last executing test programs: 1m10.72024502s ago: executing program 2 (id=101): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x84, 0x1, 0x2, 0xe, 0x4}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x81) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file1\x00', 0x81c0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) unshare(0x6a060000) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x40, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x40}}, 0x2) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r6, 0x801054db, 0x110c230004) 1m9.899524817s ago: executing program 2 (id=105): socket$netlink(0x10, 0x3, 0xf) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)={0x10, 0x1001}, 0x10}], 0x1, 0x0, 0x0, 0xc0008d1}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) listns(&(0x7f0000000000)={0x20, 0x0, 0x0, 0x2000000, 0x0, 0xfffffffffffffff1}, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000240), 0x4000, 0x0) lseek(r3, 0xd554, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002000)=ANY=[@ANYBLOB="28000000130a01030000000000000000020000000900010073797a30000000000800034000000007"], 0x28}}, 0x0) r5 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x2400) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000180)={0x53, 0xfffffffffffffffd, 0x6, 0x81, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000700)="1265891488a6", 0x0, 0x4008, 0x10022, 0x3, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f00000001c0)={0x0}) r7 = openat$dlm_monitor(0xffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000200)={r6}) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000100)={&(0x7f0000000080)=[r0, r6], &(0x7f00000000c0)=[0x9382, 0x2, 0x3, 0x80000001, 0xd4, 0x6], 0x2, 0x1}) 1m9.784406438s ago: executing program 2 (id=106): socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) (async) r1 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x20000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a45320, &(0x7f00000000c0)={{0x80}, 'port1\x00', 0x0, 0x1c0014, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @name="a13c4dacaace7477f3f8f1d68f8a0c4a4b407126d4a332ea110a356827492a5c"}) r4 = add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) (async) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, 0x0) (async) keyctl$dh_compute(0x17, 0x0, &(0x7f00000000c0)=""/83, 0x53, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000240)) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) r7 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) (async) connect$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @empty, 0x106}, 0x1c) setsockopt(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000580)="eb5130ad59c9be7ec4a1cba93b7a4ea4e2a440163e9440f67b913ad994d871fc2c9bbffc5e0400fa147b09b091646ceca62282836d3bbdcf6c6696bf7e76dd60903efb44fbe686f8f51792eff2f2134b7cb9168d9089123098d8f53fbb102ea52668dd36039a0aa52402a223d11a04912ad5c90f9c02067b4ebe94dba5966a5062e63f0fbe5ce8e906a204e1522bba23bed5a16c34864417d27a49df76c4316766b90e19e0b32ed7e6f27ca89ccc24b1befef006", 0xb4) (async) r8 = fcntl$dupfd(r6, 0x406, r6) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) (async) write$binfmt_elf64(r8, &(0x7f0000000400)=ANY=[@ANYRESOCT=r3, @ANYRES64=r6, @ANYRES16=r8, @ANYRES8=r7, @ANYRES64=r4, @ANYRES64=r4], 0xfffffdcf) 1m8.690887487s ago: executing program 2 (id=112): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write(r0, &(0x7f0000000200)='transport=rdma,nqn=nqn.2014-08.org.nvmexpress.discovery,traddr=127.0.0.1', 0x48) r1 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000340)=[@ioring_restriction_sqe_flags_required={0x3, 0xd}, @ioring_restriction_sqe_op], 0x2) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r1, 0xc, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) writev(r3, &(0x7f0000002840)=[{&(0x7f00000001c0)="b4000006004f709b905d6f66b8261f87", 0x10}], 0x1) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) write$cgroup_devices(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="63202a3a2a20720300"], 0x9) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000040)={0xf0f023}) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r8 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r8, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x3, {0xa, 0x1000, 0x4, 0x2}}) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x6, 0x1, 0x1ff, 0x70}, 0x5, 0x4, 0x0, 0x2, 0x0, 0x1}}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000040)=0x4000, 0x4) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r9, 0xaf01, 0x0) setns(0xc9, 0x0) r10 = socket(0x8, 0x5, 0x5) getsockopt$sock_buf(r10, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) 1m8.418343142s ago: executing program 2 (id=113): r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0xf7fffff9, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x10000004, 0x3, 0x1}) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r1, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) getgid() r4 = open(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x142) write(r5, &(0x7f0000000000)='3', 0x4e) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000500)=ANY=[@ANYBLOB="a80000009f61b9c11932c01341988b5a116750caf9512546d9e88a11bf5356850d6b7a27c493d58ceefed93df109113db172a925c77816e07df3c763040a20e2616464c0b183ac3d9b4d1ead5a36e005a6ec867098f529b65ed7cc06ac56c7314bd3b613f764203f0cd7e9d3bc89bea8de0ac59cc7ba306cadd552e0265062f87bb0e4a83edf2aad761bbaa457cca3ed0db582ce1b362ff2e126616c46daaa210f72d3ce06024182d553f0ce266044a717e7be4de2ecc0eae92c816405a7", @ANYRES16=r3, @ANYBLOB="010028bd7000fedbdf252100000008000300", @ANYRES32=r8, @ANYBLOB="0c002d80040000000400000080002d800a000000027f6625fbd3a9e7b200000002000202020200000a00000002020202020200000a2b"], 0xa8}, 0x1, 0x0, 0x0, 0x4000008}, 0x20000001) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r11 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r11, 0x40345410, &(0x7f0000000080)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r11, 0x40605414, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r9) sendmsg$NL80211_CMD_CONNECT(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000700)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRESDEC=r4, @ANYBLOB="05002abd7000080000002e000000080003009504f0bac0ddaa857bb72db64eddbac7f847d0aea36f6658f1327aa19efb02ecf016497f6c2ebab7f107758e6953a8d3d2e7c8a0f935d8a4e214b571af4b000194624f8f770e12c61c7079a0e24fb36afc580a1c50a7de02f6b09c1b4ae22612bfe0dbd85d6d519b9dcd54898bd7002e838285615fac7044c096adf714fb4b48518c0676111292202dc76052daaa4f4c891e", @ANYRES32=r10, @ANYRES16=r12], 0x2c}}, 0x810) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001200)={&(0x7f00000001c0), 0xc, &(0x7f00000011c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="d0050000", @ANYRES16=r12, @ANYBLOB="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"], 0x5d0}, 0x1, 0x0, 0x0, 0x40004}, 0x40400d1) r13 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x5, 0x0, 0x4000000000000004, 0x4, 0xfffffffffffffffb, 0x7, 0xfffffffffffffffa, 0x2002}, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r13) ptrace$getregset(0x4205, r13, 0x1, &(0x7f0000000140)={&(0x7f0000000000)=""/111, 0x6f}) 1m7.558977256s ago: executing program 2 (id=118): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x7) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000440)={"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"}) 52.538456226s ago: executing program 32 (id=118): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x7) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000440)={"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"}) 5.430331533s ago: executing program 1 (id=438): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="2703", 0x2}], 0x1, 0x0, 0x1f}, 0x4005) 5.193269181s ago: executing program 1 (id=440): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xe10, 0x870, 0x1, 0x1, 0xd59f84, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xd1, 0xb, 0x30, {0x8, 0xfffffff7}, 0xd0, 0x9}}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x10000000002) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xab1, 0x10000, 0x8, 0x3e3}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd=r4, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x4a4, 0x348, 0x198, 0xffffffff, 0x198, 0x0, 0x410, 0x410, 0xffffffff, 0x410, 0x410, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x164, 0x198, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0x100c, 'kmp\x00', "48ae43e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}, @common=@unspec=@devgroup={{0x34}, {0x3, 0x0, 0x3, 0x3, 0x81}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0xae, {0x2e, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e24, @port=0x4e24}}}}, {{@uncond, 0x0, 0xc8, 0xf8, 0x0, {}, [@common=@addrtype={{0x2c}, {0x40, 0x200, 0x0, 0x1}}, @common=@inet=@tcp={{0x2c}, {[0x4e24, 0x4e22], [0x4e22, 0x4e24], 0x4, 0xc2, 0x1, 0x2}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x5e}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x2, @ipv4=@empty, @ipv4=@empty, @port=0x4e22, @icmp_id=0x65}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x84, 0x1, 0x5}, 0x0, 0x94, 0xc8, 0x0, {}, [@common=@icmp={{0x24}, {0x4, '\x00', 0x1}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @dev={0xac, 0x14, 0x14, 0x2a}, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x500) sendmsg$TIPC_NL_SOCK_GET(r8, &(0x7f0000000cc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000d00)={0x244, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xc0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'team0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd04}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xec9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}]}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff30d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5f9}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x100}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4df}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x108, @private1, 0xfc}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'pimreg\x00'}}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffa}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x101}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x8000}, 0x4011) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r11 = syz_open_dev$tty1(0xc, 0x4, 0x4) r12 = dup(r11) write$char_usb(r12, &(0x7f0000002100)="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", 0x3b9) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRES64=r12, @ANYRES16=r10, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32, @ANYBLOB="cf25ba8f82081339a05fd5c40562ddf54428a4590005f26b00112303df28", @ANYRES32=r0], 0x3c}}, 0x0) close(0xffffffffffffffff) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680) 4.940424183s ago: executing program 3 (id=442): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000000000), 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7c29, 0x0) setns(0xc9, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1400000015000103000000000000000001000000cbd8154f8abc2fad1c33ec725ed0a168d6501a37c1a3b29d2c1aa817d6e24030ee0ec12040ce8354aa886baccb310c70b7d156c093a39f271edb296868d6ae0ef2a1c5cdad926517302d9cde2e6c4da4a56c89c9a56f568434b2dbda7b9669142d9800ae53f8942977a7170faa1084afde878f99739de1d537df7a9d865bc539555b9d0f05d2d5442f6d404b217cb124cdf6d0e693abaf01142d5703000000ebda4f4aba9be90c5a727348557f65d1945a4b30fb4ce6a4f0"], 0x14}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="070000f303000000000100000100000028000000aba2b3068ff6e70e5bc5672d356e809559339e7e3ba0f6d4bd1be0236b3061e3449540dc997419b8ef1118a5f062eb8ca610b546e369c77d926ad300ddc89f9f281741797933b34dcf0d262efc1dede891fe593540bbe407b0108c09a19c07719b852c96759b4a414b6a171bbb1f2dbc3dcfbf9e5130414ec6826b9658f9a62b3c0294210b63bce5f9d87ba4dc8f84bf79d075d99b6bd989", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4, r3}, 0xc) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}}], 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc01c5869, &(0x7f00000004c0)={r4, &(0x7f00000000c0)=':\x00', 0x400000, &(0x7f00000001c0)={@_ha_fsid={[0x1, 0x80000000]}, {0x5, 0x9, 0xfffffff6, 0xc}}, 0x4, &(0x7f0000000440), &(0x7f0000000480)=0x3}) mknodat$null(r6, &(0x7f0000000640)='./file0\x00', 0x800, 0x103) r7 = socket$unix(0x1, 0x1, 0x0) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040080) setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000040)={r8, @loopback, @multicast2}, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xe, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x9, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x2001000, 0x9, 0x5, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x4, 0x100000, 0x762, 0x3, 0xd, 0x10, 0x2b12, 0x104, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x80000000, 0x5, 0x79b, 0x2, 0x1, 0x7d, 0x4, 0x1000a, 0x7, 0xf, 0x101, 0x200d7, 0x5, 0x7, 0xaa, 0x81, 0x8, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x5, 0x4006, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0xffffff01, 0x8, 0x752, 0x0, 0x1005, 0x5, 0x10001, 0xffffffff, 0xffffffff, 0x6, 0x4, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x81, 0x800100, 0x5, 0x252, 0x2, 0xb, 0x5, 0x20006, 0x5, 0xcd7, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x7, 0x2, 0x8, 0x8, 0x0, 0xff, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) 4.729872778s ago: executing program 3 (id=443): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) ioctl$OCFS2_IOC_RESVSP64(r2, 0x4030582a, &(0x7f0000000040)={0x1, 0x2, 0x1, 0x3, 0x80, 0xe}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='hd3ss3220 0x4', 0xd) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$XFS_IOC_FSINUMBERS(r1, 0xc0105867, &(0x7f0000000280)={&(0x7f00000000c0)=0x3, 0x1, &(0x7f0000000180)=[{}], &(0x7f0000000240)}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000002c0)=[r4], 0x1}) 4.627792784s ago: executing program 3 (id=444): r0 = syz_open_dev$mtd(&(0x7f00000004c0), 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1261}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r3, r2) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x58, 0x3, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4010}, 0xc804) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0xca, 0xe, 0x20, 0x8200, r5, 0x9, '\x00', 0x0, r0, 0x4, 0x3, 0x0, 0x8}, 0x50) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r4, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000000201091405000000"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001c02c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000000c000280050001000000000008000740000000001800068014000400ff010000000000000000000000000001"], 0xac}}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000002c0)={'wg0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="34000000120000002cbd7000fbdbdf2500000000", @ANYRES32=r11, @ANYBLOB="0480aaf29fe39603990d35006d6163766c61323100009706000000003f4f4bf10f44227305"], 0x34}, 0x1, 0x0, 0x0, 0x50}, 0x8d1) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) 4.468396826s ago: executing program 3 (id=447): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) recvmmsg$unix(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x1000000}}], 0x14, 0x0, 0x0) 4.09168587s ago: executing program 1 (id=453): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x1a0) write(r0, &(0x7f0000000440)='nfsd 127.0.0.1 2:47483647 client1\n', 0x22) 3.960200222s ago: executing program 1 (id=455): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)=0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7ffffff, 0x2000001, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r2, 0xc0044d06, &(0x7f00000000c0)=0x39) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24000014) socket(0x10, 0x3, 0x0) r3 = syz_usb_connect(0x2, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040cc1769190001010203010902450001010080320904000002ffffff0007058102400000070501024000000904000104ffffff0007058102"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000001, 0x204031, r1, 0xec776000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r5, &(0x7f0000000300)='p:test/event1 ./file0:0x0 +', 0x1b) ioctl$TIOCGICOUNT(r5, 0x545d, 0x0) ioctl$XFS_IOC_FSGROWFSLOG(r2, 0x4008586f, &(0x7f0000000240)={0x7f, 0x7fff}) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000001000)=""/145, 0x91}], 0x1) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x340000, 0x4d2, 0xde, 0x84, 0xf, "bc113800000000000000000600"}) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x0, 0x2, {}, {}, 0x0, 0x2}) timer_create(0x0, &(0x7f0000000180)={0x0, 0x1, 0x1}, &(0x7f00000001c0)) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x2ac65) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) 3.505827648s ago: executing program 3 (id=457): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2) syz_open_procfs$namespace(r1, &(0x7f00000003c0)='ns/time\x00') recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f0000000380), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f00000005c0), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x42583) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000040)=0xc) 3.168999649s ago: executing program 0 (id=460): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0xc, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)=[{0x0}, {0x0}], 0x2}, 0x0, 0x0, 0x1}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0xc, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x132}}}, &(0x7f0000000440)) r4 = socket$nl_route(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8c40, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280), 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) clock_settime(0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="98000000", @ANYRES16=r8, @ANYBLOB="010000000000fbdbdf2501000000700008806c0000803c0009801c0000800600010002000000080002007f00000105000300030000001c0000800600010002000000080002007f00000105000300010000002400012cd1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b08000300060000001400020077673000"/146], 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x6, 0x0, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc084}, 0x44080) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0x2}, {0x0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xfff, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0x4000) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="340000006c002d0226bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="400000000001000014000300766574682640801ae3863d16cd23305f746f5f7465616d000000e6c9122a1ffb557f255980f5dd1745e826270f88f8b01db31d70e6da8531defa834c69e04efb9e39f0ebd6fe619609cae415ba0c0fc6868e9d4117f39e8518005c0933b1f2e82797b6eb6dbc418fb72556f9a6aab5edcdef0acaf2"], 0x34}}, 0x0) 3.165961379s ago: executing program 4 (id=461): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x30, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0xc, 0x2, [{0x2, 0x1}]}, @NHA_RES_GROUP={0x4}]}, 0x30}}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x0, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000240)={0xf0f046, 0x100000}) 2.730270026s ago: executing program 4 (id=462): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xe10, 0x870, 0x1, 0x1, 0xd59f84, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xd1, 0xb, 0x30, {0x8, 0xfffffff7}, 0xd0, 0x9}}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x10000000002) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xab1, 0x10000, 0x8, 0x3e3}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd=r4, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x4a4, 0x348, 0x198, 0xffffffff, 0x198, 0x0, 0x410, 0x410, 0xffffffff, 0x410, 0x410, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x164, 0x198, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0x100c, 'kmp\x00', "48ae43e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}, @common=@unspec=@devgroup={{0x34}, {0x3, 0x0, 0x3, 0x3, 0x81}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0xae, {0x2e, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e24, @port=0x4e24}}}}, {{@uncond, 0x0, 0xc8, 0xf8, 0x0, {}, [@common=@addrtype={{0x2c}, {0x40, 0x200, 0x0, 0x1}}, @common=@inet=@tcp={{0x2c}, {[0x4e24, 0x4e22], [0x4e22, 0x4e24], 