocheck_4+0x3/0x20 [ 760.867653][T19441] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca e9 51 dd 03 00 90 90 90 90 90 90 90 90 90 90 [ 760.867677][T19441] RSP: 0018:ffffc900035af9f8 EFLAGS: 00050293 [ 760.867689][T19441] RAX: 0000000000000008 RBX: 0000000000000008 RCX: 0000200000001030 [ 760.867696][T19441] RDX: ffff88802bbf4b00 RSI: ffffffff8980d4a8 RDI: ffff88802bbf4b00 [ 760.867703][T19441] RBP: ffffc900035afd88 R08: 0000000000000005 R09: 0000000000000000 [ 760.867709][T19441] R10: 0000000000020102 R11: 0000000000000000 R12: 0000000000000000 [ 760.867715][T19441] R13: 0000000000000001 R14: ffffc900035afdcc R15: 0000000000020102 [ 760.867726][T19441] ? ____sys_recvmsg+0x2e8/0x670 [ 760.867748][T19441] ____sys_recvmsg+0x2f7/0x670 [ 760.867761][T19441] ? __pfx_____sys_recvmsg+0x10/0x10 [ 760.867776][T19441] ? rcu_is_watching+0x12/0xc0 [ 760.867793][T19441] ? ___sys_recvmsg+0x177/0x1a0 [ 760.867804][T19441] ? kfree+0x1e5/0x6c0 [ 760.867819][T19441] ___sys_recvmsg+0x16a/0x1a0 [ 760.867842][T19441] ? __pfx____sys_recvmsg+0x10/0x10 [ 760.867871][T19441] ? __pfx___might_resched+0x10/0x10 [ 760.867909][T19441] do_recvmmsg+0x2f3/0x740 [ 760.867931][T19441] ? __pfx_do_recvmmsg+0x10/0x10 [ 760.867952][T19441] ? __mutex_unlock_slowpath+0x35d/0x930 [ 760.867979][T19441] ? __fget_files+0x21f/0x3d0 [ 760.868005][T19441] __x64_sys_recvmmsg+0x22a/0x280 [ 760.868029][T19441] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 760.868056][T19441] do_syscall_64+0x115/0x870 [ 760.868077][T19441] ? clear_bhb_loop+0x70/0xc0 [ 760.868099][T19441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.868117][T19441] RIP: 0033:0x7f093ed9e0d9 [ 760.868133][T19441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 760.868148][T19441] RSP: 002b:00007f093cff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 760.868163][T19441] RAX: ffffffffffffffda RBX: 00007f093f025fa0 RCX: 00007f093ed9e0d9 [ 760.868172][T19441] RDX: 000000000000036f RSI: 0000200000000d80 RDI: 0000000000000003 [ 760.868181][T19441] RBP: 00007f093cff6090 R08: 0000000000000000 R09: 0000000000000000 [ 760.868192][T19441] R10: 0000000000020102 R11: 0000000000000246 R12: 0000000000000002 [ 760.868204][T19441] R13: 00007f093f026038 R14: 00007f093f025fa0 R15: 00007ffe6ffb61a8 [ 760.868230][T19441] [ 761.075769][ T42] audit: type=1800 audit(2000000626.849:13753): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17059 res=0 errno=0 [ 761.127427][T19448] XFS (nbd7): no-recovery mounts must be read-only. [ 761.449803][ T5755] Bluetooth: hci0: command 0x0c1a tx timeout [ 762.021549][ T43] INFO: task syz.4.3315:17031 blocked in I/O wait for more than 143 seconds. [ 762.025013][ T43] Tainted: G L syzkaller #0 [ 762.027732][ T43] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 762.031746][ T43] task:syz.4.3315 state:D stack:25320 pid:17031 tgid:17030 ppid:15846 task_flags:0x400040 flags:0x00080002 [ 762.037319][ T43] Call Trace: [ 762.039159][ T43] [ 762.041356][ T43] __schedule+0x125c/0x6730 [ 762.043390][ T43] ? __pfx___schedule+0x10/0x10 [ 762.045451][ T43] ? find_held_lock+0x2b/0x80 [ 762.047602][ T43] ? schedule+0x225/0x2c0 [ 762.049394][ T43] schedule+0xdd/0x2c0 [ 762.051775][ T43] io_schedule+0x8a/0xf0 [ 762.053662][ T43] folio_wait_bit_common+0x414/0xa70 [ 762.055969][ T43] ? folio_wait_bit_common+0x2a0/0xa70 [ 762.058431][ T43] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 762.061710][ T43] ? __pfx_wake_page_function+0x10/0x10 [ 762.064182][ T43] ? __pfx___might_resched+0x10/0x10 [ 762.066421][ T43] ? compaction_free+0x17d/0x470 [ 762.068594][ T43] ? move_to_new_folio+0x1c1/0x4e0 [ 762.070809][ T43] migrate_pages_batch+0x7a1/0x45c0 [ 762.072938][ T43] ? __pfx_compaction_alloc+0x10/0x10 [ 762.075154][ T43] ? __pfx_compaction_free+0x10/0x10 [ 762.077319][ T43] ? __pfx_migrate_pages_batch+0x10/0x10 [ 762.079773][ T43] ? trace_sched_exit_tp+0x120/0x160 [ 762.081956][ T43] ? __schedule+0x126e/0x6730 [ 762.083887][ T43] migrate_pages_sync+0x4db/0x880 [ 762.085936][ T43] ? __pfx_compaction_alloc+0x10/0x10 [ 762.088065][ T43] ? __pfx_compaction_free+0x10/0x10 [ 762.091440][ T43] ? __pfx_migrate_pages_sync+0x10/0x10 [ 762.093742][ T43] migrate_pages+0x1a83/0x2850 [ 762.095808][ T43] ? isolate_migratepages_block+0xd74/0x61d0 [ 762.098284][ T43] ? __pfx_compaction_alloc+0x10/0x10 [ 762.100764][ T43] ? __pfx_compaction_free+0x10/0x10 [ 762.103045][ T43] ? __pfx_migrate_pages+0x10/0x10 [ 762.105180][ T43] ? __pfx_isolate_migratepages_block+0x10/0x10 [ 762.107810][ T43] ? putback_movable_pages+0x7e0/0xbd0 [ 762.110211][ T43] compact_zone+0x243c/0x4420 [ 762.112317][ T43] ? trace_sched_exit_tp+0x120/0x160 [ 762.114543][ T43] ? try_to_wake_up+0xd8d/0x1c90 [ 762.116667][ T43] ? __pfx_compact_zone+0x10/0x10 [ 762.118707][ T43] ? __flush_work+0xa38/0xcb0 [ 762.120720][ T43] ? __flush_work+0xa38/0xcb0 [ 762.122795][ T43] compact_node+0x17f/0x2c0 [ 762.124750][ T43] ? __pfx_compact_node+0x10/0x10 [ 762.126990][ T43] ? __lru_add_drain_all+0x441/0x650 [ 762.129148][ T43] sysctl_compaction_handler+0x141/0x210 [ 762.131570][ T43] proc_sys_call_handler+0x47f/0x5a0 [ 762.134393][ T43] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 762.136952][ T43] ? splice_from_pipe_next+0x1ec/0x5a0 [ 762.139174][ T43] iter_file_splice_write+0x830/0x10b0 [ 762.141713][ T43] ? copy_splice_read+0x739/0xbb0 [ 762.143924][ T43] ? __pfx_iter_file_splice_write+0x10/0x10 [ 762.146561][ T43] ? __pfx_copy_splice_read+0x10/0x10 [ 762.148948][ T43] ? __pfx_iter_file_splice_write+0x10/0x10 [ 762.151893][ T43] direct_splice_actor+0x192/0x690 [ 762.154156][ T43] splice_direct_to_actor+0x345/0xa30 [ 762.156530][ T43] ? __pfx_direct_splice_actor+0x10/0x10 [ 762.158929][ T43] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 762.161582][ T43] do_splice_direct+0x174/0x240 [ 762.163678][ T43] ? __pfx_do_splice_direct+0x10/0x10 [ 762.165893][ T43] ? avc_policy_seqno+0x9/0x20 [ 762.167953][ T43] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 762.170626][ T43] ? rw_verify_area+0xce/0x6d0 [ 762.172756][ T43] do_sendfile+0xadc/0xe20 [ 762.174652][ T43] ? __pfx_do_sendfile+0x10/0x10 [ 762.176755][ T43] __x64_sys_sendfile64+0x154/0x220 [ 762.178952][ T43] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 762.181558][ T43] do_syscall_64+0x115/0x870 [ 762.183565][ T43] ? clear_bhb_loop+0x70/0xc0 [ 762.185609][ T43] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.188149][ T43] RIP: 0033:0x7effa719e0d9 [ 762.190164][ T43] RSP: 002b:00007effa7ffd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 762.193656][ T43] RAX: ffffffffffffffda RBX: 00007effa7425fa0 RCX: 00007effa719e0d9 [ 762.197037][ T43] RDX: 00002000000000c0 RSI: 0000000000000005 RDI: 0000000000000006 [ 762.200414][ T43] RBP: 