last executing test programs: 51.048519561s ago: executing program 3 (id=1740): write$tun(0xffffffffffffffff, 0x0, 0x1c6) r0 = socket$alg(0x26, 0x5, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x10012, &(0x7f0000000040)={[{@name={'name', 0x3d, 'noprefix'}}, {}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x20) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000001c0)={r0, r0, 0x4, 0x38, &(0x7f0000000080)="fbd6473cb8c04c1042c92152f389becebb4d4a9668e452961cd2669640f077e08d8bace9176c0146c15d83136a237304c1a4e1d691fbf9b0", 0x40, 0x8, 0x85, 0x0, 0x8, 0x1, 0xc, 'syz1\x00'}) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) move_pages(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x4) 50.990109494s ago: executing program 3 (id=1741): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000500)=@allocspi={0x100, 0x16, 0x501, 0x70bd2c, 0x25dfdbfe, {{{@in6=@dev={0xfe, 0x80, '\x00', 0x27}, @in=@multicast2, 0x4e22, 0x6, 0x4e24, 0xfffa, 0x2, 0x80, 0x120, 0x88}, {@in=@dev={0xac, 0x14, 0x14, 0xa}, 0x4d5, 0x33}, @in6=@remote, {0x1ff, 0xa2, 0x7, 0xfffffffffffffffc, 0x0, 0x4, 0x7fff, 0x48fe}, {0x4, 0x9, 0x5fde, 0xffff}, {0x5, 0xfffffff8, 0x9}, 0x70bd26, 0x0, 0xa, 0x2, 0x7f, 0x1}, 0x3, 0xde}, [@tfcpad={0x8, 0x16, 0x80000000}]}, 0x100}, 0x1, 0x0, 0x0, 0x4075}, 0xc800) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getpid() syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x200002, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r6, 0x1, 0x1, &(0x7f0000000380)=0xfffff272, 0x4) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) socket$nl_netfilter(0x10, 0x3, 0xc) 50.053604041s ago: executing program 3 (id=1746): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xffffffffffffff14, 0x0, &(0x7f00000005c0)=[@increfs_done, @free_buffer, @release={0x40046306, 0x1}, @request_death, @register_looper, @enter_looper], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) r4 = dup(r3) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd86) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$midi(0x0, 0x2, 0x2) connect$unix(r5, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)=""/91, 0x5b}, {&(0x7f00000014c0)=""/4091, 0xffb}, {&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f0000000640)=""/184, 0xb8}, {&(0x7f00000007c0)=""/222, 0xde}, {&(0x7f00000008c0)=""/95, 0x5f}, {&(0x7f0000000940)=""/69, 0x45}], 0x7, &(0x7f00000009c0)=""/227, 0xe3}, 0x5}], 0x1, 0x12060, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x3, 0x8}) io_uring_enter(0xffffffffffffffff, 0x3517, 0x173d, 0x42, 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x0, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x17, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd3c}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0xe, 0x0, &(0x7f0000001480)="fff5fffb000000008fd864e888a8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 49.918964482s ago: executing program 3 (id=1747): r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800001}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x5008, 0x0) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x800c5012, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000040085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r2, 0xb3, &(0x7f0000000200)}, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000011c0)=ANY=[@ANYBLOB='\x00\x00', @ANYBLOB="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", @ANYRES8=r2, @ANYRESDEC=r0], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40010) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0x40186f40, &(0x7f0000000080)={0x4, 0x1, 0x6, 0x4, 'syz0\x00', 0xfffffffd}) syz_usb_disconnect(r0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f00000001c0)={0x10002001}) 48.459770157s ago: executing program 3 (id=1753): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=r0, @ANYRESDEC=0x0]) 48.349324001s ago: executing program 3 (id=1755): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xffffffffffffff14, 0x0, &(0x7f00000005c0)=[@increfs_done, @free_buffer, @release={0x40046306, 0x1}, @request_death, @register_looper, @enter_looper], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) r4 = dup(r3) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd86) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$midi(0x0, 0x2, 0x2) connect$unix(r5, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)=""/91, 0x5b}, {&(0x7f00000014c0)=""/4091, 0xffb}, {&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f0000000640)=""/184, 0xb8}, {&(0x7f00000007c0)=""/222, 0xde}, {&(0x7f00000008c0)=""/95, 0x5f}, {&(0x7f0000000940)=""/69, 0x45}], 0x7, &(0x7f00000009c0)=""/227, 0xe3}, 0x5}], 0x1, 0x12060, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x3, 0x8}) io_uring_enter(0xffffffffffffffff, 0x3517, 0x173d, 0x42, 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x0, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x17, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd3c}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0xe, 0x0, &(0x7f0000001480)="fff5fffb000000008fd864e888a8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 33.368938496s ago: executing program 32 (id=1755): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xffffffffffffff14, 0x0, &(0x7f00000005c0)=[@increfs_done, @free_buffer, @release={0x40046306, 0x1}, @request_death, @register_looper, @enter_looper], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) r4 = dup(r3) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd86) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$midi(0x0, 0x2, 0x2) connect$unix(r5, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)=""/91, 0x5b}, {&(0x7f00000014c0)=""/4091, 0xffb}, {&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f0000000640)=""/184, 0xb8}, {&(0x7f00000007c0)=""/222, 0xde}, {&(0x7f00000008c0)=""/95, 0x5f}, {&(0x7f0000000940)=""/69, 0x45}], 0x7, &(0x7f00000009c0)=""/227, 0xe3}, 0x5}], 0x1, 0x12060, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x3, 0x8}) io_uring_enter(0xffffffffffffffff, 0x3517, 0x173d, 0x42, 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x0, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x17, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd3c}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0xe, 0x0, &(0x7f0000001480)="fff5fffb000000008fd864e888a8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.520012155s ago: executing program 4 (id=1952): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) listen(r0, 0x5) accept4(r0, 0x0, 0x0, 0x80800) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff) r3 = add_key$user(&(0x7f0000000140), &(0x7f0000002840)={'syz', 0x0}, &(0x7f0000000300)="f40fc24077021c9b084c60ffc26f26db12b9e78d629870bb26edb4a5e1cc0942ed8c02ca4fe84b94a0e31ea64089ee9ca1efb52945ffebbfea11dd3d0df936a10285ec81dac1ad2243d878dde6cfd6ea08d5abcb00bb57438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4ddc1f2ab58762b3494250b9557f5b606a43e50874c90143034142cd5f7bd9b4dd876b97b7feb75b9138dde818a3c6b96dd8000000000000000000842051ab35195e3855e8cd767183ed90315", 0xc3, 0xfffffffffffffffb) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000001180)="4cc3", 0x2, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000001340)={r2, r3, r4}, &(0x7f0000001380)=""/4089, 0xff9, 0x0) r5 = add_key(&(0x7f0000000080)='rxrpc\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r5, 0x0, 0x0) r6 = syz_open_dev$swradio(&(0x7f0000000400), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r6, 0x402c5639, &(0x7f00000000c0)={0x0, 0x4, 0xfffffffe}) r7 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r7, 0x52b242d) keyctl$update(0x2, r7, &(0x7f0000000240)="b5c937d777e2cb357c775f8a677ef429c1cae5ea387b82d3ef0c724d1998b558d0c9281bf876b41ef1f81de7c17220760771e7962c56061f3a5a6df16b2b5f6274c5fc5d56c2ec278b67d2028d80b5d2ebadbb1f2d", 0x55) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x401) 6.248003681s ago: executing program 4 (id=1954): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) r1 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x17e0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x50, 0x40, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x3, 0x7, {0x9, 0x21, 0x7, 0x9, 0x1, {0x22, 0xbef}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0x4, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x9, 0x6, 0x5}}]}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x8, 0x74, 0x1, 0x10, 0x7f}, 0x20, &(0x7f0000000100)={0x5, 0xf, 0x20, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x3, 0xe, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xa, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x62, 0x80, 0x7}]}, 0x6, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x4007}}, {0x59, &(0x7f0000000240)=@string={0x59, 0x3, "bee868772a1d0fd0137da351086aab106c18eca54309e2214121e52c39854e75986fbf744992ea3c7d8e4bfd9d510611298f5f46f559fe9c316304ac3106c11b06a11be718db05e9695eba136115d910c2dc63b59ddde4"}}, {0x49, &(0x7f00000002c0)=@string={0x49, 0x3, "b0967332654a29e77a145595188846d93a56c1d514bc6155933ea44cdb1f572e6ac68bd6089a5b09f5b35ca11bc856f8cb921fc3daba02f7118c63e4f8d0ecccdfd2f625dbbff4"}}, {0x7e, &(0x7f0000000700)=@string={0x7e, 0x3, "0d4431f5a08b4c00af2e76ea5453df52ff15a50fba7f53d97dd8c88c9d3009195674a68f1eac2cf3fa272a91089ffcbc913aa5a30992f8742cc33edcbd0361786d0a3aabda67dc5ab4af17dee30b9155061796ea55b95cb965cdb09f7bc80fb95a52e2894d9ec71a9eb7d5c7ce846df6e1e0c45f226a005af80c9a19"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x459}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x407}}]}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'cryptd(ecb-twofish-avx)\x00'}, 0x58) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(khazad)\x00'}, 0x58) syz_usb_control_io$hid(r1, &(0x7f0000000900)={0x14, &(0x7f0000000800)={0x0, 0xe, 0xf, {0xf, 0x23, "e2ac719dc15093b0b564208def"}}, &(0x7f0000000840)={0x0, 0x3, 0x2d, @string={0x2d, 0x3, "64e4007e8b3e8adb4e65b4d3afc1abe1c18a229fdfa714799d91d46d55eaf84d8398172c1edef59e7b1bc9"}}, &(0x7f0000000880)={0x0, 0x22, 0x15, {[@main=@item_012={0x0, 0x0, 0xb}, @main=@item_4={0x3, 0x0, 0xc, "a94ffb2b"}, @main=@item_012={0x1, 0x0, 0xc, ';'}, @main=@item_012={0x1, 0x0, 0xc, "a7"}, @local=@item_4={0x3, 0x2, 0x7, "0df0e0d1"}, @local=@item_4={0x3, 0x2, 0x4, "9291c04e"}, @local=@item_012={0x0, 0x2, 0x5}]}}, &(0x7f00000008c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x8, 0x1, {0x22, 0x276}}}}, &(0x7f0000000b40)={0x18, &(0x7f0000000940)={0x0, 0xc, 0xad, "7bc154e398dbbcf3b0e01778f72c30fd34eafa4363c9b38ceef1dc5717ceaeac15f42e3f69f6255c3f7da980f4afa8a354c4c3f618005ef00a26b2473344ea5407dd238c17747018e8f9816e656d42fd04c6e0f71512c5537c8084fc264856ad69dd25b6384c1824ee82daf7e54c00e5cd5c2b9c9b0e9e58f1b6bc3d5bd118f9ae2f66a8c1c8559b82be0ef2a46091bc420d60be091b722dc71866f899643d0e4d5ff4f94effebce70d4e13532"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0xaf}, &(0x7f0000000a40)={0x0, 0x8, 0x1}, &(0x7f0000000a80)={0x20, 0x1, 0x4b, "27f5cbff0c3acef1fa08cf80f50bc0922fa60603dc6ad89636b90bae5c9a0b10a97c887337de9b6ef043cce007d8736692775d9806c072bb53fc165273238b76b04ef856a1fca69f221927"}, &(0x7f0000000b00)={0x20, 0x3, 0x1, 0x2}}) r3 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x40045731, &(0x7f0000001000)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSETELEM={0x20, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}}, 0x40088) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x8000000) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040}], 0x1, 0x8040) recvmsg$can_bcm(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000003c0)=""/99, 0x63}], 0x1}, 0x100) times(&(0x7f0000000000)) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r7, 0x0, 0xcb, &(0x7f0000000080)={0x0, 0x4, 0x7, 0x0, @vifc_lcl_ifindex, @rand_addr=0x64010102}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlinkprop={0x334, 0x6c, 0x1, 0x70bd2a, 0xa5dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x201, 0x1b040}, [@IFLA_VFINFO_LIST={0x314, 0x16, 0x0, 0x1, [{0xa8, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0xffffff7f, 0x5}}, @IFLA_VF_IB_PORT_GUID={0x10, 0xb, {0x8, 0x81}}, @IFLA_VF_TRUST={0xc, 0x9, {0x6, 0x1}}, @IFLA_VF_IB_NODE_GUID={0x10, 0xa, {0xcc8e, 0x3}}, @IFLA_VF_IB_NODE_GUID={0x10, 0xa, {0x5, 0x9}}, @IFLA_VF_MAC={0x28, 0x1, {0x1f4, @multicast}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x7fffffff, 0xfffffffb}}, @IFLA_VF_RATE={0x10, 0x6, {0xcd0, 0xb, 0x4}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x1, 0xfffffffb}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x3, 0x8}}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x0, 0x200}}]}, {0xd8, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x9, 0xffffffff}}, @IFLA_VF_MAC={0x28, 0x1, {0x8, @random="eb7224134ef8"}}, @IFLA_VF_MAC={0x28, 0x1, {0xe3d, @broadcast}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x6, 0x7f}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xafb, 0x1000}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x1, 0x86c0}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x1, 0x4}}, @IFLA_VF_VLAN={0x10, 0x2, {0x10000, 0xf62, 0x5}}, @IFLA_VF_MAC={0x28, 0x1, {0x9c8, @broadcast}}, @IFLA_VF_VLAN={0x10, 0x2, {0x8000, 0xb9b, 0x401}}]}, {0x5c, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x1, 0xe}}, @IFLA_VF_TRUST={0xc, 0x9, {0xfffffebc, 0x6}}, @IFLA_VF_RATE={0x10, 0x6, {0x8, 0x4, 0x6}}, @IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x4, 0x67b, 0x4}}]}, @IFLA_VF_TRUST={0xc, 0x9, {0x7, 0xe}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x800, 0x10}}]}, {0x68, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x0, 0xbba, 0x7}}, @IFLA_VF_IB_PORT_GUID={0x10, 0xb, {0x3, 0x3}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x10001, 0x58}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x7, 0xa}}, @IFLA_VF_IB_NODE_GUID={0x10, 0xa, {0x17, 0x3}}, @IFLA_VF_IB_PORT_GUID={0x10, 0xb, {0x2, 0x7}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x6, 0x7}}]}, {0x34, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x3, 0x2}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x9, 0x4}}, @IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x8, 0xeb5, 0x8, 0x88a8}}]}]}, {0x78, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x2a4f, 0x6, 0x2}}, @IFLA_VF_RSS_QUERY_EN={0xc}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x95f, 0x8}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x4519, 0x6}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x3, 0x4}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xe, 0x9}}, @IFLA_VF_MAC={0x28, 0x1, {0x200}}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x2, 0x7ff}}]}]}]}, 0x334}, 0x1, 0x0, 0x0, 0x1}, 0x40048c0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r10, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r9, &(0x7f0000000bc0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000c40)={0xa0, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x40001) 5.228994481s ago: executing program 4 (id=1959): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bde1a60c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc865a92e9539f3513af3a1e6f78608890f912f087214dac06387a94d5e1b31c35be117ee540", 0xe5}, {&(0x7f0000000180)="88e584aac45d6d83e6c2c8857149eb55d2c259a747dbdfc05b7e87150dcc7e40953e657417f2c201284dd4714eb14ce94fb9be03e73d06a982f5502b3ae3a800c03902057e1ec6c9a195d347386118cbfbb67848d7783900dd047aeed9e789b9ea73ca850c", 0x65}, {&(0x7f0000000400)="83c0b58e5bcffe6c14ab199d81f63d9e77512d040c3f3a7b41a3a1ed6cf40450443e4e377139b523eb3dd725f87a1ed946e28c6b19e1fc6ea21fe2eef736ec85289f34830b89c7169369862871b9608f2e976924a41f64f236a395563ddb3b994b4d9cf9f465dea2adad06013851713e9d30f195383be99db35611dd11a69721e423fcf5904c2af8ca4b1774bc6438d1c6218a2ada56c8b5b289274c2d116ecd4aafbd01536f931c84ec7f95ce8c6d118d1dec3bfa645c3e72018e9c154a80fd84b6e0233520ee1dc56ec62472820000000000000000", 0xd6}, {&(0x7f0000004480)="d21e96a9f6be3d72e3f91fa2db455d6b88df49377d7988389bd1ecc97042b565d013ec3fcee93a43afdf71b3751d0f53e4ca87fd4b71713fcc3b729c601778385e68ae4e55370c965ca8189dcf4f4e8c70fc343965f9c540163a19215f1d988f1bf6b6f57ce74575d0a1223da74c72adeed27d968bfdcd14597ebe90fc5167cbc1f5856d6b387bc5c419db52f682bcf13ce9e1d6110291bce66848b7392445ffb232c6b70bff2783564b2a62fa6cf3783f6cf6e84c90162b7cbf0192971f05c597dc20b3c879bd342e9e29e93c8240e8dbb137d3d8fcc8f49b37938a52ef12f7d963ff76b91f1473369d06d500d9b88c4f0e0b0ca9049d6b2f3c1886ff41404fab2855eaf1310fa65425a3e9513e33cee970a08de795368e9fe8055fdc5786010c764b3d3ccebec687d242267e932df33cf50c665ea82f1dcf1af952b0e4bf2e35d3c1bdead12e22b371543769fc19a0d893ebb9d71c4da000e2d18a572fdf7c23d921d959caebfbe3ab9157fc9ab6e3dcb88eaa5a5a8af223d7a25a8f198b10dedf68b6d2759a806b6a5bcf3693734ceebeea16b995304511db8d97b62f548213c614bc2dd9b843450eb575c8a8f290af70331a269f1cab6fd6e1f9ef687d80952ba7f14da8cf892d0a5b16dd181d8a7b780055d3b79782a2f4c29c6b9c64bdcde1175ef26c75d0bca19e2be27acb3fdf22a7cff8a659899de59fb2d3e4920881a0900958685263b3fb8dafa6402f5812f16de9e53eda3c86520d5267df729d2add8724d7541b60a3e9a4b70b5f1af83e81071d7e3eb6a9817383632008fbfff89f1c1ab39d9d898d555a0190fa11c8bdfd2d1b49d06fc56acdc426568ccbebbf6f3ce278148f319a1f84adcfb49a675c6d119f52e10386cdd0740199b20087f7c8f75d93959e39d2948a17789f6c6fda65dcb42743b466bcdd06bbe7afccd2b59c0c3f4dc62b8cee2a785ce704bbc47f480079b5f21ace7e5f2f149360370e866565af026b14ec4d9214884661156b5313c233ef1abd2807eb9b586845e3df8001e56b8d4f7c5c9b7e46b81e278ea0a7afb8286183285c390558d750277a7d72a6dab2cf1f29b0d4c847991ec65dd1757889dc9a6e94ce22b58e25cfac06c73532a53663a27208daaf3b4ad5a8c74e4e62b160219f49b6983674f7a71e56f45c3df8c13c93b2ed468749843dd8954a0d03acc61e5008ccc5a5db5a42d04abdf112e71e4d5876c3ea0db715648a5bb55b5ffd2377aea32f19a07e610456b5a6dda7ab4e6d11a88a5910f7f394c7a53d7c032e5506c3b26d54cbe73bfb37cda2439b23c785566668d8111570b7004fa565a156e45c9b672c6ebfb4d08bc681de9ea0215a43a1eefe7a0fb72caf494414c61510c00a8c5e37c4efeca3a1d171f44abbca94a9899b299363bbd1ecdc91d19d6a179f00bd958e372916fde873aaa167bb6be50219c76e6bee7a207f43b729eea5c00052eccb9986b6c137019c47f3fc1d69d68569f8c1d97ecc6b3dec37813f358778edfa2515fd9c4ca7e73966942f65c1a3cc9770065836625671725e3617030df067961c50d2e53a1c69d0e116eb9e0c052e71b3bcc85354829b71295cae5ffbcd5c2794fd16f8601ff5d7278693e384d477920e4619be578ac11f4ef327e5c5298d24ba29fddc7317fc90c69ddc991ee2f3a34c40c2afcd77350c008b9f70b76c97f51bd1359d376cfc83ec0f14a183cef8eccc014bf36d8384262edd4bb03f743c4628bccfef1050deafd13bdcbd73a356a8c630cc4f0665420d414c59276ff1d85ef058069a1ea280b9ae476ea9aa64652c4a83b9b086fd02a3372ae9683521d81ce846ce9b030e81b7523e8f5355c26c66d9182b9b3e089917089a07bf5159f1439200ad74d735b020ccb78225a015c76a57c19344556bce75da0d44e88e2227f5f4a90bb00eb27decf0d0dcf1b6dd0f9146f0191a7f58e3c6a1568e747ba674c33fd6715678232ea1385e8e54955e70ce306fad514235c8bc2576e84444a674c149a67d8db5fea81813aa311fa701bc401101b14661b0f091dad3a1895f3d32fc7012e59e090f487fc9f19e878e04c40eb906deedb29cf65839486f11c4fb7d9c1be6a1c95471d939cc0c85f6fead85e4d081ccc6e2a51784ec4d3f0b13796609161bfcb38a029c10b084e87ceff5483ec6c9691b0ad6a3d05e13e8c48d0700cc58b9436d8011c48381d6ca0ac279c3c71a625585c8b257c54fcb9e9d07183ee0d90b0b5255d153fae38c6c25636846c31142f269229ac4a1d35df88eeaa9413dde791642c9b0ce903cef64609886d18df63515de769df208c9db2acda7db5181f52bb99e74f84b01106c8419543ec2b5106623789316cd825995e42d0cf9f8296f2e5155dbaae8113de5c7a1dddfe42770064e2aae3f100f97d890e3e7eb63ca80d1a8c672ae8e8eaee5b838653a20a58171dc78509a55ea2c590bcffe3f0ca7731edecc2cf3e63c8e8ce335a4f9541691282df4f24a208cd1400dce5e40ddde35dd22c9e75ded061cb349d8cbc92bc00f9c9c4ff49fe887ea630ffc66a087065a90e072b56c9386f3cccda4acb0f10538f361cd860a7efec0eb83ea5165d6a6612800a8d6c7426b0916fc6aec0e7d81ee1a57657ac5c32b58d4e573bf820bc67cc0896012ccff2ace1de0b13f70a744e116a300aaffd1a6ad24513532fb9b9452454874a432cb5f5f6fa2f35668e6e3eb98fdc5c15dc5513c44a26d318d2b7372d6dc1da69d342b95ecb05777716264c79f4a3b953d6acc1006318fd352eb92621360d62b1c651c1fa0dec9a9fe674347902228373bed540251eebb2a8ede5e4f47bacf6acde6f8c5b95dc8b8214175d5649994c710709a5bfdd73360c35af7fc2ea4d35f14994bdccce242be14bff1ce7010b1c353479a1f038dc52e76d5d97340d98e3ad783a4ad95a469eee9193c7e5f93d84f847a6710230fb26f6e0122cb3f0400e7c485b704e3916c4fb0340bed2b4e7640b3ea40a9741f32f81e761119919e9e3fe16aba0b691e9d4e8fc959ae97dad37225a0d3fff627d6241fc0826cc863ec6e0a6c78956dc8878bb8c34dec173161c844462baf2a0d40fb6ea7c6bcf6a4501b92b1bf35c9b1c7d09ad3ee84b5c846404062d6fef2e53f4121b3a04341b58c05460bfa09ff6b92275923798897293e4cc80e6ee6facbab718550e838724ac19c2f86ee656fd607106951936eb56a3263819a69525b9d8bd4b1196ae503b6ee7071f881d740c5781040a78168037ccf819e24a9e3b55dc629aa788972a018d72371e2d64905bcc52b68977a5be41c52dfd42c6dd106a073682ef6c1b09c3d6004436bb6f59c06445768c217b3f36cf8f231e5128944f15fca908e1340cb4d175e9da1f15d5cbdf8fdc2493620b62dee93dfcaf1a56f781b04ef16d0b33e774d89deb827c6ccc4cb83d510c5ba6029317379896b3880f1b2d9f08e6aaf1518b9378f87b135c526782c09eb28b5d74d09cae156dc1809ae258753a59a6b453f28580c3f8ca41cd2977fb2c8f78159e5b5360417b2a72e359e8dc3ee76bed00cce7018286ddd88ee211457683b8136380c1f6281c23308dc08943bdcc36a4bd310d097ac2f5603b214fc3616e1092f3f4c2cda3e098709cf98cbfbd20995c8daa7ece6bb4349c17f07c591eebf1a94c94f1211c6e52837c1e75409c7e7c115b3871fc5cdf1262ece5894a9a4cb264931047074ddc6b4cccf6707b160be4558c6cc0d8c7dc2de6b86af7489815c84517d106ba538c1f4ea22ec6fd29cbc76f94467c51684778649d867041e2c952f4717c6d20345c94ad67f343985f7db04bf6010f6f9308d4ec9ed41620efc7c95fd8c596d22d0302654f81f96a31a05b954768deb359c624537a6fdb450ad54324618b14df9e03f82cbf3f7b73f3535bfe44553c0a37dad2070b5c0565111da8ecf31d412b744d897ebc8e98fbb1e25312686539fd021b68ce5cfada2682a617932911350326eab213b43f436b0d65922bfbc459238d54708f39bdff1ee745aa1bf072670fa55a13e146df08c157927326556667f98002b54fe3ed150a59d359c2b481708b92e204dc3b9a30aae1489cfdc37a17669f5b5077945e0a8ae33c8c1c228486a313560773b32b05aec13f3fd9c42a1824d7c82c7b0b04d55064cf7a0924b243cf184567d26bd4095fbe0dc326ca71b0a3dba3b66511ad69cfb9dabcf71b85342db0bb9d23f29b7d1f1213d48e215eaf70e132e8ce34cf5e2dfd93bbbe7420a6db52641d1be52abeccb216193a993a18f0620a70b479776ccc705f095e915b9cc4a0fb62d11228fb1e5bcc0efa78969639969799dbe63f5f27be3d3fd7f2f5134f5ac3abf3a0a5601480296a6b85bea2090bf13c8f3d3c3a7ffa858b20775f249aaea7d753e9129bae065332bad8d783f9967322a2c358147f450fb5d6a7176c8015b33333106d30d2c690781703c18afb5e88423ffd8b6da20901db90e28647cb4727dbed71210db7ab7c9909b6a142e26757f22f742f84148ac2d88c6ec3bb24832a4b9889705571ced0e0d541a6ae909e3aa854c7f52e939c7062563711890e7046f0736b92188fdbae304953dc5e0bf9de92558ef9d41524ea68ec5f380902fd00719afd0bbc77e9b5034004f0820f22cac8ba92557c9186050a8aa7065a5d5d06b7d8b7bd0fcc4a30aaff5fa0bb2fdd85e801b53859dad6151be7c00f68c34ca8fcd96ddf9980d809d28730d1a86d057f2716637bea7ae9c34dcbf69a9e400cf42dfbbea8b03dc34683df85b3696c7570bed2bfee77bcbbaf3035d81a0308371ff1df315c53c66198221e3be1046eab7e71903dea93c388de23a13848d4b1d6109c067f40f67b17ab3dd7554ba9c51fc7b715acf04ff50d5588898c2db0f83c7b3948fe7ce0dbb6fde93de2d6bd3b27487a3f85ae7aa0000000000", 0xda8}, {&(0x7f0000000500)="f4f6ec3f1f6e4804195e1668ee6a8b994dcc5f47b255f609e705d9fbea0869812c0c3a096c7999643abd", 0x2a}], 0x5) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) 5.22750318s ago: executing program 4 (id=1961): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = fanotify_init(0x200, 0x0) read(r0, 