last executing test programs: 2m34.800866138s ago: executing program 32 (id=44): syz_open_dev$rtc(0xfffffffffffffffc, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@rc={0x1f, @none}, 0x80, 0x0}, 0x10000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f0000000180)}, 0x10) r0 = io_uring_setup(0x899, &(0x7f0000000200)={0x0, 0x3cb1, 0x9c080, 0xc, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1c, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) close(r1) 2m31.121396987s ago: executing program 1 (id=260): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000840)=[@text16={0x10, &(0x7f0000000000)="260f01c30faaf30fc77600660ff1050f20c06635080000000f22c00fc7a800000f01ca660f01df0f01c9660f38decf", 0x2f}], 0x1, 0x44, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000100)={'virt_wifi0\x00', 0x6}) ioctl(r3, 0x8b24, &(0x7f0000000140)) r4 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x40000) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000080)={"0058d66d", 0x1000, 0x0, 0xc, 0x8, 0x2, "0128ef93d73966f5f9d9a753476579", "ea739404", "2e4d9d42", "ac13c81b", ["349ef505adefdf41c088daf5", "665aef9d5cef52f5805ce75f", "c36e88723415133de1bd1024", "420ea2041c40079ef26d567f"]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m30.931934442s ago: executing program 1 (id=262): prctl$PR_SET_IO_FLUSHER(0x43, 0x1) (async) r0 = socket(0x27, 0x1, 0xfffffffe) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="20000000060601090000000000000000d5aa20bfcf76e38c262ade000000080000030073794e2a6db4ccbc14b3552108a65516857ed641c10a030e48ec2f15fec935953881009d424054d62f222a284f9ad92769947481a20c076dd71a559b36a1e1a46d1eb01158aee9a5a907640ef8484afc9644943029aa3b044ad711ba6dc94677ea8c3294ae9ae2d9b16f363b9e769685a4284f3547fef8a4de93d7feff8839ae"], 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x4044000) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYRES64=r2], 0x124}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) (async) lseek(r1, 0xab0b, 0x1) (async) setsockopt$inet_tcp_buf(r1, 0x6, 0xd, &(0x7f00000001c0)="9b5f5c2325db3a8e2a06d3df", 0xc) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) (async) r5 = accept4(r0, 0x0, 0x0, 0x800) fcntl$addseals(r3, 0x409, 0x9) sendmmsg$alg(r5, &(0x7f0000000480)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)='l', 0x1}], 0x1}], 0x1, 0x0) (async) r6 = creat(&(0x7f0000000540)='./file0\x00', 0xecf86c37d53049cc) close(r6) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000040)="e82f52b2e13e1e2ca5dec7d19e9fe79a1b41b50e9982c21d2a90e4935de5d2285c7d56bfbbc38278855c98d45b8e7ca53d908590204c699cc439a74d63d6bd3283e330766f165ec5e7321b4144dc347416104cbbcb9f394d3133be58ede142df4aac0c5f39d3b20801514358d7c83d85f2ac9e57126a", 0x76}, {&(0x7f00000000c0)="2663fbc43885d9ce480f4112a23d80e4bb9e8b619901ccf0bd109ec5336980fc2a6e9be4acb67ae903464c3a7e0745d74e87d532bb4ccc9d1281e732069b20dd9e6bb5b3711e17e4dbec4400b1b54bfbdd30205bce8a58d9117043a35703a7d5169d5335ee84de089d1f", 0x6a}], 0x2) 2m30.874016079s ago: executing program 1 (id=263): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000005c0)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000600)="21001400470010aaaaaaaaaa1400000000000000000000000000000000000000000000000000000000000000000300"/76, 0x4d) 2m30.872599634s ago: executing program 1 (id=264): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f00000000c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x1c5) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f0000000340)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) chdir(&(0x7f0000000440)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f00000004c0)=ANY=[], 0x10448) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="0409"], 0x6) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x200d000, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0/../file0\x00', 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000002d00), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x11}, "ab7abf2ee2c7f00d9e3ea9d433c3c1052f"}, 0x15) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x4) 2m30.26164393s ago: executing program 1 (id=273): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}, 0x1, 0x0, 0x2000000000000000}, 0x0) 2m29.614131115s ago: executing program 1 (id=276): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x9b00, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x200000000000000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg/2:0:0:0\x00', 0x400, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000400)=r2}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{}, &(0x7f0000000480), &(0x7f00000004c0)='%pB \x00'}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x3, 0x9fa, 0x85, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000580)={0xffffffffffffffff, 0x0, &(0x7f00000005c0), &(0x7f0000000600), 0x800, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680), &(0x7f00000006c0), 0x6c, r3}, 0x38) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@alu={0x7, 0x0, 0x9, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f0000000240)='GPL\x00', 0x7}, 0x94) ioctl$BSG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000100)) 2m29.492458504s ago: executing program 33 (id=276): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x9b00, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x200000000000000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg/2:0:0:0\x00', 0x400, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000400)=r2}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{}, &(0x7f0000000480), &(0x7f00000004c0)='%pB \x00'}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x3, 0x9fa, 0x85, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000580)={0xffffffffffffffff, 0x0, &(0x7f00000005c0), &(0x7f0000000600), 0x800, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680), &(0x7f00000006c0), 0x6c, r3}, 0x38) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@alu={0x7, 0x0, 0x9, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f0000000240)='GPL\x00', 0x7}, 0x94) ioctl$BSG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000100)) 2m26.426717378s ago: executing program 5 (id=277): statx(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2000, 0x4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f00000002c0)=@md0, r0, &(0x7f0000000440)='./file0\x00') setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000000080)="170000000200010400ffbe8c5ee17688a20032e80101000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00", 0x53) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @empty}}, 0x24) listen(r1, 0x5) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="180100000002000000000000001000000000000000100100000e00"/40], 0x28}, 0x0) sendmsg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[{0x18, 0x110, 0x1, "03"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045fc0030fffc00000002907800000000e000000114109078ac14987df5ff06000000007ee410f074"], 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x4a011, 0x6}, [@IFLA_ADDRESS={0xa, 0x3, @random="99fa3a1c872f"}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x40}}, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2000, 0x4, &(0x7f0000000340)) (async) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f00000002c0)=@md0, r0, &(0x7f0000000440)='./file0\x00') (async) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000000080)="170000000200010400ffbe8c5ee17688a20032e80101000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00", 0x53) (async) socket$rxrpc(0x21, 0x2, 0x2) (async) bind$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @empty}}, 0x24) (async) listen(r1, 0x5) (async) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="180100000002000000000000001000000000000000100100000e00"/40], 0x28}, 0x0) (async) sendmsg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[{0x18, 0x110, 0x1, "03"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045fc0030fffc00000002907800000000e000000114109078ac14987df5ff06000000007ee410f074"], 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x4a011, 0x6}, [@IFLA_ADDRESS={0xa, 0x3, @random="99fa3a1c872f"}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x40}}, 0x0) (async) 2m26.32336661s ago: executing program 5 (id=296): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x34, r1, 0x1, 0x0, 0x0, {0x3}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x34}}, 0x0) 2m26.250646133s ago: executing program 5 (id=297): r0 = add_key$keyring(&(0x7f00000015c0), &(0x7f0000001600)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='stat\x00') read$FUSE(r1, &(0x7f00000022c0)={0x2020}, 0x2020) (async) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000001c80)='asymmetric\x00', &(0x7f0000001cc0)=@chain) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100, 0x1}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) (async) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xb8, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x517f841f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x7}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x5}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x7}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20004040}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./lower1\x00', 0x1ff) openat2$dir(0xffffffffffffff9c, &(0x7f0000000880)='./file1\x00', &(0x7f00000008c0)={0x208201, 0x1, 0xc}, 0x18) writev(r1, &(0x7f0000000a00), 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000a40)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x7, &(0x7f0000000ac0)="fdffffff", 0x4) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./lower2\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./upper\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./mnt\x00', 0x1ff) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newtaction={0x50, 0x30, 0x9, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xfffffffe}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x0) (async) mount(0x0, &(0x7f0000000500)='./mnt\x00', &(0x7f0000000540)='overlay\x00', 0x0, &(0x7f0000000580)='lowerdir=lower1:lower2,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/file\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x1d0) (async) lsetxattr$security_ima(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), &(0x7f0000000740)=@sha1={0x1, "bed90c5a5948f62d43ad4d0feffa1f4892feedbf"}, 0x15, 0x3) (async) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000640)=ANY=[@ANYBLOB='\x00\x00\x00\x00\b\x00'/24]) mount$tmpfs(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={[{@mpol={'mpol', 0x3d, {'prefer', '=static'}}}]}) (async) add_key(&(0x7f0000001d00)='asymmetric\x00', 0x0, &(0x7f0000001d40)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r0) 2m26.181845812s ago: executing program 5 (id=299): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x100, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0xa}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4044094) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x198, 0x10, 0x1, 0x8000000, 0x0, {{@in=@remote, @in6=@loopback, 0x2, 0x0, 0x4e20, 0x50, 0x0, 0x20, 0x0, 0x16}, {@in6=@local, 0xfffffffc, 0x33}, @in=@local, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000, 0x0, 0x0, 0x10000}, {0x401, 0x9}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x90}, [@algo_auth={0x89, 0x1, {{'sha256\x00'}, 0x208, "000040df354d8019cdfdffffffffffffff654ecbfc05a71683353654e85cba31d70cf4c07aab2cb6581ac7c4bce2f853c87519c84400"/65}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2d, 0x70bd28, 0x70bd2b, 0x70bd2b, 0x401}}]}, 0x198}}, 0x24000058) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x400c840) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x4}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000009c0)='./proc\x00', &(0x7f0000000a00)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./proc/net/ip_vs_conn\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000a80)=""/4096, 0x1000, 0xf000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@cred={{0x1c, 0x1, 0x2, {r7, 0x0, 0xee00}}}], 0x20, 0x40000}}], 0x1, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18020000000000000000000004000000850000002700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0xe, 0x4, &(0x7f00000006c0)=ANY=[], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r8}, &(0x7f00000007c0), &(0x7f0000000800)=r5}, 0x3d) sendmsg$inet(r4, &(0x7f0000000840)={0x0, 0x6000, &(0x7f0000000880)=[{&(0x7f00000008c0)='U', 0xa00120}], 0x20}, 0x3) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m26.04421431s ago: executing program 5 (id=300): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x8c}}, 0x0) 2m11.056580963s ago: executing program 34 (id=300): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x8c}}, 0x0) 1m23.382828143s ago: executing program 3 (id=1067): r0 = io_uring_setup(0x6d27, &(0x7f0000000000)={0x0, 0xf326, 0x40, 0x1, 0x149}) close_range(r0, 0xffffffffffffffff, 0x0) 1m23.382382042s ago: executing program 3 (id=1068): setns(0xc9, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) mkdir(&(0x7f00000001c0)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./myproc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./myproc/scsi/device_info\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)="22891098", 0x4) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000180)='8', 0x1a000}], 0x1}, 0x0) socket(0x2b, 0x80801, 0x1) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={0x4c, 0x14, 0x511, 0x0, 0x0, {0x2b, 0x0, 0x0, 0x1, {0x4e22, 0x0, [], [0x0, 0x0, 0x0, 0x3]}, 0x4}}, 0x4c}, 0x1, 0x0, 0x0, 0x4000840}, 0x8004) 1m23.313541277s ago: executing program 3 (id=1069): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='dummy_udc.0', 0xb) 1m23.313400033s ago: executing program 3 (id=1070): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x8042, 0x48) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000280)={0x8, 0x0, 0xb, 0x9, 0x7, 0xc}) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000140)='./file0\x00') unlink(&(0x7f0000000180)='./file0\x00') getgroups(0x2, &(0x7f0000000800)=[0xffffffffffffffff, 0xee00]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='./file0\x00') link(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='./file0\x00') 1m23.223358031s ago: executing program 3 (id=1071): mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000640)='./sys\x00', &(0x7f0000000680)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x28, 0x1e, 0x21, 0x70bd2b, 0x0, {0xa}, [@typed={0x14, 0xcb, 0x0, 0x0, @ipv6=@remote}]}, 0x28}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') fchdir(r2) prctl$PR_SET_SECUREBITS(0x1c, 0x15) setuid(0xee00) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r4 = syz_open_procfs(r3, &(0x7f00000000c0)='personality\x00') read$char_usb(r0, &(0x7f0000000140)=""/156, 0x9c) pread64(r4, &(0x7f0000000100)=""/15, 0xf, 0x4) write(r0, &(0x7f0000000700)='lz4', 0x3) 1m22.99214407s ago: executing program 3 (id=1074): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000440), &(0x7f0000000480)=0x8) socket$inet(0x2, 0x1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, &(0x7f0000000c00)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) accept$inet(r1, &(0x7f0000000380)={0x2, 0x0, @multicast1}, &(0x7f00000003c0)=0x10) prlimit64(0x0, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing\x00', 0x1ff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000f000000850000001500000095"], &(0x7f0000000ac0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r2, 0xffffffffffffffff}, &(0x7f0000000b40), &(0x7f0000000b80)=r3}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000bc0)={r3, r4}, 0xc) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f00000002c0)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) write$binfmt_aout(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="0b010207b001000036010000a10c01006fba000006006367638b51246b750000"], 0x20) r6 = socket$alg(0x26, 0x5, 0x0) accept4(r6, 0x0, 0x0, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x398, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1, 0xa, 0x10, 0x10, 0x10, 0x2710, 0xea60}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffb}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0xa, 0x1234, 0x0, @remote}, 0x1c) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20842, 0x63) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r9 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r9, &(0x7f00000005c0)={0xa, 0x4e24, 0x2, @empty, 0x4}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendto$inet6(r9, &(0x7f0000000c40)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) write$P9_RLERRORu(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="8e"], 0x10) 1m18.293363588s ago: executing program 0 (id=1118): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, 0x0, 0x0) 1m18.293112134s ago: executing program 0 (id=1119): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x7f, 0xe0, 0xb7, 0x1}, {0x4, 0x4, 0x9, 0x8}, {0x5fd2, 0xbc, 0x5, 0x1}, {0x3, 0x4, 0x9f, 0xfffff636}, {0x5, 0x9, 0x8, 0x8}, {0xf, 0xd, 0x5, 0x9}, {0x35a9, 0x18, 0x2, 0x1}]}, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./bus\x00', 0x1d7) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000c40)={'syz0\x00', {0x3, 0x37b, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x401, 0x80, 0x2, 0x3, 0x1, 0x20000002, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x7, 0x3, 0xfffffffc, 0x9, 0x4, 0x102, 0x7, 0x3c5b, 0x80000004, 0x7, 0xd, 0x1, 0x0, 0x7, 0x7ff, 0x1000, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x4003, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x4000200, 0x3e, 0x1c0, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x5, 0x5, 0x6, 0x8, 0x4, 0x1, 0x3c], [0x10000004, 0x9, 0x8200012f, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x9, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x8, 0x2f, 0xe, 0x312, 0x9, 0xea4, 0x4, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x5, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x5, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x8, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x5, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x101], [0x7, 0xa, 0x40000004, 0x5, 0xfdfffffe, 0x1, 0x8d2, 0xa, 0x5, 0x7ffe, 0xffff0000, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x4000000, 0x4, 0x3, 0x303c, 0x7f, 0xa, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x3a, 0x800003, 0x200, 0x80, 0x2c, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0x0, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x9, 0x1c, 0x120000, 0x3, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x80000002, 0x800, 0x5, 0xb, 0x8, 0x1000006, 0x3d11, 0xb9, 0xcea, 0x1ff, 0x2, 0x8, 0x4, 0x3, 0x101, 0xfa4a, 0x4, 0x9a5, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x0, 0x14c, 0x60a7, 0x7fff, 0x96, 0x8, 0x80000000, 0x0, 0x4, 0xc8, 0x3, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x6, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x7ff, 0x4, 0x8, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) openat$dir(0xffffffffffffff9c, &(0x7f0000001100)='./bus\x00', 0x490082, 0x8) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@mpls_getnetconf={0x14, 0x52, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x2000000000000000}, 0x0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001200), 0x100, 0x0) ioctl$CDROMEJECT(r2, 0x5309) openat$cdrom(0xffffffffffffff9c, 0x0, 0x100, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000800)=0x6, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000840)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000880)=0x4000000000000200, 0xe50fb6c50bc849c9) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000980)=0x14) bind$packet(r3, &(0x7f0000000a80)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r3, &(0x7f0000000ac0)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 1m18.132997328s ago: executing program 0 (id=1120): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x4900, 0x30a8a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10004}, 0x4080) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000002880)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002840)={&(0x7f00000024c0)={0x380, r1, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x1c4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'dvmrp0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xce95, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x40, @dev={0xfe, 0x80, '\x00', 0x3b}, 0xbac}}}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_virt_wifi\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x4df, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x800, @remote, 0x3}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x2, @mcast2, 0x3}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x4, @loopback, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @local, 0x6}}}}]}, @TIPC_NLA_BEARER={0xdc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x4, @local, 0xf249}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xf7, @mcast1, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x6, @loopback, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x5, @loopback, 0x1}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7cdc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xb8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x768}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xae3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xcc4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7bfd}]}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x29}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xbd}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x42d}]}]}, 0x380}, 0x1, 0x0, 0x0, 0xc000}, 0x20000001) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x84000) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = dup3(r2, r3, 0x80000) read$FUSE(r4, &(0x7f0000000280)={0x2020}, 0x2020) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_write_link_policy={{0x91}, {0x40, 0xc8}}}}, 0x9) recvmsg$inet_nvme(r4, &(0x7f0000002480)={&(0x7f00000022c0)=@generic, 0x80, &(0x7f0000002440)=[{&(0x7f0000002340)=""/5, 0x5}, {&(0x7f0000002380)=""/39, 0x27}, {&(0x7f00000023c0)=""/81, 0x51}], 0x3}, 0x1e0) 1m16.813242563s ago: executing program 4 (id=1129): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x2, &(0x7f00000001c0)=[{0x35}, {0x6}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_mreq(r2, 0x29, 0x38, 0x0, &(0x7f00000004c0)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r3, 0x4, 0x40800) connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ftruncate(r4, 0x2000009) sendfile(r3, r4, 0x0, 0x7ffff004) r6 = socket(0x10, 0x3, 0x0) ioctl$VT_DISALLOCATE(r4, 0x5608) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_getaddrlabel={0x24, 0x4a, 0x1, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}]}, 0x24}}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000002c0)={0x2, 0x3}, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_SLAVE2={0x8, 0x2, r8}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 1m16.762907264s ago: executing program 0 (id=1130): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000200)='./file0\x00') lsetxattr$trusted_overlay_origin(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580), &(0x7f00000005c0), 0x2, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3000000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x270, 0x2e8, 0x2e8, 0x270, 0x2e8, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x9, 0x0}, @mcast1, [], [0x0, 0x0, 0x0, 0xfd], 'erspan0\x00', 'geneve1\x00', {}, {}, 0x2f}, 0x0, 0x128, 0x168, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@devgroup={{0x38}, {0x4, 0x10001, 0x6, 0xd, 0x7f}}, @common=@dst={{0x48}, {0x4, 0x6, 0x1, [0x25, 0x3ff, 0x85ad, 0x1, 0x1, 0xfff9, 0x0, 0xfe01, 0x2, 0x100, 0x6, 0x7, 0x10, 0x8, 0xa, 0x8], 0x2}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x67, 0x7, 0x8000, 0xffff0001, 0x7, 0x9, 0xb62c, 0x7f]}}}, {{@ipv6={@local, @empty, [0xffffffff, 0xffffff00, 0x0, 0xffffffff], [0xff, 0xffffff, 0x0, 0xffffff00], 'pimreg0\x00', 'wlan1\x00', {}, {}, 0x21, 0xb, 0x1, 0x16}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast2, [0xffffff00, 0xff000000, 0x0, 0xffffffff], 0x4e23, 0x4e22, 0x4e23, 0x4e20, 0xf81, 0x9, 0x80000000, 0x7ff, 0x200}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x21d000, 0x0) setxattr$incfs_size(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mount$cgroup(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x22040, &(0x7f00000004c0)={[{@none}, {@name={'name', 