last executing test programs: 5m1.731773392s ago: executing program 1 (id=2635): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x7, 0x1f45, 0x4, 0x7ff}, 0x4, 0x1, 0x0, 0x7, 0x2ff, 0xb, 0x1a, 0x1c, 0x4, 0x7131d5f9, {0x7, 0x80000001, 0x7, 0x81, 0x3, 0xf70a}}}}]}, 0x78}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x694, 0x51, 0x8001}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x685, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x7, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffa, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x2}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0xd, 0x7fff, 0x4, 0x8, 0x6}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x1, 0x1ff, 0x1000, 0x9c, 0x1, 0x7}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158142, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x2, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0xd, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x9, 0x6, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0xe628, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x4, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x2, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0x5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0x1ff, 0x9, 0x6, 0x6, 0x9, 0x83}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x8401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x84, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x0, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x9}, {0x7, 0xd, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0x7fff, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x7}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x4, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0xfffffffe, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x5}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b8}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x4, 0x1, 0x8, 0xfa2f}, {0x10, 0x5e20, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0xffffffff, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000002, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x2a8b7572, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x4, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x2001, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x3, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x3}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r5, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x4000880) 5m1.509667229s ago: executing program 1 (id=2637): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f00000005c0)}, 0x9}, {{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000001580)=""/4096, 0x1000}], 0x1}}], 0x2, 0x23, 0x0) sendto$inet6(r0, &(0x7f0000000140)="d0672ff1ee9e086ae1e6e842682ca5", 0xf, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 5m1.252230476s ago: executing program 1 (id=2640): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) setresuid(0x0, 0xee00, 0x0) r0 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x0, 0xeb}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0), 0x0) 5m1.251971662s ago: executing program 1 (id=2641): r0 = socket(0x10, 0x3, 0x0) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) read$nci(r2, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f00000004c0)='./file1/file0\x00', &(0x7f0000000500)='./file1/file0\x00', 0x0, 0x5040, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, 0x0) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r5, &(0x7f0000000040)="4eb5303e388e8d9b23", 0x9) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000200)=0x1000) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000001c0)={0x5fa, 0x7, 0x2, {0x1, @pix_mp={0xcf6, 0x101c00, 0x3432564e, 0x5, 0x8, [{0x2a382c, 0x10002}, {0x1, 0xfffffffc}, {0x5, 0x9}, {0x7fff0, 0x10001}, {0x2, 0xffffffff}, {0x6, 0x9}, {0x4, 0x8}, {0x8, 0x10000}], 0x7f, 0x4a, 0x0, 0x1}}, 0x80}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000003c0)={0x3, 0x6, 0x3, {0x1, @pix_mp={0x6, 0x9, 0x20363159, 0x9, 0x4, [{0x2776463d, 0x7}, {0xfffffffc, 0x7f}, {0xffffffff, 0xffff}, {0x1, 0x42}, {0x7, 0x310cb2b8}, {0x7fffffff, 0x80}, {0x614, 0xfffffffc}, {0x81, 0x6}], 0xa0, 0x7f, 0x7, 0x0, 0x7}}, 0x8}) sendmsg$nl_generic(r0, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x134, 0x2a, 0x8, 0x70bd27, 0x25dfdbfd, {0x1e}, [@typed={0x7f, 0xf, 0x0, 0x0, @binary="a0e23c9678668a28b489b4a387448e6b06e880a7630420286c20da6d479cffb9b9aead7d306db8aedc84f5344f291047314162846c2b9a278d4fa023b53e252e474f05bfe6389d017e7d3fba86a6aaa7296da61b94771ee5e7581ae8c7d9c0b9223d592393913aecd1bb81f7a9a50b6ad446f68abee0fd89bd949c"}, @generic="d5db7fd563db33792d793fdb0ce4b86b7c0a645227516a6cc3032d6a4d4e29e45e202dbcbae92c0bb7767da24e26a5a80159151b8335bae2782e3ce3e135537d9866d679e1b38f00b5454e80efb7e1351cbfece7b736bea31b5380de170a51a4da82170c2b69ac2112bbd70adc3780e4c4127a88a5c8af7ca80c2c5601cfc18d9022bf79a58a3cb81738f12b85e4a559bea38099c0c30c91737ced055cc658ef"]}, 0x134}, 0x1, 0x0, 0x0, 0x40000}, 0x841) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSIG(r6, 0x40045436, 0x38) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) 5m1.150508723s ago: executing program 1 (id=2642): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x20000002, 0x8, 0xfffffffb, 0x2, 0x2}, 0x5, 0x1, 0x80000000, 0x2, 0x7, 0x17, 0x2, 0x1e, 0x0, 0x800000e, {0x0, 0x7fff, 0x225, 0x3, 0x9, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x884}, 0x40) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 5m0.951503724s ago: executing program 1 (id=2647): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$kcm(0x2a, 0x2, 0x0) r0 = socket$kcm(0x2a, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) socket(0x40000000015, 0x5, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYBLOB], 0x63}, 0x1, 0x0, 0x0, 0x20000045}, 0x40046) sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) 5m0.800031981s ago: executing program 32 (id=2647): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$kcm(0x2a, 0x2, 0x0) r0 = socket$kcm(0x2a, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) socket(0x40000000015, 0x5, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYBLOB], 0x63}, 0x1, 0x0, 0x0, 0x20000045}, 0x40046) sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) 2m20.130837958s ago: executing program 0 (id=3974): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x20000002, 0x8, 0xfffffffb, 0x2, 0x2}, 0x5, 0x1, 0x80000000, 0x2, 0x7, 0x17, 0x2, 0x1e, 0x0, 0x800000e, {0x0, 0x7fff, 0x225, 0x3, 0x9, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x3e, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x4c}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2c3f, 0x3, 0x20000000, 0x2, 0x7}, 0x1e}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc140000134788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 2m19.859180811s ago: executing program 0 (id=3983): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000080)={@link_local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb3e02", 0x40, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "974367", 0x0, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [@dstopts={0x0, 0x1, '\x00', [@padn={0x1, 0x33, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@local, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x7}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x81, 0xfffffffffffffff9, 0x0, 0x0, 0x3}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r2, &(0x7f0000000240)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000600)={r0, r0, 0x8, 0x20, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) 2m19.779965487s ago: executing program 0 (id=3986): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x8000, &(0x7f0000000140)={[{@volatile}]}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x3, 0x81, 0xffffffff}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000040)=@framed={{0xffffffb7, 0x7, 0x0, 0x0, 0x0, 0x63, 0x11, 0x88}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x400}]}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc8, &(0x7f00000002c0)=""/200, 0x0, 0x13, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x94) 2m19.650813384s ago: executing program 0 (id=3988): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x2, 0x2, 0xfffe, 0x2, 0x0, 0x0, 0xfff9, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) close(0x3) 2m17.839087285s ago: executing program 0 (id=3992): r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r2 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r2, 0x40086e81, &(0x7f00000001c0)=0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/pci/rescan\x00', 0x1, 0x111) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x3, 0x0, @SEQ_CONTROLLER=0xfe, 0x0, 0x4}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001140)=r6, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000000)=r7, 0x4) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @private=0xa010100}, 0x10) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c00000000201010200000000000000000300000108000340000000041c0010800800024000000007080003400000000808000240000000030c001980"], 0xc0}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r9 = syz_open_dev$dvb_demux(&(0x7f0000000040), 0x7, 0x187000) preadv(r9, &(0x7f0000000940)=[{&(0x7f00000000c0)}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/4, 0x4}, {&(0x7f0000000780)=""/203, 0xcb}, {&(0x7f0000000880)=""/170, 0xaa}], 0x5, 0x40, 0x8) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f0000000340)='\x00', 0x1) write(r3, &(0x7f0000000100)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/rescan\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='1', 0x1) 2m17.72742294s ago: executing program 0 (id=3996): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x0, 0x7, 0x8, 0x4, 0xc, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x2, 0xc, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) (fail_nth: 13) 2m2.687662998s ago: executing program 33 (id=3996): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x0, 0x7, 0x8, 0x4, 0xc, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x2, 0xc, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) (fail_nth: 13) 1m26.038396544s ago: executing program 4 (id=4435): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000004c0)="f058050000007f8f", 0x8}], 0x1}, 0x5) 1m24.458157274s ago: executing program 4 (id=4439): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1000008, 0x0, 0x2, 0x8, 0x7}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000040800000827600000020000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 1m24.248894238s ago: executing program 4 (id=4443): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000fff50000000000000a20000000000a05000000000000000001070000000900010073797a30000000003c0000001c0a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000"], 0x140}}, 0x0) 1m24.171015291s ago: executing program 4 (id=4444): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000080)={'tunl0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r3, 0xffffffffffffffff, 0x2f}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="3801003a000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c000280050001000000000008000740"], 0x138}, 0x1, 0x0, 0x0, 0x1}, 0x4) 1m24.108051077s ago: executing program 4 (id=4446): mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000800)='./sys\x00', &(0x7f0000000840)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/nd/drivers/nd_pmem/unbind\x00', 0x1, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f00000002c0)=ANY=[@ANYRESDEC], 0x28) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, 0x0, 0x0) gettimeofday(0x0, &(0x7f0000000080)) (async) keyctl$restrict_keyring(0xa, 0x0, 0x0, &(0x7f0000000000)='i\xacl*c\x822') (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) (async) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) (async) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) pause() (async) r3 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000140)={0x3, 0x0, 0x2}) (async) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) write(r0, &(0x7f0000000240)='namespace0.0', 0xc) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/nd/drivers/nd_pmem/bind\x00', 0xa001, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000080)={0x43, 0x3, 0x3, 0x3}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000001800090400000000000000000a002000000000000000000008001e000100"], 0x38}}, 0x0) (async) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) (async) sendfile(r2, r4, &(0x7f00000000c0)=0x3, 0x7fff) (async) write(r4, &(0x7f0000000340)='namespace0.0', 0xc) 1m24.007782471s ago: executing program 4 (id=4448): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000004d00)={0x24, 0x14, 0x211, 0x0, 0x0, {0x28}, [@INET_DIAG_REQ_BYTECODE={0xe, 0x1f, "e7bdd191486e8e3bf079"}]}, 0x24}}, 0x0) 1m8.186392057s ago: executing program 34 (id=4448): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000004d00)={0x24, 0x14, 0x211, 0x0, 0x0, {0x28}, [@INET_DIAG_REQ_BYTECODE={0xe, 0x1f, "e7bdd191486e8e3bf079"}]}, 0x24}}, 0x0) 43.860718823s ago: executing program 3 (id=4748): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff020002001f0000", 0x1c) 43.860381361s ago: executing program 3 (id=4749): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x328, 0xffffffff, 0xffffffff, 0x328, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00], [0x700], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x200}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xff], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x6c, 0x0, 0x0, 0x4b}, 0x0, 0x228, 0x258, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x9}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x6, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x49b) 43.76395067s ago: executing program 3 (id=4750): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000040010000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000010006600020000000000180000000000000000000000000000209500040000000000360a0200000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ffffff0000850000000600000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 43.762923977s ago: executing program 3 (id=4751): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r2, &(0x7f0000000200)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000300)=[{0x18, 0x110, 0x1, 'd'}], 0x18}, 0x0) (async) close(r2) (async) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) close(r1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000001c0)=0x1, 0x4) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) 43.700908549s ago: executing program 3 (id=4752): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0xc, 0x3, 0x0, 0x2, 0x1}, 0x30, 0x2) landlock_restrict_self(r0, 0x0) (async) landlock_restrict_self(r0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file1\x00') 43.700259957s ago: executing program 3 (id=4753): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000080)={'tunl0\x00', 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast1, @broadcast, @multicast1}}}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f00000000c0)=0x58, 0x5) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x14, 0xa, 0xb9, 0x0, 0x7, 0x10000, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r7, 0xae80, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r8, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r9, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="01000000000000000400a9fe000000000000000000000000000000006bf287ef4c459d68157820b107c4e3300fb20497cc7679217ebb39f41eccdbfe732669b8257ef99a94d597cfd794aa1392ddea51c50fb82ac9796d0cc8b4384ce66e7c15ac15fa8f4fbb362df3f992cc3ab2ad1c9ec94624c7c456eb80113032449a809f67b7b963b51d9e59e74c60d49fe347b59b32af73d0e672d778196eb55495630d12690d45ec8387c2bb670440437b3ae9f93ff0baec5aa29eaf984421284a522af4412b945073bedecae951"], 0x50) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000200)={@cgroup, 0xffffffffffffffff, 0x34, 0x14, 0x0, @void, @value=r5}, 0x20) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c000280050001000000000008000740"], 0x138}, 0x1, 0x0, 0x0, 0x1}, 0x4) 28.663714917s ago: executing program 35 (id=4753): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000080)={'tunl0\x00', 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast1, @broadcast, @multicast1}}}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f00000000c0)=0x58, 0x5) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x14, 0xa, 0xb9, 0x0, 0x7, 0x10000, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r7, 0xae80, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r8, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r9, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="01000000000000000400a9fe000000000000000000000000000000006bf287ef4c459d68157820b107c4e3300fb20497cc7679217ebb39f41eccdbfe732669b8257ef99a94d597cfd794aa1392ddea51c50fb82ac9796d0cc8b4384ce66e7c15ac15fa8f4fbb362df3f992cc3ab2ad1c9ec94624c7c456eb80113032449a809f67b7b963b51d9e59e74c60d49fe347b59b32af73d0e672d778196eb55495630d12690d45ec8387c2bb670440437b3ae9f93ff0baec5aa29eaf984421284a522af4412b945073bedecae951"], 0x50) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000200)={@cgroup, 0xffffffffffffffff, 0x34, 0x14, 0x0, @void, @value=r5}, 0x20) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c000280050001000000000008000740"], 0x138}, 0x1, 0x0, 0x0, 0x1}, 0x4) 2.660052702s ago: executing program 2 (id=5133): r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000003f80), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x14, r2, 0x1, 0x0, 0x0, {0x49}}, 0x14}}, 0x0) readv(r0, &(0x7f00000025c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/239, 0xef}, {&(0x7f00000013c0)=""/195, 0xc3}, {&(0x7f0000000100)=""/62, 0x3e}, {&(0x7f00000014c0)=""/4096, 0xfffffffffffffffa}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000002680)=""/264, 0x108}, {&(0x7f00000001c0)=""/6, 0x6}, {&(0x7f0000000240)=""/56, 0x38}], 0x9) r3 = dup3(r0, r0, 0x0) pwrite64(r3, &(0x7f0000000000)="1460e88ea4b52dd2c142f444d31b7f2dff736506d6280ff20779bcc27fbd5ffa82c744b16989925644c83fe940d9c4bb2e1786a05b7fd4fd9b40fb2302d1f8247f48cfbe3c33fda90fe6f84254ccd513b498ae76e8433a61fd3edbbbd5a4ead9447fcd62795017a9fa4f69ad1787aa28f0e6a9c97067e42d2b081a778e8e8e82241a0ea416577ddb41d0c73caded430f57a25545100622360b3c1eceb2f9e60d4ffd230788b04eb8", 0xa8, 0x4) 2.570552374s ago: executing program 2 (id=5135): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x34}}, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0xfffffffd, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1f}}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x44004) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006800e97802000000000000000a0000000000000008000500", @ANYRES32=r5], 0x20}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) 2.5703585s ago: executing program 2 (id=5136): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r1, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x100000000000000, 0x40800}, 0x0) 2.490625379s ago: executing program 2 (id=5137): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x134}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001000000000000000c000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff0008000340000000384c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003801c0000800800034000000002100002800c000280080001800000000014000000020a01"], 0xf4}}, 0x0) 2.490456997s ago: executing program 2 (id=5138): prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) memfd_create(&(0x7f0000000a40)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x06t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\x04n0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81\xbd\xd5\x00\x00C6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x1c\xd11\xfc\xa7\x93E\xff\xff\xd0\xac\b\x01\x10\xcc\xcd\x9a0\xd83\xb6\r\xbb\xe1u_KUd3l\x862\xa8I\xa7\x8f\xfb\xed\xdbn\xbd\xbe\xf0+a\xc8JC\x03:&9\xae\xb8\xd8TdMf[\x1c\n#\x87\xfc\x81O`\x19P\x142~|\xdf\xbc\xaf\xe4^\xac\xa5\xfbyy\xcb\f\x14}g\xa7\xc2\xe1\xa9\xdf\xbf\xdbV\x94:\xa6I\xa9\x15\x0f', 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) userfaultfd(0x80001) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) io_submit(r1, 0x0, &(0x7f0000001300)) 2.350149092s ago: executing program 2 (id=5139): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) close(r0) syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x2c, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x28040811}, 0x4000) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000480)={0x1c8, r5, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IE={0x1ab, 0x2a, [@fast_bss_trans={0x37, 0xe7, {0x1, 0x6, "561a6d1ad08bd11b201a12fbc784efbf", "bfd7059122ab56d936c91afa615edac8181fe383a5135e9cc749ce1163e68c95", "fdda98e4c468a43c4418fdd491c485bc135e69d7296d3df58f585ba8cc0aa66d", [{0x4, 0x10, "854965f22950b655e49ecd45674f3a91"}, {0x4, 0x1c, "cb4ee469226954494428f4cc0a33980dd4aa03146783308c2d9dbfdb"}, {0x4, 0x24, "ffe4197eb024ef91893cbf5528f6bda147fb5f27758b2d4a0f5333e47328a18dc9850440"}, {0x3, 0x10, "033535ae9b1d94457890d8b610aa0dd5"}, {0x1, 0x1f, "6855d2cf4862878b2196a868cda2bf28ccf7e6c39cca16864eb777415da646"}, {0x4, 0xa, "3d8e0b10a03fda3d04c7"}]}}, @dsss={0x3, 0x1, 0xad}, @challenge={0x10, 0x1, 0x19}, @random_vendor={0xdd, 0xae, "d430d3678006b1c9f2f8380e8c6b335b8151957eada64b96b89ddefe0f36e18929a8a8b422682402f231ab4f27bd8e9ad63da39e5668c736ca9600e4c8727a7e158646543ce1c343c20e433700cfde87d656e67a10d21aef14b3de79e677b3b2107e8f9e6e39a01593f9455e339d79ee5e715eb5dbe6ee081db73fcefd3bc8da5bbff66bdff1f52bb2504a0657aec62093ca92ab3e54c2fb50f0a3c38c66d4f3b11e26082dd426b697b888b93e67"}, @cf={0x4, 0x6, {0x7, 0x0, 0x0, 0x1ff}}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000300)={'aio_iiro_16\x00', [0x100, 0x4, 0x4, 0x2, 0x5, 0x100, 0x3, 0x20000010, 0x800, 0xb, 0x0, 0x7, 0x1, 0x401, 0x10001, 0x1, 0x0, 0x8, 0xfe9, 0x401, 0x3, 0x2, 0x7, 0x9, 0x48, 0x9, 0x7, 0x6a7a, 0x5, 0x7, 0x8]}) ioctl$KVM_CREATE_VM(r0, 0x40045506, 0x23) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x7, @broadcast, 'macvlan1\x00'}}, 0x1e) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r8, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r8, 0x8949, &(0x7f0000000000)) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000160051c31a2970000000000006"], 0x14}}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x20008800}, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r7, 0xc0106401, &(0x7f0000000080)={0x0, 0x0}) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="200000000f14010027bd7000040000000d0045e86e70615f766e4b9d00000000"], 0x20}}, 0x4004044) mkdirat(0xffffffffffffffff, &(0x7f0000000340)='./file1\x00', 0x80) ioperm(0x0, 0x7fff, 0x15f9) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB='ode_hardlimit=696e,\x00'/31]) 1.200160338s ago: executing program 7 (id=5158): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x1, 0xffffffffffffffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x44044c81}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x1, 0xffffffffffffffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x44044c81}, 0x0) (async) 1.19996584s ago: executing program 7 (id=5159): syz_io_uring_setup(0x5c26, &(0x7f0000000240)={0x0, 0x0, 0x13290, 0x0, 0xfffffffc}, &(0x7f0000000440), &(0x7f0000000080), &(0x7f0000000000)) 1.129628661s ago: executing program 7 (id=5160): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x1, 0x0) pselect6(0x40, &(0x7f0000000200)={0x6, 0x7, 0x5, 0x400000000000000c, 0x0, 0x6, 0x401, 0x6}, 0x0, &(0x7f0000000280)={0x9, 0x8000000000000000, 0x7ffffffffffffffc, 0x8, 0x0, 0x3, 0x4, 0x6}, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 'id0\x00'}) openat$cgroup_type(r2, &(0x7f0000000140), 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x20000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 501.018622ms ago: executing program 5 (id=5163): r0 = socket(0x400000000010, 0x3, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000400), 0x0, 0x0) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$9p_unix(&(0x7f0000003680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003600)='.