0x4, 0xc2, 0x1, 0x2}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x5e}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x2, @ipv4=@empty, @ipv4=@empty, @port=0x4e22, @icmp_id=0x65}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x84, 0x1, 0x5}, 0x0, 0x94, 0xc8, 0x0, {}, [@common=@icmp={{0x24}, {0x4, '\x00', 0x1}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @dev={0xac, 0x14, 0x14, 0x2a}, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x500) sendmsg$TIPC_NL_SOCK_GET(r8, &(0x7f0000000cc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000d00)={0x244, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xc0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'team0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd04}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xec9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}]}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff30d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5f9}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x100}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4df}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x108, @private1, 0xfc}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'pimreg\x00'}}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffa}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x101}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x8000}, 0x4011) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r11 = syz_open_dev$tty1(0xc, 0x4, 0x4) r12 = dup(r11) write$char_usb(r12, &(0x7f0000002100)="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", 0x3b9) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRES64=r12, @ANYRES16=r10, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32, @ANYBLOB="cf25ba8f82081339a05fd5c40562ddf54428a4590005f26b00112303df28", @ANYRES32=r0], 0x3c}}, 0x0) close(0xffffffffffffffff) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680) 2.430965281s ago: executing program 3 (id=463): r0 = syz_ublk_setup_io_uring(0x2261, &(0x7f0000000300)={0x0, 0xd58c, 0x80, 0x2, 0x30b}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) mkdir(0x0, 0x80) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1}) eventfd2(0x1, 0x80001) r4 = eventfd(0xe467) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000080)=r4, 0x1) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x21, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0xfffff000, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) 2.190563666s ago: executing program 0 (id=464): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./sec\x00', &(0x7f0000000100)='ext4\x00', 0x40, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0x473d589ddc918612, 0x7, 0x1000, 0x8001, {{0x7, 0x4, 0x3, 0x3, 0x1c, 0x64, 0x0, 0x5, 0x4, 0x0, @private=0xa010102, @multicast2, {[@generic={0x7, 0x7, "adbe061449"}]}}}}}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sec/tomoyo/domain_policy\x00', 0x2, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x0, 0x0, 0x80000001}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x409c9, 0x0, 0x0, 'queue1\x00', 0x200001}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x3, 0x0, 0x4, 0x0, 0x7}, 0x76e4}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3}}) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x40080, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x63) syz_emit_ethernet(0x46, &(0x7f0000000640)=ANY=[@ANYBLOB="2bfeb09c65d503d702d2b517e65bcaaa2aaaaaaa00000100ffffff080045000038aa031d90780003f102450000c00000ee0000002000000000000000a2b92d1866e4320a4c00e6f18322da4647e36b14c9e6aa33cf1b0743bc9454993afafc51c97685cdf20328de0da5dbc2c931e9e79eba666a6bcaf30ca8164e9cce826e007427b22600"/147, @ANYRESDEC=r7], 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', &(0x7f00000003c0)=""/188, 0xbc) 1.777882345s ago: executing program 4 (id=466): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) recvmmsg$unix(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x1000000}}], 0x14, 0x0, 0x0) 1.294903163s ago: executing program 0 (id=467): r0 = syz_open_dev$mtd(&(0x7f00000004c0), 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1261}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r2, 0xffffffffffffffff) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x58, 0x3, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4010}, 0xc804) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0xca, 0xe, 0x20, 0x8200, r4, 0x9, '\x00', 0x0, r0, 0x4, 0x3, 0x0, 0x8}, 0x50) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r3, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000000201091405000000"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001c02c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000000c000280050001000000000008000740000000001800068014000400ff010000000000000000000000000001"], 0xac}}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000002c0)={'wg0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="34000000120000002cbd7000fbdbdf2500000000", @ANYRES32=r10, @ANYBLOB="0480aaf29fe39603990d35006d6163766c61323100009706000000003f4f4bf10f44227305"], 0x34}, 0x1, 0x0, 0x0, 0x50}, 0x8d1) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) 1.240813757s ago: executing program 0 (id=468): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_ublk_setup_io_uring(0x22, &(0x7f0000000340)={0x0, 0x20000000, 0x100, 0x2, 0x1db}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x1, {0x4644}}) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000100)={0x1, 0x2}, 0x1) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x7f000000, 0x1, 0x100000001, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x4, 0xfcd, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x118}}}, &(0x7f0000000240)) 1.240290546s ago: executing program 0 (id=469): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndctrl(&(0x7f00000013c0), 0xc0, 0x40001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 32) r4 = getpid() (rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) (async) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) (async, rerun: 64) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r8, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x148, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0xfff7, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x3b, 0x0, 0xffffffffffffffff}, {@in=@multicast1, 0x0, 0x6c}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, {0x800000000000, 0x4, 0x40000000}, {}, 0x70bd25, 0x0, 0x2, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x148}}, 0x4810) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24040000}, 0x804) (async) ioctl$CDROMVOLCTRL(0xffffffffffffffff, 0x5392, &(0x7f0000000000)={0xb, 0x3, 0x8, 0x8}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) 922.665221ms ago: executing program 1 (id=470): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000001180)=ANY=[@ANYBLOB='quota,usrquota_inode_hardlimit=7']) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0xee00, 0x1000) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x42, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r0, &(0x7f00000013c0)={0x2020}, 0x2020) 884.036158ms ago: executing program 4 (id=471): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000000000)=0xffffffff, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = syz_ublk_setup_io_uring(0x220, &(0x7f0000000800)={0x0, 0x5eab, 0x10000, 0x2, 0x40}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000980)=@IORING_OP_WRITE_FIXED={0x5, 0x40, 0x4007, @fd_index=0x1, 0x8, 0x0, 0x0, 0xa, 0x1, {0x1}}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)=""/46, 0x2e}], 0x1) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) fgetxattr(r2, &(0x7f0000000100)=@known='trusted.overlay.nlink\x00', &(0x7f0000000040)=""/111, 0x6f) r7 = openat2$dir(0xffffff9c, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x40, 0x14f}, 0x18) mkdirat(r7, &(0x7f0000000640)='./file0\x00', 0x8) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r8 = socket(0x10, 0x3, 0x0) r9 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write(r9, &(0x7f0000000a00)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=nqn.2014-08.org.nvmexpress.discovery,reconnect_delay=1', 0xb2) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x35) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000240)={0x33, 0x4f4, 0x0, 0x4}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000001600156f030100000000000000000000bc"], 0x18}}, 0x0) sendto$unix(r8, &(0x7f0000000500)="e3e0e35bf087c5d6878e125023f4134b9ce6a4f45ddb", 0x16, 0xe0a576c0174b4193, &(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e) socket$igmp(0x2, 0x3, 0x2) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x9, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000066706b8b2dc284310100000018480000080000000000000000010000183000000400ff00000000000000000001330508000000003abb10000100000095000000000000007badcd1099ece64cd45c724bf310d2a33ae969e91bc5cff8de440b490b23437f1bea00765d9b4d2bacb77920c5e8536fb62728151e6d5986b3b1eb4686c53661d4684cb5d2bb8bed86b9a39995d5f0d1d74c3e1e059a84da5b8fc7ed15adb4fc8b5f0bac9082cfd4e63a5a5652aa3ca65e27e0decef763e3e457c7bdb7160101f3d3f60292f2a67ea51c97fdc0fc97aeb0836f3541e2eec53f21910bd29daed54dfa8b864bff5b19d70000000077"], &(0x7f0000000280)='GPL\x00', 0x8, 0x2f, &(0x7f00000002c0)=""/47, 0x41000, 0x2, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000000340)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r2], &(0x7f0000000380)=[{0x0, 0x3, 0xd, 0x6}, {0x2, 0x2, 0xf, 0x4}, {0x5, 0x2, 0x0, 0x8}, {0x2, 0x4, 0x1, 0xb}, {0x5, 0x4, 0x2, 0x7}], 0x10, 0x80000001}, 0x94) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r13 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010028bd7200592ddf250100000008000100644bcd87da5fdd5a8142a63375fa85e12013c55af2b8dc1cbfd04cc03776e44349d7c96593da0aa4f1ae6ec6f3fdae1da6773ef9e01d88cef7d24c86f5749175f9afe9758555f34425c2dd3ce25585dec42293f4667e131fa2c6b291", @ANYRES32=r14, @ANYBLOB="400002803c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c0004000800000301000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4409b}, 0x110) write(r3, &(0x7f0000000680)="dcce7e721d50abed2dd1acb4df210ed99e24dd3794447e54f7d7a63c17851c08188ad1a9c3880b45d67ed3d9cd00d956846c889cf115884da21539e829ff707630240b7abf2f295f86f397cb0c960df46b6ed077bea968f930832bb0bf9143129f35072676fac30bfbf1a0b6ffd2d382f5e825c1552f71b65f22342fd8261b8c92fe025980e379c8b282399789d0317642c9acaf54b8772b2f4fc8e59b7fd8d76399e05c19a3160cb45b04d54d1eb01bc072d22aae874578ebb24a3744c9b95966d854ff012e3f5663183e9b1634c2084dd8a311cd570401724f2648152af225a519245535b8a7bdf12b3cf091d6407c2a", 0xf1) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000004c0)=r10, 0x4) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000481100fe8000000000000000000000f10019bbfe800000000000000000af00000000aa4e200e22004890780300000002000000f7fef5581f890dd9cdc98168c89d35621bfbaafca8bdea57e672ab15cb42667bb84afc264c285b0849c4ff1ce1d929560c4738c9e80bb97ce8a816541d9391e3bc3db65b225569711efddeb70c8d6e9d034542dd7b1cdeee98740cd79b9e54b154a10d5a91445ad29ec3b15266206bd5d6856e95ffffce0d33d510850f05b0200f47ceb917306fd5", @ANYRES16=r1, @ANYRES8=r1], 0x0) 731.643826ms ago: executing program 4 (id=472): mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'bind'}}}]}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2c, &(0x7f0000000700)=0x844, 0x4) getpid() r1 = socket$netlink(0x10, 0x3, 0x400000000000004) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r3 = socket$tipc(0x1e, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 2.536938ms ago: executing program 1 (id=473): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2) syz_open_procfs$namespace(r1, &(0x7f00000003c0)='ns/time\x00') recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f0000000380), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f00000005c0), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x42583) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000040)=0xc) 1.570001ms ago: executing program 4 (id=474): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000004180)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000005180)={{r2, 0x5, 0x400, 0xf, 0x2, 0x663a, 0x7, 0x1, 0x7, 0x2, 0x80, 0x639, 0x7, 0x2, 0x80000001}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000080)='./file0\x00', &(0x7f0000001e80)='pvfs2\x00', 0x80010, &(0x7f0000001ec0)='\'}{)}\\\x00') openat$sndtimer(0xffffffffffffff9c, 0x0, 0x1a0001) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r5 = openat$incfs(0xffffffffffffff9c, 0x0, 0x400000, 0x4) ioctl$MEMREADOOB64(r5, 0xc0184d16, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_INPUT2(r6, &(0x7f0000000080)={0xc, {0x3, ' \x00\x00'}}, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') (fail_nth: 29) sendmmsg$inet6(r3, &(0x7f0000001e00)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0xfffffeff, @private0, 0x10}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000100)="f69e32bda87e88a98eaf7c0ae6dae2d94ce038e12bbab4f07d82e918834147cf32adb9ef6ecab1d9906444cbc0c1c52a83585d7aa2e079386122b016301b0d3e1fdb30c747559b8d9d39bd272ee05ed8e6fc680c4a354baf5ffc50715e875caec7ef896502a17f44872e88b65ed0238936f7e07e5dd3ba86ba0c60ffadd13d7b1066ebce9c56cc4bb02ebc09fbb18e03fa0d7c2feec9", 0x96}, {&(0x7f00000001c0)="037a3d57e666707fbd9d37f682649ac233a30e2d62661759d9019b964b333edc6c974e6606bb092e45a7d6be2ac72f4da39daa65fbc5f7e8c630c1dc54321f5ad020aee4fcc3162e46bbddb5aae602671e4901ae647e242d62629cd5bda91ff5f73b3dddc7c48d9c1e7e2d016064f5458776429eda0830ae3d39bf50c922abdda9d9bde6e1f4e4ef3d5aec10a38427813c77280343f6aacab68f1ef66e", 0x9d}], 0x2}}, {{&(0x7f00000002c0)={0xa, 0x5, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x401}, 0x1c, 0x0, 0x0, &(0x7f0000000780)=[@hopopts={{0xc24, 0x29, 0x36, {0x26, 0x181, '\x00', [@generic={0x7, 0xc00, "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"}, @pad1, @pad1, @ra={0x5, 0x2, 0xfff9}]}}}, @dontfrag={{0x10, 0x29, 0x3e, 0x8}}, @hoplimit={{0x10, 0x29, 0x34, 0x5}}, @dontfrag={{0x10, 0x29, 0x3e, 0x70}}, @tclass={{0x10, 0x29, 0x43, 0x7}}, @dstopts={{0xc4, 0x29, 0x37, {0x6c, 0x16, '\x00', [@calipso={0x7, 0x30, {0x3, 0xa, 0x4, 0x3, [0x6399, 0x5, 0x3, 0x5, 0x3]}}, @enc_lim={0x4, 0x1, 0x4}, @pad1, @generic={0x9, 0x61, "915dc83f148735be157d36bb9d559af899c421962438d04ac24c620b1e46bdbe238ae84fc930045e514381b270e086051a775d6162bb520b8d07f40e353f6190f779749811d332762359a34bffdf8e230e50c073abc7d0bc8b5c8de9d49292de70"}, @hao={0xc9, 0x10, @loopback}, @enc_lim={0x4, 0x1, 0xf0}]}}}, @dontfrag={{0x10, 0x29, 0x3e, 0xbb0f}}, @hopopts={{0x3c, 0x29, 0x36, {0x3d, 0x4, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @jumbo={0xc2, 0x4, 0xf9c}, @ra={0x5, 0x2, 0x8}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x3}, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}], 0xd74}}, {{&(0x7f0000001900)={0xa, 0x4e21, 0x3, @empty, 0x5}, 0x1c, &(0x7f0000001cc0)=[{&(0x7f0000001940)="4943fb28c5d20e70dcab25270d63e6b059656c02f1c8caf4fc17dd76da69281b5a90effe9ee4e78e89433643b4275401698e14aa6478f2124da85b80c16958501639a868dac140e6ce623176fdb095bc25c4637772dc8732ec7a2a0dd9236b003060cdd675cd08", 0x67}, {&(0x7f00000019c0)="f0476bc19df25d7c3f4b9d615f2dbeaf2fd7c9e816423fe4c96fa43e6ed6c42beeff6d90428665b2f69aef3e5ccf64ef1341dbfe8e1900b7689542de5174a3bcd684dafcab2e5380bbaa9ad5c4d6f7ffba1712ffac959efefade0912bb841a8b71c4fc75675005629e6a552ae3045578fa15a284fb26227e10bdb9a34148f90bac3f47912e03abc0e50ee1c4bc47413e4233d46f85c92d38fef3a87b9eab0bbe18e8963b4bd8385ba60982a7fe1c4515f02a5279e1956efd8ec959d260c56c21945ea52fbadaf40436a7718e94c845db182be6a1065c70cd777e11ba8a560fd9cce6", 0xe2}, {&(0x7f0000001ac0)="a3cd52ebb6f6ce025629a4ed82af0f149b8861ba4f5de6ec124cbb58eecd2129bff306324d2bb1da080a4f7a107922c92cf84ac0367a2a4fe2d2f3a28ca75bf0f50e5c0b8369bcf70dc16aff5091cb58829aece8b5b06d75186cba890cda9f1f253e3987b3588f405d92e97994a765e4fbf884841afcdd567747d786bf318a5c0ef75950066b1006caba5aed01bc76e90062d994148daece2f0434071e23f2456fd2e94fcd4915312b1c8b9e8bafee825dab06fc4a344b36d7fff02fdda45cc2d1db14f32052193336acc996fa2442033dc01c665a", 0xd5}, {&(0x7f0000001bc0)="2ec91123200d2e4c6eaab2dd13b6c2d9141ed6a9cbd3005e4ebb61bbe6ab8403c7c0b0cce76eefc0e9c755b5b31be1e83cc372b0", 0x34}, {&(0x7f0000001c00)="399c0f5c3b0448f26ee27fc7ec8a76f189d6aaeed5ebb131a3e67710576d731a5b33b7b9c6846c82428d5d217d4aee61", 0x30}, {&(0x7f0000001c40)="b4d3b8bc9333885a098c66f2bff2c8a82d1f6e809ef2313d0bf6665bbd58e9e5113a4b8d39c3770818b51c1b582d9be229da28408330e4554457427737cf227c5b0b142676af50a847cc9bf2c0", 0x4d}], 0x6}}], 0x3, 0x20044004) 0s ago: executing program 0 (id=481): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000001180)=ANY=[@ANYBLOB='quota,usrquota_inode_hardlimit=7']) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0xee00, 0x1000) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x42, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r0, &(0x7f00000013c0)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): de [ 51.040797][ T5900] wg0: entered promiscuous mode [ 51.085270][ T5900] wg1: entered promiscuous mode [ 51.095789][ T5900] wg2: entered promiscuous mode [ 51.104259][ T5900] veth0_to_bridge: entered promiscuous mode [ 51.113040][ T5900] veth1_to_bridge: entered promiscuous mode [ 51.116231][ T5900] veth0_to_bond: entered promiscuous mode [ 51.118990][ T5900] veth1_to_bond: entered promiscuous mode [ 51.120827][ T5900] veth0_to_team: entered promiscuous mode [ 51.123373][ T5900] veth1_to_team: entered promiscuous mode [ 51.128224][ T5900] veth0_to_batadv: entered promiscuous mode [ 51.129754][ T5900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.129840][ T5900] batadv_slave_0: entered promiscuous mode [ 51.131114][ T5900] veth1_to_batadv: entered promiscuous mode [ 51.132362][ T5900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.132387][ T5900] batadv_slave_1: entered promiscuous mode [ 51.134296][ T5900] xfrm0: entered promiscuous mode [ 51.135566][ T5900] veth0_to_hsr: entered promiscuous mode [ 51.139976][ T5900] veth1_to_hsr: entered promiscuous mode [ 51.143978][ T5900] hsr0: entered promiscuous mode [ 51.145335][ T5900] veth1_virt_wifi: entered promiscuous mode [ 51.146777][ T5900] veth0_virt_wifi: entered promiscuous mode [ 51.148111][ T5900] virt_wifi0: entered promiscuous mode [ 51.151372][ T5900] vlan0: entered promiscuous mode [ 51.153688][ T5900] vlan1: entered promiscuous mode [ 51.160512][ T5900] macvlan0: entered promiscuous mode [ 51.164962][ T5900] macvlan1: entered promiscuous mode [ 51.169635][ T5900] ipvlan0: entered promiscuous mode [ 51.169719][ T5900] ipvlan1: entered promiscuous mode [ 51.176989][ T5097] Bluetooth: hci0: command tx timeout [ 51.177020][ T5097] Bluetooth: hci3: command tx timeout [ 51.186520][ T5752] Bluetooth: hci1: command tx timeout [ 51.187876][ T5752] Bluetooth: hci2: command tx timeout [ 51.193448][ T5900] macvtap0: entered promiscuous mode [ 51.196237][ T5900] macsec0: entered promiscuous mode [ 51.199124][ T5900] geneve0: entered promiscuous mode [ 51.203552][ T5900] geneve1: entered promiscuous mode [ 51.210680][ T5900] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 51.225045][ T5900] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 51.234494][ T5900] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 51.301386][ T5900] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 51.316472][ T5900] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 51.333925][ T5900] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 51.335672][ T5901] lo: entered promiscuous mode [ 51.340566][ T5901] tunl0: entered promiscuous mode [ 51.341294][ T5901] gre0: entered promiscuous mode [ 51.345903][ T5901] gretap0: entered promiscuous mode [ 51.350003][ T5901] erspan0: entered promiscuous mode [ 51.351445][ T5901] ip_vti0: entered promiscuous mode [ 51.352201][ T5901] ip6_vti0: entered promiscuous mode [ 51.353142][ T5901] sit0: entered promiscuous mode [ 51.354800][ T5901] ip6tnl0: entered promiscuous mode [ 51.355908][ T5901] ip6gre0: entered promiscuous mode [ 51.358974][ T5901] syz_tun: entered promiscuous mode [ 51.361513][ T5901] ip6gretap0: entered promiscuous mode [ 51.362928][ T5901] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.363732][ T5901] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.364202][ T5901] bridge0: entered promiscuous mode [ 51.365798][ T5901] vcan0: entered promiscuous mode [ 51.369084][ T5901] bond0: entered promiscuous mode [ 51.369095][ T5901] bond_slave_0: entered promiscuous mode [ 51.369189][ T5901] bond_slave_1: entered promiscuous mode [ 51.370588][ T5901] team0: entered promiscuous mode [ 51.370597][ T5901] team_slave_0: entered promiscuous mode [ 51.370675][ T5901] team_slave_1: entered promiscuous mode [ 51.372087][ T5901] dummy0: entered promiscuous mode [ 51.376190][ T5901] nlmon0: entered promiscuous mode [ 51.377513][ T5901] batadv0: entered promiscuous mode [ 51.378920][ T5901] vxcan0: entered promiscuous mode [ 51.379303][ T5901] vxcan1: entered promiscuous mode [ 51.379673][ T5901] veth0: entered promiscuous mode [ 51.380946][ T5901] veth1: entered promiscuous mode [ 51.384199][ T5901] wg0: entered promiscuous mode [ 51.389701][ T5901] wg1: entered promiscuous mode [ 51.391820][ T5901] wg2: entered promiscuous mode [ 51.392532][ T5901] veth0_to_bridge: entered promiscuous mode [ 51.396269][ T5901] veth1_to_bridge: entered promiscuous mode [ 51.399501][ T5901] veth0_to_bond: entered promiscuous mode [ 51.401019][ T5901] veth1_to_bond: entered promiscuous mode [ 51.403854][ T5901] veth0_to_team: entered promiscuous mode [ 51.407868][ T5901] veth1_to_team: entered promiscuous mode [ 51.412758][ T5901] veth0_to_batadv: entered promiscuous mode [ 51.414375][ T5901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.414400][ T5901] batadv_slave_0: entered promiscuous mode [ 51.417118][ T5901] veth1_to_batadv: entered promiscuous mode [ 51.420256][ T5901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.420282][ T5901] batadv_slave_1: entered promiscuous mode [ 51.424895][ T5901] xfrm0: entered promiscuous mode [ 51.425898][ T5901] veth0_to_hsr: entered promiscuous mode [ 51.428989][ T5901] veth1_to_hsr: entered promiscuous mode [ 51.431604][ T5901] hsr0: entered promiscuous mode [ 51.432738][ T5901] veth1_virt_wifi: entered promiscuous mode [ 51.434265][ T5901] veth0_virt_wifi: entered promiscuous mode [ 51.435449][ T5901] virt_wifi0: entered promiscuous mode [ 51.438348][ T5901] vlan0: entered promiscuous mode [ 51.439904][ T5901] vlan1: entered promiscuous mode [ 51.718097][ T5887] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 51.718126][ T5901] macvlan0: entered promiscuous mode [ 51.723382][ T5887] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 51.766381][ T5887] usb 5-1: USB disconnect, device number 2 [ 51.869634][ T5745] udevd[5745]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 51.961655][ T5927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8'. [ 51.966706][ T5901] macvlan1: entered promiscuous mode [ 51.972397][ T5901] ipvlan0: entered promiscuous mode [ 51.972489][ T5901] ipvlan1: entered promiscuous mode [ 53.256852][ T5097] Bluetooth: hci3: command tx timeout [ 53.256877][ T5097] Bluetooth: hci2: command tx timeout [ 53.256890][ T5097] Bluetooth: hci0: command tx timeout [ 53.256903][ T5097] Bluetooth: hci1: command tx timeout [ 53.724736][ T5901] macvtap0: entered promiscuous mode [ 53.728096][ T5901] macsec0: entered promiscuous mode [ 53.730490][ T5901] geneve0: entered promiscuous mode [ 53.731640][ T5901] geneve1: entered promiscuous mode [ 53.739890][ T5901] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 53.744661][ T5901] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 53.749703][ T5901] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 53.756106][ T5901] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 53.770046][ T5901] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 53.777208][ T5901] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 53.782175][ T5918] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7'. [ 53.782264][ T5926] lo: entered allmulticast mode [ 53.782809][ T5926] tunl0: entered allmulticast mode [ 53.783228][ T5926] gre0: entered allmulticast mode [ 53.784090][ T5926] gretap0: entered allmulticast mode [ 53.784628][ T5926] erspan0: entered allmulticast mode [ 53.785160][ T5926] ip_vti0: entered allmulticast mode [ 53.788599][ T5926] ip6_vti0: entered allmulticast mode [ 53.789260][ T5926] sit0: entered allmulticast mode [ 53.789811][ T5926] ip6tnl0: entered allmulticast mode [ 53.790361][ T5926] ip6gre0: entered allmulticast mode [ 53.791244][ T5926] syz_tun: entered allmulticast mode [ 53.792514][ T5926] ip6gretap0: entered allmulticast mode [ 53.793253][ T5926] vcan0: entered allmulticast mode [ 53.793695][ T5926] bond0: entered allmulticast mode [ 53.793709][ T5926] bond_slave_0: entered allmulticast mode [ 53.793724][ T5926] bond_slave_1: entered allmulticast mode [ 53.794396][ T5926] team0: entered allmulticast mode [ 53.794410][ T5926] team_slave_0: entered allmulticast mode [ 53.794424][ T5926] team_slave_1: entered allmulticast mode [ 53.796429][ T5926] dummy0: entered allmulticast mode [ 53.797648][ T5926] nlmon0: entered allmulticast mode [ 53.798862][ T42] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 53.799705][ T5926] batadv0: entered allmulticast mode [ 53.799928][ T42] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 53.800361][ T5926] vxcan0: entered allmulticast mode [ 53.800794][ T5926] vxcan1: entered allmulticast mode [ 53.801168][ T5926] veth0: entered allmulticast mode [ 53.801787][ T5926] veth1: entered allmulticast mode [ 53.802178][ T5926] wg0: entered allmulticast mode [ 53.802669][ T5926] wg1: entered allmulticast mode [ 53.803117][ T5926] wg2: entered allmulticast mode [ 53.803656][ T5926] veth0_to_bridge: entered allmulticast mode [ 53.804097][ T5926] bridge_slave_0: entered allmulticast mode [ 53.804505][ T5926] veth1_to_bridge: entered allmulticast mode [ 53.804895][ T5926] bridge_slave_1: entered allmulticast mode [ 53.805258][ T5926] veth0_to_bond: entered allmulticast mode [ 53.821634][ T5926] bond0: (slave bond_slave_0): Releasing backup interface [ 53.827665][ T5926] veth1_to_bond: entered allmulticast mode [ 53.834479][ T42] usb 8-1: USB disconnect, device number 2 [ 53.843780][ T5926] bond0: (slave bond_slave_1): Releasing backup interface [ 53.857772][ T5926] veth0_to_team: entered allmulticast mode [ 53.872130][ T5926] team0: Port device team_slave_0 removed [ 53.872511][ T5926] veth1_to_team: entered allmulticast mode [ 53.892359][ T5926] team0: Port device team_slave_1 removed [ 53.892745][ T5926] veth0_to_batadv: entered allmulticast mode [ 53.893278][ T5926] batadv_slave_0: entered allmulticast mode [ 53.893497][ T5926] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.893512][ T5926] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.895532][ T5739] udevd[5739]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 53.898831][ T5926] veth1_to_batadv: entered allmulticast mode [ 53.899261][ T5926] batadv_slave_1: entered allmulticast mode [ 53.899490][ T5926] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.899504][ T5926] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.901254][ T5926] xfrm0: entered allmulticast mode [ 53.901807][ T5926] veth0_to_hsr: entered allmulticast mode [ 53.902265][ T5926] hsr_slave_0: entered allmulticast mode [ 53.902919][ T5926] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 53.913740][ T5934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10'. [ 53.932837][ T5933] lo: left promiscuous mode [ 53.932860][ T5933] lo: entered allmulticast mode [ 53.934748][ T5933] tunl0: left promiscuous mode [ 53.934766][ T5933] tunl0: entered allmulticast mode [ 53.936114][ T5933] gre0: left promiscuous mode [ 53.936132][ T5933] gre0: entered allmulticast mode [ 53.940263][ T5933] gretap0: left promiscuous mode [ 53.940288][ T5933] gretap0: entered allmulticast mode [ 53.942008][ T5933] erspan0: left promiscuous mode [ 53.942024][ T5933] erspan0: entered allmulticast mode [ 53.943498][ T5933] ip_vti0: left promiscuous mode [ 53.943513][ T5933] ip_vti0: entered allmulticast mode [ 53.944563][ T5933] ip6_vti0: left promiscuous mode [ 53.944577][ T5933] ip6_vti0: entered allmulticast mode [ 53.945796][ T5933] sit0: left promiscuous mode [ 53.945812][ T5933] sit0: entered allmulticast mode [ 53.953048][ T5933] ip6tnl0: left promiscuous mode [ 53.953068][ T5933] ip6tnl0: entered allmulticast mode [ 53.954400][ T5933] ip6gre0: left promiscuous mode [ 53.954415][ T5933] ip6gre0: entered allmulticast mode [ 53.955644][ T5933] syz_tun: left promiscuous mode [ 53.955659][ T5933] syz_tun: entered allmulticast mode [ 53.958454][ T5933] ip6gretap0: left promiscuous mode [ 53.958471][ T5933] ip6gretap0: entered allmulticast mode [ 53.960330][ T5933] bridge0: left promiscuous mode [ 53.960347][ T5933] bridge0: entered allmulticast mode [ 53.961317][ T5933] vcan0: left promiscuous mode [ 53.961332][ T5933] vcan0: entered allmulticast mode [ 53.962400][ T5933] bond0: left promiscuous mode [ 53.962720][ T5933] bond0: entered allmulticast mode [ 53.962735][ T5933] bond_slave_0: entered allmulticast mode [ 53.962748][ T5933] bond_slave_1: entered allmulticast mode [ 53.964076][ T5933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.964948][ T5933] team0: left promiscuous mode [ 53.965279][ T5933] team0: entered allmulticast mode [ 53.965293][ T5933] team_slave_0: entered allmulticast mode [ 53.965307][ T5933] team_slave_1: entered allmulticast mode [ 53.966024][ T5933] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.967112][ T5933] dummy0: left promiscuous mode [ 53.967128][ T5933] dummy0: entered allmulticast mode [ 53.973463][ T5933] nlmon0: left promiscuous mode [ 53.973485][ T5933] nlmon0: entered allmulticast mode [ 53.974521][ T5933] batadv0: left promiscuous mode [ 53.974537][ T5933] batadv0: entered allmulticast mode [ 53.975859][ T5933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.977080][ T5933] vxcan0: left promiscuous mode [ 53.977095][ T5933] vxcan0: entered allmulticast mode [ 53.980643][ T5933] vxcan1: left promiscuous mode [ 53.980659][ T5933] vxcan1: entered allmulticast mode [ 53.981471][ T5933] veth0: left promiscuous mode [ 53.981485][ T5933] veth0: entered allmulticast mode [ 53.982696][ T5933] veth1: left promiscuous mode [ 53.982711][ T5933] veth1: entered allmulticast mode [ 53.990433][ T5933] wg0: left promiscuous mode [ 53.990455][ T5933] wg0: entered allmulticast mode [ 53.993257][ T5936] netlink: 'syz.0.11': attribute type 39 has an invalid length. [ 53.995502][ T5933] wg1: left promiscuous mode [ 53.995519][ T5933] wg1: entered allmulticast mode [ 53.999421][ T5933] wg2: left promiscuous mode [ 53.999436][ T5933] wg2: entered allmulticast mode [ 54.000446][ T5933] veth0_to_bridge: left promiscuous mode [ 54.000462][ T5933] veth0_to_bridge: entered allmulticast mode [ 54.002696][ T5933] bridge_slave_0: left promiscuous mode [ 54.002858][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.008444][ T5933] veth1_to_bridge: left promiscuous mode [ 54.008462][ T5933] veth1_to_bridge: entered allmulticast mode [ 54.010300][ T5933] bridge_slave_1: left promiscuous mode [ 54.010669][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.025913][ T5933] veth0_to_bond: left promiscuous mode [ 54.025934][ T5933] veth0_to_bond: entered allmulticast mode [ 54.030451][ T5933] bond_slave_0: left promiscuous mode [ 54.038247][ T5933] bond0: (slave bond_slave_0): Releasing backup interface [ 54.050034][ T5933] veth1_to_bond: left promiscuous mode [ 54.050054][ T5933] veth1_to_bond: entered allmulticast mode [ 54.051151][ T5933] bond_slave_1: left promiscuous mode [ 54.060803][ T5933] bond0: (slave bond_slave_1): Releasing backup interface [ 54.065786][ T5933] veth0_to_team: left promiscuous mode [ 54.065800][ T5933] veth0_to_team: entered allmulticast mode [ 54.067556][ T5933] team_slave_0: left promiscuous mode [ 54.071660][ T5933] team0: Port device team_slave_0 removed [ 54.071972][ T5933] veth1_to_team: left promiscuous mode [ 54.071982][ T5933] veth1_to_team: entered allmulticast mode [ 54.072894][ T5933] team_slave_1: left promiscuous mode [ 54.076005][ T5933] team0: Port device team_slave_1 removed [ 54.076238][ T5933] veth0_to_batadv: left promiscuous mode [ 54.076246][ T5933] veth0_to_batadv: entered allmulticast mode [ 54.077284][ T5933] batadv_slave_0: left promiscuous mode [ 54.077298][ T5933] batadv_slave_0: entered allmulticast mode [ 54.077947][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.077993][ T5933] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.078000][ T5933] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.079449][ T5933] veth1_to_batadv: left promiscuous mode [ 54.079458][ T5933] veth1_to_batadv: entered allmulticast mode [ 54.080036][ T5933] batadv_slave_1: left promiscuous mode [ 54.080049][ T5933] batadv_slave_1: entered allmulticast mode [ 54.080969][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.081015][ T5933] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.081022][ T5933] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.081634][ T5933] xfrm0: left promiscuous mode [ 54.081643][ T5933] xfrm0: entered allmulticast mode [ 54.082372][ T5933] veth0_to_hsr: left promiscuous mode [ 54.082380][ T5933] veth0_to_hsr: entered allmulticast mode [ 54.082871][ T5933] hsr_slave_0: entered allmulticast mode [ 54.083238][ T5933] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 54.125492][ T5939] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 54.186786][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.207251][ T5818] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.207278][ T5818] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.207297][ T5818] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.207314][ T5818] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.207332][ T5818] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.207349][ T5818] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.207367][ T5818] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.356101][ T5946] netlink: 'syz.3.13': attribute type 15 has an invalid length. [ 54.356123][ T5946] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13'. [ 54.473526][ C0] vcan0: j1939_tp_rxtimer: 0xffff888047c09000: rx timeout, send abort [ 54.482675][ T5946] mmap: syz.3.13 (5946): VmData 37507072 exceed data ulimit 7. Update limits or use boot option ignore_rlimit_data. [ 54.490059][ T5946] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 54.526859][ T5856] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 54.621427][ T5950] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 54.676579][ T5856] usb 5-1: Using ep0 maxpacket: 8 [ 54.679041][ T5856] usb 5-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=d4.00 [ 54.684238][ T5856] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 54.684281][ T5856] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 50039, setting to 1024 [ 54.693810][ T5856] usb 5-1: New USB device strings: Mfr=113, Product=0, SerialNumber=0 [ 54.694090][ T5856] usb 5-1: Manufacturer: syz [ 54.721111][ T5961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17'. [ 54.741345][ T5961] bridge_slave_1: left allmulticast mode [ 54.741373][ T5961] bridge_slave_1: left promiscuous mode [ 54.741574][ T5961] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.921401][ T5961] bridge_slave_0: left allmulticast mode [ 54.921478][ T5961] bridge_slave_0: left promiscuous mode [ 54.921659][ T5961] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.973700][ C0] vcan0: j1939_tp_rxtimer: 0xffff888047c08400: rx timeout, send abort [ 54.973945][ C0] vcan0: j1939_tp_rxtimer: 0xffff888047c09000: abort rx timeout. Force session deactivation [ 55.102514][ T5856] kobil_sct 5-1:1.0: KOBIL USB smart card terminal converter detected [ 55.320133][ T5856] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 55.336530][ T5751] Bluetooth: hci1: command tx timeout [ 55.336559][ T5751] Bluetooth: hci2: command tx timeout [ 55.336575][ T5751] Bluetooth: hci3: command tx timeout [ 55.346427][ T5752] Bluetooth: hci0: command tx timeout [ 55.473785][ C0] vcan0: j1939_tp_rxtimer: 0xffff888047c08400: abort rx timeout. Force session deactivation [ 55.958366][ T5970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20'. [ 56.003538][ T1041] usb 5-1: USB disconnect, device number 3 [ 56.024924][ T1041] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 56.025861][ T1041] kobil_sct 5-1:1.0: device disconnected [ 56.031651][ T5973] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 56.038542][ T5973] evm: overlay not supported [ 56.176552][ T10] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 56.337226][ T10] usb 7-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 56.338213][ T10] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 56.340087][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.340099][ T10] usb 7-1: Product: syz [ 56.340106][ T10] usb 7-1: Manufacturer: syz [ 56.340114][ T10] usb 7-1: SerialNumber: syz [ 56.527319][ T62] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 56.568373][ T5966] lo: entered promiscuous mode [ 56.574002][ T5966] tunl0: entered promiscuous mode [ 56.576141][ T5966] gre0: entered promiscuous mode [ 56.678395][ T62] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 56.681881][ T62] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 56.683586][ T62] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 56.683599][ T62] usb 6-1: Product: syz [ 56.683606][ T62] usb 6-1: Manufacturer: syz [ 56.683613][ T62] usb 6-1: SerialNumber: syz [ 56.728861][ T5966] gretap0: entered promiscuous mode [ 56.750134][ T5966] erspan0: entered promiscuous mode [ 56.752110][ T5966] ip_vti0: entered promiscuous mode [ 56.755054][ T5966] ip6_vti0: entered promiscuous mode [ 56.758835][ T5966] sit0: entered promiscuous mode [ 56.763052][ T5966] ip6tnl0: entered promiscuous mode [ 56.765756][ T5966] ip6gre0: entered promiscuous mode [ 56.795854][ T5966] syz_tun: entered promiscuous mode [ 56.910207][ T62] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 56.912116][ T5966] ip6gretap0: entered promiscuous mode [ 56.914389][ T62] usb 6-1: USB disconnect, device number 2 [ 56.915689][ T5966] vcan0: entered promiscuous mode [ 56.919654][ T62] usblp0: removed [ 58.296838][ T5966] bond0: entered promiscuous mode [ 58.296867][ T5966] bond_slave_0: entered promiscuous mode [ 58.297130][ T5966] bond_slave_1: entered promiscuous mode [ 58.302479][ T5966] team0: entered promiscuous mode [ 58.302500][ T5966] team_slave_0: entered promiscuous mode [ 58.302651][ T5966] team_slave_1: entered promiscuous mode [ 58.305376][ T5966] dummy0: entered promiscuous mode [ 58.578459][ T5966] nlmon0: entered promiscuous mode [ 58.579516][ T5966] batadv0: entered promiscuous mode [ 58.581980][ T5966] vxcan0: entered promiscuous mode [ 58.582545][ T5966] vxcan1: entered promiscuous mode [ 58.583077][ T5966] veth0: entered promiscuous mode [ 58.584880][ T5966] veth1: entered promiscuous mode [ 58.589868][ T5966] wg0: entered promiscuous mode [ 58.596003][ T5966] wg1: entered promiscuous mode [ 58.608624][ T5966] wg2: entered promiscuous mode [ 58.609898][ T5966] veth0_to_bridge: entered promiscuous mode [ 58.611829][ T5966] bridge_slave_0: entered promiscuous mode [ 58.613714][ T5966] veth1_to_bridge: entered promiscuous mode [ 58.616228][ T5966] bridge_slave_1: entered promiscuous mode [ 58.621780][ T5966] veth0_to_bond: entered promiscuous mode [ 58.624086][ T5966] veth1_to_bond: entered promiscuous mode [ 58.627025][ T5966] veth0_to_team: entered promiscuous mode [ 58.632556][ T5966] veth1_to_team: entered promiscuous mode [ 58.642544][ T5966] veth0_to_batadv: entered promiscuous mode [ 58.645647][ T5966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.645723][ T5966] batadv_slave_0: entered promiscuous mode [ 58.649110][ T5966] veth1_to_batadv: entered promiscuous mode [ 58.652090][ T5966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.652128][ T5966] batadv_slave_1: entered promiscuous mode [ 58.655038][ T5966] xfrm0: entered promiscuous mode [ 58.657423][ T5966] veth0_to_hsr: entered promiscuous mode [ 58.660674][ T5966] veth1_to_hsr: entered promiscuous mode [ 58.664307][ T5966] hsr0: entered promiscuous mode [ 58.665880][ T5966] veth1_virt_wifi: entered promiscuous mode [ 58.668318][ T5966] veth0_virt_wifi: entered promiscuous mode [ 58.670650][ T5966] virt_wifi0: entered promiscuous mode [ 58.675489][ T5966] vlan0: entered