0x3d, '++#'}}], [{@appraise}, {@obj_user={'obj_user', 0x3d, 'bridge_slave_1\x00'}}, {@dont_appraise}, {@euid_lt}]}) r4 = inotify_init1(0x80000) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000000)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x28100, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000ac0)={[0x0, 0x100000000, 0x3, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x26000, 0x102280}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000009c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r8, 0xc00864bf, &(0x7f0000000a00)={0x0, 0x1}) pivot_root(&(0x7f00000002c0)='./file0/../file0/../file0\x00', &(0x7f0000000300)='./file0\x00') 1m16.762664243s ago: executing program 0 (id=1131): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[], 0x128}, 0x0) r4 = syz_open_dev$video(&(0x7f00000006c0), 0x1, 0x602) ioctl$VIDIOC_QUERYMENU(r4, 0xc02c5625, &(0x7f0000000700)={0x9, 0xd2e5, @value=0x4}) recvmsg$unix(r2, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}, 0x80) socketpair$unix(0x1, 0x0, 0x0, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x181c82, 0x0) write$sequencer(r6, &(0x7f0000000480)=ANY=[@ANYBLOB="8100d566ac122a95bb49acc6e2d8a0dd7f359c4b2bda12940ce053c151c05600f4a40d4e588f48ca9af25f62c3bd20da421dc3bd53a2b49893ea4cc1df1a7be36a2b061319a331eef84891a0877a74d710000000a2917956a6ec33c2a4102903b2b8f5d392eeb38074f4d228644822d8117886ee41f664fff6c4a1ef443f0bd1e787bf0ee248122b29c48f1f5da647fdffc8352df85912bb6e660200000000000000f77a1453546ec8bb30a549ba1b7a13e1010529"], 0x8) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000800)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000840)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000bc0)=ANY=[@ANYBLOB="040e040a0404"], 0x7) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, 0x0, &(0x7f0000000880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x8d, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x0, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="60000000100001060000000000000000000000000000000000000000000000000d000300626172657564703000000000300012000c00010062617265756470002000020006000100b5120000060002000008000006000300e8030000040004"], 0x60}}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0300003b42962d72acbb5526babef938370d399848969ea9f9a3d9d1ba7e6e3a6f0ee45b0ac4f48a0ed6779682198afd8b7900ce7336eb91e8f41048098043e117add545538120cdb1721098f38dd2f235e6ba112445a3c80293c0f7c7e08b6e60651fa9024149cf7ee35b2b3a8d16430d195861ef122742dcce3cd4ea86435e61397c292d9aa8e5b68818ab018fd3d60df042a4c84de60699fb7a1ef74144eaa22ba8c29eb68b", @ANYRES16=r11, @ANYBLOB="010025bd7000fcdbdf2521000000"], 0x14}}, 0x44) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x28}, {&(0x7f0000000440)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3bc7664d327d90424d5503002800"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4) r14 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_COPY(r14, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3}) r15 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/raw6\x00') pread64(r15, &(0x7f0000000300)=""/237, 0xed, 0x5) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 1m16.493296794s ago: executing program 0 (id=1132): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x86100) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a01000000000000000003000000000000000000000000000000000000000000000000bb4c00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x2, 0xa]}}) r2 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40a42) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20940, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000500)={0x1f, 0xffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f"], 0x17) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x25, 0x25, 0x4, [@union={0x7, 0x1, 0x0, 0x5, 0x0, 0x10000, [{0x2, 0x0, 0x4}]}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "c9"}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x44, 0x0, 0x1}, 0x28) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000580)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r6, 0x402) syz_emit_ethernet(0x5a, &(0x7f00000005c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "020004", 0x24, 0x6, 0xff, @local, @local, {[], {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@synack={0x1e, 0x10, 0x0, 0x2, 0x64, 0x8, 0x7}]}}}}}}}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x28) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000340)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0x10003, 0x2008000000004, 0x0, 0x0, 0x7, 0x1c, "fee8a2ab78fc179fd1f809000000aca7ca64c6a4b4e00d96fe060000000000000000000007040000000000000856f80000000000000000001f00", "2809e8dbe1b22d0000779e0107f23dd4070000ebff08000000000000000000020000000800000000faffffff00", "e74600090020000000330a99b8536713b70000000000000000000002d02800", [0x3800000000, 0x8000]}}) 1m16.457594932s ago: executing program 35 (id=1132): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x86100) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a01000000000000000003000000000000000000000000000000000000000000000000bb4c00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x2, 0xa]}}) r2 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40a42) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20940, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000500)={0x1f, 0xffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f"], 0x17) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x25, 0x25, 0x4, [@union={0x7, 0x1, 0x0, 0x5, 0x0, 0x10000, [{0x2, 0x0, 0x4}]}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "c9"}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x44, 0x0, 0x1}, 0x28) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000580)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r6, 0x402) syz_emit_ethernet(0x5a, &(0x7f00000005c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "020004", 0x24, 0x6, 0xff, @local, @local, {[], {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@synack={0x1e, 0x10, 0x0, 0x2, 0x64, 0x8, 0x7}]}}}}}}}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x28) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000340)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0x10003, 0x2008000000004, 0x0, 0x0, 0x7, 0x1c, "fee8a2ab78fc179fd1f809000000aca7ca64c6a4b4e00d96fe060000000000000000000007040000000000000856f80000000000000000001f00", "2809e8dbe1b22d0000779e0107f23dd4070000ebff08000000000000000000020000000800000000faffffff00", "e74600090020000000330a99b8536713b70000000000000000000002d02800", [0x3800000000, 0x8000]}}) 1m15.893437095s ago: executing program 4 (id=1143): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000040)=0x2, 0x4) getsockopt$packet_buf(r1, 0x107, 0x6, 0x0, &(0x7f0000000080)) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='secret\x00', &(0x7f0000000100)='IaA=7A/AA//+/++\xa5\xd3\x17\xf1AAAAAAAABAAAAAy\xda\xee|\xd9\x0f\aU\"\xab\x94\'d\x1f\xbcG\xf4\x14\xf2v\xf83Z\xaa\xc3)\v{\x16\xb7\x0e\a%\xb1\xf7\xe9\xc5\xa6\xfa\xd4\xd7\xa0\xaa>\xa0\xec\x9a\xc6~^\xc0T\xbdnr\xfb\xa5/B O(_\xebN\x19i\x1d}\xa3\x1f\x99%H\xf6K\xee\x9f\x18\x8d\xe7\x9a\xbd7\xb6uc\x1e\xd4xH\xc4 u\x06\xfa9wK\xc2UI\x8b\x03\x85\xfe\xfc\xf3\x88\xb8\xad\xc5\xe7\xf52\xe9\xd4s[\xa2\xce\xfdn\xb2\x9f\xdfN\xb8\xf1\xe6\xb7\x86\x00\xd4)=\xe1X\xb8\xaf', 0x0) 1m15.893206362s ago: executing program 4 (id=1144): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x8042, 0x48) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000280)={0x8, 0x0, 0xb, 0x9, 0x7, 0xc}) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./file0\x00') unlink(&(0x7f0000000180)='./file0\x00') link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='./file0\x00') link(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='./file0\x00') 1m15.803606206s ago: executing program 4 (id=1145): mkdirat(0xffffffffffffff9c, &(0x7f0000001680)='./trace\x00', 0x1ff) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) mount(0x0, &(0x7f00000016c0)='./trace\x00', &(0x7f0000001700)='tracefs\x00', 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x980900, 0x3}) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x38) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cd2cf5df7773f7a4c72ae167485315c326281efc400"}]}}]}, 0x14c}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) close_range(r1, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000001740)='./trace/trace\x00', 0x0, 0x42) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x1) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa680, 0x0) move_pages(0x0, 0x9, &(0x7f0000000700)=[&(0x7f00002a3000/0x4000)=nil, &(0x7f00002a2000/0x4000)=nil, &(0x7f00002a5000/0x4000)=nil, &(0x7f00002a6000/0x4000)=nil, &(0x7f00002a4000/0x2000)=nil, &(0x7f00002a2000/0x1000)=nil, &(0x7f00002a2000/0x3000)=nil, &(0x7f00002a2000/0x2000)=nil, &(0x7f00002a0000/0x3000)=nil], &(0x7f0000000780)=[0x5af39b6e, 0xb04f, 0x8, 0x1, 0x6], &(0x7f00000007c0)=[0x0], 0x2) r9 = fcntl$dupfd(r8, 0x406, r6) setsockopt$bt_l2cap_L2CAP_LM(r9, 0x6, 0x3, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200142c00fe8000000000000000000000000000bbfe800000000000000000000000000016919e1d62cdbecb340c4463ccaa06000005", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780002"], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r10 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) ptrace$getregset(0x4204, r10, 0x4, &(0x7f0000000680)={&(0x7f00000002c0)=""/67, 0x43}) preadv(r6, &(0x7f0000001780)=[{&(0x7f0000000380)=""/190, 0xbe}], 0x1, 0x802e, 0x6) 1m15.521327848s ago: executing program 4 (id=1146): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x109041, 0x0) (fail_nth: 7) 1m15.173378736s ago: executing program 4 (id=1148): pipe2$9p(&(0x7f00000003c0)={0x0, 0x0}, 0x0) (async) r2 = landlock_create_ruleset(&(0x7f0000000580)={0x8c00, 0x1, 0x2}, 0x30, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x2, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) landlock_restrict_self(r2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x1c0) (async, rerun: 64) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='.\x00', 0x0, 0x0) (rerun: 64) renameat2(r3, &(0x7f0000000640)='./file0\x00', r3, &(0x7f0000000680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', r3, &(0x7f0000000740)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000001b40)='./sec\x00', 0x1ff) (async) mount(0x0, &(0x7f0000001b80)='./sec\x00', &(0x7f0000001bc0)='securityfs\x00', 0x0, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000001c00)='./sec/tomoyo/exception_policy\x00', 0x2, 0x0) write(r4, &(0x7f0000001c40)="616464726573735f67726f7570207e72703120302e302e302e302d3235352e3235a6defd881d22713e1cda457960352e3235352e3235350a616464726573735f67726f75702067727031203a3a2d666666663ae60500003a666666663a666666663a666666663a666666663a666666663a666666660a61", 0x77) (async) mount$9p_fd(0x0, &(0x7f0000000480)='./mnt\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=', ']) (async) write$P9_RVERSION(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000065ffff0020000008003901000020865b4c"], 0x15) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x6, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000a00)='GPL\x00', 0x4, 0x1000, &(0x7f0000000a40)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) sendmsg$nl_route(r6, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="440000001000010828bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000042404001c002b80080003001900000008000100", @ANYRES32=r7, @ANYBLOB="08000800e83f9f7454802561f95775a22e1a05ba35ece3d6cf45a41cb32c1b42fcca3aa1d9ac416a79681a074e50c6a6c43499964abc5ed151ee5ed0c9ba4a", @ANYRES32=r5, @ANYBLOB="08001b0000000000"], 0x44}}, 0x0) r8 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r8, 0x29, 0x4b, &(0x7f0000000840)=0x2, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x111, 0x4b4, 0x130, 0xd4feffff, 0x270, 0x20a, 0x278, 0x270, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @remote, [], [0x0, 0x0, 0x0, 0xffffff00], 'dvmrp0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e20, 0x4e23], [0x4e20, 0x4e22], 0x3, 0x8, 0x80, 0x7}}, @common=@inet=@tcp={{0x30}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@ipv6header={{0x28}}, @common=@ipv6header={{0x28}, {0x4, 0x11, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x8ba4, 0x0, 0x80000001, '\x00', {0x10000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) (async) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000880)=0x4471, 0xfd81) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) sendmmsg$inet6(r8, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0xfffffffd, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x9000000) (async) r9 = userfaultfd(0x801) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000007c0)) (async) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000800)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 1m15.062826537s ago: executing program 36 (id=1148): pipe2$9p(&(0x7f00000003c0)={0x0, 0x0}, 0x0) (async) r2 = landlock_create_ruleset(&(0x7f0000000580)={0x8c00, 0x1, 0x2}, 0x30, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x2, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) landlock_restrict_self(r2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x1c0) (async, rerun: 64) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='.\x00', 0x0, 0x0) (rerun: 64) renameat2(r3, &(0x7f0000000640)='./file0\x00', r3, &(0x7f0000000680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', r3, &(0x7f0000000740)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000001b40)='./sec\x00', 0x1ff) (async) mount(0x0, &(0x7f0000001b80)='./sec\x00', &(0x7f0000001bc0)='securityfs\x00', 0x0, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000001c00)='./sec/tomoyo/exception_policy\x00', 0x2, 0x0) write(r4, &(0x7f0000001c40)="616464726573735f67726f7570207e72703120302e302e302e302d3235352e3235a6defd881d22713e1cda457960352e3235352e3235350a616464726573735f67726f75702067727031203a3a2d666666663ae60500003a666666663a666666663a666666663a666666663a666666663a666666660a61", 0x77) (async) mount$9p_fd(0x0, &(0x7f0000000480)='./mnt\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=', ']) (async) write$P9_RVERSION(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000065ffff0020000008003901000020865b4c"], 0x15) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x6, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000a00)='GPL\x00', 0x4, 0x1000, &(0x7f0000000a40)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) sendmsg$nl_route(r6, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="440000001000010828bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000042404001c002b80080003001900000008000100", @ANYRES32=r7, @ANYBLOB="08000800e83f9f7454802561f95775a22e1a05ba35ece3d6cf45a41cb32c1b42fcca3aa1d9ac416a79681a074e50c6a6c43499964abc5ed151ee5ed0c9ba4a", @ANYRES32=r5, @ANYBLOB="08001b0000000000"], 0x44}}, 0x0) r8 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r8, 0x29, 0x4b, &(0x7f0000000840)=0x2, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x111, 0x4b4, 0x130, 0xd4feffff, 0x270, 0x20a, 0x278, 0x270, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @remote, [], [0x0, 0x0, 0x0, 0xffffff00], 'dvmrp0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e20, 0x4e23], [0x4e20, 0x4e22], 0x3, 0x8, 0x80, 0x7}}, @common=@inet=@tcp={{0x30}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@ipv6header={{0x28}}, @common=@ipv6header={{0x28}, {0x4, 0x11, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x8ba4, 0x0, 0x80000001, '\x00', {0x10000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) (async) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000880)=0x4471, 0xfd81) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) sendmmsg$inet6(r8, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0xfffffffd, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x9000000) (async) r9 = userfaultfd(0x801) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000007c0)) (async) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000800)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 1m7.986878786s ago: executing program 37 (id=1074): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000440), &(0x7f0000000480)=0x8) socket$inet(0x2, 0x1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, &(0x7f0000000c00)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) accept$inet(r1, &(0x7f0000000380)={0x2, 0x0, @multicast1}, &(0x7f00000003c0)=0x10) prlimit64(0x0, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing\x00', 0x1ff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000f000000850000001500000095"], &(0x7f0000000ac0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r2, 0xffffffffffffffff}, &(0x7f0000000b40), &(0x7f0000000b80)=r3}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000bc0)={r3, r4}, 0xc) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f00000002c0)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) write$binfmt_aout(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="0b010207b001000036010000a10c01006fba000006006367638b51246b750000"], 0x20) r6 = socket$alg(0x26, 0x5, 0x0) accept4(r6, 0x0, 0x0, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x398, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1, 0xa, 0x10, 0x10, 0x10, 0x2710, 0xea60}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffb}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0xa, 0x1234, 0x0, @remote}, 0x1c) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20842, 0x63) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r9 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r9, &(0x7f00000005c0)={0xa, 0x4e24, 0x2, @empty, 0x4}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendto$inet6(r9, &(0x7f0000000c40)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) write$P9_RLERRORu(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="8e"], 0x10) 26.863276323s ago: executing program 8 (id=1755): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20940, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x28) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x7000000) ioctl$SNDCTL_DSP_GETTRIGGER(r3, 0x80045010, &(0x7f00000002c0)) r4 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 26.693175714s ago: executing program 8 (id=1756): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="1400000036cfce889b40d5b325f8b3fcd50ad2155603471d57b401e9cf3b077c7bf83ff150c4c9a63bfb833f0da6d2955a5f8e1e32defd9df4aa4d1283e75f52983d3ef15d6f9b4840a46dda83e69508853d11c17702adfeacca3e085d4da0ed5fe73ba590ef682022ef11ce2734820751905dd5e627f7309475317902d94ff717e90ae2b2aabefdd31b802354a72c", @ANYRES16=0x0, @ANYBLOB="080029bd7000fcdbdf2542000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) syz_emit_vhci(0x0, 0x8) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r2, @ANYBLOB="0600eb00000800000400ec000a0006"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20000) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="040e44840210"], 0x47) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) 26.163437761s ago: executing program 8 (id=1760): preadv(0xffffffffffffffff, 0x0, 0x0, 0x14a, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001640), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001680)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000016c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001700)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000017c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001840)={0x0}}, 0x0) write$tun(r0, &(0x7f0000001900)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x2, 0xe7b6, 0x14, 0x2}, @ipv4=@gre={{0x5, 0x4, 0x2, 0x8, 0x58, 0x65, 0x0, 0x2, 0x2f, 0x0, @broadcast, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x1, {{0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x6, 0xb}, 0x1, {0x4}}}, {0x8, 0x22eb, 0x0, {{0x8, 0x2, 0x4, 0x0, 0x1, 0x3, 0x0, 0xf7}, 0x2, {0x7, 0x1, 0x0, 0x5, 0x0, 0x1, 0x3, 0x1}}}, {0x8, 0x6558, 0x2}}}}, 0x66) 26.053169686s ago: executing program 8 (id=1762): mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x2125099, 0x0) (async) mount$bind(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x100000, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x180302, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, 0x0) (async) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000580)='\x00', 0x9801) move_mount(r1, &(0x7f00000005c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/udp\x00') pread64(r2, &(0x7f00000000c0)=""/15, 0xf, 0x404) (async) mount$bind(&(0x7f0000000640)='./file0/../file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x28b100e, 0x0) (async) mount$bind(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0\x00', 0x0, 0x2125099, 0x0) (async) r3 = open_tree(r1, &(0x7f0000000000)='\x00', 0x9901) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x6, 0x4, 0x4000010, r1, 0x0) move_mount(r3, &(0x7f00000007c0)='.