last executing test programs: 11m15.4122022s ago: executing program 32 (id=330): syz_emit_ethernet(0x7e, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x51}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3f, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10m34.191001545s ago: executing program 33 (id=611): r0 = userfaultfd(0x80801) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x10040) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a00000001900010000000000000000001c11f433945eb7a531140000fe000001000000008400120900"/168], 0xa0}}, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa30080045000028006700000206907864010001ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc200730e0174c392800590780006"], 0x0) syz_emit_ethernet(0x3c, &(0x7f0000000480)=ANY=[@ANYRES64=r0, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c04000090780000589b"], 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) close(r2) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r2, &(0x7f0000000000)={'#! ', '', [{0x20, '\xd60\xf0:\xa2U\x84\xd5Gn\x94j\x19\n\x9c\xfe\xdf\xe5Ad\xc9\xc9(\x1b[\x16M\xf5\xb8\r\x8a\xfd'}]}, 0x25) close(r3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x1000, 0x1000, &(0x7f0000001000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl(r6, 0x4048aecb, &(0x7f0000000400)="00000000000000000010") 9m47.582944949s ago: executing program 2 (id=1227): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/events/sched/sched_switch/trigger\x00', 0x1ff) openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)) write$FUSE_ATTR(r0, 0x0, 0xfc92) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000003c0)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20040800) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x4050) writev(r1, &(0x7f0000000040), 0x2) r2 = syz_io_uring_setup(0x12, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000108)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x77359400}}) io_uring_enter(r2, 0x6, 0x0, 0x0, 0x0, 0x0) 9m47.529063485s ago: executing program 2 (id=1229): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r0) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000480)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000004c0)={'wpan1\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000500)={'wpan0\x00', 0x0}) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000540)={'wpan1\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001bc0), r8) sendmsg$NL802154_CMD_GET_WPAN_PHY(r9, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001c00)={0x1c, r11, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4090}, 0x48000) (async) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x70, r4, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x84) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c0005000000000000000000050037000000000008000200", @ANYRES32=r13, @ANYBLOB="06000600000000000600040000000000"], 0x50}, 0x4, 0x700000000000000}, 0x0) (async) r14 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9deb0100180000000000000054000000540000000300000004000000060000130300000007000000010000000000010004000000ffff00000b000000100000b8de64aa07234e3f0003000000184500001000000023040000030000000800762939ccc8f9c44c7059560000000200000002000000000020"], &(0x7f00000006c0)=""/190, 0x6f, 0xbe, 0x1, 0xffff9c42}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r14}, 0x94) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x20, r1, 0x5, 0x7000000, 0xfffffffe, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x1, 0xfffffffffffeffff, 0x7, 0x4000000000000000, 0xfffffffffffffffd, 0x20000000000077, 0xffdffffffffffffc, 0x0, 0x8000000, 0x8, 0x248e, 0xfffffffffffffffe, 0x0, 0x20, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x81, 0x6, 0x5, 0x7ff, 0xf439}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) (async) syz_emit_vhci(0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r15 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x3, 0x55}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_QUERY(r15, 0x23, 0x0, 0x0) (async) write(0xffffffffffffffff, &(0x7f0000000240)="d59241", 0x3) 9m47.313600456s ago: executing program 2 (id=1234): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000015c0)={&(0x7f0000001140)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000000000000000000007"], 0x20}, 0x4000004) r2 = syz_clone(0x400, &(0x7f0000000400)="c122b04f67f31b36a8ced80a07b46ae5609282f364a60130451152c94dbd46088da2776156c8eb740e3a4b31606c1efa098de9a59d5aa668dc13c01979b593459255cd3f287a414c3307e6bf301c2c8c94409ad0bb6e657c603df91bb7d53d103457c4d8084d0897ca271c6a60588ea76ba053701ddc53bbf6cb", 0x7a, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000001300)="d818c9ce882fdd127d68fc20b61976a8c347d9e78963f182b395038e3c8f9341a98b717c386d2d9196320f577c0f54dc7e7bd312b74cae3993671738742a820309e71966fbbf358295a01704d1de104e5d05429f44f2f16db5f64e843faa81f89fb1956eb9eadb365f93909996a348057598748a318557d9a5b51c6100daee47c038e3d6c13ddd1db7df708e61dd60ae9ea7d3726f23e195d67757352011e3ee78a2028786731470e73d3a0887a2bde774e33ff9af55f364fa54147e9d125468460346f55a3b5bc6882bb8881bf6c7f22bd850b015c1778534aefe3a95afc7a3238c9b68d58ca8f7d349f0dcc6d8395e472440d27bba64c06d36bbbeff02c3fab05e45d6a0eb98eda53ad9834cd933624ab99993115f2e1ec0a881457550df591a69a6e36c7afb078f327c0caf9ebb39dcfbe312e53e091baf437ea3a4d20b2a4ee5a7ab32f5b942ec0252d64c6194f949e22384a014914001cd403724869725b3aaa7b551e471752c63b5f8f18bae456268407c84b157cb926fce2679814fb89e336ffbd7d94b0490e9ba77308b5671bf80419e0391b1f38fa9e054b7ba6cd6cca6c64bb6ec75cfdad58d232cc9bbccd699b384e1db4c5edf28f9bd0070f466514846cc482a6b73c80579ca419838535b8ed85b747722ea93814f3818f389b4981c5312d3c511df794fe4a7086dbacf578d71fbfa57800c9ed57a35ed19a1871c8d2ccd75f21cba8959abc9f94b342467ce594f63899135484ca2b6960cf2ad18defe2ce9df9f579802f5b44d5b100f7546f63a24064ab675f5aedc49a8b9720f1a0c176aa9161269b8da48cbc03c6b82dd8d134b8565d61e3fbe49a267d96c1213b1abb37d260fa9fdedf7519a2e5b6d8d9230184267250a30f2f28884cd58d0d3e479e9b243edfea2c74a36cd5ece34714626478512df6ca8222ea2b28e6059d9e63d5d38134794a6aeb133c709cadc0e450b3ea75a2ac62859cdceaec25b7d6b086d6ebc11abf16fc29060487669ffc5d378519f031028e46679a430dff98b3e649a995195dac9040fb11679a2285c6b8ec236b45ae756d08505b8ec5b32715915f76f0fc86749d8dd01d7aa00166a5b87dc236857160f9dd748dc4eb37a28aec3b38abf50196001d4bdac5efe1d86698e13ed6064d305973c8b6415fe339c11afcbc7ccfe1e0065d175b48207009650ed87d1ce6a84492476d94b8fbbeccac7b42dfee3730b11f8c20a22d6ca2426aba6c20be29be7b82a43624830f348c51370feaa1449f757863ca19043beaa53b4e6c9b7f3cdf2317c466b1d41f8adb3dc1c781c01c8fee1be7e6f9036acd8437c5d8652ef791515d5ded237cbecbd7483c496efaf1c868e7b214a587cf324c3bee88d1ec588a41bbf963b12b001149d6ec0aa519ca394fae35c9605faa29f79cddc672b4a452484a959c66c83506ece22b745aeab8435bce3f4b2ce74b832cc24ddf7d3bb6da78f4395dd72cb11515eb127cf078fdc1f1b886719e114a10e090009372bada9e49bb039edb13612973ad97b62d9fe3fdd23ea3e45f91fe455c10d0ca92347d99cf37a9bbe8e560a238ec31d627aed89f3ddf4ee70247fb323bb231618b79019bc57b4ae59161484e30225d890a1ab3933e9addf91be5940698fbc4e9505f5cabfec0663854a4ab6cdc45fcb5073ce0636ab0bc5112c59ad7a8a40ef67fe81d8e63e9f0821d66aa3bfebf427110378fe221303cd2f6c66265a4a07b3ddd957d527b7806da9cf26d4c4f8a837d24062b38646e30acd09707e3586e3950830647b0f3c1c11fe49945bfb79600b3aa03f92d9cb325a8c8d764d2c7d142ef5ed08d64a5d16b0c36190cf369dd5914bb3e4675f1751d4f526e83511163129796e0ba0050482020c49c10d2d4c6d9aa289c18772e8aa624f66535f6f03c89cb11634e696aea9eff731545155afd6047cb8ebaf2375d07b72688f6c757f15a041cad1039891b53ccabed8fadbd17fd7a1d708a97abd2c715ab715320a4c9139c5f0067e3fca263843a6bc8cdc7a3f8815620313ca25bd7c1708524b4d1db1e79d1fdd524f5b21e510a0e74677413f6eed4b728de9df01aa2af7a18eca6b92b733f39f60b64d5666156060afec6dbb055ef1234f2daef422feec8ed02878df72eec50e55e4038c4e270f011d3111a25cb10af8635dcebb8ba234f66c9e77d6e75d291954a8aeaa0492587a33c2b042ab1ea5098f64c57f61094054b592f48663b0113c89831fae8de6a627fdd37fd7dc7b15129f9ae860190807eb6087fb29d5c5edcee50b1b4171cfd2b6c12d92ba0d4a5c9a69a37aa35cbe6bea871e798dced83826933e660aaeee3e7ae0cb26a7e4a8d0a7f11f21f9ce1edf5fe603dbdab6024e80ec442bf71a2291caad6ce4c7f312c430e3a129096c31628a124de987e8ab5c3ba00645c07c0a6e1375d9103b13618ba9d1304449920a90530a029a5857267d642ee59d8d5ac03f7b8491ef432258de2dd24a642ce8246ea0c93ea8bb500b53bbe23b33127a6c48a35b95874430e5bdcc4400efc89e7b81bc7ba872000a5b33e2dfa1fdd6dc620cd8b658929fe8ebd6273c67ab7bda71f87ed57dc9641f84757a3147e5332831301518ae3a2b58a313c5c3cf662a7b9656245d83b715e00ce09122dbb6fa5e629c62e7d9e80663760480a8b13e76cdff451fe33f42c0b0fa5332e5c7ba2b66bd4f3a2024f30bd981bc9f85ab903b00d4d6748bf7fd502053b370acf5a1230517dfed8d3371767d40c3d6f3d4ef8d468076f039b03581790a47abc6914b19009d86b4dfc224ee03a1960b5e16d7c133e59ada88f5efb17dde338e4162e5811450e28a2fdc8171fa2e2e27dfeb110fe812d67186d0222809135f5d6c9d709c6f8ee1fb7c447d31d1b20f678607f9b02982be93f079466ee14fc3101ba022d5d93e62c834bde7e1ee56cdc1cbbea3a701d3039ba221ea49d3db8a36de89be11913ad1a86b4238cfc211a7c4a8e03b073215bf003d918eac1a1db168a9c65cb5518a9774566f2613c7ea0543eff197429c935909005eb0cf648c8f5928575b4209257a79e29381edde5504e297ab461b35a61105cd14aa57bceabe4623a5591d21a6fcd3470bcfd9cc3666520a9455ba2b0c033f74885c463b6a0fa9e20e15615d1937381ecc6b43cbd5a5b04e4135a7d76b880dd2594ff2c63bc82a4ac52086af725f7aa6ae9cd4594d8524ae625bb39ff3b0c88e0ab7387448af1a6c0ae22b3279dd83de6a98163bcd4342ff95a7dcced218f44966cc66dc2eeeaf6dccc776ba9796346d01b55ad06cf894405feab4df69926dcace163f076cbbfca6694cfe67404f882c91640da2b2085d8042b5a63500db9be714fe89da16cd8a00dcf2b5747bb81b96c5d5be92d7e9f669998efa30d347131dc870306ffacce4e5ecc873a4a96b0f6193fe98ba3ab4ccc1d3d335b302a44ff6abf8a17154d0362a7cde6f4d65bb2ab3083f02facfaf811589cfd4b478ca5a56fe20afe6acc7892ec18fb41dc86eea195c8ec0bc40eab75b2085e360a3391b77608c1c3e1f088a78096c9b6427a6a832c665287483db4ed5db01215b85e6eb72a3ffbc280dbe321a508660cb7ee13dfcff813478381ea2ef5b9829aca86a173414ec112082790ad44aaea77a5586f8b66d55cf08733a4dc5458dfb5b54721e2a5db2333903fb3af726e1ff05c1f4c1494b40106e35939ae7b87834103eb2d5594eba6d20010f75fbf1df253517fb58e06545d03ce97d5391fa8c1c38330fa995dc34b70e56e705978c6e6739929b7bd005a95e873dbb98a38893c946a8440e304cddd174447193557fe4657085aa10922f7abbb219187817658411850c65f8bb42b45920ac385947713e205f4bec21c97c12e79aebf0b77ac5032c4877d26f49ca2cf34d4c9a120fb6628e09da1c1baff94d6b724302a035be25a141752c73bddd1d211332c9fef32ef922c757592ef6417dcbf38f5fc9c76f0ab26dcfbe55c55846bc9f87e100b104bdf543e4e088e3a057b8e7c533c74b09f186130263595205601b0bd19d8513e6cb3c6dbbcf18cdc6310c80bf28a99d52da80f2b58a83cc0184b5591d50ffa4cae4abaeeec19040f264f53b64440e0ba2cdaef74e0b44beaccc22fe2a99eb20597047b4ce677caa4a37042307eb286581414ed1cb006649e644b1cb42396101ef86fb099630709f95597f837da1f2d50b261a654b21912490b954d17fa41955091bf88c3d27fbbe910047310aa2a2f2d66c6ff4a65e09e93aad81e267d0d5a34338a8d5b38633034862e62d02185be6e2ec1690ae2a12c7a79abfbf42792c1d142d7206fda0e07bfce018f1c2b4df88c203ad9a92b2b02d16f16477bb188e8a5624287bdcbad7b2541902fd8a3f3c2036e81d987dff58e870bc95d7f050abd0b7a555adb9aa951fb72ed59fe71f7361140726c254a642bccc8359193ff142f924b3a6ffd3f287824d35fced77c03f5b3df490531805f5a42c038578b46f1958ba4a47037e46c2b2137cd49539775f31ad54cb9c26ed91da5d7e70081e41e24e46804610c68d4ab28af7b2e65edc211a7a239739bb6b8abf5a027a8193f39de3b5305b3261a301f66a60f53e4fd33613e126532b9be7bcd8f2480e9d190f392e613da5028f212f0f939934bf9dff735e360c7f501ac2b780e01ad72b9f956edaca475c9b3abfbc4241624dd9d7bb9092a125b37e6cf65c22305600c4291cfb51c7e363f987b37b2d40fe8c50687293538e826c9f4d4b04a2de47664f979c4ff383c4f2f8b598ae5135db2ed8d991856af559e6cbda2d67733cd9410869e612a15a36cf7e1c829c843a9776e87908b8b204d72075bd29b8dfc80ad484cf7872441832387534a0e996fce4eb4bab7cba234a405d4a66d799c8132f88a633be8a45fceac2866b3fba580b69fe3030c8df3529c773fb9a49594b363f50d0375e81ebfe25d186fa4cab7c244f3edec6a1fe3fb16328a93da662adc28c5f1fd73bf38f8328da229318910710f76c15894175bb6faf0f7002f66b1653456477f8ff0162e5311615818b624cda5f9d55cd926b7901e5ada8bccce34dfb9634cc7df1109aad9ab2f0a668b4ed2278880b67cb0ed1bd36d70958919db6dac2e0f3203e15d68c36582026814e4c05c5756868f38331e09a55a022c86056ecf59a715206ae9a98685fe46bbaa9645355ca04bc486ed5a508d16230ccb0b3759f0f320107920fd62d52fc3095dc0df9cb085ec40b99a82c36cbb5748c88595291bbdc9b564d72c8a0ee17f5fcf751f6e8ce6fc5a61f9e4d23ad162cadfc86dc65833e2172c103e8cfc647ee21cca681322cc89076babee08f79ea8bf0f1d880a9c7f24ddffab889f966a6f00059752a97229897366ca1e44ec4010f25f2ee8581ff8b576b90bc3bb6c0d6fd4da8f60d052cc35319197b867d6ad2810b4abc4f54e131486a7520aa5d170f4bbec34eadf0d484a0b304f2c000c54dd86241a7363115a11ba1f9700f6239672b88a0314f0f817ef3949c4be20c8672e2dd012e66dcf015fdd6ce4e793c359060df0aa1b839ce722de3984fbf4be6ccdac7dcdabb5419f320b89936b908025915acf9f0b202ef77a4945b219143cc9f483437bb545f1aa0fb13ff1d6d1e2f804d23debe34816a956d21c043cbaf6cc8455d6f332a37f13855d8487ad51da2c999c932371d534efc46da24c6da08448471a70194b155b7fb4002bad3f11804ad8a7486eebc6cf5726e080345f8e743cd7e8ac86ca5b23e5657227b698ba6d53040c97dfe57") fcntl$setown(r0, 0x8, r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xc03, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r8, 0x0) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x5) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x0, 0x4, 0x0, 0x0, 0xffffffff}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffffb, 0x0, 0x0, 0x1000}}]}, @TCA_NETEM_ECN={0x8}]}}}]}, 0x6c}}, 0x0) r13 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r13, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000000)='M', 0x1}], 0x1}, 0x1) syz_kvm_setup_cpu$x86(r7, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x70, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005640)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00', 0x5dd}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000240)="cf3327e4f25c432c0638ed064c633e7e45e9713c8c348fb5ff52435f81bf2f89566c91125aebb362d4b292f510b5b96be857ea64f32197803c81cac882937e45dfb7c3bf5248ae79cab4cff2bd9c1bbb", 0x50}, {&(0x7f00000002c0)="93d782efc2c389f43bad80c4aeed82a77fd296497ca7d62d855003d9e9fbf32c0475194eb4fb60b9b47c07", 0x2b}], 0x2, &(0x7f0000000840)=[@hopopts={{0xe8, 0x29, 0x36, {0x1d, 0x19, '\x00', [@pad1, @generic={0x5, 0x7b, "cbe5e6ff39ca75dbbe55742103fd76c1c98d39bd02de3d4f5a64dbc2d3a21539898849f6a07debfd1a11622666d9db93e5a71a428f5510050818d3808187cdfe3320ea79f8550f23961dfda6a8e12c3527d6df9b327e5857f0d39d2d9e0a734c981fe0f5d089068dacf9a276da9298707d00e7cba313480079306f"}, @calipso={0x7, 0x18, {0x0, 0x4, 0x8, 0x2, [0xfffffffffffffff7, 0x6]}}, @jumbo={0xc2, 0x4, 0x81}, @jumbo={0xc2, 0x4, 0xbf2b}, @calipso={0x7, 0x20, {0x2, 0x6, 0xcc, 0x3, [0x100000000, 0x0, 0xa]}}, @enc_lim={0x4, 0x1, 0x81}]}}}, @rthdr={{0x48, 0x29, 0x39, {0x88, 0x6, 0x1, 0x2, 0x0, [@private0, @mcast1, @loopback]}}}, @dstopts={{0x140, 0x29, 0x37, {0x2b, 0x24, '\x00', [@jumbo={0xc2, 0x4, 0xc9b0}, @calipso={0x7, 0x30, {0x0, 0xa, 0x7, 0x4, [0xd8f, 0x8, 0x3, 0x0, 0x0]}}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @generic={0xd1, 0xdb, "1491cdcd67477f80af6fc95e676993ae84feacc8cd04dcfec1740e46ee898a12f71a64b7f8821d7bc8485b53fdca5d96c0ceac0fdcfcfb57af7484cc81d4ab2cd048d13b152722e4c30acf0598af97b011d6034dead09bb60c07641707c0d2440ccd33a0ecde1da56de707b8313b42f04bd96a08257d5ac7d48e7707c70b7f23c0b88ce157d4817f5b656aad8fdd9cd4824717e65a8bfbfe54eb4b30872eaa3000e601dfaf635d59881f0bcea55e1f7a54eddf1e2bfd555f1bc07723a88cef7166f807dfeb48e264ecc19fd65ae350475265a3b3ede4298d8ad322"}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x5c, 0x2, 0x1, 0x76, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}]}}}, @flowinfo={{0x14}}, @flowinfo={{0x14, 0x29, 0xb, 0x3}}, @rthdr={{0x98, 0x29, 0x39, {0x88, 0x10, 0x1, 0x5, 0x0, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}], 0x360}}, {{&(0x7f0000000bc0)={0xa, 0x4e20, 0x8, @remote, 0x1}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000c00)="427d582b1893a2fbd5a3cfdf87e59ed5bf0665f6472bf5fb02b3c36a8eaf9a5e706ac72a759c867ed54a9a71bb15123a581842a1ad5d6b5d622d79fddc443f274d19d46a12bbf9a28c752fc420c558a4b7a55d4b1c3191cff637509591b2ce0d8e5ec103acf30ea133409084a5f246612c882a", 0x73}, {&(0x7f0000000c80)="c2772d944820d3887bace89e3d30c2ea8410aa10a6fdb3e8574efc94039b2fe5bcd91949e809146c49de3cea863c697dc991fcd515d5e38e5a4734f128f73efb8229d97762", 0x45}, {&(0x7f0000000d00)="e83add12018f0de3eb38bf04d45cc2d5d56d382e80f17ee7c31bb3d60f694773529aa94cd1498d5e34bd1763d118e8e03b9664220e54fde27afe8db9036e624105357222c683e7a6b93882d5acbf8497a07222c67b04f4e5977ff997", 0x5c}, {&(0x7f0000000d80)="766f28e7b721caae40ad1376cbfc1fbe8b7af8f43139733a529881d585bf1f3e3deabe672860", 0x26}], 0x4, &(0x7f0000000e00)=[@dstopts_2292={{0x20, 0x29, 0x4, {0x3c, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x6}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}], 0x38}}, {{&(0x7f0000000e40)={0xa, 0x4e24, 0x2, @loopback, 0x6}, 0x1c, &(0x7f00000023c0)=[{&(0x7f0000000e80)="10fdda372b0bd271686907cf088c6cfdc684ec40b7ee491a43f788fab3cd626517816be554161c75800ffffcf12d3a17027ffc7a047bdf491a33a269f3d7b9cb695991d8665a957a1ef118968cf98b1a49b89bea30d72a44648ec63902e6993f38823077a443fbc815c54ad7f75baf04aa54e70b467c05b1daff39a85c12f145c17d53bee072bf918cba4a5d040c151bc5c9d76075579681c3b6d85435713d249bf842645cc5ce5cb5b2633dd005ead9b6eddb07472af7c66a3478d1d47c3621747ede953b6731ae0bef4807667e0fff0620192bc522286be4d79110f777add3f8f31c429f8696c4abc9384b68", 0xed}, {&(0x7f0000000f80)="3655308a086b5af76238287904797afd45314ebababce103126238cdad08e9205d7bc505adc7915147b203798b1e9ea656dfc78eee1459a67c717086d6f80d8ab23056d6f71010be02f53fc31db786decfa7dc4897360caf3f518437faa5a6c759c71a95855a6837ae5f829d3b7e40ec46d1e3a8dc7699a172f9d7e70c8a624628d6c060398fc70b72266c478ae0b2fd003e57833a2c39deca23e742bcc95cd082ac048f285d3b518e62d0204092665d50b7f2ce9f71d9c05b3a19e893925a7802adfad17140b1071bba87c000a6da5712e46ecd862fed12794043e21848cfd0cac04f2823999bee", 0xe8}, {&(0x7f0000001180)="60f047baa563282f6d28a79d27f99eda0073387ce2461bb99f2a4540ce468075f8cf0021550bfcd1357fed03d9f1f950069f7be8a3e5fd521869fb6af57add5e588b3882e2158fb5383fff601326cc7123b7c8085d0d7f3fdb6bb19ae6e9a2a9ba894aece56211202f8ef49ca5189b72d29f453db1c8931a6d349f46bb24a271dc86bc93b7c533fe45a057ccd1a0b62e8a29a77c067133129a972590dc98fbf38ab46eef79c894bb14765504471b71235e74c5f8b57cfdb95cff1a7553126c8dda", 0xc1}, {&(0x7f0000002300)="c52a13846beabed85943a7f85d19ccadb015eca223a6cab53e4e22731bcf2dd292fb32259f146d08c7cd66927f1bafaa85acf9efb5498be0c811b3e9a0f50a8d904e1e7f2f9ae32b28a811ccc56d0663806e3a89a4c4be2960ded2f21072b05d18db887f1665f9a1f680aabe46fdb9dad743e604196076b46d0e6aca2583d59c5c21c4928d809aa976e4c3e5c5d79a3788022eba", 0x94}], 0x4, &(0x7f0000002400)=[@rthdr={{0x28, 0x29, 0x39, {0x3c, 0x2, 0x2, 0x4, 0x0, [@mcast2]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x73, 0x2, 0x2, 0xa, 0x0, [@mcast1]}}}, @dstopts_2292={{0x48, 0x29, 0x4, {0x0, 0x5, '\x00', [@ra={0x5, 0x2, 0xffff}, @ra={0x5, 0x2, 0xd28}, @calipso={0x7, 0x20, {0x1, 0x6, 0xff, 0x7f, [0x2716, 0x100000000, 0x0]}}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x3a, 0x0, '\x00', [@ra={0x5, 0x2, 0x7}]}}}, @dstopts={{0x1038, 0x29, 0x37, {0xc, 0x204, '\x00', [@jumbo={0xc2, 0x4, 0x18e}, @generic={0x3, 0x1000, "c54533db59b8f382f8957f993f6b2837250980a53174fa69bb935e2edc797bee39ad1d5fceadabc4047c2ae1836aabebf9f6a66951db0f3c52aea88cd535ba8a79310d57d363b438610929159e7e849bf7ba85a2cc2960c6d55af1571700bdb0076abeecd811ecbcb1b38b494e882eae514ce36d52a6671c70ecb6271c8870e5a523d60c91409bb1319ce221f88f65e4c5b850a11647e21d0acaec24a3d0bdc6251abd135cc03d1f0cc91b169ec2dcf82e47b3f334bd29803630b7d0950b1e377cb5fb576752f280e7c378ac6d46cfe0f5c7e681b2255c5225142db349d7b5aff7c30a146fa85cb4ca4ef8a7c22c2ca2b02dd58553ac6c5c76c77af0d9c7ee5716722b44147803228b8949619224963ce7506edb58602a2794932ca5291c04232bb0beef95aa3c8f24d00ab4322494ec119722e258832aa97d607b4457d67c1879d4111cfe160523c1bd9966652f786283d64ad9048479a0db84aff3cbdccda60f128ab3755e2593eb746f5e60dfcd234286866e975dbde5ac67fd1729169ae197f241eefbe3f4869ca0869953443181b16a90dd6f12afd53ad661a14a596e37d6d62a01ff2f226a9c2130e5c5995167846c1877ed33032424262991ca0cd047c353ca899090deed13c4b0527a0cefe11d418d968fef55213b611ee117b33188bd5e614b1db375861404762f298f88d89d09fe764792e3ef50f3e9e192c1096db72879efc9d79083aa4cf2909433e54bc735579b2105aa8e5b37967b0aa5a83a6ca0f936292b4662e996421d71366a0ea4f53380e838545bf9d8f691c93a62ee2151ad1d8620df83efcef2870e0c7b13bd0055d25beca24acbca83ec5cebe83da7b7b2a492f80672365a1dee5ff314f3af90b8bb2770c7e1264aa24bd7dbce07d05fe6541c4221c162d7488082d50294d73e5b92ca0a1f4634442d5ccf0dcfaab2bfc26441234b10df64ebff20cff565f25c79f72b5ff5f7c48e7848e6824958d24358f189d9f0b5d7b06f781af9ba2293a7c11d2ff7ad4fd9c9ebcddaebf19505f44d1fd62aa187be1d8317717d97f7400e007892ffd18051002919ffe655aef25b1c5b3785b1f0b96c0a87a46fba38b56a1badadf257c6b3621c879cb26a6101c38dbeed14869251d4e304c2da859d015321ab5b867e6c7616498cf527e661d2af0aa32844ec1fa9f27fb8bdf5dc121cf7d701caf27d564b69becc4ffc649285e844694a5e0e2dd3152c1511f328cf8e16920a04bc209b0562ff470a631640a36d7f4d6663ffecb130fed5706bc7df9ff3413fd846eb9f22de1c9f56ffed7b68e95b59a9d02ee004cdab928c47705280fd98c7e8bac426958e57b6dced7505777d0fee5550f2e06b33ecd927b3a58cdf58b2ef4e47be9c1cd4c7988eb4da5214d596bc00237e49f060633e120b6ca3ff95d1bd318500db5d1fbfce71dfb46ecd6b0fffa7b4696da181e6eeb3504dd91a0bd2098e3ba9d616e2fdd49475b77d8b7ff4ab3d8ce06b8a64b497938b9488a38e591dae4236c1f470b5fbb8f36243fc639e3f5fd10d9270ed46721b7dff846bd02651350c343d1392d41279c763933a95e6a1d85a7527a23dfa53ff34482bc8dc83666ff5ec69656a9136bbb92d9470874cbc364b1f09314880707e7572bb35d7ee6786bbbef9c4a7c1c80fd25ae9314d10c760b8cada6d15652aabd212aa7cbdbbb6464b1af9ab88ba077e7485170933a22bc0ef2cfa80b27db7aaf1e125952f38375e1d31192b0e7fc4b4f6bb76ecc6adce327009217365554a6e9148b290706860c7206ab38d1dbd324ce1b61f62c1fa12e17c95df40481ee09d6744a7ca47623a5f9dac2efb1acacc71fca9201d73fc5be37ff18186855a17ce4f984a254c9c23a3eadbb93475318f828520997cf1ae30474fc9f4df788827784feba351fcdc303e30515e9299074658702bf2df882b5dd7e7fceda91d1a798233ff18fe564293943020298abfc496066a964aef559b707af5883e3e496e531140572fe89232a842b4b796207ad4759865d7446b3f7a17ac73db68ec44607fbeebe576e1094edabadd0e15442ce1b52710659893c02706145479ed0fd89dcbfaa744132d9c3ea7e8e08a325d7ffa881ac0318493147d9f9a5e0ae3492ae3f0307cd55a692e0685141d0f2bff8f04ab495b0cb19bebca1230f5016e8038af497abc34371dfb88e3cca6a32a6d98fffbce136cbc24da36b88a527e1762e8f3f28017898978cf624ba3a11b0d564e1ee9cca8a1ac20bb089d472134cc1a98b4439aef28202f4dafdfb5482b27139e46fa072dbdb90f60fb83e5a89ef3e07888ba97a64a45feb192ba9981bd12d0a7f1aeef39b18b98f201801f749baa8d3f5658229af239d9487249b3b0b67daef34427477483539286d1917a4f46288367ecf0f397e942159191b023e1b0eefac156d946217f1f0cc7aa27352f05b1523e7fe1e9703b2d74162796fc01bedf58a00f5884283cb49a7a5874f207eabb7adef079fd8d7c675c827c035b5957cf8b0bf2f2c28a6607a77af6663ddef87d4065bab07e5b06886e57a2105e4aeeacf73b402ebeffd43e6abf2649d2f9a023ddea4fa9ecaf3902ec5d1194d6bc6ba926e2aca7e83b8e7550259d95bcacc38f72ab988c7a155a321c891bcfbdb1d4c1e9d7cb0125510f8ae22960905c4b276b70327fe3614cd58800729b5b2091d7990daa44fab740c668b8fa0d75398a0243972bbfbffd8784d7d73516a56bfb2ed020beced9de42346f2b8778ba987da496f5361bbd763217d44f6eb60fc1ccaed9c28bad45601f8ac8cb40ee689720cf5a0b143ad80d463a7e764f5b3e5755588f7117d4864b80ba2a821087a18b843ffc28c7f32099db572447cd229b29aa9d0b354e5488ded4d1e7a7d699297636c14313eb8bb0dea7014710f555b0434cf33caa221ae2c0e3f39949955db665d738fe8594063bd5021302daa8660e295c2bfea2d8736a6a1e33cc166afdacf3e19fb5d309d2dc24be95f7a356abb2b3cbd7c21f7757e2e887c6f61ee79b4cc5be2055fa992045be59882c866b0c2d36007695036f2d4df7ce08f962362a25ad9fa93982019dc51240ca3f371b46b11755985992b6158b689f33a492e0d25dc79fc74869d50269c8066364bcda672e02c3a4b8353b3122ea34eb27354bf29bb860bf8e524a4544ecab65887a5dfb88e954339f02fdc22911bfd1d27178d07bb3f200e6cfc770f6203eba9473f5593a524202eef06dee3b941d2ee9aa185f9dea70d22172223e4720c817e6783987bd0a2724bc056ac4d1d25ec70e0fbb1c8ae048fd467b29030452fc1068b0702b5ab824b7909e94ed8b6311b7ae7c331d59161317a5dd935270f7e786904e936e58064ab02bc1c6fc95678ac53c7299bce890ab491827da28d63eef10354dc0f7f997b46b17903ac7de459297f2ecacb4df26d723548052191afd30d0f55774cb01e21848cf1c2fa88500a0b61a64d5b1025ddae50b052a428fa1c3d2502eaeb08f0f9c61b12034d727bad791458d1d6bc4792a2f14eab41f926ec0bdeb99d0a6132d8ff9cd399745fc85b2131e8388d33512ec98cbcbc1bdc0b09596a907881d3b77e1c321a49da14e3955ade51becaff2b8f7d8f7250b2a656dacf17e5861282169994a95ac20689f67aa90e22767a11eddda822fd03f42d2180cdc3e5d6afa74e039d86e5d4fb04e840d2793793712b7def820e05792b48667bb35fe7c9fce4703b31f4df4311c3045c8ce2e66e8bce58ec78ec3164c76da3d69d1d532c74aff3484e8f33a42bce9b9328859cbab775dd1d0b2f0ac97769de15894729b53bbdd3b52d6c62cf3bc843830fce75f5420bee282ce1cd8ef0bcd4396985a70108764ce359c05825d0d2a1768b9f038c9fb754e2ff15b4b40799580420417b09a4aa1c4f0bf32841702166177b91f22c4f653b2d6c97cced75c573d4ff14b3ac939ea8baa452b81e04d255fe43a2989dae5e4db3f2a2cf7a60769549cb96ac0821ab2b55caf0d33562e159958d427c94afce08128279ce0f164544bcc320b4022ef8b73117a842c93695491e9de4eb62de6ad67e11fa736cd46d08c3ea19a88d27265fae1e6114d45cd49a396a5df17db3cb8b7d6d4917033793cf85cae4767eea5c70cb284932dda1e48380577e0914f512a4832cb631d3d460ee6ca9a39caf7052f81886050849923d9ae990711a5b9add1f153f8b3597e63b46bbec14b7bcdac260992ad8fe2d584735709d20af42df8180f174dc4dfab334b19279e06b12fc29229b9478296131fbe281835f0c464797178e7443f859e31ff47316c1194eec5d86cfba6e5ab775c5cf8f3695620ebcc96c471b54b55c370eee8323568d83a69f5813df04a60cecec241e6e147872b4794dce4719ac253e99cd557446df76f5e2a6f7bf5613325eee9075feab593135802780cdc4545e9541aea2892e6d6d4695d8f2a02c445d71c7f263923bc8738c42a5cd2d80b1d78ab3bf69514fd4040fca651016b81b1d8d2e0e7893fd5af090c83a18fe254d370ad36551543d44b8bc3316320a128b3cd8cca1b0d5e1471ddaee427a269b8e339208a95e39883b17300b18510a1ece476afa97c3aec273338b23aee9856c3db59afc2dd29df05d13e2c2d9df80a88069b95ed7da28169b1298c9463dba9f31a0cb00117bd8ad1448042b5c44fae713242226a304319cc65b4aca75b3a177fd4b744a0f2904dda66a84f9acc617638a863ee8857a2236d32d3afb72473993b8bd9644e0546fe92e2d2cc0b849b17f5b2c46a4a148f776731eec3100138f7c4388f7c2b39f9aa247fccfde3acbe375d26930fb4ff25521cc0bcb9459cb957fa6b4c41711cdfa3e33fa1ea7a870ce00c624b8d4493cabdde483d207dce799d4b72162d1eac1a9480f89f9580941b140fe83dc53f203463f90231382a1282c7d8f6fa9e1808bca8e6e6e442a9c50eb3b6feb082c4203ac3af5eee2cb7875aa211205db2a8052a825415d900bfed722c849ef9a2e8c75409705423697560685c27c54daa7bb818dc4b60b7580e1dc32c2d8d3de65e9b1ece2f8af1513308bc0208f096f68e29f18f959911dbb63a08cafa54592b9ba9c59b42075fc05fb1192655e4dbae08aff5a8d49df566d9716cf52f4eab988c673b37c2f75c4445f3c8db9c93e3c3b17c80a00b55f7c72f0ba71ea23b95ec751ea34fcb0f4b63c25462098d219682f8e6358d2a562ab13a828d04b7c9390f8357fe262b0e8635c75ff8a6a25f4be8639cd838b54da66890f9c4dbd0716000347d97cf289350a10d8c716159f93d57af67b31a3acd6b8fc75415460db0127ac4522b792f1fab0e9f7c9d19d12ea9eb795a353704ef5b947eb9f3db53eaf33e9a324500315d225da14fd0c700f54b30f7fe0b2955fb1754cc95019110f45217c688162c4d280f9b80b0867c1067adc77b4233a180a38aa2d744aaa9e67e9f3f72c91619c3cd4c4cc94f90cca553041b08c489ca6c80348d5e57bca12df179c92bab305f5afe2a89c9b51a5f103cffadaf49f10c7b4239110894a2390ddeb64ef3f5964d06c0029e226a2326f25a7f36df056c7db6735fe62f24ca9bb1f0101ed99a09a2c0fe06e2d6ad1bc98f912d8814c9559008fddb92b96277ed5867c995fcf2134069a310b769c8f0881460ee8c392d27bc4ff591344ecbc4ce87ed08f156d4bacfdbf686b02b81ab10b15af18396a3f60fb9d00a2696ab5caa7c1dbcee7f4417137f4110d963f7563f4d691711ebb4c6c5f8d0f2a2f1bd63dfb03dba8b502b62052b"}, @hao={0xc9, 0x10, @mcast2}, @enc_lim={0x4, 0x1, 0x5}, @padn={0x1, 0x1, [0x0]}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x87, 0x8, 0x0, 0x8d, 0x0, [@private1, @loopback, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @local}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xfffffc01}}], 0x1190}}, {{&(0x7f00000035c0)={0xa, 0x4e23, 0x401, @mcast2, 0x80}, 0x1c, &(0x7f0000003880)=[{&(0x7f0000003600)="8de248ed4d225d48ce1821966d946d1ac496aa29a4d54477e4842be7189bb9d92b341d7b4b851be0a4a0af851534be98494a207f8d9e19cecf43de40b564e05342a34b183b29b9ef4f01188764412086823d13813c2a7b127d931e95606a40c310e693c3aa4c63abdc7df3cc9a595488b1d451f01e6f01d88c62e42606a7c133b98563d9ea6975db95ca211e3f06d1868e52ff09c706208a587ccc6026a9a0d227d327b0ae69", 0xa6}, {&(0x7f00000036c0)="84ef594972ff2f631fbdd8ed946af203469cd39616fb967d956a8a9b8457bd4bfc5f1cbe400a35fea8356b24ad63cd1ded0ad35b034dfb1d0c39a6bd83cb7a8a9e7dc751f96f5b0a037b0ab6cfedebed8524f537e4b63fef58c4d9b991627c9770d5a5cfadd7e82c0af2af9b159ea07b7098c4210f6bb1c46e7d28c9e3480e8dfd47f8", 0x83}, {&(0x7f0000003780)="086af7d9707f668de0696f0d30baa2931654eb7812f856cac4ff2e9edc6a3f2e956ea2b38717e8d902e15b7c5bc17649b528bc4bf2378b1d70a8ca99de98ff8daae637d9ed43e02b68185a33672b818878534c8642003d499be12e22e22de87d6e4e8215", 0x64}, {&(0x7f0000003800)="7d3f3125d21ef9d2c034fd7cab66d35d02139e98e67071dd1369c2b0e8889e3aa379b63fd3e4ea7dc1cbf331a6aae1dfeb3eadd322925947417d428d47c47c1e1afab35bb53027e5d6b692a8245328132ca7e4316c4ce3346645525c59a3bece6e7f4150974dbaf4eb2dbeeab4b9c54120194e", 0x73}], 0x4, &(0x7f00000038c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x54}}], 0x18}}, {{&(0x7f0000003900)={0xa, 0x4e24, 0x101, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000003d40)=[{&(0x7f0000003940)="591129e559f72ce4c5409fa1847f6279666c49eaae628f9d19649059ca3953f2aeedd80e4c7ceeb033a3e6bb77b68f01aa7530a81a02f2eaf02e900e4cd2e5f0c87c0202f5d3b1b17a51d8b8de03b325735ec0d009c7e0499ce919d2c374cc13e1190c18dfc06fd8470e3cbf119a9a501fc062cc4049ad375f1a58427211fde8914f6f80a6bd2d47dab2a02350567392d501e67ff7a90b6e3d3f06729f4522c519e2b777a191fa283a1b7afa02a666322df1faafc4d479f537f86b640891b1ec5948", 0xc2}, {&(0x7f0000003a40)="b19293f684078e197a0d080d0a5df10330a9e0c0b9244e4c7bc2a14e2f34245feac548c1", 0x24}, {&(0x7f0000003a80)="9b07537b52c3e1fde20db142461bbe0b0f82d5aa60fdda1b40b131cc0ae15f57a9d126f546258bb484d6bf7ede349baaa4008a194953583770d257c681d0a37fb28e120c84106a6f7e2122be5d0b8b13c66a652a164915ab18b3c714f95ce0547dc9fbafd4108a90ff3dcce516df5942b0b874328c003e294016f79aec2fff6dbd3b86c56aacde0b477d9dda1776a3aa62c422b138f8c24428bca56faea9cf80ffbe043573aebf184b409cc647675c875b2943b772016afeda2a1137efc6b759bf25882302627e98a6", 