0x0, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func={0x1, 0x0, 0x0, 0x12}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x30, 0x0, 0x0, 0x61]}}, 0x0, 0x46, 0x0, 0x2}, 0x28) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) write(r1, &(0x7f0000000340)='3', 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x40000001ed602, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) fchdir(r4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1000, 0xffffff81) r7 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x81}) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r7, 0x3519, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f00000000c0)=0xb) listen(r2, 0x1ad72f7) accept4(r2, 0x0, 0x0, 0x80000) 3.800240029s ago: executing program 4 (id=1967): bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha1\x00'}, 0x58) 3.799884909s ago: executing program 4 (id=1968): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3264}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async) r2 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32) r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x1, 0x288}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) (rerun: 32) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) r6 = socket(0x200000000000011, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'veth1_to_batadv\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0xd, r7, 0x1, 0x0, 0x6, @remote}, 0x14) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r6, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703010000001f00000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) (rerun: 32) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) pipe(&(0x7f0000000080)={0xffffffffffffffff}) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r9, &(0x7f0000000380)=[{&(0x7f0000000200)="9b8140d8857e0f9e1d369dd6f542", 0xe}, {&(0x7f0000000240)="11ef2e880a4b70", 0x7}], 0x2, 0x4) (async) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r10}}) (async) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) (async) r11 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000540), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x158, 0x158, 0x5, [@restrict={0xb}, @decl_tag={0x7, 0x0, 0x0, 0x11, 0x5, 0x2}, @func={0x2}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xd, 0x3}, {0x9}, {0x6, 0x1}]}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0xa, 0x4}, {0xb, 0x3}, {0x10, 0x4}, {0x2, 0x1}]}, @enum={0xb, 0x4, 0x0, 0x6, 0x4, [{0xc, 0x10001}, {0xd, 0x80000000}, {0xa, 0x2009e8}, {0x9, 0x80000001}]}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x3, 0x2}, {0xc, 0x1}, {0x4, 0x5}, {0x4, 0x3}, {0x0, 0x5}, {0x4}, {0xa, 0x3}]}, @float={0x5, 0x0, 0x0, 0x10, 0x10}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x24, 0x0, 0x60, 0x4}, @enum64={0x1, 0x6, 0x0, 0x13, 0x0, 0x1, [{0x2, 0x4cc8, 0x5}, {0x7, 0x8, 0x3ff}, {0xa, 0x4, 0x2}, {0xb, 0xffff08f1, 0x4}, {0x8, 0x7f}, {0x3, 0x200, 0x6}]}]}, {0x0, [0x2e, 0x2e, 0x30]}}, &(0x7f0000000640)=""/107, 0x175, 0x6b, 0x1, 0xb3, 0x10000, @value=r11}, 0x28) r12 = userfaultfd(0x801) ioctl$UFFDIO_API(r12, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x5c1}) (async) ioctl$UFFDIO_REGISTER(r12, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x2}) (async) ioctl$UFFDIO_WRITEPROTECT(r12, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}}) syz_io_uring_setup(0xefe, &(0x7f0000000300)={0x0, 0xcc19, 0x10806}, &(0x7f0000000380), &(0x7f00000000c0)) (async) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, &(0x7f00000001c0)) write(r2, &(0x7f0000000240)="e5dc572f4e6286e3953bb7ee22f7eb828a1b22f29be639dfab7577c2328de99eab7a4b5a0e7d23fb73073cdd8c965655a62295d780a025a0bed59273482a40ada1203d87921e02b8628094ebfbd6d5a3547632f57ae69f592fcbc2ecb76b5eefafe2831df5fbc7cd667bcfc34d2e6c1883d58acdcebfbde7d970ee908c2a2c9d9218b9d5c926111d", 0x88) 3.351802157s ago: executing program 2 (id=1972): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x30, 0x10, 0x801, 0x4000000, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0x204e9, 0x500}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}]}, 0x30}, 0x1, 0xffffa888}, 0x20000880) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="180200000300100000000000d17e00008500000028000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823000028b39c2461e7bcb2ebc4f17658b6fcd6f83db3daec1c02e7e02cf60f000039e30dbb0df19461f1f37437e95234d5ed2ef028b9f22f62fb4c28", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000183100000500000000000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x3, r3}, 0x38) r4 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000000), 0x200100, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000040)={@hyper, 0x2}) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0xff00, 0x90, [0x40000000, 0x0, 0x0, 0x0, 0x0, 0x80000100], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000000000000f0000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0xe0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0xfffdfffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.289322739s ago: executing program 0 (id=1973): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x70, 0x8b02) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 3.229714623s ago: executing program 2 (id=1974): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x34, r2, 0x205, 0x0, 0x2, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x80}]}, 0x34}}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x14, 0x14, 0x0, 0xfc, 0x4, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x6, 0x1, 0x1590}}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x2400c814) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT=r0], 0x44}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) io_setup(0x10001, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x8c1f, 0x0, 0x0, 0x0, 0x400, 0x7, 0x0, 0x37dc12502000000, 0x0, 0x0, 0x8, 0x2, 0x0, 0xffffffffffff2ea6, 0xfffffffffffffffc, 0x1, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000000000}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f0000000200000022bf000001000000", @ANYRES32, @ANYBLOB="08000000dd0000000000000000c8d05300000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r6, 0x0, 0xa002a0}, 0x38) 3.229524535s ago: executing program 0 (id=1975): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRES16=r0, @ANYRES8, @ANYRESHEX=r0, @ANYRESHEX, @ANYRESOCT=r0, @ANYRES32], &(0x7f0000000040)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0xa3480, 0x74, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f00007fc000/0x3000)=nil, 0x3000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1a824000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x143902, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94) prlimit64(r1, 0xf, &(0x7f0000000140)={0x8, 0x29a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x202) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r6, &(0x7f0000000000)={0x1d, r7}, 0x10) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f00000000c0), 0xf00) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) 2.109412822s ago: executing program 2 (id=1976): bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha1\x00'}, 0x58) 2.108587601s ago: executing program 2 (id=1977): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x2000, 0xdc0, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000500)=""/130, 0x0, 0x0, 0xdf, 0xc4, &(0x7f0000000840)="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", &(0x7f00000005c0)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x1, 0x8000, 0x1}, 0x24) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r6 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000100)={r8, r9, 0x4, r7}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newqdisc={0x138, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.86979419s ago: executing program 2 (id=1978): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x80, 0x8000, 0x2, 0x4b4, {{0x6, 0x4, 0x1, 0x0, 0x18, 0x66, 0x0, 0x2, 0x29, 0x0, @multicast2, @empty, {[@generic={0x88, 0x3, 'J'}]}}}}}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffe0, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}}, 0x4008800) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000300)={'tunl0\x00', 0x0, 0x7, 0x40, 0x9, 0x7, {{0x18, 0x4, 0x1, 0x39, 0x60, 0x64, 0x0, 0x4, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x13, 0xa2, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @rand_addr=0x64010100, @multicast2]}, @timestamp_prespec={0x44, 0x24, 0xf, 0x3, 0x9, [{@private=0xa010101, 0x1ff}, {@multicast1, 0x9}, {@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x6}, 0x10001}]}, @noop, @rr={0x7, 0x13, 0xed, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @remote, @multicast1]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vxcan1\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x4) getpeername$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e00)=@newtfilter={0x2980, 0x2c, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r0, {0xb, 0x1}, {0x0, 0xe}, {0xfff1, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x2940, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xcaf0}}]}, @TCA_BASIC_EMATCHES={0xb8, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xb4, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x0, 0x8, 0x8001}, {0x4, 0x1, 0x4}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x100, 0x8, 0x3cf4}, {0x4, 0x5, 0x3}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x7, 0x1, 0x2}, {0xfffffffb, 0x4, 0x9, 0x1, 0x7}}}, @TCF_EM_META={0x64, 0x1, 0x0, 0x0, {{0x4, 0x4, 0xfff9}, [@TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="34ce104978249a4f"]}, @TCA_EM_META_RVALUE={0x4, 0x3, [@TCF_META_TYPE_VAR]}, @TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_RVALUE={0x14, 0x3, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="03920607bc266f11"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x8, 0x2}, {0x3, 0x7, 0x2}}}, @TCA_EM_META_RVALUE={0x1e, 0x3, [@TCF_META_TYPE_VAR="0e06b3c804", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="03961677e1456dbd8e", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x4]}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xed00, 0x7, 0x5}, {{0x3, 0x1, 0x1, 0x1}, {0x4, 0x0, 0x1}}}}]}]}, @TCA_BASIC_EMATCHES={0xf0, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xd}}, @TCA_EMATCH_TREE_LIST={0xdc, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x3, 0x1, 0x5}, {0x1, 0x5a31, 0x3, 0x3, 0xd, 0x2, 0x1}}}, @TCF_EM_CONTAINER={0x88, 0x2, 0x0, 0x0, {{0x7000, 0x0, 0xfd3}, "34f0b71f5d7c71e4bdad673911c943b9098858de7905cbb8b084f1778c4e029a7d252dcfe1794000d01bb3eaace0ac3be8af242198cfaf088cafac85841e450dd1678018cdf86148fa207f3dd5676681faeb432171a182a66c1513471b5bd13bfc76bb550766ccfadf8b0a48fdb3f8422906f5b4fd661e36be3a56"}}, @TCF_EM_META={0x18, 0x3, 0x0, 0x0, {{0x23b5, 0x4, 0x6}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x5}, {0x3, 0x5f}}}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xf, 0x8, 0x1}, {0x1, 0x2, 0x4}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x8, 0x8, 0xd}, {0x0, 0x6, 0x4}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}]}, @TCA_BASIC_ACT={0x1824, 0x3, [@m_vlan={0x68, 0xb, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xe0, 0x3, 0x8, 0x3e8e, 0x9}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}]}, {0x16, 0x6, "ddc55f14cab83ea30748ddcffa3dbb0ffb90"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbedit={0x5c, 0x3fff, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x81}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x8, 0x6}}]}, {0x15, 0x6, "ce230356f51b0dbe1cca5c55c8f82d7889"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_pedit={0x1b0, 0x7, 0x0, 0x0, {{0xa}, {0x9c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x88, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x7}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}]}, {0xec, 0x6, "29f769c4d18fa8d3ab5adec41b7ccd4f033c1750f6840a9554a366050a6bd0f028b30389f1091b6071b66817c725800ee0e3b04fc8575f77a02ed682a3d257315e0db68cdfc6ef960e3c2e2e90b797d5f76486eb153ca0548a90a970c7729008f92821458fd079ea69f92eac954a87fa77e690283044bf21cc10833a130051ce2fcdfa07378cc38addd218dbefad17265d0c063923d4af3216b3a1e43bd8cbb68ec3f76e05db894cb9fc48d674d2b505f10437a2d3bcb94d9607706201dd3407b5eee38c46e2e4479047e8390dfd9220be012e6decca5e4885f07419e5a17c98070d7edd5a9db0ea"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_tunnel_key={0x103c, 0x15, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x65}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbedit={0xf4, 0x12, 0x0, 0x0, {{0xc}, {0x84, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x5, 0x2, 0x4, 0x9}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x7, 0x6}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0x2, 0x2, 0x5, 0x8}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xf825}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2f5}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x200}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xd1a, 0x7, 0x6, 0x3ff, 0xa}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x67}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0xfff1}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff2, 0xfff3}}]}, {0x46, 0x6, "f275ac5812faaad9daf36fa77784b5875583ed3eedd5e4a11693a62d3a7bc4006e5af0cf80b7fa4ef18cc4386b8de89e0d6c344cb01102f9480c9b6cd834bf1cb156"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_connmark={0x174, 0x6, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x5, 0x2, 0x6ea2, 0xfbe9}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x8, 0x6, 0x4, 0x4000000}, 0xb}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x718c, 0x6, 0x20000000, 0x7, 0x7}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x7, 0x20000000, 0xd, 0x7}, 0x2}}]}, {0xd3, 0x6, "0dcafd2f741f657f0a27e027c36d07457f10962cda48a763eb23741c4f50eee6db9ebd4ca7ce1b613132d1bbad9fcb147cf273a8129fc281976461d288c8466f0d8c670d1eb66911985161566d9f3707c90aacee4bc241f1159b9574198b72ccb0d7a481733a6f091e7fb26e2e47127b00861ddc89a2a60a2c0bc61984e05c1ff4d69aab66f33430548856b4ed423f38b20fc77adcd4656296f2ec2285656b327bfedffd435403f1f7e19fd5af3696dd2fa97fe55ef0bcf0a734bee68f470b93474b55c5c96838dfa5079bfc67151f"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ct={0x9c, 0x13, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @loopback}]}, {0x6a, 0x6, "c111942625eaefabaafad107a0a955b309e5c2fa5675998d06b44384e5e2ba1179f7f90946acbc886ab2d350ef99555c9cff96adfc8f6fd87e48ab96e21ec40410f7b7efe0c16f990310466f4f0dfb1944358c2bd6f728adf6f4645385c1ee3fb57b4b1e4ae3"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x94, 0x1b, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0xff}, @TCA_CT_LABELS_MASK={0x14, 0x8, "275763fb45d4d179070909e6cc705864"}, @TCA_CT_ZONE={0x6, 0x4, 0xa}, @TCA_CT_MARK={0x8, 0x5, 0x8}, @TCA_CT_ZONE={0x6, 0x4, 0x6}]}, {0x36, 0x6, "dcefb50ec4a2da3c8f82d6b3aee8c09eac8ec791ac8afabef382ec897358327413e80cb2512e2b39179704ecd688e0df6295"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_sample={0x158, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x5, 0x4, 0x8, 0x81}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xb}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x6}, @TCA_SAMPLE_TRUNC_SIZE={0x8}]}, {0xf3, 0x6, "3401a7b6bdd51aa76e244cca95017f713b9b31401de063294d79575a95409fae1657b1c970b0f52cb2a1a976164eac38bf1b3aab6c246dfc3e1620f9ae186d845bc0f0a60ed108f2d1bc9de1448a6bd5263405614000a6486e13ab940bfc0e6973cce5b74388382c4c727de86dce4fe5b7220fdd024fc3272c6192910e559a8932c69f9f6b9c9705fa839c111853716519a5ea910107be90bd0cd229a40580878b7b979a1024e592636c933c04e6d10d48b3d80412bc8549627198f53c5699c11885fa6ac35266039ca74333606b3d46df502555a9cd4a7c2733ce558e7fcd3f14f0febc7bfcd7aa937e5e0e244c95"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_vlan={0x80, 0x11, 0x0, 0x0, {{0x9}, {0x50, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3, 0x6, 0xfffffffffffffff9, 0x7ff, 0x9}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x62e}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x7, 0x6, "f7880d"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_BASIC_POLICE={0xc38, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffffa, 0x3, 0x69f, 0x5, 0xffff0001, 0x2, 0x4, 0x5, 0x1, 0xffffdc49, 0x6, 0x0, 0x5, 0x81, 0x9, 0xab22, 0x0, 0x2, 0xfc, 0xfffffff8, 0x1, 0x6, 0x9, 0x1, 0x3, 0xae2, 0x0, 0x80, 0x21f, 0x8, 0x3, 0x36, 0x9, 0x0, 0xc80c, 0x8, 0x5, 0x187c, 0xb9, 0xf5, 0x9, 0x8, 0x4, 0x0, 0x6, 0x9, 0x80000001, 0xd, 0x8, 0x9, 0x3, 0x7, 0x5, 0x2, 0x1, 0x4, 0x1, 0x802, 0xfffffff9, 0x40, 0xf, 0x18, 0x0, 0x84, 0x7, 0x3ff, 0x5, 0x4, 0xe91, 0x9, 0x9, 0xfffff000, 0x9796, 0x4, 0x6, 0x8, 0x2, 0x8, 0x7, 0xfffffff8, 0x8, 0x6, 0x10, 0x8, 0x7, 0x5, 0x2, 0x10, 0x3, 0x7f, 0x2, 0x6, 0x1, 0x3, 0x6, 0xfff, 0x128, 0x800, 0x7, 0x4, 0x7, 0x1, 0x2, 0x1, 0x5, 0x9, 0x1, 0x1, 0x5, 0x2993, 0x9c, 0x1, 0x5, 0x6, 0x5b, 0x1, 0x80, 0x6, 0x5, 0xfffffff7, 0xffffffff, 0x4, 0x0, 0x0, 0x800, 0x7, 0x81, 0x10000, 0xe5cf, 0xfffffffc, 0x1, 0x40, 0xfffffffa, 0x5, 0x2, 0x9, 0x9, 0x6, 0x881, 0x40, 0x81, 0x5, 0xc1, 0x80, 0x2, 0x3, 0xffffa355, 0x419ec621, 0xb, 0xfffffff7, 0x9, 0xf, 0x1, 0x10, 0x76011d54, 0xa, 0xa0000000, 0x2, 0xffff, 0x3, 0x401, 0x857, 0x2, 0x0, 0x7, 0x5, 0x2, 0x7322, 0x0, 0x6, 0x82, 0x40, 0x200, 0x4, 0x100, 0x93, 0x5, 0x3, 0x2, 0x8, 0x0, 0x3ff00, 0x7, 0xbd6c, 0xffffffff, 0x5, 0x3, 0x6, 0x3, 0xe95, 0x3, 0x7fff, 0x5, 0xf, 0x7, 0x4, 0x4, 0xffff, 0x1, 0x604, 0x62, 0x5, 0x101, 0x3, 0x23, 0x8, 0x7, 0x9066, 0x4a31, 0x4, 0x3, 0x7, 0x9, 0xfffffffd, 0xa, 0x6, 0x1, 0x3, 0x2, 0x0, 0x1, 0xffffffff, 0x0, 0x0, 0x81, 0x9, 0xe2, 0x400, 0x9, 0x400, 0x7fff, 0x4, 0xfffffffd, 0xbbc8, 0x9, 0x14db, 0x811, 0x61b9, 0x7, 0x101, 0xb8, 0x5, 0xffffffff, 0x3ff, 0x9, 0xfffffffa, 0xb, 0x1, 0x9, 0x7f, 0x8, 0x3ff, 0x9, 0x44f, 0x0, 0x6]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffff3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffffff80}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x800, 0x4, 0x5, 0x81, 0xfffffff7, 0x9, 0xb4c0, 0x9, 0x7fffffff, 0x9, 0x10001, 0x6, 0x8, 0x3, 0x400, 0xfa54, 0xc, 0xfe7, 0x9, 0xffffffff, 0xf23, 0x200, 0x70, 0xa25, 0x3, 0x9, 0x4ca, 0xfffffffa, 0x3, 0x6, 0x10000, 0x9, 0x1a5, 0xbe, 0x9, 0x1, 0x22740000, 0xc0b, 0x7ff, 0x4, 0x4, 0x7f, 0x9246, 0x4, 0x6, 0x1, 0x40, 0x7f, 0x8, 0xfffff589, 0x7, 0x7, 0x8000, 0x1, 0x0, 0x9, 0xfffffff9, 0x4, 0x6, 0x8, 0x400, 0x3, 0x6, 0x9, 0x20000000, 0x4, 0x7fffffff, 0x5487, 0x0, 0x0, 0x7, 0x5, 0x5, 0x7f, 0x6, 0x7, 0x7, 0x2, 0x14000000, 0x7dd4, 0xd, 0xfffffffb, 0x8, 0x7133, 0x13, 0x9, 0x10001, 0x8000, 0x3e22, 0x0, 0xff, 0x7fff, 0xe, 0x1, 0xf48, 0x3, 0x4, 0xfffff8bd, 0x3ddb, 0x0, 0x3, 0x0, 0x2, 0x6, 0x3dc, 0x8001, 0x20af, 0xed, 0x90, 0x3, 0x7, 0x0, 0x4a99, 0x7, 0x72e401c8, 0xfffffffe, 0x2, 0x1, 0x3, 0x10001, 0xffff, 0x3, 0x1, 0x9, 0x2, 0x2, 0x4, 0xfffff0e9, 0xcd90, 0x3, 0x6, 0x9, 0xfffffff8, 0x5, 0xfff, 0x5, 0x3, 0x800, 0xc, 0x6, 0xffffffcf, 0x8, 0x2f3, 0x920, 0x9, 0x3, 0xd6d, 0x8, 0x4, 0x5, 0x80000001, 0x2, 0x9, 0x3, 0x7fff, 0x5, 0x8, 0x3, 0x7fa8, 0x5, 0x1, 0x7, 0x4, 0x4, 0x5, 0x3, 0x80000001, 0x8, 0x1, 0xff, 0x7, 0x10, 0x1, 0x5, 0x9, 0x7fff, 0x2, 0x5, 0x7, 0x5, 0x82, 0x9, 0xb54, 0x8, 0x7f0, 0x9, 0x4, 0x6, 0x9, 0x3, 0x2, 0x1, 0x10, 0xffff, 0x2, 0x8000, 0x2, 0x5, 0x0, 0x71d40574, 0x8bf, 0x1, 0x4, 0x6, 0xc41f, 0x7, 0x0, 0xd, 0x5, 0x2, 0xe, 0x6, 0x4, 0x6, 0xf0, 0x4, 0x3, 0x608, 0x2, 0xfffffbff, 0xfff, 0x838, 0x3, 0x7aeb, 0xe, 0xffffffff, 0x101, 0x5, 0xd8, 0x7dd, 0x5, 0x8, 0x7, 0x5908, 0x200, 0x5, 0x200, 0x7, 0x1, 0x101, 0x8, 0x4, 0x38, 0x8000, 0xea, 0x7a077b52, 0x9, 0x5, 0x1, 0x1, 0x1, 0x5ad8, 0x1, 0xb6, 0x6, 0xfffffff8]}, @TCA_POLICE_RATE={0x404, 0x2, [0x10, 0x1, 0x4, 0x8, 0xa1ba, 0x80000001, 0x4, 0xa9, 0x1000, 0x1, 0x5, 0x1, 0x4, 0xaab6, 0xf, 0x3, 0x80000001, 0x7fffffff, 0x18, 0x7f, 0x0, 0x2, 0x2, 0x0, 0x8001, 0x3, 0xe, 0x1ff, 0x7, 0x4, 0x7, 0xfff, 0x10000, 0x8, 0xf, 0x31ec, 0x5, 0x9, 0x6, 0xf379eed8, 0x8001, 0x5, 0x0, 0x2, 0x6, 0xfffffffd, 0x7fffffff, 0xc87, 0x9, 0x8, 0x1, 0x2, 0x3, 0x6, 0xf, 0x9, 0x3, 0xffff, 0xfffffff8, 0x3, 0x1195, 0xca4, 0x4, 0x3, 0x1, 0x8, 0x7, 0x0, 0x10000, 0x0, 0x2, 0x5, 0x0, 0x1ff, 0xc, 0x7, 0x9, 0xb, 0xb, 0xe2, 0x200000, 0x4, 0x7f, 0x8000, 0x10000, 0x5, 0x3, 0x9, 0xfffffff8, 0x4, 0x4, 0x8, 0x8, 0x5, 0x845, 0x2, 0xfffffff7, 0x1, 0x2, 0x0, 0x8, 0xfffffff9, 0x1, 0x2, 0x80000000, 0x5, 0x401, 0x2, 0x6, 0x3, 0x0, 0x4cde, 0x695, 0x9, 0x62, 0x10001, 0x0, 0x2, 0x9, 0x3, 0x0, 0x8, 0x7f, 0xb957, 0x2, 0x9, 0xc, 0xa, 0xff, 0xfff, 0x101, 0x8, 0x8, 0xb12, 0x4, 0x6, 0x450, 0x1, 0x200, 0x80000001, 0x5, 0x2, 0x5, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x401, 0x5, 0x3, 0x1, 0x0, 0xf, 0x3ed, 0x10001, 0x4, 0x2, 0x7, 0x4, 0x6, 0x800, 0x9, 0x400, 0x3, 0xc9, 0x6, 0x867b, 0x7fffffff, 0x4e, 0x1, 0x6, 0x100, 0x4, 0xaf4, 0x5, 0xa7b6, 0x0, 0x4, 0x5f9, 0x1, 0x0, 0x81, 0x1, 0xdf91, 0x2, 0x6, 0x80000000, 0xaefc, 0xfff, 0xc0a3, 0x60000000, 0x8, 0xd25, 0x5, 0x3, 0x4ed6, 0x7cc3, 0xd, 0x1, 0x10001, 0x4, 0x2, 0x8, 0xffffffff, 0x8000, 0x10001, 0x4, 0x7f4, 0xc4, 0x0, 0x3ff, 0x5, 0x0, 0x4, 0xfff, 0xf8fe, 0x80000001, 0x3, 0x0, 0x200, 0x283, 0x7, 0x3ff, 0x0, 0x90, 0x4, 0x10, 0x5, 0x86cb, 0x3, 0xabfb, 0x3, 0x8, 0x100, 0x9, 0x3ff, 0x9, 0x4, 0x8ff, 0x8, 0x100, 0xe9b, 0x9, 0x6, 0x6, 0x54, 0x200, 0x8, 0x2, 0xadc, 0x8, 0x3, 0x1, 0x8, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x200}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x9, 0x6}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xc, 0xfff2}}, @TCA_BASIC_ACT={0x31c, 0x3, [@m_mirred={0xd8, 0x1b, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xfa, 0x5, 0x20000000, 0x7, 0x4a3f}, 0x4, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1000, 0x6, 0x5, 0xe, 0x76}, 0x2, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x5, 0xffffffffdffffff6, 0x3, 0x8}, 0x3, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10, 0x1ff, 0x2, 0x8, 0x6}, 0x3, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10, 0x2, 0x8, 0xfffffffb, 0xd61}, 0x4, r7}}]}, {0x9, 0x6, "d685cdb46a"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_xt={0x100, 0x10, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8}]}, {0xa2, 0x6, "4045f341abe0e6ca33aab170717f3d30ae5533092a94ee8c6de9737a2a89d0cd44d158de5e92bbd83f4d781b1fa75347482ea17a834f466fe19840adb229ecabe526ad3fc822213e5bd9848e8ba8776a9d8142e1d12aa1a5bbe6f33e9759a8a7f4d23cb6f3c24381b88b682de05e76c0ede741128b44ba41d10163d17a525308cefd076ad6bdf46878cdc2927658ac3ae72bd680ced16b830ddc83f2425b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_gact={0x140, 0x20, 0x0, 0x0, {{0x9}, {0xa0, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x7ff, 0x6, 0x3ff, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0xd, 0xffffffffffffffff, 0x1, 0xfffffffc}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x61c, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0xfffffffe, 0x2, 0x2, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0xffffff1c, 0x8, 0x8, 0x8001}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x6, 0x2, 0x1, 0x8000}}, @TCA_GACT_PARMS={0x18, 0x2, {0xe0db, 0x6, 0x2, 0x400, 0xffffff68}}]}, {0x75, 0x6, "9c45b85a50f164c8b950cb6030c16ea33c7a7966a812fb69afb2d4d491b8b2fd66595f31f4051de393cfb0692285d5f73992618dd305e587746cc00db34972ce5ab4a3385966309e150816b17835488a9ed743bf118da2550c03cab99b0fb3593e2b6791061820d31993ddd1c48ed49acb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x40}}, @TCA_RATE={0x6, 