\x00', &(0x7f0000003640), 0x2000000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f00000000c0)={'bond_slave_1\x00', @random="0163014030d9"}) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r1, 0xc0884123, &(0x7f0000000240)={0x1, "fe4bc2070c8230d64a620097e2e100001a424ec9a919621a41f878718cb22a406b87762a90ae10a800", {0xff, 0x9}}) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="40010000", @ANYRES16=r5, @ANYBLOB="000025bd7000fcdbdf2514000000080001007063690011000200303030303a30303a31302e3000000000080003000116000008000b000505000006001100030000000800150005000000080001007063690011000200303030303a30303a31302e3000000000080003000100000008008f18f54e9b254300000800150078000000080001007063690011000200303030303a30303a31302e3000000000080003000200000008000b008000000006001100e006000008001500860d0000080001007063690011000200303030303a30303a31302e3000000000080003000300000008000b00070000000600110005000000080015000f000000080001007063690011000200303030303a30303a31302e3000000000080003000300000008000b000800000006002f6a0a3e00000800150005800000eb2c3c06177ac085a6f63fb5bb40f599c826f9de2fa837afb78945e6f527a6962144e5d8973ce23fda9aca7543a16654faacaa99098b407fe7c8c33ca51d9ac0185d3c44ac236d08d3ac007b16b9f3330000000000"], 0x140}, 0x1, 0x0, 0x0, 0x20040004}, 0x40050) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r7, 0x54a0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0xa, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r9, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x1, 0x600, 0x1}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="8580f83288e1aaaaaaaaaab06f004515001c00670000000290780a010102e000000111819078e0000001"], 0x0) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 500.625213ms ago: executing program 6 (id=5164): r0 = socket(0x1e, 0x6, 0xa) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0xd10}}}}, 0x11) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa}, "fb213a6034d769f238f2"}, 0xe) creat(&(0x7f0000000040)='./file0\x00', 0x0) lremovexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@random={'trusted.', '\x00'}) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000300)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c561e117436c379000000000000000058000b4824ca945f6400d40f6a0325010ebc000000000000008000f0fffeffd809005300fff5dd00000010000100070c060000000000224e0000", 0x58}], 0x1) socket(0x1e, 0x6, 0xa) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x6, 0xd10}}}}, 0x11) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa}, "fb213a6034d769f238f2"}, 0xe) (async) creat(&(0x7f0000000040)='./file0\x00', 0x0) (async) lremovexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@random={'trusted.', '\x00'}) (async) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) (async) socket$netlink(0x10, 0x3, 0x4) (async) writev(r1, &(0x7f0000000300)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c561e117436c379000000000000000058000b4824ca945f6400d40f6a0325010ebc000000000000008000f0fffeffd809005300fff5dd00000010000100070c060000000000224e0000", 0x58}], 0x1) (async) 440.570844ms ago: executing program 6 (id=5165): prctl$PR_SET_ENDIAN(0x14, 0x0) 440.35562ms ago: executing program 6 (id=5166): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x328, 0xffffffff, 0xffffffff, 0x328, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xa8, 0xc7}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x200}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xff], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x6c, 0x0, 0x0, 0x4b}, 0x0, 0x228, 0x258, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x9}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x6, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x49b) 378.881428ms ago: executing program 6 (id=5167): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r1, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0xfe0f) 377.885952ms ago: executing program 6 (id=5168): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000080)={'tunl0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r3, 0xffffffffffffffff, 0x2f}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000100020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c000280050001000000000008000740"], 0x138}, 0x1, 0x0, 0x0, 0x1}, 0x4) 279.954472ms ago: executing program 5 (id=5169): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000040)={{@local, 0x8}, 0x1, 0x1, 0x7}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000040)={{@local, 0x8}, 0x1, 0x1, 0x7}) close_range(r0, r0, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000080)={{@host, 0x1}, 0x1, 0x0, 0x6}) ioctl$IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, &(0x7f00000000c0)={0x86e1, 0x4, 0x8}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$FUSE(r1, &(0x7f0000000140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$OCFS2_IOC_INFO(r1, 0x80106f05, &(0x7f00000057c0)={&(0x7f0000005600)=[&(0x7f0000002180)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000001}, {}, 0x2}, &(0x7f00000022c0)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x80000000}, {}, 0x8}, &(0x7f0000002400)=@features={{0x4f32494e, 0x6, 0x10}}, &(0x7f0000002440)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x140000000}}, &(0x7f0000002480)=@features={{0x4f32494e, 0x6, 0x10, 0xc0000001}}, &(0x7f00000024c0)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000001}}, &(0x7f0000002500)=@uuid={{0x4f32494e, 0x5, 0x10}}, &(0x7f0000002540)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000000}}, &(0x7f0000002580)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x80000000}, {}, 0x1}, &(0x7f00000026c0)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x40000000}}, &(0x7f0000002700)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x1}}, &(0x7f0000002740)=@label={{0x4f32494e, 0x4, 0x10, 0x40000000}}, &(0x7f00000027c0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0xc0000000}}, &(0x7f0000002800)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x40000000}}, &(0x7f0000002840)=@label={{0x4f32494e, 0x4, 0x10}}, &(0x7f00000028c0)=@label={{0x4f32494e, 0x4, 0x10, 0x80000001}}, &(0x7f0000002940)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000001}}, &(0x7f0000002980)=@freefrag={{0x4f32494e, 0x9, 0x10}, {}, 0x9}, &(0x7f0000002ac0)=@label={{0x4f32494e, 0x4, 0x10, 0x1}}, &(0x7f0000002b40)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000001}}, &(0x7f0000002b80)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x1}}, &(0x7f0000002bc0)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000001}}, &(0x7f0000002c00)=@features={{0x4f32494e, 0x6, 0x10, 0x40000000}}, &(0x7f0000002c40)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000000}}, &(0x7f0000002c80)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000001}}, &(0x7f0000002cc0)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000002}}, &(0x7f0000002d00)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x1}}, &(0x7f0000002d40)=@clustersize={{0x4f32494e, 0x1, 0x10, 0xc0000000}}, &(0x7f0000002d80)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x1}, [{0x2}, {0xfffffffffffffffd, 0xffffffffffffffff}, {0x1, 0xfffffffffffffff9}, {0xde, 0x1}, {0xa, 0x6eb5}, {0x7fff, 0x5}, {0x3, 0x6d2f}, {0xd, 0x2}, {0x5fd30822, 0x3}, {0x8000000000000000, 0x9}, {0x1, 0x9}, {0xffffffffffff12fd, 0xe}, {0x0, 0x6}, {0x8, 0x4}, {0x81, 0x7}, {0x400, 0x846e}, {0x62c, 0x103}, {0x1}, {0x6, 0x4}, {0x0, 0x1}, {0x101, 0x9}, {0x5, 0x2}, {0x4, 0x9}, {0x401, 0xbb}, {0x6, 0xfffffffffffff53e}, {0xfffffffffffffff9, 0x2}, {0xfffffffffffffff8}, {0xff, 0x6}, {0x1, 0x6}, {0x3}, {0xc, 0x3}, {0x5, 0x3ffc0}, {0x7f, 0x5}, {0x6, 0x5}, {0xfffffffffffffffe, 0x186}, {0x4, 0x6}, {0xbdc4, 0xe49}, {0x1, 0x81}, {0x0, 0x2}, {0x7, 0x8}, {0x3a1, 0x6}, {0x9, 0xbbb3}, {0xa}, {0x401, 0x9}, {0x2, 0x6}, {0xffffffff00000001, 0x6a}, {0x4, 0x9}, {0x9, 0x9}, {0x100000001, 0x5}, {0x200, 0x100000001}, {0x5, 0xd8}, {0x66e, 0x76e}, {0xffffffffffffffff, 0x2f8}, {0x8, 0x8}, {0xfffffffffffffffa, 0x5}, {0x7, 0x5}, {0x5, 0x7}, {0x7fffffff, 0x2}, {0x101, 0xffffffffffffff0e}, {0xa1, 0x6b}, {0x5, 0x1}, {0xffffffff, 0x5}, {0x8, 0x5}, {0xcf, 0x4}, {0x7fff, 0x1000}, {0x4, 0x8000}, {0x6, 0x654}, {0x8f85, 0xc8a6}, {0x1, 0x2}, {0x6, 0x5}, {0x80000000, 0x8fc2}, {0xffffffffffffff6c, 0x4}, {0x7, 0x3cb}, {0x7f, 0x2}, {0x6, 0x7f}, {0x3, 0x5}, {0xffffffffffff8000, 0x100000001}, {0x19, 0x2577}, {0x9, 0x2}, {0x1ff, 0x936}, {0x2, 0x9}, {0x3, 0x7}, {0xfffffffffffffffc, 0x10001}, {0x3, 0x1c000000000}, {0x1ff, 0xa}, {0xfa, 0x80000000}, {0x10000000000, 0x292d0ba8}, {0xffffffffffffffff, 0xffffffffffffff03}, {0x5, 0x1}, {0x4, 0x9}, {0x7, 0x1}, {0x8, 0x2}, {0x40, 0x4}, {0x8, 0x40}, {0x8000000000000000, 0xfffffffffffffff1}, {0xb36f, 0x6}, {0x80000000, 0x2}, {0x4, 0x8}, {0x6, 0x8}, {0x3, 0xaba}, {0x8, 0x1}, {0x4, 0x3ff}, {0x3ff, 0x1fe}, {0x8000000000000001, 0x100}, {0x6abb, 0x4}, {0x1, 0x496}, {0xc4f, 0x27}, {0x3, 0xf}, {0x5, 0x2}, {0xd}, {0xd9b0, 0x9}, {0x100000001, 0x1}, {0x9, 0x9}, {0x9, 0x200}, {0x5, 0x2}, {0x3, 0x5}, {0x773, 0x2}, {0x0, 0x4}, {0x5, 0xd}, {0x2, 0x9}, {0x8000000000000001, 0x6}, {0x8, 0x1b3}, {0x2, 0x2}, {0x1, 0xffffffff}, {0xffffffffffffffff, 0xb6}, {0x0, 0x4}, {0xffffffffffffffff, 0x7}, {0x2, 0x23c}, {0x6, 0x8}, {0x9, 0x1}, {0x7, 0xff}, {0x3, 0x4}, {0x6, 0x4}, {0x1e85, 0x1}, {0x5, 0xfffffffffffffaa7}, {0x7364, 0xffffffffffffffd5}, {0x4, 0x2}, {0x7ab5, 0x9}, {0x1, 0x3ff}, {0x8000000000000000, 0x3}, {0x8001, 0x3}, {0xd7, 0x4}, {0x7ff, 0x4}, {0x100000001, 0x7fffffff}, {0x2, 0x8080000}, {0xfffffffffffffffa, 0x800}, {0x861, 0x611}, {0xfe, 0x20000}, {0x7fffffffffffffff, 0xff1}, {0x2, 0x80}, {0x1, 0x3}, {0x0, 0x4b59}, {0xe2, 0x7f}, {0x2, 0xce}, {0xbb, 0xff}, {0x4}, {0x6, 0x7}, {0x6, 0x1}, {0x67, 0x1}, {0x2, 0xfffffffffffffff9}, {0x9, 0xec}, {0x80, 0x8000000000000001}, {0x9, 0xffffffff}, {0xa, 0xdf}, {0x4, 0x2}, {0x3, 0xfff}, {0x9, 0xfffffffffffffffa}, {0xffff, 0x400}, {0x1, 0xe4c3}, {0x2, 0x2}, {0x4, 0x2}, {0x7fff, 0x7ff}, {0x7fffffffffffffff, 0x5}, {0x0, 0xc}, {0x9a, 0x4}, {0xffff, 0xfffffffffffffff7}, {0x9, 0xd}, {0x6, 0x5}, {0x800, 0x1ff}, {0xaa6, 0x1ff}, {0x7fff, 0x6}, {0x80, 0x10000}, {0x10001, 0x2}, {0x31}, {0x0, 0x1}, {0x9, 0x5461}, {0x6, 0x69}, {0x2c9, 0xffffffff}, {0x732c, 0x3}, {0x2, 0x80}, {0x803, 0x2772}, {0x4cd1, 0x2}, {0x10000000, 0x5}, {0x8000, 0x3}, {0x6, 0x9}, {0x7, 0x5}, {0x73}, {0xff, 0x2}, {0x100000001, 0x8}, {0x3ff, 0x1ff}, {0x5, 0x6}, {0x8, 0x40}, {0x0, 0xff}, {0x7, 0x5}, {0xd9db, 0x3}, {0x10001, 0x63b}, {0xfffffffffffffe01, 0xffffffffffffffff}, {0x7f, 0x93}, {0x4, 0x6}, {0x7, 0x2}, {0x3ff, 0xf84a}, {0x964, 0x65}, {0x6, 0x7fff}, {0xc2, 0x5}, {0x4, 0x3}, {0x4, 0x6}, {0x1, 0x1}, {0x216, 0x3}, {0x10000, 0x1}, {}, {0x92, 0x8000000000000001}, {0x60d1}, {0x8, 0x5}, {0xdd, 0x7f}, {0x7, 0x4}, {0x1, 0x6}, {0x5, 0x140000000000000}, {0x4, 0xe}, {0x6}, {0x4, 0xfffffffffffffff8}, {0x0, 0x8}, {0x2, 0x7}, {0x5, 0xffffffffffffff6b}, {0x1000, 0x5203a153}, {0x101, 0x2}, {0x100000001, 0x200}, {0x8001, 0x3}, {0x3}, {0x400, 0x4}, {0x4, 0x4}, {0xb14, 0x100000000}, {0x2, 0x7}, {0x7645, 0x6}, {0x7, 0x9}, {0x1, 0x1}, {0x4, 0xffff}, {0x30d, 0x4}, {0x5, 0x7}, {0x2, 0x1}, {0x51b19b16, 0x5}, {0xa80, 0x8}, {0xffff, 0xfffffffffffffffb}, {0x8001, 0x3ff}, {0x8, 0x9}, {0xfff, 0xd869}]}, &(0x7f0000003dc0)=@maxslots={{0x4f32494e, 0x3, 0x10, 0xc0000000}}, &(0x7f0000003e00)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000001}}, &(0x7f0000003e40)=@blocksize={{0x4f32494e, 0x2, 0x10}}, &(0x7f0000003e80)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x40000000}}, &(0x7f0000003ec0)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000001}}, &(0x7f0000003f00)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000001}}, &(0x7f0000003f40)=@features={{0x4f32494e, 0x6, 0x10, 0x40000000}}, &(0x7f0000003f80)=@label={{0x4f32494e, 0x4, 0x10, 0xa0000000}}, &(0x7f0000004000)=@label={{0x4f32494e, 0x4, 0x10, 0xc0000000}}, &(0x7f0000004080)=@features={{0x4f32494e, 0x6, 0x10, 0x1}}, &(0x7f00000040c0)=@label={{0x4f32494e, 0x4, 0x10, 0x40000000}}, &(0x7f0000004140)=@blocksize={{0x4f32494e, 0x2, 0x10}}, &(0x7f0000004180)=@uuid={{0x4f32494e, 0x5, 0x10, 0x1}}, &(0x7f00000041c0)=@journal={{0x4f32494e, 0x7, 0x10}}, &(0x7f0000004200)=@features={{0x4f32494e, 0x6, 0x10, 0x1}}, &(0x7f0000004240)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x80000001}, [{0x7, 0xffffffffffff8001}, {}, {0xffffffffffffff80, 0x5}, {0x4, 0x7fffffffffffffff}, {0x0, 0x9}, {0x2, 0xf6}, {0x27d, 0x80000001}, {0x4, 0x1}, {0x4, 0x3ff}, {0x8000, 0x30c9cd3a}, {0x7f, 0xa}, {0x3, 0x50}, {0x5, 0x4}, {0x2, 0x7}, {0x7, 0x4}, {0x7ff, 0x5}, {0x10000, 0x4e}, {0x1, 0x9}, {0x101, 0x9}, {0x3, 0x2db}, {0x2, 0xffffffffffffffff}, {0x3, 0x787a8fbf}, {0x2, 0x6}, {0x10000, 0x6}, {0x1, 0x4}, {0x6c4}, {0x9, 0xffff}, {0x4}, {0x9, 0x7}, {0x0, 0x7}, {0x1, 0x7}, {0x7}, {0x401, 0x9}, {0xfffffffffffffff7, 0x7}, {0x3, 0x9f1}, {0x3ff, 0x3ff}, {0x3, 0x9f}, {0x4, 0x2}, {0x70, 0xffff}, {0xffff, 0x7f}, {0x1, 0x10001}, {0x33c, 0x4}, {0x1, 0x1}, {0x4, 0x9}, {0x6, 0x3}, {0x9, 0x9}, {0x5e8a, 0x4}, {0x9, 0x80000000}, {0x8000000000000000}, {0x2, 0x51}, {0x0, 0x3}, {0x4, 0x5a12}, {0x0, 0x7}, {0x5, 0xffffffffffffffff}, {0xfe00000000000000, 0x9a}, {0x0, 0x44}, {0x7, 0x4}, {0x80000000, 0x4}, {0x7, 0x3}, {0xd, 0x6}, {0x6, 0x8}, {0x1, 0x3}, {0x10000, 0xfffffffffffffffe}, {0x5, 0x7b}, {0x5, 0xa57000000000000}, {0x9, 0xbb}, {0x7ff, 0x1}, {0x6, 0xffffffffffffffff}, {0x9, 0x5}, {0x8, 0x7}, {0x797, 0x3}, {0x7f, 0x1}, {0xc, 0xa800000000000000}, {0x9, 0x6}, {0xffffffffffffffff, 0x99dd}, {0x7, 0xc8}, {0x8, 0x3}, {0x0, 0x4}, {0x8, 0x2d23}, {0x6, 0x9}, {0x800, 0x5}, {0x6, 0x3}, {0x2, 0x91}, {0x1, 0x17a7}, {0x606, 0x2f33}, {0x9ea, 0x7fffffffffffffff}, {0x3, 0x4e4}, {0x3}, {0x3, 0x1000}, {0x5, 0x4}, {0x5, 0x4}, {0x3, 0x9}, {0xe8, 0x6}, {0x0, 0x5}, {0xbab3}, {0x100000001, 0x1}, {0x7871, 0x4}, {0xdc2b, 0xb}, {0x2, 0x7}, {0x12859826, 0x6}, {0x7, 0x1000}, {0x9d, 0xd75}, {0x80000001, 0x76}, {0xfffffffffffffff2, 0x6}, {0x8}, {0xfffffffffffffff0, 0x7}, {0x3, 0x100}, {0x80000001, 0x7}, {0x1, 0x7}, {0x4, 0xb30a}, {0x2, 0x3}, {0x4a3, 0x3ff}, {0x80000001, 0x8000000000000001}, {0x800, 0x4800}, {0x80, 0xcc20}, {0x101, 0x9}, {0x3, 0x3}, {0x0, 0x4}, {0xe, 0xffffffff80000000}, {0x80000001, 0x800000000}, {0x8, 0x4}, {0xd, 0xfffffffffffffff8}, {0x81}, {0x3, 0x55b80112}, {0x7, 0xfffffffffffffffb}, {0x100, 0x8}, {0xa624, 0x4}, {0x4, 0x6}, {0x7d, 0x401}, {0x800, 0x9}, {0x80000001, 0xff}, {0x1, 0x101}, {0x80000000}, {0x3, 0xfffffffffffffffc}, {0x1, 0x9}, {0x8, 0x7}, {0x81, 0x2}, {0x9, 0x31d313ad}, {0x0, 0x4}, {0x2, 0x2}, {0x0, 0x4}, {0x1, 0x7fffffff}, {0x4, 0x9}, {0x9}, {0x6, 0x6}, {0x1ff, 0xd}, {0x1, 0x881e}, {0xfa7, 0x200}, {0x7, 0x6}, {0x4, 0x5}, {0x80000000, 0x2}, {0x851e, 0x7}, {0x7f, 0x7fffffffffffffff}, {0x8, 0x7fffffffffffffff}, {0x3}, {0xffffffff92411788, 0x4}, {0x6, 0xfffffffffffffff9}, {0x6}, {0x1, 0x7}, {0xff, 0xb}, {0x14d, 0x7fff}, {0x2, 0xc}, {0x3, 0x8000}, {0x5, 0x8}, {0x37088000000, 0x6}, {0xb4, 0x8}, {0x9, 0x7fffffff}, {0x3aed, 0x8001}, {0x6, 0x5}, {0x6, 0x6}, {0xff, 0x2}, {0x5, 0x9}, {0x3, 0x2}, {0x3, 0x10000}, {0x3af5969, 0x8}, {0x91a, 0x100}, {0x6, 0x400}, {0x9113}, {0xa9db, 0x7f}, {0x7, 0x40}, {0x3}, {0x1b0, 0x9}, {0x0, 0xa7}, {0x9, 0x8}, {0x80, 0x6}, {0x8cb1, 0x3}, {0xfffffffffffffc01, 0x8}, {0xc28e, 0x100}, {0x3, 0x6}, {0x3, 0x9}, {0x8, 0x79f7}, {0xfffffffffffffff8, 0x5}, {0x6, 0xfffffffffffffe00}, {0x6, 0xfffffffffffffffe}, {0x7, 0x7}, {0x5547, 0x7}, {0x10000, 0x2}, {0xffaa, 0x1}, {0x7fffffff, 0x9}, {0x6, 0x4}, {0x3ff, 0x5}, {0x5, 0x5}, {0xf25, 0x3}, {0xe, 0x3}, {0xc5a, 0x10}, {0x7f, 0x7}, {0x58, 0xab}, {0x40, 0x9}, {0x9, 0xd6d}, {0x6, 0x1}, {0x5, 0x401}, {0x8001, 0x7f}, {0x7fff}, {0x100000001, 0x3}, {0x6, 0xb}, {0x401, 0xb8}, {0x0, 0xfffffffffffffffb}, {0x4, 0xb}, {0x1000, 0x4}, {0x5, 0x5}, {}, {0x1, 0x422}, {0x8, 0x80000000}, {0xfffffffffffffffd, 0x5}, {0xfffffffffffffffc, 0x41}, {0x985, 0x7}, {0x6, 0x8000}, {0x2, 0x303}, {0x6, 0x7c7e}, {0x2, 0x7}, {0x10000}, {0x1ff, 0x40}, {0x401, 0x9}, {0x8cd5, 0x1}, {0x4}, {0x1, 0x8}, {0x1, 0xd}, {0x3, 0xe}, {0x0, 0x101}, {0x3, 0x82}, {0x0, 0x8001}, {0xffff, 0x7ff}, {0xa764, 0x3}, {0x5, 0x6}, {0x7, 0x7a}, {0x8000000000000001, 0x4}, {0x3, 0x7}, {0xf, 0x9}, {0x1c00}, {0x0, 0x716}, {0xcf48, 0x5}, {0x5, 0x8}, {0xfff, 0x1f2e}, {0x3, 0x6}, {0x7, 0x1ab1}]}, &(0x7f0000005280)=@label={{0x4f32494e, 0x4, 0x10, 0x876b8536a3f9d8e3}}, &(0x7f0000005300)=@journal={{0x4f32494e, 0x7, 0x10, 0xc0000001}}, &(0x7f0000005340)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000000}, {}, 0x1}, &(0x7f0000005480)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000001}, {}, 0x3ff}, &(0x7f00000055c0)=@journal={{0x4f32494e, 0x7, 0x10, 0x1}}], 0x32}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000006a40)={&(0x7f0000005800)="f1b01f6a770922eaf3408cc7ffde41c155c731c0311d884eb1ec56ce7ea20aade668a0a2d66ef61c209f41ebc59510b7b9520780cc77957a3c75bd9286de5b737f47462d5dee475c276db4a70477f102dbeb7905ae8b3d1eadfd412bc17881eba909697f4f8fd0fa48af2a7a6b5fa171a87a940a37e1b10667d32e435cf97859d88f7a5a44ea246ac349a390121d53238eb2c0bbbebc036227b1009fa22c21adfc85f9020c4d6eccc6012f3009422c6d5c12f95a4c4e1a929fa74a8663f7a264addaf9392dca", &(0x7f0000005900)=""/4096, &(0x7f0000006900)="a984012eaf6521dcff88b33e7101c4b5617a36fabfd57e945d7e54a7e67946837a41e4f690ab392c9759bf13d2d90c720676f80050c891815f4399ba61e94e4764d7aaf5b7ed986352f14cc395b69fa25b7247b03eb5a03146b619c45d0285315de7cf61923c2e4618465cf35fc65cc51760b524c82a699fbce0377c39fa61400cc072bc3ae61466ef41a946ed1a3476c99b7820efdcd360921077976caeea005c81a874cca4ab4666e14be78d60b20a6e873f3cc8123cc7ef1f1c0a389113a75f49e5a7542ba395bd6fbf4810677c608fbb0e8cb2c1f14d", &(0x7f0000006a00)="14a603e766f1b5e84c7981119d4a348a6f7e6f120608e788d1ed3deb9460a5", 0x2, r1}, 0x38) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000006a80)={0x3, 0x1ff, 0xff, 0x200, 0x9}) (async) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000006a80)={0x3, 0x1ff, 0xff, 0x200, 0x9}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000006ac0)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000006ac0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000006cc0)={0x0, 0x0, "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", "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"}) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000006cc0)={0x0, 