0xc9}, {&(0x7f0000003b80)="11b789c97c189b6da5ab302bd597f273c8f72d68e1b3f8854a5b5b3c1d0a21037009edc93e0102ab", 0x28}, {&(0x7f0000003bc0)="1331d714945d81841880f325a4803a6ee1f8827d1f8f03a25256e3cccf9a6dbd9558983dd8271dd150b334d5fdbd8da4bf4dadfe15017126b2b40375e4c3b5a4cd041b247972c961599459b94f5b696ca62a217e803fcdd54049925d7e3135f61704022733486a72d87c4b1dff38149cbd0a89ba5b7834f977d4b58c55c0fdf5e4882c22", 0x84}, {&(0x7f0000003c80)="80ddc21331da9fd5eaed8ccfb311fe7d89caa7102e34b242ba2a87362dd07dfd311b60f1c5cc2668a0dd461aa6959d3eb81b53e5aeccb176b1b5ebfdf116171f203b8a0e4fb61533d173c5ba74ad2008987bce8b39693d0e7b5d59169cbc364d779a631768ba2d0877707583cf528e203a9f7ade9b89d4b9dc02fa4b52fcb6112d3e1fb293d7ad29307bbd3d4552d364f4245ea2b83f8638b20f73f2aab73a0afda5f8bc16fac1941d8269d28e74d19382dae265212e", 0xb6}], 0x6, &(0x7f0000003dc0)=[@rthdr_2292={{0x48, 0x29, 0x39, {0x6c, 0x6, 0x1, 0x81, 0x0, [@empty, @mcast2, @local]}}}], 0x48}}, {{&(0x7f0000003e40)={0xa, 0x4e24, 0xd7d, @remote, 0x5}, 0x1c, &(0x7f0000005080)=[{&(0x7f0000003e80)}, {&(0x7f0000003ec0)="446e4e0676815b52f57dfc1230dd6e3c55c53cd78ca249faaad27a4cb17aba47aa00c6c16025dd4d2c7b2ef70d5ac0e49535e1a2fc3b58b91db2441cb2394ba9f58bdc0810f785c61bdc153c14b9900e2fa0f17d9335e54e9482dc3c06b1f3b7e308f57062d0f3ff41dbb7545d118abc5461dc207656b75450a4151b1ac3daf6f0b432daf8d95f85c8a0b3ef4c9f2d1bf27dfb5ea1395e7e130f3894d227429611996412988968636906d917270aa6ce7435198abd", 0xb5}, {&(0x7f0000003f80)="c6bba204d059d3e71bbc6fc4d37abd9329bca5f1c0f31a5c46566cfefc638edaea6b8aa19930d493e3b1fd87d23e402f6d4f347334d87f12415967b7ae98a1fafb7b41ed71864e0e0ff94248a1ed54146ca81dffa88c70628d6c8b205629b63050b30ba1d27d8b6c515737628940a5bfdf6e871f1ab595dfc11cca281bf57e979c87e49a9e377c3e65d502b7e346cdb5384fe83a34b63c73dd3df54ee18d43a3c653f1b2f91e424b69a7d5eaf567ea72a45580d2208edd154908be764e25e325d9e1b1a242e9e13dce53de65ea1d67e58803e6d045a2f908c66db164f558cb2552ef0953cd93", 0xe6}, {&(0x7f0000004080)="90bcb37af51e0c4ac585e949bd2534ac28b9844e2398b71a7f3aaa8becc51b7b953db1068b3f844f03ca1d612a6f6fa45109e65f3791254d56c41d623676e9aed476a69e76412a64bf2567a4937b268f99c22bc5f2f0d4071a7864eef215c56414bd5bdc0d3b593982b4f3fce479f9c54a0340ed99a96b0e2d3d3b82115ffed75e000efb398ed75f96101d6a445ccc61eb6037a2b602b142ce8f2ec7176391c4f4b3e2d6f04d799e1b1773672f27e57e0b2499292be2db657a621b13586b81e12b446bd03ce03921c2662190685a9810a57f618d3f6295451ea2314cdbd6871510ca1f9b2c7210a108d9befd03cd7772aff6dba043d78598cd209909914cef93a376c25c7b1fe602682b1d0c5da2e975a20d4fe95f44b28f27018b9a3d75083ca2991c544222d992d2d497bc15a9197c58b5b408bde08f28651ee4e03c205f23d62b01c0bfbd5ac6004611bd90516967aa3218e0fcf555399d53f78ee6298dc0f3ab5bb42d5659dbe032a06f95c189fa7d9f7b0e26f30115db87844cd0cc94b5340fd7baaa2dd327b41ffd2e9c6da555435dfc7189137942ea38a94d3fd73f7d5f733375e3e570007641c4074729a5eb2bac627b78ea49f5e00989f9b53e37dec053c5867e404f83837a0aa884bbf8ed6d4c9a95866d30ec2c63399f1cd5acef470809a232fe4204cc3dbce7e2ba98a4df38e51519c30f9786a277f57942324c7567d9216ef90fd48008544f4504292d89f257509f1fe53af31b243b4fa80b914a8d03b7d3d2e8080ff9211a7852bf11fb18e8413867fcba437416809e52776d5bbda0d270a368930f356486da45e7cdd53a215a8be41049cf5414a5776402f9235ead0dff093f1abe869db5b31ad6b67977f97e4ce471d9158abd8d34b03c1e382fa6074eaa4304dff9e9afbc4070e6be1b6e0e4cd07a2aebd18134a5861c7acce9fb73b3b378396851dc3cc96566d8408a382565b8ed8a78db30b71c0c8ebaa987886fb6d224cba9d4066d72ae0382e200405f30e94f7cc0befc1c07839257ed7c47d3245eccc7fd4ace7dfbe83698507eabbfa4e3401094fb05d34b737f8c58c20fd56293622baff90aa71d5ec03d700f900504495e8a369c1cadbac6e65571f4c29430d840a8a114ac8d96e7b9b110ab1a421a691706aa4146fcf10068cfdb1bb414b44809049402711a4e15c52763375ee3aaf53b36b3a83ff5d3cad88a4398969d7a72e67975ed61724761daa40773480d52b199671b4a21da2bbb57795096cc3ba1267743adac47d2364e2d95d4ed3863e7ddd3a823c4da25cf1c644712c0db2dcca7977b71fd8e11850feec7ade4caf86809ed158c5fdfc36657265a849c3f667cbf93cdbd194bc578a6060c5a2496af62b8e700532e21d63a07633891b9bbeb8c0410039cbeed9989acd8d5b4eaedd1e79ea1b6ffa6980d543b66950b83f48fa514e4b75159024cfdf05eab39ba3d88c0ac88423438f2bfe5543d809136960e4553cde1044144a068b3b454a10b8a490161c56d0cdbb3c86242d701ba194d4d405c6de444662828b789a44808c030cdd7c3e08fa70bf7ea5c81623b8f3d58ccdcbac9bc3f07f885f9fcf7617c9be935bd60adda949928b01a53f225310a2b1bdf3abaa8603d659a2deacc539238d805a39ee1bbb7c42de525aebc885274bfa8075070e2de874bb46ab6e93981341b6712dcf167d085a20676870812265af2c901a823ac9c2a1593dd3d0ea0d27e1b8c4bed98a9587aa68075b5c43f3c002ce45aa5bdc6f93cdddd16abee2254ffc808bc062efcd51df29220a627a4bfb05da18560d70907dce36273bb14a72044a95947929f5d9382101e598cab0733c22af45ae57732163aa6656ee9d72080d295c7f894d08d9f015d4c23fa0ba2d0e9dfaea8ce28c2b7da58afb198db278066d9f230816d02df4a39739b3715fc0a1896936139ee8f88b1b315491cbfd24b20425d163b4400595bb4b24ce05168563f30190efd084eef4027bf98d40402d04c4d4585f64164e9a73a569a95baa86e464c8c4dada275bd29de7bfbead620bfb1586a9e4287248b1d7c1e7f43412dd218d296d9f855665431f7e968512c10866e67447b9b0f3ff6be04404f35b75e369fbabcb2c3314656a04cddcfa24a992c756414c22d4ee08ad461acf97af200e3302d94af5482a0f9642f77a10e6ed48989a8c6aa72756469e79f4ab99a1598435fab2519db5f5c76de4789c45f99052cc9718dac41e5ca603811e16dd12268d93cbd21cb08976c4b8c9ae7f9fcd0bf8dbebbc74c498527694fe8adeb172ee6aa74f57e071539bf5be1973764fae34fb747a0573fea7c23c87a71986a879c5009e12f87b1e31c48419dfb1d660134f374e088317bd46b1429a30889026fd5bf1c1e998ea2f3da86ca12cff2df3eddc2699f14244f2e3c4a81b5133afc5d26665d187d352467ffc62b83a3761a76a4bdc9bb4e8ff687d3ea007de2123c5a765d1bb18a467f3543707d5b58322a1c8849970ea45e5a937ee80a8385728b8b2b9d0dec1e6b6533102c68d589cc63e3b47435fe973f71a0bb52259c6aa6ffaa21942f7b53aa6fce1e118e7e7b7d88c83ae8175eebf613b185b8d71c5ebc3e899fd50558adcb336a08df063e15278c5bf47668a2447a28fa046c8a3e1fbb8d20a09070eb5f402723538c044cb15c68ffbf4e2a53ce3d11a772cc416c00f0c30f021611e23bfb3cb71c935d6ee0df8141a71d229ea9271b8171bc4a9eea1f1871a304dd548e3000a39622ef8252b921dd965625f511ca0f0ff5bad004866b29f53be8dbff33755d3ebec4fc34ca5d57bc3071869f76947068685821e036ef566cdefbfcf9d55c8dffd6c22a273d7ae7415d47aa68f60f3dc0992d17b7b1f2c7e4c5f68fe39af20bfd093b12e8ff815d62abeb4e6656bcaeec579c4ae5f4080fa410878d07947138c70610831d86d3f72bbba70396c0ce457e0e15cf93becbb23f267087d11b9eba44f8db5824f92d5f8822cb4b696d70f9814a93b468eb0fa27f5cd7a79537f4ceaa9afed1b9b6c1cafcf4291918b10ab29d87bc74a4966bf67e9802aed679e7187104e8ab88f5c5505c142ee0826fe83d22827dcb6f4f4db0a3aa805ae0bf742fb3eebd49e585e31be83131c2981bdb7a85cbff72d82f3dd14fc340cb1b7419df49ce519c673bea650d44f3307b56735fda61863f6dcc35e4f40c3953b52727778db1a9f61dfd9df08b5f52dc852a5030f814006533b03fe9bd007a6643f699031846633fe7a99131a5a72e96a408ea2047488af02623fcde83c80904cb9c7a24adb3821fed5b0e7eb462d943db978bf80bb1068e662fc32d6d89d6588ddd3f0489ef8b7028c5e9e73a89bd7e2c2f7632382d025fde9685b98a2530b769d4d2a30aaeb3693d344ef257f491d63fd5a8958afcc09a3b60b56ceb9123a56dc220d8d1ae163af0211f333067af619acc8c999d29db050945334fef3219878e4ea352450289bbe096dca8a51a12239e5be86f342078fb69a01303bc78a21c22d943fecd11cf4c2335983d909eee94995885c1511510bd9c58fffa682455d56c76932a7b6dbff51f4c4e768b122fd7fcdc42a9e84afb47e03c150f948f3da66ab62bf4c71b0482b8edd11c7f132670770d06a9f9d21767c652d3866d8d822ec9196528de0c44bfbb837bb80ef54fa87a5f0de38c05d46256dcb27a5daf5fd21838248acecddc2dcbe016048bb4333e4f9d1b009db60743221a8cceac3119a1191e3b743b743feb5e5ff3e8657573970d2583bffaa6f8985d4543f302de81996bb00d709b9a80dd200e57e1279294ba663b089fe7e67ea9f9bbd35e5aa1ee817d3986d092798100fe37a4bc71ba7d83f4fe48249dd9b6f2a6f0395b047cc1a85a9229920a32f132b12a6a0ff8e592bacd2c8be0868a8673e38f2c16d5934dc40d8170f6c53ac098b262a85b0e9605d84554b3b5adf8382e456cfdf1210c6c0f97710cf598a594e0cdc357fd40c552d6c24631b0bfc78ddcb2f6bf21e0c0de41e491ed4f784a6e7ea3b1b8e0cb60befe853d783f8a654bb28bf0686fc4474904d0a2d79a9535fcf25ff3cd3edaaf8be5fd69691d9ece3310de0acad305051b7635e9a1334601f6eeedb34c3275dbc8bda9033e82bdc665650f5a3d77b06e793f33884930727cc6e5f46cc4f856dc215c30f6a91921a229e70de33cc56afdeb2298a540918f7357a66ee2a20ee818201ab1f36bbffd94d85f9784f12ee1a272e658c7a152d35043f326f5e2904f9652007e0327b48fcacc2c93679656a01c8bff7dee045d8f9cc4769502c35d7d84f4e7919a1b0e1fa13fcadee6b2988e281e9327e8a7f9b737b419c52215a20c342f0a6b7fe1401610a1fd81e0c71376e3e174af0545fec28f13b1124a334fc0ce5577996a523e6588080bd6a2ab200520362a751867f4ad4a5a6afed967f381f41f45e1124bc0e5907ddc2e750262ce1856f69b285e3038a251ebfdaf2649e72c7692843b929a055d69bc41c03ab9c0f80992d70f2c1d8f018520e98a124c6dff17f39f406bd53647df1cc2a7e721a7b5ae3a94558078e6fed0f4c724e8c87a9d3c3bc0b3a5dd4896b679c1fbb04f4001b93939ec68a7333d7f36be8b6c56a455397f0cdb869bf9cbe9a1396ae9e56fd02fbdb18b73c34f10a8ed3bea48bee935d6f13b858eec430d46be3169611dfe6c057120186aad88a1a13d0282a224520cac12926f0d45d36d295b09ff7d1a1fcedd8a9d9512eb7307435228ebf0bff9089dafa03ae5cb894803f6403e6108e20d9362f90a6017782621ba6e7ffebab70af97c7e29ce15ede579a0d7fccb8900ed04b6b7ee08e36579714ba08672432720ee183ccdd81ef7c57f03e1bcd1060ac56e5a24718b0ae574dc0c6df9a1051a7ef68ecf504fb782dab3111151f9d794b604e79677db000b33393f0f90e5c2d1339aaca4fe721f471a0eaefe92f8eece9514712461e6ecdf3e84a32d0d2e262a08bf633c776f256d98a38e91fc021dc51d956c08550cf818bfb1dd0dfd633fc2912d60b45ba4956678f7b6d178b0b2bbd4576e977b171d5f9ab4b4a0d47849351e87b6658bd76841600138c2f4b184c6c4f304da33c2e19616615051ec90cdb072cf5b8dc549a1b54034d6b9be4291db85081b9ea59775684dbf99f8039bdf8dd7f424fd151980b9b7f1ffa120178ce3d59d20652622854ca2fe3ec2ec9ed8bd30f86f36982f1ef40777f32c679ae92609959d1e81cc9aad0b77914d140c91d55f3d07c576b0f192ed80b3af191aa62651a86ba63744fc01dd44b2eb79457bccb3fce5fae137c091880f67b411f2b3da272936d5032eabc198050c5e25dcdf1a442898adb6fbec4948fbc66467c7ee1e339a96726994fe27f3b98c18a4486f1ddd1134ac732b433ff8dc7484f51e0af571ccc2b534d38b93376cbfdab9402a4ff70f17223c595fb3151475b05124b84bef58c0a3cd330ba6c197bfc32e4a55d9ff44ffe060cfbbad7fb79abb3ad2ff9ee03081e6008998b25e2d6fc1017c2bc6b27644a12c91db82ae0cf00259219a4b9349153d68c2a1225bf5f38143446a998fe8308f736bf6f376fd083d4006bda69aba96044883a22538599fde1c2693f2c3b936d8044d55e3b101b7cfaf1def9e68c23712268e2817b3a8ee32add3d2b11fcd2794744c32e17a7d1caeb6024568d069b3d403c59d3a03d4b0ee275519d3c8406603ad212670409ce6c9302ce6a5889f4c0a38c0e061265569bf056de16c15c269e6c22017d8db04cade127cdc2621c4", 0x1000}], 0x4}}, {{&(0x7f00000050c0)={0xa, 0x4e21, 0x10001, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1000}, 0x1c, &(0x7f00000055c0)=[{&(0x7f0000005100)="33780928389e38b94183de784fc10a53943812f2a0a3495028bcc64c10736f6c4c55ed59e87b5e5dc5971e799491cc40e4dc8b95f010a914ffe871b338001d200dc0b84af1763763acc57aa357b8d349aea115d004022394b7e733c70a2e8c94c2635254020c54c6", 0x68}, {&(0x7f0000005180)="0eb72f76f5475b4de939e25a0e135e21ad0218fbdf58db7079b5a3a24afabb6b8eaac7938dbf4c2ca747e008b2490e4a3ab7a74f40334db7fa99d4e0b93f094d8fbf75613fa04c0321baa4b1f6001788107b2369665ee8d048ce32e7d2eafbd6c20246e29064c3ba2a53cde1d90483daac9433158168a12bbe21f41d8def44238d48902207bf89e24806bf86e0ebfdf61d921767c6f274efd215b4abae44902db2c253e8fc16ea74f572819afe1da94acd97825ba0c5fecd1019945cd669cd053669ed85a318c0803098e057d2", 0xcd}, {&(0x7f0000005280)="296f055d8ef518b01729277c69efb8299c032f0f35434a1a18fe078aac13fee933ee471094ed7cd42077c699e358e63288a10a738c7523330d0181c4ef8288c7cdac975ff7dc47e5e69c9810cad014da4c74b48f3f80856d4bfc64af934c54dd05da3d10a8cb270ecec9a2d5fc348d52b4d346907fcfa6b9aeee0fd2e9f77f100b355a2ff744e8d0a547f2fd51d51c3d1c023fdd9f3e6336252c80349fa29918c5616b0819a38a51e2410776cf0cb256ac5db4003c16", 0xb6}, {&(0x7f0000005340)="a09c72393ca64668f518fad6dbc24f80830a9336ce125210f15b58cecaa09516435650917875bd14574bf235074faa545799d704be23172c3aac45c587871ee4e9f49827b47b49e15c8ab22d4fa035b7a7111743d64b72a667fe23cf4e", 0x5d}, {&(0x7f00000053c0)="bdcb0de7bbc260385c679843ad4c7352b736c0cb30f27639f4f89aa5ccff6f75c3c016c29f1e3243fc1076bfe1627c1c8960de8a86a0025b5f79d744d368ddd5f645ac0fb241c8134c91d59c0039cf5fc133c75c59c7f734bead87bf4ae0f813d0ec368de467545de360db53e321fbbbbb43d620dec48dc73bac4f775391d20988a20110aff6ca3f35fd1e357baedcecc8ceca2f5b0d27c28df4f8c866cf3198c34ab9bfde56ed0d54acf4348aced887328155b142893506de57589a22dee409243400934d5723cd335ac1b7", 0xcc}, {&(0x7f00000054c0)="64482b283a8c4e37bf5a3adb56f8c179fe223872dc8799cfab5f4f2dad66b24640d90682886cd70892727f9171b732e93b772df20341cd6904becfc515433def8280697a5278e874238b4564af2e2242e6d45135de757abf0dbb509960a49a10880920967f8fa4559c3182b48f80629315fce133c0443dc97161bc07cd5d848007fc73af9cc8dbdecc435cc718e71a51cd664bdfda5a42fae57ccf41743c1e006fd96ad08e7417f0f66856ec5076162ffd3d7f3258a9a5923a5f9aa32cbe38786ea2996cd1258a433ef4c43d9ebae9f9d85077621783381301009d9dc3ef759efa3b9947ee4c310bc0", 0xe9}], 0x6}}], 0x7, 0x2000c008) ioctl$KVM_RUN(r10, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r7, r10, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000003c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x7c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_ACT={0x48, 0x3, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x7c}}, 0x0) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="4500001c1234401c40"], 0x1c) 9m47.087439059s ago: executing program 2 (id=1235): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='exfat\x00', 0x800000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/sys/kernel/printk_devkmsg\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='onf', 0x3) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pipe(&(0x7f0000002680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$kcm(0x23, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0xa, &(0x7f0000000000), 0x75) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x541b, &(0x7f0000000940)={r3}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400c6615, 0x0) r5 = fsmount(r2, 0x0, 0x2) fchdir(r5) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x7, [@int={0xf, 0x0, 0x0, 0x1, 0x0, 0x28, 0x0, 0x30, 0x5}]}, {0x0, [0x30, 0x5f, 0x5f, 0x0, 0x5f]}}, &(0x7f00000000c0)=""/4, 0x2f, 0x4, 0x1, 0x4}, 0x28) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x18, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}]}, 0x18}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 9m46.897832232s ago: executing program 2 (id=1237): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/events/sched/sched_switch/trigger\x00', 0x1ff) openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)) write$FUSE_ATTR(r0, 0x0, 0xfc92) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000003c0)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20040800) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x4050) r2 = syz_io_uring_setup(0x12, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000108)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x77359400}}) io_uring_enter(r2, 0x6, 0x0, 0x0, 0x0, 0x0) 9m46.458607006s ago: executing program 2 (id=1239): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0xffff, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x40) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r6, 0x17}, 0x80, &(0x7f0000003500)=[{&(0x7f00000001c0)="27030200dc0f14000e00", 0xa}, {&(0x7f00000022c0)="ffc9ace87aade11690dd52a158e0b1c49686ce569fbf520db4cad1ed8e1b2840", 0x20}], 0x2}, 0x8000) 9m46.342376963s ago: executing program 34 (id=1239): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0xffff, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x40) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r6, 0x17}, 0x80, &(0x7f0000003500)=[{&(0x7f00000001c0)="27030200dc0f14000e00", 0xa}, {&(0x7f00000022c0)="ffc9ace87aade11690dd52a158e0b1c49686ce569fbf520db4cad1ed8e1b2840", 0x20}], 0x2}, 0x8000) 9m39.746549626s ago: executing program 3 (id=1308): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write(r0, &(0x7f00000003c0)='transport=rdma,nqn=nqn.2014-08.Qrg.nvmexpress.discovery,traddr=127.0.0:1', 0x48) 9m39.60539504s ago: executing program 3 (id=1310): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x6) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000140)) write(r1, &(0x7f0000000000)='7', 0x1) sendto$inet6(r0, 0x0, 0x0, 0x24000010, &(0x7f00000001c0)={0xa, 0x2, 0x10000, @loopback, 0x9}, 0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3fffc, 0x180, 0x2, 0x0, 0xf5, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0xfffffffffffffffd, 0xbdb], 0x200000, 0x1c6017}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f00000000c0)=0x6) 9m39.438757525s ago: executing program 3 (id=1313): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='7', 0x1) read$char_usb(r0, 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000040)=@xfs_parent={0x1c, 0x82, {0x8, 0x400, 0xfc}}, 0x121101) r1 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000200)={0x0, [[0x32, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x10000, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0xffffffff, 0x7, 0x2, 0x53ff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xf7ffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x10000, 0xffffffff}]}) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f00000004c0)={r5, 0x0, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1]}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000000)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000140)={r7}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(r1, 0x4141, 0x0) write$P9_RSTATu(r1, 0x0, 0x6e) 9m39.310993771s ago: executing program 3 (id=1314): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/events/sched/sched_switch/trigger\x00', 0x1ff) openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x12, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000108)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x77359400}}) io_uring_enter(r1, 0x6, 0x0, 0x0, 0x0, 0x0) 9m39.306930631s ago: executing program 3 (id=1315): socket$inet6(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0xc000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x40082, 0x22) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000100)={0x6}, 0x4) write(r0, &(0x7f0000000000)='3', 0x4e) setns(0xc9, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) mkdirat(r0, &(0x7f0000000180)='./proc\x00', 0x7) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000016c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00\r', @ANYRES16=r2, @ANYBLOB="01002abd7000fddbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="1d003300c0100e00080211000001080211000000505050505050730000008c108302726712ea1b02acf28009ddef7a20"], 0x4c}, 0x1, 0x0, 0x0, 0x20040080}, 0x28008004) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) lseek(r5, 0x851, 0x1) mount(&(0x7f0000000200)=@sr0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='fuseblk\x00', 0x0, &(0x7f0000000300)=',@^%\x00') ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x53, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x201, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) 9m39.212547751s ago: executing program 3 (id=1316): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x11000000, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) 9m22.526329819s ago: executing program 35 (id=1316): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x11000000, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) 8m23.694087107s ago: executing program 5 (id=1805): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab000e271f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1ff032aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f757036303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e0800000092e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9be7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa5200002fe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb0972d39e4b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e501ddddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b605908000000f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c332c34812382e57c0e0d83f3f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217b6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b4783d66661a92f174f2b88cd544b2a8e1b05ea7cf51578169fff7765f9978883b4b5983b42a35a05dabfc325ec2a2ec2f9b0882fdcf5d6f72272d2ff0d8eea60f5494ba42b4d40f144f0ab680a6f40f9094d3afb58a1efd6109894b8605c6b3b3f020c222f6446195b2274f634fbb737948a1f36ea729467e132385e9da614e4625175f4443b97a675934db90010e4b884200c3546c4d86d712c3939e11be3343f693846f509ad4c445ade5cd6d126d5694462ac5d3b527c3bd51c0a715a28d65fe94b255d02cdc1fab99b5b9c352f1b284115e4046285a824d22b6f0afbed8d6096a72fef72ebd6aae78b02fa1993e8fe2020ae93aae2bcfffa40b98549f1fb9fcefa74329909a207336d07f6f59da423ac5fa47852055d5ce6d2c56bdbbcdbf3458ba478c669f39d5272e65c90908ea2cb86d38f8ebf80a8cb85d8399b42403c94b8662af5cf1411526f177b4d476169a5d5a8c37d0d8893a77d0bd47b8a0bba60b3e26094209c889585f997ff556bcd2cc223f9c0c44de9d0fe1b5a8a815f652e79747d3e1f413fa0575d51f652d22883e143065c5ad74bdc864754ba3dad5a8fc8fc2c807d1a51dfb29"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200007000001000aac14140ce000076a49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 8m23.691318529s ago: executing program 5 (id=1806): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000100), 0xc13, &(0x7f0000000500)=ANY=[@ANYBLOB="4aabee637f2c2931c72aa2100100045bcedf03f9bed026963bf014113332ddfe381ed5ca632c0a45861939ff87b54427526a4443af2dc744a6b597fbfe87d67b7fe04e0dfc9b3eb13e3a462efadad354c802a47e4951bd226f37e99f85e0f282734e2879df9e119ed0fabc039b3a7667214735d238664a2c7dddffa94ed423ce327cb0436ff7dae2ae07cac8ad01646f0726379cf14eb51fc57da86b2ff54ea59b7f6ac77aa1", @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',blksize=0x0000000000000000,\x00']) r4 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x5, 0x4, 0xf06, 0x0, 0x84, 0x81, 0x5}, 0x9c) r5 = dup(r1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000740)='team_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}, 0x1, 0xfffc, 0x1018, 0x3, 0x9d, 0x8, 0x8}, 0xffffff04) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x5, @empty, 0xb055}}, 0xff80, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x2}, 0x9c) r6 = open(0x0, 0x109042, 0x0) fcntl$addseals(r6, 0x409, 0x8e3652a1e0b94d91) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000040)={r6, 0x1, 0x10000fffff000}) socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/tcp_fastopen\x00', 0x2, 0x0) write(r7, &(0x7f0000000100)='1027\n', 0x5) close(r7) r8 = openat(r5, 0x0, 0x436821, 0x0) write(r8, &(0x7f0000000120)='0\n\x00', 0x2) 8m23.02258912s ago: executing program 5 (id=1823): syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) r2 = open$dir(&(0x7f0000000140)='./file0\x00', 0x14001, 0x0) openat(r2, &(0x7f0000000180)='./file0\x00', 0x100, 0x100) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20008080) 8m22.946503016s ago: executing program 5 (id=1828): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x7, 0x4, 0x400, 0x208, 0x0, 0x0, 0x318, 0x318, 0x318, 0x4, 0x0, {[{{@arp={@dev={0xac, 0x14, 0x14, 0x1b}, @multicast2, 0xffffffff, 0xff000000, 0x4, 0x10, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff]}}, 0xe, 0xfffd, 0x1, 0x0, 0x6, 0x4, 'vxcan1\x00', 'bridge0\x00', {}, {0xff}, 0x0, 0x102}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d22cf9c3313ad41900b9cc958044db636bbb67a12fdcebac5f852ce42401"}}, {{@arp={@remote, @remote, 0x0, 0xffffffff, 0x2, 0xb, {@empty, {[0xff, 0xff, 0x0, 0xff]}}, {@mac=@local, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0xeaba, 0x0, 0x5, 0x59, 0x81, 0x2, 'ip6erspan0\x00', 'ip6erspan0\x00', {0xff}, {}, 0x0, 0x10}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x0, {0x800}}}}, {{@arp={@loopback, @broadcast, 0x0, 0xff000000, 0x9, 0x7, {@mac=@multicast, {[0xff, 0xff, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0x0, 0x5713f7281883830c, 0xff]}}, 0x400, 0x3, 0xc, 0x4, 0x0, 0x8, 'pim6reg1\x00', 'pimreg0\x00', {0x1fe}, {}, 0x0, 0x24}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @empty, @empty, 0x4, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x450) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x183) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x1000084, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e00000000656e642c6163638173733d616e792c63616368653f667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='-2 -3 -4 2\n', 0xb) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000300)="fe", 0xd00}], 0x1) 8m22.81996188s ago: executing program 5 (id=1832): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x6, 0x9, &(0x7f00000001c0)={{0x2b, @loopback, 0x4e20, 0x0, 'sed\x00', 0x4e, 0x7, 0x27}, {@private=0xa010101, 0x8, 0x0, 0x0, 0x401}}, 0x44) getsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000000040)) r1 = fsopen(&(0x7f00000002c0)='iso9660\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/set_event\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='foo:mod:no', 0xa) write(r2, &(0x7f0000000140)='!foo:mod:', 0x9) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r3, &(0x7f0000000640)=[{&(0x7f0000000140)='1', 0x1}], 0x1) read$FUSE(r3, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) 8m22.337599842s ago: executing program 5 (id=1841): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x402) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000080)={0x0, 0xa, 0x3, 0x0, 0x2}, 0x30, 0x0) landlock_restrict_self(r3, 0x2) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_newaddr={0x2c, 0x14, 0x601, 0x0, 0x1, {0xa, 0x40, 0x6, 0x0, 0x1}, [@IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x2c}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x28, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x0, 0x11, 0x2, @local, 0x5, "a7ed10ec212a87"}]}}}}}}}}, 0x0) 8m22.262793582s ago: executing program 36 (id=1841): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x402) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000080)={0x0, 0xa, 0x3, 0x0, 0x2}, 0x30, 0x0) landlock_restrict_self(r3, 0x2) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_newaddr={0x2c, 0x14, 0x601, 0x0, 0x1, {0xa, 0x40, 0x6, 0x0, 0x1}, [@IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x2c}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x28, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x0, 0x11, 0x2, @local, 0x5, "a7ed10ec212a87"}]}}}}}}}}, 0x0) 7m28.812832909s ago: executing program 6 (id=2732): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/webusb/landingPage\x00', 0x1, 0x0) write$binfmt_elf32(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x9, 0x5, 0x7f, 0x3, 0x2, 0x6, 0x295, 0x27c, 0x38, 0x2bb, 0x6, 0xf800, 0x20, 0x1, 0x0, 0x0, 0x1}, [{0x70000000, 0x6, 0x8, 0x9, 0x401, 0x95, 0x5}]}, 0x58) 7m28.808248849s ago: executing program 6 (id=2733): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000280)={0x2, 0x100, 0x6, {0xffff8001, 0x8, 0x4, 0x3ff}}) (fail_nth: 5) 7m28.725758771s ago: executing program 6 (id=2734): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20008040) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000080)) syz_ublk_setup_queues(r7, r6, &(0x7f0000000700)={0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, r1}, &(0x7f0000000800)=[{}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x40, 0x0, 0x6d}}, {}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x0, 0x1}}], 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0}}, &(0x7f0000000b00)) 7m28.725535851s ago: executing program 6 (id=2735): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r3, &(0x7f0000000540)='bRequestType= -', 0xf) (async) write(r3, &(0x7f0000000540)='bRequestType= -', 0xf) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x672, 0x6, 0xf3b8, 0x0, 0x1000, 0x800000400, 0x4002004c4, 0x1000, 0x1, 0x97, 0x10, 0x0, 0x3, 0x2, 0x1, 0x7], 0xeeee7ffb, 0x400}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 7m28.630140396s ago: executing program 6 (id=2736): mount$tmpfs(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000340), 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=static'}}}]}) prctl$PR_SET_SECUREBITS(0x1c, 0x15) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f00007c4000/0x3000)=nil, &(0x7f0000b24000/0x1000)=nil, 0x7ffffffa, 0x0, 0x0, 0x1, 0x0, 0x2, 0x44, 0x5a}) setresuid(0x0, 0xee00, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) 7m28.29396217s ago: executing program 6 (id=2738): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xc3, &(0x7f0000000680)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb1, 0x66, 0x0, 0xf2, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x5, 0x4000, 0x1, 0xffff, 0x0, 0x1, 0x7, @empty, @rand_addr=0x64010f00, {[@cipso={0x86, 0x77, 0xffffffffffffffff, [{0x0, 0xe, "00020000da6ee06cb8dd9452"}, {0x5, 0x9, "02270e000042eb"}, {0x2, 0x12, '\x00'/16}, {0x0, 0x9, "00de6c83d50800"}, {0x7, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a8525dc91e5c6"}, {0x6, 0xa, "0000000000800000"}, {0x7, 0x11, "73bc23f9ffffffa30900a301c84600"}, {0x1, 0xd, "c8f46976e79ea788f03d9d"}]}, @cipso={0x86, 0x6, 0x20}]}}, "e0"}}}}}, 0x0) 7m28.207642225s ago: executing program 37 (id=2738): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xc3, &(0x7f0000000680)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb1, 0x66, 0x0, 0xf2, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x5, 0x4000, 0x1, 0xffff, 0x0, 0x1, 0x7, @empty, @rand_addr=0x64010f00, {[@cipso={0x86, 0x77, 0xffffffffffffffff, [{0x0, 0xe, "00020000da6ee06cb8dd9452"}, {0x5, 0x9, "02270e000042eb"}, {0x2, 0x12, '\x00'/16}, {0x0, 0x9, "00de6c83d50800"}, {0x7, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a8525dc91e5c6"}, {0x6, 0xa, "0000000000800000"}, {0x7, 0x11, "73bc23f9ffffffa30900a301c84600"}, {0x1, 0xd, "c8f46976e79ea788f03d9d"}]}, @cipso={0x86, 0x6, 0x20}]}}, "e0"}}}}}, 0x0) 7m11.354767332s ago: executing program 7 (id=2930): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000a00), 