last executing test programs: 18m56.965405555s ago: executing program 32 (id=1064): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) fanotify_init(0x200, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000001080)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2425, 0x42, 0x1000002, 0x8e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x69}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe7d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 18m21.821302514s ago: executing program 33 (id=1120): socket$inet6(0xa, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r0 = getpid() syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@broadcast, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @broadcast, @link_local, @loopback}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000440), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0x10106, 0x2, 0x0) pipe2(0x0, 0x84000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c1) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80, 0x0) read$FUSE(r3, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101301) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, &(0x7f00000004c0)={0x1, 0x1}) syz_fuse_handle_req(r3, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x1214040, 0x0) 17m57.073913165s ago: executing program 34 (id=1152): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000300), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000340), 0x10106, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000380)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000003c0)={0x43, 0x0, 0x3, 0x3}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$tipc(r3, &(0x7f0000000400)={&(0x7f0000000480), 0x10, &(0x7f00000004c0)=[{&(0x7f0000000500)}], 0x1}, 0x0) 17m9.920989076s ago: executing program 35 (id=1218): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r1 = memfd_create(&(0x7f00000002c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) pwrite64(r0, &(0x7f0000000000)="ff", 0x58200, 0x2200) 17m6.675081729s ago: executing program 36 (id=1226): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x81800) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) dup(r0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000880)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./cgrp2\x00', 0x1ff) mount(0x0, &(0x7f00000009c0)='./cgrp2\x00', &(0x7f0000000a00)='cgroup2\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000bc0)='./cgrp2/p0/cpuset.cpus.partition\x00', 0x2, 0x0) write(r1, &(0x7f0000000c00)='member\n\x00', 0x7) 11m41.468227935s ago: executing program 9 (id=1882): unshare(0x100000) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xfffffffe, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0xfffffc, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe64a, 0x2, 0x20000000, 0x327, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x20, 0x3, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x4000) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0}) 11m38.408969611s ago: executing program 9 (id=1887): futex(0x0, 0x6, 0x3d, 0x0, 0x0, 0x2) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000200)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000003c0)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000540), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x6) recvmmsg(r0, &(0x7f00000005c0), 0x5b, 0x40, 0x0) 11m38.354077811s ago: executing program 5 (id=1890): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0xd, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x2, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0x8, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0xa0880, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000740)={0x0, &(0x7f0000000480)=[@nested_set_state_pages={0x140, 0x28, {0x3, 0x14, @arbitrary=0x1}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x8000000000000001, 0x1, 0x1}}, @nested_set_state_pages={0x140, 0x28, {0x2, 0x32, @gpa=0x8080000}}, @rdmsr={0x66, 0x18, {0xbca}}, @cpuid={0x64, 0x18, {0x0, 0x6}}, @nested_amd_clgi={0x17f, 0x10}, @nested_vmlaunch={0x12f, 0x18, 0x3}], 0xd8}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2c, 0x1e, 0xd03, 0x70bd29, 0x25dfdbfb, {0x6}, [@typed={0x16, 0x1, 0x0, 0x0, @str='\x85\x95\x1aq\vT\xd4\x86\v\xd8\x7f:_\xa9\xe2\x00\xf7\x8a'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 11m37.425213528s ago: executing program 9 (id=1891): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414"], 0x50}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4}}, 0xe8) 11m36.10215798s ago: executing program 9 (id=1893): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000003c0)='./file0/../file0\x00', 0x0, 0x0, 0x81000, 0x0) mount$bind(&(0x7f0000000500)='./file0/../file0\x00', &(0x7f0000000540)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18dc4d, 0x0) mount$bind(&(0x7f0000000080)='.\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f00000006c0)='./file0\x00', 0xb) 11m35.976886656s ago: executing program 5 (id=1896): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x1807, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, "", [{{0x9, 0x4, 0x0, 0x5, 0x12, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xffff, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x16, 0xd8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 11m35.942594406s ago: executing program 9 (id=1897): prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000005c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000700), 0x0, 0x0) mprotect(&(0x7f000086f000/0x4000)=nil, 0x4000, 0x8) read$msr(r3, &(0x7f0000000740)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x80, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x4d, 0x0, @wg=@initiation={0x1, 0x1, "65a252e7cb7a5918c004a9971a46afced2c32642b1ec9fe34818d8ccd82041b7", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae12e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69e833bd36300b088233545a"}}}}}}}, 0x0) recvmmsg(r4, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0x34ae}], 0x1, 0x22, 0x0) setsockopt$sock_int(r4, 0x1, 0x28, &(0x7f0000000240)=0x3, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000280)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f0000000400)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) sched_setaffinity(r2, 0x0, 0x0) r5 = syz_create_resource$futex(&(0x7f0000000040)=0x1) r6 = syz_create_resource$futex(&(0x7f0000000080)=0x1) futex(r5, 0xb, 0x1, 0x0, r6, 0x0) futex(r5, 0xc, 0x1, &(0x7f00000000c0)={0x0, 0x3938700}, r6, 0x1) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) pread64(r7, 0x0, 0x0, 0x1) 11m35.317710551s ago: executing program 9 (id=1899): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000048c0)=@delchain={0x850, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}, {0xb, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x824, 0x2, [@TCA_BPF_ACT={0x820, 0x1, [@m_mirred={0x614, 0xd, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x73, 0x10, 0x20000000, 0x8, 0xa8a}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8001, 0x0, 0x8, 0x2, 0x3}, 0x1}}]}, {0x5a5, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x1b0, 0x12, 0x0, 0x0, {{0xb}, {0x9c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5, 0x2, 0x5, 0x5, 0x400}}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x3, 0x20000000, 0x3, 0x9}, 0xf}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xf7e5}]}, {0xea, 0x6, "a1b660f5208936232cda86dbc72ce07ea965ef6ba1d1d09844721c7c4a99215f65588f37144130a0cfe892f40c7bd1b1c60c0ae07d055bb7d54c8481900754b36455377c7ddafad62bd905b87e203cd85441766254f1fb76d106fc2ab3b535bd37b963914a3937078f08fe2b215c53ac1637586d19d3179be2480bd4560f5f3df8af92646dcc1fbd383420085b4c07db2f0413025ad48ce3b346d0decc2020a76819621adf129187c02cc25e2c07331a44b29b6bee81ecbc147aa5d146be79432192fc1574145998b7d3b55d80dd7464335395b4f37be9047482b255b6f0dec2c748724aa49c"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0x58, 0xe, 0x0, 0x0, {{0x8}, {0x4}, {0x2e, 0x6, "5fb30546b7f724bbd0a03a2ce67cc3f75455f6dad8b7910df14f457f0b939aa1f7843f8d23ac707b39fb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x850}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 11m34.905759584s ago: executing program 37 (id=1899): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000048c0)=@delchain={0x850, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}, {0xb, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x824, 0x2, [@TCA_BPF_ACT={0x820, 0x1, [@m_mirred={0x614, 0xd, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x73, 0x10, 0x20000000, 0x8, 0xa8a}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8001, 0x0, 0x8, 0x2, 0x3}, 0x1}}]}, {0x5a5, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x1b0, 0x12, 0x0, 0x0, {{0xb}, {0x9c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5, 0x2, 0x5, 0x5, 0x400}}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x3, 0x20000000, 0x3, 0x9}, 0xf}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xf7e5}]}, {0xea, 0x6, "a1b660f5208936232cda86dbc72ce07ea965ef6ba1d1d09844721c7c4a99215f65588f37144130a0cfe892f40c7bd1b1c60c0ae07d055bb7d54c8481900754b36455377c7ddafad62bd905b87e203cd85441766254f1fb76d106fc2ab3b535bd37b963914a3937078f08fe2b215c53ac1637586d19d3179be2480bd4560f5f3df8af92646dcc1fbd383420085b4c07db2f0413025ad48ce3b346d0decc2020a76819621adf129187c02cc25e2c07331a44b29b6bee81ecbc147aa5d146be79432192fc1574145998b7d3b55d80dd7464335395b4f37be9047482b255b6f0dec2c748724aa49c"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0x58, 0xe, 0x0, 0x0, {{0x8}, {0x4}, {0x2e, 0x6, "5fb30546b7f724bbd0a03a2ce67cc3f75455f6dad8b7910df14f457f0b939aa1f7843f8d23ac707b39fb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x850}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 11m34.409567205s ago: executing program 5 (id=1904): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000048c0)=@delchain={0x6b4, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}, {0xb, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x688, 0x2, [@TCA_BPF_ACT={0x684, 0x1, [@m_mirred={0x634, 0xd, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x73, 0x10, 0x20000000, 0x8, 0xa8a}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8001, 0x0, 0x8, 0x2, 0x3}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x81, 0x1, 0x3, 0x100, 0x100}, 0x1}}]}, {0x5a5, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0x4c, 0xe, 0x0, 0x0, {{0x8}, {0x4}, {0x21, 0x6, "5fb30546b7f724bbd0a03a2ce67cc3f75455f6dad8b7910df14f457f0b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x6b4}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2040000, &(0x7f0000003700)={0x77359400}) 11m33.674536669s ago: executing program 6 (id=1906): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00('], 0x48}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x44, 0x2, 0x6, 0xa03, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd3}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 11m33.421275682s ago: executing program 5 (id=1907): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000003c0)='./file0/../file0\x00', 0x0, 0x0, 0x81000, 0x0) mount$bind(&(0x7f0000000500)='./file0/../file0\x00', &(0x7f0000000540)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18dc4d, 0x0) mount$bind(&(0x7f0000000080)='.\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f00000006c0)='./file0\x00', 0xb) 11m33.233108761s ago: executing program 5 (id=1908): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000740)={0x0, &(0x7f0000000480)=[@nested_set_state_pages={0x140, 0x28, {0x3, 0x14, @arbitrary=0x1}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x8000000000000001, 0x1, 0x1}}, @wr_drn={0x68, 0x20, {0x6, 0x8}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_set_state_pages={0x140, 0x28, {0x2, 0x32, @gpa=0x8080000}}, @rdmsr={0x66, 0x18, {0xbca}}, @cpuid={0x64, 0x18, {0x0, 0x6}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x54b, 0x4, 0x8f, 0x5}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_amd_vmload={0x182, 0x18}], 0x150}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 11m33.211632188s ago: executing program 6 (id=1909): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000740)={0x0, &(0x7f0000000480)=[@nested_set_state_pages={0x140, 0x28, {0x3, 0x14, @arbitrary=0x1}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x8000000000000001, 0x1, 0x1}}, @wr_drn={0x68, 0x20, {0x6, 0x8}}, @nested_set_state_pages={0x140, 0x28, {0x2, 0x32, @gpa=0x8080000}}, @rdmsr={0x66, 0x18, {0xbca}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x54b, 0x4, 0x8f, 0x5}}, @set_irq_handler={0xc8, 0x20, {0x2a, 0x2}}], 0x110}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 11m32.213244878s ago: executing program 5 (id=1912): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x1, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) move_mount(0xffffffffffffffff, &(0x7f0000000440)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x2000fff, 0xfffffffffffffffe, 0x1000000000, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 11m31.799357739s ago: executing program 38 (id=1912): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x1, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) move_mount(0xffffffffffffffff, &(0x7f0000000440)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x2000fff, 0xfffffffffffffffe, 0x1000000000, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 11m31.786619435s ago: executing program 6 (id=1915): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x7, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r2, r1, 0x25, 0x0, @val=@perf_event={0x100}}, 0x18) syz_emit_ethernet(0x3e, &(0x7f0000000480)={@multicast, @random="777de85bf4dd", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_rs}}}}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0x900, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@rand_addr=0x64010100, 0x2c, 0x30}]}, 0x38}}, 0x40408c0) r6 = gettid() timer_create(0x1, 0x0, &(0x7f00000004c0)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000500)={0x0, 0x0, 0x3ed4, 0x5, r6}) rt_sigprocmask(0x0, &(0x7f0000000580)={[0x10001]}, &(0x7f00000005c0), 0x8) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc000, 0x7f) 11m30.111643064s ago: executing program 6 (id=1917): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000003c0)='./file0/../file0\x00', 0x0, 0x0, 0x81000, 0x0) mount$bind(&(0x7f0000000500)='./file0/../file0\x00', &(0x7f0000000540)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18dc4d, 0x0) mount$bind(&(0x7f0000000080)='.\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f00000006c0)='./file0\x00', 0xb) 11m29.532467225s ago: executing program 6 (id=1919): r0 = syz_usb_connect(0x3, 0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000200000040e60405000001010203010902200001010080320904000002080650000705810200020007050202"], 0x0) syz_usb_ep_write(r0, 0x2, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000140)={0x0, 0x17, 0x2, "25b9"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000180)={0x34, &(0x7f00000001c0)={0x0, 0x10, 0x2, "7f87"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 11m28.493240204s ago: executing program 6 (id=1922): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x7, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r2, r1, 0x25, 0x0, @val=@perf_event={0x100}}, 0x18) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0x900, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@rand_addr=0x64010100, 0x2c, 0x30}]}, 0x38}}, 0x40408c0) r6 = gettid() timer_create(0x1, 0x0, &(0x7f00000004c0)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000500)={0x0, 0x0, 0x3ed4, 0x5, r6}) rt_sigprocmask(0x0, &(0x7f0000000580)={[0x10001]}, &(0x7f00000005c0), 0x8) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc000, 0x7f) 11m27.820733924s ago: executing program 39 (id=1922): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x7, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r2, r1, 0x25, 0x0, @val=@perf_event={0x100}}, 0x18) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0x900, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@rand_addr=0x64010100, 0x2c, 0x30}]}, 0x38}}, 0x40408c0) r6 = gettid() timer_create(0x1, 0x0, &(0x7f00000004c0)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000500)={0x0, 0x0, 0x3ed4, 0x5, r6}) rt_sigprocmask(0x0, &(0x7f0000000580)={[0x10001]}, &(0x7f00000005c0), 0x8) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc000, 0x7f) 5m47.415345468s ago: executing program 4 (id=2269): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56549, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xfff3}, {0xc, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x6, 0x5}}}}]}, 0x44}}, 0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m47.213529538s ago: executing program 4 (id=2270): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl(r1, 0x4038ae7a, &(0x7f0000000440)=' \x00\x00\x00\x00\x00\x00@') ioctl(r2, 0x4048aecb, &(0x7f0000000540)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m46.93681766s ago: executing program 4 (id=2271): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x44, 0x2, 0x6, 0xa03, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000380)={0xf, 0x1f, 0x2, 0x1}, 0xf) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5m45.87223064s ago: executing program 4 (id=2274): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000740)={0x0, &(0x7f0000000480)=[@nested_set_state_pages={0x140, 0x28, {0x3, 0x14, @arbitrary=0x1}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x8000000000000001, 0x1, 0x1}}, @wr_drn={0x68, 0x20, {0x6, 0x8}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_set_state_pages={0x140, 0x28, {0x2, 0x32, @gpa=0x8080000}}, @rdmsr={0x66, 0x18, {0xbca}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x54b, 0x4, 0x8f, 0x5}}, @nested_amd_clgi={0x17f, 0x10}, @nested_set_state_pages={0x140, 0x28, {0x3, 0x36, @unmapped=0xdddd0000}}, @nested_vmlaunch={0x12f, 0x18, 0x3}], 0x158}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5m44.554955128s ago: executing program 4 (id=2279): mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) futex(0x0, 0x6, 0x3d, 0x0, 0x0, 0x2) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000200), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000003c0)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000500), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000540), 0x10106, 0x2, 0x0) recvmmsg(r0, &(0x7f00000005c0), 0x5b, 0x40, 0x0) 5m43.453620515s ago: executing program 4 (id=2280): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000940)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0x40900, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000009c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x7, 0x163, 0x6, 0xfffffff0, 0x7, 0x9, 0x8, 0xffffffff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x4000818) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000b00)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000b40)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c0d4}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000d00)={&(0x7f0000000d40)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000e00)="27030200dc0f14000e0005000024c1020000ff8807c2fb7fe0406e52534b4f6b3d327db412f40000000020000000", 