0x0, "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", "ea96eca9b0d2cf65dcf69f1434740050929994549e6608c8367f8e08c25acd843f5005bda37dbcd4c053251c3da69cba9b828851e4ba96dfbc2b09f3da5071c8c0cb0cb35ec8104f5d32e39463d855a30623f86f4fe97602d254e136305af878f74b030147422d4cb901e93bd71c50a1adc74b8c59b05009dd7afde88c2a87e76d35012967417803bc33d1b35705a6e62143884a3841921ce4c8ee1a4df6b3e14458199d6d099b134cc1436e63c0e67774cec9221be8fb207310afab8b170620053644c8d99fe22015c0fffc14ca470968f40fe7570fe5dfca5df04ea371d4c5a47c315031fe5e30b9732d5bd79619078de14a97cf2835a9f2a394424dbeda541f9eb7247bde2cc05f7002f7a2bc91286586b4b366a3e6c895376d2850e5ee02b5e398904c1984714c9dcea4e90c60dadb290ecd9c12b59060a6d2cc8b31f820563f3aabd1d5684513d05fff25efaa5d7a3de484c3b0d22de2ff60e29db31a25a6d9621bde5dbe0c4193b16459bfe15ce6519c8f71596ecad233e31d90e2791e89cd644f0a740e798d9ff7668af25916c5da7b83ddc33fe48a8b7f4a53d6439f75f0d79089bedaeb9ddaec88a008b318d0e0b01b2172d482c911cfc446e47ed0efa09569fb8d59c7335b40588bfeb99876e936a4f4f4ceb540bea97d63be237855ea3c315c69bb1dba3c4a9d1cdd61013bac2bcb2cfd39b8f7c8473232c25726df62c8e073dbf54272373df761214a8f874a2c217c2c747dae547ce5b6d937474cb87d1ec93e2999670e1847a82ffc16df136dc658fe67b3abedddc63ecb85174c54f0cc1d2ec05e65b042b3ee321f0a7970774f4da66efd6d8d670d363bfa94f467e794579315ae23811494579e04acbf3b2d0082e726f58cd09b74be274320aceb0e3f0d2e2e2e1df84f21c32c9d14a1111f480aa153cba59692d2b7fcbb1ae2d18dd94cee139d176e20e222a87a4ac26e60277affc0ac3f7e101ce39981aa64d4e1f85e4ebe8e83b24ca7e197862b973a2cee194c9736423043cc8312e626ce78129ee66df78ae9127101830aa444bcde357572ee86a0e6a9569793d0bfa659554a98d5c81186793b36abf2183acbf4a984e3c96efb685322e3c90f684250c5cb1205c05e4d893eae5190b0fee39f3c5b9fd42daf1ef3f7575dbcb87cf4a09211649fc4b62e2127d848b45c57d312f997ecc0f453d8b302faf39072c8863ea83094f22d7a67cd6d708509c9c7645f1aa81b4d383d5baae691a9657a45a1b99058cc791a075873925a7484801f021f4abbb8ab52c2be8fd5f0c5db52bc4df353dbbdf11e72e6669c0595b8c161593657c656508a1e1cf69d7851bd963dce2123258a3e84380c023ff1e36adbc4f567fb00645252cc1991c167cfdc895ab50ff9fc8a366228c524d53a97cdbfdc29ab0049fcf06126528216685cc5d8c6a91a35936fbe334cda237ad331f7a047e88f860a706b0baa4bda9749007d9071e9296b89127f7122362ec3947a6ec8c801b939fc7007fa8e148d47e82cb44fd376388a788cfc3ee9cdd83041f57a991a7e2f4dbddd909dfe6e26e96f0a7b77b47db374c1785f9be9964aeb3ff255b2bc580d88d552111fa2f71522ea553be3010fb01797c6e48c62d7c3b9ffd85294775c80cdfd1e247882bb04606f21b25005364f733b87d6da1220244017a3b30d71c7c764ca2a0b978c6f53f40312ccf3bbf54d9d3f5bade49fcd4078b10ca85c9aea8d5c51260c26ab2d99d2db65a1921fe5a2530a3f718081fa378911889309266f5721184494d8b5f46bbb680c4fc97af60b7d8e2348de75c369f1374b7e6e53116c8895bae9bdf3f91aa28bef149022f14c646803cebac938ce8ce3f0e115169d816498772bcb0859785f0760fe81aeefcf324c9a5774f219fd9fb9eaafbef3183217bfedffebc589b48186d9894a59c1d8849756b259ae84e862201afd94b180725cf8a441ce9652ea6dce0901bdf40d1dd99bdb136f6c2c36c4737b063ac6a14b0cb66cf494aa56ce1a16bb91ce8817ee91319de2daa6a4e2dca9247e0a23172fe660fb7c2ab2c6221f33a8157c93b070f8f9bd5885ff5addc3790ddc93581a10f6b98d94ea3f4ab4d1221787eefd547ae628cb40147f1ec0f4465fe5c0943f2f5d0cb691343f10d0274fecda50571ac232de096207be1c90705120ceb023b04ed2d3dfae67fa6b60e142f5e1bc3c74359112d43f22caf6390b85f6cbd98689ed4cc8ba569ad35bf9355cc0793ccb26967deecfd953912d2fb3f6d520daaa5af0192e3cfc7dc6753066fb7ec276680d4dc6867e214cc5e80487b37d7ad032e948e2f503615ca4891b32629eab6e7ddbecfb6e78156404c5167ee73dd1c9bfae47194aa2d5a283f9731ef028cadab0ff2cc499b3abde61838610109155ac4db864ac6ec23ae049cd8d51e7259b3287d68cf15fbf9665c0fdb16211895ad2d4a139464a0adcfa7d157dc719b5f0dea20832a8bc9e19f6c10204b3a974abfe4a7e2278044c43c3cf837f3015f9afebf7e4b26ae4e290a4556450e8cb02fa4c181e7e8d5de9a1ef77121094831d148aa6714e8d2d80c34e353be412eeeb517ca6cad086b81ffaea4f63c814712788ebbe28dcf88c3a3bd7950ae50abef0caa0ab2247aec283a78f47fde997bf459f9ad1b6d77e3d771b7141306667b17aec1587d496e2806f3c1445df8b8f77c80e9cc17f4db0e6c4be2b947315ff2244b3c20cff3f84729a441ebe7c241ddfe6be80b98ee093b4a116c8bb81992d089fe6bef2e316ecb2999e706716050cea99dbae6e253dfc03211ce964312fae6ce4b94db2f9328595a18d2db8ab6a806c13474ee0f27bd4215e7a4826b3d9f04220efb67fee15e814b132c44c901d1b6e3b433416390f5315e626ea67b25f29559403d30327ca1266600d426b78848490e07f8efc8916784ab66ea04a54d68aa160b16ca4b767071ac16b0298e90c062a76d94ed020b0f951f933790910570f7456e81d2aee85e8ae1e6e7be7653234f7984021ba6e5525b8258a66acd86e3ab88ef6c24b1f88aa5eebde16dda212a95c9236298abd66a8b7bf91060b7eea118543a29425aecc156b3c5e92868ea972c09c817ee8a27c2e544ceed64bed2f1bf2ffc069dba9a80fcfb01fdd3dece794accb154ecc3fa99c6ad3e563586b9db88a64690e97b6073200647dc0728063924c185337299ff5a1fdab0591f3ce2952bd3edc06fd270cc576f700fe429ad1c9180dfaa0b6abb2af9bbf8f9447d3a02dacc3e790ec7be57e1650c770b8f503474ef1c68ba98f1829d2fdc6cd401cda950eeab3532f36cf618227b0ebb5c81cef40913e5475d65f24a534b82c059d9cb57ad57524cdf298b54595bc02fd88416d092442df01dd586acb3ec3c3e0384efd37f1e5593f39fbb30f5a150178bd6cf158cc189d3399acb62b21391451c1b50094ad0eddf45b431ec7b1aae16ad3935c380d2e60bd02a65950a713f49d6b9967628a3c2ca130513eb1fbdc35d33485ef60929a911fb328e586ea22600ea453980f99e09d2362222a0ba6e82a42e4fb158198002a8de567eef6bf8f1233888086d600db5f366823683c42c9c40e17ec09387cbf9594ddbac0678dc0bc7fdbc8da68ffcbec83cc976448392ff7aa4ce08ac6877255b52978e89f32392ca1e7a3702b073e7985dc14aeca602a7e79aa9c47a855399445ab0af1c0fc70d79e8eb85e0f2f48be428abf74d5d8f805bd22b80bf0bd0a8b5ddc46ae9c6c7f23b45db196010df74507ccf0becad8802f3b64bddedeb67fe2e256b146697dfa5f564e470d520939bd549aa1c7779624d2fd5dc8df776efcdffda5549517fa2bb3f1c2e307b2202b584f42eb5478be23fb5acf9f9000a3abf79bf65609633b61890e416f3d7d5754e6b1a75e86d065000003204db02b46c26a5a890ad9ea9dacf3a92df58058232d26d95afad32a555116a0ddfa4022587fc302b29778b52a1815b13e32de08f9e59a3f3ced8a71866bfda8677074a57e4e972c2d6801382d9d886348056aee3096090cbd5c784d1df3abad057af0887f3e68187a7e125ad0f21e4da2fc5a85855b36bb517081e8c0fab2727058d16b0ad0fe69f53a5b33656c40d85d5065cfd84ef707435b5dfe63dc3718b8a4ff87c898a1d520f5c2bc91a6c14b16f9cbc89209af18b1b8346d1a69b027723e879f915eae94b4be46fb30c329709a1342b5ec93cad1965a9a2ad3fd283c3330ed2cf5002c35a7acb6933b820334a8cdd682e5fdeb3096a96564783dda467a33c70a96f488805d5e89a70a7951c2b821e25e3a23b7c59ea7d18b957e17c73d892e8e8684ea2880b34b7a3e4aee813a445dca5f8420f453f148749160eb4a362e9371a38a054d6722737494e679a1fc00800d861b71f94f5874a72058e06d5e5d8603ef5b23ee73ab5338dd2f27332d8c51f163df74d13ce3ba542494003639ab35d6441bf0147612d70ea87d7a8e3b4ac1d137f654cb005a8295635c178db8e817ec412d03217f2cfb9038907e1fbc28d007c6421e7eeacec023e60f1f6be85da22001264f5a23a27831def2083fe0d14eb7e84fa1395328941ff436804c28a50400bf78f1a71845f607aaf7b285edc931fa233b08f82666778f136abe67f186ab8c02c8df42e2dd12e35fd893288e8886d1435349222125d520ccdd77af8a9798515b19215d1a33bfccb64870d9aa453c4eb9dfd32d13d52b0a9e39a4be20ca450176561f174a5d5584d51a6e2db974aceac5893cadacedf3d97594ea99efad2bc6d0f075fa042942125413020d62dfb5aa3115347de947d6a989f3cf042e6dafa97027e12768b498e56c39463f6918b42ebbdf5a2d0100845d79a625e1ffaff03f1fce2381340292af33ecc05f9323d747824b3ac07df87a1883e33d8499adb04f462e5b98fcfd299115055dc26843e3287c38e2a1cba48b392c91647997b23d5887e7b99673af5cf98b340ede9d8d74dc4fb77f350275445ae4e2106b29ed50fa92c51028eee8220835d5b6d561bd4f3e96b1e090fb164b2c4c0f00066615281730f2e7fee1682006e3f54d12c2cd4d84e425ebb8b8b45e93cade85a3099771324fe6147bd9ca68678ca16e4c8cf74d2bfe6287b6c0afc1cdc1b061e961817e42df4d09990b3594fd53c756a2bad20b65ea88b613a2d6b4d7906bda3f97906d3b2e1b3db53135c214f3787409498b380e2e911b3418b029294558847d6efc8958b9c02dc14f75751844f34822e17fbd765a90c873d9a8aab20713591ebc1927c6a3a63aad6cd0305747aa166a11eb9e132fbbff977bb7514d26163b966e9d1927446c4c58b4a3b334b6a61fa0c35883744fdbb2baf0f545bf56a2c2c7c7b47ab60a52d8fe61fe057ceb6301cc93f9f4173cb043fbf7af"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000007cc0)={r4, r5, "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", "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"}) openat$kvm(0xffffffffffffff9c, &(0x7f0000008cc0), 0x400000, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000008cc0), 0x400000, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x40) openat$vmci(0xffffffffffffff9c, &(0x7f0000008d00), 0x2, 0x0) (async) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000008d00), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r7, 0x7a6, &(0x7f0000008d40)={0x0, 0x100, 0x8f7, 0x10001, 0x3, 0x1}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000008d80), &(0x7f0000008dc0)=@ng={0x4, 0x15, "0e7d105200c8d25051106eced93578c696c8"}, 0x14, 0x0) ioctl$NILFS_IOCTL_GET_SUINFO(0xffffffffffffffff, 0x80186e84, &(0x7f0000008e40)={&(0x7f0000008e00)=[{0x10}, {0xfffffffffffffff9, 0x4, 0x1}, {0x9cfe, 0x10001}], 0x3, 0x10, 0x7, 0xad}) (async) ioctl$NILFS_IOCTL_GET_SUINFO(0xffffffffffffffff, 0x80186e84, &(0x7f0000008e40)={&(0x7f0000008e00)=[{0x10}, {0xfffffffffffffff9, 0x4, 0x1}, {0x9cfe, 0x10001}], 0x3, 0x10, 0x7, 0xad}) r8 = syz_create_resource$binfmt(&(0x7f0000008e80)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r8, 0x41, 0x1ff) (async) openat$binfmt(0xffffffffffffff9c, r8, 0x41, 0x1ff) open(&(0x7f0000008ec0)='./file0\x00', 0x843, 0x102) (async) open(&(0x7f0000008ec0)='./file0\x00', 0x843, 0x102) preadv(r6, &(0x7f0000009080)=[{&(0x7f0000008f00)=""/157, 0x9d}, {&(0x7f0000008fc0)=""/75, 0x4b}, {&(0x7f0000009040)=""/4, 0x4}], 0x3, 0x40, 0xfff) sendmsg$inet(r1, &(0x7f0000009440)={&(0x7f00000090c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000009280)=[{&(0x7f0000009100)="6bcc4b3c5e1f6b5ab0c6c0399b80df6f081b7d08a9b262059572a9a41ecd27e63e33b0a52ee72d47d314b178e54160f1d14ac089fb4ecf980c34c9f4b27216245088ecb7a658650dbdae1f9a528a10c23cbea3e5bb095c00a2dff86a36f6f4", 0x5f}, {&(0x7f0000009180)="a414fd009ea3335b2d6ab0e5dae53c4c7411f650cbf47c6c8c59a5e132bdb9cadcaa7cfc5f3bc29e85799fa9821761d7e8eade06fcde867aed2b842e7df128a18f518b7b3bce7b3c93804d81962eea94b57c79", 0x53}, {&(0x7f0000009200)="027fbc513b4c18b14d36dbe32ea3eba21c99bafc71f82a4ef84a1a5512794514e4b84df68a00e9ef6e7f9fb0676ac7620c51431e70337a8923403d3963fd068e924c26b1cd27b55083aec705415dedd1171e3fb247fb80f04ee5b7c09127d7f3caa32a3b4ac2", 0x66}], 0x3, &(0x7f00000092c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3ff}}, @ip_tos_u8={{0x11}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @multicast2}}}, @ip_ttl={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_retopts={{0x88, 0x0, 0x7, {[@lsrr={0x83, 0x23, 0x25, [@broadcast, @local, @private=0xa010100, @rand_addr=0x64010101, @multicast2, @rand_addr=0x64010102, @remote, @remote]}, @ra={0x94, 0x4}, @end, @timestamp_addr={0x44, 0x4c, 0x43, 0x1, 0x7, [{@local, 0xc}, {@empty, 0x4}, {@broadcast, 0x8}, {@local, 0xffffffff}, {@rand_addr=0x64010100, 0x2}, {@local, 0x9}, {@local, 0xfffffffc}, {@broadcast, 0x7ff}, {@empty, 0x3e7d}]}, @noop]}}}, @ip_tos_int={{0x14}}], 0x150}, 0x20004000) fcntl$lock(r1, 0x24, &(0x7f0000009480)={0x1, 0x2, 0x4c, 0xd, r2}) ioctl$UBLK_U_CMD_START_DEV(r0, 0xc0207506, &(0x7f00000094c0)={0x0, 0xffff, 0x0, 0x0, r2}) fcntl$lock(r3, 0x6, &(0x7f0000009540)={0x1, 0x3, 0x7, 0x2, r9}) fcntl$setsig(r7, 0xa, 0x1) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000009580)={{@my=0x0, 0x9}, @any, 0x1, 0x100000000, 0x9, 0x3, 0x4, 0xfffffff8, 0x6}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000009580)={{@my=0x0, 0x9}, @any, 0x1, 0x100000000, 0x9, 0x3, 0x4, 0xfffffff8, 0x6}) 279.763483ms ago: executing program 6 (id=5170): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/177, 0xb1}], 0x1, 0x0, 0x0, 0xffff0100}, 0x9}, {{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000001580)=""/4096, 0x1000}], 0x1}}], 0x3ffffffffffff8c, 0x23, 0x0) sendto$inet6(r0, &(0x7f0000000140)="d0672ff1", 0x4, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 230.43769ms ago: executing program 5 (id=5171): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r3, 0x0, &(0x7f000004c000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r3, 0x0, &(0x7f00002dc000/0x4000)=nil, 0x4000, 0xd}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r4, 0x0, 0x10001, 0x0, 0xfffffffd, 0x7eac0, 0x3d3b4e}) bind$tipc(r1, &(0x7f0000000240)=@name={0x1e, 0x2, 0x1, {{0x2}, 0x2}}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040), &(0x7f0000000080)=0x4) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map=r5, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x4008800) 229.479044ms ago: executing program 7 (id=5172): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x26, 0x305, 0x6110383c, 0x0, 0xff7c, 0x6, 0x5d21c6cc, 0x0, 0x0, 0x120, 0x10001}}, 0x50) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0700000000000000000005000000180003800800040000000000080002000900000004000100180001801400020073797a5f74756e000000200000000000080005"], 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='c::=/\x10\xcd\xb7@\x88\xedP9\xf5,\xef\x87\xc9G\xeb\xd9\xf9\xcd\xb1\xac!\xa7\x9c\x8f\xc98\xcb-\t\xcf-\xdd\xc4\xafK\x8d\xb1R8m\xc1[A\x99g\x9d\x8a\"\x98:\xc1I<\xdf;\x11t\xd3\xd2\x19\x964\xff\x03\xbc\x7fo\xe8\x89\x01:\x8b-\xab[X\x10\x18\x8d\xbf\xe1\x88\x16', 0x0) 156.707428ms ago: executing program 5 (id=5173): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x134}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001000000000000001a000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff0008000340000000384c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003801c0000800800034000000002100002800c000280080001800000000014000000020a01"], 0xf4}}, 0x0) 156.293348ms ago: executing program 7 (id=5174): syz_emit_ethernet(0xf87, &(0x7f0000002140)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "2580a6", 0xf51, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, {[@routing={0x84}], "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"}}}}}, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xc, 0xb, &(0x7f0000000080)=@framed={{}, [@printk={@p, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe02}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000040)='GPL\x00'}, 0x90) 155.883524ms ago: executing program 5 (id=5175): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="0c000280060001"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000001c0)={@private2, 0x0}, &(0x7f0000000200)=0x14) r7 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x5}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r12 = syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000000200)={0x2e, 0x0, 0x0, r7, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bd9e}}}, &(0x7f0000000300)=0x0) r15 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r12, 0x2) syz_ublk_setup_queues(r15, r14, &(0x7f0000000540)={0x0, 0xfa81, 0x0, 0x3, 0x28e, 0x0, r8}, &(0x7f0000000880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf514, 0x1000, 0x2, 0x1af, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xddca, 0x2, 0x0, 0x330, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766c, 0x8, 0x0, 0x2db, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x4, 0x0, 0x1fe, 0x0, r8}}], 0x4, &(0x7f0000001f40)={0x2e, 0x0, 0x0, r15, 0xc0107525, 0x0, 0x0, 0x0, 0x1, {0x10}, 0x0, r13, '\x00', {0x2, 0xb55, 0x100000, 0x0}}, &(0x7f0000001fc0)) r16 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r16, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="700000040000001fc3fe26d45cefb6c26b", @ANYRES32=r1, @ANYBLOB="04002cbd7000fddbdf25020000005c00018008000100", @ANYRES32=r2, @ANYBLOB="080003000300000008e90300060000000800030001000000140002007866726d30000000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="1400020070696d72656700"/20], 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x10015) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r17 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) recvmmsg(r17, &(0x7f0000006100), 0x49f, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,timeo=0']) 99.832842ms ago: executing program 7 (id=5176): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peekuser(0x3, r0, 0x388) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='vhci_hcd.0\x00', 0xa) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r0) (async) ptrace$peekuser(0x3, r0, 0x388) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) (async) write(r1, &(0x7f0000000100)='vhci_hcd.0\x00', 0xa) (async) 0s ago: executing program 5 (id=5177): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r1, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x1000000) kernel console output (not intermixed with test programs): 1 [ 802.854598][T22310] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 802.859582][T22310] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 802.868660][T22310] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 802.872960][T22310] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 802.875469][T22390] syzkaller0: entered promiscuous mode [ 802.877390][T22390] syzkaller0: entered allmulticast mode [ 802.975215][T22310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 802.986719][T22310] 8021q: adding VLAN 0 to HW filter on device team0 [ 802.996703][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.998993][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 803.012899][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.015217][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 803.034213][T22310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 803.046566][T22398] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4564'. [ 803.204488][T22411] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4566'. [ 803.210512][T22411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4566'. [ 803.366249][T22310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 803.497426][T22439] binder: 22438:22439 ioctl c018620b 0 returned -14 [ 803.566344][T22448] syzkaller0: entered promiscuous mode [ 803.568165][T22448] syzkaller0: entered allmulticast mode [ 803.576007][T22310] veth0_vlan: entered promiscuous mode [ 803.588850][ T5742] Bluetooth: hci2: command tx timeout [ 803.614412][T22310] veth1_vlan: entered promiscuous mode [ 803.631627][T22310] veth0_macvtap: entered promiscuous mode [ 803.636116][T22310] veth1_macvtap: entered promiscuous mode [ 803.645137][T22310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 803.655243][T22310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 803.697920][ T5812] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.715294][ T5812] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.716495][T22457] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4573'. [ 803.777421][ T5784] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.780709][T19561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 803.788227][T19561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 803.796039][T12660] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.812232][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 803.818634][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 803.887375][T22463] tipc: Enabled bearer , priority 0 [ 803.905094][T22468] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4542'. [ 803.933273][T22463] syzkaller0: entered promiscuous mode [ 803.938864][T22463] syzkaller0: entered allmulticast mode [ 803.946032][T22463] tipc: Resetting bearer [ 803.963188][T22462] tipc: Resetting bearer [ 805.665769][ T5742] Bluetooth: hci2: command tx timeout [ 805.797529][T22462] tipc: Disabling bearer [ 805.910683][ T42] kauditd_printk_skb: 35 callbacks suppressed [ 805.910697][ T42] audit: type=1800 audit(805.845:1439): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 805.934895][T22505] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 805.952744][ T42] audit: type=1800 audit(805.885:1440): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 805.984501][ T42] audit: type=1800 audit(805.915:1441): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=317089 res=0 errno=0 [ 806.007936][T22514] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4587'. [ 806.015325][ T42] audit: type=1800 audit(805.935:1442): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35543 res=0 errno=0 [ 806.027445][ T42] audit: type=1800 audit(805.955:1443): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 806.034250][ T42] audit: type=1800 audit(805.955:1444): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35566 res=0 errno=0 [ 806.055656][ T42] audit: type=1800 audit(805.985:1445): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 806.185924][T15135] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 806.335777][T15135] usb 11-1: Using ep0 maxpacket: 8 [ 806.340996][T15135] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 806.355748][T15135] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 806.359206][T15135] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 806.362344][T15135] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 806.368821][T15135] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 806.373976][T15135] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.381982][ T42] audit: type=1800 audit(806.315:1446): pid=21725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=317191 res=0 errno=0 [ 806.390293][ T42] audit: type=1800 audit(806.315:1447): pid=21725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=317220 res=0 errno=0 [ 806.398953][ T42] audit: type=1800 audit(806.315:1448): pid=21725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=317198 res=0 errno=0 [ 806.457459][T22531] FAULT_INJECTION: forcing a failure. [ 806.457459][T22531] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 806.462445][T22531] CPU: 3 UID: 0 PID: 22531 Comm: syz.3.4590 Tainted: G L syzkaller #0 PREEMPT(full) [ 806.462465][T22531] Tainted: [L]=SOFTLOCKUP [ 806.462469][T22531] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 806.462476][T22531] Call Trace: [ 806.462481][T22531] [ 806.462486][T22531] dump_stack_lvl+0x100/0x190 [ 806.462507][T22531] should_fail_ex.cold+0x5/0xa [ 806.462522][T22531] _copy_from_user+0x2e/0xd0 [ 806.462539][T22531] copy_msghdr_from_user+0x9f/0x4c0 [ 806.462552][T22531] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 806.462565][T22531] ? rcu_is_watching+0x12/0xc0 [ 806.462582][T22531] ? ___sys_recvmsg+0x177/0x1a0 [ 806.462592][T22531] ? kfree+0x1e5/0x6c0 [ 806.462610][T22531] ___sys_recvmsg+0xdd/0x1a0 [ 806.462621][T22531] ? __pfx____sys_recvmsg+0x10/0x10 [ 806.462639][T22531] ? __pfx___might_resched+0x10/0x10 [ 806.462657][T22531] do_recvmmsg+0x2f3/0x740 [ 806.462669][T22531] ? __pfx_do_recvmmsg+0x10/0x10 [ 806.462688][T22531] ? trace_event_buffer_commit+0x20a/0xa80 [ 806.462706][T22531] __x64_sys_recvmmsg+0x22a/0x280 [ 806.462721][T22531] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 806.462735][T22531] ? trace_syscall_enter+0xd9/0x110 [ 806.462753][T22531] do_syscall_64+0x115/0x870 [ 806.462767][T22531] ? clear_bhb_loop+0x40/0x90 [ 806.462780][T22531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.462792][T22531] RIP: 0033:0x7fb65a39e019 [ 806.462801][T22531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 806.462812][T22531] RSP: 002b:00007fb65b228028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 806.462825][T22531] RAX: ffffffffffffffda RBX: 00007fb65a626090 RCX: 00007fb65a39e019 [ 806.462832][T22531] RDX: 03ffffffffffff8c RSI: 0000200000002c80 RDI: 0000000000000003 [ 806.462838][T22531] RBP: 00007fb65b228090 R08: 0000000000000000 R09: 0000000000000000 [ 806.462845][T22531] R10: 0000000000000023 R11: 0000000000000246 R12: 0000000000000002 [ 806.462851][T22531] R13: 00007fb65a626128 R14: 00007fb65a626090 R15: 00007ffcf042ba08 [ 806.462865][T22531] [ 807.406840][T22551] tipc: Enabled bearer , priority 0 [ 807.434893][T22550] tipc: Resetting bearer [ 807.752054][ T5742] Bluetooth: hci2: command tx timeout [ 808.124046][T22557] kvm_intel: kvm [22556]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x660b [ 808.140376][T22557] kvm: kvm [22556]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x2a06 [ 808.158896][T22557] kvm: kvm [22556]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x262e [ 808.548150][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.950765][ T34] usb 11-1: USB disconnect, device number 2 [ 809.390509][T22550] tipc: Disabling bearer [ 809.454488][T22572] syzkaller0: entered promiscuous mode [ 809.465740][T22572] syzkaller0: entered allmulticast mode [ 809.628483][T22597] netlink: 596 bytes leftover after parsing attributes in process `syz.3.4607'. [ 809.792328][T22597] nbd4: detected capacity change from 0 to 63 [ 809.828104][ T5742] Bluetooth: hci2: command tx timeout [ 810.380401][T10839] block nbd4: Receive control failed (result -104) [ 811.333948][T22595] syzkaller0: entered promiscuous mode [ 811.337132][T22595] syzkaller0: entered allmulticast mode [ 811.356334][T22599] syzkaller0: entered promiscuous mode [ 811.358256][T22599] syzkaller0: entered allmulticast mode [ 811.444506][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 811.444527][ T42] audit: type=1800 audit(811.375:1456): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 811.516799][ T42] audit: type=1800 audit(811.455:1457): pid=22020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=317575 res=0 errno=0 [ 811.518933][ T5089] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 811.533378][ T5089] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 811.544603][ T5089] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 811.548533][ T5089] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 811.557132][ T5089] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 811.561407][ T42] audit: type=1800 audit(811.495:1458): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 811.604664][ T42] audit: type=1800 audit(811.495:1459): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=317586 res=0 errno=0 [ 811.617635][ T42] audit: type=1800 audit(811.535:1460): pid=22020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=317605 res=0 errno=0 [ 811.625037][ T42] audit: type=1800 audit(811.535:1461): pid=21720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=317616 res=0 errno=0 [ 811.635175][T22628] xt_hashlimit: size too large, truncated to 1048576 [ 811.637465][T22628] xt_hashlimit: invalid interval [ 811.660613][ T42] audit: type=1800 audit(811.595:1462): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 811.677290][T22627] FAULT_INJECTION: forcing a failure. [ 811.677290][T22627] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 811.682415][T22627] CPU: 0 UID: 0 PID: 22627 Comm: syz.6.4609 Tainted: G L syzkaller #0 PREEMPT(full) [ 811.682434][T22627] Tainted: [L]=SOFTLOCKUP [ 811.682439][T22627] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 811.682445][T22627] Call Trace: [ 811.682450][T22627] [ 811.682456][T22627] dump_stack_lvl+0x100/0x190 [ 811.682475][T22627] should_fail_ex.cold+0x5/0xa [ 811.682491][T22627] _copy_from_user+0x2e/0xd0 [ 811.682508][T22627] copy_msghdr_from_user+0x9f/0x4c0 [ 811.682520][T22627] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 811.682534][T22627] ? rcu_is_watching+0x12/0xc0 [ 811.682551][T22627] ? ___sys_recvmsg+0x177/0x1a0 [ 811.682561][T22627] ? kfree+0x1e5/0x6c0 [ 811.682580][T22627] ___sys_recvmsg+0xdd/0x1a0 [ 811.682601][T22627] ? __pfx____sys_recvmsg+0x10/0x10 [ 811.682618][T22627] ? __pfx___might_resched+0x10/0x10 [ 811.682635][T22627] do_recvmmsg+0x2f3/0x740 [ 811.682647][T22627] ? __pfx_do_recvmmsg+0x10/0x10 [ 811.682666][T22627] ? trace_event_buffer_commit+0x20a/0xa80 [ 811.682684][T22627] __x64_sys_recvmmsg+0x22a/0x280 [ 811.682699][T22627] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 811.682713][T22627] ? trace_syscall_enter+0xd9/0x110 [ 811.682731][T22627] do_syscall_64+0x115/0x870 [ 811.682745][T22627] ? clear_bhb_loop+0x40/0x90 [ 811.682758][T22627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.682769][T22627] RIP: 0033:0x7f7e3439e019 [ 811.682783][T22627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 811.682794][T22627] RSP: 002b:00007f7e3519e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 811.682806][T22627] RAX: ffffffffffffffda RBX: 00007f7e34626090 RCX: 00007f7e3439e019 [ 811.682814][T22627] RDX: 03ffffffffffff8c RSI: 0000200000002c80 RDI: 0000000000000003 [ 811.682821][T22627] RBP: 00007f7e3519e090 R08: 0000000000000000 R09: 0000000000000000 [ 811.682827][T22627] R10: 0000000000000023 R11: 0000000000000246 R12: 0000000000000002 [ 811.682834][T22627] R13: 00007f7e34626128 R14: 00007f7e34626090 R15: 00007ffcacf4eb08 [ 811.682848][T22627] [ 811.720166][ T42] audit: type=1800 audit(811.655:1463): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 811.864027][ T42] audit: type=1800 audit(811.795:1464): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 811.920157][ T42] audit: type=1800 audit(811.855:1465): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 813.643872][T14080] tipc: Disabling bearer [ 813.678169][ T5742] Bluetooth: hci0: command tx timeout [ 813.840393][T22660] syzkaller0: entered promiscuous mode [ 813.842210][T22660] syzkaller0: entered allmulticast mode [ 813.935956][T15473] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 814.095700][T15473] usb 10-1: Using ep0 maxpacket: 8 [ 814.101428][T15473] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 814.110722][T15473] usb 10-1: config 0 has no interfaces? [ 814.112535][T15473] usb 10-1: New USB device found, idVendor=05ac, idProduct=8240, bcdDevice= 0.00 [ 814.119135][T15473] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.143352][T22681] FAULT_INJECTION: forcing a failure. [ 814.143352][T22681] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 814.155861][T22681] CPU: 3 UID: 0 PID: 22681 Comm: syz.2.4622 Tainted: G L syzkaller #0 PREEMPT(full) [ 814.155883][T22681] Tainted: [L]=SOFTLOCKUP [ 814.155887][T22681] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 814.155894][T22681] Call Trace: [ 814.155898][T22681] [ 814.155904][T22681] dump_stack_lvl+0x100/0x190 [ 814.155923][T22681] should_fail_ex.cold+0x5/0xa [ 814.155938][T22681] _copy_from_user+0x2e/0xd0 [ 814.155955][T22681] copy_msghdr_from_user+0x9f/0x4c0 [ 814.155967][T22681] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 814.155980][T22681] ? rcu_is_watching+0x12/0xc0 [ 814.155998][T22681] ? ___sys_recvmsg+0x177/0x1a0 [ 814.156008][T22681] ? kfree+0x1e5/0x6c0 [ 814.156027][T22681] ___sys_recvmsg+0xdd/0x1a0 [ 814.156038][T22681] ? __pfx____sys_recvmsg+0x10/0x10 [ 814.156056][T22681] ? __pfx___might_resched+0x10/0x10 [ 814.156072][T22681] do_recvmmsg+0x2f3/0x740 [ 814.156084][T22681] ? __pfx_do_recvmmsg+0x10/0x10 [ 814.156103][T22681] ? trace_event_buffer_commit+0x20a/0xa80 [ 814.156121][T22681] __x64_sys_recvmmsg+0x22a/0x280 [ 814.156137][T22681] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 814.156151][T22681] ? trace_syscall_enter+0xd9/0x110 [ 814.156169][T22681] do_syscall_64+0x115/0x870 [ 814.156183][T22681] ? clear_bhb_loop+0x40/0x90 [ 814.156197][T22681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.156209][T22681] RIP: 0033:0x7f868b99e019 [ 814.156219][T22681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 814.156230][T22681] RSP: 002b:00007f868c896028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 814.156242][T22681] RAX: ffffffffffffffda RBX: 00007f868bc26090 RCX: 00007f868b99e019 [ 814.156249][T22681] RDX: 03ffffffffffff8c RSI: 0000200000002c80 RDI: 0000000000000003 [ 814.156256][T22681] RBP: 00007f868c896090 R08: 0000000000000000 R09: 0000000000000000 [ 814.156262][T22681] R10: 0000000000000023 R11: 0000000000000246 R12: 0000000000000002 [ 814.156269][T22681] R13: 00007f868bc26128 R14: 00007f868bc26090 R15: 00007fffce902d88 [ 814.156282][T22681] [ 814.162761][T22679] bond1: Removing last arp target with arp_interval on [ 814.305229][T22623] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.308655][T22623] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.311190][T22623] bridge_slave_0: entered allmulticast mode [ 814.314093][T22623] bridge_slave_0: entered promiscuous mode [ 814.318564][T22623] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.321406][T22623] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.324578][T22623] bridge_slave_1: entered allmulticast mode [ 814.328773][T22623] bridge_slave_1: entered promiscuous mode [ 814.360448][T22623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 814.364864][T22623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 814.382651][T22623] team0: Port device team_slave_0 added [ 814.386293][T22623] team0: Port device team_slave_1 added [ 814.400893][T22623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 814.403096][T22623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 814.411572][T22623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 814.416264][T22623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 814.418476][T22623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 814.426833][T22623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 814.450420][T22623] hsr_slave_0: entered promiscuous mode [ 814.452755][T22623] hsr_slave_1: entered promiscuous mode [ 814.454868][T22623] debugfs: 'hsr0' already exists in 'hsr' [ 814.457135][T22623] Cannot create hsr debugfs directory [ 814.546613][T22623] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 814.654628][T22623] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 814.743888][T22623] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 814.806782][T22623] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 814.957979][T22623] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 814.963284][T22623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 814.966796][T22623] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 814.971439][T22623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 814.974459][T22623] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 814.982057][T22623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 814.985099][T22623] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 814.991488][T22623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 815.056997][T22623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 815.068501][T22623] 8021q: adding VLAN 0 to HW filter on device team0 [ 815.074717][T19564] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.077465][T19564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 815.089983][T19564] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.092690][T19564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 815.393512][T22710] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 815.557895][T22623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 815.591516][T22623] veth0_vlan: entered promiscuous mode [ 815.602178][T22623] veth1_vlan: entered promiscuous mode [ 815.630401][T22623] veth0_macvtap: entered promiscuous mode [ 815.637428][T22623] veth1_macvtap: entered promiscuous mode [ 815.654457][T22623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 815.674651][T22623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 815.708949][T12660] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.717789][T12660] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.718203][T22728] netlink: 204 bytes leftover after parsing attributes in process `syz.6.4633'. [ 815.736686][ T5812] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.739867][ T5812] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.746306][ T5742] Bluetooth: hci0: command tx timeout [ 815.829693][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 815.838642][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 815.894331][T19564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 815.900122][T19564] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 816.098951][T22748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4637'. [ 816.138696][T22750] syzkaller0: entered promiscuous mode [ 816.140616][T22750] syzkaller0: entered allmulticast mode [ 816.208317][T22753] batman_adv: batadv0: Adding interface: macvtap1 [ 816.210487][T22753] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 816.226905][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 816.228032][T22753] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 816.266586][T22753] batman_adv: batadv0: Adding interface: macvtap2 [ 816.268800][T22753] batman_adv: batadv0: The MTU of interface macvtap2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 816.277070][T22753] batman_adv: batadv0: Not using interface macvtap2 (retrying later): interface not active [ 816.493326][ T42] kauditd_printk_skb: 26 callbacks suppressed [ 816.493340][ T42] audit: type=1800 audit(816.425:1492): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 816.679747][T22773] FAULT_INJECTION: forcing a failure. [ 816.679747][T22773] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 816.686142][T22773] CPU: 2 UID: 0 PID: 22773 Comm: syz.6.4645 Tainted: G L syzkaller #0 PREEMPT(full) [ 816.686162][T22773] Tainted: [L]=SOFTLOCKUP [ 816.686166][T22773] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 816.686173][T22773] Call Trace: [ 816.686178][T22773] [ 816.686182][T22773] dump_stack_lvl+0x100/0x190 [ 816.686201][T22773] should_fail_ex.cold+0x5/0xa [ 816.686216][T22773] _copy_from_user+0x2e/0xd0 [ 816.686232][T22773] copy_msghdr_from_user+0x9f/0x4c0 [ 816.686249][T22773] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 816.686262][T22773] ? rcu_is_watching+0x12/0xc0 [ 816.686279][T22773] ? ___sys_recvmsg+0x177/0x1a0 [ 816.686289][T22773] ? kfree+0x1e5/0x6c0 [ 816.686308][T22773] ___sys_recvmsg+0xdd/0x1a0 [ 816.686318][T22773] ? __pfx____sys_recvmsg+0x10/0x10 [ 816.686336][T22773] ? __pfx___might_resched+0x10/0x10 [ 816.686352][T22773] do_recvmmsg+0x2f3/0x740 [ 816.686365][T22773] ? __pfx_do_recvmmsg+0x10/0x10 [ 816.686383][T22773] ? trace_event_buffer_commit+0x20a/0xa80 [ 816.686401][T22773] __x64_sys_recvmmsg+0x22a/0x280 [ 816.686416][T22773] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 816.686430][T22773] ? trace_syscall_enter+0xd9/0x110 [ 816.686448][T22773] do_syscall_64+0x115/0x870 [ 816.686462][T22773] ? clear_bhb_loop+0x40/0x90 [ 816.686475][T22773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.686486][T22773] RIP: 0033:0x7f7e3439e019 [ 816.686496][T22773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 816.686507][T22773] RSP: 002b:00007f7e3519e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 816.686518][T22773] RAX: ffffffffffffffda RBX: 00007f7e34626090 RCX: 00007f7e3439e019 [ 816.686525][T22773] RDX: 03ffffffffffff8c RSI: 0000200000002c80 RDI: 0000000000000003 [ 816.686532][T22773] RBP: 00007f7e3519e090 R08: 0000000000000000 R09: 0000000000000000 [ 816.686538][T22773] R10: 0000000000000023 R11: 0000000000000246 R12: 0000000000000002 [ 816.686544][T22773] R13: 00007f7e34626128 R14: 00007f7e34626090 R15: 00007ffcacf4eb08 [ 816.686558][T22773] [ 816.700465][ T41] usb 10-1: USB disconnect, device number 9 [ 816.773573][ T42] audit: type=1800 audit(816.705:1493): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 816.839416][ T42] audit: type=1800 audit(816.775:1494): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 816.873448][T22780] netlink: 204 bytes leftover after parsing attributes in process `syz.6.4650'. [ 816.895030][ T42] audit: type=1800 audit(816.825:1495): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 816.946637][ T42] audit: type=1800 audit(816.885:1496): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 816.966864][ T42] audit: type=1800 audit(816.885:1497): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=324888 res=0 errno=0 [ 817.044961][ T42] audit: type=1800 audit(816.975:1498): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 817.074138][T22794] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4654'. [ 817.133871][ T42] audit: type=1800 audit(817.065:1499): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 817.199298][ T42] audit: type=1800 audit(817.135:1500): pid=22020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=21038 res=0 errno=0 [ 817.303355][ T42] audit: type=1800 audit(817.235:1501): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 817.315693][T22803] syzkaller0: entered promiscuous mode [ 817.317552][T22803] syzkaller0: entered allmulticast mode [ 817.624037][T22815] FAULT_INJECTION: forcing a failure. [ 817.624037][T22815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 817.630113][T22815] CPU: 3 UID: 0 PID: 22815 Comm: syz.6.4661 Tainted: G L syzkaller #0 PREEMPT(full) [ 817.630144][T22815] Tainted: [L]=SOFTLOCKUP [ 817.630152][T22815] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 817.630164][T22815] Call Trace: [ 817.630172][T22815] [ 817.630182][T22815] dump_stack_lvl+0x100/0x190 [ 817.630213][T22815] should_fail_ex.cold+0x5/0xa [ 817.630239][T22815] _copy_from_user+0x2e/0xd0 [ 817.630268][T22815] copy_msghdr_from_user+0x9f/0x4c0 [ 817.630289][T22815] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 817.630313][T22815] ? rcu_is_watching+0x12/0xc0 [ 817.630342][T22815] ? ___sys_recvmsg+0x177/0x1a0 [ 817.630360][T22815] ? kfree+0x1e5/0x6c0 [ 817.630391][T22815] ___sys_recvmsg+0xdd/0x1a0 [ 817.630410][T22815] ? __pfx____sys_recvmsg+0x10/0x10 [ 817.630441][T22815] ? __pfx___might_resched+0x10/0x10 [ 817.630472][T22815] do_recvmmsg+0x2f3/0x740 [ 817.630492][T22815] ? __pfx_do_recvmmsg+0x10/0x10 [ 817.630523][T22815] ? trace_event_buffer_commit+0x20a/0xa80 [ 817.630556][T22815] __x64_sys_recvmmsg+0x22a/0x280 [ 817.630584][T22815] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 817.630609][T22815] ? trace_syscall_enter+0xd9/0x110 [ 817.630640][T22815] do_syscall_64+0x115/0x870 [ 817.630663][T22815] ? clear_bhb_loop+0x40/0x90 [ 817.630687][T22815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.630708][T22815] RIP: 0033:0x7f7e3439e019 [ 817.630726][T22815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 817.630744][T22815] RSP: 002b:00007f7e3519e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 817.630768][T22815] RAX: ffffffffffffffda RBX: 00007f7e34626090 RCX: 00007f7e3439e019 [ 817.630788][T22815] RDX: 03ffffffffffff8c RSI: 0000200000002c80 RDI: 0000000000000003 [ 817.630800][T22815] RBP: 00007f7e3519e090 R08: 0000000000000000 R09: 0000000000000000 [ 817.630811][T22815] R10: 0000000000000023 R11: 0000000000000246 R12: 0000000000000002 [ 817.630823][T22815] R13: 00007f7e34626128 R14: 00007f7e34626090 R15: 00007ffcacf4eb08 [ 817.630847][T22815] [ 817.785746][T11997] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 817.827504][ T5742] Bluetooth: hci0: command tx timeout [ 817.854566][T22822] netlink: 204 bytes leftover after parsing attributes in process `syz.5.4664'. [ 817.904113][T22827] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4667'. [ 817.956499][T11997] usb 7-1: Using ep0 maxpacket: 16 [ 817.962056][T11997] usb 7-1: too many configurations: 123, using maximum allowed: 8 [ 817.971927][T11997] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 817.982178][T11997] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 817.995431][T11997] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 818.007979][T11997] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 818.017014][T11997] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 818.024413][T11997] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 818.030986][T11997] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 818.043121][T11997] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 818.051766][T11997] usb 7-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 818.055205][T11997] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 818.059865][T11997] usb 7-1: SerialNumber: syz [ 818.162688][T22848] xt_hashlimit: size too large, truncated to 1048576 [ 818.168216][T22848] xt_hashlimit: invalid interval [ 818.354790][T22856] netlink: 204 bytes leftover after parsing attributes in process `syz.6.4676'. [ 818.499659][T22866] sit0: entered promiscuous mode [ 818.524836][T22866] netlink: 'syz.6.4680': attribute type 1 has an invalid length. [ 818.529806][T22866] netlink: 1 bytes leftover after parsing attributes in process `syz.6.4680'. [ 818.560309][T22868] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4681'. [ 818.629654][T22872] tmpfs: Bad value for 'mpol' [ 818.653190][T22874] xt_hashlimit: size too large, truncated to 1048576 [ 818.658760][T22874] xt_hashlimit: invalid interval [ 818.733815][T22877] FAULT_INJECTION: forcing a failure. [ 818.733815][T22877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 818.736894][T22882] Bluetooth: MGMT ver 1.23 [ 818.743530][T22877] CPU: 0 UID: 0 PID: 22877 Comm: syz.3.4673 Tainted: G L syzkaller #0 PREEMPT(full) [ 818.743551][T22877] Tainted: [L]=SOFTLOCKUP [ 818.743556][T22877] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 818.743562][T22877] Call Trace: [ 818.743567][T22877] [ 818.743573][T22877] dump_stack_lvl+0x100/0x190 [ 818.743593][T22877] should_fail_ex.cold+0x5/0xa [ 818.743608][T22877] _copy_from_user+0x2e/0xd0 [ 818.743625][T22877] copy_msghdr_from_user+0x9f/0x4c0 [ 818.743638][T22877] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 818.743651][T22877] ? rcu_is_watching+0x12/0xc0 [ 818.743668][T22877] ? ___sys_recvmsg+0x177/0x1a0 [ 818.743677][T22877] ? kfree+0x1e5/0x6c0 [ 818.743697][T22877] ___sys_recvmsg+0xdd/0x1a0 [ 818.743707][T22877] ? __pfx____sys_recvmsg+0x10/0x10 [ 818.743725][T22877] ? __pfx___might_resched+0x10/0x10 [ 818.743743][T22877] do_recvmmsg+0x2f3/0x740 [ 818.743759][T22877] ? __pfx_do_recvmmsg+0x10/0x10 [ 818.743778][T22877] ? trace_event_buffer_commit+0x20a/0xa80 [ 818.743795][T22877] __x64_sys_recvmmsg+0x22a/0x280 [ 818.743811][T22877] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 818.743825][T22877] ? trace_syscall_enter+0xd9/0x110 [ 818.743844][T22877] do_syscall_64+0x115/0x870 [ 818.743857][T22877] ? clear_bhb_loop+0x40/0x90 [ 818.743870][T22877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.743882][T22877] RIP: 0033:0x7f145999e019 [ 818.743892][T22877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 818.743903][T22877] RSP: 002b:00007f145a7e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 818.743915][T22877] RAX: ffffffffffffffda RBX: 00007f1459c26090 RCX: 00007f145999e019 [ 818.743923][T22877] RDX: 03ffffffffffff8c RSI: 0000200000002c80 RDI: 0000000000000003 [ 818.743929][T22877] RBP: 00007f145a7e7090 R08: 0000000000000000 R09: 0000000000000000 [ 818.743936][T22877] R10: 0000000000000023 R11: 0000000000000246 R12: 0000000000000002 [ 818.743942][T22877] R13: 00007f1459c26128 R14: 00007f1459c26090 R15: 00007ffe9a17e9a8 [ 818.743956][T22877] [ 818.951387][T22896] netlink: 204 bytes leftover after parsing attributes in process `syz.6.4688'. [ 819.160730][T22909] program syz.3.4693 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 819.267307][T22907] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 819.272806][T22914] xt_hashlimit: size too large, truncated to 1048576 [ 819.275931][T22914] xt_hashlimit: invalid interval [ 819.636757][T11997] usb 11-1: new full-speed USB device number 3 using dummy_hcd [ 819.674266][T22924] FAULT_INJECTION: forcing a failure. [ 819.674266][T22924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 819.680019][T22924] CPU: 2 UID: 0 PID: 22924 Comm: syz.3.4696 Tainted: G L syzkaller #0 PREEMPT(full) [ 819.680041][T22924] Tainted: [L]=SOFTLOCKUP [ 819.680046][T22924] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 819.680052][T22924] Call Trace: [ 819.680057][T22924] [ 819.680062][T22924] dump_stack_lvl+0x100/0x190 [ 819.680082][T22924] should_fail_ex.cold+0x5/0xa [ 819.680097][T22924] _copy_from_user+0x2e/0xd0 [ 819.680114][T22924] copy_msghdr_from_user+0x9f/0x4c0 [ 819.680126][T22924] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 819.680139][T22924] ? rcu_is_watching+0x12/0xc0 [ 819.680157][T22924] ? ___sys_recvmsg+0x177/0x1a0 [ 819.680167][T22924] ? kfree+0x1e5/0x6c0 [ 819.680186][T22924] ___sys_recvmsg+0xdd/0x1a0 [ 819.680197][T22924] ? __pfx____sys_recvmsg+0x10/0x10 [ 819.680215][T22924] ? __pfx___might_resched+0x10/0x10 [ 819.680232][T22924] do_recvmmsg+0x2f3/0x740 [ 819.680245][T22924] ? __pfx_do_recvmmsg+0x10/0x10 [ 819.680263][T22924] ? trace_event_buffer_commit+0x20a/0xa80 [ 819.680281][T22924] __x64_sys_recvmmsg+0x22a/0x280 [ 819.680296][T22924] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 