0x5, {0x6b, 0xf9}}]}, 0x2980}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000380)=r10, 0x4) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000240001"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r11, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r12, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r8, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r11, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000600)={0x0, 0x0, 0x6, 0x0}) r13 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r13, 0xc0487c04, &(0x7f0000000d80)={0x0, 0x0, 0x0, &(0x7f0000000e00), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.604587558s ago: executing program 0 (id=1979): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mlock2(&(0x7f000006e000/0x1000)=nil, 0x1000, 0x1) 1.221300029s ago: executing program 0 (id=1980): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000500)=@allocspi={0x100, 0x16, 0x501, 0x70bd2c, 0x25dfdbfe, {{{@in6=@dev={0xfe, 0x80, '\x00', 0x27}, @in=@multicast2, 0x4e22, 0x6, 0x4e24, 0xfffa, 0x2, 0x80, 0x120, 0x88}, {@in=@dev={0xac, 0x14, 0x14, 0xa}, 0x4d5, 0x33}, @in6=@remote, {0x1ff, 0xa2, 0x7, 0xfffffffffffffffc, 0x0, 0x4, 0x7fff, 0x48fe}, {0x4, 0x9, 0x5fde, 0xffff}, {0x5, 0xfffffff8, 0x9}, 0x70bd26, 0x0, 0xa, 0x2, 0x7f, 0x1}, 0x3, 0xde}, [@tfcpad={0x8, 0x16, 0x80000000}]}, 0x100}, 0x1, 0x0, 0x0, 0x4075}, 0xc800) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) getpid() syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x200002, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r6, 0x1, 0x1, &(0x7f0000000380)=0xfffff272, 0x4) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) socket$nl_netfilter(0x10, 0x3, 0xc) 875.00785ms ago: executing program 2 (id=1984): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000080)=[{0x6, 0xa, 0x0, 0x7fffdfff}]}) memfd_create(&(0x7f0000000100)='+\x88\xc7s\x00\x00\x942nodev\x00\x00\x8cZ_Pv\x03\xa7\xc1\b\xec\x90Q\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00'/201, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$kcm(0xa, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x4b4, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x468, 0x8, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x37c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x334, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x4b4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) creat(&(0x7f0000000440)='./file0\x00', 0x0) syz_clone(0x1010000, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r6, r6, 0x0, 0x40008) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000005c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}]}}) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 679.192864ms ago: executing program 1 (id=1986): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f49a9}], 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x74, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0xfe}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x80801, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x7, 0x5ab640) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000140)=@usbdevfs_driver={0x0, 0xfffff60d, &(0x7f0000000200)}) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r3, 0x80083313, &(0x7f0000000080)) listen(r0, 0x100) r5 = dup(r0) sendmsg$inet_sctp(r5, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="d9", 0x1}], 0x1}, 0x8050) 599.77242ms ago: executing program 1 (id=1987): socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x22d41, 0xd6) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x40000073}]}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) (async) openat$ptmx(0xffffffffffffff9c, 0x0, 0x40980, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x400d4) (async) connect$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, [@default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8983, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="bfad0371", @ANYRES16=r9, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r10, @ANYBLOB="04005b000600650040000000"], 0x28}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010000000000000800000800000008000200", @ANYRES32=r6, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000240)={0x50, 0x0, r12, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50) 409.649447ms ago: executing program 1 (id=1988): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f00000000c0)={'bond_slave_1\x00', @random="0163014030d9"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) syz_emit_vhci(0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x58, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}], {0x14}}, 0xf4}}, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x26) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r9, 0x40187013, &(0x7f0000000140)) r10 = socket$unix(0x1, 0x2, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f00000005c0)={'\x00', 0xab5, 0x2, 0x1000, 0x2, 0xb, 0x0}) stat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f0000000b00)=[0x0, 0xee01]) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000003c40)={0x5, 0x7, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x5, 0x3}) lstat(&(0x7f0000003c80)='./file0\x00', &(0x7f0000003cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r10, &(0x7f0000003d80)=[{{&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000200)="b2e881eb1e1c173b3c9eb830563cb098a8020470ccd505b9ae3b50ac84c396f73c9d5319e7344b95825d682b743d32769a9399eacc5b2a1aa21a249ef98fa881a0e697e4e6bae1bd503a1d4d0d007cf74e528d43d81f6b30ffbcda97807ed191daa5e6676cb3380178d4dcfab5e0d73684518a5c4d014022633c5be139b27603dbdaa98c254e5517e14d8113a9842929a64c81a1850d73d8989f17f5bf620d5fcb8889f78869a4e598e2cc9a6676d2a11303b2e6a38139e113529c1e87c068", 0xbf}, {&(0x7f00000002c0)="5c5c0d8989f8108a962383299c278997d3b3f84ec746140b78c7f0570d023408b9f98fea0a563e069f03649b19c7bc1464663b3fd39c19c068b12668739bf1d3c395c16526f9d61f8f4422fa234b080e799d1e60e3a2999632df92f6fb03ce6f881c939bd508f72101b609d948d7dc663e13f3c0798d50459d31f825c6b436c4114978fda8bdae935447f812962045cb133cee2485ff88641fe74cc203827106a8a00e0a8e008e9fa198da52fbe0039aaa5db07b8b271018d1a3d8fe342a6b0da74be233ac57a5bdb941a0c0b8c5ad2101bd0abe4fd8097aed28e1f71164223225d4459280a6ed89dd91dd0afdfcdfd70a", 0xf1}, {&(0x7f00000003c0)="84fb2954df3e29eba8bab78426589181c14b5c4d41a0b5f4e84d1963b57ebaf9a80aece57adc9ecc7fa4e5caadc019be6e9d0dbabaaf0597a53701c4a06bbf4113c786713375e56586f7a4365916982c12da44827bbff01c6a8990c8dfda5278a2144ddf0d3b7bd8542a3b81e146de076d65ef5d1b921f4e0717808b43c1363b19d61a458104cd0e3141c3f2d6493abb6f6af66f660d669fa28ecd8f0e665f88ed6221e11caba857d24909c7b63158065fc29d41947524fc5bac857676757513c33c3bdf4c255b7049387d57b39291", 0xcf}, {&(0x7f0000000100)="84794446e10a75cebe04f774a7", 0xd}, {&(0x7f00000004c0)}, {&(0x7f0000000500)="b3d0484259ab4505e777eb7c9f1327c7fb285dee60b6af75fdf4b1c28062c8205d0fae9cd7a1c63f765c73d1fccf064f951e00222d0c41e0745ad2a32488b72f7a522cf7c328c2f0dbcd0f118a576ef82460c8f626f1666b32ce8c96", 0x5c}, {&(0x7f0000000580)="af791113f771c08bbc28d46426abaa530c9aecb70699fa561cfd97d10d262de1a1027f5807", 0x25}, {&(0x7f0000000840)="24ed63dc71b29fe403916418ffdec10e34da95a64d817067250cea2c513b203985d2ac409258dcba49e69fe6d5ee56285911890e57882a5e208c75da3b93629024d0cb8681c382b1263fa5cba3da578364d5923ca8f958cf20266c2000291c0d9309104b1cba5d3c9555ffa447269ebb6aa7520a89625221ab3d6ba8beab93cf4e707250cafce2c61154c567698724bf81f40cfdeb0503330f13be2ce060675e50830783b1511f0460fbaf0b8e9f724c23f0f2e79ae214a1aa2793522b8d3ab48dc2a7062a48e241f9d03b0bf1a5e52980fa9a1ce81a044596d91c722c1859163bb1c54e3284901ab68c840f", 0xec}, {&(0x7f0000000940)="ca35f6f8586050008a9136869572bd1e20afae7e581d69736e8157f668a6215e316bdee60ce65d971ac0a15de4bce5a96ecf4d9804435b3c2a162aa38f645200c0a54414bf0719c9", 0x48}], 0x9, &(0x7f0000000b40)=[@cred={{0x18, 0x1, 0x2, {r11, r12, r13}}}], 0x18, 0x8040}}, {{&(0x7f0000000b80)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000c00)="f5c9187d649deaea11f8e616bcfc41cb41be360ad3e2c8ce14306387ce954cb178c63b20e7b09c8841916ac95430574f1fb036a9c27ffffe940981217da5", 0x3e}, {&(0x7f0000000c40)="d383ee2bcee44e0c38eef8963ecb903f216a540bae4c15a19dda2e0b8080eba4283d9b0025debce979a93b6ab26cd5ab1ce652bfd7d041add6c34bc1167daca99d69b0dadfb8802fcf53ba213ab2a62151ba18d8b7ed90135fe82a8212ff7c804c6cc6af58ba3a337b09d782fef14ac6df49391e3b3473868eb3ba4aa0dff145a4ec18a1991c5f7201347a23369d043e17854e7209f5b3b08317a365185767bf15541042f57369e7e510b3861d29c6c22960b31fe2c861cd31be7765484007965334f1b4b4b9e0a29b869af338632393ba318205885c6cdf1df5d11bbf2f50dfffea176a3a4118521c", 0xe9}, {&(0x7f0000000d40)="ee99adac27d2cac059fcbf79337904ab69d10177b3026236fc338dc13c10ab6a60e61a7324de759411f86449a655d7139b8461695b93976c64c487c666ec0cb29b9b367829374d7149ef13b3e2d1098c6b3cfd0b32b15910ddf87fef2b2fe0b53584fe039f050fd23810235f16db3917b95573487f3677fd8126bcdeab632c85be3d16a724dcd119af195f7f473a11f04b0e2178120527b343eb7365c4299c565646fd02ef8350e3fddb87d6bb70cf49c6c68aa656117b2dce42bff58c83b83bbc8cbaa734898c91f85543332d0f32ea86fd6a29265946bf39", 0xd9}, {&(0x7f0000000e40)="2ff334f73701", 0x6}, {&(0x7f0000000e80)="616b7def57f08e9bfa3986d137d5dd3f52e2f453644e46da89b5596257d884ef18c37c411816dee9e773010a5bc36a182115d6b77fdb7466366f2307c3b98da9bc244cc82f5cc2913266487d9edce48ca243127ffc095c2fbd11d35466c51fa06566793432d9b829eebba2ff4d13fdb44a1efe", 0x73}], 0x5, 0x0, 0x0, 0x8040}}, {{&(0x7f0000000f40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001300)=[{&(0x7f0000000fc0)="d86dd2878e31ddb6871d5b4e0e7278e3499494b2d341254a97c75ab8da6ead05aae13ee4bfdcf6f86c03d82883a5c35d21b93d5f64c4ff83849849280febb2d403ef9a6b9f5e2f9b7e0b562975910afc6ce8dc606eea331a5e551fdeb706ca3a390c0613fb38e54b3288bf3c059130dbd0c34a735f7881f3acdd5cbaea3ed4d6284613058b0304994ec9f2c3161d6f24d675ed638ec5ecea0714d25d7defcdb1c916eed9005bb8f0abfffbef9d6d902bd11dedcacb41f89f194c0c33dd9cb7630f590cc19a70d906a9d1f7492c259eaba03296160ea7", 0xd6}, {&(0x7f0000001400)="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", 0x1000}, {&(0x7f00000010c0)="f36e66930c526ca23a4121452637b43e5436c66bd2035f288daec92a9a35f7581c966c2d543e3cacb205440fae68afc5cf9fc04e9690fb5556525875c17f6c73f9ac84f91226d667723bb2a5a21779b87266c0c7fc645f851d8d66af1d1e93a12d1419421c58adb151e9fc8dffe078c26e8bd483e0ac8d3e01bfa9669625c98b5039ca5182775310133b44f016a17b798e73f7dbc4f08a9bc29d7155ef88d4bd88573a36aa5f2789c33f98d9fef9df6b73d7629fbe816640dfeb325303ed04c5a287cb4cd38018835f6d", 0xca}, {&(0x7f00000011c0)="d5febad4ddb46e621c264efcec855ed18cd0a52d6380ae477d4c41887ca87e780f909ffebc8ac643366537bf12452588b1809154e4b948f67b38cef284cbdf17ad7138ca1feccdab3e3857add5418db15d25707f030849044e24514f4d4acd9f970595b9f2b60417f35958cde95b9a7360e4b28f463167ddd3c7c38dca5c60f3fe13c74b132b79360acda9fe9cb86c31b5a549f7e89dd4e36ab6b0d7207d680c1d276bf4ff47b7c190f0810dadf3ff7a1c7b67cc82db3342f1a011dfd8db69c587b2999cf98dae172c7eae1d70a7ddbfd017504bbadad1dffccc720e75", 0xdd}, {&(0x7f0000002400)="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", 0x1000}, {&(0x7f00000012c0)="173129e288cc5de64db4cad5", 0xc}], 0x6, 0x0, 0x0, 0x4000}}, {{&(0x7f0000003400)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003540)=[{&(0x7f0000003480)="9e5a336a1e5d78c45724ad5307a64620fae21d1c3280ecbfa20ee11c28639007f6faff8e176c2290ad710cd168eba5de9c12eeaf59d9a2c6fa6168a89354a90902ddf9484a82cb7a9e2571fda57e90a725a81c212892a18b46a1c4233f9dcb7a4f172fad272fb2404447a3e43b0312cdbbc00e9e72fa03e6d06a7416f265b2c4ec69ab671f6c2b2b7c85e9f7a056a7e8dc149d7e895f4d041559b163fb7aed9d03cab69154f2407540972baf059fe0b31a2138b90f", 0xb5}], 0x1, &(0x7f0000003580)=[@rights={{0x10, 0x1, 0x1, [r5]}}], 0x10, 0x4000000}}, {{&(0x7f00000035c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000003780)=[{&(0x7f0000003640)="f0c825043fc660c34d38ec45f359462bcc5521cc29fd6713bcdb9a821110e68588590d663c794c5572766ebf279ba3d09f6189416453fe75a24cf86e07dc15ef8ee1c4295068a3efb9e4c26f14db290b3c798fa703ba95bbedb9dc450891513baa9862ac59cae69ba4c9fd18dbb00f86db7a0e8965d298ce0392918b65522a06e0985adbd4c22c3e974e3f5d2598d8088a117884ca5930ed3013bd004bc0ba9dcf014e94882bdaa794dca6d02cc51609247a4d8bb66329aafd7965612d2c8146e6580de8c3eb4e71b5bac4831c1d0406bf1fde79c042e3d1bf2dcc47fdbb55b594de74", 0xe3}, {&(0x7f0000003740)="84ab8da278636db868b50ba5ab5aa7dddfec3500cfd3ce5cd3f64bc281e92cc692ddc7ab532cc1babbd9952fbfde55a025c9c21dfadcd222", 0x38}], 0x2, &(0x7f00000037c0)=[@rights={{0xc}}, @rights={{0x10, 0x1, 0x1, [r6]}}, @rights={{0x28, 0x1, 0x1, [r8, r7, r1, r6, r1, r9, r7]}}], 0x44, 0x20000010}}, {{&(0x7f0000003840)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003c00)=[{&(0x7f00000038c0)="579c1d626970493cee6f4a8471e41a70f3016db1ee032aa94fb334a00021f5bd0e5bb481bf49e43ae6eaa639dc15d2502bedbf2a2a22dc6e2caaa06a", 0x3c}, {&(0x7f0000003900)="c8ed9544358073f3c07772cc0da134bf6606a446c3e72ca8caa6b8e3fd8c786b11f68dd7e35624a864a5cae35e7c443a92fa006c55fbfa3e009c58791978fe58f345b92c1573665388d22a2198110c6bca48989c1f3bfef9d958df4363d79014a3a67b4534b2", 0x66}, {&(0x7f0000003980)="148af82b39ccf3a3ef7f5472ec1c4762da77b67595a7c1c22ac06a6343794112a355414b8d1f6ba985e8e292ec9b6364e0da29c8fa33f087fa437930609063d6a9bdea7b5221d4dca9e5836d857a5e42efe0fcd4359926479f53de3c28d37a42e47f25f6a6d7eca0aecd0adc8a041419dc4ff88be8c4e390133ffadbb8ca191a3830785df069c5e477f21e23959a73ef765f794e3d96aa8d3de4c90433bb741818c40c4cc40520026cb6935c103183799bf281567273cd8e699935d2293a57aeab3f12bed24ea4a9a944cd3408eefd", 0xcf}, {&(0x7f0000003a80)="436728d57427c20dbe6ca1bcb4dbcf9ea70da1a4d8ff882160fd41397c5dad4c77ac4e743516c8c1fdfe4c67803fbfb1ed2b26c3df8659613fc951d07dcc8f336972eb7cafc4631c4b9b6fa871fdf7b8eca200ce2b6d50cd39cdd1fce1f71d49019bf36bfe58de85b7b560496f5ab0a35b13f4c0c5ce4fa596a5f21a4b3d6cd87cc9d1f2469d9fc6df5f3fa8bda94a5fd7c3e3dda2aef8f3fc60a07af7d4f1d01752878058fdef256e1e76ea65d857ea5c55169ddda0f5", 0xb7}, {&(0x7f0000003b40)="b5ab830edfb043d3d109c5717b9f843e3badbdfdca7f6c150d717a23d2f8fb8c98ef179a2fa82e6aec0f41779f8a19fccd5a6d71e8e576f23b8de3c08fd74a24d553e3a661dfdf13e0c70cb2055dc58c7eed29e39b96f01f7dfa25a0158238e98f7d2ae0867008e247086cc595cd56e17134f9f4d0795a19e10ddb3cba0e85e52af43226f8a3af79a391d4d514304496edfa3523977292e6b6250eaac5cf714796aea80e5670d165a059c270277ce2ac342485b4", 0xb4}], 0x5, &(0x7f0000003d40)=[@cred={{0x18, 0x1, 0x2, {r14, 0xee01, r15}}}], 0x18, 0x1}}], 0x6, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xb}, {0xff, 0x7f, 0xd6, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x8, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0xc, '\x00', 0x6}, {0x6, 0x5, 0xd, '\x00', 0x5}, {0xd7, 0xd, 0x8, '\x00', 0x2}, {0x0, 0x28, 0x80, '\x00', 0x3}, {0xff, 0x99, 0xbe, '\x00', 0xff}, {0xfd, 0x5, 0x26}, {0xcf, 0x3, 0x11, '\x00', 0x6}, {0xf, 0x7, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0x9, 0x5, '\x00', 0xc}, {0x7, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0x1, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) 308.151151ms ago: executing program 0 (id=1989): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000000000), 0x10) setsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f0000000040), 0x4) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) close(r1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f00000002c0)={0x9, {"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", 0x1000}}, 0x1006) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000140)=@x86={0x6, 0x0, 0x8, 0x0, 0x2, 0x8, 0x4, 0xb, 0x0, 0x56, 0x5, 0x70, 0x0, 0xd, 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x4, 0x4}) 293.642153ms ago: executing program 1 (id=1990): setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000800)="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"/1450, 0x5de, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x9, @mcast2}, 0x1c) 219.847102ms ago: executing program 1 (id=1991): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x21, &(0x7f0000000000)=0x80000000, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r2 = socket(0x2d, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x9}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x14) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) setsockopt$inet6_tcp_buf(r2, 0x11d, 0x1c, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "8f"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd0}}, 0x0) 219.622407ms ago: executing program 1 (id=1992): vmsplice(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000003c0)="5a1be2b4477ab934bbdd707645bb50d9f4edd59d5984ea080f3affa458306d13aaedd7554ef79211fca0fd7466c36eb03deb6b2ac3c0638cc783c723930f9efdeaf793013d09d039a3b39ef844ecb7f5a8c717ac5108657acefa5cc7171bee9f90f5bb3a78aabb8c0b00146a37fe0020adc630257c9a7e804d"}], 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000380)={0x1, &(0x7f0000000100)=[{0x4, 0xc, 0x0, 0xfff}]}) io_uring_enter(r4, 0x4e14, 0x912a, 0x5f, 0x0, 0xffffffffffffff1d) close(r0) r7 = socket(0x2b, 0x1, 0x1) timer_create(0x0, &(0x7f0000000240)={0x0, 0x23, 0x2, @tid=0xffffffffffffffff}, &(0x7f00000000c0)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) 0s ago: executing program 0 (id=1993): socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x227a, &(0x7f0000000040)=0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) msgrcv(0x0, 0x0, 0xffffffffffffff20, 0x0, 0xa1e3a9fe3eb9c551) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r3 = socket$inet6(0xa, 0x3, 0x3c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000810) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$int_out(r5, 0x0, &(0x7f0000000040)) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000000180)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24000045}, 0x4d000) sendfile(r7, r7, 0x0, 0x200900) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) syz_extract_tcp_res(&(0x7f0000000580), 0x8147, 0x200) syz_extract_tcp_res(&(0x7f00000005c0), 0xff, 0x1) kernel console output (not intermixed with test programs): 360160][T11091] ? is_bpf_text_address+0x8a/0x1a0 [ 512.360181][T11091] kvm_arch_vcpu_ioctl+0x1ae0/0x53e0 [ 512.360195][T11091] ? kvm_arch_vcpu_ioctl+0x1ab8/0x53e0 [ 512.360210][T11091] ? kernel_text_address+0x8d/0x100 [ 512.360227][T11091] ? __kernel_text_address+0xd/0x30 [ 512.360244][T11091] ? unwind_get_return_address+0x59/0xa0 [ 512.360259][T11091] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 512.360280][T11091] ? __lock_acquire+0x4a5/0x2630 [ 512.360295][T11091] ? __lock_acquire+0x4a5/0x2630 [ 512.360313][T11091] ? lock_acquire+0x17c/0x330 [ 512.360328][T11091] ? __pfx___might_resched+0x10/0x10 [ 512.360346][T11091] ? rcu_is_watching+0x12/0xc0 [ 512.360357][T11091] ? trace_contention_end+0xd6/0x110 [ 512.360373][T11091] ? __mutex_lock+0x26a/0x1b90 [ 512.360388][T11091] ? kvm_vcpu_ioctl+0x322/0x16d0 [ 512.360401][T11091] ? __pfx___mutex_lock+0x10/0x10 [ 512.360420][T11091] ? kasan_quarantine_put+0x104/0x240 [ 512.360434][T11091] ? lockdep_hardirqs_on+0x78/0x100 [ 512.360450][T11091] ? kvm_vcpu_ioctl+0x8a0/0x16d0 [ 512.360458][T11091] kvm_vcpu_ioctl+0x8a0/0x16d0 [ 512.360470][T11091] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 512.360480][T11091] ? tomoyo_path_number_perm+0x188/0x580 [ 512.360498][T11091] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 512.360519][T11091] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 512.360532][T11091] ? do_vfs_ioctl+0x226/0x13e0 [ 512.360550][T11091] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 512.360573][T11091] kvm_vcpu_compat_ioctl+0x20f/0x3c0 [ 512.360584][T11091] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 512.360595][T11091] ? __fget_files+0x21f/0x3d0 [ 512.360610][T11091] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 512.360621][T11091] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 512.360640][T11091] __do_fast_syscall_32+0xde/0x660 [ 512.360656][T11091] do_fast_syscall_32+0x32/0x70 [ 512.360671][T11091] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 512.360685][T11091] RIP: 0023:0xf7fb2579 [ 512.360694][T11091] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 512.360705][T11091] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 512.360715][T11091] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c008ae88 [ 512.360722][T11091] RDX: 0000000080000680 RSI: 0000000000000000 RDI: 0000000000000000 [ 512.360728][T11091] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 512.360734][T11091] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 512.360740][T11091] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 512.360754][T11091] [ 513.076262][T11100] overlayfs: failed to clone upperpath [ 513.852730][T11109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1348'. [ 514.361086][ C3] vcan0: j1939_tp_rxtimer: 0xffff88804c1b2800: rx timeout, send abort [ 514.364267][ C3] vcan0: j1939_xtp_rx_abort_one: 0xffff88804c1b2800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 514.473467][ T65] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 514.666846][T11115] netlink: 'syz.1.1350': attribute type 10 has an invalid length. [ 514.676013][T11115] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.679564][T11115] bond0: (slave team0): Enslaving as an active interface with an up link [ 514.743216][T11119] FAULT_INJECTION: forcing a failure. [ 514.743216][T11119] name failslab, interval 1, probability 0, space 0, times 0 [ 514.750390][T11119] CPU: 3 UID: 0 PID: 11119 Comm: syz.2.1352 Tainted: G L syzkaller #0 PREEMPT(full) [ 514.750419][T11119] Tainted: [L]=SOFTLOCKUP [ 514.750440][T11119] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 514.750451][T11119] Call Trace: [ 514.750456][T11119] [ 514.750463][T11119] dump_stack_lvl+0x100/0x190 [ 514.750490][T11119] should_fail_ex.cold+0x5/0xa [ 514.750517][T11119] should_failslab+0xc2/0x120 [ 514.750539][T11119] ? tomoyo_encode2+0xfb/0x3c0 [ 514.750555][T11119] __kmalloc_noprof+0xf6/0x9c0 [ 514.750570][T11119] ? __pfx_tomoyo_get_local_path+0x10/0x10 [ 514.750595][T11119] ? tomoyo_encode2+0xfb/0x3c0 [ 514.750609][T11119] tomoyo_encode2+0xfb/0x3c0 [ 514.750630][T11119] tomoyo_encode+0x29/0x50 [ 514.750645][T11119] tomoyo_realpath_from_path+0x18c/0x690 [ 514.750669][T11119] tomoyo_check_open_permission+0x2af/0x3c0 [ 514.750710][T11119] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 514.750734][T11119] ? ovl_iterate+0xb7b/0x11e0 [ 514.750754][T11119] ? __ia32_compat_sys_getdents+0x13a/0x2b0 [ 514.750771][T11119] ? __do_fast_syscall_32+0xde/0x660 [ 514.750816][T11119] ? do_raw_spin_lock+0x128/0x260 [ 514.750844][T11119] ? path_get+0x61/0x80 [ 514.750868][T11119] tomoyo_file_open+0x6b/0x90 [ 514.750890][T11119] security_file_open+0xb5/0x1e0 [ 514.750907][T11119] do_dentry_open+0x58c/0x1570 [ 514.750929][T11119] ? lockdep_init_map_type+0x5c/0x250 [ 514.750957][T11119] vfs_open+0x82/0x3f0 [ 514.750985][T11119] dentry_open+0x71/0xd0 [ 514.751009][T11119] ovl_path_open+0x182/0x1d0 [ 514.751032][T11119] ovl_dir_read_merged+0x4ba/0x790 [ 514.751057][T11119] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 514.751084][T11119] ? __pfx_ovl_fill_merge+0x10/0x10 [ 514.751126][T11119] ovl_iterate+0xb7b/0x11e0 [ 514.751150][T11119] ? __pfx_down_read_killable+0x10/0x10 [ 