0xe82, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000332000/0x4000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000053000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) lstat(&(0x7f0000000000)='./file0/file0\x00', 0x0) (async) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x26, 0x7fff, 0x61001838, 0x0, 0xfffc, 0x48, 0x5d2186cc, 0x0, 0x0, 0x80, 0x10001}}, 0x50) (async) r2 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x260a41, 0xb3836f6d7a15f29) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) (async) io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x7, 0xc4}) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x101040, 0x1, 0x23}, 0x18) linkat(r4, &(0x7f0000000200)='./file0/file0\x00', r2, &(0x7f0000000240)='./file0/file0\x00', 0x1400) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) 7m11.352870767s ago: executing program 7 (id=2931): arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x183) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x1000084, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e040603041fbf"], 0x7) chdir(&(0x7f0000000080)='./file0\x00') stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000300)="fe", 0x1}], 0x1) write$P9_RLERRORu(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1100007a0042000000"], 0x11) 7m11.251759794s ago: executing program 7 (id=2934): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x183) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x1000084, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}}) 7m11.056379239s ago: executing program 7 (id=2939): mount(&(0x7f0000001180)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000000)='vfat\x00', 0x208004, 0x0) (async) mount(&(0x7f0000001180)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000000)='vfat\x00', 0x208004, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x2080, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f00000011c0)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpriority(0x1, 0x0, 0x4) (async) setpriority(0x1, 0x0, 0x4) read(r1, &(0x7f0000000180)=""/4096, 0x1000) 7m10.917645261s ago: executing program 7 (id=2941): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200007000001000aac14140ce000406a49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 7m10.120993815s ago: executing program 7 (id=2948): r0 = socket$netlink(0x10, 0x3, 0x400000000000004) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x121000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$USERFAULTFD_IOC_NEW(r3, 0xaa00) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000240)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000001080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x3}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0xdc, 0x0, 0x2, 0x20, 0x0, 0x0, 0x106c, 0x80000001, 0x1008000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x7, 0x9, 0x8001], 0xfec00000, 0x3c4210}) ioctl$KVM_RUN(r5, 0xae80, 0xfffffffffffffffc) close_range(r0, 0xffffffffffffffff, 0x0) 7m10.024399696s ago: executing program 38 (id=2948): r0 = socket$netlink(0x10, 0x3, 0x400000000000004) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x121000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$USERFAULTFD_IOC_NEW(r3, 0xaa00) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000240)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000001080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x3}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0xdc, 0x0, 0x2, 0x20, 0x0, 0x0, 0x106c, 0x80000001, 0x1008000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x7, 0x9, 0x8001], 0xfec00000, 0x3c4210}) ioctl$KVM_RUN(r5, 0xae80, 0xfffffffffffffffc) close_range(r0, 0xffffffffffffffff, 0x0) 6m25.272183244s ago: executing program 8 (id=3596): r0 = socket$inet(0x2b, 0x801, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x48f, &(0x7f00000000c0)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) 6m25.154393435s ago: executing program 8 (id=3597): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000001400050c25bd7000fddbdf250a0100fe0d776cbae1399cff33f7fdfc36124eabab4eb3e5e475a82a4c6745a2de5a46a7e0e6b10e756515967bfa2cf3a1c743a8ee40567e3bc33d550bd56e59d350fbe606d6150fd5", @ANYRES32=r2, @ANYBLOB="14000100ff020000000000000000000000000001"], 0x2c}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000040) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) (async) close(0x3) (async) socket$inet6_sctp(0xa, 0x1, 0x84) syz_io_uring_setup(0x1fc7, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x3b1}, 0x0, 0x0, 0x0) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000040)={r6, 0xfffffff8, 0x4, 0x3}, &(0x7f00000000c0)=0x10) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) ioctl$VT_RESIZE(r7, 0x5609, &(0x7f0000000040)={0xfff2, 0x800, 0x3}) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) (async) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000071, 0x0, 0x8019b}]}) (async) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x4, &(0x7f00000003c0)={0xfffffffffffffc00, 0x20000009, 0x20037fffd, 0x8, 0x7fffffff, 0xffffffffffbffff7, 0x9, 0x0, 0x800001, 0x2, 0x20000007, 0x4, 0xfffffffffffff04f, 0x80, 0x200000080000000, 0x0, 0x5, 0xffffffffffff0001, 0x1, 0xff, 0x6, 0x2, 0x5, 0x3, 0x35, 0x8}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r10, 0xaf01, 0x0) (async) r11 = eventfd(0x6) ioctl$VHOST_SET_LOG_FD(r10, 0x4004af07, &(0x7f0000000240)=r11) 6m25.090782841s ago: executing program 8 (id=3598): r0 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000b40)={0x0, [[0x9ef8, 0x7, 0x0, 0x4, 0x5d11, 0x9, 0x0, 0xe], [0x5c0, 0x80000000, 0x0, 0x0, 0x3a3, 0x0, 0x0, 0x4], [0xfffffff2, 0x0, 0x0, 0xfffffffc, 0xc6df, 0x0, 0x4]], '\x00', [{}, {0x3, 0x8}, {0x1}, {0x0, 0x80000000}, {0x3, 0x4, 0x0, 0x1, 0x1}, {0x18, 0x5f}, {0xfffffffc}, {0x0, 0x6}, {0x0, 0x3}, {0x0, 0xfffffffe}, {0x0, 0x7}, {0x7fffffe, 0x3}], '\x00', 0x1000}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a0b160000000000000000020000083c00048018000180080001006f7366000c000280080001400000000420000180080001006475700014000280080002250000001408000140000000160900010073797a30000000000900020073797a32"], 0x90}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) signalfd4(r0, &(0x7f0000000040)={[0x9]}, 0x8, 0x40000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000240)={0x1}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) kexec_load(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x100, {0x0, 0x0, 0x0, 0x0, 0x8603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 6m23.08137166s ago: executing program 8 (id=3604): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x500, {0x3}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x240080c0) 6m23.080816323s ago: executing program 8 (id=3606): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000240)={0x1, 0x1, 0x1000, 0x77, &(0x7f0000000140)="72a54b66734b41e2966035447337c76f9bbf3bb0e7c36ede892e1080db2b33654a72174e30c2e2f4cb9bc9d5e7da2412417f2c4ac0033603e66d26bfcc669e8e7889fe424ea0a7e17ef6fb496c5d5992d5569966e161800eb66346a24d307657c04096f9559d9aae16c7f27deec67c422df0735d2d4e66", 0x75, 0x0, &(0x7f00000001c0)="d65d73eb925c4836f7393f16dcfcb0acfa900f73603d16c2bc66bcb71a6c2b8358bc6501dc2bd5de9eb91ce9dcc16de5efa85519e9d2144451527a21d03f9ba2cc1ab80c0e8c0a9310c7067c305b3ed69bfc329d249965084992d4c3f671045fe12be446049b8268a3e587c5d31f641bdf9a36a94d"}) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x48) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f00000002c0)=r1}, 0x20) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./proc/fs/nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{r2}, &(0x7f00000014c0), &(0x7f0000001500)=r1}, 0x20) read$FUSE(0xffffffffffffffff, &(0x7f0000001580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000035c0)={0x50, 0x0, r5, {0x7, 0x2d, 0x5, 0x0, 0x2e4a, 0xe7, 0x8, 0x0, 0x0, 0x0, 0x10, 0xd34f}}, 0x50) bind$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e24}, 0x6e) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000880)='veth0\x00', 0x6) r6 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r6, &(0x7f0000000440)={'#! ', './file0', [{0x20, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x20, '\x00'}, {0x20, 'veth0\x00'}, {}, {0x20, ']\x8d{'}, {0x20, '{'}, {0x20, '$(&'}, {0x20, 'K\xdb\xe5I\xc3f\x8f\xcf\xd4\xc0$\xf9\xea\xab\xc0\xba=#\x94\x9b\xf8y\xaf-\xa8\xf5oN\x99\xa0\xe9\x82\x19\xd1\xf2\xd7*+\xeb\xec_\x9f\x8d.\x8f5\xa9\xeeP\x06\xb9B&\xfc^\xfa{K\xd6,\xfcT?\x05\xf5%1\x1b\x9a\xd132k\xb7;\x98\xfb\xef\x1d\x1b\xfe\xca\x9e\x8c\xeb\xed\xe6\xfa\xe2\xc8,\x1e.\x1c]\t\x15\xa0\xd3\xdc\xf2h\t\xd3#\xcd\x18\x96\xa3A\b\x05\xcee\a\\\x9e\x1a\xbc\x94.\x88\xac\x134tz\xcf\xd3\xb0:\xa2\x14\xde\xc3\xa5\x8a\x93\xc4\xb75d\a\x83aQ\xefv-\x0fGM\xfa=\x82\t\xcb\xdb\x8bb\xd8\x02\xbe\x04\xa1U6)\xf7[\xa9-1\"\xc2]\xd8-\x175\xc9w\xa3/\x8d\x84j\x00\xa2q\x94\xe1!W:\x90\x9f\xa1\xee\xeb\a\x16|\b\xcfG\xe6\x01\xc6K,\x85\x15\xac\xd46\xec\xea\xff\xbc/4\xd7\x88!9\xbc\xd0>O\x1d\xac\x1b\xd4.\xbbS$\xc3\xec\xbb\xdc\xfc\aV(\xbf;\"`\x86#\xf6\x8c\x8cn\x04| >\xff'}, {0x20, '['}, {0x20, '\xb5[$+'}], 0xa, "59c08d803e"}, 0x142) ioctl$F2FS_IOC_RESIZE_FS(r4, 0x4008f510, &(0x7f0000000080)=0x8) socket$inet6(0xa, 0x6, 0x6) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="2d696f202d626c6b696f202b6e65745f7072696f202d667265657a657220ff13a9adfa4a87d12ad81d1053a32676bdc237d0b85277ba453865ff047eea3807060048b9af1eb1b2ac9fcc2ac38b2e4f36f33abb585cf8e046f80500000000000000"], 0x1e) 6m22.905953283s ago: executing program 8 (id=3609): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000003c0)={0x0, 0x0, r3, r4, 0x3, 0x1800, 0xfff7ffff, 0x6, {0xac7c, 0x1, 0x3, 0x67, 0xb4b, 0x1, 0x2, 0x10, 0x12f, 0xe154, 0x1000, 0x0, 0x6, 0x0, "fe1d00003413000018000020b42717e47f00"}}) 6m6.283563014s ago: executing program 39 (id=3609): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000003c0)={0x0, 0x0, r3, r4, 0x3, 0x1800, 0xfff7ffff, 0x6, {0xac7c, 0x1, 0x3, 0x67, 0xb4b, 0x1, 0x2, 0x10, 0x12f, 0xe154, 0x1000, 0x0, 0x6, 0x0, "fe1d00003413000018000020b42717e47f00"}}) 8.633570361s ago: executing program 0 (id=4298): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) add_key(0x0, 0x0, &(0x7f00000000c0)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045634453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f32313234303332303232313632365a303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793059301306072a8648ce3d020106082a8648ce3d0301070342000407e56b51affc", 0xea, 0xfffffffffffffffc) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000100), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f0000000140)=ANY=[], 0x88) 7.467177041s ago: executing program 1 (id=4300): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x0, 0xc9}}}, 0x6) r2 = gettid() r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r3, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000140)) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0401001c1a0007000000000000000000ff020000000000000000000000000001e0000002000000000000000000000000ffff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000000000000000000000000000000000000002000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000070000000000000000000000000000000000040000000000e80a0000000000000000000002000200700000000000000014000e0020010000000000000000000000000002"], 0x104}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r5, &(0x7f0000000c00)=[{{&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}}], 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r6, 0xffffffffffffffff, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) 7.219222619s ago: executing program 0 (id=4303): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04050400c80016"], 0x7) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e1301"], 0x16) nanosleep(&(0x7f0000000700)={0x0, 0x10000000}, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000480)={{0x800, 0x0, 0xfadf, 0x101}, 'syz1\x00', 0x12}) ioctl$CDROM_MEDIA_CHANGED(r1, 0x5325, 0x7) r3 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x18) symlinkat(&(0x7f0000000000)='.\x00', r4, &(0x7f0000000140)='./file0\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat2(r4, &(0x7f00000008c0)='./file0/../file0\x00', &(0x7f0000000380)={0x100, 0x0, 0x8}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200007000001000aac14140ce000076a49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.806370182s ago: executing program 4 (id=4304): quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000201, 0x0, 0x0) r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan3\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan3\x00'}) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000580), 0x840, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@multicast2, @in=@loopback, 0x4e24, 0x0, 0x4e20, 0x45ef, 0x2, 0x0, 0x80}, {0x7fffffff, 0x1, 0xae, 0xb, 0x4, 0x8, 0x80, 0x2}, {0xf, 0x6, 0x4, 0x10000}, 0x2, 0x6e6bbf, 0x0, 0x0, 0x2, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d6, 0x3c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0xa}, 0x3507, 0x5, 0x2, 0x2, 0x0, 0x7ff, 0x7f}}, 0xe8) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x60}, 0x20000882) close(r0) 6.465748525s ago: executing program 1 (id=4305): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 5.983946334s ago: executing program 9 (id=4306): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x1000000) 5.983802963s ago: executing program 0 (id=4307): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x120008c) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="002145000b2c000b0000400600000a0000010a000002005000500000000100000001601003e80000000b01010101", 0x2e}], 0x1, 0x0, 0x0) 5.949702724s ago: executing program 4 (id=4314): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04050400c80016"], 0x7) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e1301"], 0x16) nanosleep(&(0x7f0000000700)={0x0, 0x10000000}, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000480)={{0x800, 0x0, 0xfadf, 0x101}, 'syz1\x00', 0x12}) ioctl$CDROM_MEDIA_CHANGED(r1, 0x5325, 0x7) r3 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x18) symlinkat(&(0x7f0000000000)='.\x00', r4, &(0x7f0000000140)='./file0\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat2(r4, &(0x7f00000008c0)='./file0/../file0\x00', &(0x7f0000000380)={0x100, 0x0, 0x8}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200007000001000aac14140ce000076a49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.757378503s ago: executing program 1 (id=4308): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x109081, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x9) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0x400c, @loopback, 0xc}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000780)=ANY=[], 0x8) sendmmsg$inet6(r2, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000017c0)="5225b2", 0x3}], 0x1}}], 0x1, 0x4000800) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000ff0f00010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014000300697036746e6c30000000000000000000240012800b000100697036746e6c00001400028005000900040000000800080000000400"], 0x58}}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000001c0)={'ip6_vti0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'ip6tnl0\x00', 0x1}) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='ip6tnl0\x00'}) syz_emit_ethernet(0x82, &(0x7f0000000300)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x4c, 0x3a, 0x40, @empty, @local, {[], @dest_unreach={0x1, 0x3, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x1c, 0x4, 0x40, @empty, @empty, [], "4500001c0000000040110000ac141414e000000104d204d200080000"}}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x109081, 0x0) (async) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x9) (async) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0x400c, @loopback, 0xc}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) (async) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000780)=ANY=[], 0x8) (async) sendmmsg$inet6(r2, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000017c0)="5225b2", 0x3}], 0x1}}], 0x1, 0x4000800) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000ff0f00010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014000300697036746e6c30000000000000000000240012800b000100697036746e6c00001400028005000900040000000800080000000400"], 0x58}}, 0x0) (async) socket$inet(0x2, 0x2, 0x0) (async) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000001c0)={'ip6_vti0\x00'}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'ip6tnl0\x00', 0x1}) (async) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='ip6tnl0\x00'}) (async) syz_emit_ethernet(0x82, &(0x7f0000000300)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x4c, 0x3a, 0x40, @empty, @local, {[], @dest_unreach={0x1, 0x3, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x1c, 0x4, 0x40, @empty, @empty, [], "4500001c0000000040110000ac141414e000000104d204d200080000"}}}}}}}, 0x0) (async) 5.164802086s ago: executing program 0 (id=4309): socket$kcm(0x2, 0xa, 0x73) socket$kcm(0x2, 0xa, 0x73) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xc00}, 0x48) 4.978986483s ago: executing program 9 (id=4310): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYBLOB="08002600940900000800b700"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="0600cd00000000006c00330080200900080211000001080211"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 4.81681417s ago: executing program 1 (id=4311): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000540001002bbd70000200000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00000000e00000010000000000000000000800000015"], 0x38}, 0x1, 0x0, 0x0, 0x22004804}, 0x40080c0) write(r0, &(0x7f0000000000)='3', 0x4e) r2 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x4) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000004c0)={&(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, 0x0, 0xffffffffffffffff}) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x3535, 0x1000, 0xb, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xca58, 0x200, 0x2000, 0x10000004, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xed0a, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2, 0x0, 0x3e3, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0x2, 0x23e}}], 0x1, &(0x7f0000000340)={0x2e, 0x6, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs\x00') pread64(r12, &(0x7f00000024c0)=""/4122, 0x101a, 0x1000000000000095) socket$kcm(0x2, 0xa, 0x2) readv(r12, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000440)=""/153, 0x99}, {0x0}, {&(0x7f0000000600)=""/34, 0x22}], 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x22, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@btf_id={0x18, 0xb, 0x3, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @call={0x85, 0x0, 0x0, 0x59}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x3}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xa}, @generic={0x4, 0x8, 0xb, 0x3, 0x2}, @ringbuf_query], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x3, 0xe1, &(0x7f0000000300)=""/225, 0x41000, 0x50, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000500)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000640)=[0xffffffffffffffff, r11, r12, r13, r14, 0x1], &(0x7f0000000680)=[{0x3, 0x5, 0x9, 0x5}, {0x5, 0x3, 0xe, 0x5}, {0x0, 0x1, 0x9, 0x2}, {0x1, 0x2, 0xc, 0x1}, {0x3, 0x2, 0xf, 0x493d9a32e29feb4}], 0x10, 0x4}, 0x94) syz_emit_ethernet(0x76, &(0x7f0000000280)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x40, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x0, 0x1, @private1, @loopback, [@srh={0x2f}, @dstopts]}}}}}}}, 0x0) 4.215265899s ago: executing program 4 (id=4312): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) add_key(0x0, 0x0, &(0x7f00000000c0)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045634453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f32313234303332303232313632365a303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793059301306072a8648ce3d020106082a8648ce3d0301070342000407e56b51affc", 0xea, 0xfffffffffffffffc) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000100), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f0000000140)=ANY=[], 0x88) 4.097849302s ago: executing program 9 (id=4313): socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0x378, 0x180, 0x0, 0x2e0, 0x180, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [], @ipv6=@local, [], @ipv4=@private, [], @ipv6=@private1}}}, @common=@ttl={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x218}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @dev, 0x0, 0x0, 'syzkaller0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@local}) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@host, 0x5}, {@local}, 0x400, "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"}, 0x418, 0x7fffffff}) (async) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@host, 0x5}, {@local}, 0x400, "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"}, 0x418, 0x7fffffff}) syz_clone(0x211, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = syz_clone(0x211, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$cont(0x19, r2, 0xd, 0xf) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="360a0000000000007910480000000000610410000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) r10 = dup(r9) ioctl$KVM_GET_DEVICE_ATTR_vm(r10, 0x4018aee2, &(0x7f0000000180)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000140)={0x9, 0x9b85}}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="360a0000000000007910480000000000610410000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="360a0000000000007910480000000000610410000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 2.017544523s ago: executing program 1 (id=4315): quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000201, 0x0, 0x0) r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan3\x00'}) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000580), 0x840, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@multicast2, @in=@loopback, 0x4e24, 0x0, 0x4e20, 0x45ef, 0x2, 0x0, 0x80}, {0x7fffffff, 0x1, 0xae, 0xb, 0x4, 0x8, 0x80, 0x2}, {0xf, 0x6, 0x4, 0x10000}, 0x2, 0x6e6bbf, 0x0, 0x0, 0x2, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d6, 0x3c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0xa}, 0x3507, 0x5, 0x2, 0x2, 0x0, 0x7ff, 0x7f}}, 0xe8) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x60}, 0x20000882) close(r0) 1.981314526s ago: executing program 0 (id=4316): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) listen(r0, 0xc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) (fail_nth: 2) 1.595821562s ago: executing program 4 (id=4317): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 1.341139427s ago: executing program 9 (id=4318): syz_emit_ethernet(0x3e, &(0x7f0000000480)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x8, 0x3c, 0x0, @dev, @local, {[@fragment={0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x66}]}}}}}, 0x0) (fail_nth: 3) 1.150382437s ago: executing program 1 (id=4319): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r0, 0x80045105, &(0x7f0000000440)) r1 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=@newtaction={0xf58, 0x30, 0x25, 0x0, 0x0, {}, [{0xf44, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x4}, [{}, {}, {}, {0x0, 0x0, 0x4000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x100}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}], [{}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0xf0, 0x2, 0x0, 0x0, {{0x8}, {0x17, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x24, 0x4, [{0x1, 0xff, 0x4, 0x6}, {0x6, 0x9, 0x1, 0x3}, {0x8, 0xa, 0x9, 0xe5ad}, {0x2, 0xfd, 0x3, 0x7}]}]}, {0xa4, 0x6, "aef41341fdedc57514e9e6b7c9a7d6c6f2710911ea3f03808c1cd540f74547537bf4bd3de3af39a159c644fdacd41501de3816424920bd50948bb71277cbcb3af35a087dfca43335c1d1f7676239b2932026b5e5e0d02760eb4305f349000de9580b5ad411948e208801ff4e11df28aa70701228e871fa62bd8e1d2b3abd2494e13f35b5933263a1b9ee64b0161ef7cc4e38117db59c3db871f9eb7078642fdf"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xf58}}, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0x7c80, 0x0) io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x34]}, &(0x7f00000000c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r5, 0x5761, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000001"]) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x36, 0x36, 0x0, 0x0, 0x64]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00", 0xfffffffc}, 0x48, 0xfffffffffffffffe) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x1a8043, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x29) r8 = eventfd(0xf9) ioctl$KVM_IOEVENTFD(r7, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x50000, 0x0, r8}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r9, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r9, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r9, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r9, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000000)='htcp', 0x4) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r7, 0x4020aed2, &(0x7f0000000000)={0xffff1000, 0x10000, 0x8}) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./dev/ttyUSB0\x00', 0x2, 0x0) 970.977319ms ago: executing program 4 (id=4320): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev/mtdblock0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001"], 0xe4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014"], 0x30}}, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./dev/mtdblock0\x00', 0xc02, 0x83) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mtdblock0\x00', 0x101042, 0x1ff) read$FUSE(r1, &(0x7f00000001c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002200)={0x50, 0xfffffffffffffff5, r3, {0x7, 0x2d, 0x7, 0x802000, 0x5, 0x9, 0x6, 0xd6b, 0x0, 0x0, 0x40, 0x7ff}}, 0x50) r4 = bpf$BPF_LINK_CREATE_XDP(0x25, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4, {0x2}}, './dev\x00'}) sendfile(r2, r1, 0x0, 0x20000) 546.345646ms ago: executing program 9 (id=4321): syz_emit_ethernet(0x2e, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0xfffd, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x17c1, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) 311.503504ms ago: executing program 4 (id=4322): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04050400c80016"], 0x7) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e1301"], 0x16) nanosleep(&(0x7f0000000700)={0x0, 0x10000000}, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000480)={{0x800, 0x0, 0xfadf, 0x101}, 'syz1\x00', 0x12}) ioctl$CDROM_MEDIA_CHANGED(r1, 0x5325, 0x7) r3 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x18) symlinkat(&(0x7f0000000000)='.