819.680310][T22924] ? trace_syscall_enter+0xd9/0x110 [ 819.680328][T22924] do_syscall_64+0x115/0x870 [ 819.680342][T22924] ? clear_bhb_loop+0x40/0x90 [ 819.680355][T22924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.680366][T22924] RIP: 0033:0x7f145999e019 [ 819.680376][T22924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 819.680387][T22924] RSP: 002b:00007f145a7e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 819.680399][T22924] RAX: ffffffffffffffda RBX: 00007f1459c26090 RCX: 00007f145999e019 [ 819.680406][T22924] RDX: 03ffffffffffff8c RSI: 0000200000002c80 RDI: 0000000000000003 [ 819.680417][T22924] RBP: 00007f145a7e7090 R08: 0000000000000000 R09: 0000000000000000 [ 819.680424][T22924] R10: 0000000000000023 R11: 0000000000000246 R12: 0000000000000002 [ 819.680430][T22924] R13: 00007f1459c26128 R14: 00007f1459c26090 R15: 00007ffe9a17e9a8 [ 819.680444][T22924] [ 819.797574][T11997] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 819.801469][T11997] usb 11-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 819.805079][T11997] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 819.808383][T11997] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14385, setting to 64 [ 819.813588][T11997] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 819.818580][T11997] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 819.821953][T11997] usb 11-1: Product: syz [ 819.823649][T11997] usb 11-1: Manufacturer: syz [ 819.906299][ T5742] Bluetooth: hci0: command tx timeout [ 820.082899][T22947] syzkaller0: entered promiscuous mode [ 820.085083][T22947] syzkaller0: entered allmulticast mode [ 820.510545][ T1045] usb 7-1: USB disconnect, device number 21 [ 820.929508][T22969] __nla_validate_parse: 4 callbacks suppressed [ 820.929526][T22969] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4705'. [ 821.216554][T22978] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4708'. [ 821.415699][T22983] netlink: 204 bytes leftover after parsing attributes in process `syz.5.4710'. [ 822.394438][T11997] usb 11-1: USB disconnect, device number 3 [ 822.413514][ T42] kauditd_printk_skb: 52 callbacks suppressed [ 822.413538][ T42] audit: type=1800 audit(822.345:1554): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 822.698353][ T42] audit: type=1800 audit(822.635:1555): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 822.737383][T22990] syzkaller0: entered promiscuous mode [ 822.743210][T22990] syzkaller0: entered allmulticast mode [ 822.775778][ T42] audit: type=1800 audit(822.695:1556): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 822.790001][ T42] audit: type=1800 audit(822.715:1557): pid=23000 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.4714" name="multicast_igmp_version" dev="sysfs" ino=288583 res=0 errno=0 [ 822.830633][ T42] audit: type=1800 audit(822.765:1558): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=326501 res=0 errno=0 [ 822.835395][T23002] overlay: Unknown parameter '/' [ 822.858288][ T42] audit: type=1800 audit(822.795:1559): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 822.906921][T23011] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4718'. [ 822.912613][ T42] audit: type=1800 audit(822.845:1560): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 822.930363][ T42] audit: type=1800 audit(822.865:1561): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 822.972462][ T42] audit: type=1800 audit(822.905:1562): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 823.000453][ T42] audit: type=1800 audit(822.935:1563): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 823.085799][T15473] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 823.165249][T23021] FAULT_INJECTION: forcing a failure. [ 823.165249][T23021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 823.177647][T23021] CPU: 0 UID: 0 PID: 23021 Comm: syz.3.4719 Tainted: G L syzkaller #0 PREEMPT(full) [ 823.177680][T23021] Tainted: [L]=SOFTLOCKUP [ 823.177686][T23021] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 823.177697][T23021] Call Trace: [ 823.177704][T23021] [ 823.177720][T23021] dump_stack_lvl+0x100/0x190 [ 823.177750][T23021] should_fail_ex.cold+0x5/0xa [ 823.177773][T23021] _copy_from_user+0x2e/0xd0 [ 823.177796][T23021] copy_msghdr_from_user+0x9f/0x4c0 [ 823.177815][T23021] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 823.177836][T23021] ? rcu_is_watching+0x12/0xc0 [ 823.177863][T23021] ? ___sys_recvmsg+0x177/0x1a0 [ 823.177879][T23021] ? kfree+0x1e5/0x6c0 [ 823.177909][T23021] ___sys_recvmsg+0xdd/0x1a0 [ 823.177927][T23021] ? __pfx____sys_recvmsg+0x10/0x10 [ 823.177957][T23021] ? __pfx___might_resched+0x10/0x10 [ 823.177983][T23021] do_recvmmsg+0x2f3/0x740 [ 823.178004][T23021] ? __pfx_do_recvmmsg+0x10/0x10 [ 823.178038][T23021] ? trace_event_buffer_commit+0x20a/0xa80 [ 823.178065][T23021] __x64_sys_recvmmsg+0x22a/0x280 [ 823.178091][T23021] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 823.178113][T23021] ? trace_syscall_enter+0xd9/0x110 [ 823.178143][T23021] do_syscall_64+0x115/0x870 [ 823.178164][T23021] ? clear_bhb_loop+0x40/0x90 [ 823.178184][T23021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.178202][T23021] RIP: 0033:0x7f145999e019 [ 823.178216][T23021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 823.178233][T23021] RSP: 002b:00007f145a7e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 823.178251][T23021] RAX: ffffffffffffffda RBX: 00007f1459c26090 RCX: 00007f145999e019 [ 823.178263][T23021] RDX: 03ffffffffffff8c RSI: 0000200000002c80 RDI: 0000000000000003 [ 823.178273][T23021] RBP: 00007f145a7e7090 R08: 0000000000000000 R09: 0000000000000000 [ 823.178284][T23021] R10: 0000000000000023 R11: 0000000000000246 R12: 0000000000000002 [ 823.178293][T23021] R13: 00007f1459c26128 R14: 00007f1459c26090 R15: 00007ffe9a17e9a8 [ 823.178314][T23021] [ 823.246037][ T1045] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 823.283627][T15473] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 823.287129][T15473] usb 7-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 823.290346][T15473] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.425998][ T1045] usb 10-1: Using ep0 maxpacket: 32 [ 823.429690][ T1045] usb 10-1: config 0 has an invalid interface number: 119 but max is 0 [ 823.433280][ T1045] usb 10-1: config 0 has no interface number 0 [ 823.436093][ T1045] usb 10-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 823.440554][ T1045] usb 10-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 823.445329][ T1045] usb 10-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 823.449676][ T1045] usb 10-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 823.457240][ T1045] usb 10-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 823.462042][ T1045] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.465388][ T1045] usb 10-1: Product: syz [ 823.468322][ T1045] usb 10-1: Manufacturer: syz [ 823.470379][ T1045] usb 10-1: SerialNumber: syz [ 823.605795][T23039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4726'. [ 823.676457][T23046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4728'. [ 823.704013][T23049] (syz.6.4729,23049,2):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 823.716031][T23050] (syz.6.4729,23050,3):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 823.721497][T23048] netlink: 'syz.6.4729': attribute type 1 has an invalid length. [ 823.724129][T23048] netlink: 228 bytes leftover after parsing attributes in process `syz.6.4729'. [ 823.727512][T23049] netlink: 'syz.6.4729': attribute type 1 has an invalid length. [ 823.730118][T23049] netlink: 228 bytes leftover after parsing attributes in process `syz.6.4729'. [ 823.888471][T23058] netlink: 204 bytes leftover after parsing attributes in process `syz.6.4732'. [ 823.921074][T23056] FAULT_INJECTION: forcing a failure. [ 823.921074][T23056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 823.925097][T23056] CPU: 3 UID: 0 PID: 23056 Comm: syz.3.4731 Tainted: G L syzkaller #0 PREEMPT(full) [ 823.925117][T23056] Tainted: [L]=SOFTLOCKUP [ 823.925121][T23056] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 823.925129][T23056] Call Trace: [ 823.925134][T23056] [ 823.925139][T23056] dump_stack_lvl+0x100/0x190 [ 823.925160][T23056] should_fail_ex.cold+0x5/0xa [ 823.925175][T23056] _copy_from_user+0x2e/0xd0 [ 823.925192][T23056] copy_msghdr_from_user+0x9f/0x4c0 [ 823.925205][T23056] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 823.925218][T23056] ? rcu_is_watching+0x12/0xc0 [ 823.925235][T23056] ? ___sys_recvmsg+0x177/0x1a0 [ 823.925244][T23056] ? kfree+0x1e5/0x6c0 [ 823.925263][T23056] ___sys_recvmsg+0xdd/0x1a0 [ 823.925274][T23056] ? __pfx____sys_recvmsg+0x10/0x10 [ 823.925292][T23056] ? __pfx___might_resched+0x10/0x10 [ 823.925309][T23056] do_recvmmsg+0x2f3/0x740 [ 823.925333][T23056] ? __pfx_do_recvmmsg+0x10/0x10 [ 823.925352][T23056] ? trace_event_buffer_commit+0x20a/0xa80 [ 823.925370][T23056] __x64_sys_recvmmsg+0x22a/0x280 [ 823.925385][T23056] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 823.925399][T23056] ? trace_syscall_enter+0xd9/0x110 [ 823.925424][T23056] do_syscall_64+0x115/0x870 [ 823.925437][T23056] ? clear_bhb_loop+0x40/0x90 [ 823.925450][T23056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.925462][T23056] RIP: 0033:0x7f145999e019 [ 823.925472][T23056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 823.925484][T23056] RSP: 002b:00007f145a7e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 823.925496][T23056] RAX: ffffffffffffffda RBX: 00007f1459c26090 RCX: 00007f145999e019 [ 823.925503][T23056] RDX: 03ffffffffffff8c RSI: 0000200000002c80 RDI: 0000000000000003 [ 823.925510][T23056] RBP: 00007f145a7e7090 R08: 0000000000000000 R09: 0000000000000000 [ 823.925516][T23056] R10: 0000000000000023 R11: 0000000000000246 R12: 0000000000000002 [ 823.925522][T23056] R13: 00007f1459c26128 R14: 00007f1459c26090 R15: 00007ffe9a17e9a8 [ 823.925536][T23056] [ 824.247720][T23080] fuse: Unknown parameter 'f´.ÐNd3<¼ÿ Ü법%nl ¶BÌ—œä' ÃÓ [ 824.247720][T23080] #åÈr¬–gþ1êâO0x0000000000000003' [ 824.253500][T23080] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4737'. [ 825.033799][T23117] file system registered [ 825.049821][T23117] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 825.067311][T23117] read descriptors [ 825.095382][T22310] ffs_data_put(): freeing [ 825.164306][T23121] netlink: 'syz.3.4744': attribute type 2 has an invalid length. [ 825.578548][T23139] xt_hashlimit: size too large, truncated to 1048576 [ 825.581558][T23139] xt_hashlimit: invalid interval [ 825.876929][T15473] usb 7-1: USB disconnect, device number 22 [ 825.943277][T23155] syzkaller0: entered promiscuous mode [ 825.945310][T23155] syzkaller0: entered allmulticast mode [ 826.021431][T14200] usb 10-1: USB disconnect, device number 10 [ 826.085129][T23153] __nla_validate_parse: 2 callbacks suppressed [ 826.085150][T23153] netlink: 204 bytes leftover after parsing attributes in process `syz.3.4753'. [ 826.168613][T23164] tipc: Enabled bearer , priority 0 [ 826.205314][T23164] syzkaller0: entered promiscuous mode [ 826.207442][T23164] syzkaller0: entered allmulticast mode [ 826.209852][T23164] tipc: Resetting bearer [ 826.221590][T23163] tipc: Resetting bearer [ 828.131065][T23163] tipc: Disabling bearer [ 828.164160][T23192] bridge0: entered allmulticast mode [ 828.211643][ T42] kauditd_printk_skb: 46 callbacks suppressed [ 828.211666][ T42] audit: type=1800 audit(828.145:1610): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 828.258893][ T42] audit: type=1800 audit(828.195:1611): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 828.293900][ T42] audit: type=1800 audit(828.225:1612): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 828.352535][T23200] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23200 comm=syz.5.4765 [ 828.353647][T23201] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23201 comm=syz.5.4765 [ 828.400176][ T42] audit: type=1400 audit(828.335:1613): avc: denied { accept } for pid=23209 comm="syz.5.4767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 828.407298][ T42] audit: type=1800 audit(828.335:1614): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 828.432506][T23214] Bluetooth: (null): Invalid header checksum [ 828.438267][T23214] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4768'. [ 828.441705][T23214] netlink: 'syz.2.4768': attribute type 7 has an invalid length. [ 828.444587][T23214] netlink: 'syz.2.4768': attribute type 8 has an invalid length. [ 828.447653][ T1174] Bluetooth: (null): Invalid header checksum [ 828.450274][T23214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4768'. [ 828.468354][ T42] audit: type=1800 audit(828.405:1615): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 828.484980][T23214] bridge0: entered promiscuous mode [ 828.489568][T23214] ip6gretap0: entered promiscuous mode [ 828.498502][T23214] bridge0: left promiscuous mode [ 828.502671][T23214] ip6gretap0: left promiscuous mode [ 828.509000][ T42] audit: type=1800 audit(828.445:1616): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 828.529604][ T42] audit: type=1800 audit(828.465:1617): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=327818 res=0 errno=0 [ 828.556454][ T60] Bluetooth: (null): Invalid header checksum [ 828.594066][ T42] audit: type=1800 audit(828.525:1618): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=327928 res=0 errno=0 [ 828.602855][ T42] audit: type=1800 audit(828.525:1619): pid=23020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=327837 res=0 errno=0 [ 828.605815][T23225] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 828.620398][T23225] block device autoloading is deprecated and will be removed. [ 828.627723][T23220] md: md130 stopped. [ 828.663721][T23229] bridge0: entered promiscuous mode [ 828.734822][T23231] syzkaller0: entered promiscuous mode [ 828.738736][T23231] syzkaller0: entered allmulticast mode [ 828.785467][T23233] tipc: Enabled bearer , priority 0 [ 828.821292][T23233] syzkaller0: entered promiscuous mode [ 828.823068][T23233] syzkaller0: entered allmulticast mode [ 828.826415][T23233] tipc: Resetting bearer [ 828.832995][T23232] tipc: Resetting bearer [ 828.853775][T23240] netlink: 'syz.5.4776': attribute type 1 has an invalid length. [ 828.862744][T23240] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 828.868338][T23240] overlayfs: failed to set xattr on upper [ 828.871598][T23240] overlayfs: ...falling back to redirect_dir=nofollow. [ 828.874180][T23240] overlayfs: ...falling back to index=off. [ 828.877564][T23240] overlayfs: ...falling back to uuid=null. [ 828.889914][T23240] overlayfs: cleanup of 'bus/work' failed (-13) [ 828.895532][T23240] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 828.899969][T23240] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 828.904490][T23240] overlayfs: failed to get uuid (/file0, err=-95); falling back to uuid=null. [ 828.950025][T23241] FAULT_INJECTION: forcing a failure. [ 828.950025][T23241] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 828.955206][T23241] CPU: 0 UID: 0 PID: 23241 Comm: syz.6.4775 Tainted: G L syzkaller #0 PREEMPT(full) [ 828.955226][T23241] Tainted: [L]=SOFTLOCKUP [ 828.955230][T23241] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 828.955238][T23241] Call Trace: [ 828.955243][T23241] [ 828.955247][T23241] dump_stack_lvl+0x100/0x190 [ 828.955267][T23241] should_fail_ex.cold+0x5/0xa [ 828.955282][T23241] _copy_from_user+0x2e/0xd0 [ 828.955299][T23241] copy_msghdr_from_user+0x9f/0x4c0 [ 828.955312][T23241] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 828.955325][T23241] ? rcu_is_watching+0x12/0xc0 [ 828.955342][T23241] ? ___sys_recvmsg+0x177/0x1a0 [ 828.955352][T23241] ? kfree+0x1e5/0x6c0 [ 828.955370][T23241] ___sys_recvmsg+0xdd/0x1a0 [ 828.955381][T23241] ? __pfx____sys_recvmsg+0x10/0x10 [ 828.955399][T23241] ? __pfx___might_resched+0x10/0x10 [ 828.955416][T23241] do_recvmmsg+0x2f3/0x740 [ 828.955428][T23241] ? __pfx_do_recvmmsg+0x10/0x10 [ 828.955447][T23241] ? trace_event_buffer_commit+0x20a/0xa80 [ 828.955464][T23241] __x64_sys_recvmmsg+0x22a/0x280 [ 828.955480][T23241] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 828.955494][T23241] ? trace_syscall_enter+0xd9/0x110 [ 828.955512][T23241] do_syscall_64+0x115/0x870 [ 828.955525][T23241] ? clear_bhb_loop+0x40/0x90 [ 828.955538][T23241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.955550][T23241] RIP: 0033:0x7f7e3439e019 [ 828.955559][T23241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 828.955584][T23241] RSP: 002b:00007f7e3519e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 828.955597][T23241] RAX: ffffffffffffffda RBX: 00007f7e34626090 RCX: 00007f7e3439e019 [ 828.955604][T23241] RDX: 03ffffffffffff8c RSI: 0000200000002c80 RDI: 0000000000000003 [ 828.955610][T23241] RBP: 00007f7e3519e090 R08: 0000000000000000 R09: 0000000000000000 [ 828.955617][T23241] R10: 0000000000000023 R11: 0000000000000246 R12: 0000000000000002 [ 828.955623][T23241] R13: 00007f7e34626128 R14: 00007f7e34626090 R15: 00007ffcacf4eb08 [ 828.955637][T23241] [ 829.170057][T23248] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 831.070562][T23232] tipc: Disabling bearer [ 831.075495][T23261] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.078106][T23261] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.119999][T23270] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4786'. [ 831.229931][T23279] syzkaller0: entered promiscuous mode [ 831.231736][T23279] syzkaller0: entered allmulticast mode [ 831.287443][T23282] FAULT_INJECTION: forcing a failure. [ 831.287443][T23282] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 831.291716][T23282] CPU: 2 UID: 0 PID: 23282 Comm: syz.5.4787 Tainted: G L syzkaller #0 PREEMPT(full) [ 831.291736][T23282] Tainted: [L]=SOFTLOCKUP [ 831.291740][T23282] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 831.291747][T23282] Call Trace: [ 831.291752][T23282] [ 831.291757][T23282] dump_stack_lvl+0x100/0x190 [ 831.291776][T23282] should_fail_ex.cold+0x5/0xa [ 831.291792][T23282] _copy_from_user+0x2e/0xd0 [ 831.291808][T23282] copy_msghdr_from_user+0x9f/0x4c0 [ 831.291821][T23282] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 831.291834][T23282] ? rcu_is_watching+0x12/0xc0 [ 831.291851][T23282] ? ___sys_recvmsg+0x177/0x1a0 [ 831.291861][T23282] ? kfree+0x1e5/0x6c0 [ 831.291879][T23282] ___sys_recvmsg+0xdd/0x1a0 [ 831.291890][T23282] ? __pfx____sys_recvmsg+0x10/0x10 [ 831.291908][T23282] ? __pfx___might_resched+0x10/0x10 [ 831.291925][T23282] do_recvmmsg+0x2f3/0x740 [ 831.291937][T23282] ? __pfx_do_recvmmsg+0x10/0x10 [ 831.291955][T23282] ? trace_event_buffer_commit+0x20a/0xa80 [ 831.291974][T23282] __x64_sys_recvmmsg+0x22a/0x280 [ 831.291989][T23282] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 831.292007][T23282] ? trace_syscall_enter+0xd9/0x110 [ 831.292034][T23282] do_syscall_64+0x115/0x870 [ 831.292057][T23282] ? clear_bhb_loop+0x40/0x90 [ 831.292079][T23282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.292097][T23282] RIP: 0033:0x7fe08139e019 [ 831.292114][T23282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 831.292128][T23282] RSP: 002b:00007fe0821ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 831.292140][T23282] RAX: ffffffffffffffda RBX: 00007fe081626090 RCX: 00007fe08139e019 [ 831.292147][T23282] RDX: 03ffffffffffff8c RSI: 0000200000002c80 RDI: 0000000000000003 [ 831.292154][T23282] RBP: 00007fe0821ab090 R08: 0000000000000000 R09: 0000000000000000 [ 831.292160][T23282] R10: 0000000000000023 R11: 0000000000000246 R12: 0000000000000002 [ 831.292166][T23282] R13: 00007fe081626128 R14: 00007fe081626090 R15: 00007ffec0c44df8 [ 831.292180][T23282] [ 831.530012][T23306] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4797'. [ 831.568866][T23306] syzkaller0: entered promiscuous mode [ 831.570769][T23306] syzkaller0: entered allmulticast mode [ 831.964083][T23312] xt_hashlimit: size too large, truncated to 1048576 [ 831.966939][T23312] xt_hashlimit: invalid interval [ 832.534515][T23318] FAULT_INJECTION: forcing a failure. [ 832.534515][T23318] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 832.540610][T23318] CPU: 2 UID: 0 PID: 23318 Comm: syz.5.4801 Tainted: G L syzkaller #0 PREEMPT(full) [ 832.540642][T23318] Tainted: [L]=SOFTLOCKUP [ 832.540649][T23318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 832.540661][T23318] Call Trace: [ 832.540670][T23318] [ 832.540680][T23318] dump_stack_lvl+0x100/0x190 [ 832.540715][T23318] should_fail_ex.cold+0x5/0xa [ 832.540738][T23318] _copy_from_user+0x2e/0xd0 [ 832.540765][T23318] copy_msghdr_from_user+0x9f/0x4c0 [ 832.540784][T23318] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 832.540806][T23318] ? rcu_is_watching+0x12/0xc0 [ 832.540833][T23318] ? ___sys_recvmsg+0x177/0x1a0 [ 832.540848][T23318] ? kfree+0x1e5/0x6c0 [ 832.540878][T23318] ___sys_recvmsg+0xdd/0x1a0 [ 832.540896][T23318] ? __pfx____sys_recvmsg+0x10/0x10 [ 832.540926][T23318] ? __pfx___might_resched+0x10/0x10 [ 832.540953][T23318] do_recvmmsg+0x2f3/0x740 [ 832.540973][T23318] ? __pfx_do_recvmmsg+0x10/0x10 [ 832.541005][T23318] ? trace_event_buffer_commit+0x20a/0xa80 [ 832.541053][T23318] __x64_sys_recvmmsg+0x22a/0x280 [ 832.541078][T23318] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 832.541101][T23318] ? trace_syscall_enter+0xd9/0x110 [ 832.541131][T23318] do_syscall_64+0x115/0x870 [ 832.541152][T23318] ? clear_bhb_loop+0x40/0x90 [ 832.541174][T23318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.541193][T23318] RIP: 0033:0x7fe08139e019 [ 832.541208][T23318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 832.541224][T23318] RSP: 002b:00007fe0821ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 832.541242][T23318] RAX: ffffffffffffffda RBX: 00007fe081626090 RCX: 00007fe08139e019 [ 832.541254][T23318] RDX: 03ffffffffffff8c RSI: 0000200000002c80 RDI: 0000000000000003 [ 832.541265][T23318] RBP: 00007fe0821ab090 R08: 0000000000000000 R09: 0000000000000000 [ 832.541276][T23318] R10: 0000000000000023 R11: 0000000000000246 R12: 0000000000000002 [ 832.541287][T23318] R13: 00007fe081626128 R14: 00007fe081626090 R15: 00007ffec0c44df8 [ 832.541310][T23318] [ 833.690048][ T42] kauditd_printk_skb: 25 callbacks suppressed [ 833.690066][ T42] audit: type=1800 audit(833.625:1645): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 833.734173][ T42] audit: type=1800 audit(833.665:1646): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 833.751916][T23338] syzkaller0: entered promiscuous mode [ 833.754295][T23338] syzkaller0: entered allmulticast mode [ 833.760963][ T42] audit: type=1800 audit(833.695:1647): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 833.763726][T23338] FAULT_INJECTION: forcing a failure. [ 833.763726][T23338] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 833.778854][T23338] CPU: 0 UID: 0 PID: 23338 Comm: syz.2.4806 Tainted: G L syzkaller #0 PREEMPT(full) [ 833.778874][T23338] Tainted: [L]=SOFTLOCKUP [ 833.778878][T23338] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 833.778885][T23338] Call Trace: [ 833.778890][T23338] [ 833.778894][T23338] dump_stack_lvl+0x100/0x190 [ 833.778919][T23338] should_fail_ex.cold+0x5/0xa [ 833.778935][T23338] _copy_from_iter+0x43a/0x1690 [ 833.778954][T23338] ? __pfx__copy_from_iter+0x10/0x10 [ 833.778969][T23338] ? _copy_from_iter+0x270/0x1690 [ 833.778987][T23338] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 833.779025][T23338] skb_copy_datagram_from_iter+0x11f/0x720 [ 833.779042][T23338] packet_sendmsg+0x227e/0x5100 [ 833.779057][T23338] ? avc_has_perm_noaudit+0x2da/0x3b0 [ 833.779086][T23338] ? sock_has_perm+0x25a/0x2f0 [ 833.779100][T23338] ? __pfx_sock_has_perm+0x10/0x10 [ 833.779118][T23338] ? __pfx_packet_sendmsg+0x10/0x10 [ 833.779134][T23338] ? selinux_socket_sendmsg+0x198/0x2f0 [ 833.779152][T23338] ____sys_sendmsg+0xa4d/0xbe0 [ 833.779172][T23338] ? __pfx_packet_sendmsg+0x10/0x10 [ 833.779189][T23338] ? __pfx_____sys_sendmsg+0x10/0x10 [ 833.779209][T23338] ? __pfx_trace_clock_local+0x10/0x10 [ 833.779225][T23338] ___sys_sendmsg+0x190/0x1e0 [ 833.779241][T23338] ? __pfx____sys_sendmsg+0x10/0x10 [ 833.779251][T23338] ? __lock_acquire+0x49f/0x1a40 [ 833.779280][T23338] __sys_sendmsg+0x160/0x210 [ 833.779294][T23338] ? __pfx___sys_sendmsg+0x10/0x10 [ 833.779315][T23338] do_syscall_64+0x115/0x870 [ 833.779329][T23338] ? clear_bhb_loop+0x40/0x90 [ 833.779342][T23338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.779354][T23338] RIP: 0033:0x7f868b99e019 [ 833.779364][T23338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 833.779375][T23338] RSP: 002b:00007f868c8b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 833.779388][T23338] RAX: ffffffffffffffda RBX: 00007f868bc25fa0 RCX: 00007f868b99e019 [ 833.779398][T23338] RDX: 0000000000000005 RSI: 0000200000000140 RDI: 0000000000000007 [ 833.779404][T23338] RBP: 00007f868c8b7090 R08: 0000000000000000 R09: 0000000000000000 [ 833.779411][T23338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 833.779417][T23338] R13: 00007f868bc26038 R14: 00007f868bc25fa0 R15: 00007fffce902d88 [ 833.779431][T23338] [ 833.800119][ T42] audit: type=1800 audit(833.735:1648): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 833.890144][ T42] audit: type=1800 audit(833.755:1649): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 833.896933][ T42] audit: type=1800 audit(833.775:1650): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 833.943817][ T42] audit: type=1800 audit(833.875:1651): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 833.968539][ T42] audit: type=1800 audit(833.905:1652): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 834.023555][ T42] audit: type=1800 audit(833.955:1653): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 834.073572][ T42] audit: type=1800 audit(834.005:1654): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 834.107250][T23362] loop5: detected capacity change from 0 to 7 [ 834.183311][T23366] tipc: Enabled bearer , priority 0 [ 834.187335][T23358] syzkaller0: entered promiscuous mode [ 834.189637][T23358] syzkaller0: entered allmulticast mode [ 834.192396][T23358] tipc: Resetting bearer [ 834.200776][T23357] tipc: Resetting bearer [ 834.344539][T23362] Dev loop5: unable to read RDB block 7 [ 834.350759][T23362] loop5: unable to read partition table [ 834.352764][T23362] loop5: partition table beyond EOD, truncated [ 834.355318][T23362] loop_reread_partitions: partition scan of loop5 (úùƒW勺РœëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5) [ 835.982434][T23357] tipc: Disabling bearer [ 835.990247][T23369] syzkaller0: entered promiscuous mode [ 835.992639][T23369] syzkaller0: entered allmulticast mode [ 836.120858][T23392] syzkaller0: entered promiscuous mode [ 836.122697][T23392] syzkaller0: entered allmulticast mode [ 836.127132][T23392] FAULT_INJECTION: forcing a failure. [ 836.127132][T23392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 836.131536][T23392] CPU: 2 UID: 0 PID: 23392 Comm: syz.5.4822 Tainted: G L syzkaller #0 PREEMPT(full) [ 836.131562][T23392] Tainted: [L]=SOFTLOCKUP [ 836.131569][T23392] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 836.131580][T23392] Call Trace: [ 836.131588][T23392] [ 836.131596][T23392] dump_stack_lvl+0x100/0x190 [ 836.131625][T23392] should_fail_ex.cold+0x5/0xa [ 836.131650][T23392] _copy_to_user+0x32/0xd0 [ 836.131679][T23392] simple_read_from_buffer+0xcb/0x170 [ 836.131700][T23392] proc_fail_nth_read+0x1af/0x230 [ 836.131734][T23392] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 836.131762][T23392] ? rw_verify_area+0xce/0x6d0 [ 836.131788][T23392] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 836.131815][T23392] vfs_read+0x1e4/0xb40 [ 836.131845][T23392] ? __pfx_vfs_read+0x10/0x10 [ 836.131877][T23392] ? __fget_files+0x215/0x3d0 [ 836.131902][T23392] ? __fget_files+0x21f/0x3d0 [ 836.131928][T23392] ksys_read+0x12a/0x250 [ 836.131955][T23392] ? __pfx_ksys_read+0x10/0x10 [ 836.131978][T23392] ? trace_syscall_enter+0xd9/0x110 [ 836.132011][T23392] do_syscall_64+0x115/0x870 [ 836.132033][T23392] ? clear_bhb_loop+0x40/0x90 [ 836.132055][T23392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.132073][T23392] RIP: 0033:0x7fe08135e84e [ 836.132088][T23392] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 836.132106][T23392] RSP: 002b:00007fe0821cbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 836.132125][T23392] RAX: ffffffffffffffda RBX: 00007fe0821cc6c0 RCX: 00007fe08135e84e [ 836.132136][T23392] RDX: 000000000000000f RSI: 00007fe0821cc0a0 RDI: 0000000000000009 [ 836.132145][T23392] RBP: 00007fe0821cc090 R08: 0000000000000000 R09: 0000000000000000 [ 836.132155][T23392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 836.132164][T23392] R13: 00007fe081626038 R14: 00007fe081625fa0 R15: 00007ffec0c44df8 [ 836.132187][T23392] [ 836.294470][T23404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4827'. [ 836.379572][T23410] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4830'. [ 836.383485][T23410] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4830'. [ 836.388672][T23410] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4830'. [ 836.393285][T23410] bridge0: port 3(veth1) entered blocking state [ 836.396051][T23410] bridge0: port 3(veth1) entered disabled state [ 836.398811][T23410] veth1: entered allmulticast mode [ 836.401952][T23410] veth1: entered promiscuous mode [ 836.404513][T23410] bridge0: port 3(veth1) entered blocking state [ 836.407218][T23410] bridge0: port 3(veth1) entered forwarding state [ 836.419642][T23410] syzkaller0: entered promiscuous mode [ 836.421947][T23410] syzkaller0: entered allmulticast mode [ 836.465907][ T41] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 836.615940][ T41] usb 11-1: Using ep0 maxpacket: 8 [ 836.619832][ T41] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 836.622309][ T41] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 836.625360][ T41] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 836.629076][ T41] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12320, setting to 1024 [ 836.633543][ T41] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 836.639764][ T41] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 836.644913][ T41] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 836.648524][ T41] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.890775][T23418] bridge0: port 3(veth1) entered disabled state [ 836.893496][T23418] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.896853][T23418] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.130685][T23423] overlayfs: missing 'lowerdir' [ 837.298391][T23427] xt_hashlimit: size too large, truncated to 1048576 [ 837.422812][T23437] program syz.5.4840 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 837.557681][T23448] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4843'. [ 837.654947][T23454] xt_hashlimit: size too large, truncated to 1048576 [ 837.658525][T23454] xt_hashlimit: invalid interval [ 837.688635][T23456] input: syz0 as /devices/virtual/input/input22 [ 837.738892][T23458] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 837.801608][T23460] netlink: 'syz.5.4849': attribute type 3 has an invalid length. [ 837.863393][T23462] netlink: 204 bytes leftover after parsing attributes in process `syz.5.4850'. [ 838.185717][T11997] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 838.197003][T23468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4853'. [ 838.358049][T11997] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 838.361762][T11997] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 838.366295][T11997] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 838.370732][T11997] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14385, setting to 64 [ 838.377957][T11997] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 838.381831][T11997] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 838.384987][T11997] usb 10-1: Product: syz [ 838.387375][T11997] usb 10-1: Manufacturer: syz [ 838.505962][T23477] syzkaller0: entered promiscuous mode [ 838.507994][T23477] syzkaller0: entered allmulticast mode [ 838.741853][T23485] netlink: 204 bytes leftover after parsing attributes in process `syz.2.4860'. [ 839.205861][ T41] usb 11-1: USB disconnect, device number 4 [ 839.239548][ T42] kauditd_printk_skb: 51 callbacks suppressed [ 839.239608][ T42] audit: type=1800 audit(2000000003.119:1706): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 839.279846][ T42] audit: type=1400 audit(2000000003.159:1707): avc: denied { mount } for pid=23489 comm="syz.6.4862" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 839.287898][ T42] audit: type=1400 audit(2000000003.169:1708): avc: denied { search } for pid=23489 comm="syz.6.4862" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 839.292880][T23490] openvswitch: netlink: Actions may not be safe on all matching packets [ 839.297082][ T42] audit: type=1400 audit(2000000003.169:1709): avc: denied { read } for pid=23489 comm="syz.6.4862" name="threads" dev="nfsd" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 839.308519][ T42] audit: type=1400 audit(2000000003.169:1710): avc: denied { open } for pid=23489 comm="syz.6.4862" path="/80/nfsd/threads" dev="nfsd" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 839.316627][ T42] audit: type=1400 audit(2000000003.179:1711): avc: denied { map } for pid=23489 comm="syz.6.4862" path="socket:[81594]" dev="sockfs" ino=81594 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 839.316656][ T42] audit: type=1400 audit(2000000003.179:1712): avc: denied { search } for pid=23489 comm="syz.6.4862" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 839.363131][ T42] audit: type=1400 audit(2000000003.239:1713): avc: denied { unmount } for pid=22310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 839.385094][ T42] audit: type=1800 audit(2000000003.259:1714): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 839.423935][ T42] audit: type=1800 audit(2000000003.299:1715): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 839.688207][T23499] bridge0: port 3(ipvlan0) entered blocking state [ 839.692913][T23499] bridge0: port 3(ipvlan0) entered disabled state [ 839.695547][T23499] ipvlan0: entered allmulticast mode [ 839.698939][T23499] veth0_vlan: entered allmulticast mode [ 839.704417][T23499] ipvlan0: left allmulticast mode [ 839.706771][T23499] veth0_vlan: left allmulticast mode [ 839.738278][T23503] UBIFS error (pid: 23503): cannot open "ubi0_0", error -19 [ 839.794852][T23506] netlink: 204 bytes leftover after parsing attributes in process `syz.6.4869'. [ 840.115800][T14062] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 840.275802][T14062] usb 11-1: Using ep0 maxpacket: 8 [ 840.280142][T14062] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 840.283844][T14062] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 840.288035][T14062] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 840.291247][T14062] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 840.294465][T14062] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 840.298936][T14062] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 840.302105][T14062] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.785550][T23529] overlay: filesystem on ./bus not supported [ 840.872356][ T5089] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 840.877229][ T5089] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 840.880795][ T5089] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 840.892534][ T5089] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 840.898488][ T5089] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 840.912826][T23536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4881'. [ 840.958334][T14062] usb 10-1: USB disconnect, device number 11 [ 841.092167][ T5089] Bluetooth: hci4: unexpected event for opcode 0x1804 [ 841.137548][T23552] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 841.411904][T23532] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.414478][T23532] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.418807][T23532] bridge_slave_0: entered allmulticast mode [ 841.421729][T23532] bridge_slave_0: entered promiscuous mode [ 841.431779][T23532] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.434241][T23532] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.437228][T23532] bridge_slave_1: entered allmulticast mode [ 841.440928][T23532] bridge_slave_1: entered promiscuous mode [ 841.472357][T23532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 841.493863][T23532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 841.517927][T23532] team0: Port device team_slave_0 added [ 841.521653][T23532] team0: Port device team_slave_1 added [ 841.558530][T23532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 841.561024][T23532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 841.569956][T23532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 841.576394][T23532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 841.580224][T23532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 841.590085][T23532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 841.632160][T23532] hsr_slave_0: entered promiscuous mode [ 841.634809][T23532] hsr_slave_1: entered promiscuous mode [ 841.637877][T23532] debugfs: 'hsr0' already exists in 'hsr' [ 841.640273][T23532] Cannot create hsr debugfs directory [ 841.760697][T23585] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 841.855496][T23588] __nla_validate_parse: 1 callbacks suppressed [ 841.855517][T23588] netlink: 204 bytes leftover after parsing attributes in process `syz.5.4894'. [ 841.878003][T23532] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 841.890444][T23532] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 841.895056][T23532] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 841.907254][T23532] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 841.911762][T23532] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 841.918329][T23532] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 841.923761][T23532] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 841.930607][T23532] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 841.970052][T23532] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.972435][T23532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 841.974915][T23532] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.977542][T23532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 842.078637][T23532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 842.088523][T18892] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.092360][T18892] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.105458][T23532] 8021q: adding VLAN 0 to HW filter on device team0 [ 842.118478][T18892] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.121540][T18892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 842.143794][T18892] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.146935][T18892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 842.538609][T23532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 842.543229][T23613] syzkaller0: entered promiscuous mode [ 842.545977][T23613] syzkaller0: entered allmulticast mode [ 842.790071][T23532] veth0_vlan: entered promiscuous mode [ 842.799527][T23532] veth1_vlan: entered promiscuous mode [ 842.820906][T23532] veth0_macvtap: entered promiscuous mode [ 842.825192][T23532] veth1_macvtap: entered promiscuous mode [ 842.835958][T23532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 842.842464][T23532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 842.907095][T12660] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.917970][T12660] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.923916][T12660] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.941471][ T34] usb 11-1: USB disconnect, device number 5 [ 842.947419][ T5089] Bluetooth: hci1: command tx timeout [ 843.051947][T18892] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 843.058657][T18892] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 843.106259][ T5784] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.158522][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 843.162832][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 843.246277][T23635] syz_tun: entered allmulticast mode [ 843.289831][T23636] syz_tun: left allmulticast mode [ 843.327421][T23641] netlink: 204 bytes leftover after parsing attributes in process `syz.7.4902'. [ 843.382485][T23639] erspan1: entered promiscuous mode [ 844.551885][ T42] kauditd_printk_skb: 44 callbacks suppressed [ 844.551900][ T42] audit: type=1800 audit(2000000008.429:1760): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 844.588991][ T42] audit: type=1800 audit(2000000008.469:1761): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17128 res=0 errno=0 [ 844.684218][ T42] audit: type=1800 audit(2000000008.559:1762): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17128 res=0 errno=0 [ 844.742915][T23663] xt_hashlimit: size too large, truncated to 1048576 [ 844.751521][T23663] xt_hashlimit: invalid interval [ 844.781632][ T42] audit: type=1800 audit(2000000008.659:1763): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17128 res=0 errno=0 [ 844.902841][ T42] audit: type=1800 audit(2000000008.779:1764): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 844.993612][ T42] audit: type=1800 audit(2000000008.869:1765): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17128 res=0 errno=0 [ 845.037200][ T5089] Bluetooth: hci1: command tx timeout [ 845.042977][T23679] netlink: 'syz.7.4912': attribute type 39 has an invalid length. [ 845.304252][ T42] audit: type=1800 audit(2000000009.179:1766): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 845.415948][ T42] audit: type=1800 audit(2000000009.289:1767): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 845.564868][ T42] audit: type=1800 audit(2000000009.439:1768): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 845.589770][T23706] syzkaller0: entered promiscuous mode [ 845.592611][T23706] syzkaller0: entered allmulticast mode [ 845.595204][T23704] netlink: 204 bytes leftover after parsing attributes in process `syz.2.4918'. [ 845.611548][ T42] audit: type=1800 audit(2000000009.489:1769): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 845.822636][T23712] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4922'. [ 845.884064][T23712] xt_check_table_hooks: 23 callbacks suppressed [ 845.884079][T23712] x_tables: duplicate underflow at hook 1 [ 845.896670][T23712] netlink: 'syz.5.4922': attribute type 49 has an invalid length. [ 845.908985][T23712] bond0: (slave bond_slave_0): Releasing backup interface [ 846.013220][T23712] bond_slave_0: entered promiscuous mode [ 846.016650][T23712] bond_slave_0: entered allmulticast mode [ 846.062614][T23723] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 846.201624][T23734] netlink: zone id is out of range [ 846.206254][T23734] netlink: get zone limit has 4 unknown bytes [ 846.268543][T23737] netlink: 204 bytes leftover after parsing attributes in process `syz.7.4929'. [ 846.351977][T23747] netlink: 'syz.7.4931': attribute type 1 has an invalid length. [ 846.425242][T23750] bond1 (unregistering): Released all slaves [ 846.621076][T23758] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 846.778809][T23761] syzkaller0: entered promiscuous mode [ 846.780779][T23761] syzkaller0: entered allmulticast mode [ 847.031318][T23734] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 847.106744][ T5089] Bluetooth: hci1: command tx timeout [ 847.564433][T23786] netlink: 204 bytes leftover after parsing attributes in process `syz.7.4943'. [ 847.676719][T11997] usb 10-1: new full-speed USB device number 12 using dummy_hcd [ 847.701755][T23788] syzkaller0: entered promiscuous mode [ 847.705408][T23788] syzkaller0: entered allmulticast mode [ 847.837403][T11997] usb 10-1: config 0 has an invalid interface number: 8 but max is 0 [ 847.842170][T11997] usb 10-1: config 0 has no interface number 0 [ 847.850810][T11997] usb 10-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 847.861122][T11997] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 847.871285][T11997] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 847.881134][T11997] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 847.884257][T11997] usb 10-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 847.892795][T11997] usb 10-1: Product: syz [ 847.895781][T11997] usb 10-1: SerialNumber: syz [ 848.279459][T23799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 848.286427][T23799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 848.306698][ T5089] Bluetooth: hci0: command 0x0c20 tx timeout [ 848.516055][ T10] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 848.695708][ T10] usb 12-1: Using ep0 maxpacket: 32 [ 848.699581][ T10] usb 12-1: config 0 has no interfaces? [ 848.702070][ T10] usb 12-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 848.707117][ T10] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.107493][T23826] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4949'. [ 