00007effa7235024 R08: 0000000000000000 R09: 0000000000000000 [ 762.203818][ T43] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 762.206982][ T43] R13: 00007effa7426038 R14: 00007effa7425fa0 R15: 00007ffd77ce7c08 [ 762.209724][ T43] [ 762.210869][ T43] [ 762.210869][ T43] Showing all locks held in the system: [ 762.214050][ T43] 1 lock held by khungtaskd/43: [ 762.216205][ T43] #0: ffffffff8ede8300 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 762.220342][ T43] 3 locks held by kworker/u33:22/8803: [ 762.222559][ T43] #0: ffff88801c0e4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 762.226240][ T43] #1: ffffc9000368fd08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 762.229731][ T43] #2: ffffffff90c99240 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 762.232668][ T43] 2 locks held by kworker/2:4/13103: [ 762.234350][ T43] #0: ffff88801c0aa940 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 762.238045][ T43] #1: ffffc9000355fd08 ((work_completion)(&m->mpeg_thread)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 762.241713][ T43] 1 lock held by udevd/13313: [ 762.243325][ T43] #0: ffff888028ce6350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 762.246417][ T43] 1 lock held by syz.4.3315/17031: [ 762.248038][ T43] #0: ffff888056eae460 (sb_writers#3){.+.+}-{0:0}, at: splice_direct_to_actor+0x345/0xa30 [ 762.251647][ T43] 1 lock held by syz.0.3713/18373: [ 762.253159][ T43] #0: ffff888028ce6350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 762.255818][ T43] 1 lock held by syz.5.4022/19416: [ 762.257248][ T43] #0: ffff888055712140 (&dev->mutex){....}-{4:4}, at: nfc_unregister_rfkill+0x51/0x2b0 [ 762.260097][ T43] 4 locks held by syz.5.4022/19418: [ 762.261530][ T43] #0: ffffffff90d48028 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 762.263896][ T43] #1: ffffffff90d480e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 762.266339][ T43] #2: ffff888055712140 (&dev->mutex){....}-{4:4}, at: nfc_dev_up+0x2f/0x3a0 [ 762.269121][ T43] #3: ffff888049e9c348 (&ndev->req_lock){+.+.}-{4:4}, at: nci_dev_up+0x9a/0x680 [ 762.272076][ T43] 2 locks held by syz.2.4026/19427: [ 762.273669][ T43] #0: ffffffff90d48028 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 762.276309][ T43] #1: ffffffff90d480e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 762.278964][ T43] 2 locks held by syz.6.4028/19437: [ 762.280619][ T43] #0: ffffffff90d48028 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 762.283179][ T43] #1: ffffffff90d480e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 762.285997][ T43] 2 locks held by syz.6.4028/19439: [ 762.287591][ T43] #0: ffffffff90d48028 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 762.290281][ T43] #1: ffffffff90d480e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 762.293297][ T43] 2 locks held by syz.6.4028/19442: [ 762.294981][ T43] #0: ffffffff90d48028 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 762.297577][ T43] #1: ffffffff90d480e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 762.300446][ T43] 2 locks held by syz.7.4033/19453: [ 762.302086][ T43] #0: ffffffff90c99240 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 762.304931][ T43] #1: ffffffff8edf3da8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 762.308034][ T43] [ 762.308763][ T43] ============================================= [ 