0x2e}], 0x1}, 0x20004801) 5m28.010536843s ago: executing program 40 (id=2280): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000940)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0x40900, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000009c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x7, 0x163, 0x6, 0xfffffff0, 0x7, 0x9, 0x8, 0xffffffff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x4000818) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000b00)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000b40)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c0d4}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000d00)={&(0x7f0000000d40)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000e00)="27030200dc0f14000e0005000024c1020000ff8807c2fb7fe0406e52534b4f6b3d327db412f40000000020000000", 0x2e}], 0x1}, 0x20004801) 5m20.029056059s ago: executing program 7 (id=2302): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000740)={0x0, &(0x7f0000000480)=[@nested_set_state_pages={0x140, 0x28, {0x3, 0x14, @arbitrary=0x1}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x8000000000000001, 0x1, 0x1}}, @wr_drn={0x68, 0x20, {0x6, 0x8}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_set_state_pages={0x140, 0x28, {0x2, 0x32, @gpa=0x8080000}}, @rdmsr={0x66, 0x18, {0xbca}}, @cpuid={0x64, 0x18, {0x0, 0x6}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x54b, 0x4, 0x8f, 0x5}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_vmload={0x182, 0x18}, @nested_vmlaunch={0x12f, 0x18, 0x3}], 0x160}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5m18.716716566s ago: executing program 7 (id=2304): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104", @ANYBLOB], 0x48}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x44, 0x2, 0x6, 0xa03, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000380)={0xf, 0x1f, 0x2, 0x1}, 0xf) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5m17.574563594s ago: executing program 7 (id=2309): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f2, &(0x7f00000033c0)={'ip6tnl0\x00', &(0x7f0000003400)={'syztnl0\x00', 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, @empty, @empty, 0x40, 0x0, 0x3}}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) timerfd_create(0x7, 0x80000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000001380)={0x2020}, 0x1f8c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x4010}, 0x2800804c) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) mprotect(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1) setns(r5, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x82) syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) 5m17.373103148s ago: executing program 7 (id=2311): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001280)=ANY=[@ANYBLOB="3800000020000100ecc2000000000000020020000000000100000000140003006c6f0000000000000000000000000000080002"], 0x38}, 0x1, 0x0, 0x0, 0x4000085}, 0x8020) 5m16.8740012s ago: executing program 7 (id=2313): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./myproc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./myproc/interrupts\x00', 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002000)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000002040)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000002080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000020c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002100)=""/102368, 0x18fe0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, 0x6d7, 0x80000002) 5m15.520761889s ago: executing program 7 (id=2315): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x40, 0x2, 0x6, 0xa03, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd3}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000380)={0xf, 0x1f, 0x2, 0x1}, 0xf) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5m0.432227428s ago: executing program 41 (id=2315): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x40, 0x2, 0x6, 0xa03, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd3}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000380)={0xf, 0x1f, 0x2, 0x1}, 0xf) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5.40354122s ago: executing program 8 (id=3402): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)={0x114, 0x27, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@generic="24d4e3455c7216da3484447f8a081f930884b55764ca84de3d0e7bc8d6f29cd84ba9408cf2351604f1724e10a8fcc3988de886d82375980e92a1ba2f8410b06773cbbf6293af17222761aa1289e6a8f1d888f4809cdccfe1c8695630dcb6bad9b53d1d97f2f820a715ce709fcaa40a70dc4c98ebbe761c0eec46d4f50508215e72fc781a471b1a7c769a074f2d6388253cfdd4b0e37a788fbb7296ae39bb35439c66437fa3347adfaca46f74fbc95f1b070287096cc9bdc953ea637c118a68a8ddc03aa44e8aa8ca5dac063a05", @typed={0x2d, 0x0, 0x0, 0x0, @binary="8bb982eb4ec7e08b552a2807c00bbfbbb5369dd1e04690a1267e29e89d27673db50050419e278e6130"}]}]}, 0x114}], 0x1}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000007c0)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40000000}}}}}}, 0x0) 4.848003451s ago: executing program 8 (id=3405): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) 4.550667056s ago: executing program 8 (id=3409): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000232c0)={0x0, 0x0, &(0x7f0000023300)={&(0x7f0000023340)=ANY=[@ANYBLOB="480000000206050400000000000000000a00000005000100070000000900020073797a30000000000d000300686173683a6e6574000000000500040000000000050005000a00"], 0x48}}, 0x0) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000023500)={0x0, 0x0, &(0x7f0000023580)={&(0x7f00000235c0)={0x2c, 0xa, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) 4.288347828s ago: executing program 8 (id=3412): r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0) read(r0, &(0x7f0000000680)=""/150, 0x96) 3.998016727s ago: executing program 8 (id=3416): openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fanotify_init(0x200, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000100)='auxv\x00') socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init() syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) userfaultfd(0x801) userfaultfd(0x801) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000140)=""/41, 0x29}], 0x1) ptrace$setregs(0xd, r2, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r2, 0x5, 0x4) 3.833329054s ago: executing program 0 (id=3418): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x40d, 0x70bd2f, 0x1ffffffc, {0x0, 0x0, 0x0, 0x0, 0x40046, 0x10821}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x7}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 3.825619244s ago: executing program 2 (id=3419): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./debug\x00', 0x1ff) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setscheduler(0x0, 0x1, &(0x7f0000002900)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002940), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000002980)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000029c0)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000002a00)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000002a80)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x40a, 0x2b7906, 0x10003}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 3.245149241s ago: executing program 0 (id=3422): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x68, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x68}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r0, @ANYBLOB="010000000000000000000500000030000180060001000a00de0006000200110000001400030000000000000000000000000000000001060004001f900000480002801400010000000000000000000000000000000000060002001fc49f00080003000200000008000400010000000800050000000000080006"], 0x8c}}, 0x0) 3.198666488s ago: executing program 2 (id=3423): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000007c0)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40000000}}}}}}, 0x0) 3.15261833s ago: executing program 8 (id=3424): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000006440)={'syz_tun\x00', 0x101}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) 3.077155428s ago: executing program 3 (id=3425): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="9b060000003800001c00128009000100626f6e64000000000c0002800500010006"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x401, 0x70bd29, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x4008010) 2.928606838s ago: executing program 2 (id=3426): r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0) read(r0, &(0x7f0000000680)=""/150, 0x96) 2.861305453s ago: executing program 0 (id=3427): r0 = syz_open_dev$sg(&(0x7f000000ad40), 0xa, 0x2001) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, 0xfffffffffffffffc) 2.602489878s ago: executing program 0 (id=3429): mount(0x0, &(0x7f0000000180)='./sec\x00', &(0x7f00000001c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sec/tomoyo/exception_policy\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000240)={0x2020}, 0x2066) 2.533391938s ago: executing program 2 (id=3430): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000580), 0x1c0002, 0x0) write$vga_arbiter(r0, &(0x7f0000000740)=ANY=[@ANYBLOB='lock io'], 0xc) write$vga_arbiter(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB='unlock io+'], 0xe) 2.252769947s ago: executing program 0 (id=3431): mmap$IORING_OFF_SQ_RING(0x0, 0x90b, 0x11, 0x80010, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000015c0)='./proc\x00', &(0x7f0000001600)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001640)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f0000000440)={0xa, 0x4e23, 0xfffffffc, @empty, 0x9ada}, 0x1c) listen(r1, 0xffe) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f00000004c0)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) 2.252556571s ago: executing program 1 (id=3432): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f0000000180)={0x48}) 2.230845368s ago: executing program 3 (id=3433): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @private1, 0xa, 0x1}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)='>', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[{0x18, 0x84, 0x5, "c7"}], 0x18}}], 0x2, 0xc88c4) 2.025596361s ago: executing program 2 (id=3434): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000280)={0x0, 0x0}) r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200000ee0000, 0x1}) ioctl$KVM_CREATE_VM(r2, 0xc080aed2, 0x200000000006) 1.858355267s ago: executing program 1 (id=3435): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) 1.74163472s ago: executing program 3 (id=3436): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000007c0)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40000000}}}}}}, 0x0) 1.52868606s ago: executing program 1 (id=3437): sched_setscheduler(0x0, 0x1, 0x0) openat$kvm(0x0, &(0x7f00000192c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x6) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f0000019300)=@other={0x20300002000006a0, 0x0}) 1.209153821s ago: executing program 2 (id=3438): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x40102, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x8000, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}, @uuid={'CRP-syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000380)={0x4, 0x0, 0x0, 0x1b8, 0x138, 0x1, 0x0, 0x84801, 0x0, 0x0, @by_dev={r1}, [@cache={0x0, 0x80, 0x0, 0x80, 'cache\x00', {@ram_num={'1:', 0x1}, 0x20, @ram_num={'1:', 0x0}, 0x20, @ram={'/dev/ram', 0x0}, 0x20, '512', 0x20, '1 no_discard_passdown', 0x20, 'mq 0'}}]}) 1.125319776s ago: executing program 3 (id=3439): openat$tun(0xffffffffffffff9c, 0x0, 0xc0100, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000001fcc0)=ANY=[@ANYBLOB="300000001900010000000000000000001c140000fe0200"], 0x30}}, 0x0) 1.121160957s ago: executing program 1 (id=3440): ioprio_set$uid(0x3, 0x0, 0x0) syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) 693.233371ms ago: executing program 3 (id=3441): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0xae, 0x80000000, 0x9, @mcast2, @ipv4={'\x00', '\xff\xff', @empty}, 0x20, 0x80, 0x4, 0x200}}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x173) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='10', 0x2) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xfffffbfc, 0x2, 0xfeff0000}, 0x2e) 501.034339ms ago: executing program 1 (id=3442): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) 383.693602ms ago: executing program 1 (id=3443): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="9b060000003800001c00128009000100626f6e64000000000c0002800500010006"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x401, 0x70bd29, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x4008010) 21.775713ms ago: executing program 0 (id=3444): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000024840)={0x0}) 0s ago: executing program 3 (id=3445): openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fanotify_init(0x200, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000100)='auxv\x00') socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init() syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) userfaultfd(0x801) userfaultfd(0x801) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000140)=""/41, 0x29}], 0x1) ptrace$setregs(0xd, r2, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r2, 0x5, 0x4) kernel console output (not intermixed with test programs): IND [ 1388.218641][T17321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1388.218650][T17321] Call Trace: [ 1388.218658][T17321] [ 1388.218668][T17321] dump_stack_lvl+0xe8/0x150 [ 1388.218702][T17321] should_fail_ex+0x46b/0x600 [ 1388.218724][T17321] should_failslab+0xa8/0x100 [ 1388.218736][T17321] ? anon_vma_clone+0x3f3/0x9f0 [ 1388.218751][T17321] kmem_cache_alloc_noprof+0x99/0x680 [ 1388.218767][T17321] ? vm_area_dup+0x28/0x750 [ 1388.218783][T17321] ? anon_vma_clone+0x3f3/0x9f0 [ 1388.218801][T17321] anon_vma_clone+0x3f3/0x9f0 [ 1388.218821][T17321] copy_vma+0x77e/0xb50 [ 1388.218840][T17321] ? __pfx_copy_vma+0x10/0x10 [ 1388.218856][T17321] ? __vma_start_exclude_readers+0x6dd/0x9b0 [ 1388.218881][T17321] ? move_vma+0x9a0/0x1bc0 [ 1388.218898][T17321] move_vma+0xbed/0x1bc0 [ 1388.218922][T17321] ? __pfx_move_vma+0x10/0x10 [ 1388.218937][T17321] ? arch_get_unmapped_area_topdown+0x269/0xc50 [ 1388.218953][T17321] ? mtree_load+0x12a/0x780 [ 1388.218971][T17321] ? mtree_load+0x12a/0x780 [ 1388.218989][T17321] ? cap_mmap_addr+0xaa/0xf0 [ 1388.219003][T17321] ? bpf_lsm_mmap_addr+0x9/0x50 [ 1388.219014][T17321] ? security_mmap_addr+0x71/0x240 [ 1388.219031][T17321] mremap_to+0x7f9/0x8d0 [ 1388.219062][T17321] ? __pfx_mremap_to+0x10/0x10 [ 1388.219087][T17321] ? __pfx_check_prep_vma+0x10/0x10 [ 1388.219109][T17321] ? mas_walk+0x381/0x490 [ 1388.219123][T17321] ? mas_find+0x645/0xcb0 [ 1388.219140][T17321] __se_sys_mremap+0xd48/0x12e0 [ 1388.219159][T17321] ? __pfx___se_sys_mremap+0x10/0x10 [ 1388.219170][T17321] ? do_futex+0x3e7/0x4e0 [ 1388.219188][T17321] ? smack_file_ioctl+0x265/0x370 [ 1388.219207][T17321] ? __se_sys_futex+0x3a8/0x450 [ 1388.219230][T17321] ? __x64_sys_mremap+0x20/0xc0 [ 1388.219244][T17321] do_syscall_64+0x166/0x520 [ 1388.219256][T17321] ? trace_irq_disable+0x3b/0x140 [ 1388.219268][T17321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1388.219280][T17321] ? clear_bhb_loop+0x70/0xc0 [ 1388.219293][T17321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1388.219305][T17321] RIP: 0033:0x7f0ba38df559 [ 1388.219317][T17321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1388.219327][T17321] RSP: 002b:00007f0ba1b2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 1388.219349][T17321] RAX: ffffffffffffffda RBX: 00007f0ba3b65fa0 RCX: 00007f0ba38df559 [ 1388.219358][T17321] RDX: 0000000000003000 RSI: 0000000000003000 RDI: 0000200000ff1000 [ 1388.219366][T17321] RBP: 00007f0ba3976b20 R08: 0000200000ff6000 R09: 0000000000000000 [ 1388.219374][T17321] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 1388.219382][T17321] R13: 00007f0ba3b66038 R14: 00007f0ba3b65fa0 R15: 00007ffcc14a2538 [ 1388.219399][T17321] [ 1390.030900][T17334] Bluetooth: MGMT ver 1.23 [ 1390.331308][T17343] FAULT_INJECTION: forcing a failure. [ 1390.331308][T17343] name failslab, interval 1, probability 5, space 0, times 9995 [ 1390.331348][T17343] CPU: 1 UID: 0 PID: 17343 Comm: syz.8.2290 Tainted: G L Y syzkaller #0 PREEMPT_{RT,(full)} [ 1390.331378][T17343] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1390.331387][T17343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1390.331399][T17343] Call Trace: [ 1390.331406][T17343] [ 1390.331416][T17343] dump_stack_lvl+0xe8/0x150 [ 1390.331452][T17343] should_fail_ex+0x46b/0x600 [ 1390.331488][T17343] should_failslab+0xa8/0x100 [ 1390.331510][T17343] ? vm_area_dup+0x28/0x750 [ 1390.331539][T17343] kmem_cache_alloc_noprof+0x99/0x680 [ 1390.331568][T17343] ? vm_area_dup+0x28/0x750 [ 1390.331600][T17343] vm_area_dup+0x28/0x750 [ 1390.331626][T17343] ? __split_vma+0x1b7/0xa00 [ 1390.331658][T17343] __split_vma+0x1d7/0xa00 [ 1390.331708][T17343] ? __pfx___split_vma+0x10/0x10 [ 1390.331749][T17343] ? mas_find+0x6d9/0xcb0 [ 1390.331780][T17343] vms_gather_munmap_vmas+0x322/0x1370 [ 1390.331802][T17343] ? __lock_acquire+0x747/0x2de0 [ 1390.331845][T17343] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1390.331877][T17343] ? lock_acquire+0x115/0x350 [ 1390.331912][T17343] do_vmi_align_munmap+0x2c7/0x4d0 [ 1390.331931][T17343] ? pgd_offset_pgd+0x4c/0xa0 [ 1390.331970][T17343] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 1390.332020][T17343] ? mas_walk+0x381/0x490 [ 1390.332048][T17343] ? mas_find+0x645/0xcb0 [ 1390.332076][T17343] do_vmi_munmap+0x252/0x2d0 [ 1390.332103][T17343] move_vma+0x1453/0x1bc0 [ 1390.332146][T17343] ? __pfx_move_vma+0x10/0x10 [ 1390.332174][T17343] ? arch_get_unmapped_area_topdown+0x269/0xc50 [ 1390.332204][T17343] ? mtree_load+0x12a/0x780 [ 1390.332235][T17343] ? mtree_load+0x12a/0x780 [ 1390.332269][T17343] ? cap_mmap_addr+0xaa/0xf0 [ 1390.332293][T17343] ? bpf_lsm_mmap_addr+0x9/0x50 [ 1390.332314][T17343] ? security_mmap_addr+0x71/0x240 [ 1390.332346][T17343] mremap_to+0x7f9/0x8d0 [ 1390.332373][T17343] ? __pfx_mremap_to+0x10/0x10 [ 1390.332398][T17343] ? __pfx_check_prep_vma+0x10/0x10 [ 1390.332423][T17343] ? mas_walk+0x381/0x490 [ 1390.332448][T17343] ? mas_find+0x645/0xcb0 [ 1390.332477][T17343] __se_sys_mremap+0xd48/0x12e0 [ 1390.332510][T17343] ? __pfx___se_sys_mremap+0x10/0x10 [ 1390.332530][T17343] ? do_futex+0x458/0x4e0 [ 1390.332563][T17343] ? smack_file_ioctl+0x265/0x370 [ 1390.332594][T17343] ? __se_sys_futex+0x3a8/0x450 [ 1390.332637][T17343] ? __x64_sys_mremap+0x20/0xc0 [ 1390.332662][T17343] do_syscall_64+0x166/0x520 [ 1390.332694][T17343] ? trace_irq_disable+0x3b/0x140 [ 1390.332713][T17343] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.332735][T17343] ? clear_bhb_loop+0x70/0xc0 [ 1390.332760][T17343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.332782][T17343] RIP: 0033:0x7f1002b8f559 [ 1390.332802][T17343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1390.332821][T17343] RSP: 