\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file0/file0\x00', 0x0) umount2(&(0x7f0000000840)='./file0\x00', 0xb) 26.053105669s ago: executing program 8 (id=1763): r0 = syz_open_dev$video(&(0x7f0000000500), 0x7f, 0x2000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000540)={0x9, {0x7, 0xfff, 0x200000e7}, {0xa00, 0x0, 0xffffffff, 0xeb}, {0xfdfb, 0x3}}) 25.790553316s ago: executing program 8 (id=1765): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40242, 0x31) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000065c0), r2) getsockname$packet(r2, &(0x7f0000006600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000006640)=0x14) sendmsg$nl_route(r2, &(0x7f0000006680)={0x0, 0x0, &(0x7f00000066c0)={&(0x7f0000006700)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r3, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendto$packet(r1, &(0x7f0000006740)="0112", 0x2, 0x400c8c1, &(0x7f0000006780)={0x11, 0x86dd, r3, 0x1, 0xa, 0x6, @random="842c4c45bc33"}, 0x14) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000001c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000002200)={0x50, 0x0, r5, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x8, 0x7fff, 0x0, 0x800, 0x0, 0x0, 0x10}}, 0x50) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000067c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r8, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000006800)={[0x1, 0xffffffff, 0x6, 0x109e93, 0xffffffffffffffff, 0x400003, 0xd, 0x0, 0x2, 0x7fffffffffffffff, 0x1aec, 0x401, 0x6, 0x5, 0x20000001, 0xbffffffffffffffe], 0x1ffc, 0x21354}) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000068c0), 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000006900), 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000006940)={0xfffffffd, 0x5, 0x0, 'queue0\x00', 0x5}) openat$procfs(0xffffffffffffff9c, &(0x7f0000006a00)='/proc/asound/seq/timer\x00', 0x0, 0x0) write$P9_RXATTRCREATE(r0, 0x0, 0x0) 25.644547693s ago: executing program 38 (id=1765): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40242, 0x31) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000065c0), r2) getsockname$packet(r2, &(0x7f0000006600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000006640)=0x14) sendmsg$nl_route(r2, &(0x7f0000006680)={0x0, 0x0, &(0x7f00000066c0)={&(0x7f0000006700)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r3, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendto$packet(r1, &(0x7f0000006740)="0112", 0x2, 0x400c8c1, &(0x7f0000006780)={0x11, 0x86dd, r3, 0x1, 0xa, 0x6, @random="842c4c45bc33"}, 0x14) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000001c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000002200)={0x50, 0x0, r5, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x8, 0x7fff, 0x0, 0x800, 0x0, 0x0, 0x10}}, 0x50) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000067c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r8, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000006800)={[0x1, 0xffffffff, 0x6, 0x109e93, 0xffffffffffffffff, 0x400003, 0xd, 0x0, 0x2, 0x7fffffffffffffff, 0x1aec, 0x401, 0x6, 0x5, 0x20000001, 0xbffffffffffffffe], 0x1ffc, 0x21354}) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000068c0), 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000006900), 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000006940)={0xfffffffd, 0x5, 0x0, 'queue0\x00', 0x5}) openat$procfs(0xffffffffffffff9c, &(0x7f0000006a00)='/proc/asound/seq/timer\x00', 0x0, 0x0) write$P9_RXATTRCREATE(r0, 0x0, 0x0) 15.113160284s ago: executing program 7 (id=1861): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x45ffffb, 0x122c42) writev(r0, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000300)={r0, 0x800, {0x0, 0x0, 0x0, 0x1, 0x1ffffe, 0x0, 0x0, 0x2, 0x4, "339f020bbe82b38b000000000000000000070d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded147e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd2bf35239d2", "4f000000dd9d9ac2f63a7ad700", [0x5]}}) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000002940)=@sr0, 0x0, &(0x7f0000002980)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = dup(r1) read$FUSE(r2, &(0x7f0000000440)={0x2020}, 0x2020) 15.043362671s ago: executing program 7 (id=1863): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000002c0)={0x67, 0x4, '\x00', [@calipso={0x7, 0x18, {0x1, 0x4, 0x9, 0x7, [0x401, 0x6]}}, @pad1, @enc_lim={0x4, 0x1, 0xb}]}, 0x28) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000002000/0x4000)=nil) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) r3 = landlock_create_ruleset(&(0x7f0000000300)={0x1f4a, 0x0, 0x1}, 0x30, 0x0) landlock_restrict_self(r3, 0x5) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='mountinfo\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r4 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x398}) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000380), &(0x7f00000003c0)=0xe) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0) mount(&(0x7f0000000400)=@filename='./cgroup\x00', &(0x7f0000000440)='./cgroup\x00', &(0x7f0000000480)='romfs\x00', 0x204001, 0x0) io_uring_enter(r4, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 14.937866713s ago: executing program 7 (id=1864): r0 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000140)={0x0, &(0x7f0000000040)=""/220}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000200)={r2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000002c0)={r3, r1, r2, 0xf, 0x1, 0x0, 0x0, 0x0, 0x2, 0x7b7, 0x10000, 0x9}) ioctl$BTRFS_IOC_ENCODED_WRITE(r0, 0x40809440, &(0x7f00000003c0)={&(0x7f0000000380)=[{&(0x7f0000000300)="f140bda67ffaa3820c6dbb96d20f1b83862ca927a02eb761b7a09573a8ce15c29f18ec864ac30c8f55910a3eda86670438b5d83b273b50e8613cea14fceb13cc4b0b5a16486dc79dd3f9c18c656dda239f504ea84ca8bcf2df8d1c32b88716eebd827820af105a2a8307ce3f513d7701105385fd7dfb7eaa60fb64dc", 0x7c}], 0x1, 0x0, 0x0, 0xe3, 0xe5, 0x7, 0x3, 0x2}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000004c0)={&(0x7f0000000440)=[0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], 0x1, r5, 0xcccccccc}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000500)={0x0, r0, 0x1}) connect$inet6(r6, &(0x7f0000000540)={0xa, 0x4e23, 0x4, @mcast2, 0xfffffffd}, 0x1c) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000580)) r7 = dup2(r6, r6) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000600)={&(0x7f00000005c0)=[r4], 0x1, 0x0, 0x0, 0xffffffffffffffff}) r9 = openat$cgroup_int(r8, &(0x7f0000000640)='cgroup.clone_children\x00', 0x2, 0x0) close_range(r6, r9, 0x2) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r7, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r10, 0x200, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0xe4deb281e0f68e32) r11 = openat$zero(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f0000000840)={0x7, 0x0, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000000880)={0x2, 0x9}, &(0x7f00000008c0)=0x8) getsockopt$inet_sctp6_SCTP_EVENT(r6, 0x84, 0x7f, &(0x7f0000000900)={r12, 0x800b}, &(0x7f0000000940)=0x8) r13 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000980), 0x400, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r13, 0x0, 0x1, &(0x7f00000009c0)=0x1, 0x4) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000a40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r14, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x28, r10, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r15}, @val={0xc, 0x99, {0xdf9, 0x2}}}}, ["", ""]}, 0x28}}, 0x2000000) ioctl$VIDIOC_S_PRIORITY(r6, 0x40045644, 0x2) r16 = syz_open_dev$mtd(&(0x7f0000000b40), 0x2400000, 0x8000) close_range(r16, r14, 0x2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r11, 0x8983, &(0x7f0000000b80)={0x8, 'veth0_to_hsr\x00', {'vlan1\x00'}, 0x9}) 14.936729716s ago: executing program 7 (id=1865): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x5f8, 0xffffffff, 0x2f8, 0x228, 0x2f8, 0xfeffffff, 0xffffffff, 0x528, 0x528, 0x528, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, [0xffffff00, 0xffffff00, 0x0, 0xffffff00], [0xff, 0xffffff00, 0xffffff00, 0xff], 'vlan1\x00', 'vlan0\x00', {}, {}, 0x32, 0x4, 0x0, 0x1e}, 0x2f2, 0x200, 0x228, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'macvlan1\x00', {0x100000001, 0x8000, 0x48, 0x0, 0xffff, 0x5, 0x196, 0xf, 0x18, 0x8}, {0x4f400000}}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8, 0x9}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', [0xff000000, 0xffffffff, 0xffffffff, 0xff], [0xff, 0xffffffff, 0x0, 0xff], 'team0\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x29, 0x8, 0x6, 0xc}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@common=@rt={{0x138}, {0xf, [0x0, 0x3], 0x1001000, 0x30, 0x2, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @loopback, @private2, @rand_addr=' \x01\x00', @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x29}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @mcast1, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote], 0xa}}, @common=@icmp6={{0x28}, {0x8, "b349", 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x658) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="040e04f74120"], 0x7) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r1 = userfaultfd(0x80800) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000680)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_emit_ethernet(0xa6, 0x0, 0x0) r2 = msgget(0x2, 0x200) msgctl$IPC_RMID(r2, 0x0) msgget(0x0, 0x323) mount$tmpfs(0x0, &(0x7f0000000800)='./file0\x00', 0x0, 0x86022, 0x0) msgget(0x2, 0x606) msgget(0x1, 0x240) msgget(0x3, 0x606) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x1, 0x100) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000700)=0x7f, 0x4) bind$inet(r3, &(0x7f0000000740)={0x2, 0x4e20, @empty}, 0x10) 14.381595811s ago: executing program 7 (id=1876): mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000006c0)='./sys\x00', &(0x7f0000000700)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys\x00', 0x0, 0x0) read(r0, &(0x7f0000000780), 0x100) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$comedi(0xffffff9c, &(0x7f00000002c0)='/dev/comedi0\x00', 0x1c1202, 0x0) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000300)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0, &(0x7f0000000500)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000540)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x40, 0x0, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r2, 0x7c65, 0x95f7, 0x1, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f00000003c0), 0x400000000a882, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r7, 0x7c1f1000) cachestat(r7, &(0x7f0000000400)={0x0, 0xfffffffffffffff9}, &(0x7f0000000440), 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[@ANYBLOB="0000000000000000000200000a14000000000a07040000000000000000020000103396da0a64000000060a010400000000000000000200000a0900010073793e30000000000900020073797a300000000038000480340001800c0001007061796c6f616400240000000108000340000000000800048daa00000000000140000000011400000011000100"/157], 0xa0}, 0x1, 0x0, 0x0, 0x40800}, 0x40) r8 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x101800, 0x0) r9 = syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_clone3(&(0x7f0000000040)={0x2140000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[r9], 0x1}, 0x58) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r8, 0xc1105511, &(0x7f0000000140)={{0x7, 0x1, 0x0, 0x4, 'syz1\x00', 0x92e}, 0x4, 0x2, 0xb, r9, 0x5, 0x4, 'syz1\x00', &(0x7f0000000100)=['syz0\x00', 'payload\x00', '[)\x00', 'syz0\x00', 'payload\x00'], 0x1d}) socket$kcm(0x29, 0x7, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000980)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4004}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0xc8, 0x0, 0x1, 0x3, 0x0, 0x0, {0x5}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x2}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2000}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_REPLY={0x98, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20008080}, 0x15) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) close(r11) openat$ppp(0xffffffffffffff9c, &(0x7f0000000640), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r11, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r11, 0x4004743b, &(0x7f00000009c0)) ptrace$setopts(0x4200, r10, 0x1, 0x0) 14.153254753s ago: executing program 7 (id=1877): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r4, &(0x7f0000000100)=[{&(0x7f0000000140)='}', 0xffffffd5}], 0x1, 0x0) ioctl$KVM_GET_PIT2(r3, 0x8070ae9f, &(0x7f00000004c0)) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000180)='nv', 0x2) getsockopt$inet6_tcp_buf(r5, 0x6, 0x1a, 0x0, &(0x7f0000000200)) (async) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x3, 0x2, 0x2, 0x4, 0x41, 0x1, 0xf0}}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x8, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x1, 0xb, 0x5, 0x0, 0x8000], 0x1, 0x3c4210}) (async, rerun: 32) r6 = shmget$private(0x0, 0xf000, 0x54000000, &(0x7f0000ff1000/0xf000)=nil) (rerun: 32) shmat(r6, &(0x7f0000ff8000/0x2000)=nil, 0x4000) (async) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x9) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$HIDIOCGRAWINFO(r4, 0x80084803, &(0x7f0000000540)=""/96) 1.572606997s ago: executing program 6 (id=1961): r0 = socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="d5efd4"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x48008) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0xffff, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x201}, 0x1c) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000005200010026bd70000002ecff020000000c00010001"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x6, @local, 0x400}, 0x1c) 1.572148509s ago: executing program 6 (id=1962): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 1.523030061s ago: executing program 6 (id=1963): r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x61) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x0, &(0x7f0000000580)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file0/file1\x00', 0x20400, 0x20) setxattr$security_capability(&(0x7f0000000600)='./file0/file1\x00', &(0x7f0000000640), 0x0, 0x0, 0x3) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/221, 0xdd}], 0x1) r3 = socket$can_bcm(0x1d, 0x2, 0x2) setns(0xc9, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000000680)={0xa, 0x4e23, 0x7fff, @empty}, 0x1c) sendto$inet6(r4, &(0x7f00000006c0)="1a", 0x34000, 0x0, &(0x7f0000000700)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r3, 0xffffffffffffffff, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=r5], 0x138}, 0x1, 0x0, 0x0, 0x20048080}, 0x0) 1.332925166s ago: executing program 6 (id=1964): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4a8a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) 1.222540782s ago: executing program 6 (id=1966): setns(0xc9, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000100)) syz_usb_connect(0x1, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230820090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(r0) 600.277986ms ago: executing program 2 (id=1973): mkdir(&(0x7f00000003c0)='./file2\x00', 0x16) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) setxattr$incfs_metadata(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) (fail_nth: 3) 600.046024ms ago: executing program 2 (id=1974): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20940, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x28) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x7000000) ioctl$SNDCTL_DSP_GETTRIGGER(r3, 0x80045010, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 443.04359ms ago: executing program 9 (id=1976): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x0, 0x2002) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000140)={0x3, 0x0}) 436.762104ms ago: executing program 9 (id=1977): keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000100), &(0x7f0000000200)=ANY=[@ANYBLOB="656e633d6f61657020686173683d74677231323800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000705b38d09c3aec70f838332fc0415b4dbe877ee15deb4373e51c77d001f0f7dad6a587cd44d939da3a21f41384f6dac66633ab13b01d77ef031ceaf0d6f0cc"], 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="d5efd4"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x48008) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0xffff, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x201}, 0x1c) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000005200010026bd70000002ecff020000000c00010001"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e23, 0x6, @local, 0x400}, 0x1c) 331.154317ms ago: executing program 2 (id=1978): mkdir(&(0x7f0000000600)='./file0\x00', 0x102) mount$9p_virtio(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) futimesat(r0, 0x0, &(0x7f00000000c0)) 330.514697ms ago: executing program 9 (id=1979): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000005c0)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) sendmsg$nl_route_sched(r4, &(0x7f0000001340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001300)={&(0x7f0000000940)=@newchain={0x94c, 0x64, 0x100, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xfff2, 0xffef}, {0xfff1, 0xfff3}, {0xe, 0x5}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x91c, 0x2, [@TCA_CGROUP_ACT={0x5fc, 0x1, [@m_ct={0x160, 0x2, 0x0, 0x0, {{0x7}, {0x60, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x20}, @TCA_CT_PARMS={0x18, 0x1, {0xc343, 0xe6bc, 0x8, 0x69fe41d7, 0x9}}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @broadcast}, @TCA_CT_LABELS_MASK={0x14, 0x8, "f675ccf2a6ad9e12bca604c6127eef21"}, @TCA_CT_MARK={0x8, 0x5, 0x401}, @TCA_CT_PARMS={0x18, 0x1, {0xffff, 0x114, 0x6, 0x2, 0x200}}]}, {0xdb, 0x6, "67e0593c0ea9c4a5d5c6259e5eb712a2a59bf99cd2c731b9c2abd9e5e9427639762fa316349741e833485afbeaf140235989e39d555d66221a54a99d1f4d902a2924d35cf80206ce28a82791d7e4e40eba15e2f4a9da39c422af4803f71cdf05d4dbcb9ed75d4b106e8495e9db66c28aa88d910bc956fd130ad7a37d782e26987a72538e6ea96fd885c45b6291eb1d9741249f93971c896a4a3acfc54da5c5ebb9f7b0ec662c992997c603cd69ba487707961823428a56783a87edcf6820ff7543cac16675fd85759d9ab479033f873d3d30834f286106"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x4, 0x1}}}}, @m_ctinfo={0xf4, 0x1c, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x401}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x7}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x8000}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xa}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x2}]}, {0x9d, 0x6, "31f3088d91f72d9054a1818d429e4e985d44112dad39f4ee8d88258d63875f3de3ad7dca82d53d82d99d2dd6dbdd1df21f3b21a1f39d9c6a2ae2e78c47c4e991ee2f71b596fb4c6e010169e8a68e15d034ca13d5098436dd93c66805082312e84de96d39cbeb880b7af385674718406a7ef81efaddc85e0db4f9c7903610c6b3d43055a6da9a1c929a4a31a60c569d5a51fbd3272f47e77e8a"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_csum={0x194, 0xa, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x2, 0xd, 0x6}, 0x61}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x4, 0x20000000}, 0x3d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8001, 0x4, 0xfffffffffffffff0, 0xff, 0x540}, 0x24}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0xfffffffd, 0x6, 0xffffffff, 0x8}, 0x63}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x1, 0xb9ba, 0x3}, 0x7b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x10000, 0x7, 0x6, 0x3}, 0x73}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0xe, 0x40000008, 0x7fff, 0x5}, 0x2f}}]}, {0xa1, 0x6, "688131a89075bcff553a3f8378c7172f1131014b40e40470cdda9156ea6c648ac9d61e518d00d0ea781ace76e10dbf6bba2444a141bf9a952c6a03ccadd595729aa028e243dc23d9fba600f1842aed8007c4663282472ddac5a4c12f272f407c69777253a9a9d2e65083bdab7a25fb4b85369b0ff90d5075c14c88470e0567948172385c31d8b228a1f6cb04282a69b607690f88227b229ff1d7272bad"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0xdc, 0x7, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x30, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x6a6d}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x40}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x9}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x3}]}]}, {0x84, 0x6, "e83e587f21fda1722eca04c46a89b9dcfc630382f3d18373128d9c5f43443915fec4e95866821382cf45c5ae286f0be200701a61f5193e26ffb12c12619c29560882d3044232f0de9409df2b8d58fbaf734b4511036e3c03df910134c9587225ed5416e2490f42281c14160108d1931cd80b92bb5f73799e4f7c9607af07c73d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0x134, 0xe, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x9, 0x7}, 0x3}}]}, {0xeb, 0x6, "ab854e8fe5d20f4665b85cd76bc73661b572dfb044db3ebf3943ac43c44d3863b77317ec0a7bc4e2b4e97a8fd4f7a3a9fdc1a05786854938e7cb4e9020ebb2f7134ea4ad18a769eabb50d6e201bcd8cf0f962e7ef1d793487256a456e120a752cdbbd09f8fb7a6a73159bc871e9b7e9148054bcc5962021095551f1092c8c88905a12f7e68f805dafee28e359a42ea3fbccbf7f0087bfd4c61b557c0a267c087dbd84091f5e6143f785fdae4d2e0c2e387e3d23d18db6b51e92ae05bb00122606f566e167a50760e39927f69718df17dbebec7dff4eea43780279eef060d6bda91bd08aecffa53"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_CGROUP_ACT={0x130, 0x1, [@m_nat={0x12c, 0xa, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x100, 0x3, 0x2, 0xfd, 0x7}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10000, 0x6, 0x8, 0xa0000000, 0x9}, @rand_addr=0x64010100, @broadcast}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x2, 0x30000000, 0xffff, 0x400}, @local, @empty, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xf67, 0x39, 0x6c3a00773eaef82, 0x3ff, 0x401}, @multicast2, @loopback, 0xffffff00, 0x1}}]}, {0x64, 0x6, "ebb5e4ac53bbafe0f9d0cb0808a07c41ad3bb3f962a085572a12c8922983afbbfdb70846d7ee11d714dfc9afb0018acf7c18efa714e4e8362aa6cec4683d4799456d95872ea8e4b43e9bb28e5c72f1f8f0f030de9c58135f64161af42eba351c"}, {0xc}, {0xc, 0x8, {0x4}}}}]}, @TCA_CGROUP_EMATCHES={0x1ec, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x44, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x6, 0x8, 0x6}, {0x0, 0x5, 0x1}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6, 0x8, 0x8}, {0x2, 0x3, 0x3}}}, @TCF_EM_CONTAINER={0x20, 0x1, 0x0, 0x0, {{0x5, 0x0, 0x4}, "613daec22fa87f4fe1ff8848853559367c"}}]}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x6, 0x7, 0xe3}, {{0x1, 0x1, 0x0, 0x1}, {0x3, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8000}}, @TCA_EMATCH_TREE_LIST={0x184, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x28, 0x2, 0x0, 0x0, {{0x802b, 0x9, 0x9}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_NFPROTO={0x5}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x8000, 0x3, 0xd721}, {0x8, 0x0, 0x5, 0x9}}}, @TCF_EM_CONTAINER={0x48, 0x3, 0x0, 0x0, {{0x81}, "d1307d9549a4f9724bc74bf8fd1d5f89faefbac74b7604a4d5009fe0ebcf8b127011a65c75ff4c4206959a9e617d7c4d6a0e583f734cfe1f07ae2d"}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x3, 0x7, 0x7}, {{0x5, 0x0, 0x1}, {0x2, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x2, 0x8, 0x5}, {0x1, 0x3, 0x4}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x1ff}, {0x0, 0x7, 0x2, "52910d148f9b45"}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x5, 0x8, 0xffff}, {0xffffffffffffffff, 0x5, 0x2}}}, @TCF_EM_CONTAINER={0x8c, 0x2, 0x0, 0x0, {{0xb6, 0x0, 0x7}, "4f7094804a688e6b21a0c5a73a527e6c65a7cf1ccc3aff5925adbb56df65582c6d5bfa34e20d518130745ebeda7d1824f05e224260d0301933fb8f422e2aa1b735f229108624ed85be1c3a81115c81ac0893170e06955405af0a50a6905234ceb81ac78be5b03edfe77cc71f409aa112a20f99859dadb5c6730b86607fd132"}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xd4a, 0x3, 0x6}, {0x5, 0x8, 0x0, 0x7}}}]}]}]}}]}, 0x94c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000180)='syzkaller0\x00', 0xb) sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x10) 283.227795ms ago: executing program 2 (id=1980): r0 = getpid() ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x0, r0}) syz_pidfd_open(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00\b\b'], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4) open_by_handle_at(r2, &(0x7f0000000300)=@ocfs2={0xc, 0xfe, {0x206, 0x8, 0x7}}, 0x0) 283.108185ms ago: executing program 2 (id=1981): r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000004c0)={0x0, &(0x7f0000000500)=[@code={0xa, 0x6e, {"488d054900000048c7c30052020066890348c1e8106689430648c1e810894308b91b0000000f320d000c00000f30b90f08000031d2b8ff0100000f30b93008000031d2b8200000000f30fb90909090f4b90b08000031d231c00f3048cf"}}], 0x6e}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x38, 0x9, 0x0, 0xfff, 0xffffffffffffffff, 0x117, 0x8000, 0xfffffffffffffffb, 0xfffffffffffffff4, 0x8, 0x2, 0x8, 0x0, 0x2, 0xffffffffdffffffd, 0x4], 0x0, 0x1cdb97}) ioctl$KVM_RUN(r3, 0xae80, 0x50000) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x2, 0x0, @pic={0xe0, 0xe, 0x4, 0xfe, 0x1b, 0x6, 0xc8, 0xd, 0x9c, 0x5, 0x7, 0x2, 0xb, 0x40, 0x1, 0x1}}) 102.548517ms ago: executing program 9 (id=1982): syz_clone(0x8020000, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$setopts(0x4206, r0, 0x0, 0x40) 52.958075ms ago: executing program 9 (id=1983): syz_open_dev$mtd(&(0x7f0000000140), 0x0, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000006c0)='./debug\x00', &(0x7f0000000700)='debugfs\x00', 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000780), 0x7f, 0x2000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f00000007c0)={0x9, {0x7, 0xfff, 0x200000e7}, {0x0, 0x0, 0xffffffff, 0xeb}, {0xfdfb, 0x3}}) openat(0xffffffffffffff9c, &(0x7f0000000740)='./debug/x86/nmi_longest_ns\x00', 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c00000015000100fcffffff000000001b7c000008000100090000000c28bc31e4bca9ac8d435928c8b03866cddac697d447a401ca9f3ec17d126109fea01d33992bd3951ad4f92a18"], 0x1c}, 0x1, 0x0, 0x0, 0x3b5e04dbece314b7}, 0xc000) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000001c0)={r2}) socket$kcm(0x2d, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, 0x0}, 0x94) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGFLAGS(r3, 0x8004745a, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = socket(0x2d, 0x2, 0x0) setsockopt(r4, 0x11d, 0x1, &(0x7f0000000400)="01000000", 0x4) sendto(r4, 0x0, 0x0, 0x40040, &(0x7f0000000440)=@generic={0x28, "00000000000000000800010000000600"}, 0x80) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r5], 0x20}, 0x1, 0x0, 0x0, 0x20084004}, 0x0) r6 = socket(0x18, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x8922, 0x0) r7 = socket(0x2d, 0x2, 0x0) bind(r7, &(0x7f0000000580)=@generic={0x2d, "00000100000008010800"}, 0x80) r8 = socket(0x2d, 0x2, 0x0) sendto(r8, 0x0, 0x0, 0x0, &(0x7f0000000600)=@generic={0x2d, "00000100000008010800"}, 0x80) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x40000, &(0x7f0000000240)={[{@stats}, {@max={'max', 0x3d, 0x5ceef5b5}}, {@max={'max', 0x3d, 0x5}}, {@stats}, {@max={'max', 0x3d, 0x2}}, {@stats}, {@stats}], [{@obj_type={'obj_type', 0x3d, '/dev/mtd#\x00'}}, {@context={'context', 0x3d, 'staff_u'}}, {@dont_measure}, {@subj_role={'subj_role', 0x3d, '(!\xfd*\xf6!'