762.308763][ T43] [ 762.311738][ T43] NMI backtrace for cpu 1 [ 762.311751][ T43] CPU: 1 UID: 0 PID: 43 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 762.311767][ T43] Tainted: [L]=SOFTLOCKUP [ 762.311771][ T43] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 762.311778][ T43] Call Trace: [ 762.311782][ T43] [ 762.311786][ T43] dump_stack_lvl+0x100/0x190 [ 762.311803][ T43] nmi_cpu_backtrace.cold+0x12d/0x151 [ 762.311818][ T43] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 762.311836][ T43] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 762.311861][ T43] sys_info+0x141/0x190 [ 762.311877][ T43] watchdog+0xcb1/0x1030 [ 762.311893][ T43] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 762.311906][ T43] ? __pfx_watchdog+0x10/0x10 [ 762.311920][ T43] ? __kthread_parkme+0x18c/0x230 [ 762.311937][ T43] ? kthread+0x13a/0x450 [ 762.311947][ T43] ? __pfx_watchdog+0x10/0x10 [ 762.311959][ T43] kthread+0x370/0x450 [ 762.311969][ T43] ? __pfx_kthread+0x10/0x10 [ 762.311981][ T43] ret_from_fork+0x72b/0xd50 [ 762.311998][ T43] ? __pfx_ret_from_fork+0x10/0x10 [ 762.312013][ T43] ? __switch_to+0x800/0x10f0 [ 762.312026][ T43] ? __pfx_kthread+0x10/0x10 [ 762.312037][ T43] ret_from_fork_asm+0x1a/0x30 [ 762.312059][ T43] [ 762.312063][ T43] Sending NMI from CPU 1 to CPUs 0,2-3: [ 762.354039][ C3] NMI backtrace for cpu 3 [ 762.354055][ C3] CPU: 3 UID: 0 PID: 5537 Comm: getty Tainted: G L syzkaller #0 PREEMPT(full) [ 762.354071][ C3] Tainted: [L]=SOFTLOCKUP [ 762.354075][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 762.354082][ C3] RIP: 0010:kasan_check_range+0x159/0x1e0 [ 762.354104][ C3] Code: 90 48 83 c0 01 49 89 d3 48 39 d0 74 0f 80 38 00 74 ef 4e 8d 5c 25 00 48 85 c0 75 9d 48 89 da 4c 89 d8 4c 29 da e9 32 ff ff ff <48> 85 d2 74 98 48 01 ea eb 1a 66 66 2e 0f 1f 84 00 00 00 00 00 66 [ 762.354114][ C3] RSP: 0018:ffffc900035bfec0 EFLAGS: 00000083 [ 762.354124][ C3] RAX: fffffbfff2283cda RBX: fffffbfff2283cdb RCX: ffffffff8212c35f [ 762.354131][ C3] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff9141e6d0 [ 762.354138][ C3] RBP: fffffbfff2283cda R08: 0000000000000000 R09: fffffbfff2283cda [ 762.354145][ C3] R10: ffffffff9141e6d7 R11: 0000000000000000 R12: ffff8880298a0000 [ 762.354151][ C3] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000001 [ 762.354158][ C3] FS: 00007f4c8812dc80(0000) GS:ffff8880d5edc000(0000) knlGS:0000000000000000 [ 762.354180][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 762.354189][ C3] CR2: 00007f093efed158 CR3: 00000000347ba000 CR4: 0000000000352ef0 [ 762.354196][ C3] Call Trace: [ 762.354201][ C3] [ 762.354207][ C3] trace_irq_enable.constprop.0+0x2f/0x160 [ 762.354237][ C3] trace_hardirqs_on_prepare+0x1d/0x30 [ 762.354251][ C3] do_syscall_64+0x23d/0x870 [ 762.354264][ C3] ? clear_bhb_loop+0x70/0xc0 [ 762.354277][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.354287][ C3] RIP: 0033:0x7f4c8827d407 [ 762.354297][ C3] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 762.354306][ C3] RSP: 002b:00007ffe35c56460 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 762.354316][ C3] RAX: 0000000000000000 RBX: 00007f4c8812dc80 RCX: 00007f4c8827d407 [ 762.354322][ C3] RDX: 0000000000000001 RSI: 00007f4c88478c06 RDI: 0000000000000001 [ 762.354328][ C3] RBP: 00007f4c88478c06 R08: 0000000000000000 R09: 0000000000000000 [ 762.354334][ C3] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 762.354340][ C3] R13: 00007f4c8812dc08 R14: 0000000000000002 R15: 0000000000000002 [ 762.354350][ C3] [ 762.354356][ C0] NMI backtrace for cpu 0 [ 762.354373][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 762.354395][ C0] Tainted: [L]=SOFTLOCKUP [ 762.354401][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 762.354410][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 762.354433][ C0] Code: a5 a9 02 e9 03 4c 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 83 50 2e 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 762.354449][ C0] RSP: 0018:ffffffff8ea07cf0 EFLAGS: 00000206 [ 762.354462][ C0] RAX: 00000000004a3ba3 RBX: ffffffff8ea91500 RCX: ffffffff8bbd5345 [ 762.354474][ C0] RDX: 0000000000000000 RSI: ffffffff8e3a6afe RDI: ffffffff8c601b80 [ 762.354484][ C0] RBP: fffffbfff1d522a0 R08: 0000000000000001 R09: ffffed100d48678d [ 762.354493][ C0] R10: ffff88806a433c6b R11: 0000000000000000 R12: 0000000000000000 [ 762.354502][ C0] R13: 0000000000000000 R14: 1ffffffff1d40fa2 R15: dffffc0000000000 [ 762.354513][ C0] FS: 0000000000000000(0000) GS:ffff8880d5bdc000(0000) knlGS:0000000000000000 [ 762.354544][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 762.354555][ C0] CR2: 00007f093f027dac CR3: 0000000034552000 CR4: 0000000000352ef0 [ 762.354567][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 762.354600][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 762.354613][ C0] Call Trace: [ 762.354619][ C0] [ 762.354624][ C0] default_idle+0x9/0x10 [ 762.354646][ C0] default_idle_call+0x6c/0xb0 [ 762.354667][ C0] do_idle+0x3a7/0x5b0 [ 762.354691][ C0] ? __pfx_do_idle+0x10/0x10 [ 762.354716][ C0] cpu_startup_entry+0x4f/0x60 [ 762.354739][ C0] rest_init+0x2d3/0x2e0 [ 762.354760][ C0] ? __pfx_rest_init+0x10/0x10 [ 762.354785][ C0] ? __pfx_kernel_init+0x10/0x10 [ 762.354807][ C0] ? acpi_ut_status_exit+0x111/0x1c0 [ 762.354863][ C0] ? acpi_ut_status_exit+0x111/0x1c0 [ 762.354881][ C0] ? acpi_enable_subsystem+0x4d9/0x4f0 [ 762.354910][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 762.354930][ C0] start_kernel+0x48e/0x490 [ 762.354949][ C0] x86_64_start_reservations+0x24/0x30 [ 762.354968][ C0] x86_64_start_kernel+0x12b/0x130 [ 762.354985][ C0] common_startup_64+0x13e/0x158 [ 762.355008][ C0] [ 762.355031][ C2] NMI backtrace for cpu 2 [ 762.355049][ C2] CPU: 2 UID: 0 PID: 14926 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 762.355073][ C2] Tainted: [L]=SOFTLOCKUP [ 762.355079][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 762.355089][ C2] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 762.355114][ C2] Code: c6 f5 5e 00 48 89 df 5b e9 dd 70 64 00 be 03 00 00 00 5b e9 52 38 14 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 8b 05 c5 ca 79 12 48 8b 34 24 65 48 8b 15 a1 ca 79 [ 762.355130][ C2] RSP: 0018:ffffc90005bbfc58 EFLAGS: 00000246 [ 762.355144][ C2] RAX: dffffc0000000000 RBX: ffffc90005bbfd48 RCX: ffffffff8bc01741 [ 762.355156][ C2] RDX: 1ffff92000b77fb3 RSI: ffffffff8bc01857 RDI: ffff8880329e0018 [ 762.355167][ C2] RBP: ffffc90005bbfd10 R08: 0000000000000001 R09: 0000000000000000 [ 762.355178][ C2] R10: 0000000000000000 R11: ffffffff81d6123c R12: ffff8880329e0000 [ 762.355189][ C2] R13: ffffffff8bc0183b R14: 0000000000000000 R15: 0000000000000000 [ 762.355199][ C2] FS: 