002b:00007f1000dde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 1390.332846][T17343] RAX: ffffffffffffffda RBX: 00007f1002e15fa0 RCX: 00007f1002b8f559 [ 1390.332863][T17343] RDX: 0000000000003000 RSI: 0000000000003000 RDI: 0000200000ff1000 [ 1390.332877][T17343] RBP: 00007f1002c26b20 R08: 0000200000ff6000 R09: 0000000000000000 [ 1390.332892][T17343] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 1390.332906][T17343] R13: 00007f1002e16038 R14: 00007f1002e15fa0 R15: 00007ffc37b8ee48 [ 1390.332939][T17343] [ 1390.794216][T17345] block2mtd: error: cannot open device #! ./mnt/module/block2mtd/parameters/block2mtd [ 1390.794216][T17345] NĘż°lņŃ× [ 1391.787724][T17354] FAULT_INJECTION: forcing a failure. [ 1391.787724][T17354] name failslab, interval 1, probability 5, space 0, times 9994 [ 1391.787769][T17354] CPU: 0 UID: 0 PID: 17354 Comm: syz.7.2294 Tainted: G L Y syzkaller #0 PREEMPT_{RT,(full)} [ 1391.787804][T17354] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1391.787814][T17354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1391.787828][T17354] Call Trace: [ 1391.787837][T17354] [ 1391.787848][T17354] dump_stack_lvl+0xe8/0x150 [ 1391.787886][T17354] should_fail_ex+0x46b/0x600 [ 1391.787924][T17354] should_failslab+0xa8/0x100 [ 1391.787947][T17354] ? mempool_init_node+0x21f/0x510 [ 1391.787977][T17354] kmem_cache_alloc_noprof+0x99/0x680 [ 1391.788004][T17354] ? mempool_init_node+0x21f/0x510 [ 1391.788026][T17354] ? mempool_init_node+0x21f/0x510 [ 1391.788055][T17354] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 1391.788081][T17354] mempool_init_node+0x21f/0x510 [ 1391.788115][T17354] ? __pfx_mempool_free_slab+0x10/0x10 [ 1391.788140][T17354] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 1391.788165][T17354] mempool_init_noprof+0x3a/0x50 [ 1391.788194][T17354] bioset_init+0x2f6/0x7e0 [ 1391.788225][T17354] ? __pfx_bioset_init+0x10/0x10 [ 1391.788251][T17354] ? mempool_init_node+0x474/0x510 [ 1391.788291][T17354] ? __pfx_mempool_free_slab+0x10/0x10 [ 1391.788317][T17354] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 1391.788343][T17354] ? mempool_init_noprof+0x3a/0x50 [ 1391.788372][T17354] dm_io_client_create+0xb6/0x100 [ 1391.788399][T17354] dm_bufio_client_create+0x82f/0x15a0 [ 1391.788439][T17354] ? __pfx_dm_bufio_client_create+0x10/0x10 [ 1391.788460][T17354] ? sync_rw_sb+0x543/0x810 [ 1391.788491][T17354] ? calculate_device_limits+0xa84/0x1100 [ 1391.788532][T17354] ? calculate_device_limits+0xa84/0x1100 [ 1391.788583][T17354] dm_integrity_ctr+0x4818/0x5e10 [ 1391.788641][T17354] ? __pfx_dm_integrity_ctr+0x10/0x10 [ 1391.788678][T17354] ? __pfx_rcu_is_watching+0x10/0x10 [ 1391.788710][T17354] ? skip_spaces+0x8a/0xa0 [ 1391.788736][T17354] ? dm_split_args+0x50b/0x5d0 [ 1391.788763][T17354] ? up_read+0x34/0x180 [ 1391.788794][T17354] dm_table_add_target+0x58d/0xc70 [ 1391.788835][T17354] table_load+0x325/0x8a0 [ 1391.788868][T17354] ? __pfx_table_load+0x10/0x10 [ 1391.788895][T17354] ? __pfx_table_load+0x10/0x10 [ 1391.788928][T17354] dm_ctl_ioctl+0x9ec/0xe10 [ 1391.788960][T17354] ? __pfx_table_load+0x10/0x10 [ 1391.788983][T17354] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 1391.789038][T17354] ? __fget_files+0x2a/0x420 [ 1391.789069][T17354] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1391.789092][T17354] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 1391.789114][T17354] __se_sys_ioctl+0xff/0x170 [ 1391.789149][T17354] do_syscall_64+0x166/0x520 [ 1391.789174][T17354] ? trace_irq_disable+0x3b/0x140 [ 1391.789195][T17354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1391.789218][T17354] ? clear_bhb_loop+0x70/0xc0 [ 1391.789245][T17354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1391.789268][T17354] RIP: 0033:0x7f0ba38df559 [ 1391.789289][T17354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1391.789309][T17354] RSP: 002b:00007f0ba1b2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1391.789334][T17354] RAX: ffffffffffffffda RBX: 00007f0ba3b65fa0 RCX: 00007f0ba38df559 [ 1391.789351][T17354] RDX: 0000200000000180 RSI: 00000000c138fd09 RDI: 0000000000000006 [ 1391.789367][T17354] RBP: 00007f0ba3976b20 R08: 0000000000000000 R09: 0000000000000000 [ 1391.789381][T17354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1391.789395][T17354] R13: 00007f0ba3b66038 R14: 00007f0ba3b65fa0 R15: 00007ffcc14a2538 [ 1391.789430][T17354] [ 1391.897924][T17354] device-mapper: table: 248:5: integrity: Cannot initialize dm-bufio (-ENOMEM) [ 1391.898026][T17354] device-mapper: ioctl: error adding target to table [ 1398.874416][T15498] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1398.922133][T15498] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1398.923460][T15498] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1398.924480][T15498] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1398.925392][T15498] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1400.257217][ T9344] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1400.272473][ T9344] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1400.320382][ T9344] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1400.336726][ T9344] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1400.337439][ T9344] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1401.150680][ T9344] Bluetooth: hci1: command tx timeout [ 1402.510644][ T9344] Bluetooth: hci5: command tx timeout [ 1403.230799][ T9344] Bluetooth: hci1: command tx timeout [ 1404.590661][ T9344] Bluetooth: hci5: command tx timeout [ 1405.290832][T17367] syzkaller0: entered promiscuous mode [ 1405.290861][T17367] syzkaller0: entered allmulticast mode [ 1405.312056][ T9344] Bluetooth: hci1: command tx timeout [ 1406.684923][ T9344] Bluetooth: hci5: command tx timeout [ 1407.126575][T17381] rxe_eth0 speed is unknown, defaulting to 1000 [ 1407.390608][ T9344] Bluetooth: hci1: command tx timeout [ 1407.502827][ T1243] usb 9-1: new full-speed USB device number 34 using dummy_hcd [ 1407.686378][ T1243] usb 9-1: not running at top speed; connect to a high speed hub [ 1407.686421][ T1243] usb 9-1: New USB device found: idVendor=06cd, idProduct=0131, bcdDevice=1.00 [ 1407.687683][ T1243] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1407.687730][ T1243] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1407.691356][ T1243] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1407.691381][ T1243] usb 9-1: Product: syz [ 1407.691395][ T1243] usb 9-1: Manufacturer: syz [ 1407.691408][ T1243] usb 9-1: SerialNumber: syz [ 1407.778259][ T1243] keyspan 9-1:1.0: Keyspan 4 port adapter converter detected [ 1407.778954][ T1243] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 81 [ 1407.779028][ T1243] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 88 [ 1407.794381][T15498] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1407.831154][T15498] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1407.840050][T15498] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1407.846768][T15498] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1407.847484][T15498] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1407.910782][ T1243] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1408.075299][ T1243] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1408.149808][ T1243] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 4 [ 1408.252828][ T1243] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1408.269383][ T1243] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 6 [ 1408.297851][ T1243] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1408.331319][ T1243] usb 9-1: USB disconnect, device number 34 [ 1408.417052][ T1243] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1408.439338][ T1243] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1408.495204][ T1243] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1408.584338][ T1243] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1408.587738][ T1243] keyspan 9-1:1.0: device disconnected [ 1408.756093][ T9344] Bluetooth: hci5: command tx timeout [ 1409.075552][T17374] rxe_eth0 speed is unknown, defaulting to 1000 [ 1409.727829][T17462] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2305'. [ 1409.757060][T17462] Bluetooth: (null): Too short H5 packet [ 1410.140705][ T9344] Bluetooth: hci4: command tx timeout [ 1410.176394][T17472] input: syz1 as /devices/virtual/input/input12 [ 1410.605070][T17425] rxe_eth0 speed is unknown, defaulting to 1000 [ 1411.983437][T17381] bridge0: port 1(bridge_slave_0) entered blocking state [ 1411.983509][T17381] bridge0: port 1(bridge_slave_0) entered disabled state [ 1411.983830][T17381] bridge_slave_0: entered allmulticast mode [ 1411.994444][T17381] bridge_slave_0: entered promiscuous mode [ 1412.100279][T17381] bridge0: port 2(bridge_slave_1) entered blocking state [ 1412.104975][T17381] bridge0: port 2(bridge_slave_1) entered disabled state [ 1412.105333][T17381] bridge_slave_1: entered allmulticast mode [ 1412.129640][T17381] bridge_slave_1: entered promiscuous mode [ 1412.190576][ T9344] Bluetooth: hci4: command tx timeout [ 1412.478656][T17381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1412.616272][T17381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1413.056566][T17381] team0: Port device team_slave_0 added [ 1413.079831][T17374] bridge0: port 1(bridge_slave_0) entered blocking state [ 1413.079957][T17374] bridge0: port 1(bridge_slave_0) entered disabled state [ 1413.080154][T17374] bridge_slave_0: entered allmulticast mode [ 1413.091161][T17374] bridge_slave_0: entered promiscuous mode [ 1413.104634][T17381] team0: Port device team_slave_1 added [ 1413.136857][T17374] bridge0: port 2(bridge_slave_1) entered blocking state [ 1413.138592][T17374] bridge0: port 2(bridge_slave_1) entered disabled state [ 1413.138783][T17374] bridge_slave_1: entered allmulticast mode [ 1413.171350][T17374] bridge_slave_1: entered promiscuous mode [ 1413.305672][T17381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1413.305689][T17381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1413.305714][T17381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1413.559582][T13729] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1413.693847][T17374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1413.740267][T17381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1413.740286][T17381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1413.740314][T17381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1413.797647][T17374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1414.270573][ T9344] Bluetooth: hci4: command tx timeout [ 1414.388669][T13729] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.493335][T17374] team0: Port device team_slave_0 added [ 1414.607961][T17374] team0: Port device team_slave_1 added [ 1414.747184][T17381] hsr_slave_0: entered promiscuous mode [ 1414.747933][T17381] hsr_slave_1: entered promiscuous mode [ 1414.750668][T17381] debugfs: 'hsr0' already exists in 'hsr' [ 1414.750691][T17381] Cannot create hsr debugfs directory [ 1415.311104][T13729] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1415.415858][T17374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1415.415883][T17374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1415.415908][T17374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1415.579377][T17425] bridge0: port 1(bridge_slave_0) entered blocking state [ 1415.579549][T17425] bridge0: port 1(bridge_slave_0) entered disabled state [ 1415.579734][T17425] bridge_slave_0: entered allmulticast mode [ 1415.584179][T17425] bridge_slave_0: entered promiscuous mode [ 1415.589361][T17374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1415.589376][T17374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1415.589403][T17374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1415.653104][T17425] bridge0: port 2(bridge_slave_1) entered blocking state [ 1415.653222][T17425] bridge0: port 2(bridge_slave_1) entered disabled state [ 1415.653394][T17425] bridge_slave_1: entered allmulticast mode [ 1415.655555][T17425] bridge_slave_1: entered promiscuous mode [ 1416.030115][T13729] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1416.350694][ T9344] Bluetooth: hci4: command tx timeout [ 1416.406578][T17425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1416.504620][T17425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1416.614301][T17374] hsr_slave_0: entered promiscuous mode [ 1416.617792][T17374] hsr_slave_1: entered promiscuous mode [ 1416.640145][T17374] debugfs: 'hsr0' already exists in 'hsr' [ 1416.640174][T17374] Cannot create hsr debugfs directory [ 1416.942708][T17425] team0: Port device team_slave_0 added [ 1418.108648][T17425] team0: Port device team_slave_1 added [ 1418.718553][ T5273] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1418.719759][T17425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1418.719774][T17425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1418.719799][T17425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1418.815197][T17425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1418.815216][T17425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1418.815241][T17425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1420.338304][T17425] hsr_slave_0: entered promiscuous mode [ 1420.350269][T17425] hsr_slave_1: entered promiscuous mode [ 1420.369034][T17425] debugfs: 'hsr0' already exists in 'hsr' [ 1420.369066][T17425] Cannot create hsr debugfs directory [ 1422.824469][T13729] bridge_slave_1: left allmulticast mode [ 1422.824506][T13729] bridge_slave_1: left promiscuous mode [ 1422.824775][T13729] bridge0: port 2(bridge_slave_1) entered disabled state [ 1423.154444][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.154517][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.328131][T13729] bridge_slave_0: left allmulticast mode [ 1423.328166][T13729] bridge_slave_0: left promiscuous mode [ 1423.328495][T13729] bridge0: port 1(bridge_slave_0) entered disabled state [ 1423.621133][T13729] bridge_slave_1: left allmulticast mode [ 1423.621168][T13729] bridge_slave_1: left promiscuous mode [ 1423.621496][T13729] bridge0: port 2(bridge_slave_1) entered disabled state [ 1423.797797][T13729] bridge_slave_0: left allmulticast mode [ 1423.797834][T13729] bridge_slave_0: left promiscuous mode [ 1423.798878][T13729] bridge0: port 1(bridge_slave_0) entered disabled state [ 1425.092247][T13729] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1425.221272][T13729] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1425.315664][T13729] bond0 (unregistering): Released all slaves [ 1426.232985][T13729] bond0 (unregistering): (slave 30): Releasing backup interface [ 1426.312910][T13729] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1426.359922][T13729] bond0 (unregistering): Released all slaves [ 1428.110323][T15498] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1428.165741][T15498] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1428.178949][T15498] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1428.189737][T15498] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1428.194126][T15498] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1429.299158][ T5273] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1430.768100][T15498] Bluetooth: hci2: command tx timeout [ 1431.167968][ T5273] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1432.327281][T17613] rxe_eth0 speed is unknown, defaulting to 1000 [ 1432.830519][ T9344] Bluetooth: hci2: command tx timeout [ 1433.475099][ T5273] 8021q: adding VLAN 0 to HW filter on device eth25 [ 1435.210557][ T9344] Bluetooth: hci0: command 0x0406 tx timeout [ 1435.210599][ T9344] Bluetooth: hci2: command tx timeout [ 1435.402170][T13729] hsr_slave_0: left promiscuous mode [ 1435.440574][T13729] hsr_slave_1: left promiscuous mode [ 1435.441350][T13729] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1435.486770][T13729] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1435.620603][T13729] hsr_slave_0: left promiscuous mode [ 1435.660965][T13729] hsr_slave_1: left promiscuous mode [ 1435.661844][T13729] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1435.661877][T13729] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1435.684464][T13729] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1435.684487][T13729] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1435.779771][T13729] veth1_macvtap: left promiscuous mode [ 1435.789631][T13729] veth0_macvtap: left promiscuous mode [ 1435.789822][T13729] veth1_vlan: left promiscuous mode [ 1435.789942][T13729] veth0_vlan: left promiscuous mode [ 1436.393246][T13729] team0 (unregistering): Port device team_slave_1 removed [ 1436.432078][T13729] team0 (unregistering): Port device team_slave_0 removed [ 1437.021034][T13729] team0 (unregistering): Port device team_slave_1 removed [ 1437.061040][T13729] team0 (unregistering): Port device team_slave_0 removed [ 1437.230731][T15498] Bluetooth: hci2: command tx timeout [ 1437.244706][T17709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1438.850619][T17381] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1438.894446][T17381] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1438.896220][ T5273] 8021q: adding VLAN 0 to HW filter on device eth26 [ 1438.913093][T17613] bridge0: port 1(bridge_slave_0) entered blocking state [ 1438.913285][T17613] bridge0: port 1(bridge_slave_0) entered disabled state [ 1438.913473][T17613] bridge_slave_0: entered allmulticast mode [ 1438.922691][T17613] bridge_slave_0: entered promiscuous mode [ 1438.938359][T17381] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1439.019950][T17381] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1439.029359][T17613] bridge0: port 2(bridge_slave_1) entered blocking state [ 1439.029472][T17613] bridge0: port 2(bridge_slave_1) entered disabled state [ 1439.029648][T17613] bridge_slave_1: entered allmulticast mode [ 1439.052388][T17613] bridge_slave_1: entered promiscuous mode [ 1439.054154][T17381] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1439.139073][T17381] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1439.173195][T17381] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1439.238808][T17381] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1439.511185][T17613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1439.552869][T17613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1439.691743][T17613] team0: Port device team_slave_0 added [ 1439.712706][T17613] team0: Port device team_slave_1 added [ 