}}, {@measure}]}) 52.305088ms ago: executing program 2 (id=1984): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100080000000100000001000000000009000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000300"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="180090263b000000000018120000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x2, 0x1000, &(0x7f0000000bc0)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$loop(&(0x7f00000009c0), 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'veth0_to_bridge\x00', 0x400}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x240, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x4}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xfe}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40080c1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./nfsd\x00', &(0x7f0000000900)='nfsd\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./nfsd/max_block_size\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./sys\x00', 0x1ff) write$cgroup_devices(r7, &(0x7f0000000a40)=ANY=[], 0x9) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000440)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000000480)={&(0x7f00000004c0)=@xdp={0x2c, 0xa888, r6, 0x42}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000580)='\'', 0x1}], 0x1}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000780)='./config\x00', &(0x7f00000007c0)='configfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r9, &(0x7f0000000840)='usbip-vudc.0', 0xc) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$TUNSETNOCSUM(r10, 0x400454c8, 0x0) write$binfmt_misc(r10, &(0x7f0000000a40), 0xe09) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f00000005c0)={0x2, @in={{0x2, 0x4e20, @empty}}, 0xadd9, 0x6, 0x6, 0x0, 0x1, 0x9, 0x9}, &(0x7f0000000680)=0x9c) getsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f00000006c0)=@assoc_value={r11, 0x8}, &(0x7f0000000700)=0x8) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000a80)={r10, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979f0d96072000090000000000000000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224a3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c5500000000004000f0f9ffff0000000000ffff00", [0x80000000006, 0x6]}}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r10) 233.241µs ago: executing program 9 (id=1985): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000020000103000000000000da0002040004000000011d000000eb830c0ed1ebcca884a2cd66287b671840e126563983"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x44004) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x105280, 0xc3) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000180)='syzkaller0\x00', 0xb) sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x10) 0s ago: executing program 6 (id=1986): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20940, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x28) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x7000000) ioctl$SNDCTL_DSP_GETTRIGGER(r3, 0x80045010, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): from the interface descriptor's value: 100 [ 194.041858][ T5803] usb 13-1: config 168 interface 0 has no altsetting 0 [ 194.042774][ T5803] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 194.042790][ T5803] usb 13-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 194.042808][ T5803] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 194.042820][ T5803] usb 13-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 194.042832][ T5803] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 194.042845][ T5803] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 194.042858][ T5803] usb 13-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 194.042870][ T5803] usb 13-1: config 168 interface 0 has no altsetting 0 [ 194.043892][ T5803] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 194.043908][ T5803] usb 13-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 194.043932][ T5803] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 194.043944][ T5803] usb 13-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 194.043956][ T5803] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 194.043969][ T5803] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 194.043982][ T5803] usb 13-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 194.043995][ T5803] usb 13-1: config 168 interface 0 has no altsetting 0 [ 194.046697][ T5803] usb 13-1: string descriptor 0 read error: -22 [ 194.046764][ T5803] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.050809][ T5803] adutux 13-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 194.066492][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.066544][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.094249][ T42] audit: type=1800 audit(1792417883.056:2142): pid=8033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=247822 res=0 errno=0 [ 194.094671][ T42] audit: type=1800 audit(1792417883.056:2143): pid=8033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=247851 res=0 errno=0 [ 194.119675][ T5835] dvb_usb_gl861 12-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 194.127319][ T5835] usb 12-1: USB disconnect, device number 14 [ 194.255931][ T1348] usb 13-1: USB disconnect, device number 16 [ 194.740453][ T5803] usb 11-1: new high-speed USB device number 21 using dummy_hcd [ 194.790531][ T1348] usb 12-1: new high-speed USB device number 15 using dummy_hcd [ 194.869628][T11216] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1717'. [ 194.910833][ T5803] usb 11-1: Using ep0 maxpacket: 8 [ 194.913183][ T5803] usb 11-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 194.914619][ T5803] usb 11-1: config 0 has no interfaces? [ 194.916309][ T5803] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.916319][ T5803] usb 11-1: Product: syz [ 194.916327][ T5803] usb 11-1: Manufacturer: syz [ 194.916334][ T5803] usb 11-1: SerialNumber: syz [ 194.917842][ T5803] usb 11-1: config 0 descriptor?? [ 194.940507][ T1348] usb 12-1: Using ep0 maxpacket: 16 [ 194.941413][ T1348] usb 12-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 194.945804][ T1348] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.945821][ T1348] usb 12-1: Product: syz [ 194.945835][ T1348] usb 12-1: Manufacturer: syz [ 194.945848][ T1348] usb 12-1: SerialNumber: syz [ 195.071410][ T5092] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 195.071484][ T5092] Bluetooth: hci1: unexpected event for opcode 0x206e [ 195.124025][ T6034] usb 11-1: USB disconnect, device number 21 [ 195.170837][ T1348] usb 12-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 195.175196][ T1348] usb 12-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 195.175511][ T1348] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 195.175537][ T1348] usb 12-1: media controller created [ 195.190986][ T1348] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 195.202928][ T1348] zl10353_read_register: readreg error (reg=127, ret==-71) [ 195.234271][ T1348] dvb_usb_gl861 12-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 195.238315][ T1348] usb 12-1: USB disconnect, device number 15 [ 195.250490][ T5803] usb 14-1: new high-speed USB device number 12 using dummy_hcd [ 195.420370][ T5803] usb 14-1: Using ep0 maxpacket: 16 [ 195.421487][ T5803] usb 14-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 195.424883][ T5803] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.424902][ T5803] usb 14-1: Product: syz [ 195.424915][ T5803] usb 14-1: Manufacturer: syz [ 195.424928][ T5803] usb 14-1: SerialNumber: syz [ 195.639182][ T5803] usb 14-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 195.649221][ T5803] usb 14-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 195.649803][ T5803] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 195.649857][ T5803] usb 14-1: media controller created [ 195.659970][T11233] 8021q: adding VLAN 0 to HW filter on device bond5 [ 195.668890][T11233] loop5: detected capacity change from 0 to 4095 [ 195.684147][ T8033] Buffer I/O error on dev loop5, logical block 511, async page read [ 195.696162][ T5803] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 195.701347][ T6590] net_ratelimit: 71 callbacks suppressed [ 195.749097][ T5803] zl10353_read_register: readreg error (reg=127, ret==-71) [ 195.769749][T11244] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1728'. [ 195.771605][T11245] FAULT_INJECTION: forcing a failure. [ 195.771605][T11245] name failslab, interval 1, probability 0, space 0, times 0 [ 195.771634][T11245] CPU: 0 UID: 0 PID: 11245 Comm: syz.7.1727 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.771660][T11245] Tainted: [L]=SOFTLOCKUP [ 195.771667][T11245] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 195.771679][T11245] Call Trace: [ 195.771686][T11245] [ 195.771695][T11245] dump_stack_lvl+0x100/0x190 [ 195.771727][T11245] should_fail_ex.cold+0x5/0xa [ 195.771754][T11245] should_failslab+0xc2/0x120 [ 195.771783][T11245] __kmalloc_cache_noprof+0x91/0x6d0 [ 195.771806][T11245] ? rtnl_newlink+0x139/0x2620 [ 195.771831][T11245] ? __pfx_rtnl_newlink+0x10/0x10 [ 195.771860][T11245] rtnl_newlink+0x139/0x2620 [ 195.771892][T11245] ? __pfx_rtnl_newlink+0x10/0x10 [ 195.771912][T11245] ? avc_has_perm_noaudit+0x56/0x470 [ 195.771935][T11245] ? find_held_lock+0x2b/0x80 [ 195.771963][T11245] ? avc_has_perm_noaudit+0x11e/0x470 [ 195.771984][T11245] ? avc_has_perm_noaudit+0x11e/0x470 [ 195.772019][T11245] ? __lock_acquire+0x5c0/0x1f40 [ 195.772052][T11245] ? lock_acquire+0x1d1/0x380 [ 195.772073][T11245] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 195.772096][T11245] ? find_held_lock+0x2b/0x80 [ 195.772123][T11245] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 195.772144][T11245] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 195.772168][T11245] ? __pfx_rtnl_newlink+0x10/0x10 [ 195.772191][T11245] rtnetlink_rcv_msg+0x95e/0xe90 [ 195.772216][T11245] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 195.772246][T11245] ? ref_tracker_free+0x37e/0x6c0 [ 195.772271][T11245] netlink_rcv_skb+0x159/0x420 [ 195.772301][T11245] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 195.772326][T11245] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 195.772353][T11245] ? netlink_deliver_tap+0x1ae/0xcc0 [ 195.772388][T11245] netlink_unicast+0x65f/0x950 [ 195.772410][T11245] ? __pfx_netlink_unicast+0x10/0x10 [ 195.772436][T11245] netlink_sendmsg+0x8b0/0xda0 [ 195.772460][T11245] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.772481][T11245] ? selinux_socket_sendmsg+0x198/0x2f0 [ 195.772513][T11245] ____sys_sendmsg+0xa4d/0xbe0 [ 195.772546][T11245] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.772567][T11245] ? __pfx_____sys_sendmsg+0x10/0x10 [ 195.772598][T11245] ? lock_acquire+0x1d1/0x380 [ 195.772619][T11245] ? get_pid_task+0x2a/0x250 [ 195.772647][T11245] ___sys_sendmsg+0x190/0x1e0 [ 195.772675][T11245] ? __pfx____sys_sendmsg+0x10/0x10 [ 195.772701][T11245] ? get_pid_task+0x106/0x250 [ 195.772737][T11245] ? find_held_lock+0x2b/0x80 [ 195.772783][T11245] __sys_sendmsg+0x160/0x210 [ 195.772804][T11245] ? __pfx___sys_sendmsg+0x10/0x10 [ 195.772838][T11245] do_syscall_64+0x123/0x790 [ 195.772876][T11245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.772895][T11245] RIP: 0033:0x7f3f90b9e559 [ 195.772912][T11245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.772930][T11245] RSP: 002b:00007f3f919f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.772949][T11245] RAX: ffffffffffffffda RBX: 00007f3f90e25fa0 RCX: 00007f3f90b9e559 [ 195.772962][T11245] RDX: 0000000000040880 RSI: 0000200000000c00 RDI: 0000000000000003 [ 195.772974][T11245] RBP: 00007f3f919f8090 R08: 0000000000000000 R09: 0000000000000000 [ 195.772985][T11245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.772997][T11245] R13: 00007f3f90e26038 R14: 00007f3f90e25fa0 R15: 00007ffeda63ab38 [ 195.773024][T11245] [ 195.838284][ T5803] dvb_usb_gl861 14-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 195.850621][ T5803] usb 14-1: USB disconnect, device number 12 [ 195.904309][T11249] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 195.942491][T11254] FAULT_INJECTION: forcing a failure. [ 195.942491][T11254] name failslab, interval 1, probability 0, space 0, times 0 [ 195.942510][T11254] CPU: 2 UID: 0 PID: 11254 Comm: syz.7.1732 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.942525][T11254] Tainted: [L]=SOFTLOCKUP [ 195.942529][T11254] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 195.942536][T11254] Call Trace: [ 195.942541][T11254] [ 195.942546][T11254] dump_stack_lvl+0x100/0x190 [ 195.942567][T11254] should_fail_ex.cold+0x5/0xa [ 195.942582][T11254] ? __netlink_lookup+0x692/0x950 [ 195.942609][T11254] should_failslab+0xc2/0x120 [ 195.942634][T11254] kmem_cache_alloc_noprof+0x92/0x6a0 [ 195.942659][T11254] ? skb_clone+0x190/0x400 [ 195.942685][T11254] skb_clone+0x190/0x400 [ 195.942705][T11254] netlink_deliver_tap+0xaed/0xcc0 [ 195.942737][T11254] netlink_unicast+0x6ff/0x950 [ 195.942750][T11254] ? __pfx_netlink_unicast+0x10/0x10 [ 195.942765][T11254] netlink_sendmsg+0x8b0/0xda0 [ 195.942778][T11254] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.942790][T11254] ? selinux_socket_sendmsg+0x198/0x2f0 [ 195.942809][T11254] ____sys_sendmsg+0xa4d/0xbe0 [ 195.942823][T11254] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.942834][T11254] ? __pfx_____sys_sendmsg+0x10/0x10 [ 195.942852][T11254] ? lock_acquire+0x1d1/0x380 [ 195.942865][T11254] ? get_pid_task+0x2a/0x250 [ 195.942882][T11254] ___sys_sendmsg+0x190/0x1e0 [ 195.942898][T11254] ? __pfx____sys_sendmsg+0x10/0x10 [ 195.942913][T11254] ? get_pid_task+0x106/0x250 [ 195.942934][T11254] ? find_held_lock+0x2b/0x80 [ 195.942966][T11254] __sys_sendmsg+0x160/0x210 [ 195.942979][T11254] ? __pfx___sys_sendmsg+0x10/0x10 [ 195.942998][T11254] do_syscall_64+0x123/0x790 [ 195.943017][T11254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.943028][T11254] RIP: 0033:0x7f3f90b9e559 [ 195.943038][T11254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.943049][T11254] RSP: 002b:00007f3f919f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.943060][T11254] RAX: ffffffffffffffda RBX: 00007f3f90e25fa0 RCX: 00007f3f90b9e559 [ 195.943067][T11254] RDX: 0000000004000090 RSI: 0000200000003840 RDI: 0000000000000009 [ 195.943074][T11254] RBP: 00007f3f919f8090 R08: 0000000000000000 R09: 0000000000000000 [ 195.943081][T11254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.943088][T11254] R13: 00007f3f90e26038 R14: 00007f3f90e25fa0 R15: 00007ffeda63ab38 [ 195.943102][T11254] [ 196.166085][T11268] 8021q: adding VLAN 0 to HW filter on device bond6 [ 196.173497][T11268] loop5: detected capacity change from 0 to 4095 [ 196.183872][T10641] Buffer I/O error on dev loop5, logical block 511, async page read [ 196.242159][T11279] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1740'. [ 196.490471][ T1348] usb 11-1: new low-speed USB device number 22 using dummy_hcd [ 196.570464][ T6465] usb 14-1: new high-speed USB device number 13 using dummy_hcd [ 196.652949][ T1348] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 196.653877][ T1348] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 196.653908][ T1348] usb 11-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 196.653936][ T1348] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 196.653957][ T1348] usb 11-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 196.653977][ T1348] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 196.653997][ T1348] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 196.654017][ T1348] usb 11-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 196.654038][ T1348] usb 11-1: config 168 interface 0 has no altsetting 0 [ 196.654954][ T1348] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 196.654979][ T1348] usb 11-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 196.655006][ T1348] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 196.655026][ T1348] usb 11-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 196.655045][ T1348] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 196.655065][ T1348] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 196.655085][ T1348] usb 11-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 196.655106][ T1348] usb 11-1: config 168 interface 0 has no altsetting 0 [ 196.656038][ T1348] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 196.656062][ T1348] usb 11-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 196.656089][ T1348] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 196.656109][ T1348] usb 11-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 196.656128][ T1348] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 196.656148][ T1348] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 196.656168][ T1348] usb 11-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 196.656189][ T1348] usb 11-1: config 168 interface 0 has no altsetting 0 [ 196.659132][ T1348] usb 11-1: string descriptor 0 read error: -22 [ 196.659242][ T1348] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.688613][ T1348] adutux 11-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 196.742738][ T6465] usb 14-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 196.743886][ T6465] usb 14-1: unable to read config index 0 descriptor/start: -61 [ 196.743904][ T6465] usb 14-1: can't read configurations, error -61 [ 196.813248][T11301] loop5: detected capacity change from 0 to 4095 [ 196.825976][T10641] Buffer I/O error on dev loop5, logical block 511, async page read [ 196.871819][ T34] usb 11-1: USB disconnect, device number 22 [ 196.881555][ T6465] usb 14-1: new high-speed USB device number 14 using dummy_hcd [ 196.961632][ T5816] usb 12-1: new full-speed USB device number 16 using dummy_hcd [ 197.004594][T11306] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1752'. [ 197.031179][ T6465] usb 14-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 197.033137][ T6465] usb 14-1: unable to read config index 0 descriptor/start: -61 [ 197.033167][ T6465] usb 14-1: can't read configurations, error -61 [ 197.033573][ T6465] usb usb14-port1: attempt power cycle [ 197.111383][ T5816] usb 12-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 197.112163][ T5816] usb 12-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 197.112179][ T5816] usb 12-1: config 0 interface 0 has no altsetting 0 [ 197.113718][ T5816] usb 12-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 197.113728][ T5816] usb 12-1: Product: syz [ 197.113735][ T5816] usb 12-1: Manufacturer: syz [ 197.113742][ T5816] usb 12-1: SerialNumber: syz [ 197.117115][ T5816] usb 12-1: config 0 descriptor?? [ 197.120222][ T5816] usb 12-1: selecting invalid altsetting 0 [ 197.292599][T11315] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1756'. [ 197.293179][ T5092] Bluetooth: hci1: unexpected event for opcode 0x1002 [ 197.322389][ T5816] usb 12-1: USB disconnect, device number 16 [ 197.370752][ T6465] usb 14-1: new high-speed USB device number 15 using dummy_hcd [ 197.391570][ T6465] usb 14-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 197.393423][ T6465] usb 14-1: unable to read config index 0 descriptor/start: -61 [ 197.393442][ T6465] usb 14-1: can't read configurations, error -61 [ 197.520416][ T6465] usb 14-1: new high-speed USB device number 16 using dummy_hcd [ 197.542181][ T6465] usb 14-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 197.543302][ T6465] usb 14-1: unable to read config index 0 descriptor/start: -61 [ 197.543324][ T6465] usb 14-1: can't read configurations, error -61 [ 197.543585][ T6465] usb usb14-port1: unable to enumerate USB device [ 198.257413][ T6590] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.404659][ T6590] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.409431][T11343] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1768'. [ 198.452932][ T5734] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 198.459133][ T5734] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 198.462571][ T5734] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 198.463421][ T5734] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 198.464353][ T5734] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 198.495995][ T6590] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.591854][ T6590] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.700171][ T42] kauditd_printk_skb: 87 callbacks suppressed [ 198.700182][ T42] audit: type=1800 audit(1792417887.656:2231): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=249756 res=0 errno=0 [ 198.703118][ T42] audit: type=1800 audit(1792417887.666:2232): pid=10641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=249761 res=0 errno=0 [ 198.709310][ T42] audit: type=1800 audit(1792417887.666:2233): pid=10641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=249765 res=0 errno=0 [ 198.709346][ T42] audit: type=1800 audit(1792417887.666:2234): pid=10641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=249764 res=0 errno=0 [ 198.717695][ T42] audit: type=1800 audit(1792417887.676:2235): pid=10641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=249767 res=0 errno=0 [ 198.717783][ T42] audit: type=1800 audit(1792417887.676:2236): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=249842 res=0 errno=0 [ 198.727119][ T42] audit: type=1800 audit(1792417887.686:2237): pid=8033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=249847 res=0 errno=0 [ 198.727147][ T42] audit: type=1800 audit(1792417887.686:2238): pid=8033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=249851 res=0 errno=0 [ 198.727166][ T42] audit: type=1800 audit(1792417887.686:2239): pid=8033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=249850 res=0 errno=0 [ 198.727513][ T42] audit: type=1800 audit(1792417887.686:2240): pid=8033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=249853 res=0 errno=0 [ 198.774942][T11344] rxe_eth0 speed is unknown, defaulting to 1000 [ 198.796822][ T6590] bridge_slave_1: left allmulticast mode [ 198.796834][ T6590] bridge_slave_1: left promiscuous mode [ 198.796964][ T6590] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.801989][ T6590] bridge_slave_0: left allmulticast mode [ 198.802000][ T6590] bridge_slave_0: left promiscuous mode [ 198.802107][ T6590] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.936452][T11355] xt_hashlimit: invalid rate [ 198.937207][ T5092] Bluetooth: hci3: unexpected event for opcode 0x2041 [ 198.952425][T11355] ptrace attach of "/syz-executor exec"[7514] was attempted by ""[11355] [ 198.961794][ T6590] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.967718][ T6590] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.968984][ T6590] bond0 (unregistering): Released all slaves [ 198.977065][ T6590] bond1 (unregistering): Released all slaves [ 198.986083][ T6590] bond2 (unregistering): Released all slaves [ 198.997087][ T6590] bond3 (unregistering): Released all slaves [ 199.006212][ T6590] bond4 (unregistering): Released all slaves [ 199.009617][T11359] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 199.016204][ T6590] bond5 (unregistering): Released all slaves [ 199.144763][ T6590] tipc: Left network mode [ 199.254013][ T5445] 8021q: adding VLAN 0 to HW filter on device eth22 [ 199.441319][T11390] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1778'. [ 199.457334][ T5445] 8021q: adding VLAN 0 to HW filter on device eth23 [ 199.781203][T11344] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.781335][T11344] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.781420][T11344] bridge_slave_0: entered allmulticast mode [ 199.782220][T11344] bridge_slave_0: entered promiscuous mode [ 199.796197][ T6590] hsr_slave_0: left promiscuous mode [ 199.796800][ T6590] hsr_slave_1: left promiscuous mode [ 199.797373][ T6590] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.797384][ T6590] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.797968][ T6590] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.797977][ T6590] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.807240][ T6590] veth1_macvtap: left promiscuous mode [ 199.807272][ T6590] veth0_macvtap: left promiscuous mode [ 199.807354][ T6590] veth1_vlan: left promiscuous mode [ 199.807466][ T6590] veth0_vlan: left promiscuous mode [ 199.860586][ T61] usb 14-1: new high-speed USB device number 17 using dummy_hcd [ 200.000394][ T61] usb 14-1: device descriptor read/64, error -71 [ 200.011333][ T6590] team0 (unregistering): Port device team_slave_1 removed [ 200.018092][ T6590] team0 (unregistering): Port device team_slave_0 removed [ 200.110479][ T2324] usb 11-1: new high-speed USB device number 23 using dummy_hcd [ 200.151806][T11344] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.151934][T11344] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.152071][T11344] bridge_slave_1: entered allmulticast mode [ 200.153562][T11344] bridge_slave_1: entered promiscuous mode [ 200.156501][ T5445] 8021q: adding VLAN 0 to HW filter on device eth24 [ 200.191864][T11344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.197787][T11344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.250261][T11344] team0: Port device team_slave_0 added [ 200.250639][ T61] usb 14-1: new high-speed USB device number 18 using dummy_hcd [ 200.258012][T11344] team0: Port device team_slave_1 