promiscuous mode [ 58.681297][ T5966] macvlan0: entered promiscuous mode [ 58.683923][ T5966] macvlan1: entered promiscuous mode [ 58.686145][ T5966] ipvlan0: entered promiscuous mode [ 58.686225][ T5966] ipvlan1: entered promiscuous mode [ 58.686345][ T5996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.27'. [ 58.694895][ T5966] macvtap0: entered promiscuous mode [ 58.699115][ T5966] macsec0: entered promiscuous mode [ 58.703214][ T5966] geneve0: entered promiscuous mode [ 58.709232][ T5966] geneve1: entered promiscuous mode [ 58.714298][ T5966] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 58.722665][ T5966] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 58.728853][ T5966] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 58.734092][ T5966] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 58.751477][ T5966] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 58.769681][ T5966] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 58.772448][ T5985] netlink: 20 bytes leftover after parsing attributes in process `syz.3.25'. [ 58.776838][ T5996] bridge_slave_1: left allmulticast mode [ 58.778075][ T5996] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.803078][ T5996] bridge_slave_0: left allmulticast mode [ 58.803231][ T5996] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.836585][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.836661][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.836680][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.836697][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.920112][ T10] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 58.925615][ T10] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 58.999182][ T10] usb 7-1: USB disconnect, device number 2 [ 59.082651][ T6003] netlink: 'syz.1.29': attribute type 15 has an invalid length. [ 59.082722][ T6003] netlink: 24 bytes leftover after parsing attributes in process `syz.1.29'. [ 59.206547][ T6003] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 60.215271][ T6001] x_tables: duplicate underflow at hook 1 [ 60.516523][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.516550][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.516567][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.516584][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.709250][ T5739] udevd[5739]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 60.881778][ T6025] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 60.914815][ T6025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.38'. [ 61.011319][ T6030] FAULT_INJECTION: forcing a failure. [ 61.011319][ T6030] name failslab, interval 1, probability 0, space 0, times 1 [ 61.011410][ T6030] CPU: 1 UID: 0 PID: 6030 Comm: syz.1.39 Not tainted syzkaller #0 PREEMPT(full) [ 61.011448][ T6030] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.011455][ T6030] Call Trace: [ 61.011459][ T6030] [ 61.011464][ T6030] dump_stack_lvl+0x100/0x190 [ 61.011495][ T6030] should_fail_ex.cold+0x5/0xa [ 61.011510][ T6030] should_failslab+0xc2/0x120 [ 61.011530][ T6030] kmem_cache_alloc_noprof+0x92/0x6a0 [ 61.011543][ T6030] ? d_instantiate+0x8a/0xb0 [ 61.011558][ T6030] ? alloc_empty_file+0x5b/0x1c0 [ 61.011576][ T6030] alloc_empty_file+0x5b/0x1c0 [ 61.011592][ T6030] alloc_file_pseudo+0x183/0x290 [ 61.011608][ T6030] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 61.011624][ T6030] ? tipc_sk_finish_conn+0x600/0x7a0 [ 61.011662][ T6030] sock_alloc_file+0x50/0x210 [ 61.011684][ T6030] __sys_socketpair+0x353/0x5b0 [ 61.011698][ T6030] ? __pfx___sys_socketpair+0x10/0x10 [ 61.011716][ T6030] __ia32_sys_socketpair+0x95/0x100 [ 61.011728][ T6030] ? lockdep_hardirqs_on+0x7d/0x110 [ 61.011745][ T6030] __do_fast_syscall_32+0x13a/0x8b0 [ 61.011762][ T6030] ? lockdep_hardirqs_on+0x7d/0x110 [ 61.011779][ T6030] do_fast_syscall_32+0x32/0x70 [ 61.011797][ T6030] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 61.011811][ T6030] RIP: 0023:0xf7f83fec [ 61.011825][ T6030] Code: Unable to access opcode bytes at 0xf7f83fc2. [ 61.011830][ T6030] RSP: 002b:00000000f542550c EFLAGS: 00000292 ORIG_RAX: 0000000000000168 [ 61.011841][ T6030] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 0000000000000002 [ 61.011848][ T6030] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 61.011855][ T6030] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 61.011861][ T6030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.011867][ T6030] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 61.011881][ T6030] [ 61.081418][ T6030] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 61.228266][ T42] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 61.245428][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 61.284901][ T6032] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 61.314105][ T6032] netlink: 4 bytes leftover after parsing attributes in process `syz.3.40'. [ 61.401594][ T42] usb 5-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 61.406868][ T42] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 61.425928][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.426206][ T42] usb 5-1: Product: syz [ 61.426214][ T42] usb 5-1: Manufacturer: syz [ 61.426222][ T42] usb 5-1: SerialNumber: syz [ 61.451042][ T6034] ======================================================= [ 61.451042][ T6034] WARNING: The mand mount option has been deprecated and [ 61.451042][ T6034] and is ignored by this kernel. Remove the mand [ 61.451042][ T6034] option from the mount to silence this warning. [ 61.451042][ T6034] ======================================================= [ 61.515719][ T6037] Could not find key with description: [syz] [ 61.515729][ T6037] process_request_key_err: No key [ 61.515733][ T6037] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 61.515738][ T6037] One or more global auth toks could not properly register; rc = [-2] [ 61.515758][ T6037] Error validating options; rc = [-2] [ 61.528264][ T6037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.42'. [ 61.530267][ T6038] netlink: 12 bytes leftover after parsing attributes in process `syz.3.42'. [ 61.535485][ T6037] erspan0: entered promiscuous mode [ 61.536224][ T6037] macvlan2: entered allmulticast mode [ 61.691119][ T10] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 61.721116][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 61.721136][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 61.721148][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 61.721168][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.798627][ T10] usb 7-1: config 0 descriptor?? [ 61.799159][ T6016] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 61.822941][ T42] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 61.824189][ T42] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 61.846237][ T42] usb 5-1: USB disconnect, device number 4 [ 61.869142][ T5739] udevd[5739]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 62.265775][ T6055] netlink: 'syz.3.47': attribute type 39 has an invalid length. [ 62.390075][ T10] plantronics 0003:047F:FFFF.0002: reserved main item tag 0xd [ 62.407569][ T10] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 62.498064][ T10] usb 7-1: USB disconnect, device number 3 [ 62.571913][ T6062] lo: left promiscuous mode [ 62.571939][ T6062] lo: entered allmulticast mode [ 62.573652][ T6062] tunl0: left promiscuous mode [ 62.573672][ T6062] tunl0: entered allmulticast mode [ 62.574735][ T6062] gre0: left promiscuous mode [ 62.574749][ T6062] gre0: entered allmulticast mode [ 62.579528][ T6062] gretap0: left promiscuous mode [ 62.579547][ T6062] gretap0: entered allmulticast mode [ 62.582087][ T6062] erspan0: left promiscuous mode [ 62.582215][ T6062] erspan0: entered allmulticast mode [ 62.583423][ T6062] ip_vti0: left promiscuous mode [ 62.583437][ T6062] ip_vti0: entered allmulticast mode [ 62.584430][ T6062] ip6_vti0: left promiscuous mode [ 62.584445][ T6062] ip6_vti0: entered allmulticast mode [ 62.585631][ T6062] sit0: left promiscuous mode [ 62.585646][ T6062] sit0: entered allmulticast mode [ 62.590074][ T6062] ip6tnl0: left promiscuous mode [ 62.590091][ T6062] ip6tnl0: entered allmulticast mode [ 62.591365][ T6062] ip6gre0: left promiscuous mode [ 62.591382][ T6062] ip6gre0: entered allmulticast mode [ 62.592720][ T6062] syz_tun: left promiscuous mode [ 62.592737][ T6062] syz_tun: entered allmulticast mode [ 62.594381][ T6062] ip6gretap0: left promiscuous mode [ 62.594398][ T6062] ip6gretap0: entered allmulticast mode [ 62.595709][ T6062] vcan0: left promiscuous mode [ 62.595728][ T6062] vcan0: entered allmulticast mode [ 62.596514][ T6062] bond0: left promiscuous mode [ 62.596859][ T6062] bond0: entered allmulticast mode [ 62.596873][ T6062] bond_slave_0: entered allmulticast mode [ 62.596888][ T6062] bond_slave_1: entered allmulticast mode [ 62.598257][ T6062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.599176][ T6062] team0: left promiscuous mode [ 62.599455][ T6062] team0: entered allmulticast mode [ 62.599469][ T6062] team_slave_0: entered allmulticast mode [ 62.599483][ T6062] team_slave_1: entered allmulticast mode [ 62.600004][ T6062] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.600476][ T6062] dummy0: left promiscuous mode [ 62.600488][ T6062] dummy0: entered allmulticast mode [ 62.602110][ T6062] nlmon0: left promiscuous mode [ 62.602125][ T6062] nlmon0: entered allmulticast mode [ 62.602772][ T6062] batadv0: left promiscuous mode [ 62.602782][ T6062] batadv0: entered allmulticast mode [ 62.603600][ T6062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.603939][ T6062] vxcan0: left promiscuous mode [ 62.603947][ T6062] vxcan0: entered allmulticast mode [ 62.604442][ T6062] vxcan1: left promiscuous mode [ 62.604450][ T6062] vxcan1: entered allmulticast mode [ 62.604858][ T6062] veth0: left promiscuous mode [ 62.604865][ T6062] veth0: entered allmulticast mode [ 62.605434][ T6062] veth1: left promiscuous mode [ 62.605443][ T6062] veth1: entered allmulticast mode [ 62.608308][ T6062] wg0: left promiscuous mode [ 62.608321][ T6062] wg0: entered allmulticast mode [ 62.611277][ T6062] wg2: left promiscuous mode [ 62.611290][ T6062] wg2: entered allmulticast mode [ 62.611934][ T6062] veth0_to_bridge: left promiscuous mode [ 62.611944][ T6062] veth0_to_bridge: entered allmulticast mode [ 62.613689][ T6062] bridge_slave_0: left promiscuous mode [ 62.613699][ T6062] bridge_slave_0: entered allmulticast mode [ 62.613978][ T6062] veth1_to_bridge: left promiscuous mode [ 62.613986][ T6062] veth1_to_bridge: entered allmulticast mode [ 62.614468][ T6062] bridge_slave_1: left promiscuous mode [ 62.614476][ T6062] bridge_slave_1: entered allmulticast mode [ 62.614748][ T6062] veth0_to_bond: left promiscuous mode [ 62.614756][ T6062] veth0_to_bond: entered allmulticast mode [ 62.615683][ T6062] bond_slave_0: left promiscuous mode [ 62.622724][ T6062] bond0: (slave bond_slave_0): Releasing backup interface [ 62.631998][ T6065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.49'. [ 62.644279][ T6062] veth1_to_bond: left promiscuous mode [ 62.644293][ T6062] veth1_to_bond: entered allmulticast mode [ 62.644880][ T6062] bond_slave_1: left promiscuous mode [ 62.651059][ T6062] bond0: (slave bond_slave_1): Releasing backup interface [ 62.669657][ T6062] veth0_to_team: left promiscuous mode [ 62.669671][ T6062] veth0_to_team: entered allmulticast mode [ 62.670705][ T6062] team_slave_0: left promiscuous mode [ 62.673421][ T6066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.50'. [ 62.675738][ T6062] team0: Port device team_slave_0 removed [ 62.676006][ T6062] veth1_to_team: left promiscuous mode [ 62.676015][ T6062] veth1_to_team: entered allmulticast mode [ 62.677932][ T6062] team_slave_1: left promiscuous mode [ 62.682016][ T6062] team0: Port device team_slave_1 removed [ 62.682246][ T6062] veth0_to_batadv: left promiscuous mode [ 62.682255][ T6062] veth0_to_batadv: entered allmulticast mode [ 62.682798][ T6062] batadv_slave_0: left promiscuous mode [ 62.682807][ T6062] batadv_slave_0: entered allmulticast mode [ 62.683161][ T6062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.683203][ T6062] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.683210][ T6062] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.685330][ T6062] veth1_to_batadv: left promiscuous mode [ 62.685343][ T6062] veth1_to_batadv: entered allmulticast mode [ 62.685930][ T6062] batadv_slave_1: left promiscuous mode [ 62.685940][ T6062] batadv_slave_1: entered allmulticast mode [ 62.686583][ T6062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.686632][ T6062] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.686640][ T6062] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.689028][ T6062] xfrm0: left promiscuous mode [ 62.689042][ T6062] xfrm0: entered allmulticast mode [ 62.689804][ T6062] veth0_to_hsr: left promiscuous mode [ 62.689816][ T6062] veth0_to_hsr: entered allmulticast mode [ 62.690401][ T6062] hsr_slave_0: entered allmulticast mode [ 62.690680][ T6062] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 62.704297][ T6064] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 62.871698][ T6071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.52'. [ 62.874111][ T6071] netlink: 48 bytes leftover after parsing attributes in process `syz.1.52'. [ 62.874126][ T6071] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 62.968484][ T6077] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.768.0), cmd(9) [ 63.178492][ T6096] lo: left promiscuous mode [ 63.178518][ T6096] lo: entered allmulticast mode [ 63.180304][ T6096] tunl0: left promiscuous mode [ 63.180321][ T6096] tunl0: entered allmulticast mode [ 63.182556][ T6096] gre0: left promiscuous mode [ 63.182573][ T6096] gre0: entered allmulticast mode [ 63.185452][ T6096] gretap0: left promiscuous mode [ 63.185467][ T6096] gretap0: entered allmulticast mode [ 63.187544][ T6096] erspan0: left promiscuous mode [ 63.187560][ T6096] erspan0: entered allmulticast mode [ 63.188542][ T6096] ip_vti0: left promiscuous mode [ 63.188552][ T6096] ip_vti0: entered allmulticast mode [ 63.189127][ T6096] ip6_vti0: left promiscuous mode [ 63.189136][ T6096] ip6_vti0: entered allmulticast mode [ 63.189754][ T6096] sit0: left promiscuous mode [ 63.189763][ T6096] sit0: entered allmulticast mode [ 63.193295][ T6096] ip6tnl0: left promiscuous mode [ 63.193307][ T6096] ip6tnl0: entered allmulticast mode [ 63.194152][ T6096] ip6gre0: left promiscuous mode [ 63.194162][ T6096] ip6gre0: entered allmulticast mode [ 63.195192][ T6096] syz_tun: left promiscuous mode [ 63.195208][ T6096] syz_tun: entered allmulticast mode [ 63.197051][ T6096] ip6gretap0: left promiscuous mode [ 63.197067][ T6096] ip6gretap0: entered allmulticast mode [ 63.198568][ T6096] vcan0: left promiscuous mode [ 63.198584][ T6096] vcan0: entered allmulticast mode [ 63.199439][ T6096] bond0: left promiscuous mode [ 63.199622][ T6096] bond0: entered allmulticast mode [ 63.199655][ T6096] bond_slave_0: entered allmulticast mode [ 63.199666][ T6096] bond_slave_1: entered allmulticast mode [ 63.200421][ T6096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.200974][ T6096] team0: left promiscuous mode [ 63.201233][ T6096] team0: entered allmulticast mode [ 63.201246][ T6096] team_slave_0: entered allmulticast mode [ 63.201260][ T6096] team_slave_1: entered allmulticast mode [ 63.201909][ T6096] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.202677][ T6096] dummy0: left promiscuous mode [ 63.202693][ T6096] dummy0: entered allmulticast mode [ 63.204138][ T6096] nlmon0: left promiscuous mode [ 63.204153][ T6096] nlmon0: entered allmulticast mode [ 63.204774][ T6096] batadv0: left promiscuous mode [ 63.204783][ T6096] batadv0: entered allmulticast mode [ 63.205490][ T6096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.205938][ T6096] vxcan0: left promiscuous mode [ 63.205948][ T6096] vxcan0: entered allmulticast mode [ 63.207114][ T6096] vxcan1: left promiscuous mode [ 63.207129][ T6096] vxcan1: entered allmulticast mode [ 63.207990][ T6096] veth0: left promiscuous mode [ 63.208004][ T6096] veth0: entered allmulticast mode [ 63.208889][ T6096] veth1: left promiscuous mode [ 63.208904][ T6096] veth1: entered allmulticast mode [ 63.212440][ T6096] wg0: left promiscuous mode [ 63.212451][ T6096] wg0: entered allmulticast mode [ 63.219333][ T6096] wg1: left promiscuous mode [ 63.219353][ T6096] wg1: entered allmulticast mode [ 63.223152][ T6096] wg2: left promiscuous mode [ 63.223168][ T6096] wg2: entered allmulticast mode [ 63.224313][ T6096] veth0_to_bridge: left promiscuous mode [ 63.224329][ T6096] veth0_to_bridge: entered allmulticast mode [ 63.226704][ T6096] bridge_slave_0: left promiscuous mode [ 63.226721][ T6096] bridge_slave_0: entered allmulticast mode [ 63.227135][ T6096] veth1_to_bridge: left promiscuous mode [ 63.227143][ T6096] veth1_to_bridge: entered allmulticast mode [ 63.227624][ T6096] bridge_slave_1: left promiscuous mode [ 63.227661][ T6096] bridge_slave_1: entered allmulticast mode [ 63.228084][ T6096] veth0_to_bond: left promiscuous mode [ 63.228096][ T6096] veth0_to_bond: entered allmulticast mode [ 63.229008][ T6096] bond_slave_0: left promiscuous mode [ 63.235684][ T6100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.60'. [ 63.241095][ T6096] bond0: (slave bond_slave_0): Releasing backup interface [ 63.244932][ T6096] veth1_to_bond: left promiscuous mode [ 63.244947][ T6096] veth1_to_bond: entered allmulticast mode [ 63.245690][ T6096] bond_slave_1: left promiscuous mode [ 63.253593][ T6096] bond0: (slave bond_slave_1): Releasing backup interface [ 63.260904][ T6096] veth0_to_team: left promiscuous mode [ 63.260921][ T6096] veth0_to_team: entered allmulticast mode [ 63.262089][ T6096] team_slave_0: left promiscuous mode [ 63.264881][ T6096] team0: Port device team_slave_0 removed [ 63.265173][ T6096] veth1_to_team: left promiscuous mode [ 63.265186][ T6096] veth1_to_team: entered allmulticast mode [ 63.266233][ T6096] team_slave_1: left promiscuous mode [ 63.269639][ T6096] team0: Port device team_slave_1 removed [ 63.270072][ T6096] veth0_to_batadv: left promiscuous mode [ 63.270085][ T6096] veth0_to_batadv: entered allmulticast mode [ 63.271060][ T6096] batadv_slave_0: left promiscuous mode [ 63.271073][ T6096] batadv_slave_0: entered allmulticast mode [ 63.271651][ T6096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.271723][ T6096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.271733][ T6096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.273561][ T6096] veth1_to_batadv: left promiscuous mode [ 63.273572][ T6096] veth1_to_batadv: entered allmulticast mode [ 63.274112][ T6096] batadv_slave_1: left promiscuous mode [ 63.274121][ T6096] batadv_slave_1: entered allmulticast mode [ 63.274507][ T6096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.274548][ T6096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.274555][ T6096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.275801][ T6096] xfrm0: left promiscuous mode [ 63.275812][ T6096] xfrm0: entered allmulticast mode [ 63.276672][ T6096] veth0_to_hsr: left promiscuous mode [ 63.276687][ T6096] veth0_to_hsr: entered allmulticast mode [ 63.277557][ T6096] hsr_slave_0: entered allmulticast mode [ 63.277904][ T6096] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 63.278340][ T6102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.61'. [ 63.301195][ T6099] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 63.448481][ T6104] netlink: 'syz.0.62': attribute type 4 has an invalid length. [ 63.533214][ T6110] FAULT_INJECTION: forcing a failure. [ 63.533214][ T6110] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 63.533241][ T6110] CPU: 3 UID: 0 PID: 6110 Comm: syz.3.64 Not tainted syzkaller #0 PREEMPT(full) [ 63.533253][ T6110] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.533259][ T6110] Call Trace: [ 63.533263][ T6110] [ 63.533268][ T6110] dump_stack_lvl+0x100/0x190 [ 63.533295][ T6110] should_fail_ex.cold+0x5/0xa [ 63.533311][ T6110] _copy_from_user+0x2e/0xd0 [ 63.533335][ T6110] get_compat_msghdr+0xb3/0x480 [ 63.533363][ T6110] ? __pfx_get_compat_msghdr+0x10/0x10 [ 63.533394][ T6110] ___sys_sendmsg+0x1b6/0x1e0 [ 63.533407][ T6110] ? __pfx____sys_sendmsg+0x10/0x10 [ 63.533424][ T6110] ? find_held_lock+0x2b/0x80 [ 63.533450][ T6110] __sys_sendmsg+0x160/0x210 [ 63.533470][ T6110] ? __pfx___sys_sendmsg+0x10/0x10 [ 63.533498][ T6110] ? __pfx_ksys_write+0x10/0x10 [ 63.533513][ T6110] __do_fast_syscall_32+0x13a/0x8b0 [ 63.533534][ T6110] ? lockdep_hardirqs_on+0x7d/0x110 [ 63.533551][ T6110] do_fast_syscall_32+0x32/0x70 [ 63.533568][ T6110] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 63.533582][ T6110] RIP: 0023:0xf7ff4fec [ 63.533595][ T6110] Code: Unable to access opcode bytes at 0xf7ff4fc2. [ 63.533599][ T6110] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 63.533610][ T6110] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000d00 [ 63.533617][ T6110] RDX: 0000000008040000 RSI: 0000000000000000 RDI: 0000000000000000 [ 63.533623][ T6110] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 63.533629][ T6110] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 63.533635][ T6110] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 63.533647][ T6110] [ 63.692644][ T6124] netlink: 'syz.2.72': attribute type 1 has an invalid length. [ 63.703775][ T6124] bond1: entered promiscuous mode [ 63.704152][ T6124] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.871826][ T5752] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 64.556606][ T6172] netlink: 12 bytes leftover after parsing attributes in process `syz.1.80'. [ 64.628846][ T5832] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 64.779363][ T5832] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 64.780169][ T5832] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 64.780187][ T5832] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 64.780205][ T5832] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.781939][ T6165] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 64.783598][ T5832] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 65.178680][ T10] usb 8-1: USB disconnect, device number 3 [ 65.204223][ T6206] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(838860804.0.0), cmd(3) [ 65.265523][ T6212] libceph: resolve '.RHe'ˠ/1C~1WexEAeSb{~R' (ret=-3): failed [ 65.284377][ T6212] bond2: invalid ARP target 0.0.0.0 specified for addition [ 65.284393][ T6212] bond2: option arp_ip_target: invalid value (0) [ 65.293840][ T6212] bond2 (unregistering): Released all slaves [ 65.731865][ T6245] overlayfs: failed to resolve './file0': -2 [ 65.857913][ T6254] pim6reg: entered allmulticast mode [ 65.860309][ T6251] pim6reg: left allmulticast mode [ 66.131306][ T6261] FAULT_INJECTION: forcing a failure. [ 66.131306][ T6261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.131341][ T6261] CPU: 1 UID: 0 PID: 6261 Comm: syz.3.96 Not tainted syzkaller #0 PREEMPT(full) [ 66.131360][ T6261] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.131370][ T6261] Call Trace: [ 66.131377][ T6261] [ 66.131384][ T6261] dump_stack_lvl+0x100/0x190 [ 66.131411][ T6261] should_fail_ex.cold+0x5/0xa [ 66.131434][ T6261] _copy_from_user+0x2e/0xd0 [ 66.131456][ T6261] get_compat_msghdr+0xb3/0x480 [ 66.131484][ T6261] ? __pfx_get_compat_msghdr+0x10/0x10 [ 66.131518][ T6261] ___sys_sendmsg+0x1b6/0x1e0 [ 66.131539][ T6261] ? __pfx____sys_sendmsg+0x10/0x10 [ 66.131568][ T6261] ? find_held_lock+0x2b/0x80 [ 66.131603][ T6261] __sys_sendmsg+0x160/0x210 [ 66.131652][ T6261] ? __pfx___sys_sendmsg+0x10/0x10 [ 66.131682][ T6261] ? __pfx_ksys_write+0x10/0x10 [ 66.131707][ T6261] __do_fast_syscall_32+0x13a/0x8b0 [ 66.131732][ T6261] ? lockdep_hardirqs_on+0x7d/0x110 [ 66.131759][ T6261] do_fast_syscall_32+0x32/0x70 [ 66.131784][ T6261] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 66.131804][ T6261] RIP: 0023:0xf7ff4fec [ 66.131822][ T6261] Code: Unable to access opcode bytes at 0xf7ff4fc2. [ 66.131830][ T6261] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 66.131846][ T6261] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000d00 [ 66.131857][ T6261] RDX: 0000000008040000 RSI: 0000000000000000 RDI: 0000000000000000 [ 66.131867][ T6261] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 66.131877][ T6261] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 66.131886][ T6261] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 66.131909][ T6261] [ 66.446396][ T30] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 66.605519][ T6269] syz.1.100 uses obsolete (PF_INET,SOCK_PACKET) [ 66.607109][ T30] usb 8-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 66.608087][ T30] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.608112][ T30] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.938837][ T5091] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 67.090928][ T6285] process 'syz.0.103' launched './file0' with NULL argv: empty string added [ 67.119362][ T5091] usb 7-1: Using ep0 maxpacket: 8 [ 67.122675][ T5091] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 67.123528][ T5091] usb 7-1: config index 0 descriptor too short (expected 30061, got 27) [ 67.123542][ T5091] usb 7-1: config 35 has too many interfaces: 120, using maximum allowed: 32 [ 67.123552][ T5091] usb 7-1: config 35 has an invalid descriptor of length 0, skipping remainder of the config [ 67.123561][ T5091] usb 7-1: config 35 has 0 interfaces, different from the descriptor's value: 120 [ 67.123577][ T5091] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.191554][ T30] wacom 0003:056A:033B.0003: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 67.208359][ T30] wacom 0003:056A:033B.0003: hidraw1: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.3-1/input0 [ 67.209430][ T30] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/0003:056A:033B.0003/input/input6 [ 67.336675][ T5832] usb 7-1: USB disconnect, device number 4 [ 67.356407][ T25] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 67.526835][ T25] usb 5-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 67.540200][ T25] usb 5-1: config 0 has an invalid interface number: 205 but max is 0 [ 67.540253][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 67.540263][ T25] usb 5-1: config 0 has no interface number 0 [ 67.540277][ T25] usb 5-1: config 0 interface 205 has no altsetting 0 [ 67.542365][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.542378][ T25] usb 5-1: Product: syz [ 67.542385][ T25] usb 5-1: Manufacturer: syz [ 67.542392][ T25] usb 5-1: SerialNumber: syz [ 67.545526][ T25] usb 5-1: config 0 descriptor?? [ 67.556053][ T25] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 67.557807][ T25] dvb-usb: bulk message failed: -22 (3/0) [ 67.592810][ T25] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 67.594180][ T25] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 67.594210][ T25] usb 5-1: media controller created [ 67.596025][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 67.661549][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 67.661609][ T25] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 67.671841][ T25] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input9 [ 67.681160][ T25] dvb-usb: schedule remote query interval to 150 msecs. [ 67.681207][ T25] dvb-usb: bulk message failed: -22 (3/0) [ 67.696395][ T25] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 67.837977][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 67.838001][ T25] dvb-usb: error while querying for an remote control event. [ 68.007879][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 68.007899][ T25] dvb-usb: error while querying for an remote control event. [ 68.176368][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 68.176388][ T25] dvb-usb: error while querying for an remote control event. [ 68.204233][ T25] usb 8-1: USB disconnect, device number 4 [ 68.207297][ T6281] syz.3.97 (6281) used greatest stack depth: 19496 bytes left [ 68.281908][ T6301] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.16384.0), cmd(3) [ 68.346580][ T5832] dvb-usb: bulk message failed: -22 (1/0) [ 68.346605][ T5832] dvb-usb: error while querying for an remote control event. [ 68.517835][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 68.517862][ T25] dvb-usb: error while querying for an remote control event. [ 68.606883][ T6309] ubi0: attaching mtd0 [ 68.606897][ T6309] ubi0 error: ubi_attach_mtd_dev: bad VID header (16) or data offsets (80) [ 68.686908][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 68.686926][ T25] dvb-usb: error while querying for an remote control event. [ 68.710859][ T6312] nvme nvme0: rdma_resolve_addr failed (-19). [ 68.856550][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 68.856571][ T25] dvb-usb: error while querying for an remote control event. [ 68.920002][ T6319] FAULT_INJECTION: forcing a failure. [ 68.920002][ T6319] name failslab, interval 1, probability 0, space 0, times 0 [ 68.920023][ T6319] CPU: 0 UID: 0 PID: 6319 Comm: syz.2.113 Not tainted syzkaller #0 PREEMPT(full) [ 68.920040][ T6319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.920047][ T6319] Call Trace: [ 68.920052][ T6319] [ 68.920058][ T6319] dump_stack_lvl+0x100/0x190 [ 68.920080][ T6319] should_fail_ex.cold+0x5/0xa [ 68.920096][ T6319] should_failslab+0xc2/0x120 [ 68.920176][ T6319] __kmalloc_cache_noprof+0x91/0x6d0 [ 68.920203][ T6319] ? vhost_task_create+0xee/0x370 [ 68.920220][ T6319] ? __pfx_vhost_worker_killed+0x10/0x10 [ 68.920240][ T6319] ? __pfx_vhost_run_work_list+0x10/0x10 [ 68.920259][ T6319] vhost_task_create+0xee/0x370 [ 68.920276][ T6319] ? __pfx_vhost_task_create+0x10/0x10 [ 68.920297][ T6319] ? __pfx_vhost_task_fn+0x10/0x10 [ 68.920313][ T6319] ? snprintf+0xc7/0x100 [ 68.920332][ T6319] vhost_task_worker_create+0x8d/0x260 [ 68.920343][ T6319] ? __pfx_vhost_task_worker_create+0x10/0x10 [ 68.920353][ T6319] ? lockdep_init_map_type+0x5c/0x250 [ 68.920370][ T6319] ? lockdep_init_map_type+0x5c/0x250 [ 68.920387][ T6319] vhost_worker_create+0x240/0x300 [ 68.920404][ T6319] ? __pfx_vhost_worker_create+0x10/0x10 [ 68.920421][ T6319] ? vhost_dev_set_owner+0x190/0xa30 [ 68.920434][ T6319] vhost_dev_set_owner+0x719/0xa30 [ 68.920449][ T6319] vhost_net_ioctl+0xfa6/0x1910 [ 68.920462][ T6319] ? do_vfs_ioctl+0x226/0x13e0 [ 68.920481][ T6319] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 68.920492][ T6319] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 68.920511][ T6319] ? __fget_files+0x34/0x3d0 [ 68.920524][ T6319] ? find_held_lock+0x2b/0x80 [ 68.920536][ T6319] ? __fget_files+0x215/0x3d0 [ 68.920546][ T6319] ? hook_file_ioctl_common+0x140/0x440 [ 68.920567][ T6319] ? __fget_files+0x21f/0x3d0 [ 68.920580][ T6319] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 68.920595][ T6319] compat_ptr_ioctl+0x6e/0xa0 [ 68.920616][ T6319] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 68.920634][ T6319] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 68.920657][ T6319] __do_fast_syscall_32+0x13a/0x8b0 [ 68.920677][ T6319] ? lockdep_hardirqs_on+0x7d/0x110 [ 68.920696][ T6319] do_fast_syscall_32+0x32/0x70 [ 68.920716][ T6319] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 68.920731][ T6319] RIP: 0023:0xf7f36fec [ 68.920749][ T6319] Code: Unable to access opcode bytes at 0xf7f36fc2. [ 68.920754][ T6319] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 68.920765][ T6319] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000000af01 [ 68.920772][ T6319] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 68.920779][ T6319] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 68.920784][ T6319] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 68.920791][ T6319] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 68.920804][ T6319] [ 69.016524][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 69.016549][ T25] dvb-usb: error while querying for an remote control event. [ 69.156415][ T5788] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 69.186435][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 69.186468][ T25] dvb-usb: error while querying for an remote control event. [ 69.306951][ T5788] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 69.307841][ T5788] usb 6-1: config index 0 descriptor too short (expected 65000, got 45) [ 69.309383][ T5788] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.309395][ T5788] usb 6-1: Product: syz [ 69.309402][ T5788] usb 6-1: Manufacturer: syz [ 69.309409][ T5788] usb 6-1: SerialNumber: syz [ 69.346406][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 69.346427][ T25] dvb-usb: error while querying for an remote control event. [ 69.506492][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 69.506524][ T25] dvb-usb: error while querying for an remote control event. [ 69.565194][ T6325] 9p: p9: multiple sources not supported [ 69.573189][ T5788] rtl8150 6-1:1.0: couldn't reset the device [ 69.573349][ T5788] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 69.583845][ T5788] usb 6-1: USB disconnect, device number 3 [ 69.626455][ T6327] o2cb: This node has not been configured. [ 69.626468][ T6327] o2cb: Cluster check failed. Fix errors before retrying. [ 69.626498][ T6327] (syz.3.116,6327,2):user_dlm_register:674 ERROR: status = -22 [ 69.626521][ T6327] (syz.3.116,6327,2):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "domain0" [ 69.666395][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 69.666416][ T25] dvb-usb: error while querying for an remote control event. [ 69.830667][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 69.832066][ T25] dvb-usb: error while querying for an remote control event. [ 69.911434][ T25] usb 5-1: USB disconnect, device number 5 [ 70.223793][ T25] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 70.625565][ T6334] e1000e 0000:00:02.0 eth1: removed PHC [ 70.815566][ T6334] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 70.833550][ T6354] overlayfs: workdir and upperdir must reside under the same mount [ 70.863874][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.863916][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.882780][ T1592] cfg80211: failed to load regulatory.db [ 70.887255][ T6354] loop5: detected capacity change from 0 to 7 [ 70.907052][ T6354] Dev loop5: unable to read RDB block 7 [ 70.907072][ T6354] loop5: AHDI p1 p2 p3 [ 70.907083][ T6354] loop5: partition table partially beyond EOD, truncated [ 70.908348][ T6354] loop5: p1 start 1818582900 is beyond EOD, truncated [ 70.908361][ T6354] loop5: p3 start 335544320 is beyond EOD, truncated [ 71.040085][ T6361] __nla_validate_parse: 66 callbacks suppressed [ 71.040116][ T6361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.122'. [ 71.423254][ T6335] block nbd1: shutting down sockets [ 71.532037][ T6387] ubi0: attaching mtd0 [ 71.532050][ T6387] ubi0 error: ubi_attach_mtd_dev: bad VID header (16) or data offsets (80) [ 71.862985][ T6409] Bluetooth: Error in BCSP hdr checksum [ 71.869997][ T6411] ubi0: attaching mtd0 [ 71.870012][ T6411] ubi0 error: ubi_attach_mtd_dev: bad VID header (2322277) or data offsets (2322341) [ 73.896439][ T5752] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 73.896450][ T5751] Bluetooth: hci4: command 0x1003 tx timeout [ 73.957171][ T6419] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 73.964932][ T6419] netlink: 4 bytes leftover after parsing attributes in process `syz.0.140'. [ 74.013782][ T6418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.133'. [ 74.013801][ T6418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.133'. [ 74.013811][ T6418] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 74.159608][ T6433] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:21 [ 75.015270][ T6447] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 75.059420][ T6447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.141'. [ 75.108202][ T6454] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.12800.0), cmd(9) [ 75.163835][ T6459] Bluetooth: MGMT ver 1.23 [ 75.167195][ T6459] loop8: detected capacity change from 0 to 8 [ 75.171005][ T6459] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 75.171021][ T6459] loop8: partition table partially beyond EOD, truncated [ 75.173517][ T6459] loop8: p1 size 2645487272 extends beyond EOD, truncated [ 75.305734][ T6461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.139'. [ 75.466011][ T6463] fuse: Unknown parameter '0x0000000000000003' [ 75.472150][ T6463] dvmrp6: entered allmulticast mode [ 75.657415][ T6468] ubi0: attaching mtd0 [ 75.657429][ T6468] ubi0 error: ubi_attach_mtd_dev: bad VID header (16) or data offsets (80) [ 75.659128][ T6470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.149'. [ 75.662620][ T6470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.149'. [ 75.825802][ T6477] netlink: 'syz.0.151': attribute type 4 has an invalid length. [ 75.825819][ T6477] netlink: 152 bytes leftover after parsing attributes in process `syz.0.151'. [ 75.829616][ T6477] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 77.210603][ T6492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.154'. [ 77.218841][ T6492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.154'. [ 77.224212][ T6492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.154'. [ 77.726873][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 77.792964][ T6505] syzkaller0: entered promiscuous mode [ 77.792978][ T6505] syzkaller0: entered allmulticast mode [ 77.937041][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 77.966847][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 78.156650][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 78.166820][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 78.196328][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 78.216694][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 78.226870][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 78.306424][ T5091] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 78.463440][ T5091] usb 6-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 78.491002][ T5091] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.493196][ T5091] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.186861][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 79.236352][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 79.741068][ T5091] wacom 0003:056A:033B.0004: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 79.746157][ T5091] wacom 0003:056A:033B.0004: hidraw1: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.1-1/input0 [ 79.884223][ T6529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.163'. [ 79.950824][ T5091] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/0003:056A:033B.0004/input/input10 [ 80.575198][ T6533] o2cb: This node has not been configured. [ 80.575208][ T6533] o2cb: Cluster check failed. Fix errors before retrying. [ 80.575219][ T6533] (syz.0.165,6533,1):user_dlm_register:674 ERROR: status = -22 [ 80.575233][ T6533] (syz.0.165,6533,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "domain0" [ 80.797428][ T6537] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 80.915773][ T6537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.167'. [ 81.111832][ T6544] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 81.120944][ T6544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.169'. [ 81.464696][ T6555] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 81.494948][ T6555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.180'. [ 81.699569][ T5832] usb 6-1: USB disconnect, device number 4 [ 82.086587][ T5832] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 82.227776][ T5832] usb 6-1: device descriptor read/64, error -71 [ 82.476398][ T5832] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 82.606450][ T5832] usb 6-1: device descriptor read/64, error -71 [ 82.721119][ T5832] usb usb6-port1: attempt power cycle [ 83.056483][ T5832] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 83.077771][ T5832] usb 6-1: device descriptor read/8, error -71 [ 83.326399][ T5832] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 83.347685][ T5832] usb 6-1: device descriptor read/8, error -71 [ 83.457085][ T5832] usb usb6-port1: unable to enumerate USB device [ 84.755362][ T6582] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 84.823779][ T6582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.178'. [ 84.920350][ T6589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.183'. [ 