\x00', r4, &(0x7f0000000140)='./file0\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat2(r4, &(0x7f00000008c0)='./file0/../file0\x00', &(0x7f0000000380)={0x100, 0x0, 0x8}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200007000001000aac14140ce000076a49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 191.32727ms ago: executing program 0 (id=4323): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlinkprop={0x60, 0x6c, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x54109, 0x40}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pim6reg0\x00'}, {0x14, 0x35, 'caif0\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r2, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x152) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) write(0xca, &(0x7f0000000040)="040e", 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000920)='./sys/bus/usb/devices/usb1/bConfigurationValue\x00', 0x2, 0x0) write(r4, &(0x7f0000000960)='1', 0x1) 0s ago: executing program 9 (id=4324): setns(0xc9, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="0000000000000000000000aa444d0000040d216bd18d4b9201001f00975ffdb215ad635ac81c63788cc55834ae9ef2fafff1b31082aa864be6e54e284dce05742487"], 0x1c}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) syz_open_procfs(0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/rxrpc/idle_conn_expiry\x00', 0x1, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000f80)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0xfffd, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "fdca797c16a778cbd5c03a444dc319838d51c2af0e7bf8cd4540f41d4413b3fb", "9d523c694c7d69e3106d5c285fc4bf7a662d1634b60e9358bf291754a1f73514d857a0193b0011bee967aaa43d3a793c", "99dfc9549f5254dc03edd75fb6e5992c489f7bf51ed681bf8344b829", {"099446c31273fd7ec60f852bdbf775ec", "59036644ec92021d72dd3dc6cd23008a"}}}}}}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r2) sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r6, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) r8 = syz_open_dev$usbfs(&(0x7f0000001200), 0xb, 0x2) ioctl$USBDEVFS_DROP_PRIVILEGES(r8, 0x4004551e, &(0x7f0000000000)=0x560) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000b80)=@urb_type_iso={0x0, {0x1, 0x1}, 0x9, 0x60, 0x0, 0x0, 0x1, 0x479, 0x1, 0x7, 0x4, 0x0, [{0x8, 0x8, 0x4}]}) r9 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r9, 0x40046109, &(0x7f0000000300)={0x10, 0x2, 0x8, 0x3}) sendmsg$nl_route(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x8, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, 0x108}}, 0x20}, 0x1, 0x0, 0x0, 0x2404c111}, 0x440c4) r10 = socket(0xa, 0x5, 0x0) listen(r10, 0x100) sendmsg$inet_sctp(r10, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @loopback=0x7f00fffd}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="b2", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @loopback}], 0x18, 0x40}, 0x20048844) 0s ago: executing program 4 (id=4332): setns(0xc9, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) r1 = fsopen(&(0x7f0000000000)='nfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='127.0.0.1:/export\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/md0\x00', 0x2, 0x0) ioctl(r2, 0x40140921, &(0x7f0000000420)="01000000") fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='addr\x00', &(0x7f0000000100)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='vers\x00', &(0x7f0000000180)='4.0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): fx_le_conn_complete_evt+0x10/0x10 [ 554.937842][T19012] hci_le_conn_complete_evt+0x23c/0x3a0 [ 554.937953][T19012] ? skb_pull_data+0x15f/0x1e0 [ 554.938038][T19012] hci_le_meta_evt+0x34a/0x5f0 [ 554.938091][T19012] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 554.938227][T19012] hci_event_packet+0x51c/0xcd0 [ 554.938301][T19012] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 554.938346][T19012] ? __pfx_hci_event_packet+0x10/0x10 [ 554.938508][T19012] ? lockdep_hardirqs_on+0x7d/0x110 [ 554.938634][T19012] hci_rx_work+0x451/0xfc0 [ 554.938838][T19012] process_one_work+0xac7/0x1b10 [ 554.939091][T19012] ? __pfx_process_one_work+0x10/0x10 [ 554.939150][T19012] ? lock_acquire+0x1d1/0x380 [ 554.939387][T19012] ? __pfx_hci_rx_work+0x10/0x10 [ 554.939485][T19012] worker_thread+0x5ef/0xe50 [ 554.939711][T19012] ? __pfx_worker_thread+0x10/0x10 [ 554.939823][T19012] ? kthread+0x13a/0x450 [ 554.939865][T19012] ? __pfx_worker_thread+0x10/0x10 [ 554.939908][T19012] kthread+0x373/0x450 [ 554.939972][T19012] ? __pfx_kthread+0x10/0x10 [ 554.940118][T19012] ret_from_fork+0x730/0xd60 [ 554.940314][T19012] ? __pfx_ret_from_fork+0x10/0x10 [ 554.940409][T19012] ? __switch_to+0x800/0x10f0 [ 554.940496][T19012] ? __pfx_kthread+0x10/0x10 [ 554.940611][T19012] ret_from_fork_asm+0x1a/0x30 [ 554.940911][T19012] [ 554.941058][T19012] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 554.941237][T19012] Bluetooth: hci1: failed to register connection device [ 555.619140][T19038] binder: Bad value for 'max' [ 555.621245][T19037] binder: Bad value for 'max' [ 555.623367][T19037] netlink: 5516 bytes leftover after parsing attributes in process `syz.9.3934'. [ 555.637750][T19037] FAULT_INJECTION: forcing a failure. [ 555.637750][T19037] name fail_futex, interval 1, probability 0, space 0, times 0 [ 555.637779][T19037] CPU: 3 UID: 0 PID: 19037 Comm: syz.9.3934 Tainted: G L syzkaller #0 PREEMPT(full) [ 555.637799][T19037] Tainted: [L]=SOFTLOCKUP [ 555.637807][T19037] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 555.637817][T19037] Call Trace: [ 555.637833][T19037] [ 555.637850][T19037] dump_stack_lvl+0x100/0x190 [ 555.637952][T19037] should_fail_ex.cold+0x5/0xa [ 555.638086][T19037] get_futex_key+0x1d0/0x14f0 [ 555.638179][T19037] ? __pfx_get_futex_key+0x10/0x10 [ 555.638415][T19037] futex_wake+0xf4/0x5e0 [ 555.638572][T19037] ? __pfx_futex_wake+0x10/0x10 [ 555.638648][T19037] ? trace_event_buffer_commit+0x20a/0xa80 [ 555.638898][T19037] do_futex+0x2b2/0x440 [ 555.638968][T19037] ? __pfx_do_futex+0x10/0x10 [ 555.639022][T19037] ? lock_acquire+0x1d1/0x380 [ 555.639061][T19037] ? fd_install+0xa2/0x580 [ 555.639222][T19037] __x64_sys_futex+0x34f/0x4d0 [ 555.639309][T19037] ? __pfx___x64_sys_futex+0x10/0x10 [ 555.639547][T19037] do_syscall_64+0x123/0x790 [ 555.639652][T19037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.639693][T19037] RIP: 0033:0x7f782299e159 [ 555.639758][T19037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 555.639779][T19037] RSP: 002b:00007f78238370e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 555.639806][T19037] RAX: ffffffffffffffda RBX: 00007f7822c25fa8 RCX: 00007f782299e159 [ 555.639816][T19037] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7822c25fac [ 555.639826][T19037] RBP: 00007f7822c25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 555.639835][T19037] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 555.639844][T19037] R13: 00007f7822c26038 R14: 00007ffc4a32b370 R15: 00007ffc4a32b458 [ 555.640105][T19037] [ 555.800720][ T44] audit: type=1400 audit(1789526709.787:33392): avc: denied { write } for pid=19035 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 556.168265][ T5810] team0 (unregistering): Port device team_slave_1 removed [ 556.368264][ T5810] team0 (unregistering): Port device team_slave_0 removed [ 556.610886][T19012] Bluetooth: hci4: command 0x2016 tx timeout [ 556.866074][ T5091] Bluetooth: hci1: command 0x2016 tx timeout [ 557.126520][ T44] audit: type=1400 audit(1789526711.031:33393): avc: denied { write } for pid=19040 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 557.168322][T19038] netlink: 'syz.9.3934': attribute type 4 has an invalid length. [ 557.169124][T19037] netlink: 'syz.9.3934': attribute type 4 has an invalid length. [ 557.860054][ T44] audit: type=1400 audit(1789526711.714:33394): avc: denied { write } for pid=19044 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 557.902762][ C3] net_ratelimit: 17 callbacks suppressed [ 559.099299][ T5091] Bluetooth: hci1: command 0x2016 tx timeout [ 559.921046][ T44] audit: type=1400 audit(1789526713.642:33395): avc: denied { write } for pid=19047 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 559.921579][ T44] audit: type=1400 audit(1789526713.642:33396): avc: denied { write } for pid=19053 comm="syz.4.3938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 560.327223][T19055] veth1_to_bond: entered allmulticast mode [ 560.357900][T19060] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(4) [ 560.357924][T19060] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 560.358233][T19060] vhci_hcd vhci_hcd.0: Device attached [ 560.672085][ T9109] usb 55-1: new low-speed USB device number 2 using vhci_hcd [ 560.684404][ T30] usb 14-1: new low-speed USB device number 13 using dummy_hcd [ 560.731006][ T44] audit: type=1400 audit(1789526714.410:33397): avc: denied { write } for pid=19067 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 560.879738][T19055] veth1_to_bond: left allmulticast mode [ 560.933264][ T30] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 560.958253][ T30] usb 14-1: config 0 has no interfaces? [ 560.960598][ T30] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.070097][ T30] usb 14-1: config 0 descriptor?? [ 561.314478][ T5091] Bluetooth: hci1: command 0x2016 tx timeout [ 561.599044][T18834] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.603303][T18834] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.604118][T18834] bridge_slave_0: entered allmulticast mode [ 561.679999][ T5824] usb 14-1: USB disconnect, device number 13 [ 561.700021][T18834] bridge_slave_0: entered promiscuous mode [ 561.702206][T19063] vhci_hcd: connection reset by peer [ 561.703826][ T5810] vhci_hcd vhci_hcd.9: stop threads [ 561.703857][ T5810] vhci_hcd vhci_hcd.9: release socket [ 561.705193][ T5810] vhci_hcd vhci_hcd.9: disconnect device [ 561.795176][T18834] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.796103][T18834] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.801540][T18834] bridge_slave_1: entered allmulticast mode [ 561.857780][T18834] bridge_slave_1: entered promiscuous mode [ 562.186429][ T44] audit: type=1400 audit(1789526715.766:33398): avc: denied { write } for pid=19074 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 562.891980][T19093] FAULT_INJECTION: forcing a failure. [ 562.891980][T19093] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 562.892019][T19093] CPU: 1 UID: 0 PID: 19093 Comm: syz.9.3943 Tainted: G L syzkaller #0 PREEMPT(full) [ 562.892041][T19093] Tainted: [L]=SOFTLOCKUP [ 562.892051][T19093] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 562.892065][T19093] Call Trace: [ 562.892086][T19093] [ 562.892110][T19093] dump_stack_lvl+0x100/0x190 [ 562.892259][T19093] should_fail_ex.cold+0x5/0xa [ 562.892363][T19093] _copy_from_user+0x2e/0xd0 [ 562.892437][T19093] copy_msghdr_from_user+0x9f/0x4c0 [ 562.892539][T19093] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 562.892705][T19093] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 562.892869][T19093] ___sys_sendmsg+0x106/0x1e0 [ 562.892975][T19093] ? __pfx____sys_sendmsg+0x10/0x10 [ 562.893028][T19093] ? trace_event_raw_event_lock+0x1e2/0x2b0 [ 562.893260][T19093] ? __fget_files+0x34/0x3d0 [ 562.893660][T19093] __sys_sendmmsg+0x20c/0x440 [ 562.893793][T19093] ? __pfx___sys_sendmmsg+0x10/0x10 [ 562.893825][T19093] ? ksys_write+0x190/0x250 [ 562.894261][T19093] ? fput+0x7c/0x100 [ 562.894335][T19093] ? ksys_write+0x1ac/0x250 [ 562.894366][T19093] ? __pfx_ksys_write+0x10/0x10 [ 562.894498][T19093] __x64_sys_sendmmsg+0x9c/0x100 [ 562.894558][T19093] ? lockdep_hardirqs_on+0x7d/0x110 [ 562.894636][T19093] do_syscall_64+0x123/0x790 [ 562.894701][T19093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.894733][T19093] RIP: 0033:0x7f782299e159 [ 562.894782][T19093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 562.894801][T19093] RSP: 002b:00007f7823816028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 562.894826][T19093] RAX: ffffffffffffffda RBX: 00007f7822c26090 RCX: 00007f782299e159 [ 562.894840][T19093] RDX: 0000000000000001 RSI: 00002000000071c0 RDI: 0000000000000003 [ 562.894855][T19093] RBP: 00007f7823816090 R08: 0000000000000000 R09: 0000000000000000 [ 562.894869][T19093] R10: 0000000000004004 R11: 0000000000000246 R12: 0000000000000001 [ 562.894883][T19093] R13: 00007f7822c26128 R14: 00007f7822c26090 R15: 00007ffc4a32b458 [ 562.895160][T19093] [ 563.075776][T18834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 563.174262][T18834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 563.278197][ C0] net_ratelimit: 160 callbacks suppressed [ 563.537044][ T44] audit: type=1400 audit(1789526717.039:33399): avc: denied { write } for pid=19094 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 563.964578][ T5738] Bluetooth: hci4: command 0x2016 tx timeout [ 564.051918][T18834] team0: Port device team_slave_0 added [ 564.103619][T18834] team0: Port device team_slave_1 added [ 564.572668][T19100] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 564.992336][T18834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 564.992348][T18834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.992365][T18834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 565.029213][T18834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 565.029231][T18834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 565.029252][T18834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 565.141971][T19104] md/raid10:md0: not clean -- starting background reconstruction [ 565.141988][T19104] md/raid10:md0: active with 1 out of 2 devices [ 565.217157][T19104] md0: detected capacity change from 0 to 2048 [ 565.391659][T19111] FAULT_INJECTION: forcing a failure. [ 565.391659][T19111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 565.391704][T19111] CPU: 0 UID: 0 PID: 19111 Comm: syz.0.3947 Tainted: G L syzkaller #0 PREEMPT(full) [ 565.391727][T19111] Tainted: [L]=SOFTLOCKUP [ 565.391739][T19111] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 565.391754][T19111] Call Trace: [ 565.391783][T19111] [ 565.391811][T19111] dump_stack_lvl+0x100/0x190 [ 565.391871][T19111] should_fail_ex.cold+0x5/0xa [ 565.391988][T19111] _copy_from_user+0x2e/0xd0 [ 565.392092][T19111] copy_from_sockptr_offset.constprop.0+0x12c/0x150 [ 565.392138][T19111] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 565.392348][T19111] do_sock_getsockopt+0x2d0/0x6e0 [ 565.392485][T19111] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 565.392658][T19111] ? __fget_files+0x34/0x3d0 [ 565.392758][T19111] ? find_held_lock+0x2b/0x80 [ 565.392926][T19111] ? __fget_files+0x21f/0x3d0 [ 565.393087][T19111] __sys_getsockopt+0x148/0x260 [ 565.393308][T19111] ? __x64_sys_getsockopt+0xbd/0x160 [ 565.393336][T19111] __x64_sys_getsockopt+0xbd/0x160 [ 565.393364][T19111] ? do_syscall_64+0xae/0x790 [ 565.393403][T19111] ? lockdep_hardirqs_on+0x7d/0x110 [ 565.393455][T19111] do_syscall_64+0x123/0x790 [ 565.393582][T19111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.393626][T19111] RIP: 0033:0x7fb09039e159 [ 565.393653][T19111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 565.393668][T19111] RSP: 002b:00007fb0912c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 565.393686][T19111] RAX: ffffffffffffffda RBX: 00007fb090625fa0 RCX: 00007fb09039e159 [ 565.393697][T19111] RDX: 0000000000000001 RSI: 0000000000000006 RDI: 0000000000000004 [ 565.393708][T19111] RBP: 00007fb0912c6090 R08: 0000200000001100 R09: 0000000000000000 [ 565.393718][T19111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 565.393729][T19111] R13: 00007fb090626038 R14: 00007fb090625fa0 R15: 00007fff77eca5d8 [ 565.393995][T19111] [ 565.409187][T19109] md: resync of RAID array md0 [ 565.440957][ T44] audit: type=1400 audit(1789526718.808:33400): avc: denied { write } for pid=19101 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 566.053645][T19109] md: md0: resync done. [ 566.174395][ T9109] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 566.185135][ T5738] Bluetooth: hci4: command 0x2016 tx timeout [ 566.911921][ T44] audit: type=1400 audit(1789526720.193:33401): avc: denied { write } for pid=19119 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 567.178722][T18834] hsr_slave_0: entered promiscuous mode [ 567.186499][T18834] hsr_slave_1: entered promiscuous mode [ 568.565375][ T50] libceph: connect (1)[c::]:6789 error -101 [ 568.568780][ T50] libceph: mon0 (1)[c::]:6789 connect error [ 568.570952][T19128] ceph: No mds server is up or the cluster is laggy [ 568.572446][ T50] libceph: connect (1)[c::]:6789 error -101 [ 568.576464][ T50] libceph: mon0 (1)[c::]:6789 connect error [ 568.920169][ T5091] Bluetooth: hci1: command 0x2016 tx timeout [ 568.932051][ T1162] net_ratelimit: 69 callbacks suppressed [ 569.117916][ T44] audit: type=1400 audit(1789526722.252:33402): avc: denied { write } for pid=19126 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 570.241837][ T44] audit: type=1400 audit(1789526723.309:33403): avc: denied { write } for pid=19145 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 570.346436][ T5738] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 571.142613][ T5738] Bluetooth: hci1: command 0x2016 tx timeout [ 572.525078][T19160] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(4) [ 572.525099][T19160] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 572.537429][T19160] vhci_hcd vhci_hcd.0: Device attached [ 572.906003][ T5881] usb 55-1: new low-speed USB device number 3 using vhci_hcd [ 572.906770][T13448] usb 14-1: new low-speed USB device number 14 using dummy_hcd [ 573.113948][T13448] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 573.118036][T13448] usb 14-1: config 0 has no interfaces? [ 573.118195][T13448] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.233945][ T44] audit: type=1400 audit(1789526726.107:33404): avc: denied { write } for pid=19153 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 573.368956][T13448] usb 14-1: config 0 descriptor?? [ 573.618822][T19161] usbip_core: unknown command [ 573.618840][T19161] vhci_hcd: unknown pdu 83886080 [ 573.618874][T19161] usbip_core: unknown command [ 573.620402][ T8127] vhci_hcd vhci_hcd.9: stop threads [ 573.620420][ T8127] vhci_hcd vhci_hcd.9: release socket [ 573.620626][ T8127] vhci_hcd vhci_hcd.9: disconnect device [ 573.645367][T13448] usb 14-1: USB disconnect, device number 14 [ 573.824011][T19169] FAULT_INJECTION: forcing a failure. [ 573.824011][T19169] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 573.824039][T19169] CPU: 0 UID: 0 PID: 19169 Comm: syz.4.3963 Tainted: G L syzkaller #0 PREEMPT(full) [ 573.824057][T19169] Tainted: [L]=SOFTLOCKUP [ 573.824065][T19169] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 573.824076][T19169] Call Trace: [ 573.824091][T19169] [ 573.824125][T19169] dump_stack_lvl+0x100/0x190 [ 573.824226][T19169] should_fail_ex.cold+0x5/0xa [ 573.824411][T19169] _copy_from_user+0x2e/0xd0 [ 573.824496][T19169] do_sys_poll+0x345/0xe90 [ 573.824571][T19169] ? check_buffer+0x13f/0x820 [ 573.824676][T19169] ? __pfx_trace_clock_local+0x10/0x10 [ 573.824780][T19169] ? __pfx_do_sys_poll+0x10/0x10 [ 573.824860][T19169] ? __pfx_trace_clock_local+0x10/0x10 [ 573.825301][T19169] ? rb_commit+0x129/0x9d0 [ 573.826359][T19169] ? __mutex_unlock_slowpath+0x35d/0x930 [ 573.826388][T19169] ? set_user_sigmask+0x1e1/0x270 [ 573.826456][T19169] ? __pfx_set_user_sigmask+0x10/0x10 [ 573.826529][T19169] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 573.826625][T19169] ? __fget_files+0x21f/0x3d0 [ 573.826751][T19169] __x64_sys_ppoll+0x2b5/0x350 [ 573.826828][T19169] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 573.826857][T19169] ? ksys_write+0x1ac/0x250 [ 573.826909][T19169] ? __pfx_ksys_write+0x10/0x10 [ 573.827096][T19169] do_syscall_64+0x123/0x790 [ 573.827201][T19169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.827243][T19169] RIP: 0033:0x7f0fd8b9e159 [ 573.827309][T19169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 573.827328][T19169] RSP: 002b:00007f0fd9b0a028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 573.827352][T19169] RAX: ffffffffffffffda RBX: 00007f0fd8e25fa0 RCX: 00007f0fd8b9e159 [ 573.827362][T19169] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 573.827371][T19169] RBP: 00007f0fd9b0a090 R08: 0000000000000000 R09: 0000000000000000 [ 573.827380][T19169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 573.827395][T19169] R13: 00007f0fd8e26038 R14: 00007f0fd8e25fa0 R15: 00007ffd808e86e8 [ 573.827720][T19169] [ 574.312004][T11812] net_ratelimit: 30 callbacks suppressed [ 574.669305][ T44] audit: type=1400 audit(1789526727.436:33405): avc: denied { write } for pid=19170 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 577.725295][ T5091] Bluetooth: hci4: command 0x2016 tx timeout [ 578.057112][T18834] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 578.137975][T18834] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 578.147781][T18834] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 578.201537][T18834] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 578.212393][T18834] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 578.303389][T18834] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 578.328734][T18834] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 578.433616][T18834] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 578.453735][ T5881] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 579.012824][T19180] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3966'. [ 579.731990][T19203] overlayfs: failed lookup in lower (newroot/304, name='file2', err=-40): overlapping layers [ 579.765377][ T5091] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 579.877476][T11823] net_ratelimit: 42 callbacks suppressed [ 579.949149][ T5091] Bluetooth: hci4: command 0x2016 tx timeout [ 581.175579][ T44] audit: type=1400 audit(1789526733.537:33406): avc: denied { write } for pid=19205 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 582.308189][ T5091] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 582.324760][ T5091] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 582.331458][ T5091] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 582.344309][ T5091] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 582.356330][ T5091] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 582.493453][ T44] audit: type=1400 audit(1789526734.773:33407): avc: denied { write } for pid=19214 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 582.563175][T19219] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 582.563200][T19219] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 582.567491][T19219] vhci_hcd vhci_hcd.0: Device attached [ 582.589291][T19220] usbip_core: unknown command [ 582.589305][T19220] vhci_hcd: unknown pdu 67122804 [ 582.589333][T19220] usbip_core: unknown command [ 582.591054][ T8127] vhci_hcd vhci_hcd.0: stop threads [ 582.591073][ T8127] vhci_hcd vhci_hcd.0: release socket [ 582.591108][ T8127] vhci_hcd vhci_hcd.0: disconnect device [ 584.576501][ T5091] Bluetooth: hci3: command tx timeout [ 584.877127][T10310] usb 9-1: new full-speed USB device number 45 using dummy_hcd ** 693 printk messages dropped ** [ 585.252330][T15064] net_ratelimit: 24 callbacks suppressed [ 585.590657][ T5091] Bluetooth: hci1: command 0x2016 tx timeout [ 586.238137][T10310] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 586.242226][T10310] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 586.242312][T10310] usb 9-1: can't read configurations, error -71 [ 586.568571][T19257] netlink: 4136 bytes leftover after parsing attributes in process `syz.0.3982'. [ 586.789187][ T5738] Bluetooth: hci3: command tx timeout [ 587.813867][ T5738] Bluetooth: hci1: command 0x2016 tx timeout [ 588.555869][T19266] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 588.555889][T19266] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 588.587349][T19266] vhci_hcd vhci_hcd.0: Device attached [ 588.828175][ T50] usb 45-1: new low-speed USB device number 3 using vhci_hcd [ 588.924572][T10310] usb 9-1: new low-speed USB device number 47 using dummy_hcd [ 589.010012][ T5091] Bluetooth: hci3: command tx timeout [ 589.124324][T10310] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 589.130383][T10310] usb 9-1: config 0 has no interfaces? [ 589.130524][T10310] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.240946][T10310] usb 9-1: config 0 descriptor?? [ 589.546235][T19269] usbip_core: unknown command [ 589.546246][T19269] vhci_hcd: unknown pdu 83900020 [ 589.546275][T19269] usbip_core: unknown command [ 589.548566][ T13] vhci_hcd vhci_hcd.4: stop threads [ 589.548653][ T13] vhci_hcd vhci_hcd.4: release socket [ 589.548990][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 589.553830][T10310] usb 9-1: USB disconnect, device number 47 [ 590.818284][ T1162] net_ratelimit: 61 callbacks suppressed [ 591.234754][ T5091] Bluetooth: hci3: command tx timeout [ 592.807929][T18290] bridge_slave_1: left allmulticast mode [ 592.807961][T18290] bridge_slave_1: left promiscuous mode [ 592.809261][T18290] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.813511][T19299] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 592.916398][T18290] bridge_slave_0: left allmulticast mode [ 592.916435][T18290] bridge_slave_0: left promiscuous mode [ 592.917740][T18290] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.718992][T19311] FAULT_INJECTION: forcing a failure. [ 593.718992][T19311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 593.719039][T19311] CPU: 2 UID: 0 PID: 19311 Comm: syz.9.3997 Tainted: G L syzkaller #0 PREEMPT(full) [ 593.719068][T19311] Tainted: [L]=SOFTLOCKUP [ 593.719081][T19311] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 593.719097][T19311] Call Trace: [ 593.719127][T19311] [ 593.719160][T19311] dump_stack_lvl+0x100/0x190 [ 593.719325][T19311] should_fail_ex.cold+0x5/0xa [ 593.719422][T19311] _copy_from_user+0x2e/0xd0 [ 593.719526][T19311] __do_sys_add_key+0x278/0x460 [ 593.719713][T19311] ? __pfx___do_sys_add_key+0x10/0x10 [ 593.719755][T19311] ? ksys_write+0x1ac/0x250 [ 593.720057][T19311] do_syscall_64+0x123/0x790 [ 593.720180][T19311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.720215][T19311] RIP: 0033:0x7f782299e159 [ 593.720271][T19311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 593.720292][T19311] RSP: 002b:00007f7823837028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 593.720322][T19311] RAX: ffffffffffffffda RBX: 00007f7822c25fa0 RCX: 00007f782299e159 [ 593.720339][T19311] RDX: 0000200000000400 RSI: 0000000000000000 RDI: 0000200000000000 [ 593.720356][T19311] RBP: 00007f7823837090 R08: 0000000026183d39 R09: 0000000000000000 [ 593.720374][T19311] R10: 00000000000001d8 R11: 0000000000000246 R12: 0000000000000001 [ 593.720391][T19311] R13: 00007f7822c26038 R14: 00007f7822c25fa0 R15: 00007ffc4a32b458 [ 593.720746][T19311] [ 594.302024][ T50] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 595.216636][T19321] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 595.216658][T19321] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 595.227185][T19321] vhci_hcd vhci_hcd.0: Device attached [ 595.510420][T18290] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 595.586243][ T50] usb 45-1: new low-speed USB device number 4 using vhci_hcd [ 595.603473][T18290] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 595.613472][T10310] usb 9-1: new low-speed USB device number 48 using dummy_hcd [ 595.684703][T18290] bond0 (unregistering): Released all slaves [ 595.806763][T10310] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 595.822705][T10310] usb 9-1: config 0 has no interfaces? [ 595.822870][T10310] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.927585][T10310] usb 9-1: config 0 descriptor?? [ 596.197789][T19325] usbip_core: unknown command [ 596.197800][T19325] vhci_hcd: unknown pdu 83900020 [ 596.197822][T19325] usbip_core: unknown command [ 596.199150][ T12] vhci_hcd vhci_hcd.4: stop threads [ 596.199188][ T12] vhci_hcd vhci_hcd.4: release socket [ 596.199410][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 596.230247][T10258] usb 9-1: USB disconnect, device number 48 [ 596.276453][T11823] net_ratelimit: 17 callbacks suppressed [ 596.667252][T19215] wlan0 speed is unknown, defaulting to 1000 [ 598.481028][ T44] audit: type=1400 audit(1789526749.736:33408): avc: denied { write } for pid=19345 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 599.441523][ T44] audit: type=1400 audit(1789526750.634:33409): avc: denied { write } for pid=19361 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 600.485100][T19370] FAULT_INJECTION: forcing a failure. [ 600.485100][T19370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 600.485149][T19370] CPU: 0 UID: 0 PID: 19370 Comm: syz.4.4008 Tainted: G L syzkaller #0 PREEMPT(full) [ 600.485172][T19370] Tainted: [L]=SOFTLOCKUP [ 600.485183][T19370] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 600.485197][T19370] Call Trace: [ 600.485223][T19370] [ 600.485251][T19370] dump_stack_lvl+0x100/0x190 [ 600.485357][T19370] should_fail_ex.cold+0x5/0xa [ 600.485448][T19370] _copy_from_iter+0x1f4/0x1690 [ 600.485587][T19370] ? __asan_memset+0x23/0x50 [ 600.485654][T19370] ? __pfx__copy_from_iter+0x10/0x10 [ 600.485690][T19370] ? __pfx___alloc_skb+0x10/0x10 [ 600.485716][T19370] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 600.485770][T19370] ? sock_has_perm+0x25a/0x2f0 [ 600.485844][T19370] ? __pfx_sock_has_perm+0x10/0x10 [ 600.486010][T19370] netlink_sendmsg+0x808/0xda0 [ 600.486184][T19370] ? __pfx_netlink_sendmsg+0x10/0x10 [ 600.486296][T19370] ? selinux_socket_sendmsg+0x198/0x2f0 [ 600.486442][T19370] ____sys_sendmsg+0xa4d/0xbe0 [ 600.486489][T19370] ? __pfx_netlink_sendmsg+0x10/0x10 [ 600.486592][T19370] ? __pfx_____sys_sendmsg+0x10/0x10 [ 600.486735][T19370] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 600.486903][T19370] ___sys_sendmsg+0x190/0x1e0 [ 600.487000][T19370] ? __pfx____sys_sendmsg+0x10/0x10 [ 600.487065][T19370] ? trace_event_raw_event_lock+0x1e2/0x2b0 [ 600.487338][T19370] ? find_held_lock+0x2b/0x80 [ 600.487751][T19370] __sys_sendmsg+0x160/0x210 [ 600.487807][T19370] ? __pfx___sys_sendmsg+0x10/0x10 [ 600.488168][T19370] do_syscall_64+0x123/0x790 [ 600.488308][T19370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.488355][T19370] RIP: 0033:0x7f0fd8b9e159 [ 600.488384][T19370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 600.488400][T19370] RSP: 002b:00007f0fd9b0a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 600.488419][T19370] RAX: ffffffffffffffda RBX: 00007f0fd8e25fa0 RCX: 00007f0fd8b9e159 [ 600.488431][T19370] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 600.488442][T19370] RBP: 00007f0fd9b0a090 R08: 0000000000000000 R09: 0000000000000000 [ 600.488454][T19370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 600.488465][T19370] R13: 00007f0fd8e26038 R14: 00007f0fd8e25fa0 R15: 00007ffd808e86e8 [ 600.488741][T19370] [ 601.124814][ T50] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 601.662331][ C3] net_ratelimit: 21 callbacks suppressed [ 601.775572][T18290] hsr_slave_0: left promiscuous mode [ 601.813913][T18290] hsr_slave_1: left promiscuous mode [ 601.872472][T18290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 601.883583][T18290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 603.173401][T19390] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 603.173422][T19390] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 603.177184][T19390] vhci_hcd vhci_hcd.0: Device attached [ 603.199006][T19392] usbip_core: unknown command [ 603.199018][T19392] vhci_hcd: unknown pdu 67122804 [ 603.199045][T19392] usbip_core: unknown command [ 603.205189][ T13] vhci_hcd vhci_hcd.0: stop threads [ 603.205202][ T13] vhci_hcd vhci_hcd.0: release socket [ 603.205243][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 603.648415][ T5091] Bluetooth: hci4: command 0x2016 tx timeout [ 605.817708][T18290] team0 (unregistering): Port device team_slave_1 removed [ 605.851382][ T5738] Bluetooth: hci4: command 0x2016 tx timeout [ 605.940640][T18290] team0 (unregistering): Port device team_slave_0 removed [ 607.220055][T11816] net_ratelimit: 24 callbacks suppressed [ 607.274668][ T5444] 8021q: adding VLAN 0 to HW filter on device eth22 [ 607.362288][T19403] mac80211_hwsim hwsim34 syzkaller0: entered promiscuous mode [ 607.362682][T19403] mac80211_hwsim hwsim34 syzkaller0: entered allmulticast mode [ 607.449156][T19406] tipc: Enabled bearer , priority 0 [ 607.621947][T19365] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 