added [ 200.280551][ T6915] usb 12-1: new low-speed USB device number 17 using dummy_hcd [ 200.281717][ T2324] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 200.282213][ T2324] usb 11-1: config 0 has no interfaces? [ 200.296235][ T2324] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.296246][ T2324] usb 11-1: Product: syz [ 200.296253][ T2324] usb 11-1: Manufacturer: syz [ 200.296261][ T2324] usb 11-1: SerialNumber: syz [ 200.297946][ T2324] usb 11-1: config 0 descriptor?? [ 200.317065][T11344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.317077][T11344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.317099][T11344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.322810][T11344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.322820][T11344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.323001][T11344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.397911][T11344] hsr_slave_0: entered promiscuous mode [ 200.398638][T11344] hsr_slave_1: entered promiscuous mode [ 200.399025][T11344] debugfs: 'hsr0' already exists in 'hsr' [ 200.399035][T11344] Cannot create hsr debugfs directory [ 200.411077][ T61] usb 14-1: device descriptor read/64, error -71 [ 200.431227][ T6915] usb 12-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 200.432207][ T6915] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 200.432235][ T6915] usb 12-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 200.432276][ T6915] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 200.432299][ T6915] usb 12-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 200.432320][ T6915] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 200.432342][ T6915] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 200.432363][ T6915] usb 12-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 200.432385][ T6915] usb 12-1: config 168 interface 0 has no altsetting 0 [ 200.462551][ T6915] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 200.462581][ T6915] usb 12-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 200.462612][ T6915] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 200.462635][ T6915] usb 12-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 200.462656][ T6915] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 200.462677][ T6915] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 200.462699][ T6915] usb 12-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 200.462721][ T6915] usb 12-1: config 168 interface 0 has no altsetting 0 [ 200.507983][ T6915] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 200.508010][ T6915] usb 12-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 200.508037][ T6915] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 200.508056][ T6915] usb 12-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 200.508074][ T6915] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 200.508092][ T6915] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 200.508110][ T6915] usb 12-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 200.508131][ T6915] usb 12-1: config 168 interface 0 has no altsetting 0 [ 200.528844][ T61] usb usb14-port1: attempt power cycle [ 200.532842][ T5092] Bluetooth: hci1: command tx timeout [ 200.567286][ T6915] usb 12-1: string descriptor 0 read error: -22 [ 200.567405][ T6915] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.587207][ T6915] adutux 12-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 200.619349][ T5445] 8021q: adding VLAN 0 to HW filter on device eth25 [ 200.790837][ T6915] usb 12-1: USB disconnect, device number 17 [ 200.910642][ T61] usb 14-1: new high-speed USB device number 19 using dummy_hcd [ 200.931222][ T61] usb 14-1: device descriptor read/8, error -71 [ 201.048480][T11344] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 201.059386][T11344] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 201.059885][T11344] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 201.065054][T11344] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 201.065617][T11344] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 201.072544][T11344] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 201.072954][T11344] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 201.083269][T11344] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 201.094439][ T7367] net_ratelimit: 95 callbacks suppressed [ 201.132399][T11344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.157075][T11344] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.167757][ T7367] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.167831][ T7367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.175158][ T7367] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.175201][ T7367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.190543][ T61] usb 14-1: new high-speed USB device number 20 using dummy_hcd [ 201.195695][T11344] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 201.211324][ T61] usb 14-1: device descriptor read/8, error -71 [ 201.321222][ T61] usb usb14-port1: unable to enumerate USB device [ 201.386342][T11460] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1785'. [ 201.451205][T11344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.474549][T11344] veth0_vlan: entered promiscuous mode [ 201.479557][T11344] veth1_vlan: entered promiscuous mode [ 201.510495][T11344] veth0_macvtap: entered promiscuous mode [ 201.512554][T11344] veth1_macvtap: entered promiscuous mode [ 201.535630][T11344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.542218][T11344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.547468][ T5805] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.547505][ T5805] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.580652][ T6590] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.580688][ T6590] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.670652][ T7367] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.670663][ T7367] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.731056][ T7367] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.731070][ T7367] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.021677][T11503] overlayfs: failed to resolve './file1': -2 [ 202.444659][T11528] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1795'. [ 202.445056][ T5092] Bluetooth: hci4: unexpected event for opcode 0x1002 [ 202.610752][ T5092] Bluetooth: hci1: command tx timeout [ 202.894599][ T1482] usb 11-1: USB disconnect, device number 23 [ 202.914874][ T5092] Bluetooth: hci3: unexpected cc 0x206e length: 9 > 3 [ 202.914928][ T5092] Bluetooth: hci3: unexpected event for opcode 0x206e [ 203.106684][T11553] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 203.131549][T11555] tipc: Can't bind to reserved service type 0 [ 203.951720][T11550] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 203.953628][T11550] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 203.968707][T11550] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 203.968783][T11550] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 203.977309][T11550] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 204.022559][T11581] overlayfs: failed to resolve './file1': -2 [ 204.054355][ T42] kauditd_printk_skb: 86 callbacks suppressed [ 204.054365][ T42] audit: type=1800 audit(1792417893.016:2327): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=259887 res=0 errno=0 [ 204.065643][ T42] audit: type=1800 audit(1792417893.026:2328): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34940 res=0 errno=0 [ 204.068572][ T42] audit: type=1800 audit(1792417893.026:2329): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34963 res=0 errno=0 [ 204.107852][T11590] xt_hashlimit: invalid rate [ 204.300527][ T61] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 204.450863][ T61] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 204.451958][ T61] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 204.451975][ T61] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 204.452000][ T61] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 204.452013][ T61] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 204.452027][ T61] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 204.452041][ T61] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 204.452055][ T61] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 204.452070][ T61] usb 7-1: config 168 interface 0 has no altsetting 0 [ 204.452925][ T61] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 204.452941][ T61] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 204.452959][ T61] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 204.452973][ T61] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 204.452986][ T61] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 204.453005][ T61] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 204.453018][ T61] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 204.453031][ T61] usb 7-1: config 168 interface 0 has no altsetting 0 [ 204.453841][ T61] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 204.453867][ T61] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 204.453890][ T61] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 204.453905][ T61] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 204.453924][ T61] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 204.453948][ T61] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 204.453972][ T61] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 204.453994][ T61] usb 7-1: config 168 interface 0 has no altsetting 0 [ 204.456927][ T61] usb 7-1: string descriptor 0 read error: -22 [ 204.457057][ T61] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.461971][ T42] audit: type=1800 audit(1792417893.426:2330): pid=10641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=259914 res=0 errno=0 [ 204.467179][ T42] audit: type=1800 audit(1792417893.426:2331): pid=10641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=259943 res=0 errno=0 [ 204.467934][ T42] audit: type=1800 audit(1792417893.426:2332): pid=10641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=259921 res=0 errno=0 [ 204.468855][ T42] audit: type=1800 audit(1792417893.426:2333): pid=10641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=259922 res=0 errno=0 [ 204.469841][ T42] audit: type=1800 audit(1792417893.426:2334): pid=10641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=259923 res=0 errno=0 [ 204.473662][ T61] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 204.476641][ T42] audit: type=1800 audit(1792417893.436:2335): pid=10641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=259963 res=0 errno=0 [ 204.478758][ T42] audit: type=1800 audit(1792417893.436:2336): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=259980 res=0 errno=0 [ 204.669360][T11599] trusted_key: encrypted_key: insufficient parameters specified [ 204.670094][ T61] usb 7-1: USB disconnect, device number 2 [ 204.685784][T11601] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd12 [ 205.170479][ T5738] Bluetooth: hci3: command 0x0406 tx timeout [ 205.240953][T11610] pimreg0: tun_chr_ioctl cmd 1074025676 [ 205.240975][T11610] pimreg0: owner set to 0 [ 205.368642][T11616] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1823'. [ 205.435052][T11624] FAULT_INJECTION: forcing a failure. [ 205.435052][T11624] name failslab, interval 1, probability 0, space 0, times 0 [ 205.435082][T11624] CPU: 0 UID: 0 PID: 11624 Comm: syz.7.1825 Tainted: G L syzkaller #0 PREEMPT(full) [ 205.435106][T11624] Tainted: [L]=SOFTLOCKUP [ 205.435114][T11624] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 205.435125][T11624] Call Trace: [ 205.435133][T11624] [ 205.435141][T11624] dump_stack_lvl+0x100/0x190 [ 205.435171][T11624] should_fail_ex.cold+0x5/0xa [ 205.435199][T11624] should_failslab+0xc2/0x120 [ 205.435225][T11624] __kmalloc_noprof+0xfc/0x840 [ 205.435245][T11624] ? ___neigh_create+0x1532/0x2940 [ 205.435263][T11624] ___neigh_create+0x1532/0x2940 [ 205.435284][T11624] ? ip_finish_output2+0x356/0x2400 [ 205.435300][T11624] ? __pfx____neigh_create+0x10/0x10 [ 205.435318][T11624] ip_finish_output2+0x1d3c/0x2400 [ 205.435337][T11624] ? __pfx_ip_finish_output2+0x10/0x10 [ 205.435352][T11624] ? __pfx_ip_dst_mtu_maybe_forward+0x10/0x10 [ 205.435368][T11624] ? find_held_lock+0x2b/0x80 [ 205.435387][T11624] __ip_finish_output.part.0+0x444/0x6f0 [ 205.435404][T11624] ip_mc_output+0x466/0xd70 [ 205.435420][T11624] ? __pfx_ip_mc_output+0x10/0x10 [ 205.435436][T11624] ? __pfx_ip_finish_output+0x10/0x10 [ 205.435450][T11624] ? rcu_is_watching+0x13/0xc0 [ 205.435466][T11624] ? __ip_make_skb+0x10a9/0x1f90 [ 205.435480][T11624] ? kfree+0x1e5/0x6d0 [ 205.435490][T11624] ? csum_tcpudp_nofold+0x24/0x50 [ 205.435505][T11624] ? __pfx_ip_mc_output+0x10/0x10 [ 205.435521][T11624] ip_send_skb+0x24c/0x2a0 [ 205.435537][T11624] udp_send_skb+0xa38/0xfc0 [ 205.435554][T11624] udp_sendmsg+0x12b1/0x2710 [ 205.435570][T11624] ? kasan_save_stack+0x3f/0x50 [ 205.435585][T11624] ? kasan_save_stack+0x30/0x50 [ 205.435598][T11624] ? kasan_save_track+0x14/0x30 [ 205.435613][T11624] ? __pfx_udp_sendmsg+0x10/0x10 [ 205.435626][T11624] ? process_measurement+0x10d0/0x2350 [ 205.435642][T11624] ? ima_file_check+0xc3/0x110 [ 205.435661][T11624] ? security_file_post_open+0xc4/0x210 [ 205.435686][T11624] ? do_file_open+0x20e/0x430 [ 205.435712][T11624] ? do_sys_openat2+0x10f/0x1e0 [ 205.435729][T11624] ? __x64_sys_openat+0x12d/0x210 [ 205.435783][T11624] udpv6_sendmsg+0x1cff/0x2c20 [ 205.435811][T11624] ? avc_has_perm_noaudit+0x56/0x470 [ 205.435825][T11624] ? avc_has_perm_noaudit+0x11e/0x470 [ 205.435840][T11624] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 205.435860][T11624] ? avc_has_perm_noaudit+0x145/0x470 [ 205.435876][T11624] ? __pfx_avc_has_perm+0x10/0x10 [ 205.435894][T11624] ? sock_has_perm+0x25a/0x2f0 [ 205.435919][T11624] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 205.435936][T11624] ? inet6_sendmsg+0x105/0x140 [ 205.435952][T11624] inet6_sendmsg+0x105/0x140 [ 205.435970][T11624] ____sys_sendmsg+0x704/0xbe0 [ 205.435986][T11624] ? __pfx_____sys_sendmsg+0x10/0x10 [ 205.436002][T11624] ? _kstrtoull+0x144/0x200 [ 205.436026][T11624] ? __pfx__kstrtoull+0x10/0x10 [ 205.436041][T11624] ___sys_sendmsg+0x190/0x1e0 [ 205.436058][T11624] ? __pfx____sys_sendmsg+0x10/0x10 [ 205.436079][T11624] ? __fget_files+0x34/0x3d0 [ 205.436106][T11624] __sys_sendmmsg+0x20c/0x440 [ 205.436120][T11624] ? __pfx___sys_sendmmsg+0x10/0x10 [ 205.436131][T11624] ? ksys_write+0x190/0x250 [ 205.436156][T11624] ? fput+0x7c/0x100 [ 205.436172][T11624] ? ksys_write+0x1ac/0x250 [ 205.436185][T11624] ? __pfx_ksys_write+0x10/0x10 [ 205.436201][T11624] __x64_sys_sendmmsg+0x9c/0x100 [ 205.436213][T11624] ? lockdep_hardirqs_on+0x7d/0x110 [ 205.436229][T11624] do_syscall_64+0x123/0x790 [ 205.436247][T11624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.436259][T11624] RIP: 0033:0x7f3f90b9e559 [ 205.436269][T11624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.436280][T11624] RSP: 002b:00007f3f919f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 205.436292][T11624] RAX: ffffffffffffffda RBX: 00007f3f90e25fa0 RCX: 00007f3f90b9e559 [ 205.436299][T11624] RDX: 0000000000000001 RSI: 000020000000d740 RDI: 0000000000000003 [ 205.436306][T11624] RBP: 00007f3f919f8090 R08: 0000000000000000 R09: 0000000000000000 [ 205.436312][T11624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.436319][T11624] R13: 00007f3f90e26038 R14: 00007f3f90e25fa0 R15: 00007ffeda63ab38 [ 205.436334][T11624] [ 205.506731][T11629] iso9660: Unknown parameter '&^)(-!+$-' [ 205.590895][ T12] netdevsim netdevsim8 eth25: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.590950][ T12] netdevsim netdevsim1 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.590992][ T12] netdevsim netdevsim8 eth24: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.591017][ T12] netdevsim netdevsim1 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.591042][ T12] netdevsim netdevsim8 eth23: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.591070][ T12] netdevsim netdevsim8 eth22: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.591097][ T12] netdevsim netdevsim4 eth21: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.591118][ T12] netdevsim netdevsim4 eth20: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.591145][ T12] netdevsim netdevsim4 eth19: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.591171][ T12] netdevsim netdevsim4 eth18: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.591197][ T12] netdevsim netdevsim0 eth17: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.591220][ T12] netdevsim netdevsim0 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.591247][ T12] netdevsim netdevsim0 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.591273][ T12] netdevsim netdevsim0 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.591299][ T12] netdevsim netdevsim5 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.591323][ T12] netdevsim netdevsim5 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.591357][ T12] netdevsim netdevsim5 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.591381][ T12] netdevsim netdevsim5 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.591399][ T12] netdevsim netdevsim1 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.591416][ T12] netdevsim netdevsim1 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.735880][T11646] FAULT_INJECTION: forcing a failure. [ 205.735880][T11646] name failslab, interval 1, probability 0, space 0, times 0 [ 205.735901][T11646] CPU: 1 UID: 0 PID: 11646 Comm: syz.7.1831 Tainted: G L syzkaller #0 PREEMPT(full) [ 205.735916][T11646] Tainted: [L]=SOFTLOCKUP [ 205.735921][T11646] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 205.735927][T11646] Call Trace: [ 205.735932][T11646] [ 205.735937][T11646] dump_stack_lvl+0x100/0x190 [ 205.735959][T11646] should_fail_ex.cold+0x5/0xa [ 205.735975][T11646] should_failslab+0xc2/0x120 [ 205.735993][T11646] __kmalloc_cache_noprof+0x91/0x6d0 [ 205.736005][T11646] ? selinux_netlbl_sk_security_free+0x12c/0x3f0 [ 205.736023][T11646] ? selinux_netlbl_sock_genattr+0xe7/0x4e0 [ 205.736041][T11646] selinux_netlbl_sock_genattr+0xe7/0x4e0 [ 205.736059][T11646] selinux_netlbl_socket_post_create+0xb0/0x1c0 [ 205.736077][T11646] security_mptcp_add_subflow+0x91/0x210 [ 205.736094][T11646] mptcp_subflow_create_socket+0x1a9/0xa30 [ 205.736110][T11646] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 205.736123][T11646] ? avc_has_perm_noaudit+0x145/0x470 [ 205.736135][T11646] ? look_up_lock_class+0x55/0x120 [ 205.736155][T11646] __mptcp_nmpc_sk+0x17f/0x880 [ 205.736169][T11646] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 205.736182][T11646] ? __lock_acquire+0x5c0/0x1f40 [ 205.736199][T11646] mptcp_connect+0x7e/0xa20 [ 205.736217][T11646] __inet_stream_connect+0x208/0xf90 [ 205.736236][T11646] ? lock_acquire+0x1d1/0x380 [ 205.736250][T11646] ? __pfx___inet_stream_connect+0x10/0x10 [ 205.736267][T11646] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 205.736285][T11646] ? __local_bh_enable_ip+0xa5/0x120 [ 205.736300][T11646] inet_stream_connect+0x57/0xa0 [ 205.736317][T11646] __sys_connect_file+0x146/0x1a0 [ 205.736337][T11646] __sys_connect+0x141/0x170 [ 205.736355][T11646] ? __pfx___sys_connect+0x10/0x10 [ 205.736371][T11646] ? __fget_files+0x21f/0x3d0 [ 205.736398][T11646] ? __pfx_ksys_write+0x10/0x10 [ 205.736416][T11646] __x64_sys_connect+0x72/0xb0 [ 205.736432][T11646] ? lockdep_hardirqs_on+0x7d/0x110 [ 205.736447][T11646] do_syscall_64+0x123/0x790 [ 205.736465][T11646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.736477][T11646] RIP: 0033:0x7f3f90b9e559 [ 205.736487][T11646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.736498][T11646] RSP: 002b:00007f3f919f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 205.736510][T11646] RAX: ffffffffffffffda RBX: 00007f3f90e25fa0 RCX: 00007f3f90b9e559 [ 205.736517][T11646] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000004 [ 205.736524][T11646] RBP: 00007f3f919f8090 R08: 0000000000000000 R09: 0000000000000000 [ 205.736530][T11646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.736537][T11646] R13: 00007f3f90e26038 R14: 00007f3f90e25fa0 R15: 00007ffeda63ab38 [ 205.736552][T11646] [ 205.776254][ T5445] 8021q: adding VLAN 0 to HW filter on device bond1 [ 205.777534][T11648] overlayfs: failed to resolve './file0': -2 [ 205.920455][ T9] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 205.980550][ T5738] Bluetooth: hci4: command 0x040f tx timeout [ 205.995200][T11664] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1836'. [ 206.060578][ T5738] Bluetooth: hci1: command 0x0419 tx timeout [ 206.075203][ T9] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 206.076054][ T9] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 206.076071][ T9] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 206.076090][ T9] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 206.076104][ T9] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 206.076118][ T9] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 206.076133][ T9] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 206.076148][ T9] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 206.076162][ T9] usb 7-1: config 168 interface 0 has no altsetting 0 [ 206.077067][ T9] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 206.077082][ T9] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 206.077100][ T9] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 206.077114][ T9] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 206.077127][ T9] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 206.077142][ T9] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 206.077156][ T9] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 206.077170][ T9] usb 7-1: config 168 interface 0 has no altsetting 0 [ 206.078032][ T9] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 206.078047][ T9] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 206.078067][ T9] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 206.078081][ T9] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 206.078095][ T9] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 206.078110][ T9] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 206.078124][ T9] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 206.078139][ T9] usb 7-1: config 168 interface 0 has no altsetting 0 [ 206.081022][ T9] usb 7-1: string descriptor 0 read error: -22 [ 206.081149][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.090196][ T9] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 206.117994][ T5825] usb 14-1: new high-speed USB device number 21 using dummy_hcd [ 206.126751][T11674] input: syz0 as /devices/virtual/input/input19 [ 206.131162][ T7367] net_ratelimit: 293 callbacks suppressed [ 206.195867][T11679] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1845'. [ 206.290955][ T5825] usb 14-1: Using ep0 maxpacket: 16 [ 206.293143][ T5825] usb 14-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 206.293866][ T9] usb 7-1: USB disconnect, device number 3 [ 206.296640][ T5825] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.296650][ T5825] usb 14-1: Product: syz [ 206.296657][ T5825] usb 14-1: Manufacturer: syz [ 206.296665][ T5825] usb 14-1: SerialNumber: syz [ 206.430055][T11691] xt_hashlimit: invalid rate [ 206.430951][ T5738] Bluetooth: hci3: unexpected event for opcode 0x2041 [ 206.531902][ T5825] usb 14-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 206.535895][ T5825] usb 14-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 206.536195][ T5825] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 206.536233][ T5825] usb 14-1: media controller created [ 206.556360][ T5825] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 206.571149][ T5825] zl10353_read_register: readreg error (reg=127, ret==-71) [ 206.614434][ T5825] dvb_usb_gl861 14-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 206.616911][ T5825] usb 14-1: USB disconnect, device number 21 [ 206.973193][ T6465] usb 12-1: new full-speed USB device number 18 using dummy_hcd [ 207.121695][ T6465] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 207.122665][ T6465] usb 12-1: config 1 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 207.122689][ T6465] usb 12-1: config 1 interface 0 altsetting 2 endpoint 0x3 has invalid maxpacket 513, setting to 64 [ 207.122708][ T6465] usb 12-1: config 1 interface 0 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 207.122729][ T6465] usb 12-1: config 1 interface 0 has no altsetting 0 [ 207.123860][ T6465] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 207.123876][ T6465] usb 12-1: SerialNumber: syz [ 207.130058][T11696] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 207.130198][T11696] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 207.147554][T11724] FAULT_INJECTION: forcing a failure. [ 207.147554][T11724] name failslab, interval 1, probability 0, space 0, times 0 [ 207.147591][T11724] CPU: 0 UID: 0 PID: 11724 Comm: syz.6.1852 Tainted: G L syzkaller #0 PREEMPT(full) [ 207.147618][T11724] Tainted: [L]=SOFTLOCKUP [ 207.147625][T11724] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 207.147638][T11724] Call Trace: [ 207.147645][T11724] [ 207.147655][T11724] dump_stack_lvl+0x100/0x190 [ 207.147688][T11724] should_fail_ex.cold+0x5/0xa [ 207.147725][T11724] should_failslab+0xc2/0x120 [ 207.147777][T11724] kmem_cache_alloc_noprof+0x92/0x6a0 [ 207.147803][T11724] ? security_file_alloc+0x34/0x2c0 [ 207.147848][T11724] security_file_alloc+0x34/0x2c0 [ 207.147877][T11724] init_file+0x95/0x480 [ 207.147916][T11724] alloc_empty_file_noaccount+0x45/0xd0 [ 207.147937][T11724] alloc_file_pseudo_noaccount+0x183/0x290 [ 207.147960][T11724] ? __pfx_alloc_file_pseudo_noaccount+0x10/0x10 [ 207.148008][T11724] ? iput+0x3a/0x40 [ 207.148032][T11724] bdev_file_open_by_dev+0x13a/0x210 [ 207.148071][T11724] swsusp_check+0x72/0x470 [ 207.148093][T11724] software_resume+0x6f/0x330 [ 207.148119][T11724] resume_store+0x248/0x460 [ 207.148146][T11724] ? __pfx_resume_store+0x10/0x10 [ 207.148182][T11724] ? find_held_lock+0x2b/0x80 [ 207.148209][T11724] ? sysfs_file_kobj+0xe4/0x290 [ 207.148245][T11724] ? sysfs_file_kobj+0xe4/0x290 [ 207.148273][T11724] ? __pfx_resume_store+0x10/0x10 [ 207.148298][T11724] kobj_attr_store+0x58/0x80 [ 207.148319][T11724] ? __pfx_kobj_attr_store+0x10/0x10 [ 207.148339][T11724] sysfs_kf_write+0xf2/0x150 [ 207.148369][T11724] kernfs_fop_write_iter+0x3e0/0x5f0 [ 207.148392][T11724] ? __pfx_sysfs_kf_write+0x10/0x10 [ 207.148423][T11724] vfs_write+0x6af/0x1050 [ 207.148447][T11724] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 207.148475][T11724] ? __pfx_vfs_write+0x10/0x10 [ 207.148496][T11724] ? find_held_lock+0x2b/0x80 [ 207.148543][T11724] ksys_write+0x12a/0x250 [ 207.148565][T11724] ? __pfx_ksys_write+0x10/0x10 [ 207.148597][T11724] do_syscall_64+0x123/0x790 [ 207.148626][T11724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.148645][T11724] RIP: 0033:0x7f9e0d39e559 [ 207.148671][T11724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.148689][T11724] RSP: 002b:00007f9e0e28f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 207.148717][T11724] RAX: ffffffffffffffda RBX: 00007f9e0d625fa0 RCX: 00007f9e0d39e559 [ 207.148727][T11724] RDX: 0000000000000012 RSI: 0000200000000640 RDI: 0000000000000003 [ 207.148751][T11724] RBP: 00007f9e0e28f090 R08: 0000000000000000 R09: 0000000000000000 [ 207.148761][T11724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.148771][T11724] R13: 00007f9e0d626038 R14: 00007f9e0d625fa0 R15: 00007ffeb768d268 [ 207.148796][T11724] [ 207.178729][T11726] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1853'. [ 207.195237][T11728] xt_hashlimit: invalid rate [ 207.197380][ T5738] Bluetooth: hci3: unexpected event for opcode 0x2041 [ 207.333166][T11696] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 207.333317][T11696] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 207.380482][ T6915] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 207.531766][ T6915] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 207.533035][ T6915] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 207.533065][ T6915] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 207.533103][ T6915] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 207.533128][ T6915] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 207.533153][ T6915] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 207.533179][ T6915] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 207.533226][ T6915] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 207.533255][ T6915] usb 7-1: config 168 interface 0 has no altsetting 0 [ 207.534399][ T6915] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 207.534428][ T6915] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 207.534461][ T6915] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 207.534487][ T6915] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 207.534509][ T6915] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 207.534533][ T6915] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 207.534559][ T6915] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 207.534583][ T6915] usb 7-1: config 168 interface 0 has no altsetting 0 [ 207.535624][ T6915] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 207.535641][ T6915] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 207.535659][ T6915] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 207.535674][ T6915] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 207.535688][ T6915] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 207.535702][ T6915] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 207.535716][ T6915] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 207.535730][ T6915] usb 7-1: config 168 interface 0 has no altsetting 0 [ 207.539033][ T6465] cdc_ether 12-1:1.0: probe with driver cdc_ether failed with error -71 [ 207.544550][ T6915] usb 7-1: string descriptor 0 read error: -22 [ 207.544665][ T6915] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.553613][ T6465] usb 12-1: USB disconnect, device number 18 [ 207.555881][ T6915] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 207.705364][T11732] trusted_key: encrypted_key: insufficient parameters specified [ 207.752069][ T61] usb 7-1: USB disconnect, device number 4 [ 208.010417][ T6915] usb 11-1: new high-speed USB device number 24 using dummy_hcd [ 208.060488][ T5738] Bluetooth: hci4: command 0x040f tx timeout [ 208.140518][ T5738] Bluetooth: hci1: command 0x0419 tx timeout [ 208.160418][ T6915] usb 11-1: Using ep0 maxpacket: 16 [ 208.161863][ T6915] usb 11-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 208.164662][ T6915] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.164683][ T6915] usb 11-1: Product: syz [ 208.164696][ T6915] usb 11-1: Manufacturer: syz [ 208.164707][ T6915] usb 11-1: SerialNumber: syz [ 208.380738][ T6915] usb 11-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 208.384627][ T6915] usb 11-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 208.385010][ T6915] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 208.385038][ T6915] usb 11-1: media controller created [ 208.403168][ T6915] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 208.427914][ T6915] zl10353_read_register: readreg error (reg=127, ret==-71) [ 208.473302][ T6915] dvb_usb_gl861 11-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 208.477297][ T6915] usb 11-1: USB disconnect, device number 24 [ 208.879007][T11758] loop5: detected capacity change from 0 to 4095 [ 208.889946][T10641] Buffer I/O error on dev loop5, logical block 511, async page read [ 208.949483][T11761] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1862'. [ 209.070947][ T42] kauditd_printk_skb: 98 callbacks suppressed [ 209.070962][ T42] audit: type=1800 audit(1792417898.036:2435): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16401 res=0 errno=0 [ 209.105477][T11770] xt_hashlimit: invalid rate [ 209.284757][T11781] binder_alloc: 11780: pid 11780 spamming oneway? 1 buffers allocated for a total size of 4096 [ 209.305881][ T5738] Bluetooth: hci3: unexpected event for opcode 0x0404 [ 209.466803][ T42] audit: type=1800 audit(1792417898.426:2436): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=262384 res=0 errno=0 [ 209.466853][T11790] pimreg0: tun_chr_ioctl cmd 1074025676 [ 209.466870][T11790] pimreg0: owner set to 0 [ 209.468137][ T42] audit: type=1800 audit(1792417898.426:2437): pid=10641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=262388 res=0 errno=0 [ 209.468615][ T42] audit: type=1800 audit(1792417898.426:2438): pid=10641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=262392 res=0 errno=0 [ 209.469126][ T42] audit: type=1800 audit(1792417898.426:2439): pid=10641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=262391 res=0 errno=0 [ 209.469829][ T42] audit: type=1800 audit(1792417898.426:2440): pid=10641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=262394 res=0 errno=0 [ 209.512681][ T42] audit: type=1800 audit(1792417898.476:2441): pid=5445 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dhcpc_t op=collect_data cause=failed comm="dhcpcd" name="tun_flags" dev="sysfs" ino=262416 res=0 errno=0 [ 209.516569][ T42] audit: type=1800 audit(1792417898.476:2442): pid=10641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=262461 res=0 errno=0 [ 209.517360][ T42] audit: type=1800 audit(1792417898.476:2443): pid=10641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=262465 res=0 errno=0 [ 209.517791][ T42] audit: type=1800 audit(1792417898.476:2444): pid=10641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=262469 res=0 errno=0 [ 209.581595][ T9553] usb 14-1: new high-speed USB device number 22 using dummy_hcd [ 209.715402][ T5445] 8021q: adding VLAN 0 to HW filter on device bond2 [ 209.750639][ T9553] usb 14-1: Using ep0 maxpacket: 8 [ 209.751079][ T9553] usb 14-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 209.753525][ T9553] usb 14-1: unable to read config index 0 descriptor/start: -61 [ 209.753542][ T9553] usb 14-1: can't read configurations, error -61 [ 209.880461][ T9553] usb 14-1: new high-speed USB device number 23 using dummy_hcd [ 210.040523][ T9553] usb 14-1: Using ep0 maxpacket: 8 [ 210.043291][ T9553] usb 14-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 210.044586][ T9553] usb 14-1: unable to read config index 0 descriptor/start: -61 [ 210.044602][ T9553] usb 14-1: can't read configurations, error -61 [ 210.044942][ T9553] usb usb14-port1: attempt power cycle [ 210.066086][T11825] kernel read not supported for file /policy (pid: 11825 comm: syz.6.1882) [ 210.130892][ T5738] Bluetooth: hci4: command 0x040f tx timeout [ 210.210549][ T5738] Bluetooth: hci1: command 0x0419 tx timeout [ 210.267916][T11831] xt_hashlimit: invalid rate [ 210.268424][ T5738] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 210.358468][T11833] pimreg0: tun_chr_ioctl cmd 1074025676 [ 210.358481][T11833] pimreg0: owner set to 0 [ 210.382843][ T9553] usb 14-1: new high-speed USB device number 24 using dummy_hcd [ 210.403411][ T9553] usb 14-1: Using ep0 maxpacket: 8 [ 210.403873][ T9553] usb 14-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 210.406297][ T9553] usb 14-1: unable to read config index 0 descriptor/start: -61 [ 210.406325][ T9553] usb 14-1: can't read configurations, error -61 [ 210.541771][ T9553] usb 14-1: new high-speed USB device number 25 using dummy_hcd [ 210.562395][ T9553] usb 14-1: Using ep0 maxpacket: 8 [ 210.565940][ T9553] usb 14-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 210.567106][ T9553] usb 14-1: unable to read config index 0 descriptor/start: -61 [ 210.567123][ T9553] usb 14-1: can't read configurations, error -61 [ 210.567284][ T9553] usb usb14-port1: unable to enumerate USB device [ 210.634048][ T5445] 8021q: adding VLAN 0 to HW filter on device bond3 [ 210.641330][T11842] FAULT_INJECTION: forcing a failure. [ 210.641330][T11842] name failslab, interval 1, probability 0, space 0, times 0 [ 210.641358][T11842] CPU: 2 UID: 0 PID: 11842 Comm: syz.6.1886 Tainted: G L syzkaller #0 PREEMPT(full) [ 210.641384][T11842] Tainted: [L]=SOFTLOCKUP [ 210.641392][T11842] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 210.641403][T11842] Call Trace: [ 210.641410][T11842] [ 210.641418][T11842] dump_stack_lvl+0x100/0x190 [ 210.641450][T11842] should_fail_ex.cold+0x5/0xa [ 210.641477][T11842] should_failslab+0xc2/0x120 [ 210.641505][T11842] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 210.641533][T11842] ? copy_process+0x6aa/0x8430 [ 210.641560][T11842] copy_process+0x6aa/0x8430 [ 210.641599][T11842] ? __pfx_copy_process+0x10/0x10 [ 210.641621][T11842] ? kasan_save_track+0x14/0x30 [ 210.641646][T11842] ? __kasan_kmalloc+0xaa/0xb0 [ 210.641672][T11842] ? lockdep_init_map_type+0x5c/0x250 [ 210.641697][T11842] ? lockdep_init_map_type+0x5c/0x250 [ 210.641722][T11842] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 210.641753][T11842] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 210.641780][T11842] vhost_task_create+0x1db/0x370 [ 210.641801][T11842] ? __pfx_vhost_task_create+0x10/0x10 [ 210.641828][T11842] ? __pfx_vhost_task_fn+0x10/0x10 [ 210.641854][T11842] ? register_lock_class+0x3f/0x7b0 [ 210.641877][T11842] ? rcu_is_watching+0x13/0xc0 [ 210.641904][T11842] ? trace_contention_end+0x126/0x160 [ 210.641932][T11842] kvm_mmu_post_init_vm+0x1b3/0x360 [ 210.641957][T11842] kvm_arch_vcpu_ioctl_run+0xb5/0x1dd0 [ 210.641982][T11842] ? __pfx___mutex_lock+0x10/0x10 [ 210.642008][T11842] ? kasan_quarantine_put+0x104/0x240 [ 210.642036][T11842] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 210.642060][T11842] ? lock_acquire+0x1d1/0x380 [ 210.642082][T11842] ? do_raw_write_lock+0x11e/0x260 [ 210.642108][T11842] ? find_held_lock+0x2b/0x80 [ 210.642135][T11842] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 210.642162][T11842] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 210.642194][T11842] kvm_vcpu_ioctl+0x730/0x1700 [ 210.642224][T11842] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 210.642251][T11842] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 210.642278][T11842] ? do_vfs_ioctl+0x226/0x13e0 [ 210.642303][T11842] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 210.642324][T11842] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 210.642370][T11842] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 210.642418][T11842] ? __fget_files+0x34/0x3d0 [ 210.642459][T11842] ? selinux_file_ioctl+0x13b/0x290 [ 210.642486][T11842] ? selinux_file_ioctl+0xb6/0x290 [ 210.642514][T11842] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 210.642542][T11842] __x64_sys_ioctl+0x18e/0x210 [ 210.642566][T11842] do_syscall_64+0x123/0x790 [ 210.642596][T11842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.642616][T11842] RIP: 0033:0x7f9e0d39e559 [ 210.642633][T11842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.642651][T11842] RSP: 002b:00007f9e0e28f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 210.642670][T11842] RAX: ffffffffffffffda RBX: 00007f9e0d625fa0 RCX: 00007f9e0d39e559 [ 210.642683][T11842] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 210.642694][T11842] RBP: 00007f9e0e28f090 R08: 0000000000000000 R09: 0000000000000000 [ 210.642706][T11842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.642717][T11842] R13: 00007f9e0d626038 R14: 00007f9e0d625fa0 R15: 00007ffeb768d268 [ 210.642744][T11842] [ 210.842020][T11855] netlink: 'syz.2.1889': attribute type 1 has an invalid length. [ 210.843231][T11860] dns_resolver: Unsupported content type (234) [ 210.875757][T11855] 8021q: adding VLAN 0 to HW filter on device bond2 [ 210.928696][T11855] bond2: (slave syz_tun): Enslaving as a backup interface with an up link [ 211.183325][T11871] comedi comedi2: board detection failed [ 211.260718][ T9] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 211.261224][ T37] net_ratelimit: 113 callbacks suppressed [ 211.422294][ T9] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 211.423497][ T9] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 211.423524][ T9] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 211.423556][ T9] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 211.423579][ T9] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 211.423599][ T9] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 211.423621][ T9] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 211.423643][ T9] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 211.423665][ T9] usb 7-1: config 168 interface 0 has no altsetting 0 [ 211.425106][ T9] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 211.425133][ T9] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 211.425164][ T9] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 211.425207][ T9] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 211.425231][ T9] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 211.425254][ T9] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 211.425278][ T9] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 211.425300][ T9] usb 7-1: config 168 interface 0 has no altsetting 0 [ 211.427438][ T9] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 211.427465][ T9] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 211.427497][ T9] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 211.427521][ T9] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 211.427543][ T9] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 211.427566][ T9] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 211.427589][ T9] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 211.427610][ T9] usb 7-1: config 168 interface 0 has no altsetting 0 [ 211.431463][ T9] usb 7-1: string descriptor 0 read error: -22 [ 211.431572][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.447530][ T9] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 211.644826][ T5825] usb 7-1: USB disconnect, device number 5 [ 211.866666][T11884] netlink: 'syz.6.1897': attribute type 2 has an invalid length. [ 211.866687][T11884] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1897'. [ 212.210658][ T5738] Bluetooth: hci4: command 0x040f tx timeout [ 212.232960][ T5835] usb 11-1: new high-speed USB device number 25 using dummy_hcd [ 212.380858][ T5835] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 212.381311][ T5835] usb 11-1: config 0 has no interfaces? [ 212.383287][ T5835] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.383297][ T5835] usb 11-1: Product: syz [ 212.383304][ T5835] usb 11-1: Manufacturer: syz [ 212.383311][ T5835] usb 11-1: SerialNumber: syz [ 212.384947][ T5835] usb 11-1: config 0 descriptor?? [ 213.031220][ T24] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 213.040035][ T24] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 213.292361][ T2324] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 213.360507][ T24] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 213.530609][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 213.532155][ T24] usb 7-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 213.533606][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 213.533635][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 213.536326][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.536351][ T24] usb 7-1: Product: syz [ 213.536367][ T24] usb 7-1: Manufacturer: syz [ 213.536383][ T24] usb 7-1: SerialNumber: syz [ 213.541279][ T24] usb 7-1: config 0 descriptor?? [ 213.749858][ C2] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 213.764406][ T24] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input20 [ 213.779052][ T24] imon:send_packet: packet tx failed (-71) [ 213.791149][ T24] imon 7-1:0.0: panel buttons/knobs setup failed [ 213.803028][ T6915] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 213.850453][ T24] rc_core: IR keymap rc-imon-pad not found [ 213.850473][ T24] Registered IR keymap rc-empty [ 213.850622][ T24] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 213.850638][ T24] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 213.852919][ T24] imon:send_packet: packet tx failed (-71) [ 213.870698][ T24] imon 7-1:0.0: remote input dev register failed [ 213.872608][ T24] imon 7-1:0.0: imon_init_intf0: rc device setup failed [ 213.913323][ T24] imon 7-1:0.0: unable to initialize intf0, err 0 [ 213.913338][ T24] imon:imon_probe: failed to initialize context! [ 213.913349][ T24] imon 7-1:0.0: unable to register, err -19 [ 213.923294][ T24] usb 7-1: USB disconnect, device number 6 [ 214.089362][T11951] FAULT_INJECTION: forcing a failure. [ 214.089362][T11951] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.089381][T11951] CPU: 1 UID: 0 PID: 11951 Comm: syz.9.1907 Tainted: G L syzkaller #0 PREEMPT(full) [ 214.089396][T11951] Tainted: [L]=SOFTLOCKUP [ 214.089401][T11951] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 214.089407][T11951] Call Trace: [ 214.089412][T11951] [ 214.089421][T11951] dump_stack_lvl+0x100/0x190 [ 214.089443][T11951] should_fail_ex.cold+0x5/0xa [ 214.089459][T11951] _copy_from_iter+0x1f4/0x1690 [ 214.089492][T11951] ? __asan_memset+0x23/0x50 [ 214.089507][T11951] ? __pfx__copy_from_iter+0x10/0x10 [ 214.089523][T11951] ? __pfx___alloc_skb+0x10/0x10 [ 214.089549][T11951] netlink_sendmsg+0x808/0xda0 [ 214.089570][T11951] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.089582][T11951] ? selinux_socket_sendmsg+0x198/0x2f0 [ 214.089600][T11951] ____sys_sendmsg+0xa4d/0xbe0 [ 214.089614][T11951] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.089626][T11951] ? __pfx_____sys_sendmsg+0x10/0x10 [ 214.089644][T11951] ? lock_acquire+0x1d1/0x380 [ 214.089657][T11951] ? get_pid_task+0x2a/0x250 [ 214.089674][T11951] ___sys_sendmsg+0x190/0x1e0 [ 214.089690][T11951] ? __pfx____sys_sendmsg+0x10/0x10 [ 214.089705][T11951] ? get_pid_task+0x106/0x250 [ 214.089726][T11951] ? find_held_lock+0x2b/0x80 [ 214.089751][T11951] __sys_sendmsg+0x160/0x210 [ 214.089763][T11951] ? __pfx___sys_sendmsg+0x10/0x10 [ 214.089782][T11951] do_syscall_64+0x123/0x790 [ 214.089800][T11951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.089812][T11951] RIP: 0033:0x7fef2359e559 [ 214.089821][T11951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.089836][T11951] RSP: 002b:00007fef244ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.089853][T11951] RAX: ffffffffffffffda RBX: 00007fef23825fa0 RCX: 00007fef2359e559 [ 214.089864][T11951] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003 [ 214.089875][T11951] RBP: 00007fef244ff090 R08: 0000000000000000 R09: 0000000000000000 [ 214.089887][T11951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.089898][T11951] R13: 00007fef23826038 R14: 00007fef23825fa0 R15: 00007fffeac06978 [ 214.089922][T11951] [ 214.128856][ T42] kauditd_printk_skb: 76 callbacks suppressed [ 214.128906][ T42] audit: type=1400 audit(1792417903.086:2521): avc: denied { getopt } for pid=11952 comm="syz.9.1908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 214.131988][T11953] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1908'. [ 214.290528][ T5738] Bluetooth: hci4: command 0x040f tx timeout [ 215.003583][ T34] usb 11-1: USB disconnect, device number 25 [ 215.012846][ T42] audit: type=1800 audit(1792417903.976:2522): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=264221 res=0 errno=0 [ 215.028090][T11958] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1909'. [ 215.031435][ T42] audit: type=1800 audit(1792417903.986:2523): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=264231 res=0 errno=0 [ 215.031461][ T42] audit: type=1800 audit(1792417903.996:2524): pid=11958 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.1909" name="compressor" dev="sysfs" ino=58415 res=0 errno=0 [ 215.072550][T11963] binder: 11962:11963 ioctl c0306201 200000000340 returned -22 [ 215.480562][ T9] usb 11-1: new low-speed USB device number 26 using dummy_hcd [ 215.571041][ T6915] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 215.641848][ T9] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 215.642815][ T9] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 215.642845][ T9] usb 11-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 215.642877][ T9] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 215.642899][ T9] usb 11-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 215.642921][ T9] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 215.642943][ T9] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 215.642965][ T9] usb 11-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 215.642988][ T9] usb 11-1: config 168 interface 0 has no altsetting 0 [ 215.643885][ T9] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 215.643912][ T9] usb 11-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 215.643944][ T9] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 