1439.974118][T17613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1439.974136][T17613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1439.974158][T17613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1440.049803][T17613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1440.049822][T17613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1440.049850][T17613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1440.050367][T17374] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1440.254442][T17374] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1440.311576][T17374] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1440.345391][T17374] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1440.364535][T17374] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1440.449034][T17374] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1440.529833][T17374] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1440.566133][T17374] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1440.894972][T17613] hsr_slave_0: entered promiscuous mode [ 1440.897260][T17613] hsr_slave_1: entered promiscuous mode [ 1440.898057][T17613] debugfs: 'hsr0' already exists in 'hsr' [ 1440.898081][T17613] Cannot create hsr debugfs directory [ 1440.926502][ T5273] 8021q: adding VLAN 0 to HW filter on device eth27 [ 1441.151039][T13729] bridge_slave_1: left allmulticast mode [ 1441.151066][T13729] bridge_slave_1: left promiscuous mode [ 1441.151227][T13729] bridge0: port 2(bridge_slave_1) entered disabled state [ 1441.282441][T13729] bridge_slave_0: left allmulticast mode [ 1441.282474][T13729] bridge_slave_0: left promiscuous mode [ 1441.282641][T13729] bridge0: port 1(bridge_slave_0) entered disabled state [ 1441.891730][T13729] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1442.008318][T17804] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2386'. [ 1442.008373][T17804] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2386'. [ 1442.031036][T13729] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1442.113679][T17806] netlink: 'syz.8.2386': attribute type 10 has an invalid length. [ 1442.113702][T17806] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2386'. [ 1442.115241][T13729] bond0 (unregistering): Released all slaves [ 1442.187825][T17806] batadv0: entered promiscuous mode [ 1442.187865][T17806] batadv0: entered allmulticast mode [ 1442.188617][T17806] bridge0: port 3(batadv0) entered blocking state [ 1442.188757][T17806] bridge0: port 3(batadv0) entered disabled state [ 1442.242320][T17806] bridge0: port 3(batadv0) entered blocking state [ 1442.242445][T17806] bridge0: port 3(batadv0) entered forwarding state [ 1442.329290][ T47] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1442.329310][ T47] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1442.400778][T17425] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1442.476179][T17425] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1442.524553][T17425] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1442.599210][T17425] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1442.620031][T17425] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1442.668425][T17425] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1442.784350][T17425] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1442.835515][T17425] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1443.253081][T17381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1443.430716][T13729] hsr_slave_0: left promiscuous mode [ 1443.471143][T13729] hsr_slave_1: left promiscuous mode [ 1443.472357][T13729] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1443.521485][T13729] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1443.812890][T17844] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2392'. [ 1443.812969][T17844] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2392'. [ 1443.916168][T17846] netlink: 'syz.8.2392': attribute type 10 has an invalid length. [ 1443.916182][T17846] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2392'. [ 1444.061144][T13729] team0 (unregistering): Port device team_slave_1 removed [ 1444.112009][T13729] team0 (unregistering): Port device team_slave_0 removed [ 1444.297784][ T5273] 8021q: adding VLAN 0 to HW filter on device eth28 [ 1445.963159][T17875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1445.986016][T17381] 8021q: adding VLAN 0 to HW filter on device team0 [ 1446.288474][ T1527] bridge0: port 1(bridge_slave_0) entered blocking state [ 1446.288611][ T1527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1446.384910][ T1527] bridge0: port 2(bridge_slave_1) entered blocking state [ 1446.385128][ T1527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1447.071656][T17374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1448.211196][T17374] 8021q: adding VLAN 0 to HW filter on device team0 [ 1448.238749][T17425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1448.253176][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 1448.253342][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1448.386000][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 1448.386134][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1448.867926][T17425] 8021q: adding VLAN 0 to HW filter on device team0 [ 1448.912709][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1448.912848][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1448.973144][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1448.973309][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1451.465671][T17613] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1451.499062][T17613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1451.506145][T17613] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1451.538857][T17613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1451.547021][T17613] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1451.601630][T17613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1451.616718][T17613] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1451.683212][T17613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1451.698904][T17374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1451.707665][T17381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1451.818975][T17425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1452.209319][T17381] veth0_vlan: entered promiscuous mode [ 1452.213695][T17374] veth0_vlan: entered promiscuous mode [ 1452.256148][T18028] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2428'. [ 1452.301638][T17425] veth0_vlan: entered promiscuous mode [ 1452.336189][T17374] veth1_vlan: entered promiscuous mode [ 1452.345028][T17381] veth1_vlan: entered promiscuous mode [ 1452.373653][T17425] veth1_vlan: entered promiscuous mode [ 1452.563068][T17613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1452.631572][T17374] veth0_macvtap: entered promiscuous mode [ 1452.638958][T17381] veth0_macvtap: entered promiscuous mode [ 1452.694454][T17374] veth1_macvtap: entered promiscuous mode [ 1452.708307][T17425] veth0_macvtap: entered promiscuous mode [ 1452.715144][T17381] veth1_macvtap: entered promiscuous mode [ 1452.736751][T17613] 8021q: adding VLAN 0 to HW filter on device team0 [ 1452.755285][T17425] veth1_macvtap: entered promiscuous mode [ 1452.817110][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1452.817257][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1452.856226][T17374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1452.860294][ T3005] bridge0: port 2(bridge_slave_1) entered blocking state [ 1452.877006][ T3005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1452.905371][T17381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1452.927870][T17374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1452.956844][T17425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1452.959516][T17381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1453.038275][T17425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1454.999261][ T2956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1454.999284][ T2956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1455.349649][ T2956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1455.349674][ T2956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1455.473035][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.474365][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.584203][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.585001][ T2956] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.585198][ T2956] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.585865][ T2956] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.586073][ T2956] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.586241][ T2956] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.736287][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1455.736310][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1455.815218][ T2956] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.818989][ T2956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1455.819008][ T2956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1455.914858][ T2956] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1456.122125][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1456.122145][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1456.353198][ T61] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1456.362523][ T2956] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1456.542677][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1456.542698][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1458.163780][T17613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1459.240517][ T5005] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1459.391714][ T5005] usb 2-1: New USB device found: idVendor=04e6, idProduct=0005, bcdDevice=1.00 [ 1459.395184][ T5005] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1459.395213][ T5005] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1459.451869][ T5005] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.451899][ T5005] usb 2-1: Product: syz [ 1459.451914][ T5005] usb 2-1: Manufacturer: syz [ 1459.451928][ T5005] usb 2-1: SerialNumber: syz [ 1459.467783][T17613] veth0_vlan: entered promiscuous mode [ 1459.532332][ T5005] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 1459.586865][ T5005] ums-sddr09 2-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 1459.586865][ T5005] Please send a copy of this message to and [ 1459.836003][T17613] veth1_vlan: entered promiscuous mode [ 1459.940676][T17613] veth0_macvtap: entered promiscuous mode [ 1459.976820][T17613] veth1_macvtap: entered promiscuous mode [ 1460.129996][T17613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1460.166485][T17613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1460.218946][T18130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1460.221967][ T74] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1460.222020][ T74] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1460.222057][ T74] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1460.222092][ T74] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1460.285599][T18136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2442'. [ 1460.285676][T18136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2442'. [ 1460.437815][T18141] netlink: 'syz.3.2442': attribute type 10 has an invalid length. [ 1460.438215][T18141] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2442'. [ 1460.545970][T18141] batadv0: entered promiscuous mode [ 1460.545999][T18141] batadv0: entered allmulticast mode [ 1460.568438][T18141] bridge0: port 3(batadv0) entered blocking state [ 1460.569481][T18141] bridge0: port 3(batadv0) entered disabled state [ 1460.599892][ T5005] scsi host1: usb-storage 2-1:1.0 [ 1460.714227][ T5005] usb 2-1: USB disconnect, device number 31 [ 1461.087358][T18141] bridge0: port 3(batadv0) entered blocking state [ 1461.092920][T18141] bridge0: port 3(batadv0) entered forwarding state [ 1461.656414][ T74] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1461.656428][ T74] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1464.462955][T18166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2447'. [ 1464.463056][T18166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2447'. [ 1464.613810][T18177] netlink: 'syz.3.2447': attribute type 10 has an invalid length. [ 1464.613834][T18177] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2447'. [ 1464.785053][ T3005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1464.785078][ T3005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1465.299153][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1465.299169][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1465.669039][T18191] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2452'. [ 1466.059390][T18199] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1466.169340][T18208] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2455'. [ 1466.582854][T18221] netlink: 'syz.0.2456': attribute type 10 has an invalid length. [ 1466.582881][T18221] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2456'. [ 1466.859582][T18230] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1466.968082][T18221] batadv0: entered promiscuous mode [ 1466.968110][T18221] batadv0: entered allmulticast mode [ 1466.986863][T18221] bridge0: port 3(batadv0) entered blocking state [ 1466.988466][T18221] bridge0: port 3(batadv0) entered disabled state [ 1467.227298][T18221] bridge0: port 3(batadv0) entered blocking state [ 1467.227412][T18221] bridge0: port 3(batadv0) entered forwarding state [ 1467.480788][ T3005] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1467.480802][ T3005] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1467.965480][T18244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2459'. [ 1467.965555][T18244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2459'. [ 1468.038264][T18245] netlink: 'syz.0.2459': attribute type 10 has an invalid length. [ 1468.038282][T18245] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2459'. [ 1468.999806][T18256] input: syz1 as /devices/virtual/input/input13 [ 1471.577773][T18296] loop6: detected capacity change from 0 to 7 [ 1472.842633][T18303] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2469'. [ 1473.274568][T18313] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1473.455387][T18314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1476.529309][T18373] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2485'. [ 1477.212805][T18393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1477.244042][T18405] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2491'. [ 1477.738716][T18424] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2493'. [ 1477.776406][T18427] netlink: 'syz.8.2495': attribute type 10 has an invalid length. [ 1477.776422][T18427] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2495'. [ 1478.732436][T18469] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2502'. [ 1478.978193][T18479] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2505'. [ 1479.136191][T18479] team0: Port device team_slave_1 removed [ 1479.313235][T18487] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2506'. [ 1479.744913][T18493] bond1 (unregistering): Released all slaves [ 1479.938770][T18499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1480.598971][T18522] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2511'. [ 1485.671322][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.671398][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.261036][T18542] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2515'. [ 1487.557980][T18550] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2517'. [ 1489.011891][T18575] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1492.873511][T18608] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2530'. [ 1496.988227][ T35] audit: type=1326 audit(1793136444.792:4612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18651 comm="syz.3.2534" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cfd20f559 code=0x7ffc0000 [ 1497.018717][ T35] audit: type=1326 audit(1793136444.792:4613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18651 comm="syz.3.2534" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cfd20f559 code=0x7ffc0000 [ 1497.066576][ T35] audit: type=1326 audit(1793136444.872:4614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18651 comm="syz.3.2534" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cfd20f559 code=0x7ffc0000 [ 1497.066629][ T35] audit: type=1326 audit(1793136444.872:4615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18651 comm="syz.3.2534" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cfd20f559 code=0x7ffc0000 [ 1497.084999][ T35] audit: type=1326 audit(1793136444.882:4616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18651 comm="syz.3.2534" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f0cfd20f559 code=0x7ffc0000 [ 1497.085056][ T35] audit: type=1326 audit(1793136444.892:4617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18651 comm="syz.3.2534" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0cfd20f2c2 code=0x7ffc0000 [ 1497.129041][ T35] audit: type=1326 audit(1793136444.932:4618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18651 comm="syz.3.2534" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0cfd20f2c2 code=0x7ffc0000 [ 1497.132421][ T35] audit: type=1326 audit(1793136444.932:4619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18651 comm="syz.3.2534" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cfd20f559 code=0x7ffc0000 [ 1497.171227][ T35] audit: type=1326 audit(1793136444.982:4620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18651 comm="syz.3.2534" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cfd20f559 code=0x7ffc0000 [ 1497.192427][ T35] audit: type=1326 audit(1793136445.002:4621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18651 comm="syz.3.2534" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cfd20f559 code=0x7ffc0000 [ 1499.960475][T18678] CIFS: Attempting to mount //127.0.0.1/share [ 1499.970067][T18678] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1501.190349][T18691] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2543'. [ 1501.582104][T18693] bond1: (slave gretap0): Enslaving as an active interface with an up link [ 1502.236772][T18706] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2546'. [ 1503.188759][T18724] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2550'. [ 1503.421171][T18722] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1506.788722][T18758] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2557'. [ 1507.574177][T18773] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2561'. [ 1508.913116][ T35] kauditd_printk_skb: 160 callbacks suppressed [ 1508.913136][ T35] audit: type=1326 audit(1793136456.712:4782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18781 comm="syz.8.2563" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1002b8f559 code=0x7ffc0000 [ 1508.913182][ T35] audit: type=1326 audit(1793136456.712:4783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18781 comm="syz.8.2563" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1002b8f559 code=0x7ffc0000 [ 1508.913220][ T35] audit: type=1326 audit(1793136456.712:4784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18781 comm="syz.8.2563" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1002b8f559 code=0x7ffc0000 [ 1508.913258][ T35] audit: type=1326 