607.621972][T19365] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 608.264722][T19365] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 608.264749][T19365] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 608.735126][T19365] tipc: Resetting bearer [ 609.028985][T19365] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 609.029008][T19365] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 610.932920][ T44] audit: type=1400 audit(1789526761.387:33410): avc: denied { write } for pid=19429 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 611.954199][ T44] audit: type=1400 audit(1789526762.332:33411): avc: denied { write } for pid=19442 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 612.218931][T19215] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.220195][T19215] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.220893][T19215] bridge_slave_0: entered allmulticast mode [ 612.285335][T19215] bridge_slave_0: entered promiscuous mode [ 612.337993][T19215] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.338820][T19215] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.339531][T19215] bridge_slave_1: entered allmulticast mode [ 612.376302][T19215] bridge_slave_1: entered promiscuous mode [ 612.574843][T10310] usb 9-1: new full-speed USB device number 49 using dummy_hcd [ 612.585356][T19449] vim2m vim2m.0: vidioc_s_fmt queue busy [ 612.823672][T10310] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 612.830800][T10310] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 612.830892][T10310] usb 9-1: can't read configurations, error -71 [ 612.871748][ C3] net_ratelimit: 29 callbacks suppressed [ 612.988409][T19215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 613.012353][ T5444] 8021q: adding VLAN 0 to HW filter on device eth23 [ 613.076380][T19215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 613.772938][T19215] team0: Port device team_slave_0 added [ 613.841280][T19215] team0: Port device team_slave_1 added [ 614.909441][T19469] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(4) [ 614.909462][T19469] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 614.916017][T19469] vhci_hcd vhci_hcd.0: Device attached [ 614.962191][T19215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 614.962206][T19215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 614.962227][T19215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 615.027005][T19215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 615.027018][T19215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 615.027038][T19215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 615.201558][T18974] usb 55-1: new low-speed USB device number 4 using vhci_hcd [ 615.214295][T10258] usb 14-1: new low-speed USB device number 15 using dummy_hcd [ 615.426281][T10258] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 615.432627][T10258] usb 14-1: config 0 has no interfaces? [ 615.432738][T10258] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.487521][T10258] usb 14-1: config 0 descriptor?? [ 615.738123][T19470] usbip_core: unknown command [ 615.738188][T19470] vhci_hcd: unknown pdu 83900020 [ 615.738213][T19470] usbip_core: unknown command [ 615.742876][T18290] vhci_hcd vhci_hcd.9: stop threads [ 615.742903][T18290] vhci_hcd vhci_hcd.9: release socket [ 615.743352][T18290] vhci_hcd vhci_hcd.9: disconnect device [ 615.780163][ T2191] usb 14-1: USB disconnect, device number 15 [ 616.193076][T19215] hsr_slave_0: entered promiscuous mode [ 616.219373][T19215] hsr_slave_1: entered promiscuous mode [ 616.310689][ T44] audit: type=1400 audit(1789526766.403:33412): avc: denied { write } for pid=19475 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 617.349814][ T44] audit: type=1400 audit(1789526767.394:33413): avc: denied { write } for pid=19488 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 618.589132][ C3] net_ratelimit: 31 callbacks suppressed [ 618.779664][ T5444] 8021q: adding VLAN 0 to HW filter on device eth24 [ 619.566311][T19490] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 620.372055][ T44] audit: type=1400 audit(1789526770.211:33414): avc: denied { write } for pid=19509 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 620.476507][T19516] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 620.476527][T19516] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 620.476845][T19516] vhci_hcd vhci_hcd.0: Device attached [ 620.527728][T19517] usbip_core: unknown command [ 620.527748][T19517] vhci_hcd: unknown pdu 67122804 [ 620.527786][T19517] usbip_core: unknown command [ 620.531718][T18290] vhci_hcd vhci_hcd.0: stop threads [ 620.531777][T18290] vhci_hcd vhci_hcd.0: release socket [ 620.531855][T18290] vhci_hcd vhci_hcd.0: disconnect device [ 620.641871][T18974] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 621.403572][T19524] overlayfs: failed lookup in lower (newroot/288, name='file2', err=-40): overlapping layers [ 622.345030][ T44] audit: type=1400 audit(1789526772.064:33415): avc: denied { write } for pid=19526 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 624.156025][ C1] net_ratelimit: 23 callbacks suppressed [ 625.132239][ T44] audit: type=1400 audit(1789526774.675:33416): avc: denied { write } for pid=19543 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 625.562448][T19215] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 625.856883][T19215] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 625.863378][T19215] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 626.010412][T19215] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 626.039968][T19215] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 626.140437][T19215] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 626.155017][T19215] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 626.246113][T19215] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 626.302900][ T44] audit: type=1400 audit(1789526775.761:33417): avc: denied { write } for pid=19558 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 627.499906][T19215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 627.957742][T19215] 8021q: adding VLAN 0 to HW filter on device team0 [ 628.261944][T11816] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.262847][T11816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 628.407134][ T44] audit: type=1400 audit(1789526777.735:33418): avc: denied { write } for pid=19583 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 628.787056][ T8469] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.787941][ T8469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 629.497425][ T44] audit: type=1400 audit(1789526778.755:33419): avc: denied { write } for pid=19594 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 629.617347][ C1] net_ratelimit: 54 callbacks suppressed [ 632.086434][ T44] audit: type=1400 audit(1789526781.179:33420): avc: denied { write } for pid=19612 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 633.603116][ T44] audit: type=1400 audit(1789526782.601:33421): avc: denied { write } for pid=19633 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 635.269428][ C3] net_ratelimit: 36 callbacks suppressed [ 635.447904][T19215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 636.213539][ T44] audit: type=1400 audit(1789526785.034:33422): avc: denied { write } for pid=19658 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 636.390790][T19215] veth0_vlan: entered promiscuous mode [ 636.562949][T19215] veth1_vlan: entered promiscuous mode [ 637.040664][T19672] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(4) [ 637.040685][T19672] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 637.047871][T19672] vhci_hcd vhci_hcd.0: Device attached [ 637.067002][T19674] usbip_core: unknown command [ 637.067017][T19674] vhci_hcd: unknown pdu 83900020 [ 637.067049][T19674] usbip_core: unknown command [ 637.098333][T18290] vhci_hcd vhci_hcd.9: stop threads [ 637.098398][T18290] vhci_hcd vhci_hcd.9: release socket [ 637.098433][T18290] vhci_hcd vhci_hcd.9: disconnect device [ 637.277125][T19215] veth0_macvtap: entered promiscuous mode [ 637.372837][T19215] veth1_macvtap: entered promiscuous mode [ 637.487703][ T44] audit: type=1400 audit(1789526786.232:33423): avc: denied { write } for pid=19673 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 637.635355][T19215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 637.949024][T19215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 638.444747][T18290] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.445168][T18290] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.445295][T18290] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.445370][T18290] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.145989][ T44] audit: type=1400 audit(1789526788.721:33424): avc: denied { write } for pid=19681 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 640.242936][T19697] loop5: detected capacity change from 0 to 7 [ 640.267468][T19697] loop5: [POWERTEC] p1 [ 640.278164][T19697] loop5: p1 start 3801088 is beyond EOD, truncated [ 640.635253][ T5881] net_ratelimit: 213 callbacks suppressed [ 640.660483][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.660509][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.044286][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.044308][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.155528][T19715] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 642.155549][T19715] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 642.155812][T19715] vhci_hcd vhci_hcd.0: Device attached [ 642.229377][T19717] vhci_hcd: connection closed [ 642.231498][ T5810] vhci_hcd vhci_hcd.0: stop threads [ 642.231525][ T5810] vhci_hcd vhci_hcd.0: release socket [ 642.231565][ T5810] vhci_hcd vhci_hcd.0: disconnect device [ 642.311775][ T44] audit: type=1400 audit(1789526790.743:33425): avc: denied { mounton } for pid=19215 comm="syz-executor" path="/syzkaller.UsfD6v/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=109280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 642.350207][ T44] audit: type=1400 audit(1789526790.789:33426): avc: denied { write } for pid=19712 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 642.731397][ T44] audit: type=1400 audit(1789526791.145:33427): avc: denied { write } for pid=19215 comm="syz-executor" name="cgroup.procs" dev="cgroup" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 642.744023][ T44] audit: type=1400 audit(1789526791.145:33428): avc: denied { open } for pid=19215 comm="syz-executor" path="/syzcgroup/cpu/syz1/cgroup.procs" dev="cgroup" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 644.503457][ T44] audit: type=1400 audit(1789526792.801:33429): avc: denied { write } for pid=19734 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 644.864391][T19745] loop5: detected capacity change from 0 to 7 [ 644.883327][T19745] Dev loop5: unable to read RDB block 7 [ 644.883373][T19745] loop5: unable to read partition table [ 644.885179][T19745] loop5: partition table beyond EOD, truncated [ 644.885275][T19745] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 645.541952][ T44] audit: type=1400 audit(1789526793.775:33430): avc: denied { write } for pid=19751 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 646.212409][T11812] net_ratelimit: 94 callbacks suppressed [ 646.630995][T19763] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 646.631026][T19763] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 646.631390][T19763] vhci_hcd vhci_hcd.0: Device attached [ 646.653685][T19764] usbip_core: unknown command [ 646.653700][T19764] vhci_hcd: unknown pdu 67108864 [ 646.653727][T19764] usbip_core: unknown command [ 646.655144][T18290] vhci_hcd vhci_hcd.0: stop threads [ 646.655159][T18290] vhci_hcd vhci_hcd.0: release socket [ 646.655218][T18290] vhci_hcd vhci_hcd.0: disconnect device [ 647.636313][ T44] audit: type=1400 audit(1789526795.731:33431): avc: denied { write } for pid=19768 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 647.838252][T19741] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 649.174945][ T44] audit: type=1400 audit(1789526797.172:33432): avc: denied { write } for pid=19776 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 650.447466][T19799] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 650.447506][T19799] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 650.452209][T19799] vhci_hcd vhci_hcd.0: Device attached [ 650.484014][T19801] vhci_hcd: connection closed [ 650.489468][ T13] vhci_hcd vhci_hcd.0: stop threads [ 650.489528][ T13] vhci_hcd vhci_hcd.0: release socket [ 650.489565][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 651.683631][T19570] net_ratelimit: 41 callbacks suppressed [ 651.957920][T19818] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4119'. [ 652.548149][ T44] audit: type=1400 audit(1789526800.325:33433): avc: denied { write } for pid=19812 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 654.208150][ T44] audit: type=1400 audit(1789526801.879:33434): avc: denied { write } for pid=19839 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 654.891511][T19853] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 654.891538][T19853] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 654.908260][T19853] vhci_hcd vhci_hcd.0: Device attached [ 654.955284][T19854] usbip_core: unknown command [ 654.955295][T19854] vhci_hcd: unknown pdu 67108864 [ 654.955321][T19854] usbip_core: unknown command [ 654.957122][ T13] vhci_hcd vhci_hcd.1: stop threads [ 654.957135][ T13] vhci_hcd vhci_hcd.1: release socket [ 654.957177][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 656.582807][T19866] loop5: detected capacity change from 0 to 7 [ 656.599047][T19866] Dev loop5: unable to read RDB block 7 [ 656.599092][T19866] loop5: unable to read partition table [ 656.600824][T19866] loop5: partition table beyond EOD, truncated [ 656.606116][T19866] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 656.745224][ T44] audit: type=1400 audit(1789526804.237:33435): avc: denied { write } for pid=19859 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 657.084096][T19877] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4133'. [ 657.144293][ T7799] net_ratelimit: 68 callbacks suppressed [ 657.782005][ T44] audit: type=1400 audit(1789526805.229:33436): avc: denied { write } for pid=19881 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 659.160833][ T44] audit: type=1400 audit(1789526806.511:33437): avc: denied { write } for pid=19889 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 659.461681][T19866] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 659.998668][ T44] audit: type=1400 audit(1789526807.306:33438): avc: denied { write } for pid=19902 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 660.682503][T19909] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 660.682526][T19909] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 660.682923][T19909] vhci_hcd vhci_hcd.0: Device attached [ 660.877857][T19910] vhci_hcd: connection closed [ 660.882594][ T12] vhci_hcd vhci_hcd.4: stop threads [ 660.882649][ T12] vhci_hcd vhci_hcd.4: release socket [ 660.883219][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 660.948892][T18551] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 661.369996][T19919] xt_IDLETIMER: label is empty or not nul-terminated [ 662.556303][ T44] audit: type=1400 audit(1789526809.683:33439): avc: denied { write } for pid=19927 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 662.625696][ C1] net_ratelimit: 41 callbacks suppressed [ 662.687545][T19934] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 663.093381][T19942] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4146'. [ 663.551003][T19945] binder: 19944:19945 ioctl c0306201 200000000640 returned -22 [ 663.557705][T19945] program syz.9.4147 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 663.587056][T19949] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4148'. [ 663.752856][ T44] audit: type=1400 audit(1789526810.816:33440): avc: denied { write } for pid=19946 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 664.230563][T19956] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4149'. [ 665.681686][T19968] xt_hashlimit: overflow, try lower: 0/0 [ 666.327653][T19974] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 666.551726][ T44] audit: type=1400 audit(1789526813.436:33441): avc: denied { write } for pid=19964 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 667.236921][T19991] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4158'. [ 668.001154][ C2] net_ratelimit: 36 callbacks suppressed [ 668.404073][ T44] audit: type=1400 audit(1789526815.167:33442): avc: denied { write } for pid=19995 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 668.899525][ T12] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 668.899613][ T12] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 668.899730][ T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 668.899783][ T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 668.943136][T20004] overlayfs: failed to resolve './file2': -2 [ 669.570167][T20010] xt_hashlimit: size too large, truncated to 1048576 [ 670.008239][T20016] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 670.274011][ T44] audit: type=1400 audit(1789526816.889:33443): avc: denied { write } for pid=20008 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 672.328318][ T44] audit: type=1400 audit(1789526818.835:33444): avc: denied { write } for pid=20036 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 673.397563][ T7799] net_ratelimit: 43 callbacks suppressed [ 674.211728][T20059] overlayfs: failed to resolve './file2': -2 [ 674.537674][T20062] loop5: detected capacity change from 0 to 7 [ 674.575666][T20064] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 674.594805][T20062] Dev loop5: unable to read RDB block 7 [ 674.594860][T20062] loop5: unable to read partition table [ 674.597816][T20062] loop5: partition table beyond EOD, truncated [ 674.597844][T20062] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 674.980443][ T44] audit: type=1326 audit(1789526821.315:33445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20066 comm="syz.1.4178" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe03879e159 code=0x0 [ 675.822103][T20079] Invalid source name [ 677.419152][T20098] overlayfs: failed to resolve './file2': -2 [ 678.516250][ T44] audit: type=1400 audit(1789526824.619:33446): avc: denied { write } for pid=20096 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 678.556397][T20103] loop5: detected capacity change from 0 to 7 [ 678.633864][T20103] Dev loop5: unable to read RDB block 7 [ 678.633905][T20103] loop5: unable to read partition table [ 678.659789][T20103] loop5: partition table beyond EOD, truncated [ 678.659811][T20103] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 678.711737][T20107] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 679.029198][ T8469] net_ratelimit: 74 callbacks suppressed [ 679.563954][T20117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4193'. [ 680.534266][T20128] 9pnet_fd: p9_fd_create_tcp (20128): problem connecting socket to 127.0.0.1 [ 680.649621][ T44] audit: type=1400 audit(1789526826.621:33447): avc: denied { write } for pid=20123 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 682.664635][T20151] FAULT_INJECTION: forcing a failure. [ 682.664635][T20151] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 682.664677][T20151] CPU: 3 UID: 0 PID: 20151 Comm: syz.9.4202 Tainted: G L syzkaller #0 PREEMPT(full) [ 682.664699][T20151] Tainted: [L]=SOFTLOCKUP [ 682.664706][T20151] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 682.664715][T20151] Call Trace: [ 682.664727][T20151] [ 682.664740][T20151] dump_stack_lvl+0x100/0x190 [ 682.664818][T20151] should_fail_ex.cold+0x5/0xa [ 682.664952][T20151] _copy_from_user+0x2e/0xd0 [ 682.665044][T20151] memdup_user+0x6b/0xe0 [ 682.665100][T20151] sctp_getsockopt+0x3ec5/0x7110 [ 682.665267][T20151] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 682.665356][T20151] ? __pfx_sctp_getsockopt+0x10/0x10 [ 682.665387][T20151] ? trace_event_buffer_commit+0x20a/0xa80 [ 682.665585][T20151] ? trace_event_raw_event_lock+0x1e2/0x2b0 [ 682.665648][T20151] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 682.665774][T20151] ? lock_acquire+0x1d1/0x380 [ 682.665819][T20151] ? __might_fault+0xc5/0x140 [ 682.665905][T20151] ? find_held_lock+0x2b/0x80 [ 682.665948][T20151] ? __might_fault+0xc5/0x140 [ 682.665977][T20151] ? __might_fault+0xc5/0x140 [ 682.666176][T20151] ? _copy_from_user+0x59/0xd0 [ 682.666247][T20151] ? copy_from_sockptr_offset.constprop.0+0xe2/0x150 [ 682.666292][T20151] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 682.666409][T20151] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 682.666525][T20151] do_sock_getsockopt+0x50a/0x6e0 [ 682.666635][T20151] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 682.666821][T20151] ? __fget_files+0x34/0x3d0 [ 682.666860][T20151] ? find_held_lock+0x2b/0x80 [ 682.667056][T20151] ? __fget_files+0x21f/0x3d0 [ 682.667201][T20151] __sys_getsockopt+0x148/0x260 [ 682.667410][T20151] ? __x64_sys_getsockopt+0xbd/0x160 [ 682.667444][T20151] __x64_sys_getsockopt+0xbd/0x160 [ 682.667476][T20151] ? do_syscall_64+0xae/0x790 [ 682.667520][T20151] ? lockdep_hardirqs_on+0x7d/0x110 [ 682.667579][T20151] do_syscall_64+0x123/0x790 [ 682.667720][T20151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.667744][T20151] RIP: 0033:0x7f782299e159 [ 682.667779][T20151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 682.667794][T20151] RSP: 002b:00007f7823837028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 682.667815][T20151] RAX: ffffffffffffffda RBX: 00007f7822c25fa0 RCX: 00007f782299e159 [ 682.667827][T20151] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 682.667839][T20151] RBP: 00007f7823837090 R08: 0000200000000180 R09: 0000000000000000 [ 682.667851][T20151] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 682.667863][T20151] R13: 00007f7822c26038 R14: 00007f7822c25fa0 R15: 00007ffc4a32b458 [ 682.668123][T20151] [ 682.952435][ T44] audit: type=1400 audit(1789526828.774:33448): avc: denied { write } for pid=20141 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 684.033855][ T44] audit: type=1400 audit(1789526829.794:33449): avc: denied { write } for pid=20162 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 684.333482][T20166] loop5: detected capacity change from 0 to 7 [ 684.418178][ T1092] net_ratelimit: 40 callbacks suppressed [ 684.432801][T20166] Dev loop5: unable to read RDB block 7 [ 684.432849][T20166] loop5: unable to read partition table [ 684.434576][T20166] loop5: partition table beyond EOD, truncated [ 684.434602][T20166] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 685.531786][T20183] FAULT_INJECTION: forcing a failure. [ 685.531786][T20183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 685.531820][T20183] CPU: 3 UID: 0 PID: 20183 Comm: syz.0.4210 Tainted: G L syzkaller #0 PREEMPT(full) [ 685.531840][T20183] Tainted: [L]=SOFTLOCKUP [ 685.531849][T20183] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 685.531861][T20183] Call Trace: [ 685.531879][T20183] [ 685.531899][T20183] dump_stack_lvl+0x100/0x190 [ 685.532011][T20183] should_fail_ex.cold+0x5/0xa [ 685.532127][T20183] _copy_from_user+0x2e/0xd0 [ 685.532187][T20183] kstrtouint_from_user+0xd6/0x1d0 [ 685.532247][T20183] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 685.532530][T20183] proc_fail_nth_write+0x83/0x220 [ 685.532602][T20183] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 685.532793][T20183] vfs_write+0x2aa/0x1050 [ 685.532886][T20183] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 685.532940][T20183] ? lock_acquire+0x1d1/0x380 [ 685.532991][T20183] ? __fget_files+0x34/0x3d0 [ 685.533022][T20183] ? __pfx_vfs_write+0x10/0x10 [ 685.533042][T20183] ? find_held_lock+0x2b/0x80 [ 685.533096][T20183] ? __fget_files+0x215/0x3d0 [ 685.533266][T20183] ? __fget_files+0x21f/0x3d0 [ 685.533431][T20183] ksys_write+0x12a/0x250 [ 685.533498][T20183] ? __pfx_ksys_write+0x10/0x10 [ 685.533671][T20183] do_syscall_64+0x123/0x790 [ 685.533800][T20183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.533845][T20183] RIP: 0033:0x7fb09035e98e [ 685.533882][T20183] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 685.533896][T20183] RSP: 002b:00007fb0912c5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 685.533915][T20183] RAX: ffffffffffffffda RBX: 00007fb0912c66c0 RCX: 00007fb09035e98e [ 685.533925][T20183] RDX: 0000000000000001 RSI: 00007fb0912c60a0 RDI: 0000000000000003 [ 685.533936][T20183] RBP: 00007fb0912c6090 R08: 0000000000000000 R09: 0000000000000000 [ 685.533947][T20183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 685.533957][T20183] R13: 00007fb090626038 R14: 00007fb090625fa0 R15: 00007fff77eca5d8 [ 685.534215][T20183] [ 686.354519][T20193] FAULT_INJECTION: forcing a failure. [ 686.354519][T20193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 686.354557][T20193] CPU: 3 UID: 0 PID: 20193 Comm: syz.0.4214 Tainted: G L syzkaller #0 PREEMPT(full) [ 686.354579][T20193] Tainted: [L]=SOFTLOCKUP [ 686.354589][T20193] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 686.354602][T20193] Call Trace: [ 686.354624][T20193] [ 686.354648][T20193] dump_stack_lvl+0x100/0x190 [ 686.354779][T20193] should_fail_ex.cold+0x5/0xa [ 686.354855][T20193] _copy_from_user+0x2e/0xd0 [ 686.354932][T20193] copy_msghdr_from_user+0x9f/0x4c0 [ 686.355021][T20193] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 686.355209][T20193] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 686.355346][T20193] ___sys_sendmsg+0x106/0x1e0 [ 686.355423][T20193] ? __pfx____sys_sendmsg+0x10/0x10 [ 686.355702][T20193] ? lockdep_hardirqs_on+0x7d/0x110 [ 686.355975][T20193] ? __pfx___might_resched+0x10/0x10 [ 686.356132][T20193] __sys_sendmmsg+0x20c/0x440 [ 686.356243][T20193] ? __pfx___sys_sendmmsg+0x10/0x10 [ 686.356277][T20193] ? ksys_write+0x190/0x250 [ 686.356714][T20193] ? fput+0x7c/0x100 [ 686.356763][T20193] ? ksys_write+0x1ac/0x250 [ 686.356798][T20193] ? __pfx_ksys_write+0x10/0x10 [ 686.356943][T20193] __x64_sys_sendmmsg+0x9c/0x100 [ 686.357004][T20193] ? lockdep_hardirqs_on+0x7d/0x110 [ 686.357051][T20193] do_syscall_64+0x123/0x790 [ 686.357126][T20193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.357159][T20193] RIP: 0033:0x7fb09039e159 [ 686.357212][T20193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 686.357230][T20193] RSP: 002b:00007fb0912c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 686.357256][T20193] RAX: ffffffffffffffda RBX: 00007fb090625fa0 RCX: 00007fb09039e159 [ 686.357271][T20193] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003 [ 686.357286][T20193] RBP: 00007fb0912c6090 R08: 0000000000000000 R09: 0000000000000000 [ 686.357300][T20193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 686.357315][T20193] R13: 00007fb090626038 R14: 00007fb090625fa0 R15: 00007fff77eca5d8 [ 686.357578][T20193] [ 686.798430][T20197] overlayfs: failed to resolve './file2': -2 [ 686.840500][ T850] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 686.973870][ T44] audit: type=1400 audit(1789526832.545:33450): avc: denied { write } for pid=20187 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 687.067040][ T850] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 687.074452][ T850] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 687.074562][ T850] usb 6-1: can't read configurations, error -71 [ 689.223727][ T44] audit: type=1400 audit(1789526834.641:33451): avc: denied { write } for pid=20217 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 689.524726][T20221] device-mapper: table: 248:2: multipath: priority group count mismatch (-EINVAL) [ 689.524747][T20221] device-mapper: ioctl: error adding target to table [ 689.812992][T20228] fuse: fd is not a fuse device [ 689.903952][ T7799] net_ratelimit: 40 callbacks suppressed [ 690.332204][T20231] FAULT_INJECTION: forcing a failure. [ 690.332204][T20231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 690.332234][T20231] CPU: 3 UID: 0 PID: 20231 Comm: syz.1.4224 Tainted: G L syzkaller #0 PREEMPT(full) [ 690.332253][T20231] Tainted: [L]=SOFTLOCKUP [ 690.332260][T20231] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 690.332270][T20231] Call Trace: [ 690.332285][T20231] [ 690.332303][T20231] dump_stack_lvl+0x100/0x190 [ 690.332408][T20231] should_fail_ex.cold+0x5/0xa [ 690.332555][T20231] _copy_from_iter+0x1f4/0x1690 [ 690.332644][T20231] ? __asan_memset+0x23/0x50 [ 690.332726][T20231] ? __pfx__copy_from_iter+0x10/0x10 [ 690.332788][T20231] ? __pfx___alloc_skb+0x10/0x10 [ 690.333026][T20231] netlink_sendmsg+0x808/0xda0 [ 690.333167][T20231] ? __pfx_netlink_sendmsg+0x10/0x10 [ 690.333266][T20231] ? selinux_socket_sendmsg+0x198/0x2f0 [ 690.333425][T20231] ____sys_sendmsg+0xa4d/0xbe0 [ 690.333454][T20231] ? __pfx_netlink_sendmsg+0x10/0x10 [ 690.333542][T20231] ? __pfx_____sys_sendmsg+0x10/0x10 [ 690.333712][T20231] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 690.333854][T20231] ___sys_sendmsg+0x190/0x1e0 [ 690.333985][T20231] ? __pfx____sys_sendmsg+0x10/0x10 [ 690.334021][T20231] ? trace_event_raw_event_lock+0x1e2/0x2b0 [ 690.334281][T20231] ? find_held_lock+0x2b/0x80 [ 690.334619][T20231] __sys_sendmsg+0x160/0x210 [ 690.334712][T20231] ? __pfx___sys_sendmsg+0x10/0x10 [ 690.335056][T20231] do_syscall_64+0x123/0x790 [ 690.335140][T20231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.335172][T20231] RIP: 