0000555575dbc500(0000) GS:ffff8880d5ddc000(0000) knlGS:0000000000000000 [ 762.355232][ C2] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 762.355246][ C2] CR2: 00005636a0cbb000 CR3: 0000000013611000 CR4: 0000000000352ef0 [ 762.355257][ C2] Call Trace: [ 762.355263][ C2] [ 762.355270][ C2] do_nanosleep+0x3b3/0x500 [ 762.355297][ C2] ? __pfx_do_nanosleep+0x10/0x10 [ 762.355321][ C2] ? __asan_memset+0x23/0x50 [ 762.355343][ C2] ? __hrtimer_setup+0x208/0x330 [ 762.355369][ C2] hrtimer_nanosleep+0x14f/0x350 [ 762.355388][ C2] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 762.355407][ C2] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 762.355431][ C2] ? get_timespec64+0x147/0x240 [ 762.355451][ C2] ? __pfx_get_timespec64+0x10/0x10 [ 762.355472][ C2] common_nsleep+0xa1/0xd0 [ 762.355507][ C2] __x64_sys_clock_nanosleep+0x336/0x480 [ 762.355529][ C2] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 762.355552][ C2] do_syscall_64+0x115/0x870 [ 762.355571][ C2] ? clear_bhb_loop+0x70/0xc0 [ 762.355590][ C2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.355607][ C2] RIP: 0033:0x7f7ca595e90e [ 762.355621][ C2] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 762.355637][ C2] RSP: 002b:00007ffe952c2c08 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 762.355653][ C2] RAX: ffffffffffffffda RBX: 0000555575dbc500 RCX: 00007f7ca595e90e [ 762.355671][ C2] RDX: 00007ffe952c2c60 RSI: 0000000000000000 RDI: 0000000000000000 [ 762.355682][ C2] RBP: 00007ffe952c2ccc R08: 0000000000000000 R09: 0000000000000000 [ 762.355692][ C2] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 762.355703][ C2] R13: 00000000000927c0 R14: 00000000000b9cdb R15: 00007ffe952c2d20 [ 762.355720][ C2] [ 762.583353][ T43] Kernel panic - not syncing: hung_task: blocked tasks [ 762.586057][ T43] CPU: 0 UID: 0 PID: 43 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 762.589847][ T43] Tainted: [L]=SOFTLOCKUP [ 762.591391][ T43] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 762.595262][ T43] Call Trace: [ 762.596644][ T43] [ 762.597852][ T43] dump_stack_lvl+0x100/0x190 [ 762.599869][ T43] vpanic+0x552/0x970 [ 762.601406][ T43] ? __pfx_vpanic+0x10/0x10 [ 762.603148][ T43] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 762.605588][ T43] panic+0xd1/0xe0 [ 762.607099][ T43] ? __pfx_panic+0x10/0x10 [ 762.608797][ T43] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 762.610899][ T43] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 762.613206][ T43] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 762.615318][ T43] ? watchdog.cold+0x1ec/0x234 [ 762.617151][ T43] ? watchdog+0xcc1/0x1030 [ 762.618912][ T43] watchdog.cold+0x1fd/0x234 [ 762.620712][ T43] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 762.622885][ T43] ? __pfx_watchdog+0x10/0x10 [ 762.624591][ T43] ? __kthread_parkme+0x18c/0x230 [ 762.626415][ T43] ? kthread+0x13a/0x450 [ 762.627972][ T43] ? __pfx_watchdog+0x10/0x10 [ 762.629690][ T43] kthread+0x370/0x450 [ 762.631236][ T43] ? __pfx_kthread+0x10/0x10 [ 762.633142][ T43] ret_from_fork+0x72b/0xd50 [ 762.634955][ T43] ? __pfx_ret_from_fork+0x10/0x10 [ 762.636894][ T43] ? __switch_to+0x800/0x10f0 [ 762.638666][ T43] ? __pfx_kthread+0x10/0x10 [ 762.640252][ T43] ret_from_fork_asm+0x1a/0x30 [ 762.641854][ T43] [ 762.643388][ T43] Kernel Offset: disabled [ 762.644802][ T43] Rebooting in 86400 seconds..