215.643966][ T9] usb 11-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 215.643987][ T9] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 215.644010][ T9] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 215.644033][ T9] usb 11-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 215.644055][ T9] usb 11-1: config 168 interface 0 has no altsetting 0 [ 215.645148][ T9] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 215.645195][ T9] usb 11-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 215.645227][ T9] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 215.645249][ T9] usb 11-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 215.645271][ T9] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 215.645294][ T9] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 215.645316][ T9] usb 11-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 215.645339][ T9] usb 11-1: config 168 interface 0 has no altsetting 0 [ 215.648085][ T9] usb 11-1: string descriptor 0 read error: -22 [ 215.648207][ T9] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.654139][ T42] audit: type=1800 audit(1792417904.616:2525): pid=10641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=264258 res=0 errno=0 [ 215.658770][ T42] audit: type=1800 audit(1792417904.616:2526): pid=10641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=264287 res=0 errno=0 [ 215.668356][ T42] audit: type=1800 audit(1792417904.626:2527): pid=10641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=264265 res=0 errno=0 [ 215.668402][ T42] audit: type=1800 audit(1792417904.626:2528): pid=10641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=264266 res=0 errno=0 [ 215.669689][ T9] adutux 11-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 215.673462][ T42] audit: type=1800 audit(1792417904.636:2529): pid=10641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=264267 res=0 errno=0 [ 215.680961][ T42] audit: type=1800 audit(1792417904.646:2530): pid=10641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=264307 res=0 errno=0 [ 215.860504][ T9] usb 11-1: USB disconnect, device number 26 [ 215.980453][ T1348] usb 14-1: new low-speed USB device number 26 using dummy_hcd [ 216.017377][T11926] ceph: No mds server is up or the cluster is laggy [ 216.131020][ T1348] usb 14-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 216.132306][ T1348] usb 14-1: config 168 descriptor has 1 excess byte, ignoring [ 216.132324][ T1348] usb 14-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 216.132348][ T1348] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 216.132362][ T1348] usb 14-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 216.132375][ T1348] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 216.132388][ T1348] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 216.132401][ T1348] usb 14-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 216.132414][ T1348] usb 14-1: config 168 interface 0 has no altsetting 0 [ 216.133194][ T1348] usb 14-1: config 168 descriptor has 1 excess byte, ignoring [ 216.133211][ T1348] usb 14-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 216.133228][ T1348] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 216.133240][ T1348] usb 14-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 216.133253][ T1348] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 216.133265][ T1348] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 216.133278][ T1348] usb 14-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 216.133291][ T1348] usb 14-1: config 168 interface 0 has no altsetting 0 [ 216.134026][ T1348] usb 14-1: config 168 descriptor has 1 excess byte, ignoring [ 216.134043][ T1348] usb 14-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 216.134062][ T1348] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 216.134075][ T1348] usb 14-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 216.134087][ T1348] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 216.134100][ T1348] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 216.134112][ T1348] usb 14-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 216.134125][ T1348] usb 14-1: config 168 interface 0 has no altsetting 0 [ 216.136290][ T1348] usb 14-1: string descriptor 0 read error: -22 [ 216.136362][ T1348] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.145775][ T1348] adutux 14-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 216.291541][ C2] net_ratelimit: 119 callbacks suppressed [ 216.345291][ T9] usb 14-1: USB disconnect, device number 26 [ 216.430464][ T6915] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 216.529051][T11990] libceph: resolve '0' (ret=-3): failed [ 216.552038][T11990] TC_ACT_REPEAT abuse ? [ 216.580935][ T6915] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 216.581428][ T6915] usb 7-1: config 0 has no interfaces? [ 216.584706][ T6915] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.584717][ T6915] usb 7-1: Product: syz [ 216.584726][ T6915] usb 7-1: Manufacturer: syz [ 216.584735][ T6915] usb 7-1: SerialNumber: syz [ 216.590988][ T6915] usb 7-1: config 0 descriptor?? [ 216.676668][T11996] netlink: 'syz.6.1922': attribute type 1 has an invalid length. [ 216.708421][T11996] 8021q: adding VLAN 0 to HW filter on device bond7 [ 216.765490][T11996] tipc: Resetting bearer [ 216.778596][T11996] tipc: Resetting bearer [ 216.782053][T11996] bond7: (slave syz_tun): Enslaving as a backup interface with an up link [ 216.947750][T12018] FAULT_INJECTION: forcing a failure. [ 216.947750][T12018] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.947773][T12018] CPU: 0 UID: 0 PID: 12018 Comm: syz.9.1925 Tainted: G L syzkaller #0 PREEMPT(full) [ 216.947788][T12018] Tainted: [L]=SOFTLOCKUP [ 216.947793][T12018] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 216.947800][T12018] Call Trace: [ 216.947804][T12018] [ 216.947809][T12018] dump_stack_lvl+0x100/0x190 [ 216.947830][T12018] should_fail_ex.cold+0x5/0xa [ 216.947846][T12018] _copy_to_user+0x32/0xd0 [ 216.947864][T12018] simple_read_from_buffer+0xcb/0x170 [ 216.947894][T12018] proc_fail_nth_read+0x1af/0x230 [ 216.947911][T12018] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 216.947929][T12018] ? rw_verify_area+0xce/0x6d0 [ 216.947942][T12018] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 216.947958][T12018] vfs_read+0x1e4/0xb40 [ 216.947973][T12018] ? lock_acquire+0x1d1/0x380 [ 216.947986][T12018] ? __fget_files+0x34/0x3d0 [ 216.948002][T12018] ? __pfx_vfs_read+0x10/0x10 [ 216.948014][T12018] ? find_held_lock+0x2b/0x80 [ 216.948031][T12018] ? __fget_files+0x215/0x3d0 [ 216.948049][T12018] ? __fget_files+0x21f/0x3d0 [ 216.948069][T12018] ksys_read+0x12a/0x250 [ 216.948083][T12018] ? __pfx_ksys_read+0x10/0x10 [ 216.948100][T12018] do_syscall_64+0x123/0x790 [ 216.948119][T12018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.948131][T12018] RIP: 0033:0x7fef2355ed8e [ 216.948142][T12018] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 216.948153][T12018] RSP: 002b:00007fef244fefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 216.948165][T12018] RAX: ffffffffffffffda RBX: 00007fef244ff6c0 RCX: 00007fef2355ed8e [ 216.948172][T12018] RDX: 000000000000000f RSI: 00007fef244ff0a0 RDI: 0000000000000003 [ 216.948179][T12018] RBP: 00007fef244ff090 R08: 0000000000000000 R09: 0000000000000000 [ 216.948186][T12018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.948192][T12018] R13: 00007fef23826038 R14: 00007fef23825fa0 R15: 00007fffeac06978 [ 216.948208][T12018] [ 217.026416][T12027] FAULT_INJECTION: forcing a failure. [ 217.026416][T12027] name failslab, interval 1, probability 0, space 0, times 0 [ 217.026447][T12027] CPU: 1 UID: 0 PID: 12027 Comm: syz.9.1929 Tainted: G L syzkaller #0 PREEMPT(full) [ 217.026475][T12027] Tainted: [L]=SOFTLOCKUP [ 217.026482][T12027] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 217.026492][T12027] Call Trace: [ 217.026499][T12027] [ 217.026507][T12027] dump_stack_lvl+0x100/0x190 [ 217.026542][T12027] should_fail_ex.cold+0x5/0xa [ 217.026570][T12027] should_failslab+0xc2/0x120 [ 217.026600][T12027] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 217.026630][T12027] ? nvmf_parse_options+0x10a2/0x1f80 [ 217.026670][T12027] kmemdup_nul+0x49/0xd0 [ 217.026709][T12027] nvmf_parse_options+0x10a2/0x1f80 [ 217.026742][T12027] ? __pfx_nvmf_parse_options+0x10/0x10 [ 217.026799][T12027] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 217.026821][T12027] ? nvmf_dev_write+0x14c/0xb60 [ 217.026847][T12027] nvmf_dev_write+0x16c/0xb60 [ 217.026874][T12027] vfs_write+0x2aa/0x1050 [ 217.026900][T12027] ? __pfx_nvmf_dev_write+0x10/0x10 [ 217.026920][T12027] ? lock_acquire+0x1d1/0x380 [ 217.026942][T12027] ? __fget_files+0x34/0x3d0 [ 217.026970][T12027] ? __pfx_vfs_write+0x10/0x10 [ 217.026991][T12027] ? find_held_lock+0x2b/0x80 [ 217.027019][T12027] ? __fget_files+0x215/0x3d0 [ 217.027045][T12027] ? __fget_files+0x215/0x3d0 [ 217.027077][T12027] ? __fget_files+0x21f/0x3d0 [ 217.027112][T12027] ksys_write+0x12a/0x250 [ 217.027136][T12027] ? __pfx_ksys_write+0x10/0x10 [ 217.027168][T12027] do_syscall_64+0x123/0x790 [ 217.027199][T12027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.027218][T12027] RIP: 0033:0x7fef2359e559 [ 217.027235][T12027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.027254][T12027] RSP: 002b:00007fef244ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 217.027273][T12027] RAX: ffffffffffffffda RBX: 00007fef23825fa0 RCX: 00007fef2359e559 [ 217.027286][T12027] RDX: 000000000000004b RSI: 0000200000000240 RDI: 0000000000000004 [ 217.027298][T12027] RBP: 00007fef244ff090 R08: 0000000000000000 R09: 0000000000000000 [ 217.027311][T12027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.027322][T12027] R13: 00007fef23826038 R14: 00007fef23825fa0 R15: 00007fffeac06978 [ 217.027350][T12027] [ 217.069925][ T5738] Bluetooth: hci3: unexpected event for opcode 0x006e [ 217.085804][T12030] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1930'. [ 217.213132][T12039] xt_hashlimit: invalid rate [ 217.213753][ T5738] Bluetooth: hci4: unexpected event for opcode 0x2041 [ 218.735947][T12076] overlayfs: missing 'workdir' [ 219.020572][ T1347] usb 14-1: new low-speed USB device number 27 using dummy_hcd [ 219.033688][T12080] FAULT_INJECTION: forcing a failure. [ 219.033688][T12080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.033711][T12080] CPU: 0 UID: 0 PID: 12080 Comm: syz.6.1941 Tainted: G L syzkaller #0 PREEMPT(full) [ 219.033733][T12080] Tainted: [L]=SOFTLOCKUP [ 219.033740][T12080] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 219.033750][T12080] Call Trace: [ 219.033756][T12080] [ 219.033764][T12080] dump_stack_lvl+0x100/0x190 [ 219.033797][T12080] should_fail_ex.cold+0x5/0xa [ 219.033831][T12080] _copy_from_user+0x2e/0xd0 [ 219.033855][T12080] x25_ioctl+0x47e/0xe30 [ 219.033881][T12080] ? __pfx_x25_ioctl+0x10/0x10 [ 219.033893][T12080] ? avc_has_extended_perms+0x484/0x1080 [ 219.033913][T12080] ? kasan_quarantine_put+0x104/0x240 [ 219.033929][T12080] ? find_held_lock+0x2b/0x80 [ 219.033945][T12080] ? tomoyo_path_number_perm+0x28f/0x580 [ 219.033987][T12080] ? tomoyo_path_number_perm+0x188/0x580 [ 219.034020][T12080] sock_do_ioctl+0x118/0x280 [ 219.034043][T12080] ? __pfx_sock_do_ioctl+0x10/0x10 [ 219.034064][T12080] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 219.034085][T12080] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 219.034098][T12080] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 219.034123][T12080] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 219.034153][T12080] sock_ioctl+0x599/0x6b0 [ 219.034177][T12080] ? __pfx_sock_ioctl+0x10/0x10 [ 219.034205][T12080] ? selinux_file_ioctl+0x13b/0x290 [ 219.034228][T12080] ? selinux_file_ioctl+0xb6/0x290 [ 219.034253][T12080] ? __pfx_sock_ioctl+0x10/0x10 [ 219.034276][T12080] __x64_sys_ioctl+0x18e/0x210 [ 219.034299][T12080] do_syscall_64+0x123/0x790 [ 219.034327][T12080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.034345][T12080] RIP: 0033:0x7f9e0d39e559 [ 219.034360][T12080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.034376][T12080] RSP: 002b:00007f9e0e28f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 219.034395][T12080] RAX: ffffffffffffffda RBX: 00007f9e0d625fa0 RCX: 00007f9e0d39e559 [ 219.034407][T12080] RDX: 0000200000000040 RSI: 00000000000089eb RDI: 0000000000000004 [ 219.034418][T12080] RBP: 00007f9e0e28f090 R08: 0000000000000000 R09: 0000000000000000 [ 219.034428][T12080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.034438][T12080] R13: 00007f9e0d626038 R14: 00007f9e0d625fa0 R15: 00007ffeb768d268 [ 219.034462][T12080] [ 219.195072][ T42] kauditd_printk_skb: 36 callbacks suppressed [ 219.195086][ T42] audit: type=1400 audit(1792417908.156:2567): avc: denied { write } for pid=12085 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.213040][ T1347] usb 14-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 219.213984][ T1347] usb 14-1: config 168 descriptor has 1 excess byte, ignoring [ 219.214012][ T1347] usb 14-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 219.214039][ T1347] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 219.214063][ T1347] usb 14-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 219.214081][ T1347] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 219.214103][ T1347] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 219.214125][ T1347] usb 14-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 219.214145][ T1347] usb 14-1: config 168 interface 0 has no altsetting 0 [ 219.215007][ T1347] usb 14-1: config 168 descriptor has 1 excess byte, ignoring [ 219.215033][ T1347] usb 14-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 219.215063][ T1347] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 219.215085][ T1347] usb 14-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 219.215104][ T1347] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 219.215121][ T1347] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 219.215144][ T1347] usb 14-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 219.215167][ T1347] usb 14-1: config 168 interface 0 has no altsetting 0 [ 219.216041][ T1347] usb 14-1: config 168 descriptor has 1 excess byte, ignoring [ 219.216067][ T1347] usb 14-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 219.216096][ T1347] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 219.216118][ T1347] usb 14-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 219.216140][ T1347] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 219.216162][ T1347] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 219.216184][ T1347] usb 14-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 219.216203][ T1347] usb 14-1: config 168 interface 0 has no altsetting 0 [ 219.217894][ T9553] usb 7-1: USB disconnect, device number 7 [ 219.251319][ T1347] usb 14-1: string descriptor 0 read error: -22 [ 219.251434][ T1347] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.267253][ T42] audit: type=1400 audit(1792417908.226:2568): avc: denied { write } for pid=12088 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.280386][ T42] audit: type=1800 audit(1792417908.236:2569): pid=10641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=265082 res=0 errno=0 [ 219.283339][ T42] audit: type=1800 audit(1792417908.246:2570): pid=10641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=265111 res=0 errno=0 [ 219.287430][ T42] audit: type=1800 audit(1792417908.246:2571): pid=10641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=265089 res=0 errno=0 [ 219.288647][ T42] audit: type=1800 audit(1792417908.246:2572): pid=10641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=265090 res=0 errno=0 [ 219.289713][ T1347] adutux 14-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 219.293542][ T42] audit: type=1800 audit(1792417908.256:2573): pid=10641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=265091 res=0 errno=0 [ 219.301300][ T42] audit: type=1800 audit(1792417908.256:2574): pid=10641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=265131 res=0 errno=0 [ 219.304203][ T42] audit: type=1800 audit(1792417908.266:2575): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=265148 res=0 errno=0 [ 219.483784][ T5803] usb 14-1: USB disconnect, device number 27 [ 219.551450][ T6915] usb 11-1: new high-speed USB device number 27 using dummy_hcd [ 219.700647][ T6915] usb 11-1: Using ep0 maxpacket: 8 [ 219.702091][ T6915] usb 11-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 219.702532][ T6915] usb 11-1: config 0 has no interfaces? [ 219.704093][ T6915] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.704103][ T6915] usb 11-1: Product: syz [ 219.704110][ T6915] usb 11-1: Manufacturer: syz [ 219.704118][ T6915] usb 11-1: SerialNumber: syz [ 219.706074][ T6915] usb 11-1: config 0 descriptor?? [ 219.706902][ T42] audit: type=1800 audit(1792417908.666:2576): pid=10641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=265219 res=0 errno=0 [ 219.824264][T12094] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1944'. [ 219.942961][T12104] nbd: must specify an index to disconnect [ 219.959169][T12104] tipc: Started in network mode [ 219.959192][T12104] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 219.967712][T12104] tipc: Enabled bearer , priority 10 [ 220.099394][T12114] FAULT_INJECTION: forcing a failure. [ 220.099394][T12114] name failslab, interval 1, probability 0, space 0, times 0 [ 220.099424][T12114] CPU: 3 UID: 0 PID: 12114 Comm: syz.2.1949 Tainted: G L syzkaller #0 PREEMPT(full) [ 220.099446][T12114] Tainted: [L]=SOFTLOCKUP [ 220.099451][T12114] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 220.099461][T12114] Call Trace: [ 220.099467][T12114] [ 220.099576][T12114] dump_stack_lvl+0x100/0x190 [ 220.099608][T12114] should_fail_ex.cold+0x5/0xa [ 220.099633][T12114] should_failslab+0xc2/0x120 [ 220.099655][T12114] __kmalloc_noprof+0xfc/0x840 [ 220.099675][T12114] ? rcu_is_watching+0x13/0xc0 [ 220.099700][T12114] ? tomoyo_realpath_from_path+0xb6/0x690 [ 220.099723][T12114] tomoyo_realpath_from_path+0xb6/0x690 [ 220.099745][T12114] tomoyo_path_number_perm+0x23c/0x580 [ 220.099769][T12114] ? tomoyo_path_number_perm+0x22e/0x580 [ 220.099794][T12114] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 220.099827][T12114] ? __lock_acquire+0x5c0/0x1f40 [ 220.099853][T12114] ? __fget_files+0x34/0x3d0 [ 220.099878][T12114] ? find_held_lock+0x2b/0x80 [ 220.099903][T12114] ? hook_file_ioctl_common+0x140/0x440 [ 220.099928][T12114] ? __fget_files+0x21f/0x3d0 [ 220.099953][T12114] security_file_ioctl+0xd3/0x230 [ 220.099978][T12114] __x64_sys_ioctl+0xb7/0x210 [ 220.100002][T12114] do_syscall_64+0x123/0x790 [ 220.100030][T12114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.100043][T12114] RIP: 0033:0x7fbdab39e559 [ 220.100053][T12114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.100064][T12114] RSP: 002b:00007fbdac1c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 220.100075][T12114] RAX: ffffffffffffffda RBX: 00007fbdab625fa0 RCX: 00007fbdab39e559 [ 220.100082][T12114] RDX: 0000200000000100 RSI: 00000000c058565d RDI: 0000000000000003 [ 220.100089][T12114] RBP: 00007fbdac1c0090 R08: 0000000000000000 R09: 0000000000000000 [ 220.100096][T12114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.100103][T12114] R13: 00007fbdab626038 R14: 00007fbdab625fa0 R15: 00007fff662f4ec8 [ 220.100118][T12114] [ 220.100123][T12114] ERROR: Out of memory at tomoyo_realpath_from_path. [ 220.384975][T12124] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 220.385014][T12124] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 220.670823][ T6915] usb 14-1: new high-speed USB device number 28 using dummy_hcd [ 220.821291][ T6915] usb 14-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 220.821720][ T6915] usb 14-1: config 0 has no interfaces? [ 220.823321][ T6915] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.823331][ T6915] usb 14-1: Product: syz [ 220.823338][ T6915] usb 14-1: Manufacturer: syz [ 220.823346][ T6915] usb 14-1: SerialNumber: syz [ 220.826258][ T6915] usb 14-1: config 0 descriptor?? [ 220.950447][ T1347] tipc: Node number set to 4269801488 [ 221.258305][T12141] rxe_eth0 speed is unknown, defaulting to 1000 [ 221.480558][ T5738] Bluetooth: hci1: unexpected event for opcode 0x0c47 [ 221.490362][ C0] net_ratelimit: 134 callbacks suppressed [ 221.770556][ T1347] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 221.921807][ T1347] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 221.922747][ T1347] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 221.922764][ T1347] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 221.922784][ T1347] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 221.922799][ T1347] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 221.922927][ T1347] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 221.922943][ T1347] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 221.922958][ T1347] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 221.922973][ T1347] usb 7-1: config 168 interface 0 has no altsetting 0 [ 221.923826][ T1347] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 221.923848][ T1347] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 221.923867][ T1347] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 221.923882][ T1347] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 221.923895][ T1347] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 221.923910][ T1347] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 221.924034][ T1347] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 221.924050][ T1347] usb 7-1: config 168 interface 0 has no altsetting 0 [ 221.924862][ T1347] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 221.924878][ T1347] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 221.924896][ T1347] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 221.924911][ T1347] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 221.924925][ T1347] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 221.924939][ T1347] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 221.924953][ T1347] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 221.924967][ T1347] usb 7-1: config 168 interface 0 has no altsetting 0 [ 221.927403][ T1347] usb 7-1: string descriptor 0 read error: -22 [ 221.927471][ T1347] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.955549][ T1347] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 222.071703][ T9600] usb 11-1: USB disconnect, device number 27 [ 222.125371][T12148] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 222.141684][ T1347] usb 7-1: USB disconnect, device number 8 [ 222.222503][T12148] kvm: Disabled LAPIC found during irq injection [ 222.222515][T12148] kvm: apic: phys broadcast and lowest prio [ 222.646635][T12162] netlink: 'syz.6.1964': attribute type 1 has an invalid length. [ 222.697851][T12162] 8021q: adding VLAN 0 to HW filter on device bond8 [ 222.708355][T12162] tipc: Resetting bearer [ 222.718215][T12162] bond7: (slave syz_tun): Removing an active aggregator [ 222.724307][T12162] bond7: (slave syz_tun): Releasing backup interface [ 222.726368][T12162] tipc: Resetting bearer [ 222.767230][T12167] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 222.952330][T12180] binder: 12179:12180 ioctl c0306201 200000000a00 returned -14 [ 222.953901][T12180] binder: 12179:12180 ioctl c0306201 200000000b00 returned -14 [ 223.060371][ T6915] usb 11-1: new low-speed USB device number 28 using dummy_hcd [ 223.231923][ T6915] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 223.232723][ T6915] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 223.232741][ T6915] usb 11-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 223.232762][ T6915] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 223.232781][ T6915] usb 11-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 223.232799][ T6915] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 223.232816][ T6915] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 223.232837][ T6915] usb 11-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 223.232856][ T6915] usb 11-1: config 168 interface 0 has no altsetting 0 [ 223.233644][ T6915] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 223.233662][ T6915] usb 11-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 223.233680][ T6915] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 