514.751178][T11119] ? __pfx_ovl_iterate+0x10/0x10 [ 514.751198][T11119] wrap_directory_iterator+0xa2/0xe0 [ 514.751216][T11119] iterate_dir+0x296/0xae0 [ 514.751237][T11119] __ia32_compat_sys_getdents+0x13a/0x2b0 [ 514.751255][T11119] ? __pfx___ia32_compat_sys_getdents+0x10/0x10 [ 514.751274][T11119] ? __pfx_compat_filldir+0x10/0x10 [ 514.751292][T11119] ? __pfx_ksys_write+0x10/0x10 [ 514.751317][T11119] __do_fast_syscall_32+0xde/0x660 [ 514.751340][T11119] do_fast_syscall_32+0x32/0x70 [ 514.751362][T11119] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 514.751383][T11119] RIP: 0023:0xf7fb2579 [ 514.751397][T11119] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 514.751412][T11119] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 000000000000008d [ 514.751430][T11119] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000000 [ 514.751441][T11119] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 514.751450][T11119] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 514.751460][T11119] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 514.751469][T11119] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 514.751494][T11119] [ 514.751868][T11119] ERROR: Out of memory at tomoyo_realpath_from_path. [ 515.197223][T11135] overlayfs: missing 'lowerdir' [ 515.363511][T10812] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 515.463491][ T52] usb 7-1: new full-speed USB device number 30 using dummy_hcd [ 515.525193][T10812] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 515.529705][T10812] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 515.534275][T10812] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 515.538094][T10812] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.554306][T11134] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 515.562838][T10812] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 515.766412][T11138] netlink: 'syz.3.1358': attribute type 10 has an invalid length. [ 515.770005][T11138] veth0_vlan: left promiscuous mode [ 515.773150][T11138] veth0_vlan: entered promiscuous mode [ 515.777502][T11138] team0: Device veth0_vlan failed to register rx_handler [ 515.831849][T11134] ubi: mtd0 is already attached to ubi0 [ 515.834497][T10812] usb 5-1: USB disconnect, device number 29 [ 515.899117][ T52] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 515.901521][ T52] usb 7-1: can't read configurations, error -71 [ 516.313531][ T53] usb 42-1: device descriptor read/8, error -110 [ 516.714133][ T53] usb usb42-port1: attempt power cycle [ 517.294398][ T53] usb usb42-port1: unable to enumerate USB device [ 517.954166][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806cf4b000: rx timeout, send abort [ 517.957811][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806cf4b000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 518.000605][T11184] FAULT_INJECTION: forcing a failure. [ 518.000605][T11184] name failslab, interval 1, probability 0, space 0, times 0 [ 518.005747][T11184] CPU: 1 UID: 0 PID: 11184 Comm: syz.0.1372 Tainted: G L syzkaller #0 PREEMPT(full) [ 518.005776][T11184] Tainted: [L]=SOFTLOCKUP [ 518.005782][T11184] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 518.005792][T11184] Call Trace: [ 518.005798][T11184] [ 518.005806][T11184] dump_stack_lvl+0x100/0x190 [ 518.005833][T11184] should_fail_ex.cold+0x5/0xa [ 518.005881][T11184] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 518.005900][T11184] should_failslab+0xc2/0x120 [ 518.005925][T11184] kmem_cache_alloc_noprof+0x83/0x780 [ 518.005947][T11184] ? skb_clone+0x190/0x400 [ 518.005977][T11184] ? skb_clone+0x190/0x400 [ 518.006000][T11184] skb_clone+0x190/0x400 [ 518.006025][T11184] netlink_deliver_tap+0xaed/0xcc0 [ 518.006056][T11184] netlink_unicast+0x650/0x870 [ 518.006086][T11184] ? __pfx_netlink_unicast+0x10/0x10 [ 518.006121][T11184] netlink_sendmsg+0x8b0/0xda0 [ 518.006157][T11184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 518.006186][T11184] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 518.006212][T11184] ____sys_sendmsg+0xa54/0xc30 [ 518.006234][T11184] ? __pfx_____sys_sendmsg+0x10/0x10 [ 518.006265][T11184] ___sys_sendmsg+0x190/0x1e0 [ 518.006285][T11184] ? __pfx____sys_sendmsg+0x10/0x10 [ 518.006327][T11184] __sys_sendmsg+0x170/0x220 [ 518.006350][T11184] ? __pfx___sys_sendmsg+0x10/0x10 [ 518.006380][T11184] ? __pfx_ksys_write+0x10/0x10 [ 518.006403][T11184] __do_fast_syscall_32+0xde/0x660 [ 518.006426][T11184] do_fast_syscall_32+0x32/0x70 [ 518.006445][T11184] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 518.006463][T11184] RIP: 0023:0xf7f86579 [ 518.006475][T11184] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 518.006490][T11184] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 518.006505][T11184] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 518.006515][T11184] RDX: 0000000064040084 RSI: 0000000000000000 RDI: 0000000000000000 [ 518.006524][T11184] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 518.006532][T11184] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 518.006541][T11184] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 518.006561][T11184] [ 518.006596][T11184] netlink: 'syz.0.1372': attribute type 4 has an invalid length. [ 518.100498][T11184] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1372'. [ 518.112046][T11184] .`: renamed from bond0 (while UP) [ 518.153597][ T5954] Bluetooth: hci4: command 0x1003 tx timeout [ 518.156507][ T65] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 518.240454][T11190] nft_compat: unsupported protocol 0 [ 518.284740][T11195] usb usb9: usbfs: process 11195 (syz.2.1377) did not claim interface 0 before use [ 518.624072][ T53] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 518.785060][ T53] usb 5-1: config 0 has an invalid interface number: 204 but max is 0 [ 518.787782][ T53] usb 5-1: config 0 has no interface number 0 [ 518.791413][ T53] usb 5-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 518.794779][ T53] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.797320][ T53] usb 5-1: Product: syz [ 518.798684][ T53] usb 5-1: Manufacturer: syz [ 518.800155][ T53] usb 5-1: SerialNumber: syz [ 518.803829][T11209] netlink: 'syz.1.1381': attribute type 4 has an invalid length. [ 518.804845][ T53] usb 5-1: config 0 descriptor?? [ 518.806303][T11209] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1381'. [ 518.815029][ T53] ems_usb 5-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 518.818614][ T53] ems_usb 5-1:0.204: probe with driver ems_usb failed with error -22 [ 518.823324][T11209] .`: renamed from bond0 (while UP) [ 518.918444][T11215] netlink: 'syz.1.1383': attribute type 10 has an invalid length. [ 518.923782][T11215] veth0_vlan: left promiscuous mode [ 518.926784][T11215] veth0_vlan: entered promiscuous mode [ 518.929542][T11215] team0: Device veth0_vlan failed to register rx_handler [ 518.933578][T11215] tipc: Resetting bearer [ 519.035429][T11217] syz.1.1384(11217): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 519.266893][T11225] FAULT_INJECTION: forcing a failure. [ 519.266893][T11225] name failslab, interval 1, probability 0, space 0, times 0 [ 519.271006][T11225] CPU: 1 UID: 0 PID: 11225 Comm: syz.2.1387 Tainted: G L syzkaller #0 PREEMPT(full) [ 519.271023][T11225] Tainted: [L]=SOFTLOCKUP [ 519.271027][T11225] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 519.271034][T11225] Call Trace: [ 519.271038][T11225] [ 519.271043][T11225] dump_stack_lvl+0x100/0x190 [ 519.271060][T11225] should_fail_ex.cold+0x5/0xa [ 519.271078][T11225] should_failslab+0xc2/0x120 [ 519.271095][T11225] kmem_cache_alloc_node_noprof+0x8c/0x880 [ 519.271111][T11225] ? __alloc_skb+0x156/0x410 [ 519.271128][T11225] ? __alloc_skb+0x156/0x410 [ 519.271142][T11225] __alloc_skb+0x156/0x410 [ 519.271156][T11225] ? __alloc_skb+0x35d/0x410 [ 519.271170][T11225] ? __pfx___alloc_skb+0x10/0x10 [ 519.271190][T11225] _sctp_make_chunk+0x51/0x270 [ 519.271205][T11225] sctp_make_datafrag_empty+0x14e/0x230 [ 519.271220][T11225] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 519.271239][T11225] sctp_datamsg_from_user+0x5ea/0x1360 [ 519.271259][T11225] sctp_sendmsg_to_asoc+0xb1c/0x1c50 [ 519.271276][T11225] ? __asan_memmove+0x10/0x60 [ 519.271287][T11225] ? sctp_assoc_set_primary+0x276/0x310 [ 519.271305][T11225] ? sctp_assoc_add_peer+0x252/0x14f0 [ 519.271317][T11225] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 519.271333][T11225] ? sctp_connect_new_asoc+0x41e/0x770 [ 519.271345][T11225] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 519.271355][T11225] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 519.271371][T11225] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 519.271390][T11225] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 519.271404][T11225] sctp_sendmsg+0x1185/0x22b0 [ 519.271418][T11225] ? __pfx_sctp_sendmsg+0x10/0x10 [ 519.271432][T11225] ? aa_sk_perm+0x2de/0xb40 [ 519.271450][T11225] ? __pfx_aa_sk_perm+0x10/0x10 [ 519.271465][T11225] ? __might_fault+0xc5/0x140 [ 519.271481][T11225] ? __pfx_sctp_sendmsg+0x10/0x10 [ 519.271492][T11225] inet_sendmsg+0x11c/0x140 [ 519.271505][T11225] __sys_sendto+0x467/0x520 [ 519.271521][T11225] ? __pfx___sys_sendto+0x10/0x10 [ 519.271540][T11225] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 519.271560][T11225] ? fput+0x79/0x100 [ 519.271575][T11225] ? ksys_write+0x1ac/0x250 [ 519.271589][T11225] __ia32_sys_sendto+0xdd/0x1b0 [ 519.271603][T11225] ? __do_fast_syscall_32+0x97/0x660 [ 519.271617][T11225] ? lockdep_hardirqs_on+0x78/0x100 [ 519.271631][T11225] __do_fast_syscall_32+0xde/0x660 [ 519.271651][T11225] do_fast_syscall_32+0x32/0x70 [ 519.271669][T11225] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 519.271683][T11225] RIP: 0023:0xf7fb2579 [ 519.271692][T11225] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 519.271702][T11225] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 519.271713][T11225] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 519.271720][T11225] RDX: 000000000001a0fc RSI: 000000002000c8d4 RDI: 00000000800000c0 [ 519.271727][T11225] RBP: 0000000000000010 R08: 0000000000000000 R09: 0000000000000000 [ 519.271733][T11225] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 519.271739][T11225] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 519.271753][T11225] [ 520.082650][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806109e000: rx timeout, send abort [ 520.085451][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88806109e000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 520.353664][ T1450] libceph: connect (1)[c::]:6789 error -101 [ 520.356167][ T1450] libceph: mon0 (1)[c::]:6789 connect error [ 520.396259][T11239] ceph: No mds server is up or the cluster is laggy [ 520.555822][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 520.555833][ T40] audit: type=1326 audit(1770049503.873:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11245 comm="syz.2.1394" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 520.565516][ T40] audit: type=1326 audit(1770049503.883:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11245 comm="syz.2.1394" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 520.573456][ T40] audit: type=1326 audit(1770049503.883:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11245 comm="syz.2.1394" exe="/syz-executor" sig=0 arch=40000003 syscall=435 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 520.583831][ T40] audit: type=1326 audit(1770049503.903:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11245 comm="syz.2.1394" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 520.590702][ T40] audit: type=1326 audit(1770049503.903:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11247 comm="syz.2.1394" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71b572b code=0x7ffc0000 [ 520.598352][ T40] audit: type=1326 audit(1770049503.903:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11245 comm="syz.2.1394" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 520.605766][ T40] audit: type=1326 audit(1770049503.903:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11245 comm="syz.2.1394" exe="/syz-executor" sig=0 arch=40000003 syscall=424 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 520.613202][ T40] audit: type=1326 audit(1770049503.903:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11245 comm="syz.2.1394" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 520.620441][ T40] audit: type=1326 audit(1770049503.903:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11245 comm="syz.2.1394" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 520.627514][ T40] audit: type=1326 audit(1770049503.903:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11245 comm="syz.2.1394" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 521.082817][T11255] binder: 11254:11255 ioctl c0306201 0 returned -14 [ 521.223216][ T5625] usb 5-1: USB disconnect, device number 30 [ 521.942616][T11273] FAULT_INJECTION: forcing a failure. [ 521.942616][T11273] name failslab, interval 1, probability 0, space 0, times 0 [ 521.949453][T11273] CPU: 0 UID: 0 PID: 11273 Comm: syz.3.1401 Tainted: G L syzkaller #0 PREEMPT(full) [ 521.949482][T11273] Tainted: [L]=SOFTLOCKUP [ 521.949488][T11273] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 521.949499][T11273] Call Trace: [ 521.949505][T11273] [ 521.949512][T11273] dump_stack_lvl+0x100/0x190 [ 521.949538][T11273] should_fail_ex.cold+0x5/0xa [ 521.949567][T11273] should_failslab+0xc2/0x120 [ 521.949592][T11273] kmem_cache_alloc_lru_noprof+0x8e/0x7d0 [ 521.949614][T11273] ? ilookup5+0x19f/0x230 [ 521.949635][T11273] ? __pfx_ovl_inode_test+0x10/0x10 [ 521.949660][T11273] ? ovl_alloc_inode+0x25/0x190 [ 521.949685][T11273] ? __pfx_ovl_inode_test+0x10/0x10 [ 521.949706][T11273] ? __pfx_ovl_inode_set+0x10/0x10 [ 521.949725][T11273] ? __pfx_ovl_alloc_inode+0x10/0x10 [ 521.949744][T11273] ? ovl_alloc_inode+0x25/0x190 [ 521.949765][T11273] ovl_alloc_inode+0x25/0x190 [ 521.949785][T11273] alloc_inode+0x68/0x250 [ 521.949830][T11273] iget5_locked+0x5f/0xa0 [ 521.949862][T11273] ovl_get_inode+0xecc/0x1900 [ 521.949891][T11273] ? __pfx_ovl_get_inode+0x10/0x10 [ 521.949914][T11273] ? ovl_stack_cpy+0x78/0xb0 [ 521.949930][T11273] ? do_raw_spin_unlock+0x145/0x1e0 [ 521.949956][T11273] ? _raw_spin_unlock+0x28/0x50 [ 521.949977][T11273] ovl_lookup_layers+0x8bc/0x2ac0 [ 521.950015][T11273] ? __pfx_ovl_lookup_layers+0x10/0x10 [ 521.950051][T11273] ? rcu_read_unlock+0x17/0x60 [ 521.950082][T11273] ovl_lookup+0x4a8/0x6b0 [ 521.950109][T11273] ? __pfx_ovl_lookup+0x10/0x10 [ 521.950131][T11273] ? rcu_is_watching+0x12/0xc0 [ 521.950151][T11273] ? do_raw_spin_lock+0x128/0x260 [ 521.950181][T11273] ? do_raw_spin_unlock+0x145/0x1e0 [ 521.950203][T11273] ? _raw_spin_unlock+0x28/0x50 [ 521.950223][T11273] lookup_one_qstr_excl+0x1d1/0x250 [ 521.950250][T11273] __start_renaming+0x16d/0x520 [ 521.950277][T11273] do_renameat2+0x546/0xa10 [ 521.950304][T11273] ? __pfx_do_renameat2+0x10/0x10 [ 521.950328][T11273] ? __might_fault+0xc5/0x140 [ 521.950372][T11273] ? getname_flags.part.0+0x1c5/0x540 [ 521.950396][T11273] __ia32_sys_renameat2+0x1f0/0x2a0 [ 521.950420][T11273] __do_fast_syscall_32+0xde/0x660 [ 521.950440][T11273] do_fast_syscall_32+0x32/0x70 [ 521.950459][T11273] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 521.950477][T11273] RIP: 0023:0xf7fb1579 [ 521.950491][T11273] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 521.950521][T11273] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000161 [ 521.950538][T11273] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800001c0 [ 521.950548][T11273] RDX: 0000000000000004 RSI: 0000000080000200 RDI: 0000000000000000 [ 521.950557][T11273] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 521.950566][T11273] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 521.950576][T11273] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 521.950600][T11273] [ 521.950730][T11273] overlayfs: failed to get inode (-12) [ 522.139093][T11277] netlink: 'syz.0.1403': attribute type 10 has an invalid length. [ 522.142624][T11277] veth0_vlan: left promiscuous mode [ 522.146368][T11277] veth0_vlan: entered promiscuous mode [ 522.150780][T11277] team0: Device veth0_vlan failed to register rx_handler [ 523.124295][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 523.127048][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.304037][T11310] netlink: 'syz.0.1413': attribute type 10 has an invalid length. [ 523.307664][T11310] veth0_vlan: left promiscuous mode [ 523.310742][T11310] veth0_vlan: entered promiscuous mode [ 523.315187][T11310] team0: Device veth0_vlan failed to register rx_handler [ 523.543838][T11314] comedi comedi0: comedi_config --init_data is deprecated [ 525.753591][ T65] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 527.403940][T11357] comedi comedi0: comedi_config --init_data is deprecated [ 528.368878][T11374] netlink: 'syz.1.1434': attribute type 10 has an invalid length. [ 528.372372][T11374] veth0_vlan: left promiscuous mode [ 528.374711][T11374] veth0_vlan: entered promiscuous mode [ 528.378576][T11374] team0: Device veth0_vlan failed to register rx_handler [ 528.383291][T11374] tipc: Resetting bearer [ 528.948843][T11380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1436'. [ 529.120612][T11386] trusted_key: encrypted_key: keyword 'load±|óÊ“.V§í' not recognized [ 529.685287][T11403] netlink: 'syz.1.1443': attribute type 10 has an invalid length. [ 529.689973][T11403] veth0_vlan: left promiscuous mode [ 529.692111][T11403] veth0_vlan: entered promiscuous mode [ 529.694813][T11403] team0: Device veth0_vlan failed to register rx_handler [ 529.699891][T11403] tipc: Resetting bearer [ 530.028834][T11422] comedi comedi0: comedi_config --init_data is deprecated [ 531.430458][T11438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1453'. [ 531.496991][T11439] comedi comedi0: comedi_config --init_data is deprecated [ 532.707844][T11456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1457'. [ 533.743829][T11472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1463'. [ 533.773661][ T7871] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 533.924953][ T7871] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 533.929497][ T7871] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 533.950189][ T7871] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 533.954948][ T7871] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.961337][T11466] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 533.967460][ T7871] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 534.172430][T11466] ubi: mtd0 is already attached to ubi0 [ 534.175214][ T62] usb 7-1: USB disconnect, device number 32 [ 535.027202][T11488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1466'. [ 535.033480][ T5954] Bluetooth: hci4: command 0x1003 tx timeout [ 535.033520][ T65] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 535.385460][T11492] No source specified [ 537.609338][T11514] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1473'. [ 537.614665][ T40] kauditd_printk_skb: 51 callbacks suppressed [ 537.614680][ T40] audit: type=1804 audit(1770049520.933:1851): pid=11514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1473" name="/newroot/336/file0" dev="tmpfs" ino=1829 res=1 errno=0 [ 537.616542][T11514] vivid-000: ================= START STATUS ================= [ 537.627105][T11514] vivid-000: Test Pattern: 75% Colorbar [ 537.629348][T11514] vivid-000: Fill Percentage of Frame: 100 [ 537.631718][T11514] vivid-000: Horizontal Movement: No Movement [ 537.634445][T11514] vivid-000: Vertical Movement: No Movement [ 537.636992][T11514] vivid-000: OSD Text Mode: All [ 537.639122][T11514] vivid-000: Show Border: false [ 537.641255][T11514] vivid-000: Show Square: false [ 537.643482][T11514] vivid-000: Sensor Flipped Horizontally: false [ 537.646194][T11514] vivid-000: Sensor Flipped Vertically: false [ 537.648827][T11514] vivid-000: Insert SAV Code in Image: false [ 537.651377][T11514] vivid-000: Insert EAV Code in Image: false [ 537.657114][T11514] vivid-000: Insert Video Guard Band: false [ 537.660279][T11514] vivid-000: Reduced Framerate: false [ 537.662592][T11514] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 537.665849][T11514] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 537.669319][T11514] vivid-000: Enable Capture Cropping: true [ 537.672008][T11514] vivid-000: Enable Capture Composing: true [ 537.675856][T11514] vivid-000: Enable Capture Scaler: true [ 537.678367][T11514] vivid-000: Timestamp Source: End of Frame [ 537.680883][T11514] vivid-000: Colorspace: sRGB [ 537.682893][T11514] vivid-000: Transfer Function: Default [ 537.685485][T11514] vivid-000: Y'CbCr Encoding: Default [ 537.687569][T11514] vivid-000: HSV Encoding: Hue 0-179 [ 537.689632][T11514] vivid-000: Quantization: Default [ 537.691805][T11514] vivid-000: Apply Alpha To Red Only: false [ 537.694502][T11514] vivid-000: Standard Aspect Ratio: 4x3 [ 537.696836][T11514] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 537.700063][T11514] vivid-000: DV Timings: 640x480p59 inactive [ 537.702601][T11514] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 537.705718][T11514] vivid-000: Maximum EDID Blocks: 2 [ 537.707930][T11514] vivid-000: Limited RGB Range (16-235): false [ 537.710628][T11514] vivid-000: Rx RGB Quantization Range: Automatic [ 537.713469][T11514] vivid-000: Power Present: 0x00000001 [ 537.715511][T11514] tpg source WxH: 320x240 (Y'CbCr) [ 537.717178][T11514] tpg field: 1 [ 537.718381][T11514] tpg crop: (0,0)/320x240 [ 537.720421][T11514] tpg compose: (0,0)/320x240 [ 537.722017][T11514] tpg colorspace: 8 [ 537.723565][T11514] tpg transfer function: 0/0 [ 537.725798][T11514] tpg Y'CbCr encoding: 0/0 [ 537.727529][T11514] tpg quantization: 0/0 [ 537.728966][T11514] tpg RGB range: 0/2 [ 537.730410][T11514] vivid-000: ================== END STATUS ================== [ 537.733480][ T1911] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 537.885375][ T1911] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 537.891059][ T1911] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 537.895901][ T1911] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 537.899391][ T1911] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.904436][T11517] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 537.908694][ T1911] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 538.119446][T11517] ubi: mtd0 is already attached to ubi0 [ 538.125137][ T62] usb 7-1: USB disconnect, device number 33 [ 538.474737][T11541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1479'. [ 538.680177][T11543] netlink: 'syz.0.1480': attribute type 10 has an invalid length. [ 538.683205][T11543] veth0_vlan: left promiscuous mode [ 538.685708][T11543] veth0_vlan: entered promiscuous mode [ 538.688770][T11543] team0: Device veth0_vlan failed to register rx_handler [ 539.192422][T11556] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1484'. [ 539.200273][ T40] audit: type=1804 audit(1770049522.513:1852): pid=11556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1484" name="/newroot/343/file0" dev="tmpfs" ino=1840 