0033:0x7fe03879e159 [ 690.335222][T20231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 690.335239][T20231] RSP: 002b:00007fe039708028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 690.335264][T20231] RAX: ffffffffffffffda RBX: 00007fe038a25fa0 RCX: 00007fe03879e159 [ 690.335280][T20231] RDX: 0000000000000000 RSI: 00002000000037c0 RDI: 0000000000000003 [ 690.335294][T20231] RBP: 00007fe039708090 R08: 0000000000000000 R09: 0000000000000000 [ 690.335308][T20231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 690.335323][T20231] R13: 00007fe038a26038 R14: 00007fe038a25fa0 R15: 00007ffd4682b968 [ 690.335603][T20231] [ 691.130788][ T44] audit: type=1326 audit(1789526836.428:33452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20235 comm="syz.9.4227" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f782299e159 code=0x0 [ 691.392120][T20241] tipc: Trying to set illegal importance in message [ 691.557064][T20239] 8250_pericom 0000:00:00.0: probe with driver 8250_pericom failed with error -12 [ 692.576074][ T44] audit: type=1400 audit(1789526837.785:33453): avc: denied { open } for pid=20238 comm="syz.1.4228" path="/dev/ttyq7" dev="devtmpfs" ino=390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 695.784522][ C2] net_ratelimit: 62 callbacks suppressed [ 697.459206][T20291] FAULT_INJECTION: forcing a failure. [ 697.459206][T20291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 697.459252][T20291] CPU: 0 UID: 0 PID: 20291 Comm: syz.4.4239 Tainted: G L syzkaller #0 PREEMPT(full) [ 697.459276][T20291] Tainted: [L]=SOFTLOCKUP [ 697.459287][T20291] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 697.459301][T20291] Call Trace: [ 697.459320][T20291] [ 697.459343][T20291] dump_stack_lvl+0x100/0x190 [ 697.459476][T20291] should_fail_ex.cold+0x5/0xa [ 697.459743][T20291] _copy_from_user+0x2e/0xd0 [ 697.459826][T20291] ctl_ioctl+0xf3/0xcc0 [ 697.459996][T20291] ? __pfx_ctl_ioctl+0x10/0x10 [ 697.460919][T20291] ? selinux_file_ioctl+0x13b/0x290 [ 697.460982][T20291] ? selinux_file_ioctl+0xb6/0x290 [ 697.461089][T20291] dm_ctl_ioctl+0x22/0x30 [ 697.461138][T20291] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 697.461220][T20291] __x64_sys_ioctl+0x18e/0x210 [ 697.461414][T20291] do_syscall_64+0x123/0x790 [ 697.461533][T20291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.461575][T20291] RIP: 0033:0x7f0fd8b9e159 [ 697.461653][T20291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 697.461677][T20291] RSP: 002b:00007f0fd9b0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 697.461711][T20291] RAX: ffffffffffffffda RBX: 00007f0fd8e25fa0 RCX: 00007f0fd8b9e159 [ 697.461731][T20291] RDX: 0000200000000000 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 697.461750][T20291] RBP: 00007f0fd9b0a090 R08: 0000000000000000 R09: 0000000000000000 [ 697.461770][T20291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 697.461790][T20291] R13: 00007f0fd8e26038 R14: 00007f0fd8e25fa0 R15: 00007ffd808e86e8 [ 697.462176][T20291] [ 697.769735][T20296] xt_hashlimit: size too large, truncated to 1048576 [ 697.770055][T20296] xt_hashlimit: max too large, truncated to 1048576 [ 697.770291][T20296] xt_hashlimit: Unknown mode mask 52C95688, kernel too old? [ 698.685161][T20305] /dev/nullb0: Can't lookup blockdev [ 699.219377][ T43] usb 9-1: new full-speed USB device number 51 using dummy_hcd [ 699.500317][ T43] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 699.511246][ T43] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 699.511405][ T43] usb 9-1: can't read configurations, error -71 [ 701.341281][ C2] net_ratelimit: 49 callbacks suppressed [ 702.590371][T20347] netlink: 'syz.0.4253': attribute type 9 has an invalid length. [ 702.594188][T20346] netlink: 'syz.0.4253': attribute type 9 has an invalid length. [ 703.544841][ T44] audit: type=1400 audit(1789526848.051:33454): avc: denied { setopt } for pid=20354 comm="syz.0.4254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 703.562329][T20355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4254'. [ 703.612667][T20358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4254'. [ 704.945023][ T43] usb 9-1: new full-speed USB device number 53 using dummy_hcd [ 705.204943][ T43] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 705.217616][ T43] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 705.217786][ T43] usb 9-1: can't read configurations, error -71 [ 705.245309][T20335] SELinux: failed to load policy [ 705.955243][T20383] FAULT_INJECTION: forcing a failure. [ 705.955243][T20383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 705.955273][T20383] CPU: 0 UID: 0 PID: 20383 Comm: syz.9.4259 Tainted: G L syzkaller #0 PREEMPT(full) [ 705.955293][T20383] Tainted: [L]=SOFTLOCKUP [ 705.955303][T20383] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 705.955315][T20383] Call Trace: [ 705.955334][T20383] [ 705.955355][T20383] dump_stack_lvl+0x100/0x190 [ 705.955469][T20383] should_fail_ex.cold+0x5/0xa [ 705.955587][T20383] _copy_to_user+0x32/0xd0 [ 705.955680][T20383] do_sock_getsockopt+0x631/0x6e0 [ 705.955844][T20383] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 705.955978][T20383] ? __fget_files+0x34/0x3d0 [ 705.956058][T20383] ? find_held_lock+0x2b/0x80 [ 705.956220][T20383] ? __fget_files+0x21f/0x3d0 [ 705.956417][T20383] __sys_getsockopt+0x148/0x260 [ 705.956629][T20383] ? __x64_sys_getsockopt+0xbd/0x160 [ 705.956676][T20383] __x64_sys_getsockopt+0xbd/0x160 [ 705.956699][T20383] ? do_syscall_64+0xae/0x790 [ 705.956729][T20383] ? lockdep_hardirqs_on+0x7d/0x110 [ 705.956772][T20383] do_syscall_64+0x123/0x790 [ 705.956878][T20383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.956919][T20383] RIP: 0033:0x7f782299e159 [ 705.956986][T20383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 705.957006][T20383] RSP: 002b:00007f7823837028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 705.957027][T20383] RAX: ffffffffffffffda RBX: 00007f7822c25fa0 RCX: 00007f782299e159 [ 705.957036][T20383] RDX: 0000000000000001 RSI: 0000000000000006 RDI: 0000000000000004 [ 705.957045][T20383] RBP: 00007f7823837090 R08: 0000200000001100 R09: 0000000000000000 [ 705.957055][T20383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 705.957065][T20383] R13: 00007f7822c26038 R14: 00007f7822c25fa0 R15: 00007ffc4a32b458 [ 705.957326][T20383] [ 706.898311][ C2] net_ratelimit: 48 callbacks suppressed [ 706.948796][T20397] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4263'. [ 706.948813][T20397] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4263'. [ 707.188959][T20391] macvlan1: left promiscuous mode [ 707.452944][T20391] 8021q: adding VLAN 0 to HW filter on device bond1 [ 707.487971][T20391] 8021q: adding VLAN 0 to HW filter on device bond2 [ 707.512277][T20391] 8021q: adding VLAN 0 to HW filter on device eth0 [ 707.538005][T20391] 8021q: adding VLAN 0 to HW filter on device eth1 [ 707.602863][T20391] 8021q: adding VLAN 0 to HW filter on device eth2 [ 707.637506][T20391] 8021q: adding VLAN 0 to HW filter on device eth3 [ 707.658919][T20391] 8021q: adding VLAN 0 to HW filter on device bond3 [ 708.375268][T20391] 8021q: adding VLAN 0 to HW filter on device bond4 [ 708.401195][T20391] bond5: left promiscuous mode [ 708.427384][T20391] bond7: left promiscuous mode [ 708.484756][T20391] 8021q: adding VLAN 0 to HW filter on device eth4 [ 708.805605][T20397] bridge3: entered promiscuous mode [ 708.805627][T20397] bridge3: entered allmulticast mode [ 709.028293][T10391] wlan0 speed is unknown, defaulting to 1000 [ 710.580232][ T7799] IPVS: starting estimator thread 0... [ 710.682607][T20435] IPVS: using max 7 ests per chain, 16800 per kthread [ 710.874227][T13443] usb 14-1: new full-speed USB device number 16 using dummy_hcd [ 711.104472][T13443] usb 14-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 711.115166][T13443] usb 14-1: unable to read config index 0 descriptor/start: -71 [ 711.115284][T13443] usb 14-1: can't read configurations, error -71 [ 712.177503][T20448] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 712.455012][ C2] net_ratelimit: 111 callbacks suppressed [ 712.633650][T20455] FAULT_INJECTION: forcing a failure. [ 712.633650][T20455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 712.633698][T20455] CPU: 1 UID: 0 PID: 20455 Comm: syz.9.4280 Tainted: G L syzkaller #0 PREEMPT(full) [ 712.633720][T20455] Tainted: [L]=SOFTLOCKUP [ 712.633731][T20455] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 712.633744][T20455] Call Trace: [ 712.633769][T20455] [ 712.633796][T20455] dump_stack_lvl+0x100/0x190 [ 712.633916][T20455] should_fail_ex.cold+0x5/0xa [ 712.634003][T20455] _copy_from_user+0x2e/0xd0 [ 712.634089][T20455] copy_msghdr_from_user+0x9f/0x4c0 [ 712.634186][T20455] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 712.634302][T20455] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 712.634485][T20455] ___sys_sendmsg+0x106/0x1e0 [ 712.634557][T20455] ? __pfx____sys_sendmsg+0x10/0x10 [ 712.634609][T20455] ? trace_event_raw_event_lock+0x1e2/0x2b0 [ 712.634870][T20455] ? find_held_lock+0x2b/0x80 [ 712.635269][T20455] __sys_sendmsg+0x160/0x210 [ 712.635340][T20455] ? __pfx___sys_sendmsg+0x10/0x10 [ 712.635679][T20455] do_syscall_64+0x123/0x790 [ 712.635791][T20455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.635833][T20455] RIP: 0033:0x7f782299e159 [ 712.635900][T20455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 712.635917][T20455] RSP: 002b:00007f7823837028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 712.635934][T20455] RAX: ffffffffffffffda RBX: 00007f7822c25fa0 RCX: 00007f782299e159 [ 712.635944][T20455] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000002 [ 712.635953][T20455] RBP: 00007f7823837090 R08: 0000000000000000 R09: 0000000000000000 [ 712.635963][T20455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 712.635972][T20455] R13: 00007f7822c26038 R14: 00007f7822c25fa0 R15: 00007ffc4a32b458 [ 712.636234][T20455] [ 713.966561][T20465] FAULT_INJECTION: forcing a failure. [ 713.966561][T20465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 713.966605][T20465] CPU: 2 UID: 0 PID: 20465 Comm: syz.1.4284 Tainted: G L syzkaller #0 PREEMPT(full) [ 713.966640][T20465] Tainted: [L]=SOFTLOCKUP [ 713.966653][T20465] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 713.966668][T20465] Call Trace: [ 713.966697][T20465] [ 713.966728][T20465] dump_stack_lvl+0x100/0x190 [ 713.966794][T20465] should_fail_ex.cold+0x5/0xa [ 713.966902][T20465] _copy_from_user+0x2e/0xd0 [ 713.967003][T20465] move_addr_to_kernel+0x65/0x170 [ 713.967070][T20465] __sys_connect+0xb5/0x170 [ 713.967112][T20465] ? __pfx___sys_connect+0x10/0x10 [ 713.967138][T20465] ? __fget_files+0x21f/0x3d0 [ 713.967372][T20465] ? __pfx_ksys_write+0x10/0x10 [ 713.967546][T20465] __x64_sys_connect+0x72/0xb0 [ 713.967591][T20465] ? lockdep_hardirqs_on+0x7d/0x110 [ 713.967652][T20465] do_syscall_64+0x123/0x790 [ 713.967723][T20465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.967755][T20465] RIP: 0033:0x7fe03879e159 [ 713.967806][T20465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 713.967824][T20465] RSP: 002b:00007fe039708028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 713.967849][T20465] RAX: ffffffffffffffda RBX: 00007fe038a25fa0 RCX: 00007fe03879e159 [ 713.967864][T20465] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000003 [ 713.967878][T20465] RBP: 00007fe039708090 R08: 0000000000000000 R09: 0000000000000000 [ 713.967892][T20465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 713.967907][T20465] R13: 00007fe038a26038 R14: 00007fe038a25fa0 R15: 00007ffd4682b968 [ 713.968168][T20465] [ 718.018186][T15066] net_ratelimit: 46 callbacks suppressed [ 718.422131][T20488] FAULT_INJECTION: forcing a failure. [ 718.422131][T20488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 718.422171][T20488] CPU: 2 UID: 0 PID: 20488 Comm: syz.1.4293 Tainted: G L syzkaller #0 PREEMPT(full) [ 718.422195][T20488] Tainted: [L]=SOFTLOCKUP [ 718.422208][T20488] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 718.422224][T20488] Call Trace: [ 718.422248][T20488] [ 718.422259][T20488] dump_stack_lvl+0x100/0x190 [ 718.422327][T20488] should_fail_ex.cold+0x5/0xa [ 718.422449][T20488] _copy_from_user+0x2e/0xd0 [ 718.422562][T20488] memdup_user+0x6b/0xe0 [ 718.422602][T20488] dvb_frontend_handle_ioctl+0x1085/0x2f00 [ 718.422654][T20488] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 718.422774][T20488] ? __pfx_dvb_frontend_handle_ioctl+0x10/0x10 [ 718.422885][T20488] ? pv_queued_spin_unlock_traced+0x62/0x1d0 [ 718.422932][T20488] ? __raw_callee_save_pv_queued_spin_unlock_traced+0x15/0x40 [ 718.423004][T20488] ? rcu_is_watching+0x13/0xc0 [ 718.423071][T20488] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 718.423124][T20488] ? lockdep_hardirqs_on+0x7d/0x110 [ 718.423236][T20488] dvb_frontend_do_ioctl+0x1ce/0x320 [ 718.423352][T20488] dvb_usercopy+0x167/0x340 [ 718.423413][T20488] ? __pfx_dvb_frontend_do_ioctl+0x10/0x10 [ 718.423518][T20488] ? __pfx_dvb_usercopy+0x10/0x10 [ 718.423544][T20488] ? __fget_files+0x34/0x3d0 [ 718.423803][T20488] ? selinux_file_ioctl+0x13b/0x290 [ 718.423826][T20488] ? selinux_file_ioctl+0xb6/0x290 [ 718.423915][T20488] dvb_frontend_ioctl+0x50/0x80 [ 718.423956][T20488] ? __pfx_dvb_frontend_ioctl+0x10/0x10 [ 718.424020][T20488] __x64_sys_ioctl+0x18e/0x210 [ 718.424127][T20488] do_syscall_64+0x123/0x790 [ 718.424209][T20488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.424244][T20488] RIP: 0033:0x7fe03879e159 [ 718.424301][T20488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 718.424320][T20488] RSP: 002b:00007fe039708028 EFLAGS: 00000246 [ 718.424333][T20488] ORIG_RAX: 0000000000000010 [ 718.424349][T20488] RAX: ffffffffffffffda RBX: 00007fe038a25fa0 RCX: 00007fe03879e159 [ 718.424364][T20488] RDX: 0000200000000000 RSI: 0000000040106f52 RDI: 0000000000000003 [ 718.424380][T20488] RBP: 00007fe039708090 R08: 0000000000000000 R09: 0000000000000000 [ 718.424395][T20488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 718.424410][T20488] R13: 00007fe038a26038 R14: 00007fe038a25fa0 R15: 00007ffd4682b968 ** 81 printk messages dropped ** ** 60 printk messages dropped ** ** 61 printk messages dropped ** ** 120 printk messages dropped ** ** 68 printk messages dropped ** ** 76 printk messages dropped ** ** 55 printk messages dropped ** ** 78 printk messages dropped ** ** 85 printk messages dropped ** ** 82 printk messages dropped ** ** 61 printk messages dropped ** ** 67 printk messages dropped ** ** 85 printk messages dropped ** ** 89 printk messages dropped ** ** 70 printk messages dropped ** ** 57 printk messages dropped ** ** 67 printk messages dropped ** ** 95 printk messages dropped ** ** 81 printk messages dropped ** ** 90 printk messages dropped ** ** 93 printk messages dropped ** ** 90 printk messages dropped ** ** 89 printk messages dropped ** ** 76 printk messages dropped ** ** 54 printk messages dropped ** ** 57 printk messages dropped ** ** 57 printk messages dropped ** ** 86 printk messages dropped ** ** 85 printk messages dropped ** ** 91 printk messages dropped ** ** 87 printk messages dropped ** ** 90 printk messages dropped ** ** 85 printk messages dropped ** ** 40 printk messages dropped ** ** 4 printk messages dropped ** ** 66 printk messages dropped ** ** 59 printk messages dropped ** ** 61 printk messages dropped ** ** 60 printk messages dropped ** ** 59 printk messages dropped ** ** 63 printk messages dropped ** ** 57 printk messages dropped ** ** 55 printk messages dropped ** ** 64 printk messages dropped ** ** 55 printk messages dropped ** ** 60 printk messages dropped ** ** 88 printk messages dropped ** ** 99 printk messages dropped ** ** 96 printk messages dropped ** ** 95 printk messages dropped ** ** 94 printk messages dropped ** ** 93 printk messages dropped ** ** 89 printk messages dropped ** ** 91 printk messages dropped ** ** 85 printk messages dropped ** ** 86 printk messages dropped ** ** 97 printk messages dropped ** ** 84 printk messages dropped ** ** 98 printk messages dropped ** ** 105 printk messages dropped ** ** 90 printk messages dropped ** ** 57 printk messages dropped ** ** 94 printk messages dropped ** ** 65 printk messages dropped ** ** 58 printk messages dropped ** ** 82 printk messages dropped ** ** 93 printk messages dropped ** ** 87 printk messages dropped ** ** 92 printk messages dropped ** ** 111 printk messages dropped ** ** 71 printk messages dropped ** ** 39 printk messages dropped ** ** 4 printk messages dropped ** ** 96 printk messages dropped ** ** 88 printk messages dropped ** ** 37 printk messages dropped ** ** 16 printk messages dropped ** ** 128 printk messages dropped ** ** 35 printk messages dropped ** ** 1 printk messages dropped ** ** 124 printk messages dropped ** ** 102 printk messages dropped ** ** 103 printk messages dropped ** ** 99 printk messages dropped ** ** 98 printk messages dropped ** ** 95 printk messages dropped ** ** 109 printk messages dropped ** ** 97 printk messages dropped ** ** 107 printk messages dropped ** ** 105 printk messages dropped ** ** 102 printk messages dropped ** ** 110 printk messages dropped ** ** 136 printk messages dropped ** ** 142 printk messages dropped ** ** 271 printk messages dropped ** ** 95 printk messages dropped ** ** 111 printk messages dropped ** ** 103 printk messages dropped ** ** 102 printk messages dropped ** ** 102 printk messages dropped ** ** 104 printk messages dropped ** ** 98 printk messages dropped ** ** 95 printk messages dropped ** ** 93 printk messages dropped ** ** 102 printk messages dropped ** ** 98 printk messages dropped ** ** 82 printk messages dropped ** ** 36 printk messages dropped ** ** 96 printk messages dropped ** ** 99 printk messages dropped ** ** 114 printk messages dropped ** ** 108 printk messages dropped ** ** 111 printk messages dropped ** ** 107 printk messages dropped ** ** 100 printk messages dropped ** ** 97 printk messages dropped ** ** 94 printk messages dropped ** ** 97 printk messages dropped ** ** 97 printk messages dropped ** ** 96 printk messages dropped ** ** 109 printk messages dropped ** ** 105 printk messages dropped ** ** 94 printk messages dropped ** ** 135 printk messages dropped ** ** 104 printk messages dropped ** ** 110 printk messages dropped ** ** 98 printk messages dropped ** ** 98 printk messages dropped ** ** 97 printk messages dropped ** ** 103 printk messages dropped ** ** 113 printk messages dropped ** ** 98 printk messages dropped ** ** 96 printk messages dropped ** ** 96 printk messages dropped ** ** 106 printk messages dropped ** ** 115 printk messages dropped ** ** 103 printk messages dropped ** ** 100 printk messages dropped ** ** 40 printk messages dropped ** ** 31 printk messages dropped ** ** 89 printk messages dropped ** ** 103 printk messages dropped ** ** 99 printk messages dropped ** ** 105 printk messages dropped ** ** 104 printk messages dropped ** ** 112 printk messages dropped ** ** 108 printk messages dropped ** ** 173 printk messages dropped ** ** 102 printk messages dropped ** ** 99 printk messages dropped ** ** 90 printk messages dropped ** ** 102 printk messages dropped ** ** 100 printk messages dropped ** ** 111 printk messages dropped ** ** 137 printk messages dropped ** ** 173 printk messages dropped ** ** 145 printk messages dropped ** ** 156 printk messages dropped ** ** 154 printk messages dropped ** ** 138 printk messages dropped ** ** 141 printk messages dropped ** ** 140 printk messages dropped ** ** 155 printk messages dropped ** ** 155 printk messages dropped ** ** 146 printk messages dropped ** ** 12 printk messages dropped ** ** 4 printk messages dropped ** ** 98 printk messages dropped ** ** 120 printk messages dropped ** ** 103 printk messages dropped ** ** 102 printk messages dropped ** ** 103 printk messages dropped ** ** 95 printk messages dropped ** ** 100 printk messages dropped ** ** 97 printk messages dropped ** ** 99 printk messages dropped ** ** 165 printk messages dropped ** ** 98 printk messages dropped ** ** 117 printk messages dropped ** ** 98 printk messages dropped ** ** 100 printk messages dropped ** ** 97 printk messages dropped ** ** 95 printk messages dropped ** ** 99 printk messages dropped ** ** 99 printk messages dropped ** ** 96 printk messages dropped ** ** 95 printk messages dropped ** ** 98 printk messages dropped ** ** 94 printk messages dropped ** ** 104 printk messages dropped ** ** 97 printk messages dropped ** ** 95 printk messages dropped ** ** 107 printk messages dropped ** ** 100 printk messages dropped ** ** 98 printk messages dropped ** ** 97 printk messages dropped ** ** 70 printk messages dropped ** ** 1 printk messages dropped ** ** 100 printk messages dropped ** ** 103 printk messages dropped ** ** 103 printk messages dropped ** ** 95 printk messages dropped ** ** 99 printk messages dropped ** ** 94 printk messages dropped ** ** 98 printk messages dropped ** ** 85 printk messages dropped ** ** 88 printk messages dropped ** ** 97 printk messages dropped ** ** 92 printk messages dropped ** ** 95 printk messages dropped ** ** 101 printk messages dropped ** ** 94 printk messages dropped ** ** 97 printk messages dropped ** ** 93 printk messages dropped ** ** 92 printk messages dropped ** ** 101 printk messages dropped ** ** 99 printk messages dropped ** ** 100 printk messages dropped ** ** 99 printk messages dropped ** ** 93 printk messages dropped ** ** 96 printk messages dropped ** ** 94 printk messages dropped ** ** 103 printk messages dropped ** ** 103 printk messages dropped ** ** 98 printk messages dropped ** ** 95 printk messages dropped ** ** 36 printk messages dropped ** ** 2 printk messages dropped ** ** 94 printk messages dropped ** ** 94 printk messages dropped ** ** 99 printk messages dropped ** ** 94 printk messages dropped ** ** 97 printk messages dropped ** ** 94 printk messages dropped ** ** 107 printk messages dropped ** ** 99 printk messages dropped ** ** 95 printk messages dropped ** ** 96 printk messages dropped ** ** 94 printk messages dropped ** ** 93 printk messages dropped ** ** 97 printk messages dropped ** ** 103 printk messages dropped ** ** 99 printk messages dropped ** ** 98 printk messages dropped ** ** 95 printk messages dropped ** ** 97 printk messages dropped ** ** 99 printk messages dropped ** ** 103 printk messages dropped ** ** 104 printk messages dropped ** ** 100 printk messages dropped ** ** 96 printk messages dropped ** ** 22 printk messages dropped ** ** 1 printk messages dropped ** ** 179 printk messages dropped ** ** 112 printk messages dropped ** ** 104 printk messages dropped ** ** 99 printk messages dropped ** ** 98 printk messages dropped ** ** 94 printk messages dropped ** ** 101 printk messages dropped ** ** 100 printk messages dropped ** ** 105 printk messages dropped ** ** 95 printk messages dropped ** ** 96 printk messages dropped ** ** 98 printk messages dropped ** ** 111 printk messages dropped ** ** 104 printk messages dropped ** ** 105 printk messages dropped ** ** 103 printk messages dropped ** ** 84 printk messages dropped ** ** 93 printk messages dropped ** ** 100 printk messages dropped ** ** 104 printk messages dropped ** ** 101 printk messages dropped ** ** 94 printk messages dropped ** ** 97 printk messages dropped ** ** 94 printk messages dropped ** ** 102 printk messages dropped ** ** 105 printk messages dropped ** ** 99 printk messages dropped ** ** 94 printk messages dropped ** ** 89 printk messages dropped ** ** 13 printk messages dropped ** ** 96 printk messages dropped ** ** 92 printk messages dropped ** ** 96 printk messages dropped ** ** 94 printk messages dropped ** ** 98 printk messages dropped ** ** 98 printk messages dropped ** ** 103 printk messages dropped ** ** 95 printk messages dropped ** ** 98 printk messages dropped ** ** 94 printk messages dropped ** ** 97 printk messages dropped ** ** 100 printk messages dropped ** ** 93 printk messages dropped ** ** 97 printk messages dropped ** ** 99 printk messages dropped ** ** 94 printk messages dropped ** ** 99 printk messages dropped ** ** 94 printk messages dropped ** ** 99 printk messages dropped ** ** 96 printk messages dropped ** ** 95 printk messages dropped ** ** 81 printk messages dropped ** ** 98 printk messages dropped ** ** 93 printk messages dropped ** ** 111 printk messages dropped ** ** 108 printk messages dropped ** ** 99 printk messages dropped ** ** 97 printk messages dropped ** ** 109 printk messages dropped ** ** 92 printk messages dropped ** ** 97 printk messages dropped ** ** 105 printk messages dropped ** ** 39 printk messages dropped ** [ 723.487210][T15066] net_ratelimit: 44 callbacks suppressed ** 13 printk messages dropped ** ** 125 printk messages dropped ** ** 138 printk messages dropped ** ** 127 printk messages dropped ** ** 134 printk messages dropped ** ** 344 printk messages dropped ** ** 94 printk messages dropped ** ** 1 printk messages dropped ** ** 121 printk messages dropped ** ** 116 printk messages dropped ** ** 245 printk messages dropped ** ** 104 printk messages dropped ** ** 103 printk messages dropped ** ** 87 printk messages dropped ** ** 95 printk messages dropped ** ** 97 printk messages dropped ** ** 102 printk messages dropped ** ** 100 printk messages dropped ** ** 96 printk messages dropped ** ** 95 printk messages dropped ** ** 94 printk messages dropped ** ** 96 printk messages dropped ** ** 95 printk messages dropped ** ** 95 printk messages dropped ** ** 94 printk messages dropped ** ** 93 printk messages dropped ** ** 147 printk messages dropped ** ** 97 printk messages dropped ** ** 94 printk messages dropped ** ** 91 printk messages dropped ** ** 82 printk messages dropped ** ** 1 printk messages dropped ** ** 130 printk messages dropped ** ** 93 printk messages dropped ** ** 95 printk messages dropped ** ** 90 printk messages dropped ** ** 93 printk messages dropped ** ** 92 printk messages dropped ** ** 91 printk messages dropped ** ** 96 printk messages dropped ** ** 87 printk messages dropped ** ** 97 printk messages dropped ** ** 90 printk messages dropped ** ** 102 printk messages dropped ** ** 95 printk messages dropped ** ** 87 printk messages dropped ** ** 91 printk messages dropped ** ** 85 printk messages dropped ** ** 128 printk messages dropped ** ** 121 printk messages dropped ** ** 107 printk messages dropped ** ** 109 printk messages dropped ** ** 122 printk messages dropped ** ** 96 printk messages dropped ** ** 105 printk messages dropped ** ** 94 printk messages dropped ** ** 124 printk messages dropped ** ** 108 printk messages dropped ** ** 88 printk messages dropped ** ** 1 printk messages dropped ** ** 90 printk messages dropped ** ** 332 printk messages dropped ** ** 99 printk messages dropped ** ** 95 printk messages dropped ** ** 105 printk messages dropped ** ** 98 printk messages dropped ** ** 95 printk messages dropped ** ** 95 printk messages dropped ** ** 96 printk messages dropped ** ** 94 printk messages dropped ** ** 90 printk messages dropped ** ** 108 printk messages dropped ** ** 97 printk messages dropped ** ** 98 printk messages dropped ** ** 86 printk messages dropped ** ** 103 printk messages dropped ** ** 93 printk messages dropped ** ** 94 printk messages dropped ** ** 95 printk messages dropped ** ** 95 printk messages dropped ** ** 89 printk messages dropped ** ** 89 printk messages dropped ** ** 115 printk messages dropped ** ** 129 printk messages dropped ** ** 124 printk messages dropped ** ** 97 printk messages dropped ** ** 92 printk messages dropped ** ** 97 printk messages dropped ** ** 98 printk messages dropped ** ** 91 printk messages dropped ** ** 120 printk messages dropped ** ** 4 printk messages dropped ** ** 86 printk messages dropped ** ** 87 printk messages dropped ** ** 92 printk messages dropped ** ** 93 printk messages dropped ** ** 94 printk messages dropped ** ** 90 printk messages dropped ** ** 102 printk messages dropped ** ** 95 printk messages dropped ** ** 91 printk messages dropped ** ** 96 printk messages dropped ** ** 104 printk messages dropped ** ** 94 printk messages dropped ** ** 92 printk messages dropped ** ** 107 printk messages dropped ** ** 98 printk messages dropped ** ** 87 printk messages dropped ** ** 91 printk messages dropped ** ** 106 printk messages dropped ** ** 92 printk messages dropped ** ** 64 printk messages dropped ** ** 77 printk messages dropped ** ** 90 printk messages dropped ** ** 83 printk messages dropped ** ** 110 printk messages dropped ** ** 89 printk messages dropped ** ** 77 printk messages dropped ** ** 10 printk messages dropped ** ** 106 printk messages dropped ** ** 95 printk messages dropped ** ** 98 printk messages dropped ** ** 95 printk messages dropped ** ** 100 printk messages dropped ** ** 99 printk messages dropped ** ** 106 printk messages dropped ** ** 114 printk messages dropped ** ** 95 printk messages dropped ** ** 95 printk messages dropped ** ** 106 printk messages dropped ** ** 102 printk messages dropped ** ** 118 printk messages dropped ** ** 99 printk messages dropped ** ** 94 printk messages dropped ** ** 103 printk messages dropped ** ** 102 printk messages dropped ** ** 98 printk messages dropped ** ** 93 printk messages dropped ** ** 109 printk messages dropped ** ** 97 printk messages dropped ** ** 67 printk messages dropped ** ** 4 printk messages dropped ** ** 103 printk messages dropped ** ** 103 printk messages dropped ** ** 101 printk messages dropped ** ** 93 printk messages dropped ** ** 105 printk messages dropped ** ** 103 printk messages dropped ** ** 101 printk messages dropped ** ** 103 printk messages dropped ** ** 100 printk messages dropped ** ** 106 printk messages dropped ** ** 100 printk messages dropped ** ** 99 printk messages dropped ** ** 98 printk messages dropped ** ** 103 printk messages dropped ** ** 109 printk messages dropped ** ** 90 printk messages dropped ** ** 98 printk messages dropped ** ** 93 printk messages dropped ** ** 97 printk messages dropped ** ** 98 printk messages dropped ** ** 111 printk messages dropped ** ** 97 printk messages dropped ** ** 100 printk messages dropped ** ** 95 printk messages dropped ** ** 99 printk messages dropped ** ** 103 printk messages dropped ** ** 36 printk messages dropped ** ** 1 printk messages dropped ** ** 86 printk messages dropped ** ** 97 printk messages dropped ** ** 95 printk messages dropped ** ** 84 printk messages dropped ** ** 91 printk messages dropped ** ** 99 printk messages dropped ** ** 96 printk messages dropped ** ** 97 printk messages dropped ** ** 105 printk messages dropped ** ** 149 printk messages dropped ** ** 100 printk messages dropped ** ** 128 printk messages dropped ** ** 95 printk messages dropped ** ** 107 printk messages dropped ** ** 110 printk messages dropped ** ** 97 printk messages dropped ** ** 101 printk messages dropped ** ** 99 printk messages dropped ** ** 100 printk messages dropped ** ** 97 printk messages dropped ** ** 98 printk messages dropped ** ** 97 printk messages dropped ** ** 96 printk messages dropped ** ** 98 printk messages dropped ** ** 97 printk messages dropped ** ** 75 printk messages dropped ** ** 1 printk messages dropped ** ** 92 printk messages dropped ** ** 99 printk messages dropped ** ** 98 printk messages dropped ** ** 97 printk messages dropped ** ** 94 printk messages dropped ** ** 103 printk messages dropped ** ** 98 printk messages dropped ** ** 106 printk messages dropped ** ** 100 printk messages dropped ** ** 96 printk messages dropped ** ** 100 printk messages dropped ** ** 98 printk messages dropped ** ** 95 printk messages dropped ** ** 102 printk messages dropped ** ** 100 printk messages dropped ** ** 99 printk messages dropped ** ** 94 printk messages dropped ** ** 95 printk messages dropped ** ** 94 printk messages dropped ** ** 100 printk messages dropped ** ** 92 printk messages dropped ** ** 102 printk messages dropped ** ** 106 printk messages dropped ** ** 34 printk messages dropped ** ** 1 printk messages dropped ** ** 94 printk messages dropped ** ** 98 printk messages dropped ** ** 92 printk messages dropped ** ** 98 printk messages dropped ** ** 108 printk messages dropped ** ** 99 printk messages dropped ** ** 97 printk messages dropped ** ** 96 printk messages dropped ** ** 97 printk messages dropped ** ** 94 printk messages dropped ** ** 100 printk messages dropped ** ** 102 printk messages dropped ** ** 93 printk messages dropped ** ** 95 printk messages dropped ** ** 98 printk messages dropped ** ** 95 printk messages dropped ** ** 112 printk messages dropped ** ** 99 printk messages dropped ** ** 93 printk messages dropped ** ** 99 printk messages dropped ** ** 91 printk messages dropped ** ** 102 printk messages dropped ** ** 50 printk messages dropped ** ** 91 printk messages dropped ** ** 134 printk messages dropped ** ** 102 printk messages dropped ** ** 108 printk messages dropped ** ** 99 printk messages dropped ** ** 93 printk messages dropped ** ** 101 printk messages dropped ** ** 102 printk messages dropped ** ** 97 printk messages dropped ** ** 97 printk messages dropped ** ** 95 printk messages dropped ** ** 97 printk messages dropped ** ** 101 printk messages dropped ** ** 97 printk messages dropped ** ** 99 printk messages dropped ** ** 108 printk messages dropped ** ** 96 printk messages dropped ** ** 107 printk messages dropped ** ** 103 printk messages dropped ** ** 91 printk messages dropped ** ** 94 printk messages dropped ** ** 93 printk messages dropped ** ** 99 printk messages dropped ** ** 98 printk messages dropped ** ** 96 printk messages dropped ** ** 94 printk messages dropped ** ** 106 printk messages dropped ** ** 97 printk messages dropped ** ** 96 printk messages dropped ** ** 92 printk messages dropped ** ** 99 printk messages dropped ** ** 104 printk messages dropped ** ** 105 printk messages dropped ** ** 60 printk messages dropped ** ** 1 printk messages dropped ** ** 85 printk messages dropped ** ** 96 printk messages dropped ** ** 93 printk messages dropped ** ** 99 printk messages dropped ** ** 103 printk messages dropped ** ** 109 printk messages dropped ** ** 93 printk messages dropped ** ** 100 printk messages dropped ** ** 99 printk messages dropped ** ** 102 printk messages dropped ** ** 97 printk messages dropped ** ** 99 printk messages dropped ** ** 95 printk messages dropped ** ** 102 printk messages dropped ** ** 101 printk messages dropped ** ** 100 printk messages dropped ** ** 100 printk messages dropped ** ** 97 printk messages dropped ** ** 96 printk messages dropped ** ** 96 printk messages dropped ** ** 100 printk messages dropped ** ** 94 printk messages dropped ** ** 102 printk messages dropped ** ** 104 printk messages dropped ** ** 100 printk messages dropped ** ** 96 printk messages dropped ** ** 5 printk messages dropped ** ** 81 printk messages dropped ** ** 92 printk messages dropped ** ** 103 printk messages dropped ** ** 91 printk messages dropped ** ** 94 printk messages dropped ** ** 93 printk messages dropped ** ** 98 printk messages dropped ** ** 101 printk messages dropped ** ** 689 printk messages dropped ** ** 244 printk messages dropped ** ** 68 printk messages dropped ** ** 67 printk messages dropped ** ** 58 printk messages dropped ** ** 145 printk messages dropped ** ** 95 printk messages dropped ** ** 75 printk messages dropped ** ** 63 printk messages dropped ** ** 60 printk messages dropped ** ** 63 printk messages dropped ** ** 68 printk messages dropped ** ** 62 printk messages dropped ** ** 63 printk messages dropped ** ** 60 printk messages dropped ** ** 67 printk messages dropped ** ** 73 printk messages dropped ** ** 92 printk messages dropped ** ** 68 printk messages dropped ** ** 62 printk messages dropped ** ** 67 printk messages dropped ** ** 59 printk messages dropped ** ** 99 printk messages dropped ** ** 77 printk messages dropped ** ** 83 printk messages dropped ** ** 10 printk messages dropped ** [ 728.904567][T11812] net_ratelimit: 38 callbacks suppressed [ 734.355689][T11816] net_ratelimit: 44 callbacks suppressed ** 4 printk messages dropped ** ** 108 printk messages dropped ** ** 117 printk messages dropped ** ** 120 printk messages dropped ** ** 115 printk messages dropped ** ** 121 printk messages dropped ** ** 123 printk messages dropped ** ** 114 printk messages dropped ** ** 115 printk messages dropped ** ** 121 printk messages dropped ** ** 119 printk messages dropped ** ** 116 printk messages dropped ** ** 124 printk messages dropped ** ** 117 printk messages dropped ** ** 121 printk messages dropped ** ** 113 printk messages dropped ** ** 120 printk messages dropped ** ** 117 printk messages dropped ** ** 121 printk messages dropped ** ** 111 printk messages dropped ** ** 50 printk messages dropped ** ** 6 printk messages dropped ** ** 302 printk messages dropped ** ** 116 printk messages dropped ** ** 127 printk messages dropped ** ** 112 printk messages dropped ** ** 118 printk messages dropped ** ** 135 printk messages dropped ** ** 120 printk messages dropped ** ** 116 printk messages dropped ** ** 121 printk messages dropped ** ** 120 printk messages dropped ** ** 114 printk messages dropped ** ** 122 printk messages dropped ** ** 115 printk messages dropped ** ** 70 printk messages dropped ** ** 144 printk messages dropped ** ** 122 printk messages dropped ** ** 125 printk messages dropped ** ** 116 printk messages dropped ** ** 120 printk messages dropped ** ** 119 printk messages dropped ** ** 119 printk messages dropped ** ** 118 printk messages dropped ** ** 120 printk messages dropped ** ** 20 printk messages dropped ** ** 2 printk messages dropped ** ** 1 printk messages dropped ** ** 111 printk messages dropped ** ** 120 printk messages dropped ** ** 120 printk messages dropped ** ** 118 printk messages dropped ** ** 117 printk messages dropped ** ** 117 printk messages dropped ** ** 117 printk messages dropped ** ** 124 printk messages dropped ** ** 125 printk messages dropped ** ** 122 printk messages dropped ** ** 122 printk messages dropped ** ** 124 printk messages dropped ** ** 29 printk messages dropped ** ** 119 printk messages dropped ** ** 116 printk messages dropped ** ** 122 printk messages dropped ** ** 124 printk messages dropped ** ** 118 printk messages dropped ** ** 122 printk messages dropped ** ** 118 printk messages dropped ** ** 118 printk messages dropped ** ** 120 printk messages dropped ** ** 123 printk messages dropped ** ** 115 printk messages dropped ** ** 123 printk messages dropped ** ** 111 printk messages dropped ** ** 115 printk messages dropped ** ** 125 printk messages dropped ** ** 114 printk messages dropped ** ** 122 printk messages dropped ** ** 118 printk messages dropped ** ** 117 printk messages dropped ** ** 117 printk messages dropped ** ** 117 printk messages dropped ** ** 119 printk messages dropped ** ** 121 printk messages dropped ** ** 125 printk messages dropped ** ** 112 printk messages dropped ** ** 124 printk messages dropped ** ** 56 printk messages dropped ** ** 94 printk messages dropped ** ** 110 printk messages dropped ** ** 331 printk messages dropped ** ** 118 printk messages dropped ** ** 121 printk messages dropped ** ** 122 printk messages dropped ** ** 117 printk messages dropped ** ** 120 printk messages dropped ** ** 119 printk messages dropped ** ** 117 printk messages dropped ** ** 124 printk messages dropped ** ** 117 printk messages dropped ** ** 117 printk messages dropped ** ** 122 printk messages dropped ** ** 112 printk messages dropped ** ** 114 printk messages dropped ** ** 122 printk messages dropped ** ** 115 printk messages dropped ** ** 124 printk messages dropped ** ** 116 printk messages dropped ** ** 116 printk messages dropped ** ** 121 printk messages dropped ** ** 120 printk messages dropped ** ** 117 printk messages dropped ** ** 122 printk messages dropped ** ** 29 printk messages dropped ** ** 1 printk messages dropped ** ** 109 printk messages dropped ** ** 117 printk messages dropped ** ** 118 printk messages dropped ** ** 111 printk messages dropped ** ** 123 printk messages dropped ** ** 117 printk messages dropped ** ** 111 printk messages dropped ** ** 122 printk messages dropped ** ** 113 printk messages dropped ** ** 127 printk messages dropped ** ** 112 printk messages dropped ** ** 120 printk messages dropped ** ** 121 printk messages dropped ** ** 120 printk messages dropped ** ** 112 printk messages dropped ** ** 123 printk messages dropped ** ** 117 printk messages dropped ** ** 124 printk messages dropped ** ** 123 printk messages dropped ** ** 113 printk messages dropped ** ** 86 printk messages dropped ** ** 2 printk messages dropped ** ** 126 printk messages dropped ** ** 117 printk messages dropped ** ** 126 printk messages dropped ** ** 120 printk messages dropped ** ** 334 printk messages dropped ** ** 122 printk messages dropped ** ** 118 printk messages dropped ** ** 117 printk messages dropped ** ** 122 printk messages dropped ** ** 119 printk messages dropped ** ** 121 printk messages dropped ** ** 118 printk messages dropped ** ** 113 printk messages dropped ** ** 30 printk messages dropped ** ** 1 printk messages dropped ** ** 113 printk messages dropped ** ** 127 printk messages dropped ** ** 280 printk messages dropped ** ** 103 printk messages dropped ** ** 125 printk messages dropped ** ** 112 printk messages dropped ** ** 116 printk messages dropped ** ** 131 printk messages dropped ** ** 119 printk messages dropped ** ** 111 printk messages dropped ** ** 116 printk messages dropped ** ** 127 printk messages dropped ** ** 111 printk messages dropped ** ** 123 printk messages dropped ** ** 117 printk messages dropped ** ** 120 printk messages dropped ** ** 114 printk messages dropped ** ** 120 printk messages dropped ** ** 124 printk messages dropped ** ** 70 printk messages dropped ** ** 8 printk messages dropped ** ** 118 printk messages dropped ** ** 121 printk messages dropped ** ** 122 printk messages dropped ** ** 121 printk messages dropped ** ** 121 printk messages dropped ** ** 118 printk messages dropped ** ** 121 printk messages dropped ** ** 124 printk messages dropped ** ** 122 printk messages dropped ** ** 120 printk messages dropped ** ** 121 printk messages dropped ** ** 116 printk messages dropped ** ** 129 printk messages dropped ** ** 135 printk messages dropped ** ** 120 printk messages dropped ** ** 113 printk messages dropped ** ** 111 printk messages dropped ** ** 127 printk messages dropped ** ** 116 printk messages dropped ** ** 119 printk messages dropped ** ** 120 printk messages dropped ** ** 128 printk messages dropped ** ** 74 printk messages dropped ** ** 1 printk messages dropped ** ** 118 printk messages dropped ** ** 114 printk messages dropped ** ** 125 printk messages dropped ** ** 139 printk messages dropped ** ** 114 printk messages dropped ** ** 117 printk messages dropped ** ** 116 printk messages dropped ** ** 122 printk messages dropped ** ** 141 printk messages dropped ** ** 125 printk messages dropped ** ** 115 printk messages dropped ** ** 124 printk messages dropped ** ** 114 printk messages dropped ** ** 85 printk messages dropped ** ** 2 printk messages dropped ** ** 117 printk messages dropped ** ** 126 printk messages dropped ** ** 126 printk messages dropped ** ** 108 printk messages dropped ** ** 128 printk messages dropped ** ** 110 printk messages dropped ** ** 129 printk messages dropped ** ** 117 printk messages dropped ** ** 132 printk messages dropped ** ** 116 printk messages dropped ** ** 126 printk messages dropped ** ** 115 printk messages dropped ** ** 122 printk messages dropped ** ** 109 printk messages dropped ** ** 126 printk messages dropped ** ** 123 printk messages dropped ** ** 117 printk messages dropped ** ** 121 printk messages dropped ** ** 122 printk messages dropped ** ** 125 printk messages dropped ** ** 125 printk messages dropped ** ** 138 printk messages dropped ** ** 57 printk messages dropped ** ** 106 printk messages dropped ** ** 134 printk messages dropped ** ** 144 printk messages dropped ** ** 139 printk messages dropped ** ** 144 printk messages dropped ** ** 132 printk messages dropped ** ** 118 printk messages dropped ** ** 112 printk messages dropped ** ** 161 printk messages dropped ** ** 107 printk messages dropped ** ** 121 printk messages dropped ** ** 136 printk messages dropped ** ** 146 printk messages dropped ** ** 122 printk messages dropped ** ** 120 printk messages dropped ** ** 112 printk messages dropped ** ** 176 printk messages dropped ** ** 93 printk messages dropped ** ** 89 printk messages dropped ** ** 87 printk messages dropped ** ** 210 printk messages dropped ** ** 177 printk messages dropped ** ** 98 printk messages dropped ** ** 95 printk messages dropped ** ** 86 printk messages dropped ** ** 18 printk messages dropped ** ** 7 printk messages dropped ** ** 129 printk messages dropped ** ** 117 printk messages dropped ** ** 92 printk messages dropped ** ** 94 printk messages dropped ** ** 93 printk messages dropped ** ** 83 printk messages dropped ** ** 96 printk messages dropped ** ** 91 printk messages dropped ** ** 91 printk messages dropped ** ** 84 printk messages dropped ** ** 93 printk messages dropped ** ** 91 printk messages dropped ** ** 88 printk messages dropped ** ** 92 printk messages dropped ** ** 92 printk messages dropped ** ** 94 printk messages dropped ** ** 92 printk messages dropped ** ** 90 printk messages dropped ** ** 82 printk messages dropped ** ** 44 printk messages dropped ** ** 90 printk messages dropped ** ** 95 printk messages dropped ** ** 89 printk messages dropped ** ** 92 printk messages dropped ** ** 93 printk messages dropped ** ** 90 printk messages dropped ** ** 91 printk messages dropped ** ** 79 printk messages dropped ** ** 81 printk messages dropped ** ** 92 printk messages dropped ** ** 91 printk messages dropped ** ** 92 printk messages dropped ** ** 94 printk messages dropped ** ** 90 printk messages dropped ** ** 91 printk messages dropped ** ** 89 printk messages dropped ** ** 91 printk messages dropped ** ** 108 printk messages dropped ** ** 94 printk messages dropped ** ** 87 printk messages dropped ** ** 86 printk messages dropped ** ** 94 printk messages dropped ** ** 91 printk messages dropped ** ** 92 printk messages dropped ** ** 91 printk messages dropped ** ** 92 printk messages dropped ** ** 101 printk messages dropped ** ** 96 printk messages dropped ** ** 96 printk messages dropped ** ** 88 printk messages dropped ** ** 88 printk messages dropped ** ** 93 printk messages dropped ** ** 88 printk messages dropped ** ** 96 printk messages dropped ** ** 14 printk messages dropped ** ** 185 printk messages dropped ** ** 99 printk messages dropped ** ** 95 printk messages dropped ** ** 93 printk messages dropped ** ** 93 printk messages dropped ** ** 89 printk messages dropped ** ** 84 printk messages dropped ** ** 92 printk messages dropped ** ** 91 printk messages dropped ** ** 91 printk messages dropped ** ** 91 printk messages dropped ** ** 91 printk messages dropped ** ** 93 printk messages dropped ** ** 85 printk messages dropped ** ** 91 printk messages dropped ** ** 93 printk messages dropped ** ** 84 printk messages dropped ** ** 102 printk messages dropped ** ** 91 printk messages dropped ** ** 93 printk messages dropped ** ** 92 printk messages dropped ** ** 90 printk messages dropped ** ** 85 printk messages dropped ** ** 90 printk messages dropped ** ** 88 printk messages dropped ** ** 102 printk messages dropped ** ** 5 printk messages dropped ** ** 93 printk messages dropped ** ** 92 printk messages dropped ** ** 5 printk messages dropped ** ** 60 printk messages dropped ** ** 80 printk messages dropped ** ** 77 printk messages dropped ** ** 68 printk messages dropped ** ** 77 printk messages dropped ** ** 84 printk messages dropped ** ** 80 printk messages dropped ** ** 80 printk messages dropped ** ** 83 printk messages dropped ** ** 74 printk messages dropped ** ** 82 printk messages dropped ** ** 74 printk messages dropped ** ** 76 printk messages dropped ** ** 83 printk messages dropped ** ** 68 printk messages dropped ** ** 46 printk messages dropped ** ** 41 printk messages dropped ** ** 77 printk messages dropped ** ** 79 printk messages dropped ** ** 79 printk messages dropped ** ** 68 printk messages dropped ** ** 74 printk messages dropped ** ** 80 printk messages dropped ** ** 75 printk messages dropped ** ** 78 printk messages dropped ** ** 259 printk messages dropped ** ** 72 printk messages dropped ** ** 75 printk messages dropped ** ** 74 printk messages dropped ** ** 80 printk messages dropped ** ** 76 printk messages dropped ** ** 81 printk messages dropped ** ** 77 printk messages dropped ** ** 85 printk messages dropped ** ** 83 printk messages dropped ** ** 46 printk messages dropped ** ** 79 printk messages dropped ** ** 81 printk messages dropped ** ** 69 printk messages dropped ** ** 81 printk messages dropped ** [ 739.736814][ T1162] net_ratelimit: 36 callbacks suppressed [ 743.418362][T20522] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 745.149263][ T44] audit: type=1400 audit(1789526886.980:33455): avc: denied { write } for pid=20544 comm="syz.1.4308" name="loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 745.372378][T11812] net_ratelimit: 47 callbacks suppressed [ 745.892476][T20554] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4310'. [ 749.090939][T20577] FAULT_INJECTION: forcing a failure. [ 749.090939][T20577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 749.090983][T20577] CPU: 3 UID: 0 PID: 20577 Comm: syz.0.4316 Tainted: G L syzkaller #0 PREEMPT(full) [ 749.091007][T20577] Tainted: [L]=SOFTLOCKUP [ 749.091022][T20577] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 749.091036][T20577] Call Trace: [ 749.091063][T20577] [ 749.091091][T20577] dump_stack_lvl+0x100/0x190 [ 749.091174][T20577] should_fail_ex.cold+0x5/0xa [ 749.091273][T20577] _copy_from_iter+0x1f4/0x1690 [ 749.091445][T20577] ? __asan_memset+0x23/0x50 [ 749.091491][T20577] ? __pfx__copy_from_iter+0x10/0x10 [ 749.091683][T20577] ? __pfx___alloc_skb+0x10/0x10 [ 749.091949][T20577] netlink_sendmsg+0x808/0xda0 [ 749.092108][T20577] ? __pfx_netlink_sendmsg+0x10/0x10 [ 749.092209][T20577] ? selinux_socket_sendmsg+0x198/0x2f0 [ 749.092352][T20577] ____sys_sendmsg+0xa4d/0xbe0 [ 749.092399][T20577] ? __pfx_netlink_sendmsg+0x10/0x10 [ 749.092491][T20577] ? __pfx_____sys_sendmsg+0x10/0x10 [ 749.092634][T20577] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 749.092790][T20577] ___sys_sendmsg+0x190/0x1e0 [ 749.092885][T20577] ? __pfx____sys_sendmsg+0x10/0x10 [ 749.092949][T20577] ? trace_event_raw_event_lock+0x1e2/0x2b0 [ 749.093237][T20577] ? find_held_lock+0x2b/0x80 [ 749.093614][T20577] __sys_sendmsg+0x160/0x210 [ 749.093753][T20577] ? __pfx___sys_sendmsg+0x10/0x10 [ 749.094105][T20577] do_syscall_64+0x123/0x790 [ 749.094247][T20577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.094288][T20577] RIP: 0033:0x7fb09039e159 [ 749.094322][T20577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 749.094338][T20577] RSP: 002b:00007fb0912a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 749.094358][T20577] RAX: ffffffffffffffda RBX: 00007fb090626090 RCX: 00007fb09039e159 [ 749.094371][T20577] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000006 [ 749.094382][T20577] RBP: 00007fb0912a5090 R08: 0000000000000000 R09: 0000000000000000 [ 749.094397][T20577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 749.094409][T20577] R13: 00007fb090626128 R14: 00007fb090626090 R15: 00007fff77eca5d8 [ 749.094693][T20577] [ 749.648783][T20581] FAULT_INJECTION: forcing a failure. [ 749.648783][T20581] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 749.648831][T20581] CPU: 3 UID: 0 PID: 20581 Comm: syz.9.4318 Tainted: G L syzkaller #0 PREEMPT(full) [ 749.648855][T20581] Tainted: [L]=SOFTLOCKUP [ 749.648867][T20581] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 749.648882][T20581] Call Trace: [ 749.648909][T20581] [ 749.648938][T20581] dump_stack_lvl+0x100/0x190 [ 749.649018][T20581] should_fail_ex.cold+0x5/0xa [ 749.649118][T20581] _copy_to_user+0x32/0xd0 [ 749.649248][T20581] simple_read_from_buffer+0xcb/0x170 [ 749.649322][T20581] proc_fail_nth_read+0x1af/0x230 [ 749.649407][T20581] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 749.649546][T20581] ? rw_verify_area+0xce/0x6d0 [ 749.649586][T20581] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 749.649639][T20581] vfs_read+0x1e4/0xb40 [ 749.649713][T20581] ? lock_acquire+0x1d1/0x380 [ 749.649758][T20581] ? __fget_files+0x34/0x3d0 [ 749.649829][T20581] ? __pfx_vfs_read+0x10/0x10 [ 749.649865][T20581] ? find_held_lock+0x2b/0x80 [ 749.649915][T20581] ? __fget_files+0x215/0x3d0 [ 749.650036][T20581] ? __fget_files+0x21f/0x3d0 [ 749.650228][T20581] ksys_read+0x12a/0x250 [ 749.650279][T20581] ? __pfx_ksys_read+0x10/0x10 [ 749.650477][T20581] do_syscall_64+0x123/0x790 [ 749.650570][T20581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.650608][T20581] RIP: 0033:0x7f782295e98e [ 749.650668][T20581] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 749.650687][T20581] RSP: 002b:00007f7823836fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 749.650716][T20581] RAX: ffffffffffffffda RBX: 00007f78238376c0 RCX: 00007f782295e98e [ 749.650732][T20581] RDX: 000000000000000f RSI: 00007f78238370a0 RDI: 0000000000000003 [ 749.650747][T20581] RBP: 00007f7823837090 R08: 0000000000000000 R09: 0000000000000000 [ 749.650763][T20581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 749.650780][T20581] R13: 00007f7822c26038 R14: 00007f7822c25fa0 R15: 00007ffc4a32b458 [ 749.651042][T20581] [ 749.826084][T20584] netlink: 196 bytes leftover after parsing attributes in process `syz.1.4319'. [ 749.830368][T20584] netlink: 196 bytes leftover after parsing attributes in process `syz.1.4319'. [ 749.830389][T20584] netlink: 19 bytes leftover after parsing attributes in process `syz.1.4319'. [ 749.860118][T20585] netlink: 'syz.4.4320': attribute type 1 has an invalid length. [ 749.867961][T20584] No buffer was provided with the request [ 750.401176][ T2191] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 750.566332][ T2191] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 750.601265][ T2191] usb 6-1: config 2 has an invalid descriptor of length 206, skipping remainder of the config [ 750.601486][ T2191] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 750.601502][ T2191] usb 6-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 750.601519][ T2191] usb 6-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 750.634848][ T2191] usb 6-1: config 2 has an invalid descriptor of length 206, skipping remainder of the config [ 750.635068][ T2191] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 750.635085][ T2191] usb 6-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 750.635103][ T2191] usb 6-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 750.667680][ T2191] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.667697][ T2191] usb 6-1: Product: syz [ 750.667712][ T2191] usb 6-1: Manufacturer: syz [ 750.667727][ T2191] usb 6-1: SerialNumber: syz [ 750.674340][T20595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4323'. [ 750.760396][T15066] net_ratelimit: 41 callbacks suppressed [ 750.802760][ T2191] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 750.874718][ T2191] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 750.939978][ T2191] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 751.012491][T20587] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 751.047217][T20599] ip_tables: iptables: counters copy to user failed while replacing table [ 753.254087][ T5824] usb 9-1: new full-speed USB device number 55 using dummy_hcd [ 753.460232][ T43] usb 6-1: USB disconnect, device number 7 [ 753.778106][ T5824] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 753.803955][ T5824] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 753.804036][ T5824] usb 9-1: can't read configurations, error -71 [ 754.061363][ T43] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 754.252954][ T43] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 754.287384][ T43] ti_usb_3410_5052 6-1:2.0: device disconnected [ 754.877150][T20626] netlink: 'syz.4.4332': attribute type 39 has an invalid length. [ 755.014769][T20627] kcov: kcov_start: t = ffff88804af3cb00, size = 524288, area = ffffc90026d8c000 [ 755.015933][T20626] [ 755.019557][T20626] ====================================================== [ 755.021724][T20626] WARNING: possible circular locking dependency detected [ 755.023934][T20626] syzkaller #0 Tainted: G L [ 755.025869][T20626] ------------------------------------------------------ [ 755.028056][T20626] syz.4.4332/20626 is trying to acquire lock: [ 755.029959][T20626] ffffffff8f9b9960 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev+0x28/0x1e0 [ 755.032787][T20626] [ 755.032787][T20626] but task is already holding lock: [ 755.035082][T20626] ffff88805c44e358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: md_ioctl+0x111d/0x36d0 [ 755.038564][T20626] [ 755.038564][T20626] which lock already depends on the new lock. [ 755.038564][T20626] [ 755.042561][T20626] [ 755.042561][T20626] the existing dependency chain (in reverse order) is: [ 755.045347][T20626] [ 755.045347][T20626] -> #3 (&mddev->reconfig_mutex){+.+.}-{4:4}: [ 755.047955][T20626] lock_acquire+0x1d1/0x380 [ 755.049582][T20626] __mutex_lock+0x1a4/0x1bd0 [ 755.051258][T20626] md_start_sync+0xc4/0xea0 [ 755.052912][T20626] process_one_work+0xac7/0x1b10 [ 755.055167][T20626] worker_thread+0x5ef/0xe50 [ 755.057245][T20626] kthread+0x373/0x450 [ 755.059163][T20626] ret_from_fork+0x730/0xd60 [ 755.061149][T20627] kobject: 'switch-0' (ffff8880394e9c80): kobject_add_internal: parent: 'xprt-switches', set: 'sunrpc' [ 755.064617][T20626] ret_from_fork_asm+0x1a/0x30 [ 755.066320][T20626] [ 755.066320][T20626] -> #2 ((work_completion)(&mddev->sync_work)){+.+.}-{0:0}: [ 755.068084][T20627] kobject: 'switch-0' (ffff8880394e9c80): kobject_uevent_env [ 755.068406][T20627] kobject: 'switch-0' (ffff8880394e9c80): fill_kobj_path: path = '/kernel/sunrpc/xprt-switches/switch-0' [ 755.069619][T20627] kobject: 'xprt-0-tcp' (ffff8880394e9500): kobject_add_internal: parent: 'switch-0', set: 'sunrpc' [ 755.078642][T20626] lock_acquire+0x1d1/0x380 [ 755.080258][T20626] process_one_work+0xa32/0x1b10 [ 755.081919][T20626] worker_thread+0x5ef/0xe50 [ 755.083611][T20626] kthread+0x373/0x450 [ 755.085110][T20626] ret_from_fork+0x730/0xd60 [ 755.086751][T20626] ret_from_fork_asm+0x1a/0x30 [ 755.087313][T20627] kobject: 'xprt-0-tcp' (ffff8880394e9500): kobject_uevent_env [ 755.087691][T20627] kobject: 'xprt-0-tcp' (ffff8880394e9500): fill_kobj_path: path = '/kernel/sunrpc/xprt-switches/switch-0/xprt-0-tcp' [ 755.094751][T20626] [ 755.094751][T20626] -> #1 ((wq_completion)md_misc){+.+.