223.233693][ T6915] usb 11-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 223.233705][ T6915] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 223.233718][ T6915] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 223.233731][ T6915] usb 11-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 223.233744][ T6915] usb 11-1: config 168 interface 0 has no altsetting 0 [ 223.234735][ T6915] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 223.234759][ T6915] usb 11-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 223.234785][ T6915] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 223.234806][ T6915] usb 11-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 223.234825][ T6915] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 223.234845][ T6915] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 223.234864][ T6915] usb 11-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 223.234885][ T6915] usb 11-1: config 168 interface 0 has no altsetting 0 [ 223.237512][ T6915] usb 11-1: string descriptor 0 read error: -22 [ 223.237624][ T6915] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.330919][ T6915] adutux 11-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 223.396112][T12192] FAULT_INJECTION: forcing a failure. [ 223.396112][T12192] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.396246][T12192] CPU: 1 UID: 0 PID: 12192 Comm: syz.2.1973 Tainted: G L syzkaller #0 PREEMPT(full) [ 223.396273][T12192] Tainted: [L]=SOFTLOCKUP [ 223.396280][T12192] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 223.396290][T12192] Call Trace: [ 223.396296][T12192] [ 223.396305][T12192] dump_stack_lvl+0x100/0x190 [ 223.396337][T12192] should_fail_ex.cold+0x5/0xa [ 223.396363][T12192] strncpy_from_user+0x3b/0x2d0 [ 223.396407][T12192] do_getname+0x78/0x390 [ 223.396428][T12192] path_setxattrat+0x360/0x3b0 [ 223.396448][T12192] ? __pfx_path_setxattrat+0x10/0x10 [ 223.396470][T12192] ? ksys_write+0x190/0x250 [ 223.396492][T12192] ? ksys_write+0x190/0x250 [ 223.396530][T12192] ? fput+0x7c/0x100 [ 223.396554][T12192] ? ksys_write+0x1ac/0x250 [ 223.396575][T12192] ? __pfx_ksys_write+0x10/0x10 [ 223.396600][T12192] __x64_sys_setxattr+0xc6/0x140 [ 223.396617][T12192] ? do_syscall_64+0xae/0x790 [ 223.396643][T12192] ? lockdep_hardirqs_on+0x7d/0x110 [ 223.396666][T12192] do_syscall_64+0x123/0x790 [ 223.396694][T12192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.396712][T12192] RIP: 0033:0x7fbdab39e559 [ 223.396729][T12192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.396746][T12192] RSP: 002b:00007fbdac1c0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 223.396765][T12192] RAX: ffffffffffffffda RBX: 00007fbdab625fa0 RCX: 00007fbdab39e559 [ 223.396777][T12192] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000200000000040 [ 223.396787][T12192] RBP: 00007fbdac1c0090 R08: 0000000000000000 R09: 0000000000000000 [ 223.396797][T12192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.396808][T12192] R13: 00007fbdab626038 R14: 00007fbdab625fa0 R15: 00007fff662f4ec8 [ 223.396834][T12192] [ 223.453449][ T6915] usb 14-1: USB disconnect, device number 28 [ 223.482406][ T9553] usb 11-1: USB disconnect, device number 28 [ 223.682778][T12206] netlink: 'syz.9.1979': attribute type 2 has an invalid length. [ 223.682792][T12206] netlink: 132 bytes leftover after parsing attributes in process `syz.9.1979'. [ 224.034069][T12226] kcov: kcov_start: t = ffff88802bea8000, size = 524288, area = ffffc90023cb9000 [ 224.035096][T12225] debugfs: creating file 'remote_tlb_flush_requests' [ 224.035197][T12225] debugfs: creating file 'mmu_shadow_zapped' [ 224.035284][T12225] debugfs: creating file 'mmu_pte_write' [ 224.035313][T12221] syzkaller0 (unregistering): bond_netdev_event received NETDEV_UNREGISTER [ 224.035332][T12221] net syzkaller0: siw: event 6 [ 224.035369][T12225] debugfs: creating file 'mmu_pde_zapped' [ 224.035456][T12225] debugfs: creating file 'mmu_flooded' [ 224.035535][T12225] debugfs: creating file 'mmu_recycled' [ 224.035615][T12225] debugfs: creating file 'mmu_cache_miss' [ 224.035701][T12225] debugfs: creating file 'mmu_unsync' [ 224.035782][T12221] syzkaller0 (unregistering): bond_netdev_event received NETDEV_PRE_UNINIT [ 224.035783][T12225] debugfs: creating file 'mmu_shadow_pages' [ 224.035795][T12221] net syzkaller0: siw: event 18 [ 224.035896][T12225] debugfs: creating file 'pages_4k' [ 224.035976][T12225] debugfs: creating file 'pages_2m' [ 224.035997][T12221] kernfs rps_cpus: removing [ 224.036042][T12221] kernfs rps_flow_cnt: removing [ 224.036056][T12225] debugfs: creating file 'pages_1g' [ 224.036078][T12221] kobject: 'rx-0' (ffff888014812050): kobject_cleanup, parent ffff888023b85b50 [ 224.036091][T12221] kobject: 'rx-0' (ffff888014812050): auto cleanup kobject_del [ 224.036099][T12221] kobject: 'rx-0' (ffff888014812050): auto cleanup 'remove' event [ 224.036107][T12221] kobject: 'rx-0' (ffff888014812050): kobject_uevent_env [ 224.036132][T12221] kobject: 'rx-0' (ffff888014812050): fill_kobj_path: path = '/devices/virtual/net/syzkaller0/queues/rx-0' [ 224.036138][T12225] debugfs: creating file 'nx_lpage_splits' [ 224.036193][T12221] kernfs rx-0: removing [ 224.036215][T12221] kobject: 'rx-0' (ffff888014812050): calling ktype release [ 224.036221][T12225] debugfs: creating file 'max_mmu_rmap_size' [ 224.036227][T12221] kobject: 'rx-0': free name [ 224.036243][T12221] kernfs tx_timeout: removing [ 224.036271][T12221] kernfs traffic_class: removing [ 224.036296][T12221] kernfs xps_cpus: removing [ 224.036304][T12225] debugfs: creating file 'max_mmu_page_hash_collisions' [ 224.036386][T12225] debugfs: creating file 'halt_successful_poll' [ 224.036478][T12225] debugfs: creating file 'halt_attempted_poll' [ 224.036560][T12225] debugfs: creating file 'halt_poll_invalid' [ 224.036642][T12221] kernfs xps_rxqs: removing [ 224.036642][T12225] debugfs: creating file 'halt_wakeup' [ 224.036734][T12225] debugfs: creating file 'halt_poll_success_ns' [ 224.036813][T12225] debugfs: creating file 'halt_poll_fail_ns' [ 224.036903][T12225] debugfs: creating file 'halt_wait_ns' [ 224.036965][T12226] configfs: configfs_read_iter: count = 4096, pos = 0, buf = [ 224.036965][T12226] [ 224.036980][T12226] configfs: configfs_read_iter: count = 4096, pos = 1, buf = [ 224.036980][T12226] [ 224.036982][T12225] debugfs: creating file 'halt_poll_success_hist' [ 224.037057][T12225] debugfs: creating file 'halt_poll_fail_hist' [ 224.037155][T12225] debugfs: creating file 'halt_wait_hist' [ 224.037204][T12225] debugfs: creating file 'blocking' [ 224.037212][T12221] kernfs tx_maxrate: removing [ 224.037237][T12221] kobject: 'tx-0' (ffff88805727cc20): kobject_cleanup, parent ffff888023b85b50 [ 224.037248][T12221] kobject: 'tx-0' (ffff88805727cc20): auto cleanup kobject_del [ 224.037255][T12221] kobject: 'tx-0' (ffff88805727cc20): auto cleanup 'remove' event [ 224.037268][T12221] kobject: 'tx-0' (ffff88805727cc20): kobject_uevent_env [ 224.037289][T12221] kobject: 'tx-0' (ffff88805727cc20): fill_kobj_path: path = '/devices/virtual/net/syzkaller0/queues/tx-0' [ 224.037290][T12225] debugfs: creating file 'pf_taken' [ 224.037348][T12221] kernfs tx-0: removing [ 224.037369][T12221] kobject: 'tx-0' (ffff88805727cc20): calling ktype release [ 224.037374][T12225] debugfs: creating file 'pf_fixed' [ 224.037382][T12221] kobject: 'tx-0': free name [ 224.037398][T12221] kernfs queues: removing [ 224.037435][T12221] kobject: 'queues' (ffff888023b85b50): kobject_cleanup, parent 0000000000000000 [ 224.037446][T12221] kobject: 'queues' (ffff888023b85b50): calling ktype release [ 224.037454][T12221] kobject: 'queues' (ffff888023b85b50): kset_release [ 224.037467][T12221] kobject: 'queues': free name [ 224.037495][T12221] kernfs runtime_status: removing [ 224.037521][T12221] kernfs control: removing [ 224.037543][T12221] kernfs runtime_suspended_time: removing [ 224.037551][T12225] debugfs: creating file 'pf_emulate' [ 224.037639][T12225] debugfs: creating file 'pf_spurious' [ 224.037721][T12225] debugfs: creating file 'pf_fast' [ 224.037768][T12221] kernfs runtime_active_time: removing [ 224.037795][T12221] kernfs autosuspend_delay_ms: removing [ 224.037800][T12225] debugfs: creating file 'pf_mmio_spte_created' [ 224.037832][T12221] kernfs power: removing [ 224.037861][T12221] kernfs subsystem: removing [ 224.037887][T12221] kernfs syzkaller0: removing [ 224.037885][T12225] debugfs: creating file 'pf_guest' [ 224.037929][T12221] kernfs uevent: removing [ 224.037972][T12225] debugfs: creating file 'tlb_flush' [ 224.038056][T12225] debugfs: creating file 'invlpg' [ 224.038081][T12226] bus: 'gadget': add driver configfs-gadget.g1 [ 224.038119][T12226] kobject: 'configfs-gadget.g1' (ffff88802d5d8e00): kobject_add_internal: parent: 'drivers', set: 'drivers' [ 224.038138][T12225] debugfs: creating file 'exits' [ 224.038215][T12225] debugfs: creating file 'io_exits' [ 224.038238][T12226] gadget gadget.32: bus: 'gadget': __driver_probe_device: matched device with driver configfs-gadget.g1 [ 224.038281][T12226] gadget gadget.32: bus: 'gadget': really_probe: probing driver configfs-gadget.g1 with device [ 224.038296][T12225] debugfs: creating file 'mmio_exits' [ 224.038376][T12225] debugfs: creating file 'signal_exits' [ 224.038457][T12225] debugfs: creating file 'irq_window_exits' [ 224.038444][T12226] udc usbip-vudc.0: binding gadget driver [g1] [ 224.038543][T12225] debugfs: creating file 'nmi_window_exits' [ 224.038585][T12226] configfs-gadget.g1 gadget.32: adding 'uac1_func'/ffff888036965400 to config 'c'/ffff888062e4d120 [ 224.038628][T12225] debugfs: creating file 'l1d_flush' [ 224.038702][T12225] debugfs: creating file 'halt_exits' [ 224.038715][T12226] ================================================================== [ 224.038725][T12226] BUG: KASAN: global-out-of-bounds in usb_copy_descriptors+0x18d/0x320 [ 224.038764][T12226] Read of size 128 at addr ffffffff9ccca720 by task syz.2.1984/12226 [ 224.038771][T12225] debugfs: creating file 'request_irq_exits' [ 224.038800][T12226] [ 224.038816][T12225] debugfs: creating file 'irq_exits' [ 224.038812][T12226] CPU: 0 UID: 0 PID: 12226 Comm: syz.2.1984 Tainted: G L syzkaller #0 PREEMPT(full) [ 224.038842][T12226] Tainted: [L]=SOFTLOCKUP [ 224.038851][T12226] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 224.038864][T12226] Call Trace: [ 224.038869][T12225] debugfs: creating file 'host_state_reload' [ 224.038873][T12226] [ 224.038882][T12226] dump_stack_lvl+0x100/0x190 [ 224.038910][T12226] print_report+0x13d/0x4b0 [ 224.038939][T12226] ? __virt_addr_valid+0x239/0x430 [ 224.038954][T12225] debugfs: creating file 'fpu_reload' [ 224.038962][T12226] ? usb_copy_descriptors+0x18d/0x320 [ 224.038986][T12226] kasan_report+0xdf/0x1c0 [ 224.039016][T12226] ? usb_copy_descriptors+0x18d/0x320 [ 224.039039][T12225] debugfs: creating file 'insn_emulation' [ 224.039043][T12226] kasan_check_range+0x10f/0x1e0 [ 224.039063][T12226] __asan_memcpy+0x23/0x60 [ 224.039087][T12226] usb_copy_descriptors+0x18d/0x320 [ 224.039113][T12226] usb_assign_descriptors+0xd2/0x470 [ 224.039125][T12225] debugfs: creating file 'insn_emulation_fail' [ 224.039140][T12226] f_audio_bind+0x243a/0x3950 [ 224.039188][T12226] ? __pfx_f_audio_bind+0x10/0x10 [ 224.039208][T12225] debugfs: creating file 'hypercalls' [ 224.039214][T12226] usb_add_function+0x219/0x890 [ 224.039240][T12226] configfs_composite_bind+0xd83/0x1960 [ 224.039276][T12226] ? kernfs_create_link+0x1bd/0x240 [ 224.039294][T12225] debugfs: creating file 'irq_injections' [ 224.039309][T12226] gadget_bind_driver+0x28c/0xbf0 [ 224.039339][T12226] ? __pfx_gadget_bind_driver+0x10/0x10 [ 224.039382][T12225] debugfs: creating file 'nmi_injections' [ 224.039369][T12226] really_probe+0x241/0xa60 [ 224.039400][T12226] __driver_probe_device+0x210/0x460 [ 224.039412][T12226] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 224.039431][T12226] driver_probe_device+0x4a/0x140 [ 224.039442][T12226] __driver_attach+0x21f/0x5b0 [ 224.039453][T12226] ? __pfx___driver_attach+0x10/0x10 [ 224.039466][T12225] debugfs: creating file 'req_event' [ 224.039464][T12226] bus_for_each_dev+0x13e/0x1d0 [ 224.039479][T12226] ? __pfx_bus_for_each_dev+0x10/0x10 [ 224.039493][T12226] ? bus_add_driver+0x2b5/0x5b0 [ 224.039511][T12226] bus_add_driver+0x305/0x5b0 [ 224.039528][T12226] driver_register+0x1e2/0x360 [ 224.039541][T12226] usb_gadget_register_driver_owner+0x132/0x210 [ 224.039551][T12225] debugfs: creating file 'nested_run' [ 224.039560][T12226] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 224.039575][T12226] configfs_write_iter+0x302/0x4e0 [ 224.039588][T12226] vfs_write+0x6af/0x1050 [ 224.039603][T12226] ? __pfx_configfs_write_iter+0x10/0x10 [ 224.039616][T12226] ? __pfx_vfs_write+0x10/0x10 [ 224.039629][T12226] ? find_held_lock+0x2b/0x80 [ 224.039650][T12226] ksys_write+0x12a/0x250 [ 224.039658][T12225] debugfs: creating file 'directed_yield_attempted' [ 224.039663][T12226] ? __pfx_ksys_write+0x10/0x10 [ 224.039679][T12226] do_syscall_64+0x123/0x790 [ 224.039698][T12226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.039709][T12226] RIP: 0033:0x7fbdab39e559 [ 224.039718][T12226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.039730][T12226] RSP: 002b:00007fbdac19f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 224.039742][T12226] RAX: ffffffffffffffda RBX: 00007fbdab626090 RCX: 00007fbdab39e559 [ 224.039750][T12226] RDX: 000000000000000c RSI: 0000200000000840 RDI: 0000000000000009 [ 224.039750][T12225] debugfs: creating file 'directed_yield_successful' [ 224.039757][T12226] RBP: 00007fbdab435ad8 R08: 0000000000000000 R09: 0000000000000000 [ 224.039765][T12226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.039773][T12226] R13: 00007fbdab626128 R14: 00007fbdab626090 R15: 00007fff662f4ec8 [ 224.039786][T12226] [ 224.039790][T12226] [ 224.039793][T12226] The buggy address belongs to the variable: [ 224.039797][T12226] ac_header_desc+0x0/0x40 [ 224.039813][T12226] [ 224.039816][T12226] The buggy address belongs to the physical page: [ 224.039821][T12226] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1ccca [ 224.039831][T12226] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 224.039833][T12225] debugfs: creating file 'preemption_reported' [ 224.039846][T12226] raw: 00fff00000002000 ffffea0000733288 ffffea0000733288 0000000000000000 [ 224.039856][T12226] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 224.039862][T12226] page dumped because: kasan: bad access detected [ 224.039878][T12226] page_owner info is not present (never set?) [ 224.039882][T12226] [ 224.039885][T12226] Memory state around the buggy address: [ 224.039891][T12226] ffffffff9ccca600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 224.039900][T12226] ffffffff9ccca680: f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 [ 224.039908][T12226] >ffffffff9ccca700: f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 00 00 f9 f9 [ 224.039914][T12226] ^ [ 224.039921][T12226] ffffffff9ccca780: f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9 [ 224.039929][T12226] ffffffff9ccca800: f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 [ 224.039936][T12226] ================================================================== [ 224.039975][T12225] debugfs: creating file 'preemption_other' [ 224.039997][T12221] kernfs tun_flags: removing [ 224.040028][T12221] kernfs owner: removing [ 224.040051][T12221] kernfs group: removing [ 224.040062][T12225] debugfs: creating file 'guest_mode' [ 224.040087][T12221] kernfs rx_packets: removing [ 224.040147][T12226] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 224.439615][T12226] CPU: 0 UID: 0 PID: 12226 Comm: syz.2.1984 Tainted: G L syzkaller #0 PREEMPT(full) [ 224.443751][T12226] Tainted: [L]=SOFTLOCKUP [ 224.445413][T12226] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 224.449230][T12226] Call Trace: [ 224.450480][T12226] [ 224.451551][T12226] dump_stack_lvl+0x100/0x190 [ 224.453333][T12226] vpanic+0x553/0x970 [ 224.454799][T12226] ? __pfx_vpanic+0x10/0x10 [ 224.456369][T12226] ? mark_held_locks+0x40/0x70 [ 224.458150][T12226] ? usb_copy_descriptors+0x18d/0x320 [ 224.460134][T12226] panic+0xd1/0xe0 [ 224.461535][T12226] ? __pfx_panic+0x10/0x10 [ 224.463199][T12226] ? usb_copy_descriptors+0x18d/0x320 [ 224.465210][T12226] ? preempt_schedule_common+0x3c/0xb0 [ 224.467300][T12226] check_panic_on_warn.cold+0x19/0x34 [ 224.469149][T12226] end_report.part.0+0x3a/0x90 [ 224.470692][T12226] kasan_report.cold+0xe/0x18 [ 224.472241][T12226] ? usb_copy_descriptors+0x18d/0x320 [ 224.473954][T12226] kasan_check_range+0x10f/0x1e0 [ 224.475525][T12226] __asan_memcpy+0x23/0x60 [ 224.476952][T12226] usb_copy_descriptors+0x18d/0x320 [ 224.478605][T12226] usb_assign_descriptors+0xd2/0x470 [ 224.480310][T12226] f_audio_bind+0x243a/0x3950 [ 224.481833][T12226] ? __pfx_f_audio_bind+0x10/0x10 [ 224.483477][T12226] usb_add_function+0x219/0x890 [ 224.485030][T12226] configfs_composite_bind+0xd83/0x1960 [ 224.486791][T12226] ? kernfs_create_link+0x1bd/0x240 [ 224.488442][T12226] gadget_bind_driver+0x28c/0xbf0 [ 224.490091][T12226] ? __pfx_gadget_bind_driver+0x10/0x10 [ 224.491833][T12226] really_probe+0x241/0xa60 [ 224.493316][T12226] __driver_probe_device+0x210/0x460 [ 224.494987][T12226] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 224.496833][T12226] driver_probe_device+0x4a/0x140 [ 224.498574][T12226] __driver_attach+0x21f/0x5b0 [ 224.500275][T12226] ? __pfx___driver_attach+0x10/0x10 [ 224.501901][T12226] bus_for_each_dev+0x13e/0x1d0 [ 224.503425][T12226] ? __pfx_bus_for_each_dev+0x10/0x10 [ 224.505328][T12226] ? bus_add_driver+0x2b5/0x5b0 [ 224.507223][T12226] bus_add_driver+0x305/0x5b0 [ 224.508954][T12226] driver_register+0x1e2/0x360 [ 224.510631][T12226] usb_gadget_register_driver_owner+0x132/0x210 [ 224.512893][T12226] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 224.514649][T12226] configfs_write_iter+0x302/0x4e0 [ 224.516412][T12226] vfs_write+0x6af/0x1050 [ 224.517905][T12226] ? __pfx_configfs_write_iter+0x10/0x10 [ 224.519876][T12226] ? __pfx_vfs_write+0x10/0x10 [ 224.521729][T12226] ? find_held_lock+0x2b/0x80 [ 224.523477][T12226] ksys_write+0x12a/0x250 [ 224.525100][T12226] ? __pfx_ksys_write+0x10/0x10 [ 224.526980][T12226] do_syscall_64+0x123/0x790 [ 224.528801][T12226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.531025][T12226] RIP: 0033:0x7fbdab39e559 [ 224.532651][T12226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.539138][T12226] RSP: 002b:00007fbdac19f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 224.541536][T12226] RAX: ffffffffffffffda RBX: 00007fbdab626090 RCX: 00007fbdab39e559 [ 224.543844][T12226] RDX: 000000000000000c RSI: 0000200000000840 RDI: 0000000000000009 [ 224.546180][T12226] RBP: 00007fbdab435ad8 R08: 0000000000000000 R09: 0000000000000000 [ 224.548517][T12226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.550906][T12226] R13: 00007fbdab626128 R14: 00007fbdab626090 R15: 00007fff662f4ec8 [ 224.553439][T12226] [ 224.555290][T12226] Kernel Offset: disabled [ 224.556733][T12226] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:51:53 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000066 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85b2d115 RDI=ffffffff9cc7e6a0 RBP=ffffffff9cc7e660 RSP=ffffc90003e66f40 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3966666666666552 R12=0000000000000000 R13=0000000000000066 R14=0000000000000007 R15=ffffc90003e67258 RIP=ffffffff85b2d13f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fbdac19f6c0 ffffffff 00c00000 GS =0000 ffff8880d4946000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c340968 CR3=00000000152ec000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff662f53b6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff662f53b6 00007fff662f53bc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbdab436102 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbdab43613c ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbdab4362a0 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbdab43612e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbdab5f65f8 00007fbdab5f65c8 00007fbdab5f6600 00007fbdab5f65e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=00000000f1bf0fbb RCX=0000000000405f46 RDX=00000000ac000410 RSI=ffffffff855b5199 RDI=0000000000000108 RBP=ffff88804a200040 RSP=ffffc90007317378 R8 =0000000000000005 R9 =0000000000000006 R10=0000000000000016 R11=0000000000000000 R12=000000000017e609 R13=0000000000000016 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff855b51a7 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555571ad4500 ffffffff 00c00000 GS =0000 ffff8880d4a46000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9e0d61ac60 CR3=000000002b587000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9e0e15d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeb768d756 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeb768d756 00007ffeb768d75c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9e0d436102 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9e0d43613c ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9e0d4362a0 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9e0d43612e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9e0d5f6600 00007f9e0d5f65e0 00007f9e0d5f65e8 00007f9e0d5f6618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9e0e15d020 00007f9e0d5f65c0 00007f9e0d5f65d0 00007f9e0d5f6610 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9e0d5f65f8 00007f9e0d5f65c8 00007f9e0d5f6600 00007f9e0d5f65e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 0000000000000188 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffc90003428001 RBX=0000000000000001 RCX=ffffffff92f951c2 RDX=ffffc90003427a01 RSI=ffffc90003427ac0 RDI=ffffc90003427680 RBP=ffffc90003427ac0 RSP=ffffc900034275e0 R8 =0000000000000001 R9 =0000000000000007 R10=0000000000000200 R11=00000000000195b2 R12=0000000000000008 R13=ffffc90003420000 R14=ffffc90003427ae0 R15=ffffc900034276a4 RIP=ffffffff81b9c08c RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055556f3a5500 ffffffff 00c00000 GS =0000 ffff8880d4b46000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9e0e26df88 CR3=0000000032a1d000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020081 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c656e72656b2f73 79732f3530322f2e ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c656e72656b2f73 79732f3530322f2e ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeda63b026 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeda63b026 00007ffeda63b02c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3f90c36102 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3f90c3613c ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3f90c362a0 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3f90c3612e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000003 RCX=0000000000000002 RDX=ffff8880202c0000 RSI=ffffffff81ffbdfe RDI=ffff8880202c0000 RBP=ffffc90000157cd8 RSP=ffffc90000157bc0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=ffff88806a433de0 R12=ffff88806a53d280 R13=ffffed100d4a7a51 R14=ffff88806a53d288 R15=0000000000000001 RIP=ffffffff81ffbe11 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d4c46000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000c64000 CR3=000000000fb96000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000001000003 Opmask02=00000000fc02fefc Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000297000 0000000001000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000008000000000 0000000001000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000297000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeb768d756 00007ffeb768d75c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9e0d436102 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9e0d43613c ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9e0d4362a0 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9e0d43612e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fc244c8bfc244489 1057b70f18478b48 00000000801f0fc3 5ba20ff189f88953 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000441f0fc30e74 04f983fc244c8b1f 7402f983fc244c8b 187401f98320478b ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9e0d5f65f8 00007f9e0d5f65c8 00007f9e0d5f6600 00007f9e0d5f65e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 0000000000000188 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000