audit(1793136456.732:4785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18781 comm="syz.8.2563" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f1002b8f559 code=0x7ffc0000 [ 1508.913297][ T35] audit: type=1326 audit(1793136456.732:4786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18781 comm="syz.8.2563" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1002b8f2c2 code=0x7ffc0000 [ 1509.039772][ T35] audit: type=1326 audit(1793136456.732:4787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18781 comm="syz.8.2563" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1002b8f2c2 code=0x7ffc0000 [ 1509.039827][ T35] audit: type=1326 audit(1793136456.842:4788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18781 comm="syz.8.2563" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1002b8f559 code=0x7ffc0000 [ 1509.039874][ T35] audit: type=1326 audit(1793136456.842:4789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18781 comm="syz.8.2563" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1002b8f559 code=0x7ffc0000 [ 1509.193974][ T35] audit: type=1326 audit(1793136456.972:4790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18781 comm="syz.8.2563" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1002b8f559 code=0x7ffc0000 [ 1509.194028][ T35] audit: type=1326 audit(1793136457.002:4791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18781 comm="syz.8.2563" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1002b8f559 code=0x7ffc0000 [ 1511.821164][T18815] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2569'. [ 1514.903418][ T35] kauditd_printk_skb: 179 callbacks suppressed [ 1514.903437][ T35] audit: type=1326 audit(1793136462.712:4971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18839 comm="syz.2.2555" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513241f559 code=0x7ffc0000 [ 1514.903734][ T35] audit: type=1326 audit(1793136462.712:4972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18839 comm="syz.2.2555" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513241f559 code=0x7ffc0000 [ 1514.907943][ T35] audit: type=1326 audit(1793136462.712:4973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18839 comm="syz.2.2555" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513241f559 code=0x7ffc0000 [ 1514.907994][ T35] audit: type=1326 audit(1793136462.712:4974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18839 comm="syz.2.2555" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513241f559 code=0x7ffc0000 [ 1514.910001][ T35] audit: type=1326 audit(1793136462.712:4975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18839 comm="syz.2.2555" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f513241f559 code=0x7ffc0000 [ 1514.910050][ T35] audit: type=1326 audit(1793136462.712:4976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18839 comm="syz.2.2555" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f513241f2c2 code=0x7ffc0000 [ 1514.912798][ T35] audit: type=1326 audit(1793136462.722:4977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18839 comm="syz.2.2555" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f513241f2c2 code=0x7ffc0000 [ 1514.915474][ T35] audit: type=1326 audit(1793136462.722:4978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18839 comm="syz.2.2555" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513241f559 code=0x7ffc0000 [ 1514.917755][ T35] audit: type=1326 audit(1793136462.722:4979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18839 comm="syz.2.2555" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513241f559 code=0x7ffc0000 [ 1514.932604][ T35] audit: type=1326 audit(1793136462.742:4980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18839 comm="syz.2.2555" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513241f559 code=0x7ffc0000 [ 1520.015087][T18882] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1523.392208][T15498] Bluetooth: hci1: command 0x0406 tx timeout [ 1523.472342][T15498] Bluetooth: hci5: command 0x0406 tx timeout [ 1523.502880][T10687] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.938122][ T35] kauditd_printk_skb: 332 callbacks suppressed [ 1526.938142][ T35] audit: type=1326 audit(1793136474.742:5313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18936 comm="syz.0.2591" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f11b7f559 code=0x7ffc0000 [ 1526.938256][ T35] audit: type=1326 audit(1793136474.742:5314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18936 comm="syz.0.2591" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f11b7f559 code=0x7ffc0000 [ 1526.964514][ T35] audit: type=1326 audit(1793136474.772:5315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18936 comm="syz.0.2591" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f11b7f559 code=0x7ffc0000 [ 1526.964563][ T35] audit: type=1326 audit(1793136474.772:5316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18936 comm="syz.0.2591" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f11b7f559 code=0x7ffc0000 [ 1526.965572][ T35] audit: type=1326 audit(1793136474.772:5317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18936 comm="syz.0.2591" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f1f11b7f559 code=0x7ffc0000 [ 1526.967464][ T35] audit: type=1326 audit(1793136474.772:5318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18936 comm="syz.0.2591" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1f11b7f2c2 code=0x7ffc0000 [ 1526.969214][ T35] audit: type=1326 audit(1793136474.772:5319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18936 comm="syz.0.2591" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1f11b7f2c2 code=0x7ffc0000 [ 1526.976588][ T35] audit: type=1326 audit(1793136474.782:5320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18936 comm="syz.0.2591" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f11b7f559 code=0x7ffc0000 [ 1526.976637][ T35] audit: type=1326 audit(1793136474.782:5321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18936 comm="syz.0.2591" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f11b7f559 code=0x7ffc0000 [ 1526.983428][ T35] audit: type=1326 audit(1793136474.792:5322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18936 comm="syz.0.2591" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f11b7f559 code=0x7ffc0000 [ 1527.239932][T10687] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1530.181167][T18953] input: syz1 as /devices/virtual/input/input15 [ 1530.354609][T10687] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1530.717804][T18966] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2587'. [ 1530.848792][T18955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1532.725028][T10687] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1532.750800][ T5616] Bluetooth: hci4: command 0x0406 tx timeout [ 1533.024655][T18980] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1537.682300][T10687] bridge_slave_1: left allmulticast mode [ 1537.682338][T10687] bridge_slave_1: left promiscuous mode [ 1537.682626][T10687] bridge0: port 2(bridge_slave_1) entered disabled state [ 1537.823376][T19027] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1537.941950][T10687] bridge_slave_0: left allmulticast mode [ 1537.941986][T10687] bridge_slave_0: left promiscuous mode [ 1537.942230][T10687] bridge0: port 1(bridge_slave_0) entered disabled state [ 1539.768035][T19069] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1541.053467][T10687] bond0 (unregistering): (slave 30): Releasing backup interface [ 1541.174919][T10687] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1541.381683][T10687] bond0 (unregistering): Released all slaves [ 1541.498217][T19039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1543.122234][ T35] kauditd_printk_skb: 229 callbacks suppressed [ 1543.122247][ T35] audit: type=1326 audit(1793136490.932:5552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19110 comm="syz.1.2618" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4de09f559 code=0x7ffc0000 [ 1543.122279][ T35] audit: type=1326 audit(1793136490.932:5553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19110 comm="syz.1.2618" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4de09f559 code=0x7ffc0000 [ 1543.136178][ T35] audit: type=1326 audit(1793136490.942:5554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19110 comm="syz.1.2618" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4de09f559 code=0x7ffc0000 [ 1543.138870][ T35] audit: type=1326 audit(1793136490.942:5555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19110 comm="syz.1.2618" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4de09f559 code=0x7ffc0000 [ 1543.140551][ T35] audit: type=1326 audit(1793136490.942:5556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19110 comm="syz.1.2618" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fd4de09f559 code=0x7ffc0000 [ 1543.140600][ T35] audit: type=1326 audit(1793136490.942:5557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19110 comm="syz.1.2618" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd4de09f2c2 code=0x7ffc0000 [ 1543.141367][ T35] audit: type=1326 audit(1793136490.952:5558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19110 comm="syz.1.2618" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4de09f559 code=0x7ffc0000 [ 1543.141832][ T35] audit: type=1326 audit(1793136490.952:5559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19110 comm="syz.1.2618" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd4de09f2c2 code=0x7ffc0000 [ 1543.144292][ T35] audit: type=1326 audit(1793136490.952:5560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19110 comm="syz.1.2618" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4de09f559 code=0x7ffc0000 [ 1543.144338][ T35] audit: type=1326 audit(1793136490.952:5561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19110 comm="syz.1.2618" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4de09f559 code=0x7ffc0000 [ 1545.041195][T19114] jffs2: notice: (19114) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 10 of xref (0 dead, 4 orphan) found. [ 1546.269132][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.269196][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1548.122424][T19144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1549.790508][T15861] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1549.944732][T15861] usb 4-1: Using ep0 maxpacket: 8 [ 1549.946772][T15861] usb 4-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1549.948103][T15861] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1549.948129][T15861] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1549.948150][T15861] usb 4-1: config 0 has no interface number 0 [ 1549.948191][T15861] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1549.948204][T15861] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 1549.948229][T15861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1550.056867][T15861] usb 4-1: config 0 descriptor?? [ 1550.084504][T15861] ldusb 4-1:0.55: Interrupt in endpoint not found [ 1550.324795][T15861] usb 4-1: USB disconnect, device number 19 [ 1550.855389][T10687] hsr_slave_0: left promiscuous mode [ 1550.934317][T10687] hsr_slave_1: left promiscuous mode [ 1550.935566][T10687] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1550.935593][T10687] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1551.008675][T10687] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1551.008697][T10687] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1551.679694][T19211] CIFS: Attempting to mount //127.0.0.1/share [ 1551.797440][T19211] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1553.721281][T10687] veth1_macvtap: left promiscuous mode [ 1553.721387][T10687] veth0_macvtap: left promiscuous mode [ 1553.721621][T10687] veth1_vlan: left promiscuous mode [ 1553.721880][T10687] veth0_vlan: left promiscuous mode [ 1554.475290][T19232] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1554.738645][T15498] Bluetooth: hci2: command 0x0406 tx timeout [ 1555.562355][T10687] team0 (unregistering): Port device team_slave_1 removed [ 1555.661202][T10687] team0 (unregistering): Port device team_slave_0 removed [ 1555.899906][T19221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1561.297721][T19267] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1562.175912][T19276] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1562.993385][ T5005] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1564.131203][ T5005] usb 4-1: New USB device found: idVendor=0681, idProduct=0005, bcdDevice=1.00 [ 1564.131780][ T5005] usb 4-1: config 0 has no interfaces? [ 1564.131801][ T5005] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1564.135631][ T5005] usb 4-1: config 0 descriptor?? [ 1564.344496][T19302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1564.605434][ T5273] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1565.631581][ T5005] usb 4-1: USB disconnect, device number 20 [ 1565.805492][T19320] jffs2: notice: (19320) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 10 of xref (0 dead, 4 orphan) found. [ 1565.863146][T19320] overlay: ./file0 is not a directory [ 1568.284557][T19334] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1569.868014][T19364] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2672'. [ 1569.940512][ T5005] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1570.959203][T15861] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1571.091148][ T5005] usb 1-1: New USB device found: idVendor=046d, idProduct=c52b, bcdDevice=24.00 [ 1571.103430][ T5005] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1571.103450][ T5005] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1571.105072][ T5005] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1571.105097][ T5005] usb 1-1: Product: syz [ 1571.105113][ T5005] usb 1-1: Manufacturer: syz [ 1571.251118][T15861] usb 2-1: New USB device found: idVendor=0681, idProduct=0005, bcdDevice=1.00 [ 1571.252426][T15861] usb 2-1: config 0 has no interfaces? [ 1571.252461][T15861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1571.307174][T15861] usb 2-1: config 0 descriptor?? [ 1571.778040][ T5005] hid_parser_main: 30 callbacks suppressed [ 1571.778068][ T5005] logitech-djreceiver 0003:046D:C52B.0008: unknown main item tag 0x0 [ 1571.778099][ T5005] logitech-djreceiver 0003:046D:C52B.0008: unknown main item tag 0x0 [ 1571.778128][ T5005] logitech-djreceiver 0003:046D:C52B.0008: unknown main item tag 0x0 [ 1571.778156][ T5005] logitech-djreceiver 0003:046D:C52B.0008: unknown main item tag 0x0 [ 1571.778184][ T5005] logitech-djreceiver 0003:046D:C52B.0008: unknown main item tag 0x0 [ 1571.778211][ T5005] logitech-djreceiver 0003:046D:C52B.0008: unknown main item tag 0x0 [ 1571.778238][ T5005] logitech-djreceiver 0003:046D:C52B.0008: unknown main item tag 0x0 [ 1571.778265][ T5005] logitech-djreceiver 0003:046D:C52B.0008: unknown main item tag 0x0 [ 1571.778299][ T5005] logitech-djreceiver 0003:046D:C52B.0008: unknown main item tag 0x0 [ 1571.778326][ T5005] logitech-djreceiver 0003:046D:C52B.0008: unknown main item tag 0x0 [ 1571.967321][ T5005] usb 1-1: USB disconnect, device number 41 [ 1571.976869][T19378] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1572.229969][ T5273] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1573.807949][T11328] usb 2-1: USB disconnect, device number 32 [ 1576.924718][T19420] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2685'. [ 1577.680866][T19445] jffs2: notice: (19445) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 10 of xref (0 dead, 4 orphan) found. [ 1577.718674][T19445] overlay: ./file0 is not a directory [ 1577.976206][ T5273] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1577.990732][T11328] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1578.144699][T11328] usb 4-1: New USB device found: idVendor=0681, idProduct=0005, bcdDevice=1.00 [ 1578.146961][T11328] usb 4-1: config 0 has no interfaces? [ 1578.146983][T11328] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1578.169219][T11328] usb 4-1: config 0 descriptor?? [ 1579.947932][T19468] input: syz1 as /devices/virtual/input/input16 [ 1580.270271][T19481] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2698'. [ 1580.873397][ T5617] usb 4-1: USB disconnect, device number 21 [ 1581.195357][ T5273] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1581.355063][T19504] kvm [19503]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x400003 [ 1582.227518][T19512] jffs2: notice: (19512) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 10 of xref (0 dead, 4 orphan) found. [ 1582.256719][T19512] overlay: ./file0 is not a directory [ 1582.558442][T19523] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2711'. [ 1583.723162][T19555] kvm [19552]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x400003 [ 1584.990592][T19586] jffs2: notice: (19586) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 10 of xref (0 dead, 4 orphan) found. [ 1585.842626][T19630] jffs2: notice: (19630) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 10 of xref (0 dead, 4 orphan) found. [ 1586.064588][T19628] overlay: ./file0 is not a directory [ 1587.422093][T19647] kvm [19646]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x400003 [ 1587.585297][T19655] jffs2: notice: (19655) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 10 of xref (0 dead, 4 orphan) found. [ 1587.615871][T19655] overlay: ./file0 is not a directory [ 1587.632613][T19653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1589.283154][T19672] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2759'. [ 1590.183152][T19687] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1592.806412][T19724] jffs2: notice: (19724) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 10 of xref (0 dead, 4 orphan) found. [ 1592.879744][T19725] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1593.038761][T19733] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1595.036226][T19748] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2771'. [ 1598.860415][T19794] jffs2: notice: (19794) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 10 of xref (0 dead, 4 orphan) found. [ 1599.332209][T19813] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2791'. [ 1600.828067][T19831] jffs2: notice: (19831) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 10 of xref (0 dead, 4 orphan) found. [ 1601.793608][T19843] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1604.977169][T19864] jffs2: notice: (19864) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 10 of xref (0 dead, 4 orphan) found. [ 1605.078350][T19864] overlay: ./file0 is not a directory [ 1605.237538][T19873] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2803'. [ 1606.505555][T19889] jffs2: notice: (19889) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 10 of xref (0 dead, 4 orphan) found. [ 1607.223278][T19901] jffs2: notice: (19901) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 10 of xref (0 dead, 4 orphan) found. [ 1607.262399][T19901] overlay: ./file0 is not a directory [ 