84.969194][ T5751] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.973368][ T5751] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.974529][ T5751] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.978410][ T5751] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.979143][ T5751] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.990914][ T6587] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 85.179245][ T5091] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 85.215566][ T6605] overlayfs: failed to resolve './file0': -2 [ 85.327190][ T5091] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 85.328050][ T5091] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 85.328068][ T5091] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 85.328087][ T5091] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.332794][ T5091] spcp8x5 6-1:1.0: SPCP8x5 converter detected [ 85.339655][ T5091] usb 6-1: SPCP8x5 converter now attached to ttyUSB0 [ 85.448814][ T6592] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.448894][ T6592] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.448954][ T6592] bridge_slave_0: entered allmulticast mode [ 85.449692][ T6592] bridge_slave_0: entered promiscuous mode [ 85.460658][ T6592] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.460780][ T6592] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.460886][ T6592] bridge_slave_1: entered allmulticast mode [ 85.462049][ T6592] bridge_slave_1: entered promiscuous mode [ 85.486907][ T6592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.488504][ T6592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.513694][ T6592] team0: Port device team_slave_0 added [ 85.515773][ T6592] team0: Port device team_slave_1 added [ 85.534615][ T6592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.534628][ T6592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.534640][ T6592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.535816][ T6592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.535827][ T6592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.535840][ T6592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.579519][ T6592] hsr_slave_0: entered promiscuous mode [ 85.580550][ T6592] hsr_slave_1: entered promiscuous mode [ 85.581287][ T6592] debugfs: 'hsr0' already exists in 'hsr' [ 85.581300][ T6592] Cannot create hsr debugfs directory [ 85.710367][ T6591] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 85.712972][ T6591] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 85.715792][ T6591] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 85.778657][ T6592] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.782157][ T6592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.783296][ T6592] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.787570][ T6592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.788363][ T6592] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.792045][ T6592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.793659][ T6592] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.798677][ T6592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.814126][ T6591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.184'. [ 85.823763][ T6591] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 85.834836][ T6592] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.835410][ T6592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.835515][ T6592] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.835583][ T6592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.888321][ T6592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.901738][ T6592] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.929251][ T6590] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 85.930312][ T1592] usb 6-1: USB disconnect, device number 9 [ 85.940372][ T1592] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 85.943674][ T1592] spcp8x5 6-1:1.0: device disconnected [ 85.948418][ T788] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.003330][ T788] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.003390][ T788] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.029482][ T6592] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.267365][ T6592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.322301][ T6640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.191'. [ 86.323397][ T6640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.191'. [ 86.323674][ T6640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.191'. [ 86.324307][ T6640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.191'. [ 86.499918][ T6654] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 86.500373][ T6592] veth0_vlan: entered promiscuous mode [ 86.508110][ T6654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.194'. [ 86.509123][ T6592] veth1_vlan: entered promiscuous mode [ 86.557993][ T6592] veth0_macvtap: entered promiscuous mode [ 86.560883][ T6592] veth1_macvtap: entered promiscuous mode [ 86.572764][ T6592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.598199][ T6592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.621897][ T5792] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.623697][ T5792] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.624051][ T5792] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.670522][ T6658] 9p: Bad value for 'rfdno' [ 86.686547][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.686568][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.704869][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.741310][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.741324][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.874078][ T43] audit: type=1804 audit(1789820197.239:2): pid=6666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.199" name="/newroot/60/file0" dev="tmpfs" ino=345 res=1 errno=0 [ 87.016524][ T5752] Bluetooth: hci4: command tx timeout [ 87.056604][ T42] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 87.099330][ T6673] netlink: 16 bytes leftover after parsing attributes in process `syz.0.202'. [ 87.206853][ T42] usb 9-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 87.207716][ T42] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.207740][ T42] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.257318][ T5091] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 87.570434][ T5091] usb 8-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 87.590405][ T5091] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.603679][ T6677] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 87.654408][ T6677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.203'. [ 88.128064][ T5091] net1080 8-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.3-1, NetChip TurboCONNECT, 06:e3:8e:d4:51:17 [ 88.169041][ T42] wacom 0003:056A:033B.0005: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 88.186314][ T42] wacom 0003:056A:033B.0005: hidraw1: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.4-1/input0 [ 88.201243][ T42] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/0003:056A:033B.0005/input/input13 [ 88.576990][ T5819] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 88.603867][ T42] usb 8-1: USB disconnect, device number 5 [ 88.605495][ T42] net1080 8-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.3-1, NetChip TurboCONNECT [ 88.762575][ T5819] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 88.770447][ T5819] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.770486][ T5819] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 88.770506][ T5819] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 88.770537][ T5819] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.096634][ T5752] Bluetooth: hci4: command tx timeout [ 89.219005][ T5819] cxacru 6-1:1.0: send of cm 0x90 failed (-71) [ 89.225609][ T6718] cxacru 6-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 89.225625][ T6718] cxacru 6-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 89.227721][ T5819] usb 6-1: USB disconnect, device number 10 [ 89.330858][ T6717] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 89.343460][ T25] usb 9-1: USB disconnect, device number 2 [ 89.848125][ T6734] netlink: 'syz.1.217': attribute type 1 has an invalid length. [ 89.848141][ T6734] __nla_validate_parse: 1 callbacks suppressed [ 89.848148][ T6734] netlink: 220 bytes leftover after parsing attributes in process `syz.1.217'. [ 89.915315][ T6739] input: syz0 as /devices/virtual/input/input16 [ 90.048386][ T6742] lo: entered allmulticast mode [ 90.048779][ T6742] tunl0: entered allmulticast mode [ 90.049051][ T6742] gre0: entered allmulticast mode [ 90.049422][ T6742] gretap0: entered allmulticast mode [ 90.049679][ T6742] erspan0: entered allmulticast mode [ 90.049936][ T6742] ip_vti0: entered allmulticast mode [ 90.050271][ T6742] ip6_vti0: entered allmulticast mode [ 90.051005][ T6742] sit0: entered allmulticast mode [ 90.051357][ T6742] ip6tnl0: entered allmulticast mode [ 90.051732][ T6742] ip6gre0: entered allmulticast mode [ 90.052051][ T6742] syz_tun: entered allmulticast mode [ 90.052356][ T6742] ip6gretap0: entered allmulticast mode [ 90.052640][ T6742] bridge0: entered allmulticast mode [ 90.053019][ T6742] vcan0: entered allmulticast mode [ 90.053333][ T6742] bond0: entered allmulticast mode [ 90.053345][ T6742] bond_slave_0: entered allmulticast mode [ 90.053354][ T6742] bond_slave_1: entered allmulticast mode [ 90.053790][ T6742] team0: entered allmulticast mode [ 90.053799][ T6742] team_slave_0: entered allmulticast mode [ 90.053808][ T6742] team_slave_1: entered allmulticast mode [ 90.054237][ T6742] dummy0: entered allmulticast mode [ 90.055428][ T6742] nlmon0: entered allmulticast mode [ 90.055945][ T6742] batadv0: entered allmulticast mode [ 90.058875][ T6742] vxcan0: entered allmulticast mode [ 90.059263][ T6742] vxcan1: entered allmulticast mode [ 90.059567][ T6742] veth0: entered allmulticast mode [ 90.059840][ T6742] veth1: entered allmulticast mode [ 90.060099][ T6742] wg0: entered allmulticast mode [ 90.060479][ T6742] wg1: entered allmulticast mode [ 90.060815][ T6742] wg2: entered allmulticast mode [ 90.061123][ T6742] veth0_to_bridge: entered allmulticast mode [ 90.061626][ T6742] bridge_slave_0: left promiscuous mode [ 90.061718][ T6742] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.068267][ T6742] veth1_to_bridge: entered allmulticast mode [ 90.068820][ T6742] bridge_slave_1: left promiscuous mode [ 90.069239][ T6742] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.074365][ T6742] veth0_to_bond: entered allmulticast mode [ 90.079282][ T6742] bond0: (slave bond_slave_0): Releasing backup interface [ 90.088627][ T6742] veth1_to_bond: entered allmulticast mode [ 90.094142][ T6742] bond0: (slave bond_slave_1): Releasing backup interface [ 90.101563][ T6742] veth0_to_team: entered allmulticast mode [ 90.106078][ T6742] team0: Port device team_slave_0 removed [ 90.109085][ T6742] veth1_to_team: entered allmulticast mode [ 90.117076][ T6742] team0: Port device team_slave_1 removed [ 90.117293][ T6742] veth0_to_batadv: entered allmulticast mode [ 90.118298][ T6742] batadv_slave_0: entered allmulticast mode [ 90.118487][ T6742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.118499][ T6742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.124427][ T6742] veth1_to_batadv: entered allmulticast mode [ 90.124760][ T6742] batadv_slave_1: entered allmulticast mode [ 90.124925][ T6742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.124936][ T6742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.128191][ T6742] xfrm0: entered allmulticast mode [ 90.128502][ T6742] veth0_to_hsr: entered allmulticast mode [ 90.128770][ T6742] hsr_slave_0: entered allmulticast mode [ 90.129020][ T6742] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 90.158835][ T6742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.221'. [ 90.465530][ T6757] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 90.500885][ T6757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.226'. [ 90.665589][ T25] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 90.778731][ T6764] netlink: 'syz.3.228': attribute type 1 has an invalid length. [ 90.893275][ T6766] netlink: 12 bytes leftover after parsing attributes in process `syz.3.229'. [ 90.893296][ T6766] bridge_slave_0: default FDB implementation only supports local addresses [ 90.976998][ T25] usb 5-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 90.978193][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.978221][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.096519][ T990] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 91.186397][ T5752] Bluetooth: hci4: command tx timeout [ 91.248935][ T990] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 91.249798][ T990] usb 9-1: config index 0 descriptor too short (expected 65000, got 45) [ 91.253521][ T990] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.253535][ T990] usb 9-1: Product: syz [ 91.253543][ T990] usb 9-1: Manufacturer: syz [ 91.253551][ T990] usb 9-1: SerialNumber: syz [ 91.407815][ T62] kernel read not supported for file /dsp (pid: 62 comm: kworker/3:1) [ 91.437982][ T6770] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 91.467790][ T6770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.230'. [ 91.592800][ T990] rtl8150 9-1:1.0: couldn't reset the device [ 91.592971][ T990] rtl8150 9-1:1.0: probe with driver rtl8150 failed with error -5 [ 91.692706][ T990] usb 9-1: USB disconnect, device number 3 [ 91.774546][ T25] wacom 0003:056A:033B.0006: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 91.805722][ T25] wacom 0003:056A:033B.0006: hidraw1: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.0-1/input0 [ 91.814101][ T25] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/0003:056A:033B.0006/input/input17 [ 92.529104][ T6788] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 92.533586][ T6788] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 92.536941][ T6788] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 93.209548][ T1592] usb 5-1: USB disconnect, device number 6 [ 93.243638][ T6800] capability: warning: `syz.4.236' uses deprecated v2 capabilities in a way that may be insecure [ 93.256975][ T5752] Bluetooth: hci4: command tx timeout [ 96.894364][ T6841] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 96.904361][ T6841] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 96.904831][ T6841] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 98.376773][ T6868] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 98.403437][ T6868] netlink: 4 bytes leftover after parsing attributes in process `syz.3.257'. [ 98.493246][ T6873] netlink: 'syz.3.259': attribute type 61 has an invalid length. [ 99.034365][ T6887] netlink: 16 bytes leftover after parsing attributes in process `syz.3.262'. [ 100.580492][ T6896] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 100.582496][ T6898] : renamed from lo (while UP) [ 100.735265][ T6896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.264'. [ 101.121352][ T6905] netlink: 'syz.3.267': attribute type 23 has an invalid length. [ 101.777010][ T6916] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 101.804340][ T6916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.272'. [ 101.848658][ T6917] fuse: Bad value for 'fd' [ 102.020545][ T6913] netlink: 4 bytes leftover after parsing attributes in process `syz.3.271'. [ 102.436180][ T6913] syz.3.271 (6913) used greatest stack depth: 19256 bytes left [ 102.750596][ T6931] netlink: 16 bytes leftover after parsing attributes in process `syz.4.276'. [ 102.764527][ T6932] netlink: 'syz.3.277': attribute type 4 has an invalid length. [ 103.095389][ T6936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.278'. [ 103.137813][ T6935] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 103.944819][ T6946] faux_driver vgem: [drm] Unknown color mode 7; guessing buffer size. [ 103.998365][ T6956] FAULT_INJECTION: forcing a failure. [ 103.998365][ T6956] name failslab, interval 1, probability 0, space 0, times 0 [ 103.998386][ T6956] CPU: 1 UID: 0 PID: 6956 Comm: syz.3.284 Not tainted syzkaller #0 PREEMPT(full) [ 103.998400][ T6956] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.998407][ T6956] Call Trace: [ 103.998411][ T6956] [ 103.998416][ T6956] dump_stack_lvl+0x100/0x190 [ 103.998436][ T6956] should_fail_ex.cold+0x5/0xa [ 103.998451][ T6956] should_failslab+0xc2/0x120 [ 103.998467][ T6956] kmem_cache_alloc_noprof+0x92/0x6a0 [ 103.998481][ T6956] ? do_getname+0x35/0x390 [ 103.998500][ T6956] do_getname+0x35/0x390 [ 103.998517][ T6956] __ia32_sys_mkdirat+0x77/0xc0 [ 103.998532][ T6956] __do_fast_syscall_32+0x13a/0x8b0 [ 103.998574][ T6956] do_fast_syscall_32+0x32/0x70 [ 103.998591][ T6956] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 103.998606][ T6956] RIP: 0023:0xf7ff4fec [ 103.998618][ T6956] Code: Unable to access opcode bytes at 0xf7ff4fc2. [ 103.998624][ T6956] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000128 [ 103.998635][ T6956] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000040 [ 103.998642][ T6956] RDX: 00000000000001c2 RSI: 0000000000000000 RDI: 0000000000000000 [ 103.998648][ T6956] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 103.998654][ T6956] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 103.998665][ T6956] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 103.998678][ T6956] [ 103.999139][ T6956] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 103.999153][ T6956] overlayfs: missing 'lowerdir' [ 104.001698][ T6956] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 104.001713][ T6956] overlayfs: missing 'lowerdir' [ 104.047061][ T6958] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 104.075152][ T6958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.283'. [ 104.942053][ T6978] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 105.648169][ T6994] 9p: Bad value for 'rfdno' [ 105.777431][ T42] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 106.056620][ T42] usb 9-1: Using ep0 maxpacket: 32 [ 106.057262][ T42] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 106.058539][ T42] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.058558][ T42] usb 9-1: config 0 has no interfaces? [ 106.065194][ T42] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 106.065216][ T42] usb 9-1: Product: syz [ 106.065226][ T42] usb 9-1: Manufacturer: syz [ 106.065235][ T42] usb 9-1: SerialNumber: syz [ 106.068023][ T42] usb 9-1: config 0 descriptor?? [ 106.186982][ T7017] netlink: 76 bytes leftover after parsing attributes in process `syz.0.298'. [ 106.271394][ T7021] fuse: Bad value for 'fd' [ 106.310422][ T7008] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 106.325634][ T7008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.296'. [ 106.539284][ T9] usb 9-1: USB disconnect, device number 4 [ 107.436590][ T7058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.310'. [ 107.624489][ T7057] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 108.677961][ T7080] FAULT_INJECTION: forcing a failure. [ 108.677961][ T7080] name failslab, interval 1, probability 0, space 0, times 0 [ 108.677982][ T7080] CPU: 2 UID: 0 PID: 7080 Comm: syz.4.317 Not tainted syzkaller #0 PREEMPT(full) [ 108.677994][ T7080] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 108.678001][ T7080] Call Trace: [ 108.678005][ T7080] [ 108.678009][ T7080] dump_stack_lvl+0x100/0x190 [ 108.678027][ T7080] should_fail_ex.cold+0x5/0xa [ 108.678041][ T7080] should_failslab+0xc2/0x120 [ 108.678056][ T7080] kmem_cache_alloc_noprof+0x92/0x6a0 [ 108.678069][ T7080] ? skb_clone+0x190/0x400 [ 108.678086][ T7080] skb_clone+0x190/0x400 [ 108.678101][ T7080] netlink_deliver_tap+0xaed/0xcc0 [ 108.678116][ T7080] netlink_unicast+0x6a5/0x850 [ 108.678131][ T7080] ? __pfx_netlink_unicast+0x10/0x10 [ 108.678147][ T7080] netlink_ack+0x655/0xb80 [ 108.678164][ T7080] netlink_rcv_skb+0x333/0x420 [ 108.678176][ T7080] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 108.678202][ T7080] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 108.678220][ T7080] ? ns_capable+0xd2/0xf0 [ 108.678239][ T7080] nfnetlink_rcv+0x1b3/0x440 [ 