849.186233][ T5089] Bluetooth: hci1: command tx timeout [ 849.363124][T23844] syzkaller0: entered promiscuous mode [ 849.371993][T23844] syzkaller0: entered allmulticast mode [ 849.556527][T23855] ptrace attach of "/syz-executor exec"[14648] was attempted by "  "[23855] [ 849.580518][ T42] kauditd_printk_skb: 63 callbacks suppressed [ 849.580531][ T42] audit: type=1800 audit(2000000013.459:1833): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 850.431826][T23869] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4962'. [ 850.433751][T22458] usb 10-1: USB disconnect, device number 12 [ 850.474842][T23872] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4963'. [ 850.480915][ T42] audit: type=1800 audit(2000000014.359:1834): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 850.483732][T23870] trusted_key: encrypted_key: insufficient parameters specified [ 850.496679][T23872] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4963'. [ 850.499890][ T42] audit: type=1800 audit(2000000014.379:1835): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 850.518941][T23869] trusted_key: encrypted_key: insufficient parameters specified [ 850.558550][ T42] audit: type=1800 audit(2000000014.439:1836): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 850.590804][T23881] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4966'. [ 850.602598][T23881] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4966'. [ 850.672676][ T42] audit: type=1400 audit(2000000014.549:1837): avc: denied { setopt } for pid=23880 comm="syz.6.4966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 850.806411][ T42] audit: type=1800 audit(2000000014.689:1838): pid=22814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=338198 res=0 errno=0 [ 850.828295][ T42] audit: type=1800 audit(2000000014.699:1839): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=338209 res=0 errno=0 [ 850.830032][ T5742] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 850.844482][ T5742] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 850.850046][ T5742] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 850.854523][ T5742] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 850.858219][ T5742] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 850.893378][ T42] audit: type=1800 audit(2000000014.749:1840): pid=22814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=338228 res=0 errno=0 [ 850.919179][ T42] audit: type=1800 audit(2000000014.769:1841): pid=22814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=338239 res=0 errno=0 [ 850.980801][T23884] SELinux: context truncated [ 850.982321][T23884] SELinux: invalid ocon [ 851.064437][T23884] SELinux: failed to load policy [ 851.147445][ T42] audit: type=1800 audit(2000000015.019:1842): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 851.167379][T15135] usb 12-1: USB disconnect, device number 2 [ 851.249356][T23899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 851.251923][T23899] batadv_slave_1: entered promiscuous mode [ 851.338435][T23909] xt_hashlimit: size too large, truncated to 1048576 [ 851.340723][T23909] xt_hashlimit: invalid interval [ 851.345428][T12660] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 851.357958][T12660] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.651660][T12660] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 851.655001][T12660] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.730032][T23939] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: 1 [ 851.734298][T23939] ref_ctr increment failed for inode: 0x255 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880340cd940 [ 851.741265][T23939] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: -1 [ 851.743552][T23945] xt_hashlimit: size too large, truncated to 1048576 [ 851.752001][T23945] xt_hashlimit: invalid interval [ 851.760810][T23939] ref_ctr decrement failed for inode: 0x255 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880340cd940 [ 851.771240][T12660] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 851.775988][T12660] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.778610][T23939] uprobe: syz.6.4979:23939 failed to unregister, leaking uprobe [ 851.888174][T12660] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 851.892137][T12660] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.939292][T23950] syzkaller0: entered promiscuous mode [ 851.941796][T23950] syzkaller0: entered allmulticast mode [ 852.014804][T23887] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.017438][T23887] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.019996][T23887] bridge_slave_0: entered allmulticast mode [ 852.023293][T23887] bridge_slave_0: entered promiscuous mode [ 852.032709][T23887] bridge0: port 2(bridge_slave_1) entered blocking state [ 852.039795][T23887] bridge0: port 2(bridge_slave_1) entered disabled state [ 852.043755][T23887] bridge_slave_1: entered allmulticast mode [ 852.052745][T23887] bridge_slave_1: entered promiscuous mode [ 852.178595][T23887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 852.188798][T23967] ieee802154 phy1 wpan1: encryption failed: -22 [ 852.190180][T23887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 852.221794][T23970] xt_hashlimit: size too large, truncated to 1048576 [ 852.225019][T23970] xt_hashlimit: invalid interval [ 852.288121][T23965] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.338420][T23887] team0: Port device team_slave_0 added [ 852.342381][T23887] team0: Port device team_slave_1 added [ 852.353572][T12660] bridge_slave_1: left allmulticast mode [ 852.355508][T12660] bridge_slave_1: left promiscuous mode [ 852.357962][T12660] bridge0: port 2(bridge_slave_1) entered disabled state [ 852.362789][T12660] bridge_slave_0: left allmulticast mode [ 852.364762][T12660] bridge_slave_0: left promiscuous mode [ 852.367726][T12660] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.525948][T12660] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 852.531369][T12660] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 852.535465][T12660] bond0 (unregistering): Released all slaves [ 852.544604][T12660] bond1 (unregistering): Released all slaves [ 852.556968][T12660] bond2 (unregistering): Released all slaves [ 852.594172][T23887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 852.601215][T23887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 852.612426][T23887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 852.693286][T23965] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.715551][T23887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 852.717890][T23887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 852.726699][T23887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 852.730984][T12660] tipc: Left network mode [ 852.819000][T23965] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.836738][T23887] hsr_slave_0: entered promiscuous mode [ 852.841512][T23887] hsr_slave_1: entered promiscuous mode [ 852.856650][T23887] debugfs: 'hsr0' already exists in 'hsr' [ 852.862150][T23887] Cannot create hsr debugfs directory [ 852.928385][T23981] syzkaller0: entered promiscuous mode [ 852.930388][T23981] syzkaller0: entered allmulticast mode [ 852.945995][ T5089] Bluetooth: hci5: command tx timeout [ 854.922338][ T42] kauditd_printk_skb: 54 callbacks suppressed [ 854.922370][ T42] audit: type=1800 audit(2000000018.799:1897): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=214138 res=0 errno=0 [ 854.970890][ T42] audit: type=1800 audit(2000000018.849:1898): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 854.975853][T23965] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.005907][ T5443] 8021q: adding VLAN 0 to HW filter on device eth6 [ 855.022522][T12660] hsr_slave_0: left promiscuous mode [ 855.036807][ T5089] Bluetooth: hci5: command tx timeout [ 855.041232][T12660] hsr_slave_1: left promiscuous mode [ 855.042004][T12660] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 855.048992][T12660] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 855.057989][T12660] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 855.062843][T12660] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 855.078570][T12660] veth1_macvtap: left promiscuous mode [ 855.080653][T12660] veth0_macvtap: left promiscuous mode [ 855.082699][T12660] veth1_vlan: left promiscuous mode [ 855.084627][T12660] veth0_vlan: left promiscuous mode [ 855.168265][ T42] audit: type=1800 audit(2000000019.039:1899): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 855.239858][ T42] audit: type=1800 audit(2000000019.119:1900): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17128 res=0 errno=0 [ 855.294156][ T42] audit: type=1800 audit(2000000019.169:1901): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17128 res=0 errno=0 [ 855.392020][ T42] audit: type=1800 audit(2000000019.269:1902): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17128 res=0 errno=0 [ 855.769844][T24008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 855.783673][T24008] batadv_slave_1: left promiscuous mode [ 855.903599][T24008] bond1: left promiscuous mode [ 855.971735][ T42] audit: type=1800 audit(2000000019.839:1903): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 856.002015][T24018] netlink: 92 bytes leftover after parsing attributes in process `syz.5.5000'. [ 856.043501][ T42] audit: type=1800 audit(2000000019.909:1904): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 856.098218][ T42] audit: type=1800 audit(2000000019.979:1905): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17128 res=0 errno=0 [ 856.145208][ T42] audit: type=1800 audit(2000000020.019:1906): pid=23887 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=27718 res=0 errno=0 [ 856.300537][T24025] syzkaller0: entered promiscuous mode [ 856.316832][T24025] syzkaller0: entered allmulticast mode [ 856.368319][T12660] IPVS: stop unused estimator thread 0... [ 856.375814][T22388] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.379384][T22388] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.386934][T22388] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.399321][T22388] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.410592][T22388] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.424150][T22388] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.556598][T22388] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.560052][T22388] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.636148][T24047] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 856.644897][T24036] syzkaller0: entered promiscuous mode [ 856.647865][T24036] syzkaller0: entered allmulticast mode [ 857.105909][ T5089] Bluetooth: hci5: command tx timeout [ 858.932092][T24068] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5013'. [ 859.098680][T24079] netlink: 204 bytes leftover after parsing attributes in process `syz.6.5015'. [ 859.125926][T23887] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 859.144450][T23887] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 859.151439][T23887] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 859.163269][T23887] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 859.183676][T23887] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 859.191194][ T5089] Bluetooth: hci5: command tx timeout [ 859.200893][T23887] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 859.210371][T23887] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 859.228154][T23887] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 859.240267][T24087] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5017'. [ 859.360226][T23887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 859.384040][T23887] 8021q: adding VLAN 0 to HW filter on device team0 [ 859.394313][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 859.397820][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 859.432563][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 859.434969][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 859.445241][T24117] syzkaller0: entered promiscuous mode [ 859.447913][T24117] syzkaller0: entered allmulticast mode [ 859.659545][T24132] syzkaller0: entered promiscuous mode [ 859.661437][T24132] syzkaller0: entered allmulticast mode [ 859.694311][T24135] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=5134 sclass=netlink_tcpdiag_socket pid=24135 comm=syz.6.5026 [ 859.699849][T24135] binder: BINDER_SET_CONTEXT_MGR already set [ 859.701878][T24135] binder: 24134:24135 ioctl 4018620d 200000000100 returned -16 [ 859.891177][T24153] kernel read not supported for file /sg0 (pid: 24153 comm: syz.6.5030) [ 859.920414][T23887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 859.928798][ T42] kauditd_printk_skb: 43 callbacks suppressed [ 859.928817][ T42] audit: type=1800 audit(2000000023.809:1950): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17128 res=0 errno=0 [ 859.973536][ T42] audit: type=1800 audit(2000000023.849:1951): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 860.005952][T23887] veth0_vlan: entered promiscuous mode [ 860.012254][T24156] nvme_fabrics: missing parameter 'transport=%s' [ 860.013175][T24157] syzkaller0: entered promiscuous mode [ 860.015437][T24156] nvme_fabrics: missing parameter 'nqn=%s' [ 860.024637][T24157] syzkaller0: entered allmulticast mode [ 860.031893][T23887] veth1_vlan: entered promiscuous mode [ 860.072501][ T42] audit: type=1800 audit(2000000023.949:1952): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 860.094539][ T42] audit: type=1800 audit(2000000023.969:1953): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 860.111025][T23887] veth0_macvtap: entered promiscuous mode [ 860.117611][T23887] veth1_macvtap: entered promiscuous mode [ 860.129504][T23887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 860.137517][T23887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 860.139210][ T42] audit: type=1800 audit(2000000024.009:1954): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=345742 res=0 errno=0 [ 860.149223][T12660] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.153430][T12660] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.184855][T24167] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5035'. [ 860.204839][ T42] audit: type=1800 audit(2000000024.079:1955): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17128 res=0 errno=0 [ 860.206635][T24167] bridge0: port 3(macvlan2) entered blocking state [ 860.215980][T24170] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 860.218636][T24167] bridge0: port 3(macvlan2) entered disabled state [ 860.221270][T24171] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 860.223789][T24167] macvlan2: entered allmulticast mode [ 860.241591][T24167] macvlan2: left allmulticast mode [ 860.247268][ T42] audit: type=1800 audit(2000000024.079:1956): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=345761 res=0 errno=0 [ 860.261956][ T42] audit: type=1800 audit(2000000024.109:1957): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=345850 res=0 errno=0 [ 860.293225][ T42] audit: type=1400 audit(2000000024.169:1958): avc: denied { create } for pid=24169 comm="syz.7.5036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 860.309803][ T42] audit: type=1400 audit(2000000024.169:1959): avc: denied { getattr } for pid=24169 comm="syz.7.5036" name="saved_tgids" dev="tracefs" ino=6243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 860.319784][T22388] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.328781][T24171] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5036'. [ 860.330105][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 860.333011][T24170] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5036'. [ 860.334156][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 860.357463][T22388] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.360826][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 860.363366][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 860.420289][T24176] usb3503 pcspkr: unknown mode is requested [ 860.423540][T24176] usb3503 pcspkr: usb3503_probe: probed in standby mode [ 860.503474][T24182] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5040'. [ 860.592260][T24193] x_tables: ip6_tables: cgroup match: used from hooks FORWARD, but only valid from INPUT/OUTPUT/POSTROUTING [ 860.614248][T24192] input: syz1 as /devices/virtual/input/input24 [ 860.715403][T24199] netlink: 'syz.5.5043': attribute type 1 has an invalid length. [ 860.719810][T24199] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 860.946975][T24212] Bluetooth: MGMT ver 1.23 [ 860.970465][T24214] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5050'. [ 861.229786][T24203] vfio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 861.244788][T24203] vfio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 861.251384][T14062] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 861.315717][T22458] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 861.396105][T24228] syzkaller0: entered promiscuous mode [ 861.397852][T24228] syzkaller0: entered allmulticast mode [ 861.425908][T14062] usb 11-1: Using ep0 maxpacket: 16 [ 861.435907][T14062] usb 11-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 861.445226][T14062] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.451645][T14062] usb 11-1: Product: syz [ 861.455705][T14062] usb 11-1: Manufacturer: syz [ 861.460420][T14062] usb 11-1: SerialNumber: syz [ 861.475742][T22458] usb 7-1: Using ep0 maxpacket: 32 [ 861.483315][T22458] usb 7-1: config index 0 descriptor too short (expected 15270, got 18) [ 861.491031][T22458] usb 7-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 861.496659][T22458] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.499404][T22458] usb 7-1: Product: syz [ 861.500765][T22458] usb 7-1: Manufacturer: syz [ 861.502348][T22458] usb 7-1: SerialNumber: syz [ 861.753175][T24245] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5060'. [ 861.836980][T24249] netlink: 204 bytes leftover after parsing attributes in process `syz.5.5062'. [ 861.918407][T24247] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5061'. [ 861.921386][T24247] netlink: 'syz.7.5061': attribute type 7 has an invalid length. [ 861.923875][T24247] netlink: 'syz.7.5061': attribute type 8 has an invalid length. [ 861.926971][T24247] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5061'. [ 861.961376][ T5089] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 863.032773][T24275] vlan2: entered allmulticast mode [ 863.034612][T24275] bond0: entered allmulticast mode [ 863.036513][T24275] bond_slave_0: entered allmulticast mode [ 863.038375][T24275] bond_slave_1: entered allmulticast mode [ 863.040818][T24275] netlink: 'syz.7.5067': attribute type 12 has an invalid length. [ 863.043317][T24275] netlink: 132 bytes leftover after parsing attributes in process `syz.7.5067'. [ 863.098230][T24279] random: crng reseeded on system resumption [ 863.617149][T24289] netlink: 204 bytes leftover after parsing attributes in process `syz.5.5071'. [ 863.690751][T24293] xt_hashlimit: size too large, truncated to 1048576 [ 863.693755][T24293] xt_hashlimit: invalid interval [ 863.841043][T24298] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5075'. [ 863.991236][T24302] No buffer was provided with the request [ 863.995001][ T61] usb 11-1: USB disconnect, device number 6 [ 864.092405][T22458] usb 7-1: USB disconnect, device number 23 [ 864.107527][T24307] syz.5.5079 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 864.215493][T24311] bond1: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 864.221554][T24311] bond1 (unregistering): Released all slaves [ 864.246526][T24313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5082'. [ 864.261421][T24313] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5082'. [ 864.301807][T24317] syzkaller0: entered promiscuous mode [ 864.303686][T24317] syzkaller0: entered allmulticast mode [ 864.567596][T24335] xt_hashlimit: size too large, truncated to 1048576 [ 864.569848][T24335] xt_hashlimit: invalid interval [ 864.607515][T24336] openvswitch: netlink: IP tunnel dst address not specified [ 864.627873][T24338] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5091'. [ 864.756730][T22458] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 864.927212][T22458] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 864.931093][T22458] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 864.934489][T22458] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 864.940718][T22458] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 864.944741][T22458] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.955538][ T42] kauditd_printk_skb: 102 callbacks suppressed [ 864.955559][ T42] audit: type=1800 audit(2000000028.829:2062): pid=22814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=347655 res=0 errno=0 [ 864.966839][ T42] audit: type=1800 audit(2000000028.839:2063): pid=22814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=347684 res=0 errno=0 [ 864.977414][ T42] audit: type=1800 audit(2000000028.839:2064): pid=22814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=347662 res=0 errno=0 [ 864.986457][ T42] audit: type=1800 audit(2000000028.839:2065): pid=22814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=347663 res=0 errno=0 [ 864.995364][ T42] audit: type=1800 audit(2000000028.839:2066): pid=22814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=347664 res=0 errno=0 [ 865.059362][ T42] audit: type=1800 audit(2000000028.939:2067): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 865.075245][ T42] audit: type=1800 audit(2000000028.949:2068): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=347720 res=0 errno=0 [ 865.083222][ T42] audit: type=1800 audit(2000000028.959:2069): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=347732 res=0 errno=0 [ 865.092092][ T42] audit: type=1800 audit(2000000028.959:2070): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=347744 res=0 errno=0 [ 865.133944][ T42] audit: type=1800 audit(2000000029.009:2071): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17128 res=0 errno=0 [ 865.201373][T24360] xt_hashlimit: size too large, truncated to 1048576 [ 865.204403][T24360] xt_hashlimit: invalid interval [ 865.857902][T24407] syzkaller0: entered promiscuous mode [ 865.859735][T24407] syzkaller0: entered allmulticast mode [ 865.992468][ T5089] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 865.996473][ T5089] Bluetooth: hci4: Injecting HCI hardware error