res=1 errno=0 [ 539.204995][T11556] vivid-000: ================= START STATUS ================= [ 539.222360][T11556] vivid-000: Test Pattern: 75% Colorbar [ 539.232528][T11556] vivid-000: Fill Percentage of Frame: 100 [ 539.234612][T11556] vivid-000: Horizontal Movement: No Movement [ 539.236543][T11556] vivid-000: Vertical Movement: No Movement [ 539.238470][T11556] vivid-000: OSD Text Mode: All [ 539.240023][T11556] vivid-000: Show Border: false [ 539.241592][T11556] vivid-000: Show Square: false [ 539.253492][T11556] vivid-000: Sensor Flipped Horizontally: false [ 539.256605][T11556] vivid-000: Sensor Flipped Vertically: false [ 539.264427][T11556] vivid-000: Insert SAV Code in Image: false [ 539.266884][T11556] vivid-000: Insert EAV Code in Image: false [ 539.273345][T11556] vivid-000: Insert Video Guard Band: false [ 539.275626][T11556] vivid-000: Reduced Framerate: false [ 539.278548][T11556] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 539.282422][T11556] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 539.293499][T11556] vivid-000: Enable Capture Cropping: true [ 539.295404][T11556] vivid-000: Enable Capture Composing: true [ 539.297284][T11556] vivid-000: Enable Capture Scaler: true [ 539.299161][T11556] vivid-000: Timestamp Source: End of Frame [ 539.301029][T11556] vivid-000: Colorspace: sRGB [ 539.302539][T11556] vivid-000: Transfer Function: Default [ 539.305739][T11556] vivid-000: Y'CbCr Encoding: Default [ 539.307514][T11556] vivid-000: HSV Encoding: Hue 0-179 [ 539.309181][T11556] vivid-000: Quantization: Default [ 539.310812][T11556] vivid-000: Apply Alpha To Red Only: false [ 539.312720][T11556] vivid-000: Standard Aspect Ratio: 4x3 [ 539.315107][T11556] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 539.317772][T11556] vivid-000: DV Timings: 640x480p59 inactive [ 539.319978][T11556] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 539.322983][T11556] vivid-000: Maximum EDID Blocks: 2 [ 539.324751][T11556] vivid-000: Limited RGB Range (16-235): false [ 539.326721][T11556] vivid-000: Rx RGB Quantization Range: Automatic [ 539.329232][T11556] vivid-000: Power Present: 0x00000001 [ 539.331203][T11556] tpg source WxH: 320x240 (Y'CbCr) [ 539.333003][T11556] tpg field: 1 [ 539.334411][T11556] tpg crop: (0,0)/320x240 [ 539.335928][T11556] tpg compose: (0,0)/320x240 [ 539.337556][T11556] tpg colorspace: 8 [ 539.338788][T11556] tpg transfer function: 0/0 [ 539.340426][T11556] tpg Y'CbCr encoding: 0/0 [ 539.342233][T11556] tpg quantization: 0/0 [ 539.343743][T11556] tpg RGB range: 0/2 [ 539.345130][T11556] vivid-000: ================== END STATUS ================== [ 539.688997][T11564] comedi comedi0: comedi_config --init_data is deprecated [ 540.348550][T11570] ipvlan0: entered promiscuous mode [ 540.358883][T11570] ipvlan0: entered allmulticast mode [ 540.370313][T11570] tipc: Resetting bearer [ 540.385256][T11570] tipc: Resetting bearer [ 540.395255][T11570] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 541.458920][T11597] netlink: 'syz.0.1495': attribute type 10 has an invalid length. [ 541.462860][T11597] veth0_vlan: left promiscuous mode [ 541.465438][T11597] veth0_vlan: entered promiscuous mode [ 541.468495][T11597] team0: Device veth0_vlan failed to register rx_handler [ 541.490015][T11593] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 541.493090][T11593] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 541.496714][T11593] vhci_hcd vhci_hcd.0: Device attached [ 541.526610][T11598] vhci_hcd: connection closed [ 541.533736][ T74] vhci_hcd vhci_hcd.3: stop threads [ 541.537276][ T74] vhci_hcd vhci_hcd.3: release socket [ 541.539600][ T74] vhci_hcd vhci_hcd.3: disconnect device [ 541.904640][T11609] netlink: 'syz.1.1499': attribute type 10 has an invalid length. [ 541.916229][T11609] netlink: 'syz.1.1499': attribute type 10 has an invalid length. [ 541.938741][T11609] .`: (slave syz_tun): Enslaving as an active interface with an up link [ 542.456255][T11614] comedi comedi0: comedi_config --init_data is deprecated [ 542.800559][T11617] trusted_key: syz.1.1501 sent an empty control message without MSG_MORE. [ 543.002512][T11624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1502'. [ 543.673486][ T5954] Bluetooth: hci4: command 0x1003 tx timeout [ 543.673501][ T65] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 544.058734][ T5625] kernel write not supported for file /input/event2 (pid: 5625 comm: kworker/0:3) [ 544.154483][T11641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1507'. [ 544.634022][ T5625] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 544.783625][ T5625] usb 7-1: Using ep0 maxpacket: 32 [ 544.787792][ T5625] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 544.791586][ T5625] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 544.796513][ T5625] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 544.801046][ T5625] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 544.805795][ T5625] usb 7-1: config 0 interface 0 has no altsetting 0 [ 544.809462][ T5625] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 544.812421][ T5625] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 544.815484][ T5625] usb 7-1: Product: syz [ 544.816929][ T5625] usb 7-1: Manufacturer: syz [ 544.818438][ T5625] usb 7-1: SerialNumber: syz [ 544.822105][ T5625] usb 7-1: config 0 descriptor?? [ 544.825672][ T5625] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 544.829956][ T5625] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 544.873468][T11658] netlink: 'syz.3.1514': attribute type 10 has an invalid length. [ 544.876203][T11658] veth0_vlan: left promiscuous mode [ 544.878504][T11658] veth0_vlan: entered promiscuous mode [ 544.881401][T11658] team0: Device veth0_vlan failed to register rx_handler [ 544.978014][ T8869] Bluetooth: hci4: Frame reassembly failed (-84) [ 545.162049][T11672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1519'. [ 545.283035][T11678] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1519'. [ 545.286658][T11678] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1519'. [ 545.287545][ T5745] usb 7-1: USB disconnect, device number 34 [ 545.293280][ T5745] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 545.371809][T11681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1521'. [ 545.896014][T11686] netlink: 'syz.2.1523': attribute type 10 has an invalid length. [ 545.899349][T11686] veth0_vlan: left promiscuous mode [ 545.901972][T11686] veth0_vlan: entered promiscuous mode [ 545.905278][T11686] team0: Device veth0_vlan failed to register rx_handler [ 546.306089][T11710] netlink: 'syz.0.1533': attribute type 10 has an invalid length. [ 546.309637][T11710] veth0_vlan: left promiscuous mode [ 546.312643][T11710] veth0_vlan: entered promiscuous mode [ 546.316823][T11710] team0: Device veth0_vlan failed to register rx_handler [ 546.347259][T11711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1532'. [ 547.033752][ T5954] Bluetooth: hci4: command 0x1003 tx timeout [ 547.033815][ T65] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 547.296059][T11730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1541'. [ 549.170351][T11762] 9p: Bad value for 'rfdno' [ 549.593447][ T65] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 549.593491][ T5954] Bluetooth: hci4: command 0x1003 tx timeout [ 549.897441][T11789] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1563'. [ 549.904826][T11791] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1564'. [ 550.123976][ T5954] Bluetooth: hci4: sending frame failed (-49) [ 550.127795][ T65] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 550.842346][T11823] netlink: 'syz.2.1575': attribute type 3 has an invalid length. [ 550.845955][T11823] netlink: 'syz.2.1575': attribute type 3 has an invalid length. [ 551.710766][T11834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1578'. [ 552.761018][T11844] 9p: Unknown access argument 18446744073709551615: -34 [ 553.040948][T11849] comedi comedi0: comedi_config --init_data is deprecated [ 553.049159][T11850] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 553.051393][T11850] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 553.054470][T11850] vhci_hcd vhci_hcd.0: Device attached [ 553.211623][T11850] 8021q: adding VLAN 0 to HW filter on device .` [ 553.241598][T11853] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1581'. [ 553.252201][T11850] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 553.333516][ T1911] usb 38-1: SetAddress Request (10) to port 0 [ 553.339603][ T1911] usb 38-1: new SuperSpeed USB device number 10 using vhci_hcd [ 553.632222][T11851] vhci_hcd: connection reset by peer [ 553.635189][ T8869] vhci_hcd vhci_hcd.0: stop threads [ 553.637579][ T8869] vhci_hcd vhci_hcd.0: release socket [ 553.640149][ T8869] vhci_hcd vhci_hcd.0: disconnect device [ 555.415885][ T5745] kernel read not supported for file /bluetooth/6lowpan_control (pid: 5745 comm: kworker/3:3) [ 555.420953][T11882] netlink: 'syz.0.1597': attribute type 1 has an invalid length. [ 555.443875][T11882] bond0: (slave vxcan1): The slave device specified does not support setting the MAC address [ 555.449876][T11882] bond0: (slave vxcan1): Error -95 calling set_mac_address [ 555.459139][T11888] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1590'. [ 556.896562][T11922] comedi comedi0: comedi_config --init_data is deprecated [ 557.513713][ T5954] Bluetooth: hci4: command 0x1003 tx timeout [ 557.533702][ T65] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 557.669242][T11928] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.785949][T11928] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.906105][T11928] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.997115][T11928] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.202253][ T74] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.276368][ T74] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.297330][ T74] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.325745][ T1146] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.393553][ T1911] usb 38-1: device descriptor read/8, error -110 [ 558.451637][T11946] FAULT_INJECTION: forcing a failure. [ 558.451637][T11946] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 558.457751][T11946] CPU: 2 UID: 0 PID: 11946 Comm: syz.0.1605 Tainted: G L syzkaller #0 PREEMPT(full) [ 558.457770][T11946] Tainted: [L]=SOFTLOCKUP [ 558.457774][T11946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 558.457783][T11946] Call Trace: [ 558.457787][T11946] [ 558.457791][T11946] dump_stack_lvl+0x100/0x190 [ 558.457810][T11946] should_fail_ex.cold+0x5/0xa [ 558.457826][T11946] ? prepare_alloc_pages+0x16d/0x5f0 [ 558.457844][T11946] should_fail_alloc_page+0xeb/0x140 [ 558.457861][T11946] prepare_alloc_pages+0x1f0/0x5f0 [ 558.457879][T11946] __alloc_frozen_pages_noprof+0x193/0x2410 [ 558.457896][T11946] ? find_held_lock+0x2b/0x80 [ 558.457907][T11946] ? is_bpf_text_address+0x8a/0x1a0 [ 558.457924][T11946] ? is_bpf_text_address+0x8a/0x1a0 [ 558.457941][T11946] ? bpf_ksym_find+0x124/0x1c0 [ 558.457954][T11946] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 558.457968][T11946] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 558.457981][T11946] ? is_bpf_text_address+0x94/0x1a0 [ 558.457998][T11946] ? __kernel_text_address+0xd/0x30 [ 558.458015][T11946] ? unwind_get_return_address+0x59/0xa0 [ 558.458035][T11946] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 558.458047][T11946] ? policy_nodemask+0xed/0x4f0 [ 558.458064][T11946] alloc_pages_mpol+0x1fb/0x550 [ 558.458080][T11946] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 558.458094][T11946] ? kasan_save_stack+0x30/0x50 [ 558.458107][T11946] ? __kasan_kmalloc+0xaa/0xb0 [ 558.458119][T11946] ? __get_vm_area_node+0x101/0x330 [ 558.458134][T11946] ? __vmalloc_node_range_noprof+0x213/0x1530 [ 558.458144][T11946] ? __vmalloc_node_noprof+0xad/0xf0 [ 558.458153][T11946] ? bpf_check+0x1c5/0xcc60 [ 558.458172][T11946] alloc_pages_noprof+0x131/0x390 [ 558.458188][T11946] get_free_pages_noprof+0x10/0xb0 [ 558.458203][T11946] __kasan_populate_vmalloc+0xa0/0x210 [ 558.458225][T11946] alloc_vmap_area+0x935/0x2a00 [ 558.458254][T11946] ? __pfx_alloc_vmap_area+0x10/0x10 [ 558.458284][T11946] __get_vm_area_node+0x1ca/0x330 [ 558.458314][T11946] __vmalloc_node_range_noprof+0x213/0x1530 [ 558.458330][T11946] ? bpf_check+0x1c5/0xcc60 [ 558.458350][T11946] ? bpf_check+0x1c5/0xcc60 [ 558.458367][T11946] ? rcu_read_unlock+0x17/0x60 [ 558.458386][T11946] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 558.458398][T11946] ? rcu_is_watching+0x12/0xc0 [ 558.458410][T11946] ? rcu_is_watching+0x12/0xc0 [ 558.458420][T11946] ? trace_kmalloc+0x83/0xb0 [ 558.458434][T11946] ? __kvmalloc_node_noprof+0x620/0xac0 [ 558.458448][T11946] ? bpf_check+0x1c5/0xcc60 [ 558.458464][T11946] __vmalloc_node_noprof+0xad/0xf0 [ 558.458474][T11946] ? bpf_check+0x1c5/0xcc60 [ 558.458492][T11946] bpf_check+0x1c5/0xcc60 [ 558.458508][T11946] ? __lock_acquire+0x4a5/0x2630 [ 558.458522][T11946] ? css_rstat_updated+0x1ce/0x5a0 [ 558.458545][T11946] ? __lock_acquire+0x4a5/0x2630 [ 558.458561][T11946] ? __pfx_bpf_check+0x10/0x10 [ 558.458581][T11946] ? find_held_lock+0x2b/0x80 [ 558.458591][T11946] ? bpf_prog_load+0x1b48/0x2bd0 [ 558.458603][T11946] ? bpf_prog_load+0x1b48/0x2bd0 [ 558.458617][T11946] ? rcu_is_watching+0x12/0xc0 [ 558.458634][T11946] ? __asan_memset+0x23/0x50 [ 558.458650][T11946] ? lsm_blob_alloc+0x2b/0x90 [ 558.458673][T11946] ? bpf_prog_load+0x1c4b/0x2bd0 [ 558.458691][T11946] bpf_prog_load+0x1c4b/0x2bd0 [ 558.458711][T11946] ? _parse_integer_limit+0x17f/0x1d0 [ 558.458733][T11946] ? __pfx_bpf_prog_load+0x10/0x10 [ 558.458750][T11946] ? __lock_acquire+0x4a5/0x2630 [ 558.458795][T11946] __sys_bpf+0x118f/0x5050 [ 558.458819][T11946] ? __pfx___sys_bpf+0x10/0x10 [ 558.458839][T11946] ? proc_fail_nth_write+0x9f/0x220 [ 558.458861][T11946] ? find_held_lock+0x2b/0x80 [ 558.458890][T11946] ? find_held_lock+0x2b/0x80 [ 558.458908][T11946] ? ksys_write+0x190/0x250 [ 558.458931][T11946] ? __mutex_unlock_slowpath+0x15c/0x790 [ 558.458969][T11946] ? fput+0x79/0x100 [ 558.458992][T11946] ? ksys_write+0x1ac/0x250 [ 558.459016][T11946] __ia32_sys_bpf+0x79/0xf0 [ 558.459034][T11946] ? lockdep_hardirqs_on+0x78/0x100 [ 558.459055][T11946] __do_fast_syscall_32+0xde/0x660 [ 558.459081][T11946] do_fast_syscall_32+0x32/0x70 [ 558.459104][T11946] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 558.459123][T11946] RIP: 0023:0xf7f86579 [ 558.459139][T11946] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 558.459155][T11946] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 558.459173][T11946] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000840 [ 558.459185][T11946] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 558.459194][T11946] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 558.459203][T11946] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 558.459210][T11946] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 558.459235][T11946] [ 558.459448][T11946] syz.0.1605: vmalloc error: size 2688, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 558.644726][T11946] CPU: 2 UID: 0 PID: 11946 Comm: syz.0.1605 Tainted: G L syzkaller #0 PREEMPT(full) [ 558.644744][T11946] Tainted: [L]=SOFTLOCKUP [ 558.644748][T11946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 558.644755][T11946] Call Trace: [ 558.644759][T11946] [ 558.644763][T11946] dump_stack_lvl+0x100/0x190 [ 558.644782][T11946] warn_alloc.cold+0x95/0x1c1 [ 558.644800][T11946] ? __pfx_warn_alloc+0x10/0x10 [ 558.644818][T11946] ? __get_vm_area_node+0x2c5/0x330 [ 558.644840][T11946] ? __get_vm_area_node+0x208/0x330 [ 558.644859][T11946] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 558.644874][T11946] ? bpf_check+0x1c5/0xcc60 [ 558.644892][T11946] ? rcu_read_unlock+0x17/0x60 [ 558.644916][T11946] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 558.644931][T11946] ? rcu_is_watching+0x12/0xc0 [ 558.644947][T11946] ? rcu_is_watching+0x12/0xc0 [ 558.644961][T11946] ? trace_kmalloc+0x83/0xb0 [ 558.644981][T11946] ? __kvmalloc_node_noprof+0x620/0xac0 [ 558.644999][T11946] ? bpf_check+0x1c5/0xcc60 [ 558.645015][T11946] __vmalloc_node_noprof+0xad/0xf0 [ 558.645025][T11946] ? bpf_check+0x1c5/0xcc60 [ 558.645042][T11946] bpf_check+0x1c5/0xcc60 [ 558.645060][T11946] ? __lock_acquire+0x4a5/0x2630 [ 558.645074][T11946] ? css_rstat_updated+0x1ce/0x5a0 [ 558.645091][T11946] ? __lock_acquire+0x4a5/0x2630 [ 558.645107][T11946] ? __pfx_bpf_check+0x10/0x10 [ 558.645126][T11946] ? find_held_lock+0x2b/0x80 [ 558.645136][T11946] ? bpf_prog_load+0x1b48/0x2bd0 [ 558.645149][T11946] ? bpf_prog_load+0x1b48/0x2bd0 [ 558.645161][T11946] ? rcu_is_watching+0x12/0xc0 [ 558.645171][T11946] ? __asan_memset+0x23/0x50 [ 558.645183][T11946] ? lsm_blob_alloc+0x2b/0x90 [ 558.645198][T11946] ? bpf_prog_load+0x1c4b/0x2bd0 [ 558.645210][T11946] bpf_prog_load+0x1c4b/0x2bd0 [ 558.645221][T11946] ? _parse_integer_limit+0x17f/0x1d0 [ 558.645238][T11946] ? __pfx_bpf_prog_load+0x10/0x10 [ 558.645250][T11946] ? __lock_acquire+0x4a5/0x2630 [ 558.645280][T11946] __sys_bpf+0x118f/0x5050 [ 558.645295][T11946] ? __pfx___sys_bpf+0x10/0x10 [ 558.645308][T11946] ? proc_fail_nth_write+0x9f/0x220 [ 558.645322][T11946] ? find_held_lock+0x2b/0x80 [ 558.645336][T11946] ? find_held_lock+0x2b/0x80 [ 558.645347][T11946] ? ksys_write+0x190/0x250 [ 558.645363][T11946] ? __mutex_unlock_slowpath+0x15c/0x790 [ 558.645387][T11946] ? fput+0x79/0x100 [ 558.645402][T11946] ? ksys_write+0x1ac/0x250 [ 558.645417][T11946] __ia32_sys_bpf+0x79/0xf0 [ 558.645430][T11946] ? lockdep_hardirqs_on+0x78/0x100 [ 558.645444][T11946] __do_fast_syscall_32+0xde/0x660 [ 558.645460][T11946] do_fast_syscall_32+0x32/0x70 [ 558.645503][T11946] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 558.645521][T11946] RIP: 0023:0xf7f86579 [ 558.645531][T11946] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 558.645543][T11946] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 558.645555][T11946] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000840 [ 558.645562][T11946] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 558.645568][T11946] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 558.645575][T11946] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 558.645581][T11946] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 558.645595][T11946] [ 558.645600][T11946] Mem-Info: [ 558.755695][T11946] active_anon:7017 inactive_anon:3 isolated_anon:0 [ 558.755695][T11946] active_file:10292 inactive_file:34677 isolated_file:0 [ 558.755695][T11946] unevictable:1768 dirty:415 writeback:0 [ 558.755695][T11946] slab_reclaimable:6055 slab_unreclaimable:52352 [ 558.755695][T11946] mapped:26917 shmem:4323 pagetables:1163 [ 558.755695][T11946] sec_pagetables:317 bounce:0 [ 558.755695][T11946] kernel_misc_reclaimable:0 [ 558.755695][T11946] free:55455 free_pcp:12049 free_cma:0 [ 558.770268][T11946] Node 0 active_anon:36kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:16kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9556kB pagetables:2080kB sec_pagetables:1148kB all_unreclaimable? yes Balloon:0kB [ 558.779854][T11946] Node 1 active_anon:30832kB inactive_anon:12kB active_file:41028kB inactive_file:138708kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:110552kB dirty:1660kB writeback:0kB shmem:16656kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3320kB pagetables:2572kB sec_pagetables:120kB all_unreclaimable? no Balloon:0kB [ 558.789837][T11946] Node 0 DMA free:2096kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:480kB local_pcp:64kB free_cma:0kB [ 558.793063][ T1911] usb usb38-port1: attempt power cycle [ 558.800407][T11946] lowmem_reserve[]: 0 288 288 288 288 [ 558.800440][T11946] Node 0 DMA32 free:16656kB boost:0kB min:13220kB low:16524kB high:19828kB reserved_highatomic:2048KB free_highatomic:180KB active_anon:36kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:3536kB writepending:0kB zspages:0kB present:1032196kB managed:295104kB mlocked:0kB bounce:0kB free_pcp:10556kB local_pcp:1016kB free_cma:0kB [ 558.800497][T11946] lowmem_reserve[]: 0 0 0 0 0 [ 558.800528][T11946] Node 1 DMA32 free:195268kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34732kB inactive_anon:12kB active_file:41028kB inactive_file:138708kB unevictable:3536kB writepending:1660kB zspages:2944kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:38420kB local_pcp:13080kB free_cma:0kB [ 558.827509][T11946] lowmem_reserve[]: 0 0 0 0 0 [ 558.829242][T11946] Node 0 DMA: 8*4kB (UM) 4*8kB (M) 9*16kB (UM) 3*32kB (UM) 2*64kB (UM) 3*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2096kB [ 558.834288][T11946] Node 0 DMA32: 458*4kB (UMEH) 213*8kB (UMEH) 104*16kB (UMEH) 96*32kB (UMEH) 29*64kB (UME) 7*128kB (UE) 6*256kB (UM) 2*512kB (U) 3*1024kB (UM) 0*2048kB 0*4096kB = 16656kB [ 558.839910][T11946] Node 1 DMA32: 1858*4kB (UME) 1060*8kB (UM) 985*16kB (UE) 243*32kB (UME) 104*64kB (UME) 44*128kB (UME) 45*256kB (UME) 24*512kB (UME) 21*1024kB (UME) 19*2048kB (UM) 12*4096kB (UM) = 185112kB [ 558.846252][T11946] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 558.849291][T11946] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 558.852278][T11946] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 558.863455][T11946] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 558.866532][T11946] 53674 total pagecache pages [ 558.868274][T11946] 1335 pages in swap cache [ 558.869845][T11946] Free swap = 113736kB [ 558.871379][T11946] Total swap = 124996kB [ 558.872734][T11946] 524155 pages RAM [ 558.897325][T11946] 0 pages HighMem/MovableOnly [ 558.899840][T11946] 209486 pages reserved [ 558.902036][T11946] 0 pages cma reserved [ 558.972404][T11955] comedi comedi0: comedi_config --init_data is deprecated [ 559.638755][ T1911] usb usb38-port1: unable to enumerate USB device [ 559.727644][T11964] netlink: 'syz.3.1610': attribute type 12 has an invalid length. [ 559.934215][T11968] netlink: 'syz.1.1611': attribute type 2 has an invalid length. [ 559.949994][T11968] ‚#{6c: entered promiscuous mode [ 559.962028][T11968] netlink: 'syz.1.1611': attribute type 2 has an invalid length. [ 559.964807][T11968] ‚#{6c: left promiscuous mode [ 561.067068][T11981] kAFS: unable to lookup cell '(' [ 561.203513][ T65] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 561.203713][ T5954] Bluetooth: hci4: command 0x1003 tx timeout [ 561.409107][ T40] audit: type=1326 audit(1770049544.723:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12002 comm="syz.2.1618" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 561.418911][ T40] audit: type=1326 audit(1770049544.723:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12002 comm="syz.2.1618" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 561.433520][ T40] audit: type=1326 audit(1770049544.733:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12002 comm="syz.2.1618" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 561.443107][ T40] audit: type=1326 audit(1770049544.733:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12002 