1607.332625][T19910] jffs2: notice: (19910) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 10 of xref (0 dead, 4 orphan) found. [ 1607.878396][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.878451][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.182361][T19915] jffs2: notice: (19915) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 10 of xref (0 dead, 4 orphan) found. [ 1609.640799][T19930] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2814'. [ 1611.014998][T19957] jffs2: notice: (19957) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 10 of xref (0 dead, 4 orphan) found. [ 1611.065024][T19957] overlay: ./file0 is not a directory [ 1611.452480][T19970] jffs2: notice: (19970) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 10 of xref (0 dead, 4 orphan) found. [ 1611.817275][T19967] overlay: ./file0 is not a directory [ 1611.981505][T19976] input: syz1 as /devices/virtual/input/input17 [ 1612.282271][T19989] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1613.374683][T20010] jffs2: notice: (20010) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 10 of xref (0 dead, 4 orphan) found. [ 1613.411762][T20010] overlay: ./file0 is not a directory [ 1613.667012][T19998] jffs2: notice: (19998) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 10 of xref (0 dead, 4 orphan) found. [ 1613.828143][T19998] overlay: ./file0 is not a directory [ 1616.619111][T20088] jffs2: notice: (20088) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 10 of xref (0 dead, 4 orphan) found. [ 1622.697181][T20198] jffs2: notice: (20198) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 10 of xref (0 dead, 4 orphan) found. [ 1622.748867][T20198] overlay: ./file0 is not a directory [ 1623.488965][T20214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1624.403310][T20230] jffs2: notice: (20230) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 10 of xref (0 dead, 4 orphan) found. [ 1624.524807][T20227] jffs2: notice: (20227) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 10 of xref (0 dead, 4 orphan) found. [ 1624.536584][T20227] overlayfs: missing 'workdir' [ 1625.064828][T20247] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1625.675048][T20268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1626.742888][T20305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1629.907203][T20335] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1629.978608][T20341] jffs2: notice: (20341) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 10 of xref (0 dead, 4 orphan) found. [ 1630.017200][T20340] FAULT_INJECTION: forcing a failure. [ 1630.017200][T20340] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1630.017226][T20340] CPU: 0 UID: 0 PID: 20340 Comm: syz.0.2917 Tainted: G L Y syzkaller #0 PREEMPT_{RT,(full)} [ 1630.017243][T20340] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1630.017248][T20340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1630.017256][T20340] Call Trace: [ 1630.017261][T20340] [ 1630.017267][T20340] dump_stack_lvl+0xe8/0x150 [ 1630.017290][T20340] should_fail_ex+0x46b/0x600 [ 1630.017311][T20340] get_futex_key+0x1ab/0x1410 [ 1630.017331][T20340] ? __pfx_get_futex_key+0x10/0x10 [ 1630.017349][T20340] futex_wake+0x119/0x600 [ 1630.017382][T20340] ? __pfx_futex_wake+0x10/0x10 [ 1630.017401][T20340] ? security_file_alloc+0x34/0x310 [ 1630.017419][T20340] do_futex+0x458/0x4e0 [ 1630.017432][T20340] ? __asan_memcpy+0x40/0x70 [ 1630.017449][T20340] ? __pfx_do_futex+0x10/0x10 [ 1630.017467][T20340] __se_sys_futex+0x3a8/0x450 [ 1630.017483][T20340] ? fd_install+0x3a4/0x4e0 [ 1630.017496][T20340] ? __pfx___se_sys_futex+0x10/0x10 [ 1630.017509][T20340] ? fd_install+0x98/0x4e0 [ 1630.017525][T20340] ? __x64_sys_futex+0x21/0xf0 [ 1630.017541][T20340] do_syscall_64+0x166/0x520 [ 1630.017556][T20340] ? trace_irq_disable+0x3b/0x140 [ 1630.017570][T20340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1630.017582][T20340] ? clear_bhb_loop+0x70/0xc0 [ 1630.017596][T20340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1630.017608][T20340] RIP: 0033:0x7f1f11b7f559 [ 1630.017621][T20340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1630.017631][T20340] RSP: 002b:00007f1f0fdd60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1630.017645][T20340] RAX: ffffffffffffffda RBX: 00007f1f11e05fa8 RCX: 00007f1f11b7f559 [ 1630.017654][T20340] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1f11e05fac [ 1630.017662][T20340] RBP: 00007f1f11e05fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 1630.017669][T20340] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 1630.017676][T20340] R13: 00007f1f11e06038 R14: 00007ffe50454680 R15: 00007ffe50454768 [ 1630.017694][T20340] [ 1630.308631][T20341] overlay: ./file0 is not a directory [ 1630.327045][T20340] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1630.547451][T20348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1632.141052][T20380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1632.708982][T20399] nvme_fabrics: unknown parameter or missing value 'trad' in ctrl creation request [ 1633.169840][T15498] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1633.266266][T15498] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1633.286671][T15498] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1633.291914][T15498] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1633.294016][T15498] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1634.738380][T14496] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1636.158503][ T5616] Bluetooth: hci3: command tx timeout [ 1637.209988][T14496] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1638.279032][ T5616] Bluetooth: hci3: command tx timeout [ 1638.375130][T20401] rxe_eth0 speed is unknown, defaulting to 1000 [ 1638.605213][T20456] jffs2: notice: (20456) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 10 of xref (0 dead, 4 orphan) found. [ 1638.644498][T20456] overlay: ./file0 is not a directory [ 1639.381977][T14496] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1639.414487][T20467] jffs2: notice: (20467) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 10 of xref (0 dead, 4 orphan) found. [ 1639.613451][T20465] overlay: ./file0 is not a directory [ 1640.137605][T20482] loop6: detected capacity change from 0 to 7 [ 1641.667224][ T5616] Bluetooth: hci3: command tx timeout [ 1642.486179][T14496] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1642.802809][T20500] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1643.230482][T11687] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1643.398940][T11687] usb 2-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 1643.400650][T11687] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 1643.400678][T11687] usb 2-1: config 1 has no interface number 0 [ 1643.428160][T11687] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1643.428189][T11687] usb 2-1: Product: syz [ 1643.428205][T11687] usb 2-1: Manufacturer: syz [ 1643.428220][T11687] usb 2-1: SerialNumber: syz [ 1643.519972][T11687] usb 2-1: 3:1 : does not exist [ 1643.519988][T11687] usb 2-1: 3:2 : does not exist [ 1644.187643][ T5616] Bluetooth: hci3: command tx timeout [ 1646.031521][T14496] bridge0: port 3(batadv0) entered disabled state [ 1646.135594][T20527] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1646.250214][T14496] bridge_slave_1: left allmulticast mode [ 1646.256791][T14496] bridge_slave_1: left promiscuous mode [ 1646.257779][T14496] bridge0: port 2(bridge_slave_1) entered disabled state [ 1646.419405][T14496] bridge_slave_0: left allmulticast mode [ 1646.419746][T14496] bridge_slave_0: left promiscuous mode [ 1646.432634][T14496] bridge0: port 1(bridge_slave_0) entered disabled state [ 1649.443560][T11687] usb 2-1: USB disconnect, device number 33 [ 1649.645166][T14496] bond0 (unregistering): (slave 30): Releasing backup interface [ 1649.648186][T19252] udevd[19252]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1649.723811][T14496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1649.767965][T14496] bond0 (unregistering): Released all slaves [ 1649.835219][T14496] bond1 (unregistering): Released all slaves [ 1649.950987][ T5273] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1650.253394][T20401] bridge0: port 1(bridge_slave_0) entered blocking state [ 1650.253966][T20401] bridge0: port 1(bridge_slave_0) entered disabled state [ 1650.254118][T20401] bridge_slave_0: entered allmulticast mode [ 1650.285396][T20401] bridge_slave_0: entered promiscuous mode [ 1650.316734][T20401] bridge0: port 2(bridge_slave_1) entered blocking state [ 1650.316932][T20401] bridge0: port 2(bridge_slave_1) entered disabled state [ 1650.317102][T20401] bridge_slave_1: entered allmulticast mode [ 1650.363369][T20401] bridge_slave_1: entered promiscuous mode [ 1650.479838][T20401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1650.501382][T20401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1652.589093][T20401] team0: Port device team_slave_0 added [ 1652.608066][T20401] team0: Port device team_slave_1 added [ 1653.072528][T20401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1653.072546][T20401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1653.072561][T20401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1653.074868][ T5273] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1653.076138][T20401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1653.076152][T20401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1653.076179][T20401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1653.799777][T20630] jffs2: notice: (20630) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 10 of xref (0 dead, 4 orphan) found. [ 1653.911416][T20401] hsr_slave_0: entered promiscuous mode [ 1653.986733][T20401] hsr_slave_1: entered promiscuous mode [ 1654.029321][T20627] overlay: ./file0 is not a directory [ 1654.783746][T20636] jffs2: notice: (20636) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 10 of xref (0 dead, 4 orphan) found. [ 1654.815925][T20636] overlay: ./file0 is not a directory [ 1655.237506][T20649] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1655.672300][T14496] hsr_slave_0: left promiscuous mode [ 1655.711626][T14496] hsr_slave_1: left promiscuous mode [ 1655.712437][T14496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1655.712455][T14496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1655.778646][T14496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1655.778671][T14496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1655.921530][T14496] veth1_macvtap: left promiscuous mode [ 1655.921593][T14496] veth0_macvtap: left promiscuous mode [ 1655.921738][T14496] veth1_vlan: left promiscuous mode [ 1655.921844][T14496] veth0_vlan: left promiscuous mode [ 1658.591396][T14496] team0 (unregistering): Port device team_slave_1 removed [ 1658.650953][T14496] team0 (unregistering): Port device team_slave_0 removed [ 1659.441263][T20703] jffs2: notice: (20703) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 10 of xref (0 dead, 4 orphan) found. [ 1659.478914][T20703] overlay: ./file0 is not a directory [ 1659.540582][ T5273] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1663.893665][T20809] jffs2: notice: (20809) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 10 of xref (0 dead, 4 orphan) found. [ 1663.925131][T20809] overlay: ./file0 is not a directory [ 1666.422501][T20838] jffs2: notice: (20838) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 10 of xref (0 dead, 4 orphan) found. [ 1666.578608][T20838] overlay: ./file0 is not a directory [ 1668.876524][T20875] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1668.931891][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.931964][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.107818][T20401] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1669.169345][T20401] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1669.183222][T20401] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1669.218077][T20401] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1669.227765][T20401] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1669.285152][T20401] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1669.296095][T20401] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1669.378032][T20401] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1669.676937][T20401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1669.778068][T20401] 8021q: adding VLAN 0 to HW filter on device team0 [ 1669.797734][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 1669.797949][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1669.839109][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 1669.839232][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1670.932369][T20944] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3030'. [ 1671.102775][T20958] program syz.0.3034 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1671.153539][T20401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1671.744513][T20401] veth0_vlan: entered promiscuous mode [ 1671.767590][T20401] veth1_vlan: entered promiscuous mode [ 1671.821349][T20401] veth0_macvtap: entered promiscuous mode [ 1671.829456][T20401] veth1_macvtap: entered promiscuous mode [ 1671.907144][T20401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1671.936919][T20987] jffs2: notice: (20987) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 10 of xref (0 dead, 4 orphan) found. [ 1671.961621][T20401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1672.064544][T20987] overlay: ./file0 is not a directory [ 1672.166249][T13729] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1672.166776][T13729] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1672.168236][T13729] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1672.180657][T13729] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1673.038305][T20994] loop6: detected capacity change from 0 to 7 [ 1673.146842][ T2956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1673.146863][ T2956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1674.413133][T16492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1674.413154][T16492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1674.898168][T21017] Bluetooth: (null): Too short H5 packet [ 1675.089007][T21029] input: syz1 as /devices/virtual/input/input19 [ 1676.910333][T21056] jffs2: notice: (21056) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 10 of xref (0 dead, 4 orphan) found. [ 1676.929936][T21056] overlay: ./file0 is not a directory [ 1678.497616][T21097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1679.915652][T21135] block2mtd: error: cannot open device #! ./mnt/module/block2mtd/parameters/block2mtd [ 1679.915652][T21135] NĘż° [ 1679.935437][T21126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1681.872485][T21184] jffs2: notice: (21184) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 10 of xref (0 dead, 4 orphan) found. [ 1681.978983][T21184] overlay: ./file0 is not a directory [ 1682.500647][T21200] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1684.370560][T20516] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1684.531005][T20516] usb 3-1: New USB device found: idVendor=0681, idProduct=0005, bcdDevice=1.00 [ 1684.532227][T20516] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1684.532254][T20516] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1684.532380][T20516] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1684.590153][T20516] idmouse 3-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 1686.141912][T20516] usb 3-1: USB disconnect, device number 27 [ 1686.179198][T20516] idmouse 3-1:1.0: disconnected [ 1686.562614][T21272] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3108'. [ 1686.624108][T21272] bond1 (unregistering): Released all slaves [ 1690.602184][T21334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1690.850430][ T10] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1691.001584][ T10] usb 2-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 1691.003439][ T10] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 1691.003466][ T10] usb 2-1: config 1 has no interface number 0 [ 1691.030164][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1691.030183][ T10] usb 2-1: Product: syz [ 1691.030191][ T10] usb 2-1: Manufacturer: syz [ 1691.030199][ T10] usb 2-1: SerialNumber: syz [ 1691.094224][ T10] usb 2-1: 3:1 : does not exist [ 1691.094250][ T10] usb 2-1: 3:2 : does not exist [ 1692.217394][T21375] input: syz1 as /devices/virtual/input/input20 [ 1694.657557][T21426] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3149'. [ 1694.825086][T21426] bond1 (unregistering): Released all slaves [ 1696.453074][ T5769] usb 2-1: USB disconnect, device number 34 [ 1697.826880][T21478] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3163'. [ 1698.950675][ T5769] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1698.979765][T21520] FAULT_INJECTION: forcing a failure. [ 1698.979765][T21520] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1698.979802][T21520] CPU: 0 UID: 0 PID: 21520 Comm: syz.1.3177 Tainted: G L Y syzkaller #0 PREEMPT_{RT,(full)} [ 1698.979831][T21520] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1698.979839][T21520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1698.979852][T21520] Call Trace: [ 1698.979860][T21520] [ 1698.979868][T21520] dump_stack_lvl+0xe8/0x150 [ 1698.979904][T21520] should_fail_ex+0x46b/0x600 [ 1698.979938][T21520] _copy_from_user+0x2d/0xb0 [ 1698.979967][T21520] __sys_bpf+0x2e7/0xe00 [ 1698.979999][T21520] ? __pfx___sys_bpf+0x10/0x10 [ 1698.980026][T21520] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1698.980053][T21520] ? rt_mutex_slowunlock+0x219/0x460 [ 1698.980098][T21520] ? ksys_write+0x248/0x270 [ 1698.980135][T21520] ? __pfx_ksys_write+0x10/0x10 [ 1698.980165][T21520] __x64_sys_bpf+0xba/0xd0 [ 1698.980189][T21520] do_syscall_64+0x166/0x520 [ 1698.980210][T21520] ? trace_irq_disable+0x3b/0x140 [ 1698.980230][T21520] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1698.980250][T21520] ? clear_bhb_loop+0x70/0xc0 [ 1698.980273][T21520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1698.980293][T21520] RIP: 0033:0x7fd4de09f559 [ 1698.980311][T21520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1698.980328][T21520] RSP: 002b:00007fd4dc2ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1698.980351][T21520] RAX: ffffffffffffffda RBX: 00007fd4de325fa0 RCX: 00007fd4de09f559 [ 1698.980365][T21520] RDX: 0000000000000020 RSI: 0000200000001040 RDI: 0000000000000008 [ 1698.980378][T21520] RBP: 00007fd4dc2ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1698.980391][T21520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1698.980403][T21520] R13: 00007fd4de326038 R14: 00007fd4de325fa0 R15: 00007ffe769d0fe8 [ 1698.980436][T21520] [ 1699.125784][ T5769] usb 3-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 1699.134579][ T5769] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 1699.134614][ T5769] usb 3-1: config 1 has no interface number 0 [ 1699.145827][ T5769] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1699.145853][ T5769] usb 3-1: Product: syz [ 1699.145869][ T5769] usb 3-1: Manufacturer: syz [ 1699.145884][ T5769] usb 3-1: SerialNumber: syz [ 1699.313170][ T5769] usb 3-1: 3:1 : does not exist [ 1699.313194][ T5769] usb 3-1: 3:2 : does not exist [ 1700.774170][T21557] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3187'. [ 1701.140482][ T5617] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1701.292038][ T5617] usb 2-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 1701.295672][ T5617] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 1701.295700][ T5617] usb 2-1: config 1 has no interface number 0 [ 1701.324332][ T5617] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1701.324362][ T5617] usb 2-1: Product: syz [ 1701.324378][ T5617] usb 2-1: Manufacturer: syz [ 1701.324393][ T5617] usb 2-1: SerialNumber: syz [ 1702.917363][T21592] capability: warning: `syz.3.3201' uses deprecated v2 capabilities in a way that may be insecure [ 1703.011894][T21594] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3202'. [ 1703.474573][T21606] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1704.074431][T21618] netlink: 'syz.8.3213': attribute type 32 has an invalid length. [ 1704.570573][ T5617] usb 2-1: 3:1 : does not exist [ 1704.570598][ T5617] usb 2-1: 3:2 : does not exist [ 1704.614646][ T5769] usb 3-1: USB disconnect, device number 28 [ 1704.894709][ T5617] usb 2-1: USB disconnect, device number 35 [ 1705.033227][T21646] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3225'. [ 1705.059965][T21646] unsupported nlmsg_type 40 [ 1705.304016][T21630] udevd[21630]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.3/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1705.411501][T21653] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1705.573930][T21660] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1705.574152][T21660] block device autoloading is deprecated and will be removed. [ 1705.669803][T21671] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3235'. [ 1705.670086][T21671] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1706.095225][T21687] syzkaller0: entered promiscuous mode [ 1706.095250][T21687] syzkaller0: entered allmulticast mode [ 1706.173074][T21691] netlink: 'syz.2.3246': attribute type 2 has an invalid length. [ 1707.475904][T21755] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 1707.659253][T21734] lo speed is unknown, defaulting to 1000 [ 1707.667812][T21734] lo speed is unknown, defaulting to 1000 [ 1707.975195][T21734] lo speed is unknown, defaulting to 1000 [ 1708.004290][T21734] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1708.004329][T21734] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1708.004370][T21734] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1708.109907][T21734] lo speed is unknown, defaulting to 1000 [ 1708.121922][T21734] lo speed is unknown, defaulting to 1000 [ 1708.124804][T21734] lo speed is unknown, defaulting to 1000 [ 1708.127659][T21734] lo speed is unknown, defaulting to 1000 [ 1708.148630][T21734] lo speed is unknown, defaulting to 1000 [ 1708.354179][T21771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3278'. [ 1709.085444][ T2932] IPVS: starting estimator thread 0... [ 1709.087271][T21804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3292'. [ 1709.174822][T21805] IPVS: using max 10 ests per chain, 24000 per kthread [ 1709.314638][ T13] IPVS: starting estimator thread 0... [ 1709.400563][T21812] IPVS: using max 15 ests per chain, 36000 per kthread [ 1709.458128][T21819] device-mapper: table: 248:9: multipath: error getting device (-ENOENT) [ 1709.458155][T21819] device-mapper: ioctl: error adding target to table [ 1709.667929][T21829] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3302'. [ 1710.085001][T21851] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3313'. [ 1710.626812][T21881] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3327'. [ 1710.937006][T21893] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1710.995912][T21891] FAULT_INJECTION: forcing a failure. [ 1710.995912][T21891] name failslab, interval 1, probability 5, space 0, times 9992 [ 1710.995956][T21891] CPU: 1 UID: 0 PID: 21891 Comm: syz.3.3331 Tainted: G L Y syzkaller #0 PREEMPT_{RT,(full)} [ 1710.995991][T21891] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1710.996000][T21891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1710.996014][T21891] Call Trace: [ 1710.996023][T21891] [ 1710.996033][T21891] dump_stack_lvl+0xe8/0x150 [ 1710.996074][T21891] should_fail_ex+0x46b/0x600 [ 1710.996114][T21891] should_failslab+0xa8/0x100 [ 1710.996139][T21891] __kmalloc_cache_noprof+0x9c/0x670 [ 1710.996179][T21891] ? pcpu_alloc_noprof+0xdae/0x18d0 [ 1710.996209][T21891] ? shrinker_alloc+0x59/0xbc0 [ 1710.996229][T21891] ? shrinker_alloc+0x59/0xbc0 [ 1710.996257][T21891] shrinker_alloc+0x59/0xbc0 [ 1710.996285][T21891] ? __rt_spin_lock_init+0x3e/0x50 [ 1710.996327][T21891] sget_fc+0xe8d/0x1a70 [ 1710.996364][T21891] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1710.996395][T21891] ? __pfx_sget_fc+0x10/0x10 [ 1710.996420][T21891] ? __pfx_refcount_dec_not_one+0x10/0x10 [ 1710.996451][T21891] ? __kmalloc_cache_noprof+0x3d0/0x670 [ 1710.996491][T21891] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1710.996519][T21891] get_tree_nodev+0x2a/0x150 [ 1710.996550][T21891] vfs_get_tree+0x92/0x2a0 [ 1710.996581][T21891] fc_mount_longterm+0x1c/0x100 [ 1710.996605][T21891] mq_init_ns+0x508/0x770 [ 1710.996630][T21891] copy_ipcs+0x460/0x6c0 [ 1710.996661][T21891] create_new_namespaces+0x210/0x6b0 [ 1710.996688][T21891] ? security_capable+0x7e/0x2c0 [ 1710.996721][T21891] unshare_nsproxy_namespaces+0x144/0x190 [ 1710.996758][T21891] ksys_unshare+0x532/0x890 [ 1710.996794][T21891] ? __pfx_ksys_unshare+0x10/0x10 [ 1710.996829][T21891] ? rcu_is_watching+0x16/0xb0 [ 1710.996867][T21891] __x64_sys_unshare+0x38/0x50 [ 1710.996898][T21891] do_syscall_64+0x166/0x520 [ 1710.996923][T21891] ? trace_irq_disable+0x3b/0x140 [ 1710.996944][T21891] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1710.996966][T21891] ? clear_bhb_loop+0x70/0xc0 [ 1710.996993][T21891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1710.997015][T21891] RIP: 0033:0x7f0cfd20f559 [ 1710.997036][T21891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1710.997056][T21891] RSP: 002b:00007f0cfb43d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1710.997082][T21891] RAX: ffffffffffffffda RBX: 00007f0cfd496090 RCX: 00007f0cfd20f559 [ 1710.997099][T21891] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 1710.997113][T21891] RBP: 00007f0cfd2a6b20 R08: 0000000000000000 R09: 0000000000000000 [ 1710.997128][T21891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1710.997142][T21891] R13: 00007f0cfd496128 R14: 00007f0cfd496090 R15: 00007fffac190198 [ 1710.997187][T21891] [ 1711.057183][T21889] rxe_eth0 speed is unknown, defaulting to 1000 [ 1711.218152][T21891] FAULT_INJECTION: forcing a failure. [ 1711.218152][T21891] name failslab, interval 1, probability 5, space 0, times 9991 [ 1711.218194][T21891] CPU: 1 UID: 0 PID: 21891 Comm: syz.3.3331 Tainted: G L Y syzkaller #0 PREEMPT_{RT,(full)} [ 1711.218228][T21891] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1711.218238][T21891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1711.218253][T21891] Call Trace: [ 1711.218262][T21891] [ 1711.218279][T21891] dump_stack_lvl+0xe8/0x150 [ 1711.218313][T21891] should_fail_ex+0x46b/0x600 [ 1711.218349][T21891] should_failslab+0xa8/0x100 [ 1711.218370][T21891] ? __kernfs_new_node+0xe7/0xa70 [ 1711.218392][T21891] kmem_cache_alloc_noprof+0x99/0x680 [ 1711.218423][T21891] ? __kernfs_new_node+0xe7/0xa70 [ 1711.218451][T21891] __kernfs_new_node+0xe7/0xa70 [ 1711.218475][T21891] ? __pfx___schedule+0x10/0x10 [ 1711.218500][T21891] ? __pfx___kernfs_new_node+0x10/0x10 [ 1711.218520][T21891] ? lock_acquire+0x115/0x350 [ 1711.218549][T21891] ? kernfs_root+0x1c/0x230 [ 1711.218576][T21891] ? kernfs_root+0x1c/0x230 [ 1711.218594][T21891] ? kernfs_root+0x1c/0x230 [ 1711.218611][T21891] ? kernfs_root+0x1c/0x230 [ 1711.218636][T21891] kernfs_new_node+0xeb/0x140 [ 1711.218663][T21891] __kernfs_create_file+0x4b/0x2e0 [ 1711.218697][T21891] sysfs_add_file_mode_ns+0x237/0x300 [ 1711.218731][T21891] internal_create_group+0x679/0x1180 [ 1711.218770][T21891] ? kernfs_create_dir_ns+0x1c0/0x220 [ 1711.218796][T21891] ? __pfx_internal_create_group+0x10/0x10 [ 1711.218825][T21891] ? sysfs_create_dir_ns+0x16a/0x2a0 [ 1711.218861][T21891] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1711.218895][T21891] sysfs_create_groups+0x59/0x120 [ 1711.218927][T21891] kobject_add_internal+0x673/0xce0 [ 1711.218962][T21891] kobject_init_and_add+0x12b/0x1a0 [ 1711.218992][T21891] ? rcu_is_watching+0x16/0xb0 [ 1711.219018][T21891] ? __pfx_kobject_init_and_add+0x10/0x10 [ 1711.219044][T21891] ? __kasan_kmalloc+0x93/0xb0 [ 1711.219077][T21891] ? __kmalloc_cache_noprof+0x3d0/0x670 [ 1711.219108][T21891] ? nfs_netns_sysfs_setup+0x5e/0x1b0 [ 1711.219152][T21891] nfs_netns_sysfs_setup+0x13b/0x1b0 [ 1711.219183][T21891] nfs_net_init+0x198/0x290 [ 1711.219209][T21891] ops_init+0x35d/0x5d0 [ 1711.219240][T21891] setup_net+0x118/0x350 [ 1711.219273][T21891] ? __pfx_setup_net+0x10/0x10 [ 1711.219301][T21891] ? __ns_common_init+0x384/0x590 [ 1711.219324][T21891] copy_net_ns+0x536/0x770 [ 1711.219356][T21891] create_new_namespaces+0x3f0/0x6b0 [ 1711.219391][T21891] ? security_capable+0x7e/0x2c0 [ 1711.219425][T21891] unshare_nsproxy_namespaces+0x144/0x190 [ 1711.219461][T21891] ksys_unshare+0x532/0x890 [ 1711.219495][T21891] ? __pfx_ksys_unshare+0x10/0x10 [ 1711.219528][T21891] ? rcu_is_watching+0x16/0xb0 [ 1711.219564][T21891] __x64_sys_unshare+0x38/0x50 [ 1711.219593][T21891] do_syscall_64+0x166/0x520 [ 1711.219617][T21891] ? trace_irq_disable+0x3b/0x140 [ 1711.219638][T21891] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1711.219662][T21891] ? clear_bhb_loop+0x70/0xc0 [ 1711.219690][T21891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1711.219712][T21891] RIP: 0033:0x7f0cfd20f559 [ 1711.219732][T21891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1711.219750][T21891] RSP: 002b:00007f0cfb43d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1711.219775][T21891] RAX: ffffffffffffffda RBX: 00007f0cfd496090 RCX: 00007f0cfd20f559 [ 1711.219792][T21891] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 1711.219806][T21891] RBP: 00007f0cfd2a6b20 R08: 0000000000000000 R09: 0000000000000000 [ 1711.219821][T21891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1711.219834][T21891] R13: 00007f0cfd496128 R14: 00007f0cfd496090 R15: 00007fffac190198 [ 1711.219872][T21891] [ 1711.244240][T21891] kobject: kobject_add_internal failed for nfs_client (error: -12 parent: net) [ 1711.258488][T21901] Bluetooth: ISO socket layer initialized [ 1711.782299][T21913] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3340'. [ 1712.268116][T21891] rxe_eth0 speed is unknown, defaulting to 1000 [ 1712.269681][T21889] lo speed is unknown, defaulting to 1000 [ 1712.380461][T15861] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1712.442086][ T5769] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 1712.539360][T15861] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 1712.550682][T15861] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1712.550729][T15861] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1712.560051][T15861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1712.560076][T15861] usb 2-1: Product: syz [ 1712.560093][T15861] usb 2-1: Manufacturer: syz [ 1712.560109][T15861] usb 2-1: SerialNumber: syz [ 1712.570463][ T5769] usb 9-1: device descriptor read/64, error -71 [ 1712.642115][T15861] cdc_mbim 2-1:1.0: skipping garbage [ 1712.811151][ T5769] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 1712.851579][T21925] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1712.874383][T21933] device-mapper: table: 248:10: crypt: Error allocating crypto tfm (-EINVAL) [ 1712.874413][T21933] device-mapper: ioctl: error adding target to table [ 1712.877016][T21940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3349'. [ 1712.877202][T21940] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1712.940556][ T5769] usb 9-1: device descriptor read/64, error -71 [ 1713.065224][ T5769] usb usb9-port1: attempt power cycle [ 1713.483315][ T5769] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 1713.498060][T21950] FAULT_INJECTION: forcing a failure. [ 1713.498060][T21950] name failslab, interval 1, probability 5, space 0, times 9990 [ 1713.498102][T21950] CPU: 1 UID: 0 PID: 21950 Comm: syz.2.3353 Tainted: G L Y syzkaller #0 PREEMPT_{RT,(full)} [ 1713.498135][T21950] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1713.498145][T21950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1713.498159][T21950] Call Trace: [ 1713.498167][T21950] [ 1713.498177][T21950] dump_stack_lvl+0xe8/0x150 [ 1713.498216][T21950] should_fail_ex+0x46b/0x600 [ 1713.498259][T21950] should_failslab+0xa8/0x100 [ 1713.498290][T21950] __kmalloc_node_track_caller_noprof+0xf6/0x7b0 [ 1713.498323][T21950] ? trace_probe_init+0x2d2/0x400 [ 1713.498354][T21950] ? trace_probe_init+0x2d2/0x400 [ 1713.498391][T21950] kstrdup+0x42/0x100 [ 1713.498426][T21950] trace_probe_init+0x2d2/0x400 [ 1713.498464][T21950] alloc_trace_uprobe+0xb0/0x300 [ 1713.498490][T21950] __trace_uprobe_create+0x9cb/0xe50 [ 1713.498522][T21950] ? __pfx___trace_uprobe_create+0x10/0x10 [ 1713.498546][T21950] ? __kmalloc_noprof+0x439/0x790 [ 1713.498574][T21950] ? argv_split+0x18d/0x400 [ 1713.498598][T21950] ? argv_split+0x18d/0x400 [ 1713.498630][T21950] ? argv_split+0x378/0x400 [ 1713.498660][T21950] trace_probe_create+0xce/0x130 [ 1713.498692][T21950] ? __pfx___trace_uprobe_create+0x10/0x10 [ 1713.498714][T21950] ? __pfx_trace_probe_create+0x10/0x10 [ 1713.498747][T21950] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1713.498772][T21950] ? mutex_lock_nested+0x14d/0x1d0 [ 1713.498799][T21950] ? dyn_event_create+0x2a/0x80 [ 1713.498829][T21950] dyn_event_create+0x59/0x80 [ 1713.498855][T21950] create_or_delete_trace_uprobe+0x65/0xa0 [ 1713.498879][T21950] trace_parse_run_command+0x1f3/0x380 [ 1713.498903][T21950] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 1713.498927][T21950] ? __pfx_probes_write+0x10/0x10 [ 1713.498959][T21950] vfs_write+0x29f/0xbb0 [ 1713.498997][T21950] ? __pfx_vfs_write+0x10/0x10 [ 1713.499028][T21950] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1713.499056][T21950] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1713.499080][T21950] ? mutex_lock_nested+0x14d/0x1d0 [ 1713.499107][T21950] ? fdget_pos+0x11e/0x160 [ 1713.499143][T21950] ksys_write+0x156/0x270 [ 1713.499173][T21950] ? __pfx_ksys_write+0x10/0x10 [ 1713.499214][T21950] do_syscall_64+0x166/0x520 [ 1713.499234][T21950] ? trace_irq_disable+0x3b/0x140 [ 1713.499253][T21950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1713.499274][T21950] ? clear_bhb_loop+0x70/0xc0 [ 1713.499298][T21950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1713.499320][T21950] RIP: 0033:0x7f513241f559 [ 1713.499340][T21950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1713.499358][T21950] RSP: 002b:00007f513066e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1713.499383][T21950] RAX: ffffffffffffffda RBX: 00007f51326a5fa0 RCX: 00007f513241f559 [ 1713.499399][T21950] RDX: 000000000000001b RSI: 0000200000000300 RDI: 0000000000000004 [ 1713.499414][T21950] RBP: 00007f51324b6b20 R08: 0000000000000000 R09: 0000000000000000 [ 1713.499428][T21950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1713.499441][T21950] R13: 00007f51326a6038 R14: 00007f51326a5fa0 R15: 00007ffc41df2bb8 [ 1713.499475][T21950] [ 1713.502375][ T5769] usb 9-1: device descriptor read/8, error -71 [ 1713.554001][T21951] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1713.554534][T15861] cdc_mbim 2-1:1.0: setting tx_max = 16384 [ 1713.558202][T15861] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 1713.740536][ T5769] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 1713.769482][ T5769] usb 9-1: device descriptor read/8, error -71 [ 1713.873202][ T5769] usb usb9-port1: unable to enumerate USB device [ 1713.927031][T15861] wwan wwan0: port wwan0mbim0 attached [ 1714.640805][T15861] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, de:db:2e:d9:7a:07 [ 1714.839946][T21896] rxe_eth0 speed is unknown, defaulting to 1000 [ 1714.851065][T21891] lo speed is unknown, defaulting to 1000 [ 1715.979939][ C0] net_ratelimit: 22 callbacks suppressed [ 1716.222958][T21896] lo speed is unknown, defaulting to 1000 [ 1717.185428][T11687] usb 2-1: USB disconnect, device number 36 [ 1717.230058][T11687] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 1717.369020][T22016] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3371'. [ 1717.694259][T22027] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3377'. [ 1717.965062][T22035] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3379'. [ 1718.266453][T22039] FAULT_INJECTION: forcing a failure. [ 1718.266453][T22039] name failslab, interval 1, probability 5, space 0, times 9989 [ 1718.266493][T22039] CPU: 0 UID: 0 PID: 22039 Comm: syz.1.3381 Tainted: G L Y syzkaller #0 PREEMPT_{RT,(full)} [ 1718.266559][T22039] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1718.266568][T22039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1718.266582][T22039] Call Trace: [ 1718.266591][T22039] [ 1718.266601][T22039] dump_stack_lvl+0xe8/0x150 [ 1718.266640][T22039] should_fail_ex+0x46b/0x600 [ 1718.266678][T22039] should_failslab+0xa8/0x100 [ 1718.266702][T22039] __kmalloc_noprof+0xf6/0x790 [ 1718.266733][T22039] ? tomoyo_encode+0x2ad/0x570 [ 1718.266759][T22039] ? tomoyo_encode+0x2ad/0x570 [ 1718.266793][T22039] tomoyo_encode+0x2ad/0x570 [ 1718.266827][T22039] tomoyo_realpath_from_path+0x5fa/0x640 [ 1718.266869][T22039] tomoyo_check_open_permission+0x229/0x470 [ 1718.266895][T22039] ? tomoyo_check_open_permission+0x1d3/0x470 [ 1718.266919][T22039] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1718.266945][T22039] ? __asan_memset+0x22/0x50 [ 1718.267002][T22039] ? __pfx_smack_inode_permission+0x10/0x10 [ 1718.267044][T22039] security_file_open+0xa9/0x240 [ 1718.267070][T22039] do_dentry_open+0x4b3/0x1410 [ 1718.267104][T22039] vfs_open_consume+0x4a/0x360 [ 1718.267125][T22039] ? path_openat+0x16e6/0x2100 [ 1718.267157][T22039] path_openat+0x1701/0x2100 [ 1718.267208][T22039] do_file_open+0x23e/0x4a0 [ 1718.267237][T22039] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1718.267268][T22039] ? __pfx_do_file_open+0x10/0x10 [ 1718.267323][T22039] ? alloc_fd+0x6b2/0x760 [ 1718.267362][T22039] do_sys_openat2+0x115/0x200 [ 1718.267386][T22039] ? __se_sys_futex+0x3a8/0x450 [ 1718.267414][T22039] ? __pfx_do_sys_openat2+0x10/0x10 [ 1718.267444][T22039] ? rcu_is_watching+0x16/0xb0 [ 1718.267475][T22039] __x64_sys_openat+0x138/0x170 [ 1718.267505][T22039] do_syscall_64+0x166/0x520 [ 1718.267529][T22039] ? trace_irq_disable+0x3b/0x140 [ 