108.678254][ T7080] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 108.678270][ T7080] ? netlink_deliver_tap+0x1ae/0xcc0 [ 108.678284][ T7080] netlink_unicast+0x585/0x850 [ 108.678299][ T7080] ? __pfx_netlink_unicast+0x10/0x10 [ 108.678310][ T7080] ? aa_sk_perm+0x389/0xab0 [ 108.678330][ T7080] netlink_sendmsg+0x8b0/0xda0 [ 108.678345][ T7080] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.678359][ T7080] ? apparmor_socket_sendmsg+0x165/0x280 [ 108.678376][ T7080] ____sys_sendmsg+0xa4d/0xbe0 [ 108.678399][ T7080] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.678413][ T7080] ? __pfx_____sys_sendmsg+0x10/0x10 [ 108.678430][ T7080] ___sys_sendmsg+0x190/0x1e0 [ 108.678442][ T7080] ? __pfx____sys_sendmsg+0x10/0x10 [ 108.678459][ T7080] ? find_held_lock+0x2b/0x80 [ 108.678479][ T7080] __sys_sendmsg+0x160/0x210 [ 108.678494][ T7080] ? __pfx___sys_sendmsg+0x10/0x10 [ 108.678512][ T7080] ? __pfx_ksys_write+0x10/0x10 [ 108.678527][ T7080] __do_fast_syscall_32+0x13a/0x8b0 [ 108.678544][ T7080] ? lockdep_hardirqs_on+0x7d/0x110 [ 108.678561][ T7080] do_fast_syscall_32+0x32/0x70 [ 108.678578][ T7080] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 108.678592][ T7080] RIP: 0023:0xf7f32fec [ 108.678605][ T7080] Code: Unable to access opcode bytes at 0xf7f32fc2. [ 108.678610][ T7080] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 108.678621][ T7080] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 108.678627][ T7080] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 0000000000000000 [ 108.678634][ T7080] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 108.678640][ T7080] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 108.678646][ T7080] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 108.678659][ T7080] [ 108.829091][ T7084] capability: warning: `syz.4.318' uses 32-bit capabilities (legacy support in use) [ 108.873543][ T7084] Invalid logical block size (6) [ 109.114437][ T7097] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 109.126488][ T7097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.321'. [ 109.261227][ T7102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.323'. [ 109.335055][ T7108] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 109.362384][ T43] audit: type=1326 audit(1789820220.725:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7109 comm="syz.4.327" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x0 [ 109.414420][ T7113] xt_hashlimit: size too large, truncated to 1048576 [ 109.423743][ T7114] Illegal XDP return value 4294967274 on prog (id 42) dev N/A, expect packet loss! [ 109.454358][ T7116] cgroup: name respecified [ 109.485406][ T7124] netlink: 5 bytes leftover after parsing attributes in process `syz.1.331'. [ 109.485498][ T7124] 0{X: renamed from gretap0 (while UP) [ 109.488414][ T7124] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 109.575994][ T7125] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.836442][ T7140] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 109.836459][ T7140] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 109.841661][ T7140] vhci_hcd vhci_hcd.0: Device attached [ 109.848182][ T7149] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(15) [ 109.848202][ T7149] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 109.848274][ T7149] vhci_hcd vhci_hcd.0: Device attached [ 109.850951][ T43] audit: type=1400 audit(1789820221.215:4): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=7139 comm="syz.3.336" [ 109.853987][ T7147] vhci_hcd: connection closed [ 109.857111][ T5818] vhci_hcd vhci_hcd.3: stop threads [ 109.857488][ T5818] vhci_hcd vhci_hcd.3: release socket [ 109.857506][ T5818] vhci_hcd vhci_hcd.3: disconnect device [ 110.116866][ T42] usb 40-1: SetAddress Request (2) to port 0 [ 110.116941][ T42] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 110.385713][ T7166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.338'. [ 110.409938][ T7163] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 110.551766][ T7150] vhci_hcd: connection reset by peer [ 110.554406][ T5818] vhci_hcd vhci_hcd.1: stop threads [ 110.554425][ T5818] vhci_hcd vhci_hcd.1: release socket [ 110.555397][ T5818] vhci_hcd vhci_hcd.1: disconnect device [ 110.669476][ T7174] usb usb8: usbfs: process 7174 (syz.0.341) did not claim interface 0 before use [ 110.676711][ T7174] netlink: 'syz.0.341': attribute type 21 has an invalid length. [ 110.676723][ T7174] netlink: 'syz.0.341': attribute type 20 has an invalid length. [ 110.854697][ T7182] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 111.005804][ T7195] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 111.012372][ T7195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.350'. [ 111.188658][ T1592] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 111.220664][ T7205] TCP: TCP_TX_DELAY enabled [ 111.311726][ T7213] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 111.340902][ T7213] netlink: 4 bytes leftover after parsing attributes in process `syz.3.357'. [ 111.346734][ T1592] usb 5-1: Using ep0 maxpacket: 16 [ 111.405589][ T7218] warning: `syz.4.359' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 111.418605][ T7218] overlayfs: missing 'lowerdir' [ 111.589806][ T7226] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 111.595690][ T7226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.362'. [ 111.603367][ T1592] usb 5-1: unable to get BOS descriptor or descriptor too short [ 111.603396][ T1592] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 111.603439][ T1592] usb 5-1: no configurations [ 111.603447][ T1592] usb 5-1: can't read configurations, error -22 [ 112.253358][ T7237] IPVS: set_ctl: invalid protocol: 12 0.0.0.0:19996 [ 112.309648][ T7239] overlay: ./sys/module/apparmor/parameters/debug is not a directory [ 112.522000][ T7243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.368'. [ 112.576699][ T7245] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 112.614984][ T7245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.369'. [ 112.720627][ T7254] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 112.729520][ T7254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.373'. [ 112.741030][ T7259] netlink: 'syz.0.374': attribute type 1 has an invalid length. [ 112.892934][ T7257] netlink: 'syz.0.374': attribute type 1 has an invalid length. [ 114.330912][ T7302] net_ratelimit: 1 callbacks suppressed [ 114.330927][ T7302] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 114.349588][ T7302] __nla_validate_parse: 1 callbacks suppressed [ 114.349611][ T7302] netlink: 4 bytes leftover after parsing attributes in process `syz.4.383'. [ 114.614187][ T7318] overlayfs: failed to resolve 'context=sysadm_u': -2 [ 114.616558][ T5788] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 114.767468][ T5788] usb 5-1: not running at top speed; connect to a high speed hub [ 114.767489][ T5788] usb 5-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 114.768546][ T5788] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 114.768572][ T5788] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 114.770486][ T5788] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.770499][ T5788] usb 5-1: Product: syz [ 114.770506][ T5788] usb 5-1: Manufacturer: syz [ 114.770514][ T5788] usb 5-1: SerialNumber: syz [ 114.776414][ T5788] oti6858 5-1:1.0: oti6858 converter detected [ 114.788184][ T5788] usb 5-1: oti6858 converter now attached to ttyUSB0 [ 114.858548][ T7332] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 114.868391][ T7332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.396'. [ 115.097279][ T7299] oti6858 ttyUSB0: oti6858_open(): usb_submit_urb() failed with error -90 [ 115.099531][ T6101] usb 5-1: USB disconnect, device number 9 [ 115.105373][ T6101] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 115.105674][ T6101] oti6858 5-1:1.0: device disconnected [ 115.186780][ T42] usb 40-1: device descriptor read/8, error -110 [ 115.586906][ T42] usb usb40-port1: attempt power cycle [ 115.647964][ T7339] overlayfs: failed to resolve './sys': -2 [ 116.140210][ T7349] netlink: 'syz.4.402': attribute type 1 has an invalid length. [ 116.153327][ T7349] bond1: entered promiscuous mode [ 116.153638][ T7349] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.160287][ T7349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.402'. [ 116.173768][ T7349] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.173977][ T7349] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 116.174391][ T7349] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 116.217674][ T42] usb usb40-port1: unable to enumerate USB device [ 116.385230][ T7354] syzkaller0: entered promiscuous mode [ 116.385250][ T7354] syzkaller0: entered allmulticast mode [ 116.470872][ T7356] batman_adv: batadv0: Adding interface: syzkaller0 [ 116.470884][ T7356] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.470972][ T7356] batman_adv: batadv0: Interface activated: syzkaller0 [ 116.497234][ T7355] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 116.546107][ T7355] batman_adv: batadv0: Removing interface: syzkaller0 [ 116.623652][ T7360] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 116.629915][ T7360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.406'. [ 117.436395][ T7375] FAULT_INJECTION: forcing a failure. [ 117.436395][ T7375] name failslab, interval 1, probability 0, space 0, times 0 [ 117.436427][ T7375] CPU: 1 UID: 0 PID: 7375 Comm: syz.1.409 Tainted: G L syzkaller #0 PREEMPT(full) [ 117.436454][ T7375] Tainted: [L]=SOFTLOCKUP [ 117.436461][ T7375] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 117.436474][ T7375] Call Trace: [ 117.436481][ T7375] [ 117.436488][ T7375] dump_stack_lvl+0x100/0x190 [ 117.436559][ T7375] should_fail_ex.cold+0x5/0xa [ 117.436590][ T7375] should_failslab+0xc2/0x120 [ 117.436617][ T7375] __kmalloc_noprof+0xfc/0x840 [ 117.436640][ T7375] ? diag_fmt_alloc.isra.0+0x150/0x5b0 [ 117.436670][ T7375] diag_fmt_alloc.isra.0+0x150/0x5b0 [ 117.436698][ T7375] bpf_diag_vfmt+0x12e/0x170 [ 117.436721][ T7375] ? __pfx_bpf_diag_vfmt+0x10/0x10 [ 117.436747][ T7375] ? vsnprintf+0x4c5/0x1300 [ 117.436776][ T7375] bpf_diag_source+0x33e/0x1540 [ 117.436800][ T7375] ? __pfx_vsnprintf+0x10/0x10 [ 117.436834][ T7375] ? __pfx_bpf_diag_source+0x10/0x10 [ 117.436857][ T7375] ? bpf_verifier_vlog+0x19d/0x6d0 [ 117.436890][ T7375] ? diag_write+0x121/0x170 [ 117.436911][ T7375] ? __pfx_diag_write+0x10/0x10 [ 117.436932][ T7375] ? diag_vprint_indented+0x10/0xe0 [ 117.436955][ T7375] ? diag_vprint_indented+0x9d/0xe0 [ 117.436983][ T7375] ? kfree+0x22b/0x6d0 [ 117.437017][ T7375] bpf_diag_program_structure+0x200/0x290 [ 117.437047][ T7375] ? __pfx_bpf_diag_program_structure+0x10/0x10 [ 117.437103][ T7375] ? __pfx_verbose+0x10/0x10 [ 117.437126][ T7375] ? __pfx_cmp_subprogs+0x10/0x10 [ 117.437148][ T7375] ? __kvmalloc_node_noprof+0x377/0x9b0 [ 117.437170][ T7375] ? bpf_find_containing_subprog+0x17f/0x1e0 [ 117.437200][ T7375] bpf_check+0x5877/0xa980 [ 117.437227][ T7375] ? __css_rstat_updated+0x1ce/0x590 [ 117.437256][ T7375] ? __lock_acquire+0x5c0/0x1f40 [ 117.437283][ T7375] ? __pfx___css_rstat_updated+0x10/0x10 [ 117.437325][ T7375] ? __pfx_bpf_check+0x10/0x10 [ 117.437350][ T7375] ? lock_acquire+0x1d1/0x380 [ 117.437374][ T7375] ? bpf_prog_load+0x1a09/0x2a80 [ 117.437400][ T7375] ? find_held_lock+0x2b/0x80 [ 117.437419][ T7375] ? bpf_prog_load+0x1a09/0x2a80 [ 117.437448][ T7375] ? __asan_memset+0x23/0x50 [ 117.437471][ T7375] ? bpf_prog_load+0x1ac3/0x2a80 [ 117.437494][ T7375] bpf_prog_load+0x1ac3/0x2a80 [ 117.437525][ T7375] ? __pfx_bpf_prog_load+0x10/0x10 [ 117.437550][ T7375] ? lock_acquire+0x1d1/0x380 [ 117.437594][ T7375] __sys_bpf+0x1f46/0x4a30 [ 117.437619][ T7375] ? __pfx___sys_bpf+0x10/0x10 [ 117.437636][ T7375] ? find_held_lock+0x2b/0x80 [ 117.437659][ T7375] ? futex_wake+0x4ea/0x5e0 [ 117.437696][ T7375] ? rcu_read_lock_any_held+0x6a/0x90 [ 117.437718][ T7375] ? find_held_lock+0x2b/0x80 [ 117.437736][ T7375] ? ksys_write+0x190/0x250 [ 117.437754][ T7375] ? ksys_write+0x190/0x250 [ 117.437788][ T7375] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 117.437808][ T7375] ? __ia32_sys_futex_time32+0x2fd/0x470 [ 117.437829][ T7375] ? xfd_validate_state+0x129/0x190 [ 117.437857][ T7375] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 117.437882][ T7375] ? __ia32_sys_bpf+0xcc/0x170 [ 117.437900][ T7375] __ia32_sys_bpf+0xcc/0x170 [ 117.437921][ T7375] ? __do_fast_syscall_32+0xb3/0x8b0 [ 117.437951][ T7375] __do_fast_syscall_32+0x13a/0x8b0 [ 117.437993][ T7375] do_fast_syscall_32+0x32/0x70 [ 117.438022][ T7375] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 117.438047][ T7375] RIP: 0023:0xf7f83fec [ 117.438070][ T7375] Code: Unable to access opcode bytes at 0xf7f83fc2. [ 117.438079][ T7375] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 117.438097][ T7375] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000840 [ 117.438109][ T7375] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 117.438120][ T7375] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 117.438130][ T7375] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 117.438141][ T7375] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 117.438164][ T7375] [ 117.706376][ T42] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 117.849099][ T42] usb 8-1: device descriptor read/64, error -71 [ 117.981847][ T7382] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 118.136421][ T42] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 118.276950][ T42] usb 8-1: device descriptor read/64, error -71 [ 118.408043][ T42] usb usb8-port1: attempt power cycle [ 118.747520][ T42] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 118.827112][ T7393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.416'. [ 118.877436][ T42] usb 8-1: device descriptor read/8, error -71 [ 118.996437][ T7400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.417'. [ 119.027097][ T7395] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 119.032202][ T25] e1000 0000:00:06.0 eth0: Reset adapter [ 119.116400][ T42] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 119.136861][ T42] usb 8-1: device descriptor read/8, error -71 [ 119.246626][ T42] usb usb8-port1: unable to enumerate USB device [ 119.420214][ T5832] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 119.959332][ T7419] syzkaller0: entered promiscuous mode [ 119.959351][ T7419] syzkaller0: entered allmulticast mode [ 121.897863][ T25] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 130.692163][ T7470] syzkaller0: entered promiscuous mode [ 130.692180][ T7470] syzkaller0: entered allmulticast mode [ 130.706993][ T5818] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.707036][ T5818] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.707064][ T5818] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.707091][ T5818] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.888083][ T7477] FAULT_INJECTION: forcing a failure. [ 130.888083][ T7477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.888107][ T7477] CPU: 3 UID: 0 PID: 7477 Comm: syz.3.430 Tainted: G L syzkaller #0 PREEMPT(full) [ 130.888123][ T7477] Tainted: [L]=SOFTLOCKUP [ 130.888127][ T7477] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 130.888134][ T7477] Call Trace: [ 130.888138][ T7477] [ 130.888142][ T7477] dump_stack_lvl+0x100/0x190 [ 130.888162][ T7477] should_fail_ex.cold+0x5/0xa [ 130.888177][ T7477] _copy_from_iter+0x1f4/0x1690 [ 130.888194][ T7477] ? __pfx__copy_from_iter+0x10/0x10 [ 130.888208][ T7477] ? trace_kmalloc+0xeb/0x110 [ 130.888222][ T7477] ? __kasan_kmalloc+0xaa/0xb0 [ 130.888236][ T7477] ? __kmalloc_noprof+0x350/0x840 [ 130.888249][ T7477] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 130.888271][ T7477] kernfs_fop_write_iter+0x186/0x5f0 [ 130.888289][ T7477] vfs_write+0x6af/0x1050 [ 130.888302][ T7477] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 130.888320][ T7477] ? __pfx_vfs_write+0x10/0x10 [ 130.888330][ T7477] ? find_held_lock+0x2b/0x80 [ 130.888351][ T7477] ksys_write+0x12a/0x250 [ 130.888362][ T7477] ? __pfx_ksys_write+0x10/0x10 [ 130.888373][ T7477] ? ksys_write+0x1ac/0x250 [ 130.888384][ T7477] ? __pfx_ksys_write+0x10/0x10 [ 130.888398][ T7477] __do_fast_syscall_32+0x13a/0x8b0 [ 130.888416][ T7477] ? lockdep_hardirqs_on+0x7d/0x110 [ 130.888434][ T7477] do_fast_syscall_32+0x32/0x70 [ 130.888457][ T7477] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 130.888472][ T7477] RIP: 0023:0xf7ff4fec [ 130.888485][ T7477] Code: Unable to access opcode bytes at 0xf7ff4fc2. [ 130.888490][ T7477] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 130.888502][ T7477] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 130.888509][ T7477] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 130.888515][ T7477] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 130.888521][ T7477] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 130.888528][ T7477] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 130.888542][ T7477] [ 130.959204][ T7483] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 130.968708][ T7483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.432'. [ 131.808146][ T7494] zswap: compressor -οp|JJ>Uj뤣SFE]}I.1K2g($*`'VUt,7Yve:X#kT=O"-yp1P?