comm="syz.2.1618" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 561.450855][ T40] audit: type=1326 audit(1770049544.733:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12002 comm="syz.2.1618" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 561.457929][ T40] audit: type=1326 audit(1770049544.733:1858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12002 comm="syz.2.1618" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 561.465152][ T40] audit: type=1326 audit(1770049544.733:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12002 comm="syz.2.1618" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 561.472214][ T40] audit: type=1326 audit(1770049544.733:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12002 comm="syz.2.1618" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71b572b code=0x7ffc0000 [ 561.479817][ T40] audit: type=1326 audit(1770049544.733:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12002 comm="syz.2.1618" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71b572b code=0x7ffc0000 [ 561.487491][T12003] FAULT_INJECTION: forcing a failure. [ 561.487491][T12003] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 561.487593][T12003] CPU: 1 UID: 0 PID: 12003 Comm: syz.2.1618 Tainted: G L syzkaller #0 PREEMPT(full) [ 561.487609][T12003] Tainted: [L]=SOFTLOCKUP [ 561.487613][T12003] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 561.487619][T12003] Call Trace: [ 561.487623][T12003] [ 561.487627][T12003] dump_stack_lvl+0x100/0x190 [ 561.487644][T12003] should_fail_ex.cold+0x5/0xa [ 561.487660][T12003] ? prepare_alloc_pages+0x16d/0x5f0 [ 561.487679][T12003] should_fail_alloc_page+0xeb/0x140 [ 561.487695][T12003] prepare_alloc_pages+0x1f0/0x5f0 [ 561.487711][T12003] ? rcu_is_watching+0x12/0xc0 [ 561.487725][T12003] __alloc_frozen_pages_noprof+0x193/0x2410 [ 561.487740][T12003] ? find_held_lock+0x2b/0x80 [ 561.487751][T12003] ? free_unref_folios+0xd16/0x1760 [ 561.487762][T12003] ? free_unref_folios+0xd16/0x1760 [ 561.487778][T12003] ? __bfs+0x150/0x2a0 [ 561.487793][T12003] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 561.487807][T12003] ? __bfs+0x150/0x2a0 [ 561.487822][T12003] ? lock_acquire+0x17c/0x330 [ 561.487837][T12003] ? find_held_lock+0x2b/0x80 [ 561.487847][T12003] ? page_table_check_set+0x49a/0xa10 [ 561.487860][T12003] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 561.487873][T12003] ? policy_nodemask+0xed/0x4f0 [ 561.487889][T12003] alloc_pages_mpol+0x1fb/0x550 [ 561.487905][T12003] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 561.487920][T12003] ? __page_table_check_ptes_set+0x1b5/0x4e0 [ 561.487937][T12003] folio_alloc_mpol_noprof+0x36/0x340 [ 561.487956][T12003] vma_alloc_folio_noprof+0xed/0x1d0 [ 561.487973][T12003] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 561.487995][T12003] do_anonymous_page+0xb10/0x1f40 [ 561.488012][T12003] __handle_mm_fault+0x1d3a/0x2b50 [ 561.488028][T12003] ? __pfx___handle_mm_fault+0x10/0x10 [ 561.488041][T12003] ? __pte_offset_map_lock+0x174/0x320 [ 561.488056][T12003] ? find_held_lock+0x2b/0x80 [ 561.488072][T12003] ? follow_page_pte+0x5b4/0x1410 [ 561.488091][T12003] handle_mm_fault+0x36d/0xa20 [ 561.488106][T12003] __get_user_pages+0xf9c/0x34d0 [ 561.488126][T12003] ? down_read_killable+0x30e/0x4c0 [ 561.488142][T12003] ? __pfx___get_user_pages+0x10/0x10 [ 561.488159][T12003] ? __pfx_gup_fast_fallback+0x10/0x10 [ 561.488178][T12003] get_user_pages_unlocked+0x1cb/0x7d0 [ 561.488197][T12003] ? __pfx_get_user_pages_unlocked+0x10/0x10 [ 561.488214][T12003] ? get_user_pages_fast_only+0xae/0xf0 [ 561.488231][T12003] ? __pfx_get_user_pages_fast_only+0x10/0x10 [ 561.488248][T12003] ? __pfx___might_resched+0x10/0x10 [ 561.488268][T12003] hva_to_pfn+0x871/0xe60 [ 561.488282][T12003] ? __lock_acquire+0x4a5/0x2630 [ 561.488296][T12003] ? __pfx_hva_to_pfn+0x10/0x10 [ 561.488309][T12003] ? __lock_acquire+0x4a5/0x2630 [ 561.488325][T12003] ? kvm_arch_vcpu_load+0x516/0xbd0 [ 561.488339][T12003] ? lock_acquire+0x17c/0x330 [ 561.488352][T12003] ? find_held_lock+0x2b/0x80 [ 561.488367][T12003] kvm_follow_pfn+0x291/0x430 [ 561.488381][T12003] __kvm_faultin_pfn+0x11c/0x1a0 [ 561.488394][T12003] ? __pfx___kvm_faultin_pfn+0x10/0x10 [ 561.488406][T12003] ? __pfx_xa_load+0x10/0x10 [ 561.488427][T12003] kvm_mmu_faultin_pfn+0xa4e/0x2020 [ 561.488447][T12003] ? __pfx_kvm_mmu_faultin_pfn+0x10/0x10 [ 561.488463][T12003] ? __kvm_mmu_topup_memory_cache+0x332/0x5f0 [ 561.488474][T12003] ? vmx_vcpu_load_vmcs+0x222/0x770 [ 561.488495][T12003] kvm_tdp_page_fault+0x182/0x3d0 [ 561.488507][T12003] kvm_mmu_do_page_fault+0x5a4/0x6c0 [ 561.488519][T12003] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 561.488530][T12003] ? lock_acquire+0x17c/0x330 [ 561.488547][T12003] ? kvm_sched_in+0x9a/0xf0 [ 561.488564][T12003] kvm_mmu_page_fault+0x1dd/0x19c0 [ 561.488577][T12003] ? __schedule+0xff6/0x5e10 [ 561.488588][T12003] ? __pfx___kvm_get_msr+0x10/0x10 [ 561.488603][T12003] ? kvm_msr_allowed+0x2d0/0x450 [ 561.488619][T12003] ? __pfx_kvm_mmu_page_fault+0x10/0x10 [ 561.488632][T12003] ? __lock_acquire+0x4a5/0x2630 [ 561.488648][T12003] ? __pfx___schedule+0x10/0x10 [ 561.488663][T12003] handle_ept_violation+0x323/0x760 [ 561.488678][T12003] ? __pfx_handle_ept_violation+0x10/0x10 [ 561.488692][T12003] vmx_handle_exit+0x720/0x1de0 [ 561.488708][T12003] vcpu_run+0x34c8/0x5ca0 [ 561.488724][T12003] ? __lock_acquire+0x4a5/0x2630 [ 561.488740][T12003] ? __pfx_vcpu_run+0x10/0x10 [ 561.488759][T12003] ? rcu_is_watching+0x12/0xc0 [ 561.488775][T12003] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 561.488789][T12003] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 561.488808][T12003] kvm_vcpu_ioctl+0x730/0x16d0 [ 561.488820][T12003] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 561.488830][T12003] ? tomoyo_path_number_perm+0x188/0x580 [ 561.488848][T12003] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 561.488863][T12003] ? lockdep_hardirqs_on+0x78/0x100 [ 561.488881][T12003] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 561.488893][T12003] ? do_vfs_ioctl+0x226/0x13e0 [ 561.488911][T12003] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 561.488935][T12003] kvm_vcpu_compat_ioctl+0x20f/0x3c0 [ 561.488946][T12003] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 561.488957][T12003] ? __fget_files+0x21f/0x3d0 [ 561.488972][T12003] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 561.488983][T12003] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 561.489003][T12003] __do_fast_syscall_32+0xde/0x660 [ 561.489019][T12003] do_fast_syscall_32+0x32/0x70 [ 561.489033][T12003] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 561.489046][T12003] RIP: 0023:0xf7fb2579 [ 561.489055][T12003] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 561.489066][T12003] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 561.489077][T12003] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 000000000000ae80 [ 561.489083][T12003] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 561.489089][T12003] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 561.489095][T12003] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 561.489101][T12003] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 561.489115][T12003] [ 561.617228][T12006] kAFS: unable to lookup cell '(' [ 561.618964][ T40] audit: type=1326 audit(1770049544.733:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12002 comm="syz.2.1618" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 561.865403][T12010] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 561.868638][T12010] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 561.879038][T12010] vhci_hcd vhci_hcd.0: Device attached [ 562.153570][ T62] usb 38-1: SetAddress Request (14) to port 0 [ 562.155793][ T62] usb 38-1: new SuperSpeed USB device number 14 using vhci_hcd [ 562.515896][T12016] vhci_hcd: connection reset by peer [ 562.519287][ T13] vhci_hcd vhci_hcd.0: stop threads [ 562.521655][ T13] vhci_hcd vhci_hcd.0: release socket [ 562.523514][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 562.702174][T12028] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1624'. [ 562.705684][T12028] nbd: must specify a device to reconfigure [ 563.137928][T12046] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 563.140541][T12046] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 563.153513][T12046] vhci_hcd vhci_hcd.0: Device attached [ 563.190915][T12046] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 563.247836][T12046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1626'. [ 563.360674][T12058] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.423572][T10252] usb 42-1: SetAddress Request (10) to port 0 [ 563.426297][T10252] usb 42-1: new SuperSpeed USB device number 10 using vhci_hcd [ 563.447449][T12058] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.557004][T12058] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.640144][T12058] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.744397][ T326] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.756034][ T326] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.767213][ T326] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.774619][T12047] vhci_hcd: connection reset by peer [ 563.777272][ T326] vhci_hcd vhci_hcd.2: stop threads [ 563.779553][ T326] vhci_hcd vhci_hcd.2: release socket [ 563.785321][ T326] vhci_hcd vhci_hcd.2: disconnect device [ 563.787865][ T74] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.966448][T12065] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1634'. [ 563.970434][T12065] nbd: must specify a device to reconfigure [ 564.501798][T12085] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 564.508222][T12085] overlayfs: missing 'lowerdir' [ 564.618416][T12092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 564.655005][T12092] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1640'. [ 564.873926][ T5954] Bluetooth: hci4: command 0x1003 tx timeout [ 564.893479][ T65] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 566.126410][T12126] vlan2: entered promiscuous mode [ 566.128134][T12126] bridge0: entered promiscuous mode [ 566.193872][T12130] wireguard0: entered promiscuous mode [ 566.195656][T12130] wireguard0: entered allmulticast mode [ 566.311255][T12136] netlink: 'syz.2.1653': attribute type 25 has an invalid length. [ 566.314506][T12136] netlink: 'syz.2.1653': attribute type 1 has an invalid length. [ 566.317317][T12136] bridge0: port 1(bridge_slave_0) entered learning state [ 566.356122][T12138] netlink: 'syz.2.1654': attribute type 11 has an invalid length. [ 566.492534][T12143] x_tables: duplicate underflow at hook 3 [ 566.609589][T12156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1661'. [ 566.613519][T12156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1661'. [ 566.617351][T12156] netlink: 'syz.1.1661': attribute type 15 has an invalid length. [ 567.068878][T12168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1664'. [ 567.193761][ T62] usb 38-1: device descriptor read/8, error -110 [ 567.625754][ T62] usb usb38-port1: attempt power cycle [ 567.798804][T12196] netlink: 'syz.1.1672': attribute type 11 has an invalid length. [ 567.813523][ T52] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 567.963551][ T52] usb 7-1: Using ep0 maxpacket: 16 [ 567.967431][ T52] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 12408, setting to 64 [ 567.974251][ T52] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 567.978177][ T52] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.981514][ T52] usb 7-1: Product: syz [ 567.983289][ T52] usb 7-1: Manufacturer: syz [ 567.985513][ T52] usb 7-1: SerialNumber: syz [ 567.990990][ T52] usb 7-1: config 0 descriptor?? [ 567.997160][ T52] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 568.001018][ T52] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 568.204482][ T62] usb usb38-port1: unable to enumerate USB device [ 568.336507][T12198] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1673'. [ 568.341499][T12198] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1673'. [ 568.473506][T10252] usb 42-1: device descriptor read/8, error -110 [ 568.600277][ T52] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 568.865441][T10252] usb usb42-port1: attempt power cycle [ 568.922672][T12208] openvswitch: netlink: IP tunnel dst address not specified [ 569.012252][ T52] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 569.017408][ T52] em28xx 7-1:0.0: board has no eeprom [ 569.083519][T12184] em28xx 7-1:0.0: write to i2c device at 0xfe00 failed with unknown error (status=1) [ 569.295980][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 569.295999][ T40] audit: type=1800 audit(1770049552.613:1868): pid=12206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1676" name="/" dev="fuse" ino=4 res=0 errno=0 [ 569.426135][T10252] usb usb42-port1: unable to enumerate USB device [ 569.523479][ T52] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 569.526183][ T52] em28xx 7-1:0.0: dvb set to bulk mode. [ 569.528317][ T5384] em28xx 7-1:0.0: Binding DVB extension [ 569.538456][ T52] usb 7-1: USB disconnect, device number 35 [ 569.540882][ T52] em28xx 7-1:0.0: Disconnecting em28xx [ 569.543555][T12226] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1681'. [ 569.546756][T12226] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1681'. [ 569.575574][ T5384] em28xx 7-1:0.0: Registering input extension [ 569.579290][ T52] em28xx 7-1:0.0: Closing input extension [ 569.579712][T12226] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1681'. [ 569.584283][T12226] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1681'. [ 569.597461][ T52] em28xx 7-1:0.0: Freeing device [ 569.768172][T12226] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1681'. [ 569.771023][T12226] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1681'. [ 570.189903][T12230] Process accounting resumed [ 570.306105][T12238] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1685'. [ 570.347549][T12240] netlink: 'syz.3.1686': attribute type 10 has an invalid length. [ 570.395887][T12240] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 570.405401][T12240] CIFS mount error: No usable UNC path provided in device string! [ 570.405401][T12240] [ 570.408668][T12240] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 572.874222][ T5954] Bluetooth: hci4: command 0x1003 tx timeout [ 572.878085][ T65] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 572.976018][T12272] comedi comedi0: comedi_config --init_data is deprecated [ 575.600727][T12317] 9p: Invalid uid '0x00000000ffffffff' [ 576.704232][T12331] comedi comedi0: comedi_config --init_data is deprecated [ 576.793683][ T5954] Bluetooth: hci4: command 0x1003 tx timeout [ 576.793732][ T65] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 577.754103][T12342] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 577.757015][T12342] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 577.770221][T12342] vhci_hcd vhci_hcd.0: Device attached [ 577.957626][T12346] xt_policy: output policy not valid in PREROUTING and INPUT [ 578.043484][ T1450] usb 44-1: SetAddress Request (14) to port 0 [ 578.045660][ T1450] usb 44-1: new SuperSpeed USB device number 14 using vhci_hcd [ 578.094041][T12353] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1719'. [ 578.120043][T12353] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1719'. [ 578.413079][T12343] vhci_hcd: connection reset by peer [ 578.415879][ T74] vhci_hcd vhci_hcd.3: stop threads [ 578.418266][ T74] vhci_hcd vhci_hcd.3: release socket [ 578.420682][ T74] vhci_hcd vhci_hcd.3: disconnect device [ 578.947493][T12365] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1722'. [ 578.950504][T12365] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1722'. [ 578.972050][T12365] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1722'. [ 578.975303][T12365] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1722'. [ 579.313272][T12365] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1722'. [ 579.316521][T12365] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1722'. [ 579.566059][T12370] Process accounting resumed [ 579.745875][ T1911] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 579.910520][ T1911] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 579.914932][ T1911] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 579.919039][ T1911] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 579.922157][ T1911] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.928202][T12382] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 579.934314][ T1911] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 580.198267][T12382] ubi: mtd0 is already attached to ubi0 [ 580.202806][ T52] usb 8-1: USB disconnect, device number 26 [ 580.563711][T12407] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1737'. [ 580.949031][T12412] binder: 12411:12412 ioctl c0306201 0 returned -14 [ 581.024910][ T40] audit: type=1326 audit(1770049564.343:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12408 comm="syz.1.1738" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 581.032291][ T40] audit: type=1326 audit(1770049564.343:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12408 comm="syz.1.1738" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 581.041402][ T40] audit: type=1326 audit(1770049564.343:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12408 comm="syz.1.1738" exe="/syz-executor" sig=0 arch=40000003 syscall=83 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 581.050667][ T40] audit: type=1326 audit(1770049564.343:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12408 comm="syz.1.1738" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 581.059005][ T40] audit: type=1326 audit(1770049564.343:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12408 comm="syz.1.1738" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 581.068268][ T40] audit: type=1326 audit(1770049564.343:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12408 comm="syz.1.1738" exe="/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 581.077003][ T40] audit: type=1326 audit(1770049564.343:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12408 comm="syz.1.1738" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 581.085313][ T40] audit: type=1326 audit(1770049564.343:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12408 comm="syz.1.1738" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 581.094171][ T40] audit: type=1326 audit(1770049564.343:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12408 comm="syz.1.1738" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 581.102301][ T40] audit: type=1326 audit(1770049564.343:1878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12408 comm="syz.1.1738" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f85579 code=0x7ffc0000 [ 581.234934][T12419] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1741'. [ 581.283577][ T5954] Bluetooth: hci4: command 0x1003 tx timeout [ 581.286062][ T65] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 581.633523][ T53] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 581.864341][T12428] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 581.867148][T12428] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 581.992587][T12428] vhci_hcd vhci_hcd.0: Device attached [ 582.003575][ T53] usb 5-1: Using ep0 maxpacket: 8 [ 582.008990][ T53] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 582.011860][ T53] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 582.061815][ T53] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 582.065314][ T53] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 582.074049][ T53] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 582.079011][ T53] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 582.081942][ T53] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.253503][ T52] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 582.324008][ T53] usb 5-1: GET_CAPABILITIES returned 0 [ 582.375612][ T53] usbtmc 5-1:16.0: can't read capabilities [ 582.393682][ T5384] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 582.545030][T12431] vhci_hcd: connection reset by peer [ 582.547762][ T13] vhci_hcd vhci_hcd.2: stop threads [ 582.550242][ T13] vhci_hcd vhci_hcd.2: release socket [ 582.552711][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 582.557439][ T5384] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 582.562167][ T5384] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 582.566456][ T5384] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 582.570486][ T5384] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.574166][T12442] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 582.584411][T12441] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 582.594000][ T5384] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 582.687226][T12442] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 582.687394][ T5384] usb 5-1: USB disconnect, device number 31 [ 582.848666][T12441] ubi: mtd0 is already attached to ubi0 [ 582.851374][ T5625] usb 8-1: USB disconnect, device number 27 [ 583.113971][ T1450] usb 44-1: device descriptor read/8, error -110 [ 583.167971][T12448] bond_slave_0: entered allmulticast mode [ 583.515032][ T1450] usb usb44-port1: attempt power cycle [ 583.637942][T12453] fuseblk: Unknown parameter 'r' [ 583.669636][T12464] fuse: Bad value for 'user_id' [ 583.671803][T12464] fuse: Bad value for 'user_id' [ 584.026209][T12470] comedi comedi0: comedi_config --init_data is deprecated [ 584.114054][ T1450] usb usb44-port1: unable to enumerate USB device [ 584.516279][T12474] comedi comedi0: comedi_config --init_data is deprecated [ 584.555805][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 584.558589][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 587.353561][ T52] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 588.234616][ T5954] Bluetooth: hci4: command 0x1003 tx timeout [ 588.255495][ T65] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 589.534209][T12526] netlink: 'syz.0.1774': attribute type 3 has an invalid length. [ 589.619827][T12527] 9pnet_virtio: no channels available for device syz [ 590.484254][ T40] kauditd_printk_skb: 65 callbacks suppressed [ 590.484288][ T40] audit: type=1326 audit(1770049573.783:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12530 comm="syz.2.1775" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 590.492770][ T40] audit: type=1326 audit(1770049573.783:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12530 comm="syz.2.1775" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 590.498183][T12536] FAULT_INJECTION: forcing a failure. [ 590.498183][T12536] name failslab, interval 1, probability 0, space 0, times 0 [ 590.503859][T12536] CPU: 3 UID: 0 PID: 12536 Comm: syz.0.1776 Tainted: G L syzkaller #0 PREEMPT(full) [ 590.503877][T12536] Tainted: [L]=SOFTLOCKUP [ 590.503881][T12536] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 590.503888][T12536] Call Trace: [ 