}-{0:0}: [ 755.097343][T20626] lock_acquire+0x1d1/0x380 [ 755.098943][T20626] touch_wq_lockdep_map+0xad/0x1c0 [ 755.100732][T20626] __flush_workqueue+0x131/0x1200 [ 755.102515][T20626] md_alloc+0x30/0x10a0 [ 755.104048][T20626] md_probe+0x73/0xf0 [ 755.105495][T20626] blk_probe_dev+0x149/0x1e0 [ 755.106861][T20627] kobject: 'clnt-0' (ffff8880394e9700): kobject_add_internal: parent: 'rpc-clients', set: 'sunrpc' [ 755.110375][T20626] blk_request_module+0x16/0xc0 [ 755.112082][T20626] blkdev_get_no_open+0x9b/0xf0 [ 755.113799][T20626] bdev_file_open_by_dev+0x70/0x210 [ 755.115615][T20626] swsusp_check+0x72/0x470 [ 755.117199][T20626] software_resume+0x6f/0x330 [ 755.118861][T20626] resume_store+0x248/0x460 [ 755.120472][T20626] kobj_attr_store+0x58/0x80 [ 755.122166][T20626] sysfs_kf_write+0xf2/0x150 [ 755.123832][T20626] kernfs_fop_write_iter+0x3e0/0x5f0 [ 755.125662][T20626] vfs_write+0x6af/0x1050 [ 755.125789][T20627] kobject: 'clnt-0' (ffff8880394e9700): kobject_uevent_env [ 755.126170][T20627] kobject: 'clnt-0' (ffff8880394e9700): fill_kobj_path: path = '/kernel/sunrpc/rpc-clients/clnt-0' [ 755.132693][T20626] ksys_write+0x12a/0x250 [ 755.134234][T20626] do_syscall_64+0x123/0x790 [ 755.135888][T20626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.137906][T20626] [ 755.137906][T20626] -> #0 (major_names_lock){+.+.}-{4:4}: [ 755.140341][T20626] check_prev_add+0xeb/0xe60 [ 755.141964][T20626] __lock_acquire+0x1528/0x1f40 [ 755.143685][T20626] lock_acquire+0x1d1/0x380 [ 755.145290][T20626] __mutex_lock+0x1a4/0x1bd0 [ 755.146933][T20626] blk_probe_dev+0x28/0x1e0 [ 755.148543][T20626] blk_request_module+0x16/0xc0 [ 755.149709][T20627] kernfs switch: removing [ 755.149995][T20627] kobject: 'clnt-0' (ffff8880394e9700): kobject_uevent_env [ 755.150394][T20627] kobject: 'clnt-0' (ffff8880394e9700): fill_kobj_path: path = '/kernel/sunrpc/rpc-clients/clnt-0' [ 755.157347][T20626] blkdev_get_no_open+0x9b/0xf0 [ 755.159064][T20626] bdev_file_open_by_dev+0x70/0x210 [ 755.160874][T20626] md_import_device+0x120/0x360 [ 755.162599][T20626] md_add_new_disk+0xcc0/0x1820 [ 755.164374][T20626] md_ioctl+0x2bec/0x36d0 [ 755.164973][ T5824] Added buffer head 3 to ffff88801c7f5a00 [ 755.165322][ T5824] Added buffer head 2 to ffff88801c7f5a00 [ 755.166092][ C0] virtqueue callback for ffff88801c7f5a00 (ffffffff8664fd00) [ 755.166438][T19332] No more buffers in queue [ 755.174048][T20626] blkdev_ioctl+0x5ad/0x6f0 [ 755.175782][T20626] __x64_sys_ioctl+0x18e/0x210 [ 755.177582][T20626] do_syscall_64+0x123/0x790 [ 755.178094][T20627] kernfs rpc_version: removing [ 755.179779][T20627] kernfs program: removing [ 755.180099][T20627] kernfs max_connect: removing [ 755.183717][T20626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.185744][T20626] [ 755.185744][T20626] other info that might help us debug this: [ 755.185744][T20626] [ 755.188918][T20626] Chain exists of: [ 755.188918][T20626] major_names_lock --> (work_completion)(&mddev->sync_work) --> &mddev->reconfig_mutex [ 755.188918][T20626] [ 755.194239][T20626] Possible unsafe locking scenario: [ 755.194239][T20626] [ 755.196732][T20626] CPU0 CPU1 [ 755.198402][T20626] ---- ---- [ 755.200095][T20626] lock(&mddev->reconfig_mutex); [ 755.201698][T20626] lock((work_completion)(&mddev->sync_work)); [ 755.204479][T20626] lock(&mddev->reconfig_mutex); [ 755.206872][T20626] lock(major_names_lock); [ 755.208338][T20626] [ 755.208338][T20626] *** DEADLOCK *** [ 755.208338][T20626] [ 755.210933][T20626] locks held by syz.4.4332/20626: 1, last CPU#1: [ 755.213090][T20626] #0: ffff88805c44e358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: md_ioctl+0x111d/0x36d0 [ 755.216232][T20626] [ 755.216232][T20626] stack backtrace: [ 755.218094][T20626] CPU: 1 UID: 0 PID: 20626 Comm: syz.4.4332 Tainted: G L syzkaller #0 PREEMPT(full) [ 755.221483][T20626] Tainted: [L]=SOFTLOCKUP [ 755.222868][T20626] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 755.225779][T20627] kernfs clnt-0: removing [ 755.225913][T20627] kobject: 'clnt-0' (ffff8880394e9700): kobject_cleanup, parent 0000000000000000 [ 755.225932][T20627] kobject: 'clnt-0' (ffff8880394e9700): calling ktype release [ 755.226103][T20627] kobject: 'clnt-0': free name [ 755.226639][T20627] kobject: 'switch-0' (ffff8880394e9c80): kobject_uevent_env [ 755.227047][T20627] kobject: 'switch-0' (ffff8880394e9c80): fill_kobj_path: path = '/kernel/sunrpc/xprt-switches/switch-0' [ 755.235571][T20627] kernfs xprt_switch_info: removing [ 755.235912][T20627] kernfs add_xprt: removing [ 755.236290][T20627] kernfs switch-0: removing [ 755.243806][T10391] kobject: 'xprt-0-tcp' (ffff8880394e9500): kobject_uevent_env [ 755.244051][T10391] kobject: 'xprt-0-tcp' (ffff8880394e9500): fill_kobj_path: path = '/switch-0/xprt-0-tcp' [ 755.248844][T10391] kobject: 'switch-0' (ffff8880394e9c80): kobject_cleanup, parent 0000000000000000 [ 755.248862][T10391] kobject: 'switch-0' (ffff8880394e9c80): calling ktype release [ 755.248966][T10391] kobject: 'switch-0': free name [ 755.249115][T10391] kobject: 'xprt-0-tcp' (ffff8880394e9500): kobject_cleanup, parent 0000000000000000 [ 755.249127][T10391] kobject: 'xprt-0-tcp' (ffff8880394e9500): calling ktype release [ 755.249215][T10391] kobject: 'xprt-0-tcp': free name [ 755.264501][T20626] Call Trace: [ 755.265601][T20626] [ 755.266571][T20626] dump_stack_lvl+0x100/0x190 [ 755.268161][T20626] print_circular_bug.cold+0x178/0x1be [ 755.268309][T20627] kobject: 'switch-0' (ffff8880394e9b80): kobject_add_internal: parent: 'xprt-switches', set: 'sunrpc' [ 755.273379][T20626] check_noncircular+0x146/0x160 [ 755.274966][T20626] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 755.275030][T20564] inotify_handle_inode_event: group=ffff888035669800 mark=ffff88803097de10 mask=8000 [ 755.275183][T20564] fsnotify_insert_event: group=ffff888035669800 event=ffff88802af9bfc0 [ 755.282528][T20626] check_prev_add+0xeb/0xe60 [ 755.284082][T20626] __lock_acquire+0x1528/0x1f40 [ 755.285858][T20626] lock_acquire+0x1d1/0x380 [ 755.287472][T20626] ? blk_probe_dev+0x28/0x1e0 [ 755.289121][T20626] ? __pfx___might_resched+0x10/0x10 [ 755.290958][T20626] __mutex_lock+0x1a4/0x1bd0 [ 755.291456][T20627] kobject: 'switch-0' (ffff8880394e9b80): kobject_uevent_env [ 755.291913][T20627] kobject: 'switch-0' (ffff8880394e9b80): fill_kobj_path: path = '/kernel/sunrpc/xprt-switches/switch-0' [ 755.293042][T20627] kobject: 'xprt-0-tcp' (ffff8880394e9a80): kobject_add_internal: parent: 'switch-0', set: 'sunrpc' [ 755.301715][T20626] ? blk_probe_dev+0x28/0x1e0 [ 755.303690][T20626] ? blk_probe_dev+0x28/0x1e0 [ 755.305599][T20626] ? lock_acquire+0x1d1/0x380 [ 755.307146][T20626] ? find_inode_fast+0xa5/0xa30 [ 755.308774][T20626] ? find_held_lock+0x2b/0x80 [ 755.310500][T20626] ? __pfx___mutex_lock+0x10/0x10 [ 755.312225][T20626] ? find_inode_fast+0x1fa/0xa30 [ 755.312738][T20627] kobject: 'xprt-0-tcp' (ffff8880394e9a80): kobject_uevent_env [ 755.313155][T20627] kobject: 'xprt-0-tcp' (ffff8880394e9a80): fill_kobj_path: path = '/kernel/sunrpc/xprt-switches/switch-0/xprt-0-tcp' [ 755.314526][ T5142] get_one_event: group=ffff888035669800 event=ffff88802af9bfc0 [ 755.314544][ T5142] fsnotify_remove_first_event: group=ffff888035669800 event=ffff88802af9bfc0 [ 755.314559][ T5142] inotify_read: group=ffff888035669800 kevent=ffff88802af9bfc0 [ 755.314571][ T5142] copy_event_to_user: group=ffff888035669800 event=ffff88802af9bfc0 [ 755.314693][ T5142] inotify_read: group=ffff888035669800 kevent=0000000000000000 [ 755.328084][T20627] kobject: 'clnt-0' (ffff8880394e9080): kobject_add_internal: parent: 'rpc-clients', set: 'sunrpc' [ 755.335722][T20626] ? ilookup+0x189/0x210 [ 755.337164][T20626] ? blk_probe_dev+0x28/0x1e0 [ 755.338679][T20626] blk_probe_dev+0x28/0x1e0 [ 755.340371][T20626] blk_request_module+0x16/0xc0 [ 755.342200][T20626] blkdev_get_no_open+0x9b/0xf0 [ 755.344179][T20626] bdev_file_open_by_dev+0x70/0x210 [ 755.345935][T20626] md_import_device+0x120/0x360 [ 755.346275][T20627] kobject: 'clnt-0' (ffff8880394e9080): kobject_uevent_env [ 755.346691][T20627] kobject: 'clnt-0' (ffff8880394e9080): fill_kobj_path: path = '/kernel/sunrpc/rpc-clients/clnt-0' [ 755.353136][T20626] md_add_new_disk+0xcc0/0x1820 [ 755.354848][T20626] md_ioctl+0x2bec/0x36d0 [ 755.356351][T20626] ? __pfx_md_ioctl+0x10/0x10 [ 755.357894][T20626] ? do_vfs_ioctl+0x226/0x13e0 [ 755.359583][T20626] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 755.361763][T20626] ? __fget_files+0x34/0x3d0 [ 755.363369][T20626] ? __pfx_md_ioctl+0x10/0x10 [ 755.364933][T20626] blkdev_ioctl+0x5ad/0x6f0 [ 755.366373][T20626] ? __pfx_blkdev_ioctl+0x10/0x10 [ 755.368004][T20626] ? selinux_file_ioctl+0x13b/0x290 [ 755.369670][T20626] ? selinux_file_ioctl+0xb6/0x290 [ 755.371385][T20626] ? __pfx_blkdev_ioctl+0x10/0x10 [ 755.373089][T20626] __x64_sys_ioctl+0x18e/0x210 [ 755.374650][T20626] do_syscall_64+0x123/0x790 [ 755.376208][T20626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.378065][T20626] RIP: 0033:0x7f0fd8b9e159 [ 755.379523][T20626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 755.385475][T20626] RSP: 002b:00007f0fd9b0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 755.387999][T20626] RAX: ffffffffffffffda RBX: 00007f0fd8e25fa0 RCX: 00007f0fd8b9e159 [ 755.390507][T20626] RDX: 0000200000000420 RSI: 0000000040140921 RDI: 0000000000000005 [ 755.393437][T20626] RBP: 00007f0fd8c3506b R08: 0000000000000000 R09: 0000000000000000 [ 755.395955][T20626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 755.398386][T20626] R13: 00007f0fd8e26038 R14: 00007f0fd8e25fa0 R15: 00007ffd808e86e8 [ 755.401043][T20626] [ 755.404894][ T8127] bond6: (slave gretap1): Send learning packet: mac 92:64:8f:9a:6e:79 vlan 0 [ 755.406575][ T5824] Added buffer head 2 to ffff88801c7f5a00 [ 755.407057][ T5824] Added buffer head 3 to ffff88801c7f5a00 [ 755.407979][ C0] virtqueue callback for ffff88801c7f5a00 (ffffffff8664fd00) [ 755.413909][T19332] No more buffers in queue [ 755.487863][T20628] async_waiting @ 20628 [ 755.487924][T20628] async_continuing @ 20628 after 19 usec [ 755.545630][T20621] kcov: kcov_task_exit: t = ffff88803561cb00, kcov->t = ffff88803561cb00 [ 755.550898][T20623] kcov: kcov_task_exit: t = ffff88801cb40000, kcov->t = ffff88801cb40000 [ 755.551664][ C2] percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 0 [ 755.578405][T20624] kcov: kcov_task_exit: t = ffff888033e2cb00, kcov->t = ffff888033e2cb00 [ 755.626331][ C3] wireguard: wg0: Handshake for peer 67 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 2) [ 755.634253][ T5824] Added buffer head 3 to ffff88801c7f5a00 [ 755.634688][ T5824] Added buffer head 2 to ffff88801c7f5a00 [ 755.635634][ C0] virtqueue callback for ffff88801c7f5a00 (ffffffff8664fd00) [ 755.636130][T19332] No more buffers in queue [ 755.638879][ C0] nf_nat: Already setup manip DST for ct ffff88803d5e7680 (status bits 0x188) [ 755.638990][ C0] nf_nat: Already setup manip SRC for ct ffff88803d5e7680 (status bits 0x188) [ 755.716718][T20626] md: could not open device unknown-block(0,0). [ 755.717169][T20626] md: md_import_device returned -6 [ 755.717185][T20626] md: waking up MD thread md0_raid10. [ 755.717258][T20626] md: waking up MD thread md0_raid10. [ 755.718197][T13443] md: waking up MD thread md0_raid10. [ 755.718291][T19107] md: waking up MD thread md0_raid10. [ 755.724267][T20627] kobject: 'switch-0' (ffff8880394e9b80): kobject_uevent_env [ 755.724635][T20627] kobject: 'switch-0' (ffff8880394e9b80): fill_kobj_path: path = '/kernel/sunrpc/xprt-switches/switch-0' [ 755.728308][T20627] kernfs xprt_switch_info: removing [ 755.728666][T20627] kernfs add_xprt: removing [ 755.729015][T20627] kernfs switch-0: removing [ 755.741437][T20626] kcov: kcov_task_exit: t = ffff888024b7a580, kcov->t = ffff888024b7a580 [ 755.745336][ T43] kernfs switch: removing [ 755.745572][ T43] kobject: 'clnt-0' (ffff8880394e9080): kobject_uevent_env [ 755.745801][ T43] kobject: 'clnt-0' (ffff8880394e9080): fill_kobj_path: path = '/kernel/sunrpc/rpc-clients/clnt-0' [ 755.746321][ T43] kernfs rpc_version: removing [ 755.746573][ T43] kernfs program: removing [ 755.746827][ T43] kernfs max_connect: removing [ 755.747090][ T43] kernfs clnt-0: removing [ 755.747205][ T43] kobject: 'clnt-0' (ffff8880394e9080): kobject_cleanup, parent 0000000000000000 [ 755.747223][ T43] kobject: 'clnt-0' (ffff8880394e9080): calling ktype release [ 755.747350][ T43] kobject: 'clnt-0': free name [ 755.751794][ T43] kobject: 'xprt-0-tcp' (ffff8880394e9a80): kobject_uevent_env [ 755.752021][ T43] kobject: 'xprt-0-tcp' (ffff8880394e9a80): fill_kobj_path: path = '/switch-0/xprt-0-tcp' [ 755.753044][ T43] kobject: 'switch-0' (ffff8880394e9b80): kobject_cleanup, parent 0000000000000000 [ 755.753061][ T43] kobject: 'switch-0' (ffff8880394e9b80): calling ktype release [ 755.753205][ T43] kobject: 'switch-0': free name [ 755.753290][ T43] kobject: 'xprt-0-tcp' (ffff8880394e9a80): kobject_cleanup, parent 0000000000000000 [ 755.753305][ T43] kobject: 'xprt-0-tcp' (ffff8880394e9a80): calling ktype release [ 755.753434][ T43] kobject: 'xprt-0-tcp': free name [ 755.761418][T20627] kcov: kcov_task_exit: t = ffff88804af3cb00, kcov->t = ffff88804af3cb00 [ 755.861456][ T5824] Added buffer head 2 to ffff88801c7f5a00 [ 755.861939][ T5824] Added buffer head 3 to ffff88801c7f5a00 [ 755.862935][ C0] virtqueue callback for ffff88801c7f5a00 (ffffffff8664fd00) [ 755.863370][T19332] No more buffers in queue [ 755.904055][ C0] percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 0 [ 755.905047][ C0] percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 0 [ 756.089601][ T5824] Added buffer head 3 to ffff88801c7f5a00 [ 756.089955][ T5824] Added buffer head 2 to ffff88801c7f5a00 [ 756.090811][ C0] virtqueue callback for ffff88801c7f5a00 (ffffffff8664fd00) [ 756.091142][T19332] No more buffers in queue [ 756.310167][ C0] wireguard: wg1: Handshake for peer 16 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 6) [ 756.310678][T11816] net_ratelimit: 38 callbacks suppressed [ 756.310701][T11816] wireguard: wg1: Sending handshake initiation to peer 16 (127.0.0.1:20003) [ 756.317108][ T5824] Added buffer head 2 to ffff88801c7f5a00 [ 756.317461][ T5824] Added buffer head 3 to ffff88801c7f5a00 [ 756.318252][ C0] virtqueue callback for ffff88801c7f5a00 (ffffffff8664fd00) [ 756.320301][T19332] No more buffers in queue [ 756.407167][ C3] wireguard: wg0: Sending keepalive packet to peer 87 ([::1]:20003/0%0) [ 756.412717][T19570] wireguard: wg2: Receiving keepalive packet from peer 90 ([::1]:20001/0%0) [ 756.549003][ T5824] Added buffer head 3 to ffff88801c7f5a00 [ 756.549613][ T5824] Added buffer head 2 to ffff88801c7f5a00 [ 756.550484][ C0] virtqueue callback for ffff88801c7f5a00 (ffffffff8664fd00) [ 756.551056][T19332] No more buffers in queue [ 756.566999][ C2] wireguard: wg0: Sending keepalive packet to peer 86 ([::1]:20002/0%0) [ 756.570352][T19568] wireguard: wg1: Receiving keepalive packet from peer 88 ([::1]:20001/0%0) [ 756.655198][ T12] bond6: (slave gretap1): Send learning packet: mac 92:64:8f:9a:6e:79 vlan 0 [ 756.738229][ C0] nf_nat: Already setup manip DST for ct ffff88803d5e7680 (status bits 0x188) [ 756.738366][ C0] nf_nat: Already setup manip SRC for ct ffff88803d5e7680 (status bits 0x188) [ 756.781882][ T5824] Added buffer head 2 to ffff88801c7f5a00 [ 756.782508][ T5824] Added buffer head 3 to ffff88801c7f5a00 [ 756.783364][ C0] virtqueue callback for ffff88801c7f5a00 (ffffffff8664fd00) [ 756.783719][T19332] No more buffers in queue [ 756.908635][ C0] wireguard: wg2: Handshake for peer 60 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 12) [ 756.908952][ C0] wireguard: wg2: Handshake for peer 17 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 14) [ 756.909622][T11823] wireguard: wg2: Sending handshake initiation to peer 60 (127.0.0.1:20002) [ 756.909670][T11816] wireguard: wg2: Sending handshake initiation to peer 17 ([::1]:20001/0%0) [ 756.910117][T11823] wireguard: wg2: No route to 127.0.0.1:20002, error -101 [ 756.910166][T11816] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:0000:0001, type=16, ifindex=1) => 00000000 [ 756.994086][ C0] wireguard: wg1: Handshake for peer 58 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 10) [ 756.995280][T11823] wireguard: wg1: Sending handshake initiation to peer 58 (127.0.0.1:20003) [ 757.002691][ T5824] Added buffer head 3 to ffff88801c7f5a00 [ 757.003235][ T5824] Added buffer head 2 to ffff88801c7f5a00 [ 757.004126][ C0] virtqueue callback for ffff88801c7f5a00 (ffffffff8664fd00) [ 757.004842][T19332] No more buffers in queue [ 757.229397][ T5824] Added buffer head 2 to ffff88801c7f5a00 [ 757.229803][ T5824] Added buffer head 3 to ffff88801c7f5a00 [ 757.230660][ C0] virtqueue callback for ffff88801c7f5a00 (ffffffff8664fd00) [ 757.232107][T19332] No more buffers in queue [ 757.443533][ T5824] Added buffer head 3 to ffff88801c7f5a00 [ 757.443833][ T5824] Added buffer head 2 to ffff88801c7f5a00 [ 757.444673][ C0] virtqueue callback for ffff88801c7f5a00 (ffffffff8664fd00) [ 757.444976][T19332] No more buffers in queue [ 757.670842][ T5824] Added buffer head 2 to ffff88801c7f5a00 [ 757.671191][ T5824] Added buffer head 3 to ffff88801c7f5a00 [ 757.672047][ C0] virtqueue callback for ffff88801c7f5a00 (ffffffff8664fd00) [ 757.672529][T19332] No more buffers in queue [ 757.678019][ C3] wireguard: wg0: Handshake for peer 55 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2) [ 757.850514][ C0] nf_nat: Already setup manip DST for ct ffff88803d5e7680 (status bits 0x188) [ 757.850583][ C0] nf_nat: Already setup manip SRC for ct ffff88803d5e7680 (status bits 0x188) [ 757.889169][T19332] Added buffer head 3 to ffff88801c7f5a00 [ 757.889648][T19332] Added buffer head 2 to ffff88801c7f5a00 [ 757.890520][ C0] virtqueue callback for ffff88801c7f5a00 (ffffffff8664fd00) [ 757.892800][ T5824] No more buffers in queue [ 757.894311][ T12] bond6: (slave gretap1): Send learning packet: mac 92:64:8f:9a:6e:79 vlan 0 [ 758.117723][T19332] Added buffer head 2 to ffff88801c7f5a00 [ 758.118279][T19332] Added buffer head 3 to ffff88801c7f5a00 [ 758.119125][ C0] virtqueue callback for ffff88801c7f5a00 (ffffffff8664fd00) [ 758.122208][ T5824] No more buffers in queue [ 758.342225][T19332] Added buffer head 3 to ffff88801c7f5a00 [ 758.342812][T19332] Added buffer head 2 to ffff88801c7f5a00 [ 758.343691][ C0] virtqueue callback for ffff88801c7f5a00 (ffffffff8664fd00) [ 758.344246][ T5824] No more buffers in queue [ 758.372623][ C2] wireguard: wg2: Handshake for peer 18 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 18) [ 758.372992][ C2] wireguard: wg0: Handshake for peer 14 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2) [ 758.569709][T19332] Added buffer head 2 to ffff88801c7f5a00 [ 758.570028][T19332] Added buffer head 3 to ffff88801c7f5a00 [ 758.570883][ C0] virtqueue callback for ffff88801c7f5a00 (ffffffff8664fd00) [ 758.571192][ T5824] No more buffers in queue [ 758.803052][T19332] Added buffer head 3 to ffff88801c7f5a00 [ 758.803588][T19332] Added buffer head 2 to ffff88801c7f5a00 [ 758.804418][ C0] virtqueue callback for ffff88801c7f5a00 (ffffffff8664fd00) [ 758.804760][ T5824] No more buffers in queue [ 758.972709][ C0] nf_nat: Already setup manip DST for ct ffff88803d5e7680 (status bits 0x188) [ 758.972797][ C0] nf_nat: Already setup manip SRC for ct ffff88803d5e7680 (status bits 0x188) [ 759.039843][T19332] Added buffer head 2 to ffff88801c7f5a00 [ 759.040219][T19332] Added buffer head 3 to ffff88801c7f5a00 [ 759.041078][ C0] virtqueue callback for ffff88801c7f5a00 (ffffffff8664fd00) [ 759.048990][ T5824] No more buffers in queue [ 759.143445][T18290] bond6: (slave gretap1): Send learning packet: mac 92:64:8f:9a:6e:79 vlan 0 [ 759.267475][T19332] Added buffer head 3 to ffff88801c7f5a00 [ 759.285848][T19332] Added buffer head 2 to ffff88801c7f5a00 [ 759.286693][ C0] virtqueue callback for ffff88801c7f5a00 (ffffffff8664fd00) [ 759.289246][ T5824] No more buffers in queue [ 759.482324][T19332] Added buffer head 2 to ffff88801c7f5a00 [ 759.482829][T19332] Added buffer head 3 to ffff88801c7f5a00 [ 759.483673][ C0] virtqueue callback for ffff88801c7f5a00 (ffffffff8664fd00) [ 759.485933][ T5824] No more buffers in queue [ 759.710962][T19332] Added buffer head 3 to ffff88801c7f5a00 [ 759.711575][T19332] Added buffer head 2 to ffff88801c7f5a00 [ 759.712474][ C0] virtqueue callback for ffff88801c7f5a00 (ffffffff8664fd00) [ 759.713010][ T5824] No more buffers in queue [ 759.939765][T19332] Added buffer head 2 to ffff88801c7f5a00 [ 759.940096][T19332] Added buffer head 3 to ffff88801c7f5a00 [ 759.940912][ C0] virtqueue callback for ffff88801c7f5a00 (ffffffff8664fd00) [ 759.941224][ T5824] No more buffers in queue [ 760.084115][ C0] nf_nat: Already setup manip DST for ct ffff88803d5e7680 (status bits 0x188) [ 760.084219][ C0] nf_nat: Already setup manip SRC for ct ffff88803d5e7680 (status bits 0x188) [ 760.150301][T19332] Added buffer head 3 to ffff88801c7f5a00 [ 760.150651][T19332] Added buffer head 2 to ffff88801c7f5a00 [ 760.151485][ C0] virtqueue callback for ffff88801c7f5a00 (ffffffff8664fd00) [ 760.151849][ T5824] No more buffers in queue [ 760.384385][ T5824] Added buffer head 2 to ffff88801c7f5a00 [ 760.384951][ T5824] Added buffer head 3 to ffff88801c7f5a00 [ 760.385824][ C0] virtqueue callback for ffff88801c7f5a00 (ffffffff8664fd00) [ 760.387861][T19332] No more buffers in queue [ 760.394605][ T12] bond6: (slave gretap1): Send learning packet: mac 92:64:8f:9a:6e:79 vlan 0 [ 760.413643][ C3] wireguard: wg0: Handshake for peer 56 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2) [ 760.426019][ C2] wireguard: wg1: Handshake for peer 57 ([::1]:8526/0%0) did not complete after 5 seconds, retrying (try 6) [ 760.615928][ T5824] Added buffer head 3 to ffff88801c7f5a00 [ 760.616429][ T5824] Added buffer head 2 to ffff88801c7f5a00 [ 760.617350][ C0] virtqueue callback for ffff88801c7f5a00 (ffffffff8664fd00) [ 760.617849][T19332] No more buffers in queue [ 760.844357][ T5824] Added buffer head 2 to ffff88801c7f5a00 [ 760.844932][ T5824] Added buffer head 3 to ffff88801c7f5a00 [ 760.845794][ C0] virtqueue callback for ffff88801c7f5a00 (ffffffff8664fd00) [ 760.846294][T19332] No more buffers in queue [ 761.051161][ T5824] Added buffer head 3 to ffff88801c7f5a00 [ 761.051768][ T5824] Added buffer head 2 to ffff88801c7f5a00 [ 761.052681][ C0] virtqueue callback for ffff88801c7f5a00 (ffffffff8664fd00) [ 761.053200][T19332] No more buffers in queue [ 761.097506][ C2] wireguard: wg1: Handshake for peer 15 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 19) [ 761.097851][ C0] wireguard: wg0: Handshake for peer 13 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2) [ 761.184321][ C0] nf_nat: Already setup manip DST for ct ffff88803d5e7680 (status bits 0x188) [ 761.184391][ C0] nf_nat: Already setup manip SRC for ct ffff88803d5e7680 (status bits 0x188) [ 761.276235][ T5824] Added buffer head 2 to ffff88801c7f5a00 [ 761.276599][ T5824] Added buffer head 3 to ffff88801c7f5a00 [ 761.277431][ C0] virtqueue callback for ffff88801c7f5a00 (ffffffff8664fd00) [ 761.277836][T19332] No more buffers in queue [ 761.508675][ T5824] Added buffer head 3 to ffff88801c7f5a00 [ 761.509019][ T5824] Added buffer head 2 to ffff88801c7f5a00 [ 761.509923][ C0] virtqueue callback for ffff88801c7f5a00 (ffffffff8664fd00) [ 761.510247][T19332] No more buffers in queue [ 761.622029][ T8127] bond6: (slave gretap1): Send learning packet: mac 92:64:8f:9a:6e:79 vlan 0 [ 761.734614][ T5824] Added buffer head 2 to ffff88801c7f5a00 [ 761.735273][ T5824] Added buffer head 3 to ffff88801c7f5a00 [ 761.736236][ C0] virtqueue callback for ffff88801c7f5a00 (ffffffff8664fd00) [ 761.736849][T19332] No more buffers in queue [ 761.781488][ C0] wireguard: wg0: Handshake for peer 67 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 2) [ 761.782720][ T7799] net_ratelimit: 38 callbacks suppressed [ 761.782739][ T7799] wireguard: wg0: Sending handshake initiation to peer 67 (127.0.0.1:20002) [ 761.783190][ T7799] wireguard: wg0: No route to 127.0.0.1:20002, error -101 [ 761.962690][ T5824] Added buffer head 3 to ffff88801c7f5a00 [ 761.964699][ T5824] Added buffer head 2 to ffff88801c7f5a00 [ 761.965677][ C0] virtqueue callback for ffff88801c7f5a00 (ffffffff8664fd00) [ 761.966481][T19332] No more buffers in queue [ 762.125897][ C2] wireguard: wg0: Sending keepalive packet to peer 86 ([::1]:20002/0%0) [ 762.129280][T19568] wireguard: wg1: Receiving keepalive packet from peer 88 ([::1]:20001/0%0) [ 762.174796][ T5824] Added buffer head 2 to ffff88801c7f5a00 [ 762.175353][ T5824] Added buffer head 3 to ffff88801c7f5a00 [ 762.176230][ C0] virtqueue callback for ffff88801c7f5a00 (ffffffff8664fd00) [ 762.176569][T19332] No more buffers in queue [ 762.296452][ C0] nf_nat: Already setup manip DST for ct ffff88803d5e7680 (status bits 0x188) [ 762.296657][ C0] nf_nat: Already setup manip SRC for ct ffff88803d5e7680 (status bits 0x188) [ 762.402983][T19332] Added buffer head 3 to ffff88801c7f5a00 [ 762.403434][T19332] Added buffer head 2 to ffff88801c7f5a00 [ 762.404315][ C0] virtqueue callback for ffff88801c7f5a00 (ffffffff8664fd00) [ 762.404810][ T5824] No more buffers in queue [ 762.465405][ C2] wireguard: wg1: Handshake for peer 58 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 11) [ 762.465930][ C2] wireguard: wg2: Handshake for peer 60 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 13) [ 762.466072][ T1092] wireguard: wg1: Sending handshake initiation to peer 58 (127.0.0.1:20003) [ 762.466888][ T1092] wireguard: wg1: No route to 127.0.0.1:20003, error -101 [ 762.467412][ T1092] wireguard: wg2: Sending handshake initiation to peer 60 (127.0.0.1:20002) [ 762.468138][ T1092] wireguard: wg2: No route to 127.0.0.1:20002, error -101 [ 762.476024][ C1] wireguard: wg1: Handshake for peer 16 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 7) [ 762.476212][ C0] wireguard: wg2: Handshake for peer 17 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 15) [ 762.480650][T11816] wireguard: wg2: Sending handshake initiation to peer 17 ([::1]:20001/0%0) [ 762.481187][T11816] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:0000:0001, type=16, ifindex=1) => 00000000 [ 762.634814][T19332] Added buffer head 2 to ffff88801c7f5a00 [ 762.635349][T19332] Added buffer head 3 to ffff88801c7f5a00 [ 762.636417][ C0] virtqueue callback for ffff88801c7f5a00 (ffffffff8664fd00) [ 762.640992][ T5824] No more buffers in queue [ 762.830187][ T8127] bond6: (slave gretap1): Send learning packet: mac 92:64:8f:9a:6e:79 vlan 0 [ 762.857938][T19332] Added buffer head 3 to ffff88801c7f5a00 [ 762.858248][T19332] Added buffer head 2 to ffff88801c7f5a00 [ 762.859110][ C0] virtqueue callback for ffff88801c7f5a00 (ffffffff8664fd00) [ 762.859612][ T5824] No more buffers in queue [ 763.092441][T19332] Added buffer head 2 to ffff88801c7f5a00 [ 763.092795][T19332] Added buffer head 3 to ffff88801c7f5a00 [ 763.093631][ C0] virtqueue callback for ffff88801c7f5a00 (ffffffff8664fd00) [ 763.094135][ T5824] No more buffers in queue [ 763.318604][T19332] Added buffer head 3 to ffff88801c7f5a00 [ 763.319123][T19332] Added buffer head 2 to ffff88801c7f5a00 [ 763.320119][ C0] virtqueue callback for ffff88801c7f5a00 (ffffffff8664fd00) [ 763.326896][ T5824] No more buffers in queue [ 763.407741][ C0] nf_nat: Already setup manip DST for ct ffff88803d5e7680 (status bits 0x188) [ 763.407891][ C0] nf_nat: Already setup manip SRC for ct ffff88803d5e7680 (status bits 0x188) [ 763.530158][T19332] Added buffer head 2 to ffff88801c7f5a00 [ 763.530501][T19332] Added buffer head 3 to ffff88801c7f5a00 [ 763.531374][ C0] virtqueue callback for ffff88801c7f5a00 (ffffffff8664fd00) [ 763.533355][ T5824] No more buffers in queue [ 763.779983][T19332] Added buffer head 3 to ffff88801c7f5a00 [ 763.780515][T19332] Added buffer head 2 to ffff88801c7f5a00 [ 763.781410][ C0] virtqueue callback for ffff88801c7f5a00 (ffffffff8664fd00) [ 763.781749][ T5824] No more buffers in queue [ 763.833152][ C0] wireguard: wg2: Handshake for peer 59 ([::1]:8526/0%0) did not complete after 5 seconds, retrying (try 2) [ 763.833593][ C0] wireguard: wg0: Handshake for peer 55 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2) [ 764.006175][T19332] Added buffer head 2 to ffff88801c7f5a00 [ 764.006743][T19332] Added buffer head 3 to ffff88801c7f5a00 [ 764.007655][ C0] virtqueue callback for ffff88801c7f5a00 (ffffffff8664fd00) [ 764.008109][ T5824] No more buffers in queue [ 764.101569][ T8127] bond6: (slave gretap1): Send learning packet: mac 92:64:8f:9a:6e:79 vlan 0 [ 764.213854][T19332] Added buffer head 3 to ffff88801c7f5a00 [ 764.214292][T19332] Added buffer head 2 to ffff88801c7f5a00 [ 764.215181][ C0] virtqueue callback for ffff88801c7f5a00 (ffffffff8664fd00) [ 764.215742][ T5824] No more buffers in queue [ 764.456418][T19332] Added buffer head 2 to ffff88801c7f5a00 [ 764.456932][T19332] Added buffer head 3 to ffff88801c7f5a00 [ 764.457845][ C0] virtqueue callback for ffff88801c7f5a00 (ffffffff8664fd00) [ 764.458420][ T5824] No more buffers in queue [ 764.517188][ C3] wireguard: wg2: Handshake for peer 18 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 19) [ 764.518442][ C0] wireguard: wg0: Handshake for peer 14 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2) [ 764.520743][ C0] nf_nat: Already setup manip DST for ct ffff88803d5e7680 (status bits 0x188) [ 764.520871][ C0] nf_nat: Already setup manip SRC for ct ffff88803d5e7680 (status bits 0x188) [ 764.696213][T19332] Added buffer head 3 to ffff88801c7f5a00 [ 764.696822][T19332] Added buffer head 2 to ffff88801c7f5a00 [ 764.697698][ C0] virtqueue callback for ffff88801c7f5a00 (ffffffff8664fd00) [ 764.698259][ T5824] No more buffers in queue [ 764.896267][T19332] Added buffer head 2 to ffff88801c7f5a00 [ 764.896840][T19332] Added buffer head 3 to ffff88801c7f5a00 [ 764.897733][ C0] virtqueue callback for ffff88801c7f5a00 (ffffffff8664fd00) [ 764.898113][ T5824] No more buffers in queue