/2A not available [ 131.874041][ T43] audit: type=1326 audit(1789820243.235:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7495 comm="syz.0.445" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 131.874373][ T43] audit: type=1326 audit(1789820243.235:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7495 comm="syz.0.445" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 131.874790][ T43] audit: type=1326 audit(1789820243.235:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7495 comm="syz.0.445" exe="/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf706efec code=0x7ffc0000 [ 131.875807][ T43] audit: type=1326 audit(1789820243.235:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7495 comm="syz.0.445" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 131.875966][ T43] audit: type=1326 audit(1789820243.235:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7495 comm="syz.0.445" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 131.876483][ T43] audit: type=1326 audit(1789820243.235:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7495 comm="syz.0.445" exe="/syz-executor" sig=0 arch=40000003 syscall=431 compat=1 ip=0xf706efec code=0x7ffc0000 [ 131.876706][ T43] audit: type=1326 audit(1789820243.245:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7495 comm="syz.0.445" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 131.876907][ T43] audit: type=1326 audit(1789820243.245:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7495 comm="syz.0.445" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 131.880232][ T43] audit: type=1326 audit(1789820243.245:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7495 comm="syz.0.445" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf706efec code=0x7ffc0000 [ 131.880614][ T43] audit: type=1326 audit(1789820243.245:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7495 comm="syz.0.445" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 132.000741][ T7502] syzkaller0: entered promiscuous mode [ 132.000754][ T7502] syzkaller0: entered allmulticast mode [ 132.327710][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.650904][ T7519] FAULT_INJECTION: forcing a failure. [ 132.650904][ T7519] name failslab, interval 1, probability 0, space 0, times 0 [ 132.650927][ T7519] CPU: 2 UID: 0 PID: 7519 Comm: syz.3.443 Tainted: G L syzkaller #0 PREEMPT(full) [ 132.650943][ T7519] Tainted: [L]=SOFTLOCKUP [ 132.650947][ T7519] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 132.650961][ T7519] Call Trace: [ 132.650966][ T7519] [ 132.650971][ T7519] dump_stack_lvl+0x100/0x190 [ 132.650991][ T7519] should_fail_ex.cold+0x5/0xa [ 132.651007][ T7519] should_failslab+0xc2/0x120 [ 132.651023][ T7519] __kmalloc_cache_noprof+0x91/0x6d0 [ 132.651041][ T7519] ? find_held_lock+0x2b/0x80 [ 132.651054][ T7519] ? alloc_fs_context+0x57/0xf40 [ 132.651071][ T7519] alloc_fs_context+0x57/0xf40 [ 132.651086][ T7519] ? __get_fs_type+0xe3/0x200 [ 132.651103][ T7519] path_mount+0xdbd/0x24c0 [ 132.651120][ T7519] ? __pfx_path_mount+0x10/0x10 [ 132.651135][ T7519] ? lockdep_hardirqs_on+0x7d/0x110 [ 132.651152][ T7519] ? putname+0xb1/0x110 [ 132.651165][ T7519] ? kmem_cache_free+0x127/0x6c0 [ 132.651185][ T7519] ? __ia32_sys_mount+0x292/0x310 [ 132.651199][ T7519] __ia32_sys_mount+0x292/0x310 [ 132.651214][ T7519] ? __pfx___ia32_sys_mount+0x10/0x10 [ 132.651233][ T7519] __do_fast_syscall_32+0x13a/0x8b0 [ 132.651249][ T7519] ? lockdep_hardirqs_on+0x7d/0x110 [ 132.651265][ T7519] do_fast_syscall_32+0x32/0x70 [ 132.651283][ T7519] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 132.651297][ T7519] RIP: 0023:0xf7ff4fec [ 132.651336][ T7519] Code: Unable to access opcode bytes at 0xf7ff4fc2. [ 132.651346][ T7519] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 132.651358][ T7519] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000000 [ 132.651365][ T7519] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 132.651371][ T7519] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 132.651378][ T7519] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 132.651385][ T7519] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 132.651399][ T7519] [ 132.742724][ T7521] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 132.763762][ T7521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.444'. [ 132.992517][ T7532] FAULT_INJECTION: forcing a failure. [ 132.992517][ T7532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.992540][ T7532] CPU: 3 UID: 0 PID: 7532 Comm: syz.4.449 Tainted: G L syzkaller #0 PREEMPT(full) [ 132.992555][ T7532] Tainted: [L]=SOFTLOCKUP [ 132.992559][ T7532] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 132.992566][ T7532] Call Trace: [ 132.992570][ T7532] [ 132.992575][ T7532] dump_stack_lvl+0x100/0x190 [ 132.992594][ T7532] should_fail_ex.cold+0x5/0xa [ 132.992612][ T7532] _copy_from_user+0x2e/0xd0 [ 132.992627][ T7532] binder_thread_write+0x97b/0x4db0 [ 132.992646][ T7532] ? kasan_save_free_info+0x3b/0x70 [ 132.992665][ T7532] ? __lock_acquire+0x5c0/0x1f40 [ 132.992681][ T7532] ? __pfx_binder_thread_write+0x10/0x10 [ 132.992697][ T7532] ? binder_debug+0xe0/0x190 [ 132.992710][ T7532] ? __pfx_binder_debug+0x10/0x10 [ 132.992729][ T7532] ? __might_fault+0xc5/0x140 [ 132.992750][ T7532] ? __pfx_binder_ioctl+0x10/0x10 [ 132.992765][ T7532] binder_ioctl+0x28ca/0x74a0 [ 132.992782][ T7532] ? tomoyo_path_number_perm+0x28f/0x580 [ 132.992798][ T7532] ? tomoyo_path_number_perm+0x28f/0x580 [ 132.992817][ T7532] ? tomoyo_path_number_perm+0x188/0x580 [ 132.992834][ T7532] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 132.992850][ T7532] ? __pfx_binder_ioctl+0x10/0x10 [ 132.992868][ T7532] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 132.992893][ T7532] ? do_vfs_ioctl+0x226/0x13e0 [ 132.992911][ T7532] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 132.992932][ T7532] ? find_held_lock+0x2b/0x80 [ 132.992944][ T7532] ? __fget_files+0x215/0x3d0 [ 132.992955][ T7532] ? hook_file_ioctl_common+0x140/0x440 [ 132.992975][ T7532] ? __fget_files+0x21f/0x3d0 [ 132.992988][ T7532] ? __pfx_binder_ioctl+0x10/0x10 [ 132.993003][ T7532] compat_ptr_ioctl+0x6e/0xa0 [ 132.993020][ T7532] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 132.993037][ T7532] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 132.993056][ T7532] __do_fast_syscall_32+0x13a/0x8b0 [ 132.993074][ T7532] ? lockdep_hardirqs_on+0x7d/0x110 [ 132.993091][ T7532] do_fast_syscall_32+0x32/0x70 [ 132.993108][ T7532] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 132.993122][ T7532] RIP: 0023:0xf7f32fec [ 132.993136][ T7532] Code: Unable to access opcode bytes at 0xf7f32fc2. [ 132.993141][ T7532] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 132.993153][ T7532] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000c0306201 [ 132.993160][ T7532] RDX: 0000000080001800 RSI: 0000000000000000 RDI: 0000000000000000 [ 132.993166][ T7532] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 132.993172][ T7532] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 132.993179][ T7532] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 132.993192][ T7532] [ 132.993197][ T7532] binder: 7531:7532 ioctl c0306201 80001800 returned -14 [ 133.067134][ T7535] syzkaller0: entered promiscuous mode [ 133.067149][ T7535] syzkaller0: entered allmulticast mode [ 133.688926][ T7553] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 133.701508][ T7553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.456'. [ 133.871792][ T7556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.465'. [ 134.109336][ T7563] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 136.057975][ T7587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.467'. [ 136.568458][ T7603] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 136.584572][ T7603] netlink: 64 bytes leftover after parsing attributes in process `syz.4.471'. [ 136.660243][ T7608] tmpfs: Bad value for 'mpol' [ 136.705723][ T7608] netlink: 14 bytes leftover after parsing attributes in process `syz.4.472'. [ 137.410490][ T7613] FAULT_INJECTION: forcing a failure. [ 137.410490][ T7613] name failslab, interval 1, probability 0, space 0, times 0 [ 137.410513][ T7613] CPU: 2 UID: 0 PID: 7613 Comm: syz.4.474 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.410529][ T7613] Tainted: [L]=SOFTLOCKUP [ 137.410533][ T7613] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.410540][ T7613] Call Trace: [ 137.410543][ T7613] [ 137.410548][ T7613] dump_stack_lvl+0x100/0x190 [ 137.410567][ T7613] should_fail_ex.cold+0x5/0xa [ 137.410582][ T7613] should_failslab+0xc2/0x120 [ 137.410596][ T7613] __kmalloc_cache_node_noprof+0x94/0x720 [ 137.410611][ T7613] ? shrinker_register+0x1db/0x240 [ 137.410628][ T7613] ? bdi_alloc+0x44/0x140 [ 137.410642][ T7613] bdi_alloc+0x44/0x140 [ 137.410654][ T7613] super_setup_bdi_name+0xc0/0x250 [ 137.410670][ T7613] ? __pfx_super_setup_bdi_name+0x10/0x10 [ 137.410687][ T7613] ? ecryptfs_get_tree+0x5ce/0x15b0 [ 137.410700][ T7613] ? ecryptfs_get_tree+0x5ce/0x15b0 [ 137.410717][ T7613] ecryptfs_get_tree+0x641/0x15b0 [ 137.410732][ T7613] ? __pfx_ecryptfs_get_tree+0x10/0x10 [ 137.410746][ T7613] ? apparmor_capable+0x1d7/0x4d0 [ 137.410762][ T7613] ? bpf_lsm_capable+0x9/0x10 [ 137.410777][ T7613] ? security_capable+0x80/0x260 [ 137.410792][ T7613] vfs_get_tree+0x92/0x320 [ 137.410809][ T7613] path_mount+0x7d0/0x24c0 [ 137.410828][ T7613] ? __pfx_path_mount+0x10/0x10 [ 137.410842][ T7613] ? lockdep_hardirqs_on+0x7d/0x110 [ 137.410860][ T7613] ? putname+0xb1/0x110 [ 137.410892][ T7613] ? kmem_cache_free+0x127/0x6c0 [ 137.410915][ T7613] ? __ia32_sys_mount+0x292/0x310 [ 137.410929][ T7613] __ia32_sys_mount+0x292/0x310 [ 137.410945][ T7613] ? __pfx___ia32_sys_mount+0x10/0x10 [ 137.410959][ T7613] ? ksys_write+0x1ac/0x250 [ 137.410970][ T7613] ? __pfx_ksys_write+0x10/0x10 [ 137.410988][ T7613] __do_fast_syscall_32+0x13a/0x8b0 [ 137.411005][ T7613] ? lockdep_hardirqs_on+0x7d/0x110 [ 137.411021][ T7613] do_fast_syscall_32+0x32/0x70 [ 137.411038][ T7613] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 137.411053][ T7613] RIP: 0023:0xf7f32fec [ 137.411065][ T7613] Code: Unable to access opcode bytes at 0xf7f32fc2. [ 137.411070][ T7613] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 137.411081][ T7613] RAX: ffffffffffffffda RBX: 0000000080000400 RCX: 0000000080000000 [ 137.411088][ T7613] RDX: 0000000080000480 RSI: 0000000000000000 RDI: 0000000080000500 [ 137.411094][ T7613] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 137.411101][ T7613] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 137.411107][ T7613] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 137.411120][ T7613] [ 137.411803][ T7613] ================================================================== [ 137.411811][ T7613] BUG: KASAN: slab-use-after-free in ecryptfs_destroy_mount_crypt_stat+0x28f/0x360 [ 137.411829][ T7613] Read of size 4 at addr ffff888024de8790 by task syz.4.474/7613 [ 137.411838][ T7613] [ 137.411843][ T7613] CPU: 2 UID: 0 PID: 7613 Comm: syz.4.474 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.411858][ T7613] Tainted: [L]=SOFTLOCKUP [ 137.411862][ T7613] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.411868][ T7613] Call Trace: [ 137.411872][ T7613] [ 137.411876][ T7613] dump_stack_lvl+0x100/0x190 [ 137.411889][ T7613] print_report+0x13d/0x4b0 [ 137.411905][ T7613] ? __virt_addr_valid+0x239/0x430 [ 137.411921][ T7613] ? ecryptfs_destroy_mount_crypt_stat+0x28f/0x360 [ 137.411936][ T7613] kasan_report+0xdf/0x1c0 [ 137.411950][ T7613] ? ecryptfs_destroy_mount_crypt_stat+0x28f/0x360 [ 137.411986][ T7613] ecryptfs_destroy_mount_crypt_stat+0x28f/0x360 [ 137.412003][ T7613] ? put_super+0x220/0x2f0 [ 137.412019][ T7613] ecryptfs_get_tree+0x10b6/0x15b0 [ 137.412032][ T7613] ? __pfx_ecryptfs_get_tree+0x10/0x10 [ 137.412044][ T7613] ? apparmor_capable+0x1d7/0x4d0 [ 137.412059][ T7613] ? bpf_lsm_capable+0x9/0x10 [ 137.412074][ T7613] ? security_capable+0x80/0x260 [ 137.412087][ T7613] vfs_get_tree+0x92/0x320 [ 137.412102][ T7613] path_mount+0x7d0/0x24c0 [ 137.412116][ T7613] ? __pfx_path_mount+0x10/0x10 [ 137.412129][ T7613] ? lockdep_hardirqs_on+0x7d/0x110 [ 137.412145][ T7613] ? putname+0xb1/0x110 [ 137.412157][ T7613] ? kmem_cache_free+0x127/0x6c0 [ 137.412175][ T7613] ? __ia32_sys_mount+0x292/0x310 [ 137.412189][ T7613] __ia32_sys_mount+0x292/0x310 [ 137.412203][ T7613] ? __pfx___ia32_sys_mount+0x10/0x10 [ 137.412217][ T7613] ? ksys_write+0x1ac/0x250 [ 137.412227][ T7613] ? __pfx_ksys_write+0x10/0x10 [ 137.412239][ T7613] __do_fast_syscall_32+0x13a/0x8b0 [ 137.412255][ T7613] ? lockdep_hardirqs_on+0x7d/0x110 [ 137.412270][ T7613] do_fast_syscall_32+0x32/0x70 [ 137.412286][ T7613] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 137.412300][ T7613] RIP: 0023:0xf7f32fec [ 137.412310][ T7613] Code: Unable to access opcode bytes at 0xf7f32fc2. [ 137.412315][ T7613] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 137.412326][ T7613] RAX: ffffffffffffffda RBX: 0000000080000400 RCX: 0000000080000000 [ 137.412332][ T7613] RDX: 0000000080000480 RSI: 0000000000000000 RDI: 0000000080000500 [ 137.412339][ T7613] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 137.412345][ T7613] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 137.412351][ T7613] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 137.412360][ T7613] [ 137.412364][ T7613] [ 137.412367][ T7613] Allocated by task 7613: [ 137.412372][ T7613] kasan_save_stack+0x30/0x50 [ 137.412383][ T7613] kasan_save_track+0x14/0x30 [ 137.412394][ T7613] __kasan_slab_alloc+0x89/0x90 [ 137.412406][ T7613] kmem_cache_alloc_noprof+0x269/0x6a0 [ 137.412416][ T7613] ecryptfs_init_fs_context+0x6b/0x200 [ 137.412428][ T7613] alloc_fs_context+0x60c/0xf40 [ 137.412441][ T7613] path_mount+0xdbd/0x24c0 [ 137.412453][ T7613] __ia32_sys_mount+0x292/0x310 [ 137.412466][ T7613] __do_fast_syscall_32+0x13a/0x8b0 [ 137.412484][ T7613] do_fast_syscall_32+0x32/0x70 [ 137.412504][ T7613] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 137.412520][ T7613] [ 137.412523][ T7613] Freed by task 7613: [ 137.412528][ T7613] kasan_save_stack+0x30/0x50 [ 137.412542][ T7613] kasan_save_track+0x14/0x30 [ 137.412555][ T7613] kasan_save_free_info+0x3b/0x70 [ 137.412576][ T7613] __kasan_slab_free+0x5f/0x80 [ 137.412590][ T7613] kmem_cache_free+0x127/0x6c0 [ 137.412605][ T7613] ecryptfs_kill_block_super+0x81/0xa0 [ 137.412617][ T7613] deactivate_locked_super+0xbd/0x140 [ 137.412632][ T7613] ecryptfs_get_tree+0x10e9/0x15b0 [ 137.412643][ T7613] vfs_get_tree+0x92/0x320 [ 137.412657][ T7613] path_mount+0x7d0/0x24c0 [ 137.412669][ T7613] __ia32_sys_mount+0x292/0x310 [ 137.412682][ T7613] __do_fast_syscall_32+0x13a/0x8b0 [ 137.412697][ T7613] do_fast_syscall_32+0x32/0x70 [ 137.412712][ T7613] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 137.412724][ T7613] [ 137.412726][ T7613] The buggy address belongs to the object at ffff888024de8780 [ 137.412726][ T7613] which belongs to the cache ecryptfs_sb_cache of size 280 [ 137.412735][ T7613] The buggy address is located 16 bytes inside of [ 137.412735][ T7613] freed 280-byte region [ffff888024de8780, ffff888024de8898) [ 137.412745][ T7613] [ 137.412747][ T7613] The buggy address belongs to the physical page: [ 137.412752][ T7613] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888024de8900 pfn:0x24de8 [ 137.412762][ T7613] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 137.412770][ T7613] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 137.412780][ T7613] page_type: f5(slab) [ 137.412789][ T7613] raw: 00fff00000000240 ffff888022bb6280 ffff888022b344c8 ffff888022b344c8 [ 137.412798][ T7613] raw: ffff888024de8900 0000000200150006 00000000f5000000 0000000000000000 [ 137.412807][ T7613] head: 00fff00000000240 ffff888022bb6280 ffff888022b344c8 ffff888022b344c8 [ 137.412816][ T7613] head: ffff888024de8900 0000000200150006 00000000f5000000 0000000000000000 [ 137.412824][ T7613] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 137.412833][ T7613] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 137.412838][ T7613] page dumped because: kasan: bad access detected [ 137.412844][ T7613] page_owner tracks the page as allocated [ 137.412847][ T7613] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6037, tgid 6036 (syz.3.42), ts 61515218698 [ 137.412864][ T7613] post_alloc_hook+0xfd/0x120 [ 137.412879][ T7613] get_page_from_freelist+0x110d/0x35d0 [ 137.412887][ T7613] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 137.412897][ T7613] new_slab+0xa9/0x6e0 [ 137.412904][ T7613] refill_objects+0xe3/0x410 [ 137.412913][ T7613] __pcs_replace_empty_main+0x35e/0x650 [ 137.412928][ T7613] kmem_cache_alloc_noprof+0x4c4/0x6a0 [ 137.412938][ T7613] ecryptfs_init_fs_context+0x6b/0x200 [ 137.412949][ T7613] alloc_fs_context+0x60c/0xf40 [ 137.412962][ T7613] path_mount+0xdbd/0x24c0 [ 137.412974][ T7613] __ia32_sys_mount+0x292/0x310 [ 137.412992][ T7613] __do_fast_syscall_32+0x13a/0x8b0 [ 137.413007][ T7613] do_fast_syscall_32+0x32/0x70 [ 137.413022][ T7613] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 137.413034][ T7613] page last free pid 5737 tgid 5737 ts 56756910077 stack trace: [ 137.413041][ T7613] __free_frozen_pages+0x79f/0x10f0 [ 137.413055][ T7613] tlb_remove_table_rcu+0x2cf/0x380 [ 137.413069][ T7613] rcu_core+0x5f0/0x1260 [ 137.413083][ T7613] handle_softirqs+0x1e6/0x9d0 [ 137.413097][ T7613] __irq_exit_rcu+0x16a/0x210 [ 137.413111][ T7613] irq_exit_rcu+0x9/0x30 [ 137.413125][ T7613] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 137.413139][ T7613] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 137.413149][ T7613] [ 137.413152][ T7613] Memory state around the buggy address: [ 137.413156][ T7613] ffff888024de8680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 137.413163][ T7613] ffff888024de8700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 137.413170][ T7613] >ffff888024de8780: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 137.413176][ T7613] ^ [ 137.413181][ T7613] ffff888024de8800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 137.413187][ T7613] ffff888024de8880: fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc fc [ 137.413193][ T7613] ================================================================== [ 137.413234][ T7613] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 137.746069][ T7613] CPU: 2 UID: 0 PID: 7613 Comm: syz.4.474 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.749713][ T7613] Tainted: [L]=SOFTLOCKUP [ 137.751500][ T7613] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.754644][ T7613] Call Trace: [ 137.755740][ T7613] [ 137.756681][ T7613] dump_stack_lvl+0x100/0x190 [ 137.758195][ T7613] vpanic+0x553/0x970 [ 137.759516][ T7613] ? __pfx_vpanic+0x10/0x10 [ 137.760957][ T7613] ? rcu_is_watching+0x13/0xc0 [ 137.762492][ T7613] ? irqentry_exit+0x24d/0xa10 [ 137.764031][ T7613] ? ecryptfs_destroy_mount_crypt_stat+0x28f/0x360 [ 137.766089][ T7613] panic+0xd1/0xe0 [ 137.767392][ T7613] ? __pfx_panic+0x10/0x10 [ 137.768902][ T7613] ? ecryptfs_destroy_mount_crypt_stat+0x28f/0x360 [ 137.771620][ T7613] ? preempt_schedule_common+0x3c/0xb0 [ 137.773858][ T7613] check_panic_on_warn.cold+0x19/0x34 [ 137.776027][ T7613] end_report.part.0+0x3a/0x90 [ 137.777766][ T7613] kasan_report.cold+0xe/0x18 [ 137.779272][ T7613] ? ecryptfs_destroy_mount_crypt_stat+0x28f/0x360 [ 137.781343][ T7613] ecryptfs_destroy_mount_crypt_stat+0x28f/0x360 [ 137.783460][ T7613] ? put_super+0x220/0x2f0 [ 137.785029][ T7613] ecryptfs_get_tree+0x10b6/0x15b0 [ 137.786812][ T7613] ? __pfx_ecryptfs_get_tree+0x10/0x10 [ 137.788732][ T7613] ? apparmor_capable+0x1d7/0x4d0 [ 137.790521][ T7613] ? bpf_lsm_capable+0x9/0x10 [ 137.792092][ T7613] ? security_capable+0x80/0x260 [ 137.793681][ T7613] vfs_get_tree+0x92/0x320 [ 137.795108][ T7613] path_mount+0x7d0/0x24c0 [ 137.796553][ T7613] ? __pfx_path_mount+0x10/0x10 [ 137.798098][ T7613] ? lockdep_hardirqs_on+0x7d/0x110 [ 137.799757][ T7613] ? putname+0xb1/0x110 [ 137.801070][ T7613] ? kmem_cache_free+0x127/0x6c0 [ 137.802653][ T7613] ? __ia32_sys_mount+0x292/0x310 [ 137.804237][ T7613] __ia32_sys_mount+0x292/0x310 [ 137.805794][ T7613] ? __pfx___ia32_sys_mount+0x10/0x10 [ 137.807631][ T7613] ? ksys_write+0x1ac/0x250 [ 137.809148][ T7613] ? __pfx_ksys_write+0x10/0x10 [ 137.810845][ T7613] __do_fast_syscall_32+0x13a/0x8b0 [ 137.812643][ T7613] ? lockdep_hardirqs_on+0x7d/0x110 [ 137.814313][ T7613] do_fast_syscall_32+0x32/0x70 [ 137.815878][ T7613] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 137.817845][ T7613] RIP: 0023:0xf7f32fec [ 137.819136][ T7613] Code: Unable to access opcode bytes at 0xf7f32fc2. [ 137.821220][ T7613] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 137.823841][ T7613] RAX: ffffffffffffffda RBX: 0000000080000400 RCX: 0000000080000000 [ 137.826310][ T7613] RDX: 0000000080000480 RSI: 0000000000000000 RDI: 0000000080000500 [ 137.828795][ T7613] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 137.831259][ T7613] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 137.833757][ T7613] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 137.836247][ T7613] [ 137.837785][ T7613] Kernel Offset: disabled [ 137.839161][ T7613] Rebooting in 86400 seconds.. VM DIAGNOSIS: 12:17:28 Registers: info registers vcpu 0 CPU#0 EAX=f6deef38 EBX=f6e24900 ECX=825625dd EDX=825767ef ESI=00000000 EDI=ffffffff EBP=ffffffff ESP=ffb17b20 EIP=f708b435 EFL=00000246 [---Z-P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0023 00000000 ffffffff 00c0fb00 DPL=3 CS32 [-RA] SS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 00000000 ffffffff 00c00000 GS =0063 57f7a480 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 00000000 ffffffff 00c00000 TR =0040 00003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c2fec55 CR3=000000004c7e0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000002 RCX=0000000000000000 RDX=ffff88801d394b00 RSI=ffffffff81feab9e RDI=ffff88801d394b00 RBP=ffff88802b443b20 RSP=ffffc900006178a0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed1003a72c13 R13=0000000000000003 R14=ffffed1005688765 R15=0000000000000001 RIP=ffffffff81feaba4 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096a60000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5424ff4 CR3=000000004c7e0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85aeb445 RDI=ffffffff9bc571e0 RBP=ffffffff9bc571a0 RSP=ffffc90021b07338 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000031363754 R12=0000000000000000 R13=0000000000000031 R14=0000000000000008 R15=ffffc90021b07650 RIP=ffffffff85aeb46f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096b60000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7f33000 CR3=0000000047bf1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000001af887 RBX=ffff88801cbf8000 RCX=ffffffff8bce7185 RDX=0000000000000001 RSI=ffffffff8e3f18bd RDI=ffffffff8c622c80 RBP=ffffed100397f000 RSP=ffffc9000049fe00 R8 =0000000000000001 R9 =ffffed10056a67bd R10=ffff88802b533deb R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000093fc4 R15=dffffc0000000000 RIP=ffffffff8bce56bf RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096c60000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73f5014 CR3=0000000066d55000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000