590.503891][T12536] [ 590.503895][T12536] dump_stack_lvl+0x100/0x190 [ 590.503912][T12536] should_fail_ex.cold+0x5/0xa [ 590.503931][T12536] should_failslab+0xc2/0x120 [ 590.503947][T12536] __kmalloc_cache_noprof+0x80/0x810 [ 590.503958][T12536] ? find_held_lock+0x2b/0x80 [ 590.503969][T12536] ? alloc_pipe_info+0x10e/0x590 [ 590.503985][T12536] ? alloc_pipe_info+0x10e/0x590 [ 590.503997][T12536] alloc_pipe_info+0x10e/0x590 [ 590.504012][T12536] splice_direct_to_actor+0x78f/0xa30 [ 590.504026][T12536] ? __pfx_direct_splice_actor+0x10/0x10 [ 590.504051][T12536] ? __pfx_aa_file_perm+0x10/0x10 [ 590.504065][T12536] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 590.504077][T12536] ? find_held_lock+0x2b/0x80 [ 590.504091][T12536] do_splice_direct+0x174/0x240 [ 590.504104][T12536] ? __pfx_do_splice_direct+0x10/0x10 [ 590.504115][T12536] ? common_file_perm+0x1ab/0x4f0 [ 590.504131][T12536] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 590.504145][T12536] ? rw_verify_area+0xce/0x6d0 [ 590.504158][T12536] do_sendfile+0xadc/0xe20 [ 590.504174][T12536] ? __pfx_do_sendfile+0x10/0x10 [ 590.504188][T12536] ? __fget_files+0x21f/0x3d0 [ 590.504202][T12536] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 590.504218][T12536] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 590.504234][T12536] ? __pfx_ksys_write+0x10/0x10 [ 590.504249][T12536] __do_fast_syscall_32+0xde/0x660 [ 590.504265][T12536] do_fast_syscall_32+0x32/0x70 [ 590.504279][T12536] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 590.504293][T12536] RIP: 0023:0xf7f86579 [ 590.504302][T12536] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 590.504313][T12536] RSP: 002b:00000000f542550c EFLAGS: 00000292 ORIG_RAX: 00000000000000bb [ 590.504324][T12536] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000004 [ 590.504330][T12536] RDX: 0000000000000000 RSI: 0000000000040001 RDI: 0000000000000000 [ 590.504336][T12536] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 590.504342][T12536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 590.504348][T12536] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 590.504362][T12536] [ 590.504645][ T40] audit: type=1326 audit(1770049573.783:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12530 comm="syz.2.1775" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 590.618632][ T40] audit: type=1326 audit(1770049573.783:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12530 comm="syz.2.1775" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 590.655454][ T40] audit: type=1326 audit(1770049573.783:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12530 comm="syz.2.1775" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 590.662241][ T40] audit: type=1326 audit(1770049573.783:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12530 comm="syz.2.1775" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71b572b code=0x7ffc0000 [ 590.663853][T10812] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 590.668978][ T40] audit: type=1326 audit(1770049573.783:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12530 comm="syz.2.1775" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 590.678375][ T40] audit: type=1326 audit(1770049573.783:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12530 comm="syz.2.1775" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 590.685204][ T40] audit: type=1326 audit(1770049573.783:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12530 comm="syz.2.1775" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 590.691882][ T40] audit: type=1326 audit(1770049573.783:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12530 comm="syz.2.1775" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf71b572b code=0x7ffc0000 [ 590.798431][T12544] comedi comedi0: comedi_config --init_data is deprecated [ 590.897695][T12543] __nla_validate_parse: 1 callbacks suppressed [ 590.897713][T12543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1779'. [ 591.586973][T12562] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1784'. [ 591.591231][T12562] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1784'. [ 591.630731][T12562] syzkaller0: entered promiscuous mode [ 591.632614][T12562] syzkaller0: entered allmulticast mode [ 594.123238][T12597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1797'. [ 594.555797][T12606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1799'. [ 594.796578][T12611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 594.798893][T12611] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 594.808899][T12611] bond0: (slave gre0): Error -95 calling set_mac_address [ 594.953720][ T5954] Bluetooth: hci4: command 0x1003 tx timeout [ 594.953963][ T65] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 596.203444][ T5625] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 596.373456][ T5625] usb 7-1: Using ep0 maxpacket: 8 [ 596.378358][ T5625] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 596.381811][ T5625] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 596.386405][ T5625] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 596.390462][ T5625] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 596.395070][ T5625] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 596.400180][ T5625] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 596.404466][ T5625] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.447474][T12651] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1807'. [ 596.618050][ T5625] usb 7-1: GET_CAPABILITIES returned 0 [ 596.619839][ T5625] usbtmc 7-1:16.0: can't read capabilities [ 596.903564][T12646] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 597.019501][T12646] usbtmc 7-1:16.0: usb_control_msg returned -71 [ 597.019683][T10812] usb 7-1: USB disconnect, device number 36 [ 597.497948][T12667] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1809'. [ 598.078750][T12680] 9p: Bad value for 'wfdno' [ 598.079086][T12681] 9p: Bad value for 'wfdno' [ 598.525314][T12694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1818'. [ 598.717869][T12696] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.789947][ T5954] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 598.797401][ T5954] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 598.798350][T12696] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.801179][ T5954] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 598.811495][ T5954] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 598.816762][ T5954] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 598.825889][ T65] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 598.829363][ T65] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 598.833286][ T65] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 598.837719][ T65] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 598.841996][ T65] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 598.925066][T12696] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.016591][T12705] chnl_net:caif_netlink_parms(): no params data found [ 599.022335][T12696] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.075575][T12705] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.078518][T12705] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.081795][T12705] bridge_slave_0: entered allmulticast mode [ 599.086565][T12705] bridge_slave_0: entered promiscuous mode [ 599.091694][T12705] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.094386][T12705] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.096881][T12705] bridge_slave_1: entered allmulticast mode [ 599.100268][T12705] bridge_slave_1: entered promiscuous mode [ 599.125388][T12705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 599.132468][T12705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 599.164020][T12705] team0: Port device team_slave_0 added [ 599.168063][T12705] team0: Port device team_slave_1 added [ 599.197712][T12705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 599.200992][T12705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 599.210954][T12705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 599.215938][ T1146] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.228435][T12705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 599.230948][T12705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 599.240495][T12705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 599.245809][ T74] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.258279][ T8869] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.277303][ T1146] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.293038][T12705] hsr_slave_0: entered promiscuous mode [ 599.297230][T12705] hsr_slave_1: entered promiscuous mode [ 599.300084][T12705] debugfs: 'hsr0' already exists in 'hsr' [ 599.302375][T12705] Cannot create hsr debugfs directory [ 599.361770][ T5954] Bluetooth: hci1: sending frame failed (-49) [ 599.369164][ T65] Bluetooth: hci1: Opcode 0x1003 failed: -49 [ 599.431678][T12705] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 599.438265][T12705] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 599.447333][T12705] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 599.455887][T12705] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 599.490529][T12705] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.493580][T12705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 599.496659][T12705] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.499169][T12705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 599.511025][T12732] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 599.514461][T12732] IPv6: NLM_F_CREATE should be set when creating new route [ 599.517098][T12732] IPv6: NLM_F_CREATE should be set when creating new route [ 599.552488][T12705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 599.564399][ T8869] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.567748][ T8869] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.579091][T12705] 8021q: adding VLAN 0 to HW filter on device team0 [ 599.586481][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.589541][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 599.596639][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.598983][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 599.731800][T12705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 599.881379][T12705] veth0_vlan: entered promiscuous mode [ 599.887224][T12705] veth1_vlan: entered promiscuous mode [ 599.941178][T12705] veth0_macvtap: entered promiscuous mode [ 599.946487][T12705] veth1_macvtap: entered promiscuous mode [ 599.980776][T12705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 599.986143][T12705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 600.055036][T10812] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 600.101805][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.129513][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.132315][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 600.135047][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 600.137571][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 600.140048][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 600.143712][ T1146] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.176592][ T1146] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.205628][T10812] usb 7-1: config 0 has no interfaces? [ 600.207448][T10812] usb 7-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 600.210907][T10812] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.216022][T10812] usb 7-1: config 0 descriptor?? [ 600.555465][ T5625] usb 7-1: USB disconnect, device number 37 [ 600.655922][T12776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1831'. [ 600.812395][T12779] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1832'. [ 600.864885][ T5625] Process accounting resumed [ 600.873628][ T65] Bluetooth: hci4: command tx timeout [ 600.881031][T12779] Process accounting resumed [ 601.063503][T12784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1834'. [ 601.066776][T12784] netlink: 15 bytes leftover after parsing attributes in process `syz.1.1834'. [ 601.420606][T12802] bridge0: port 3(macvlan2) entered blocking state [ 601.422998][T12802] bridge0: port 3(macvlan2) entered disabled state [ 601.426335][T12802] macvlan2: entered allmulticast mode [ 601.428080][T12802] ip6gretap0: entered allmulticast mode [ 601.430702][T12802] macvlan2: entered promiscuous mode [ 601.433505][T12802] bridge0: port 3(macvlan2) entered blocking state [ 601.435897][T12802] bridge0: port 3(macvlan2) entered forwarding state [ 601.709582][T12823] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1843'. [ 602.954201][ T5954] Bluetooth: hci4: command tx timeout [ 603.193585][ T65] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 603.193790][ T5954] Bluetooth: hci1: command 0x1003 tx timeout [ 603.823937][T12836] netlink: 'syz.0.1844': attribute type 10 has an invalid length. [ 603.826501][T12836] netlink: 'syz.0.1844': attribute type 27 has an invalid length. [ 603.829316][T12836] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 605.044660][ T65] Bluetooth: hci4: command tx timeout [ 605.636964][T12882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1855'. [ 605.959031][ T52] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 606.115353][ T52] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 606.119341][ T52] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 606.125147][ T52] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 606.129522][ T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.367467][ T52] usb 5-1: usb_control_msg returned -32 [ 606.373481][ T52] usbtmc 5-1:16.0: can't read capabilities [ 607.074757][ T7871] usb 5-1: USB disconnect, device number 32 [ 607.113584][ T5954] Bluetooth: hci4: command tx timeout [ 607.607806][T12915] FAULT_INJECTION: forcing a failure. [ 607.607806][T12915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 607.612211][T12915] CPU: 1 UID: 0 PID: 12915 Comm: syz.2.1865 Tainted: G L syzkaller #0 PREEMPT(full) [ 607.612237][T12915] Tainted: [L]=SOFTLOCKUP [ 607.612244][T12915] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 607.612253][T12915] Call Trace: [ 607.612259][T12915] [ 607.612267][T12915] dump_stack_lvl+0x100/0x190 [ 607.612294][T12915] should_fail_ex.cold+0x5/0xa [ 607.612329][T12915] _copy_from_user+0x2e/0xd0 [ 607.612355][T12915] __sys_bpf+0x243/0x5050 [ 607.612380][T12915] ? __pfx___sys_bpf+0x10/0x10 [ 607.612400][T12915] ? proc_fail_nth_write+0x9f/0x220 [ 607.612420][T12915] ? find_held_lock+0x2b/0x80 [ 607.612444][T12915] ? find_held_lock+0x2b/0x80 [ 607.612461][T12915] ? ksys_write+0x190/0x250 [ 607.612485][T12915] ? __mutex_unlock_slowpath+0x15c/0x790 [ 607.612522][T12915] ? fput+0x79/0x100 [ 607.612544][T12915] ? ksys_write+0x1ac/0x250 [ 607.612567][T12915] __ia32_sys_bpf+0x79/0xf0 [ 607.612587][T12915] ? lockdep_hardirqs_on+0x78/0x100 [ 607.612606][T12915] __do_fast_syscall_32+0xde/0x660 [ 607.612631][T12915] do_fast_syscall_32+0x32/0x70 [ 607.612652][T12915] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 607.612673][T12915] RIP: 0023:0xf7fb2579 [ 607.612687][T12915] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 607.612704][T12915] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 607.612721][T12915] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000500 [ 607.612731][T12915] RDX: 0000000000000025 RSI: 0000000000000000 RDI: 0000000000000000 [ 607.612741][T12915] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 607.612750][T12915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 607.612760][T12915] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 607.612783][T12915] [ 608.233666][ T65] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 608.233755][ T5959] Bluetooth: hci1: command 0x1003 tx timeout [ 608.626454][T12933] netlink: 'syz.4.1870': attribute type 10 has an invalid length. [ 608.643586][T12933] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 608.649967][T12933] netlink: 'syz.4.1870': attribute type 30 has an invalid length. [ 608.711505][T12934] netlink: 'syz.4.1870': attribute type 30 has an invalid length. [ 608.767054][T12933] 9pnet_virtio: no channels available for device syz [ 609.165561][T12947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1874'. [ 609.753529][ T65] Bluetooth: hci5: command 0x1003 tx timeout [ 609.756539][ T5954] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 610.593795][T12966] 9pnet_fd: Insufficient options for proto=fd [ 610.883477][ T1911] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 611.035597][ T1911] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 611.039227][ T1911] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 611.043771][ T1911] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 611.047543][ T1911] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 611.052013][ T1911] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 611.057531][ T1911] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 611.060577][ T1911] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 611.064246][ T1911] usb 7-1: Product: syz [ 611.066039][ T1911] usb 7-1: Manufacturer: syz [ 611.072911][ T1911] cdc_wdm 7-1:1.0: skipping garbage [ 611.075592][ T1911] cdc_wdm 7-1:1.0: skipping garbage [ 611.079347][ T1911] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 611.081865][ T1911] cdc_wdm 7-1:1.0: Unknown control protocol [ 611.280170][T12968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1881'. [ 611.943661][T12981] comedi comedi0: comedi_config --init_data is deprecated [ 613.105599][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 613.105612][ T40] audit: type=1326 audit(1770049596.423:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12996 comm="syz.4.1892" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 613.115935][ T40] audit: type=1326 audit(1770049596.423:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12996 comm="syz.4.1892" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 613.122474][ T40] audit: type=1326 audit(1770049596.423:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12996 comm="syz.4.1892" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 613.130770][ T40] audit: type=1326 audit(1770049596.423:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12996 comm="syz.4.1892" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 613.138629][ T40] audit: type=1326 audit(1770049596.423:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12996 comm="syz.4.1892" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 613.145723][ T40] audit: type=1326 audit(1770049596.423:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12996 comm="syz.4.1892" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 613.152642][ T40] audit: type=1326 audit(1770049596.423:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12996 comm="syz.4.1892" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 613.159778][ T40] audit: type=1326 audit(1770049596.423:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12996 comm="syz.4.1892" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 613.166767][ T40] audit: type=1326 audit(1770049596.423:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12996 comm="syz.4.1892" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 613.173862][ T40] audit: type=1326 audit(1770049596.423:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12996 comm="syz.4.1892" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 613.238438][T12999] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1892'. [ 613.630816][ T1911] usb 7-1: USB disconnect, device number 38 [ 613.692910][T13010] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1896'. [ 613.772641][T13008] comedi comedi0: comedi_config --init_data is deprecated [ 614.282598][T13024] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 614.284734][T13024] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 614.287460][T13024] vhci_hcd vhci_hcd.0: Device attached [ 614.299816][T13024] random: crng reseeded on system resumption [ 614.553525][ T1911] usb 46-1: SetAddress Request (2) to port 0 [ 614.556265][ T1911] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 615.904613][T13016] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 616.226177][ T8869] Bluetooth: hci1: Frame reassembly failed (-84) [ 616.277530][ T5959] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 616.282575][ T5959] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 616.293614][ T5959] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 616.297775][ T5959] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 616.300572][ T5959] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 616.482062][T12393] .