event [ 866.006413][ T5742] Bluetooth: hci4: hardware error 0x00 [ 866.215137][T24439] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 866.234063][T22458] playstation 0003:054C:05C4.0016: hidraw1: USB HID v0.01 Device [syz1] on syz1 [ 866.336872][T22458] playstation 0003:054C:05C4.0016: Invalid byte count transferred, expected 16 got 0 [ 866.348239][T22458] playstation 0003:054C:05C4.0016: Failed to retrieve DualShock4 pairing info: -22 [ 866.351940][T22458] playstation 0003:054C:05C4.0016: Failed to get MAC address from DualShock4 [ 866.357184][T22458] playstation 0003:054C:05C4.0016: Failed to create dualshock4. [ 866.377277][T22458] playstation 0003:054C:05C4.0016: probe with driver playstation failed with error -22 [ 866.426923][T24460] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 866.430947][T24460] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 866.479077][T24458] nbd: illegal input index 67111936 [ 866.482632][T24458] program syz.6.5125 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 866.483806][T22458] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER) [ 866.487618][T24458] ata1.00: invalid service action 3 [ 866.496205][T24453] ceph: No mds server is up or the cluster is laggy [ 866.743481][T24481] xt_hashlimit: size too large, truncated to 1048576 [ 866.746019][T24481] xt_hashlimit: invalid interval [ 867.328431][T14062] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 867.453405][T24502] __nla_validate_parse: 2 callbacks suppressed [ 867.453424][T24502] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5141'. [ 867.479152][T14062] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 867.483328][T14062] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.488198][T14062] usb 7-1: Product: syz [ 867.489559][T14062] usb 7-1: Manufacturer: syz [ 867.492401][T14062] usb 7-1: SerialNumber: syz [ 867.524579][T14062] usb 10-1: USB disconnect, device number 13 [ 867.527786][T24507] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 867.531794][T24507] syzkaller1: group set to 0 [ 867.541125][T24507] syzkaller1: tun_chr_ioctl cmd 35108 [ 867.558622][T24509] xt_hashlimit: size too large, truncated to 1048576 [ 867.560890][T24509] xt_hashlimit: invalid interval [ 867.738636][T24518] netlink: 204 bytes leftover after parsing attributes in process `syz.7.5147'. [ 868.071450][ T5742] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 868.073405][T24542] xt_hashlimit: size too large, truncated to 1048576 [ 868.077151][T24542] xt_hashlimit: invalid interval [ 868.154981][T24548] netlink: 204 bytes leftover after parsing attributes in process `syz.7.5157'. [ 868.757044][T24559] netlink: 7 bytes leftover after parsing attributes in process `syz.6.5162'. [ 868.873173][T24565] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 868.878327][T24565] @0Ù: renamed from bond_slave_1 [ 868.978312][T24574] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=24574 comm=syz.5.5163 [ 869.089863][T24581] netlink: 204 bytes leftover after parsing attributes in process `syz.6.5168'. [ 869.302484][T24599] vhci_hcd vhci_hcd.0: remove, state 4 [ 869.304562][T24599] usb usb38: USB disconnect, device number 1 [ 869.387525][T12660] vhci_hcd vhci_hcd.0: stop threads [ 869.389246][T12660] vhci_hcd vhci_hcd.0: release socket [ 869.394418][T12660] vhci_hcd vhci_hcd.0: disconnect device [ 869.407658][T24599] vhci_hcd vhci_hcd.0: USB bus 38 deregistered [ 869.419898][T24599] vhci_hcd vhci_hcd.0: remove, state 4 [ 869.423503][T12660] ================================================================== [ 869.426102][T12660] BUG: KASAN: slab-use-after-free in __mutex_lock+0x15ca/0x1bd0 [ 869.428733][T12660] Read of size 8 at addr ffff88802aeb4748 by task kworker/u32:4/12660 [ 869.432294][T12660] [ 869.433465][T12660] CPU: 2 UID: 0 PID: 12660 Comm: kworker/u32:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 869.433483][T12660] Tainted: [L]=SOFTLOCKUP [ 869.433488][T12660] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 869.433503][T12660] Workqueue: usbip_event event_handler [ 869.433534][T12660] Call Trace: [ 869.433540][T12660] [ 869.433545][T12660] dump_stack_lvl+0x100/0x190 [ 869.433584][T12660] print_report+0x13d/0x4b0 [ 869.433608][T12660] ? __virt_addr_valid+0x239/0x430 [ 869.433639][T12660] ? __mutex_lock+0x15ca/0x1bd0 [ 869.433653][T12660] kasan_report+0xdf/0x1c0 [ 869.433674][T12660] ? __mutex_lock+0x15ca/0x1bd0 [ 869.433689][T12660] __mutex_lock+0x15ca/0x1bd0 [ 869.433702][T12660] ? event_handler+0x1b8/0x570 [ 869.433713][T12660] ? __pfx___mutex_lock+0x10/0x10 [ 869.433728][T12660] ? event_handler+0xe0/0x570 [ 869.433738][T12660] ? event_handler+0x158/0x570 [ 869.433748][T12660] ? kfree+0x22b/0x6c0 [ 869.433765][T12660] ? event_handler+0x1b8/0x570 [ 869.433774][T12660] event_handler+0x1b8/0x570 [ 869.433786][T12660] process_one_work+0xa23/0x1940 [ 869.433801][T12660] ? __pfx_process_one_work+0x10/0x10 [ 869.433814][T12660] ? __pfx_event_handler+0x10/0x10 [ 869.433825][T12660] worker_thread+0x5ef/0xe50 [ 869.433838][T12660] ? __pfx_worker_thread+0x10/0x10 [ 869.433850][T12660] ? kthread+0x13a/0x450 [ 869.433860][T12660] ? __pfx_worker_thread+0x10/0x10 [ 869.433870][T12660] kthread+0x370/0x450 [ 869.433880][T12660] ? __pfx_kthread+0x10/0x10 [ 869.433890][T12660] ret_from_fork+0x72b/0xd50 [ 869.433907][T12660] ? __pfx_ret_from_fork+0x10/0x10 [ 869.433921][T12660] ? __switch_to+0x800/0x10f0 [ 869.433933][T12660] ? __pfx_kthread+0x10/0x10 [ 869.433943][T12660] ret_from_fork_asm+0x1a/0x30 [ 869.433961][T12660] [ 869.433965][T12660] [ 869.439295][T24599] usb usb37: USB disconnect, device number 1 [ 869.442116][T12660] Allocated by task 1: [ 869.442135][T12660] kasan_save_stack+0x30/0x50 [ 869.482395][T24611] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5178'. [ 869.483039][T12660] kasan_save_track+0x14/0x30 [ 869.494311][T24599] vhci_hcd vhci_hcd.0: USB bus 37 deregistered [ 869.494632][T12660] __kasan_kmalloc+0xaa/0xb0 [ 869.508929][T12660] __kmalloc_noprof+0x322/0x820 [ 869.510457][T12660] __usb_create_hcd+0x5e/0xac0 [ 869.512029][T12660] vhci_hcd_probe+0x1a5/0x4e0 [ 869.513546][T12660] platform_probe+0x106/0x1d0 [ 869.515096][T12660] really_probe+0x241/0xa60 [ 869.516631][T12660] __driver_probe_device+0x20e/0x450 [ 869.518325][T12660] driver_probe_device+0x4a/0x140 [ 869.520111][T12660] __device_attach_driver+0x1df/0x320 [ 869.521878][T12660] bus_for_each_drv+0x159/0x1e0 [ 869.523442][T12660] __device_attach+0x1e4/0x4d0 [ 869.524956][T12660] device_initial_probe+0xaf/0xd0 [ 869.526712][T12660] bus_probe_device+0x64/0x160 [ 869.528271][T12660] device_add+0x121d/0x1970 [ 869.529723][T12660] platform_device_add+0x35a/0x800 [ 869.531277][T12660] platform_device_register_full+0x5cf/0x830 [ 869.533103][T12660] vhci_hcd_init+0x1a1/0x2f0 [ 869.534564][T12660] do_one_initcall+0x11d/0x700 [ 869.536100][T12660] kernel_init_freeable+0x6ea/0x7b0 [ 869.537754][T12660] kernel_init+0x1f/0x1e0 [ 869.539154][T12660] ret_from_fork+0x72b/0xd50 [ 869.540544][T12660] ret_from_fork_asm+0x1a/0x30 [ 869.542041][T12660] [ 869.542802][T12660] Freed by task 24599: [ 869.544084][T12660] kasan_save_stack+0x30/0x50 [ 869.545555][T12660] kasan_save_track+0x14/0x30 [ 869.546993][T12660] kasan_save_free_info+0x3b/0x70 [ 869.548498][T12660] __kasan_slab_free+0x5f/0x80 [ 869.549970][T12660] kfree+0x22b/0x6c0 [ 869.551215][T12660] usb_put_hcd+0x149/0x1f0 [ 869.552573][T12660] vhci_hcd_remove+0xb5/0x1b0 [ 869.554062][T12660] platform_remove+0x5f/0x80 [ 869.555521][T12660] device_remove+0xcb/0x180 [ 869.556992][T12660] device_release_driver_internal+0x44e/0x620 [ 869.558870][T12660] unbind_store+0xf8/0x110 [ 869.560209][T12660] drv_attr_store+0x74/0xb0 [ 869.561639][T12660] sysfs_kf_write+0xf2/0x150 [ 869.563049][T12660] kernfs_fop_write_iter+0x3e0/0x5f0 [ 869.564633][T12660] vfs_write+0x6ac/0x1050 [ 869.565979][T12660] ksys_write+0x12a/0x250 [ 869.567379][T12660] do_syscall_64+0x115/0x870 [ 869.568863][T12660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.570706][T12660] [ 869.571496][T12660] Last potentially related work creation: [ 869.573247][T12660] kasan_save_stack+0x30/0x50 [ 869.574686][T12660] kasan_record_aux_stack+0xa7/0xc0 [ 869.576400][T12660] insert_work+0x36/0x230 [ 869.577754][T12660] __queue_work+0x9bc/0x12b0 [ 869.579184][T12660] queue_work_on+0x1a9/0x1e0 [ 869.580634][T12660] usb_hcd_giveback_urb+0x330/0x4a0 [ 869.582237][T12660] unlink1+0x418/0x510 [ 869.583539][T12660] usb_hcd_unlink_urb+0x131/0x210 [ 869.585138][T12660] usb_kill_urb+0x121/0x320 [ 869.586577][T12660] hub_quiesce+0x1e9/0x320 [ 869.588011][T12660] hub_suspend+0x4ab/0x9e0 [ 869.589411][T12660] usb_suspend_both+0x288/0x950 [ 869.590903][T12660] usb_runtime_suspend+0x49/0x120 [ 869.592490][T12660] __rpm_callback+0xc8/0x620 [ 869.593953][T12660] rpm_callback+0x16a/0x1b0 [ 869.595395][T12660] rpm_suspend+0x2f4/0x11a0 [ 869.596850][T12660] __pm_runtime_suspend+0xba/0x1a0 [ 869.598458][T12660] usb_new_device.cold+0xd61/0x115c [ 869.600096][T12660] register_root_hub+0x4e6/0x639 [ 869.601673][T12660] usb_add_hcd.cold+0xccd/0x1158 [ 869.603245][T12660] vhci_hcd_probe+0x1c2/0x4e0 [ 869.604725][T12660] platform_probe+0x106/0x1d0 [ 869.606186][T12660] really_probe+0x241/0xa60 [ 869.607617][T12660] __driver_probe_device+0x20e/0x450 [ 869.609348][T12660] driver_probe_device+0x4a/0x140 [ 869.610935][T12660] __device_attach_driver+0x1df/0x320 [ 869.612605][T12660] bus_for_each_drv+0x159/0x1e0 [ 869.614131][T12660] __device_attach+0x1e4/0x4d0 [ 869.615572][T12660] device_initial_probe+0xaf/0xd0 [ 869.617201][T12660] bus_probe_device+0x64/0x160 [ 869.618717][T12660] device_add+0x121d/0x1970 [ 869.620139][T12660] platform_device_add+0x35a/0x800 [ 869.621672][T12660] platform_device_register_full+0x5cf/0x830 [ 869.623542][T12660] vhci_hcd_init+0x1a1/0x2f0 [ 869.625018][T12660] do_one_initcall+0x11d/0x700 [ 869.626558][T12660] kernel_init_freeable+0x6ea/0x7b0 [ 869.628208][T12660] kernel_init+0x1f/0x1e0 [ 869.629575][T12660] ret_from_fork+0x72b/0xd50 [ 869.631032][T12660] ret_from_fork_asm+0x1a/0x30 [ 869.632532][T12660] [ 869.633309][T12660] Second to last potentially related work creation: [ 869.635338][T12660] kasan_save_stack+0x30/0x50 [ 869.636992][T12660] kasan_record_aux_stack+0xa7/0xc0 [ 869.638554][T12660] insert_work+0x36/0x230 [ 869.639868][T12660] __queue_work+0x9bc/0x12b0 [ 869.641264][T12660] queue_work_on+0x1a9/0x1e0 [ 869.642689][T12660] usb_hcd_giveback_urb+0x3b8/0x4a0 [ 869.644325][T12660] usb_hcd_submit_urb+0xab7/0x2150 [ 869.645927][T12660] usb_submit_urb+0x827/0x19b0 [ 869.647497][T12660] usb_start_wait_urb+0x10e/0x580 [ 869.649185][T12660] usb_control_msg+0x328/0x4b0 [ 869.650680][T12660] hub_suspend+0x826/0x9e0 [ 869.652161][T12660] usb_suspend_both+0x288/0x950 [ 869.653719][T12660] usb_runtime_suspend+0x49/0x120 [ 869.655254][T12660] __rpm_callback+0xc8/0x620 [ 869.656735][T12660] rpm_callback+0x16a/0x1b0 [ 869.658390][T12660] rpm_suspend+0x2f4/0x11a0 [ 869.660207][T12660] __pm_runtime_suspend+0xba/0x1a0 [ 869.662196][T12660] usb_new_device.cold+0xd61/0x115c [ 869.664220][T12660] register_root_hub+0x4e6/0x639 [ 869.666232][T12660] usb_add_hcd.cold+0xccd/0x1158 [ 869.667943][T12660] vhci_hcd_probe+0x1c2/0x4e0 [ 869.669441][T12660] platform_probe+0x106/0x1d0 [ 869.671094][T12660] really_probe+0x241/0xa60 [ 869.672943][T12660] __driver_probe_device+0x20e/0x450 [ 869.674897][T12660] driver_probe_device+0x4a/0x140 [ 869.676682][T12660] __device_attach_driver+0x1df/0x320 [ 869.678653][T12660] bus_for_each_drv+0x159/0x1e0 [ 869.680441][T12660] __device_attach+0x1e4/0x4d0 [ 869.681951][T12660] device_initial_probe+0xaf/0xd0 [ 869.683769][T12660] bus_probe_device+0x64/0x160 [ 869.685331][T12660] device_add+0x121d/0x1970 [ 869.686824][T12660] platform_device_add+0x35a/0x800 [ 869.688437][T12660] platform_device_register_full+0x5cf/0x830 [ 869.690438][T12660] vhci_hcd_init+0x1a1/0x2f0 [ 869.691890][T12660] do_one_initcall+0x11d/0x700 [ 869.693520][T12660] kernel_init_freeable+0x6ea/0x7b0 [ 869.695290][T12660] kernel_init+0x1f/0x1e0 [ 869.696712][T12660] ret_from_fork+0x72b/0xd50 [ 869.698155][T12660] ret_from_fork_asm+0x1a/0x30 [ 869.699615][T12660] [ 869.700348][T12660] The buggy address belongs to the object at ffff88802aeb4000 [ 869.700348][T12660] which belongs to the cache kmalloc-8k of size 8192 [ 869.704975][T12660] The buggy address is located 1864 bytes inside of [ 869.704975][T12660] freed 8192-byte region [ffff88802aeb4000, ffff88802aeb6000) [ 869.709520][T12660] [ 869.710262][T12660] The buggy address belongs to the physical page: [ 869.712286][T12660] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2aeb0 [ 869.715408][T12660] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 869.718165][T12660] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 869.720527][T12660] page_type: f5(slab) [ 869.721786][T12660] raw: 00fff00000000040 ffff88801bc43180 dead000000000122 0000000000000000 [ 869.724456][T12660] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 869.727110][T12660] head: 00fff00000000040 ffff88801bc43180 dead000000000122 0000000000000000 [ 869.730065][T12660] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 869.732937][T12660] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 869.735623][T12660] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 869.738295][T12660] page dumped because: kasan: bad access detected [ 869.740339][T12660] page_owner tracks the page as allocated [ 869.742420][T12660] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 7509786813, free_ts 7496184510 [ 869.749093][T12660] post_alloc_hook+0xfd/0x120 [ 869.750593][T12660] get_page_from_freelist+0xf48/0x3530 [ 869.752338][T12660] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 869.754312][T12660] new_slab+0xa2/0x640 [ 869.755930][T12660] refill_objects+0xe3/0x410 [ 869.757391][T12660] __pcs_replace_empty_main+0x376/0x680 [ 869.759158][T12660] __kmalloc_noprof+0x66d/0x820 [ 869.760695][T12660] acpi_ut_initialize_buffer+0x144/0x220 [ 869.762472][T12660] acpi_rs_create_pci_routing_table+0x135/0xe00 [ 869.764427][T12660] acpi_rs_get_prt_method_data+0xc1/0x150 [ 869.766204][T12660] acpi_get_irq_routing_table+0xb8/0x140 [ 869.767959][T12660] acpi_pci_irq_find_prt_entry+0x179/0xdd0 [ 869.769839][T12660] acpi_pci_irq_lookup+0x8e/0x6b0 [ 869.771812][T12660] acpi_pci_irq_enable+0x1f5/0x6f0 [ 869.773419][T12660] pcibios_enable_device+0xb6/0xe0 [ 869.775152][T12660] do_pci_enable_device+0x21f/0x4a0 [ 869.777193][T12660] page last free pid 41 tgid 41 stack trace: [ 869.779544][T12660] free_pages_prepare+0x586/0xd80 [ 869.781370][T12660] __free_contig_range_common+0x14f/0x250 [ 869.783166][T12660] free_pages_bulk+0x12a/0x200 [ 869.784698][T12660] vm_area_free_pages+0xad/0x2b0 [ 869.786303][T12660] vfree+0x107/0x750 [ 869.787559][T12660] delayed_vfree_work+0x56/0x80 [ 869.789141][T12660] process_one_work+0xa23/0x1940 [ 869.790899][T12660] worker_thread+0x5ef/0xe50 [ 869.792521][T12660] kthread+0x370/0x450 [ 869.793860][T12660] ret_from_fork+0x72b/0xd50 [ 869.795454][T12660] ret_from_fork_asm+0x1a/0x30 [ 869.797239][T12660] [ 869.798242][T12660] Memory state around the buggy address: [ 869.800504][T12660] ffff88802aeb4600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 869.803339][T12660] ffff88802aeb4680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 869.805962][T12660] >ffff88802aeb4700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 869.808504][T12660] ^ [ 869.810559][T12660] ffff88802aeb4780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 869.813112][T12660] ffff88802aeb4800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 869.815823][T12660] ================================================================== [ 869.823827][T12660] Kernel panic - not syncing: KASAN: panic_on_warn set ... SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 869.826746][T12660] CPU: 2 UID: 0 PID: 12660 Comm: kworker/u32:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 869.830995][T12660] Tainted: [L]=SOFTLOCKUP [ 869.832391][T12660] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 869.835591][T12660] Workqueue: usbip_event event_handler [ 869.837449][T12660] Call Trace: [ 869.838545][T12660] [ 869.839574][T12660] dump_stack_lvl+0x100/0x190 [ 869.841093][T12660] vpanic+0x552/0x970 [ 869.842399][T12660] ? __pfx_vpanic+0x10/0x10 [ 869.843918][T12660] ? mark_held_locks+0x40/0x70 [ 869.845487][T12660] ? __mutex_lock+0x15ca/0x1bd0 [ 869.847050][T12660] panic+0xd1/0xe0 [ 869.848254][T12660] ? __pfx_panic+0x10/0x10 [ 869.849709][T12660] ? __mutex_lock+0x15ca/0x1bd0 [ 869.851295][T12660] ? preempt_schedule_common+0x42/0xc0 [ 869.853045][T12660] ? check_panic_on_warn+0x1f/0x90 [ 869.854678][T12660] check_panic_on_warn.cold+0x19/0x34 [ 869.856393][T12660] end_report.part.0+0x3a/0x90 [ 869.858030][T12660] kasan_report.cold+0xe/0x18 [ 869.859538][T12660] ? __mutex_lock+0x15ca/0x1bd0 [ 869.861150][T12660] __mutex_lock+0x15ca/0x1bd0 [ 869.862662][T12660] ? event_handler+0x1b8/0x570 [ 869.864224][T12660] ? __pfx___mutex_lock+0x10/0x10 [ 869.865782][T12660] ? event_handler+0xe0/0x570 [ 869.867286][T12660] ? event_handler+0x158/0x570 [ 869.869023][T12660] ? kfree+0x22b/0x6c0 [ 869.870633][T12660] ? event_handler+0x1b8/0x570 [ 869.872529][T12660] event_handler+0x1b8/0x570 [ 869.874368][T12660] process_one_work+0xa23/0x1940 [ 869.876309][T12660] ? __pfx_process_one_work+0x10/0x10 [ 869.878119][T12660] ? __pfx_event_handler+0x10/0x10 [ 869.879837][T12660] worker_thread+0x5ef/0xe50 [ 869.881343][T12660] ? __pfx_worker_thread+0x10/0x10 [ 869.882975][T12660] ? kthread+0x13a/0x450 [ 869.884340][T12660] ? __pfx_worker_thread+0x10/0x10 [ 869.885973][T12660] kthread+0x370/0x450 [ 869.887283][T12660] ? __pfx_kthread+0x10/0x10 [ 869.888789][T12660] ret_from_fork+0x72b/0xd50 [ 869.890279][T12660] ? __pfx_ret_from_fork+0x10/0x10 [ 869.892077][T12660] ? __switch_to+0x800/0x10f0 [ 869.893895][T12660] ? __pfx_kthread+0x10/0x10 [ 869.895721][T12660] ret_from_fork_asm+0x1a/0x30 [ 869.897586][T12660] [ 869.899448][T12660] Kernel Offset: disabled [ 869.901026][T12660] Rebooting in 86400 seconds.. VM DIAGNOSIS: 05:06:53 Registers: info registers vcpu 0 CPU#0 RAX=ffff888029765620 RBX=0000000000000000 RCX=0000000000000001 RDX=0000000000000000 RSI=0000000000000000 RDI=ffff88802b0929f8 RBP=ffff888029764a80 RSP=ffffc900063dfb60 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=ffff88802b0929f8 R12=00000000000001d5 R13=0000000000000000 R14=0000000000000000 R15=0000000000000001 RIP=ffffffff81e5d993 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f7e3519e6c0 ffffffff 00c00000 GS =0000 ffff8880d5dd8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb31563bd58 CR3=0000000042804000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7e3515d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7e345f2600 00007f7e345f25e0 00007f7e345f25e8 00007f7e345f2618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7e345f25f8 00007f7e345f25c8 00007f7e345f2600 00007f7e345f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=ffffffff81b57eaa RDX=ffff88801ee92540 RSI=ffffffff81b57ece RDI=ffff88801ee92540 RBP=0000000000000001 RSP=ffffc90000177df8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200002efc4 R15=0000000000000000 RIP=ffffffff81b57ecf RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5ed8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6c878d5ff8 CR3=000000000e994000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000010100 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffca729ab16 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffca729ab16 00007ffca729ab1c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6c86a355ef ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6c86a3562f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6c86a35793 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6c86a35621 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6c86bf25f8 00007f6c86bf25c8 00007f6c86bf2600 00007f6c86bf25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000038 0000000000000001 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000039 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a39335 RDI=ffffffff9ba0bb40 RBP=ffffffff9ba0bb00 RSP=ffffc90003457490 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6265613230386552 R12=0000000000000000 R13=0000000000000039 R14=ffffffff9b6fe1eb R15=ffffffff85a392d0 RIP=ffffffff85a3935f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5fd8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c372380 CR3=0000000028041000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000002800 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5063682e5d8db140 bf7400d7ddda1c13 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 387ac6073664c27f a55e31720743241a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c3d1dd32a40f8113 06faba9b6b0f2f10 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b6b937bab93a47d2 a500d3d119fdc0b2 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000002000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7c40546e1ff8d400 00020f9000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2078ac3206ae3e00 5d55db0037257400 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 cc915a0000020f8f 00020f8f55ddb0c9 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00020f9100020f91 2d96140057e4619d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 dc59e0e01ceb8b7c 179eb08eccb5e42e ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffd1c1d5fbe7ebfe 118752fa2eca8767 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080000002 RBX=8000000125ae0007 RCX=ffffffff8260520e RDX=8000000125ae0007 RSI=0000000000000000 RDI=0000000000000007 RBP=8000000125ae0007 RSP=ffffc9000767f540 R8 =0000000000000007 R9 =0000000000000000 R10=8000000125ae0007 R11=0000000000000000 R12=0000000000000008 R13=000000000000bdf8 R14=ffff8880520c16d8 R15=00007fe0809fb000 RIP=ffffffff820a5aa0 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000555590573500 ffffffff 00c00000 GS =0000 ffff8880d60d8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe0821556c8 CR3=0000000026182000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6576697372756365 725f646575657571 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffec0c452e6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffec0c452e6 00007ffec0c452ec ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe0814355ef ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe08143562f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe081435793 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe081435621 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000