1718.267559][T22039] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1718.267581][T22039] ? clear_bhb_loop+0x70/0xc0 [ 1718.267609][T22039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1718.267631][T22039] RIP: 0033:0x7fd4de09f559 [ 1718.267651][T22039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1718.267674][T22039] RSP: 002b:00007fd4dc2ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1718.267698][T22039] RAX: ffffffffffffffda RBX: 00007fd4de325fa0 RCX: 00007fd4de09f559 [ 1718.267716][T22039] RDX: 0000000000000002 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 1718.267731][T22039] RBP: 00007fd4de136b20 R08: 0000000000000000 R09: 0000000000000000 [ 1718.267746][T22039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1718.267760][T22039] R13: 00007fd4de326038 R14: 00007fd4de325fa0 R15: 00007ffe769d0fe8 [ 1718.267793][T22039] [ 1718.267827][T22039] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1718.887417][ T5273] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 1719.146595][T22010] bond1: (slave vlan2): making interface the new active one [ 1719.149004][T22010] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 1719.474802][ T5617] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1719.661425][ T5617] usb 1-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1719.677142][ T5617] usb 1-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1719.677173][ T5617] usb 1-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 1719.677200][ T5617] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1719.717426][ T5617] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1719.717446][ T5617] usb 1-1: Product: syz [ 1719.717459][ T5617] usb 1-1: Manufacturer: syz [ 1719.717472][ T5617] usb 1-1: SerialNumber: syz [ 1719.754572][ T5617] usb 1-1: config 0 descriptor?? [ 1719.760823][T22050] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1719.804453][ T5617] usb 1-1: selecting invalid altsetting 0 [ 1720.176617][T22039] FAULT_INJECTION: forcing a failure. [ 1720.176617][T22039] name failslab, interval 1, probability 5, space 0, times 9988 [ 1720.176649][T22039] CPU: 0 UID: 0 PID: 22039 Comm: syz.1.3381 Tainted: G L Y syzkaller #0 PREEMPT_{RT,(full)} [ 1720.176677][T22039] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1720.176685][T22039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1720.176696][T22039] Call Trace: [ 1720.176703][T22039] [ 1720.176712][T22039] dump_stack_lvl+0xe8/0x150 [ 1720.176753][T22039] should_fail_ex+0x46b/0x600 [ 1720.176786][T22039] should_failslab+0xa8/0x100 [ 1720.176806][T22039] ? __proc_create+0x560/0xae0 [ 1720.176826][T22039] kmem_cache_alloc_noprof+0x99/0x680 [ 1720.176851][T22039] ? __proc_create+0x560/0xae0 [ 1720.176876][T22039] __proc_create+0x560/0xae0 [ 1720.176896][T22039] ? __pfx_call_netdevice_register_net_notifiers+0x10/0x10 [ 1720.176929][T22039] ? __pfx___proc_create+0x10/0x10 [ 1720.176952][T22039] ? rcu_is_watching+0x16/0xb0 [ 1720.176971][T22039] ? __pfx_psched_show+0x10/0x10 [ 1720.176989][T22039] proc_create_single_data+0xa5/0x1c0 [ 1720.177015][T22039] psched_net_init+0x50/0x70 [ 1720.177032][T22039] ops_init+0x35d/0x5d0 [ 1720.177057][T22039] setup_net+0x118/0x350 [ 1720.177083][T22039] ? __pfx_setup_net+0x10/0x10 [ 1720.177111][T22039] ? __ns_common_init+0x384/0x590 [ 1720.177133][T22039] copy_net_ns+0x536/0x770 [ 1720.177160][T22039] create_new_namespaces+0x3f0/0x6b0 [ 1720.177187][T22039] ? security_capable+0x7e/0x2c0 [ 1720.177217][T22039] unshare_nsproxy_namespaces+0x144/0x190 [ 1720.177248][T22039] ksys_unshare+0x532/0x890 [ 1720.177278][T22039] ? __pfx_ksys_unshare+0x10/0x10 [ 1720.177306][T22039] ? rcu_is_watching+0x16/0xb0 [ 1720.177334][T22039] __x64_sys_unshare+0x38/0x50 [ 1720.177358][T22039] do_syscall_64+0x166/0x520 [ 1720.177380][T22039] ? trace_irq_disable+0x3b/0x140 [ 1720.177397][T22039] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1720.177417][T22039] ? clear_bhb_loop+0x70/0xc0 [ 1720.177440][T22039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1720.177458][T22039] RIP: 0033:0x7fd4de09f559 [ 1720.177478][T22039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1720.177494][T22039] RSP: 002b:00007fd4dc2ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1720.177515][T22039] RAX: ffffffffffffffda RBX: 00007fd4de325fa0 RCX: 00007fd4de09f559 [ 1720.177529][T22039] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 1720.177541][T22039] RBP: 00007fd4de136b20 R08: 0000000000000000 R09: 0000000000000000 [ 1720.177555][T22039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1720.177566][T22039] R13: 00007fd4de326038 R14: 00007fd4de325fa0 R15: 00007ffe769d0fe8 [ 1720.177597][T22039] [ 1720.559395][ T5617] usb 1-1: USB disconnect, device number 42 [ 1720.696390][T11687] wwan wwan0: port wwan0mbim0 disconnected [ 1721.230471][ C0] net_ratelimit: 234 callbacks suppressed [ 1722.215208][T19361] udevd[19361]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1723.571574][T22118] netlink: 'syz.1.3407': attribute type 10 has an invalid length. [ 1724.237836][T22143] FAULT_INJECTION: forcing a failure. [ 1724.237836][T22143] name failslab, interval 1, probability 5, space 0, times 9987 [ 1724.237869][T22143] CPU: 0 UID: 0 PID: 22143 Comm: syz.3.3417 Tainted: G L Y syzkaller #0 PREEMPT_{RT,(full)} [ 1724.237902][T22143] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1724.237912][T22143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1724.237924][T22143] Call Trace: [ 1724.237932][T22143] [ 1724.237941][T22143] dump_stack_lvl+0xe8/0x150 [ 1724.237980][T22143] should_fail_ex+0x46b/0x600 [ 1724.238018][T22143] should_failslab+0xa8/0x100 [ 1724.238044][T22143] __kmalloc_cache_noprof+0x9c/0x670 [ 1724.238073][T22143] ? nfc_genl_rcv_nl_event+0xa8/0x2d0 [ 1724.238103][T22143] ? nfc_genl_rcv_nl_event+0xa8/0x2d0 [ 1724.238139][T22143] nfc_genl_rcv_nl_event+0xa8/0x2d0 [ 1724.238171][T22143] notifier_call_chain+0x1a5/0x3d0 [ 1724.238206][T22143] blocking_notifier_call_chain+0x6a/0x90 [ 1724.238235][T22143] netlink_release+0x122b/0x1a90 [ 1724.238273][T22143] ? netlink_release+0x102/0x1a90 [ 1724.238306][T22143] ? __pfx_netlink_release+0x10/0x10 [ 1724.238346][T22143] ? rwbase_write_lock+0x5ad/0x780 [ 1724.238387][T22143] __sock_release+0xa0/0x1f0 [ 1724.238417][T22143] ? __pfx_sock_close+0x10/0x10 [ 1724.238444][T22143] sock_close+0x1c/0x30 [ 1724.238469][T22143] __fput+0x41a/0xa70 [ 1724.238503][T22143] fput_close_sync+0x11f/0x240 [ 1724.238528][T22143] ? __pfx_fput_close_sync+0x10/0x10 [ 1724.238565][T22143] filp_close_sync+0x6e/0xa0 [ 1724.238591][T22143] __se_sys_close_range+0xa7d/0xef0 [ 1724.238640][T22143] ? __pfx___se_sys_close_range+0x10/0x10 [ 1724.238682][T22143] do_syscall_64+0x166/0x520 [ 1724.238706][T22143] ? trace_irq_disable+0x3b/0x140 [ 1724.238727][T22143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1724.238750][T22143] ? clear_bhb_loop+0x70/0xc0 [ 1724.238776][T22143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1724.238796][T22143] RIP: 0033:0x7f0cfd20f559 [ 1724.238815][T22143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1724.238834][T22143] RSP: 002b:00007f0cfb45e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1724.238859][T22143] RAX: ffffffffffffffda RBX: 00007f0cfd495fa0 RCX: 00007f0cfd20f559 [ 1724.238876][T22143] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 1724.238890][T22143] RBP: 00007f0cfd2a6b20 R08: 0000000000000000 R09: 0000000000000000 [ 1724.238906][T22143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1724.238919][T22143] R13: 00007f0cfd496038 R14: 00007f0cfd495fa0 R15: 00007fffac190198 [ 1724.238958][T22143] [ 1725.507961][T22171] bond1: (slave vlan0): making interface the new active one [ 1725.509430][T22171] bond1: (slave vlan0): Enslaving as an active interface with an up link [ 1726.265023][ C1] net_ratelimit: 112 callbacks suppressed [ 1726.949759][T22163] infiniband syz1: set active [ 1726.949778][T22163] infiniband syz1: added syz_tun [ 1727.004062][T22163] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1727.101645][T22163] infiniband syz1: Couldn't open port 1 [ 1727.101962][T22163] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1727.101997][T22163] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1727.102046][T22163] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1727.184016][T22210] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3439'. [ 1727.389425][T22163] RDS/IB: syz1: added [ 1727.389515][T22163] smc: adding ib device syz1 with port count 1 [ 1727.389540][T22163] smc: ib device syz1 port 1 has no pnetid [ 1727.635681][T22214] FAULT_INJECTION: forcing a failure. [ 1727.635681][T22214] name failslab, interval 1, probability 5, space 0, times 9986 [ 1727.635717][T22214] CPU: 1 UID: 0 PID: 22214 Comm: syz.3.3441 Tainted: G L Y syzkaller #0 PREEMPT_{RT,(full)} [ 1727.635749][T22214] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1727.635758][T22214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1727.635772][T22214] Call Trace: [ 1727.635781][T22214] [ 1727.635792][T22214] dump_stack_lvl+0xe8/0x150 [ 1727.635835][T22214] should_fail_ex+0x46b/0x600 [ 1727.635875][T22214] should_failslab+0xa8/0x100 [ 1727.635900][T22214] __kmalloc_cache_noprof+0x9c/0x670 [ 1727.635931][T22214] ? tipc_nametbl_insert_publ+0x7e3/0x1380 [ 1727.635967][T22214] ? tipc_nametbl_insert_publ+0x7e3/0x1380 [ 1727.636005][T22214] tipc_nametbl_insert_publ+0x7e3/0x1380 [ 1727.636040][T22214] ? tipc_nametbl_insert_publ+0x4e9/0x1380 [ 1727.636083][T22214] ? tipc_nametbl_publish+0x9d/0x2c0 [ 1727.636115][T22214] tipc_nametbl_publish+0x13e/0x2c0 [ 1727.636142][T22214] ? tipc_nametbl_publish+0x9d/0x2c0 [ 1727.636175][T22214] tipc_sk_publish+0x1cd/0x430 [ 1727.636210][T22214] ? __pfx_tipc_sk_publish+0x10/0x10 [ 1727.636238][T22214] ? tipc_nametbl_build_group+0x2e/0x530 [ 1727.636266][T22214] ? tipc_nametbl_build_group+0x4f9/0x530 [ 1727.636291][T22214] ? tipc_nametbl_build_group+0x2e/0x530 [ 1727.636330][T22214] tipc_sk_join+0x3b3/0x6a0 [ 1727.636360][T22214] ? __pfx_tipc_sk_join+0x10/0x10 [ 1727.636383][T22214] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 1727.636413][T22214] ? lockdep_hardirqs_on+0x7b/0x110 [ 1727.636446][T22214] tipc_setsockopt+0x73e/0x9a0 [ 1727.636483][T22214] ? __pfx_tipc_setsockopt+0x10/0x10 [ 1727.636524][T22214] ? __fget_files+0x3a8/0x420 [ 1727.636549][T22214] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1727.636581][T22214] ? __pfx_tipc_setsockopt+0x10/0x10 [ 1727.636616][T22214] do_sock_setsockopt+0x17c/0x1b0 [ 1727.636646][T22214] __x64_sys_setsockopt+0x143/0x1b0 [ 1727.636676][T22214] do_syscall_64+0x166/0x520 [ 1727.636700][T22214] ? trace_irq_disable+0x3b/0x140 [ 1727.636722][T22214] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1727.636745][T22214] ? clear_bhb_loop+0x70/0xc0 [ 1727.636771][T22214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1727.636793][T22214] RIP: 0033:0x7f0cfd20f559 [ 1727.636814][T22214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1727.636832][T22214] RSP: 002b:00007f0cfb45e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1727.636857][T22214] RAX: ffffffffffffffda RBX: 00007f0cfd495fa0 RCX: 00007f0cfd20f559 [ 1727.636874][T22214] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000004 [ 1727.636888][T22214] RBP: 00007f0cfd2a6b20 R08: 000000000000002e R09: 0000000000000000 [ 1727.636904][T22214] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 1727.636918][T22214] R13: 00007f0cfd496038 R14: 00007f0cfd495fa0 R15: 00007fffac190198 [ 1727.636967][T22214] [ 1727.636988][T22214] tipc: Failed to bind to 66,4294966268,4294966268 [ 1728.046106][T22204] workqueue: Failed to crea ** replaying previous printk message ** [ 1728.046106][T22204] workqueue: Failed to create a rescuer kthread for wq "kcopyd": -EINTR [ 1728.046720][T22204] ================================================================== [ 1728.046734][T22204] BUG: KASAN: null-ptr-deref in dm_kcopyd_client_destroy+0xae/0x480 [ 1728.046769][T22204] Read of size 4 at addr 0000000000000234 by task syz.2.3438/22204 [ 1728.046787][T22204] [ 1728.046803][T22204] CPU: 1 UID: 0 PID: 22204 Comm: syz.2.3438 Tainted: G L Y syzkaller #0 PREEMPT_{RT,(full)} [ 1728.046834][T22204] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1728.046843][T22204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1728.046856][T22204] Call Trace: [ 1728.046864][T22204] [ 1728.046874][T22204] dump_stack_lvl+0xe8/0x150 [ 1728.046907][T22204] ? dm_kcopyd_client_destroy+0xae/0x480 [ 1728.046942][T22204] kasan_report+0x117/0x150 [ 1728.046965][T22204] ? dm_kcopyd_client_destroy+0xae/0x480 [ 1728.046996][T22204] kasan_check_range+0x264/0x2c0 [ 1728.047019][T22204] dm_kcopyd_client_destroy+0xae/0x480 [ 1728.047047][T22204] ? __pfx_dm_kcopyd_client_destroy+0x10/0x10 [ 1728.047071][T22204] ? kasan_quarantine_put+0xbb/0x1f0 [ 1728.047099][T22204] ? lockdep_hardirqs_on+0x7b/0x110 [ 1728.047124][T22204] ? kfree+0x1c5/0x6d0 [ 1728.047149][T22204] ? __destroy+0x139/0x300 [ 1728.047173][T22204] ? vfree+0x46d/0x4f0 [ 1728.047199][T22204] __destroy+0x172/0x300 [ 1728.047222][T22204] cache_ctr+0x168c/0x2ba0 [ 1728.047258][T22204] ? __pfx_cache_ctr+0x10/0x10 [ 1728.047282][T22204] ? skip_spaces+0x8a/0xa0 [ 1728.047307][T22204] ? up_read+0x34/0x180 [ 1728.047333][T22204] dm_table_add_target+0x58d/0xc70 [ 1728.047365][T22204] table_load+0x325/0x8a0 [ 1728.047391][T22204] ? __pfx_table_load+0x10/0x10 [ 1728.047420][T22204] dm_ctl_ioctl+0x9ec/0xe10 [ 1728.047444][T22204] ? __pfx_table_load+0x10/0x10 [ 1728.047464][T22204] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 1728.047500][T22204] ? __fget_files+0x2a/0x420 [ 1728.047531][T22204] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1728.047554][T22204] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 1728.047575][T22204] __se_sys_ioctl+0xff/0x170 [ 1728.047607][T22204] do_syscall_64+0x166/0x520 [ 1728.047630][T22204] ? trace_irq_disable+0x3b/0x140 [ 1728.047651][T22204] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1728.047672][T22204] ? clear_bhb_loop+0x70/0xc0 [ 1728.047695][T22204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1728.047716][T22204] RIP: 0033:0x7f513241f559 [ 1728.047736][T22204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1728.047755][T22204] RSP: 002b:00007f513066e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1728.047780][T22204] RAX: ffffffffffffffda RBX: 00007f51326a5fa0 RCX: 00007f513241f559 [ 1728.047796][T22204] RDX: 0000200000000380 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 1728.047812][T22204] RBP: 00007f51324b6b20 R08: 0000000000000000 R09: 0000000000000000 [ 1728.047826][T22204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1728.047840][T22204] R13: 00007f51326a6038 R14: 00007f51326a5fa0 R15: 00007ffc41df2bb8 [ 1728.047866][T22204] [ 1728.047874][T22204] ================================================================== [ 1728.047970][T22218] kobject: 'rx-8' (ffff88806186e850): kobject_uevent_env [ 1728.048029][T22218] kobject: 'rx-8' (ffff88806186e850): fill_kobj_path: path = '/devices/virtual/net/bond2/queues/rx-8' [ 1728.048239][T22218] kobject: 'rx-9' (ffff88806186e950): kobject_add_internal: parent: 'queues', set: 'queues' [ 1728.048893][T22218] kobject: 'rx-9' (ffff88806186e950): kobject_uevent_env [ 1728.048960][T22218] kobject: 'rx-9' (ffff88806186e950): fill_kobj_path: path = '/devices/virtual/net/bond2/queues/rx-9' [ 1728.050040][T22218] kobject: 'rx-10' (ffff88806186ea50): kobject_add_internal: parent: 'queues', set: 'queues' [ 1728.052530][T22218] kobject: 'rx-10' (ffff88806186ea50): kobject_uevent_env [ 1728.052591][T22218] kobject: 'rx-10' (ffff88806186ea50): fill_kobj_path: path = '/devices/virtual/net/bond2/queues/rx-10' [ 1728.052795][T22218] kobject: 'rx-11' (ffff88806186eb50): kobject_add_internal: parent: 'queues', set: 'queues' [ 1728.053447][T22204] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1728.456744][T22204] CPU: 1 UID: 0 PID: 22204 Comm: syz.2.3438 Tainted: G L Y syzkaller #0 PREEMPT_{RT,(full)} [ 1728.468303][T22204] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1728.474108][T22204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1728.484178][T22204] Call Trace: [ 1728.487458][T22204] [ 1728.490388][T22204] vpanic+0x56d/0xa60 [ 1728.494377][T22204] ? __pfx_vpanic+0x10/0x10 [ 1728.498886][T22204] ? __pfx___schedule+0x10/0x10 [ 1728.503757][T22204] panic+0xc5/0xd0 [ 1728.507482][T22204] ? __pfx_panic+0x10/0x10 [ 1728.511906][T22204] ? preempt_schedule_common+0x7f/0xd0 [ 1728.517370][T22204] ? dm_kcopyd_client_destroy+0xae/0x480 [ 1728.523016][T22204] check_panic_on_warn+0x89/0xb0 [ 1728.527962][T22204] ? dm_kcopyd_client_destroy+0xae/0x480 [ 1728.533607][T22204] end_report+0x73/0x170 [ 1728.537856][T22204] ? dm_kcopyd_client_destroy+0xae/0x480 [ 1728.543515][T22204] kasan_report+0x128/0x150 [ 1728.548033][T22204] ? dm_kcopyd_client_destroy+0xae/0x480 [ 1728.553680][T22204] kasan_check_range+0x264/0x2c0 [ 1728.558641][T22204] dm_kcopyd_client_destroy+0xae/0x480 [ 1728.564141][T22204] ? __pfx_dm_kcopyd_client_destroy+0x10/0x10 [ 1728.570222][T22204] ? kasan_quarantine_put+0xbb/0x1f0 [ 1728.575611][T22204] ? lockdep_hardirqs_on+0x7b/0x110 [ 1728.580827][T22204] ? kfree+0x1c5/0x6d0 [ 1728.584909][T22204] ? __destroy+0x139/0x300 [ 1728.589330][T22204] ? vfree+0x46d/0x4f0 [ 1728.593411][T22204] __destroy+0x172/0x300 [ 1728.597668][T22204] cache_ctr+0x168c/0x2ba0 [ 1728.602103][T22204] ? __pfx_cache_ctr+0x10/0x10 [ 1728.606868][T22204] ? skip_spaces+0x8a/0xa0 [ 1728.611280][T22204] ? up_read+0x34/0x180 [ 1728.615437][T22204] dm_table_add_target+0x58d/0xc70 [ 1728.620560][T22204] table_load+0x325/0x8a0 [ 1728.624892][T22204] ? __pfx_table_load+0x10/0x10 [ 1728.629742][T22204] dm_ctl_ioctl+0x9ec/0xe10 [ 1728.634243][T22204] ? __pfx_table_load+0x10/0x10 [ 1728.639086][T22204] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 1728.644125][T22204] ? __fget_files+0x2a/0x420 [ 1728.648736][T22204] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1728.653672][T22204] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 1728.658703][T22204] __se_sys_ioctl+0xff/0x170 [ 1728.663302][T22204] do_syscall_64+0x166/0x520 [ 1728.667891][T22204] ? trace_irq_disable+0x3b/0x140 [ 1728.672911][T22204] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1728.678974][T22204] ? clear_bhb_loop+0x70/0xc0 [ 1728.683652][T22204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1728.689542][T22204] RIP: 0033:0x7f513241f559 [ 1728.693950][T22204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1728.713557][T22204] RSP: 002b:00007f513066e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1728.722003][T22204] RAX: ffffffffffffffda RBX: 00007f51326a5fa0 RCX: 00007f513241f559 [ 1728.729968][T22204] RDX: 0000200000000380 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 1728.737929][T22204] RBP: 00007f51324b6b20 R08: 0000000000000000 R09: 0000000000000000 [ 1728.745910][T22204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1728.753899][T22204] R13: 00007f51326a6038 R14: 00007f51326a5fa0 R15: 00007ffc41df2bb8 [ 1728.761869][T22204] [ 1728.765138][T22204] Kernel Offset: disabled [ 1728.769471][T22204] Rebooting in 86400 seconds..