`: (slave syz_tun): Releasing backup interface [ 616.508523][T13035] chnl_net:caif_netlink_parms(): no params data found [ 616.540855][T13025] vhci_hcd: connection reset by peer [ 616.556164][ T1146] vhci_hcd vhci_hcd.4: stop threads [ 616.557858][ T1146] vhci_hcd vhci_hcd.4: release socket [ 616.560140][ T1146] vhci_hcd vhci_hcd.4: disconnect device [ 616.570932][T13035] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.573513][T13035] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.575822][T13035] bridge_slave_0: entered allmulticast mode [ 616.578515][T13035] bridge_slave_0: entered promiscuous mode [ 616.582189][T13035] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.584798][T13035] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.587301][T13035] bridge_slave_1: entered allmulticast mode [ 616.589932][T13035] bridge_slave_1: entered promiscuous mode [ 616.605225][T13035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 616.609665][T13035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 616.624605][T13035] team0: Port device team_slave_0 added [ 616.627978][T13035] team0: Port device team_slave_1 added [ 616.640828][T13035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 616.643174][T13035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 616.651486][T13035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 616.655859][T13035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 616.658192][T13035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 616.666644][T13035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 616.688620][T13035] hsr_slave_0: entered promiscuous mode [ 616.690933][T13035] hsr_slave_1: entered promiscuous mode [ 616.693004][T13035] debugfs: 'hsr0' already exists in 'hsr' [ 616.695654][T13035] Cannot create hsr debugfs directory [ 616.769569][T13035] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.848934][T13035] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.920537][T13035] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.973202][T13035] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.158978][T13035] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 617.163432][T13035] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 617.168220][T13035] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 617.172474][T13035] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 617.195296][T13035] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.197597][T13035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 617.199936][T13035] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.202120][T13035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 617.231076][T13035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 617.239174][ T1146] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.242132][ T1146] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.250714][T13035] 8021q: adding VLAN 0 to HW filter on device team0 [ 617.256843][ T8869] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.259233][ T8869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 617.265148][ T8869] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.267448][ T8869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 617.274494][T13052] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 617.276565][T13052] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 617.282434][T13052] vhci_hcd vhci_hcd.0: Device attached [ 617.291688][T13053] vhci_hcd: connection closed [ 617.293655][ T8869] vhci_hcd vhci_hcd.4: stop threads [ 617.298100][ T8869] vhci_hcd vhci_hcd.4: release socket [ 617.301851][ T8869] vhci_hcd vhci_hcd.4: disconnect device [ 617.412471][T13035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 617.439121][T13035] veth0_vlan: entered promiscuous mode [ 617.448037][T13035] veth1_vlan: entered promiscuous mode [ 617.463832][T13035] veth0_macvtap: entered promiscuous mode [ 617.468168][T13035] veth1_macvtap: entered promiscuous mode [ 617.477316][T13035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 617.483507][T13035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 617.489768][ T1146] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.493305][ T1146] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.496460][ T1146] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.499172][ T1146] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.541960][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.545278][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.564793][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.567307][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 618.233554][ T65] Bluetooth: hci1: command 0x1003 tx timeout [ 618.236387][ T5954] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 618.313563][ T5954] Bluetooth: hci5: command tx timeout [ 618.397399][T13074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1907'. [ 618.657019][T13068] comedi comedi0: comedi_config --init_data is deprecated [ 618.844974][T13082] SQUASHFS error: Failed to read block 0x0: -5 [ 618.847794][T13082] unable to read squashfs_super_block [ 618.957634][T13085] [U] ÿ [ 619.853526][ T1911] usb 46-1: device descriptor read/8, error -110 [ 619.945141][T13089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1911'. [ 620.072071][T13090] 8021q: adding VLAN 0 to HW filter on device bond2 [ 620.076449][T13090] bond0: (slave bond2): Enslaving as an active interface with a down link [ 620.113959][T13090] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1911'. [ 620.146348][T13090] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 620.163247][T13090] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 620.236903][T13090] .` (unregistering): Released all slaves [ 620.389059][ T1911] usb usb46-port1: attempt power cycle [ 620.403789][ T5954] Bluetooth: hci5: command tx timeout [ 620.954238][ T1144] wlan0: Trigger new scan to find an IBSS to join [ 620.964427][ T1911] usb usb46-port1: unable to enumerate USB device [ 621.373492][ T52] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 621.525035][ T52] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 621.529527][ T52] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 621.544337][ T52] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 621.548432][ T52] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 621.578109][ T52] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 621.581916][ T52] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 621.585504][ T52] usb 6-1: Manufacturer: syz [ 621.594224][ T52] usb 6-1: config 0 descriptor?? [ 621.800567][ T52] hid_parser_main: 1 callbacks suppressed [ 621.800580][ T52] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 621.815824][ T52] appleir 0003:05AC:8243.0003: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 622.324529][T13120] comedi comedi0: comedi_config --init_data is deprecated [ 622.490549][ T65] Bluetooth: hci5: command tx timeout [ 622.574573][ T1911] usb 6-1: USB disconnect, device number 17 [ 623.354752][T13138] comedi comedi0: comedi_config --init_data is deprecated [ 623.443472][ T5954] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 623.853550][T13180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1929'. [ 624.074736][ T1144] wlan0: Trigger new scan to find an IBSS to join [ 624.321432][T13183] nbd: must specify a device to reconfigure [ 624.492216][T13187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1934'. [ 624.553528][ T65] Bluetooth: hci5: command tx timeout [ 624.587748][T13192] 8021q: adding VLAN 0 to HW filter on device bond1 [ 624.590768][T13192] bond0: (slave bond1): Enslaving as an active interface with an up link [ 624.631824][T13187] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1934'. [ 624.654932][T13187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 624.660827][T13187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 624.674557][T13187] bond0 (unregistering): (slave team0): Releasing backup interface [ 624.679122][T13187] bond0 (unregistering): (slave bond1): Releasing backup interface [ 624.684572][T13187] bond0 (unregistering): Released all slaves [ 624.851799][T13210] nbd: must specify a device to reconfigure [ 624.908141][T13218] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 624.911731][T13218] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 624.915070][T13218] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 625.119047][T13234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1946'. [ 625.258344][T13243] kvm: requested 130742 ns i8254 timer period limited to 200000 ns [ 625.303542][T13243] kvm: requested 137447 ns i8254 timer period limited to 200000 ns [ 625.311741][T13243] kvm: requested 113981 ns i8254 timer period limited to 200000 ns [ 625.316084][T13243] kvm: requested 33523 ns i8254 timer period limited to 200000 ns [ 625.320091][T13243] kvm: requested 128228 ns i8254 timer period limited to 200000 ns [ 625.324290][T13243] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 625.327947][T13243] kvm: requested 75428 ns i8254 timer period limited to 200000 ns [ 625.331527][T13243] kvm: requested 183542 ns i8254 timer period limited to 200000 ns [ 625.872034][T13256] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 625.930609][ T1146] wlan0: Trigger new scan to find an IBSS to join [ 626.163322][T13269] x_tables: duplicate underflow at hook 1 [ 626.769699][T13275] netlink: 'syz.1.1958': attribute type 9 has an invalid length. [ 626.835193][T13280] binder: 13279:13280 ioctl c0306201 80000040 returned -14 [ 626.954569][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.892484][T13307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1965'. [ 628.305232][T13315] netlink: 'syz.4.1968': attribute type 10 has an invalid length. [ 628.307829][T13315] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1968'. [ 628.311271][T13315] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 628.316760][T13315] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 628.322966][T13315] netlink: 'syz.4.1968': attribute type 10 has an invalid length. [ 628.325786][T13315] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1968'. [ 628.328869][T13315] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 628.332306][T13315] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 628.337633][T13315] netlink: 'syz.4.1968': attribute type 10 has an invalid length. [ 628.340262][T13315] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1968'. [ 628.343215][T13315] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 628.346808][T13315] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 628.352084][T13315] netlink: 'syz.4.1968': attribute type 10 has an invalid length. [ 628.354727][T13315] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1968'. [ 628.357747][T13315] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 628.361540][T13315] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 628.579390][T13319] FAULT_INJECTION: forcing a failure. [ 628.579390][T13319] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 628.584194][T13319] CPU: 1 UID: 0 PID: 13319 Comm: syz.2.1969 Tainted: G L syzkaller #0 PREEMPT(full) [ 628.584213][T13319] Tainted: [L]=SOFTLOCKUP [ 628.584216][T13319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 628.584223][T13319] Call Trace: [ 628.584227][T13319] [ 628.584232][T13319] dump_stack_lvl+0x100/0x190 [ 628.584250][T13319] should_fail_ex.cold+0x5/0xa [ 628.584268][T13319] _copy_from_user+0x2e/0xd0 [ 628.584286][T13319] io_uring_setup+0xc0/0x160 [ 628.584299][T13319] ? find_held_lock+0x2b/0x80 [ 628.584310][T13319] ? ksys_write+0x190/0x250 [ 628.584322][T13319] ? ksys_write+0x190/0x250 [ 628.584334][T13319] ? __pfx_io_uring_setup+0x10/0x10 [ 628.584348][T13319] ? __mutex_unlock_slowpath+0x15c/0x790 [ 628.584363][T13319] ? __fget_files+0x215/0x3d0 [ 628.584382][T13319] ? fput+0x79/0x100 [ 628.584396][T13319] ? ksys_write+0x1ac/0x250 [ 628.584407][T13319] ? __pfx_ksys_write+0x10/0x10 [ 628.584421][T13319] __ia32_sys_io_uring_setup+0xc2/0x170 [ 628.584435][T13319] __do_fast_syscall_32+0xde/0x660 [ 628.584451][T13319] do_fast_syscall_32+0x32/0x70 [ 628.584465][T13319] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 628.584478][T13319] RIP: 0023:0xf7fb2579 [ 628.584487][T13319] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 628.584497][T13319] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 00000000000001a9 [ 628.584508][T13319] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000000 [ 628.584515][T13319] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 628.584521][T13319] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 628.584527][T13319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 628.584533][T13319] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 628.584546][T13319] [ 628.726620][T13323] netlink: 'syz.0.1971': attribute type 2 has an invalid length. [ 628.763458][T13325] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.770211][T13325] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.809216][T13327] hub 2-0:1.0: USB hub found [ 628.812363][T13327] hub 2-0:1.0: 2 ports detected [ 629.043547][ T8869] wlan0: Trigger new scan to find an IBSS to join [ 630.073535][ T1144] wlan0: Trigger new scan to find an IBSS to join [ 630.924152][T13353] FAULT_INJECTION: forcing a failure. [ 630.924152][T13353] name failslab, interval 1, probability 0, space 0, times 0 [ 630.928228][T13353] CPU: 2 UID: 0 PID: 13353 Comm: syz.1.1981 Tainted: G L syzkaller #0 PREEMPT(full) [ 630.928247][T13353] Tainted: [L]=SOFTLOCKUP [ 630.928250][T13353] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 630.928257][T13353] Call Trace: [ 630.928261][T13353] [ 630.928265][T13353] dump_stack_lvl+0x100/0x190 [ 630.928285][T13353] should_fail_ex.cold+0x5/0xa [ 630.928305][T13353] should_failslab+0xc2/0x120 [ 630.928322][T13353] kmem_cache_alloc_noprof+0x83/0x780 [ 630.928337][T13353] ? radix_tree_node_alloc.constprop.0+0x66/0x340 [ 630.928358][T13353] ? radix_tree_node_alloc.constprop.0+0x66/0x340 [ 630.928375][T13353] radix_tree_node_alloc.constprop.0+0x66/0x340 [ 630.928396][T13353] idr_get_free+0x52e/0xa00 [ 630.928412][T13353] idr_alloc_u32+0x1ac/0x320 [ 630.928426][T13353] ? __pfx_idr_alloc_u32+0x10/0x10 [ 630.928445][T13353] u32_change+0x2245/0x31e0 [ 630.928465][T13353] ? __pfx_u32_change+0x10/0x10 [ 630.928478][T13353] ? __mutex_unlock_slowpath+0x15c/0x790 [ 630.928498][T13353] ? lockdep_rtnl_is_held+0x26/0x40 [ 630.928512][T13353] ? __pfx_u32_change+0x10/0x10 [ 630.928525][T13353] tc_new_tfilter+0x978/0x23b0 [ 630.928545][T13353] ? __pfx_tc_new_tfilter+0x10/0x10 [ 630.928554][T13353] ? kmem_cache_free+0x143/0x720 [ 630.928566][T13353] ? kfree_skbmem+0x19a/0x210 [ 630.928581][T13353] ? __lock_acquire+0x4a5/0x2630 [ 630.928602][T13353] ? find_held_lock+0x2b/0x80 [ 630.928613][T13353] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 630.928631][T13353] ? __pfx_tc_new_tfilter+0x10/0x10 [ 630.928641][T13353] rtnetlink_rcv_msg+0x95e/0xe90 [ 630.928660][T13353] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 630.928680][T13353] ? ref_tracker_free+0x37e/0x6c0 [ 630.928693][T13353] netlink_rcv_skb+0x159/0x420 [ 630.928711][T13353] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 630.928729][T13353] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 630.928751][T13353] ? netlink_deliver_tap+0x1ae/0xcc0 [ 630.928770][T13353] netlink_unicast+0x5aa/0x870 [ 630.928789][T13353] ? __pfx_netlink_unicast+0x10/0x10 [ 630.928807][T13353] ? __pfx___might_resched+0x10/0x10 [ 630.928847][T13353] netlink_sendmsg+0x8b0/0xda0 [ 630.928868][T13353] ? __pfx_netlink_sendmsg+0x10/0x10 [ 630.928887][T13353] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 630.928904][T13353] ____sys_sendmsg+0xa54/0xc30 [ 630.928918][T13353] ? __pfx_____sys_sendmsg+0x10/0x10 [ 630.928937][T13353] ___sys_sendmsg+0x190/0x1e0 [ 630.928951][T13353] ? __pfx____sys_sendmsg+0x10/0x10 [ 630.928981][T13353] __sys_sendmsg+0x170/0x220 [ 630.928997][T13353] ? __pfx___sys_sendmsg+0x10/0x10 [ 630.929018][T13353] ? __pfx_ksys_write+0x10/0x10 [ 630.929030][T13353] ? fput+0x79/0x100 [ 630.929047][T13353] __do_fast_syscall_32+0xde/0x660 [ 630.929068][T13353] do_fast_syscall_32+0x32/0x70 [ 630.929082][T13353] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 630.929096][T13353] RIP: 0023:0xf7ff7579 [ 630.929105][T13353] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 630.929116][T13353] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 630.929128][T13353] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 630.929135][T13353] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 630.929141][T13353] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 630.929147][T13353] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 630.929153][T13353] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 630.929167][T13353] [ 631.022325][T13355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1980'. [ 631.113636][T13357] netlink: 'syz.1.1982': attribute type 21 has an invalid length. [ 631.392402][T13366] random: crng reseeded on system resumption [ 631.838092][T13383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1991'. [ 631.993528][ T326] wlan0: Trigger new scan to find an IBSS to join [ 632.038059][T13389] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1993'. [ 632.072685][ T40] kauditd_printk_skb: 35 callbacks suppressed [ 632.072702][ T40] audit: type=1326 audit(1770049615.383:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13385 comm="syz.1.1992" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff7579 code=0x0 [ 632.333492][T13392] binder: 13388:13392 ioctl 0 80000040 returned -22 [ 632.914763][ T326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.954078][ C3] ------------[ cut here ]------------ [ 632.956330][ C3] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 632.960349][ C3] WARNING: net/mac80211/rate.c:401 at __rate_control_send_low+0x610/0x760, CPU#3: kworker/u32:6/1144 [ 632.964779][ C3] Modules linked in: [ 632.966528][ C3] CPU: 3 UID: 0 PID: 1144 Comm: kworker/u32:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 632.970961][ C3] Tainted: [L]=SOFTLOCKUP [ 632.972724][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 632.976874][ C3] Workqueue: events_unbound toggle_allocation_gate [ 632.979508][ C3] RIP: 0010:__rate_control_send_low+0x621/0x760 [ 632.982044][ C3] Code: f7 48 8b 44 24 10 8b ac a8 d4 00 00 00 e8 e7 c9 1a f7 48 8d 3d 60 92 dc 05 44 8b 44 24 04 48 8b 74 24 10 45 89 f1 89 d9 89 ea <67> 48 0f b9 3a e9 2f fd ff ff 48 8b 7c 24 08 e8 ab 24 84 f7 e9 03 [ 632.989874][ C3] RSP: 0000:ffffc900005e8940 EFLAGS: 00010246 [ 632.992352][ C3] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 632.995623][ C3] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff90c81340 [ 632.998843][ C3] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 633.002045][ C3] R10: 000000000000000c R11: 0000000000000000 R12: ffff888051bdb928 [ 633.005301][ C3] R13: ffff888077103128 R14: 0000000000000000 R15: dffffc0000000000 [ 633.008502][ C3] FS: 0000000000000000(0000) GS:ffff8880976e3000(0000) knlGS:0000000000000000 [ 633.012096][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 633.014838][ C3] CR2: 00000000f7206d10 CR3: 000000000e392000 CR4: 0000000000352ef0 [ 633.018065][ C3] Call Trace: [ 633.019465][ C3] [ 633.020670][ C3] rate_control_send_low+0x2a8/0x7e0 [ 633.022852][ C3] ? rcu_is_watching+0x12/0xc0 [ 633.024880][ C3] rate_control_get_rate+0x1be/0x5c0 [ 633.027059][ C3] ieee80211_beacon_get_finish+0x45a/0x690 [ 633.029459][ C3] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 633.032035][ C3] __ieee80211_beacon_get+0x795/0x1ee0 [ 633.034315][ C3] ? __lock_acquire+0x4a5/0x2630 [ 633.036359][ C3] ieee80211_beacon_get_tim+0xa6/0x280 [ 633.038620][ C3] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 633.041119][ C3] mac80211_hwsim_beacon_tx+0x4d6/0xa00 [ 633.043421][ C3] __iterate_interfaces+0x2e6/0x650 [ 633.045587][ C3] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 633.048042][ C3] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 633.050394][ C3] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 633.053169][ C3] mac80211_hwsim_beacon+0x105/0x1b0 [ 633.055118][ C3] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 633.057177][ C3] __hrtimer_run_queues+0x516/0x990 [ 633.058758][ C3] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 633.060574][ C3] ? ktime_get_update_offsets_now+0x2cd/0x4d0 [ 633.062528][ C3] hrtimer_run_softirq+0x17d/0x350 [ 633.064244][ C3] handle_softirqs+0x1ea/0x910 [ 633.065784][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 633.067493][ C3] __irq_exit_rcu+0xef/0x150 [ 633.069135][ C3] irq_exit_rcu+0x9/0x30 [ 633.070970][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 633.073424][ C3] [ 633.074713][ C3] [ 633.076011][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 633.078579][ C3] RIP: 0010:__text_poke+0x4ec/0xac0 [ 633.080788][ C3] Code: 00 48 85 db 0f 85 89 02 00 00 e8 cf 47 5b 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 9d 42 5b 00 48 85 db 0f 85 cf 04 00 00 af 47 5b 00 48 8b 7c 24 78 e8 95 e1 cb 09 e8 90 04 c9 09 31 ff [ 633.088922][ C3] RSP: 0000:ffffc90006a5f8b0 EFLAGS: 00000293 [ 633.091498][ C3] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81ab0591 [ 633.094914][ C3] RDX: ffff8880279a8000 RSI: ffffffff81ab059f RDI: ffff8880279a8000 [ 633.097936][ C3] RBP: ffffffff82647eb8 R08: 0000000000000007 R09: 0000000000000000 [ 633.100443][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000eb9 [ 633.102934][ C3] R13: ffffffff8e7a75c0 R14: 0000000000000001 R15: 8000000000000063 [ 633.105493][ C3] ? kmem_cache_alloc_noprof+0x98/0x780 [ 633.107250][ C3] ? __text_poke+0x771/0xac0 [ 633.108719][ C3] ? __text_poke+0x77f/0xac0 [ 633.110207][ C3] ? __pfx_text_poke_memcpy+0x10/0x10 [ 633.111921][ C3] ? __pfx___text_poke+0x10/0x10 [ 633.113562][ C3] ? kmem_cache_alloc_noprof+0x98/0x780 [ 633.115313][ C3] ? kmem_cache_alloc_noprof+0x98/0x780 [ 633.117103][ C3] smp_text_poke_batch_finish+0x2fb/0xc60 [ 633.118920][ C3] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 633.120909][ C3] ? arch_jump_label_transform_queue+0xc0/0x120 [ 633.122912][ C3] ? find_held_lock+0x2b/0x80 [ 633.124468][ C3] arch_jump_label_transform_apply+0x1c/0x30 [ 633.126383][ C3] jump_label_update+0x37a/0x550 [ 633.127956][ C3] static_key_disable_cpuslocked+0x162/0x1c0 [ 633.129860][ C3] static_key_disable+0x1a/0x20 [ 633.131406][ C3] toggle_allocation_gate+0x149/0x2d0 [ 633.133134][ C3] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 633.135070][ C3] ? __pfx_autoremove_wake_function+0x10/0x10 [ 633.137287][ C3] process_one_work+0x9c2/0x1840 [ 633.138877][ C3] ? __pfx_process_one_work+0x10/0x10 [ 633.140590][ C3] ? assign_work+0x19c/0x250 [ 633.142071][ C3] worker_thread+0x5da/0xe40 [ 633.143602][ C3] ? kthread+0x17d/0x730 [ 633.144966][ C3] ? __pfx_worker_thread+0x10/0x10 [ 633.146592][ C3] kthread+0x3b3/0x730 [ 633.147898][ C3] ? __pfx_kthread+0x10/0x10 [ 633.149372][ C3] ? ret_from_fork+0x79/0xaf0 [ 633.150885][ C3] ? ret_from_fork+0x79/0xaf0 [ 633.152382][ C3] ? rcu_is_watching+0x12/0xc0 [ 633.153973][ C3] ? __pfx_kthread+0x10/0x10 [ 633.155453][ C3] ret_from_fork+0x754/0xaf0 [ 633.156947][ C3] ? __pfx_ret_from_fork+0x10/0x10 [ 633.158570][ C3] ? __switch_to+0x7b9/0x10c0 [ 633.160068][ C3] ? __pfx_kthread+0x10/0x10 [ 633.161558][ C3] ret_from_fork_asm+0x1a/0x30 [ 633.163061][ C3] [ 633.164130][ C3] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 633.166438][ C3] CPU: 3 UID: 0 PID: 1144 Comm: kworker/u32:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 633.169918][ C3] Tainted: [L]=SOFTLOCKUP [ 633.171301][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 633.174500][ C3] Workqueue: events_unbound toggle_allocation_gate [ 633.176545][ C3] Call Trace: [ 633.177632][ C3] [ 633.178561][ C3] dump_stack_lvl+0x100/0x190 [ 633.180059][ C3] vpanic+0x20d/0x630 [ 633.181348][ C3] panic+0xd1/0xd1 [ 633.182546][ C3] ? __pfx_panic+0x10/0x10 [ 633.184062][ C3] ? check_panic_on_warn+0x1f/0x90 [ 633.185707][ C3] check_panic_on_warn.cold+0x19/0x34 [ 633.187397][ C3] ? __rate_control_send_low+0x610/0x760 [ 633.189179][ C3] __warn.cold+0x191/0x2f8 [ 633.190605][ C3] __report_bug+0x296/0x3d0 [ 633.192053][ C3] ? __rate_control_send_low+0x610/0x760 [ 633.193869][ C3] ? __pfx___report_bug+0x10/0x10 [ 633.195457][ C3] ? kasan_save_stack+0x3f/0x50 [ 633.197020][ C3] ? mac80211_hwsim_beacon_tx+0x4d6/0xa00 [ 633.198825][ C3] ? __iterate_interfaces+0x2e6/0x650 [ 633.200522][ C3] ? ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 633.202799][ C3] ? mac80211_hwsim_beacon+0x105/0x1b0 [ 633.204529][ C3] ? __hrtimer_run_queues+0x516/0x990 [ 633.206238][ C3] ? hrtimer_run_softirq+0x17d/0x350 [ 633.207917][ C3] ? handle_softirqs+0x1ea/0x910 [ 633.209500][ C3] ? __irq_exit_rcu+0xef/0x150 [ 633.211037][ C3] report_bug_entry+0xe1/0x290 [ 633.212571][ C3] ? __rate_control_send_low+0x621/0x760 [ 633.214380][ C3] handle_bug+0x1c9/0x2a0 [ 633.215779][ C3] exc_invalid_op+0x17/0x50 [ 633.217249][ C3] asm_exc_invalid_op+0x1a/0x20 [ 633.218799][ C3] RIP: 0010:__rate_control_send_low+0x621/0x760 [ 633.220778][ C3] Code: f7 48 8b 44 24 10 8b ac a8 d4 00 00 00 e8 e7 c9 1a f7 48 8d 3d 60 92 dc 05 44 8b 44 24 04 48 8b 74 24 10 45 89 f1 89 d9 89 ea <67> 48 0f b9 3a e9 2f fd ff ff 48 8b 7c 24 08 e8 ab 24 84 f7 e9 03 [ 633.226836][ C3] RSP: 0000:ffffc900005e8940 EFLAGS: 00010246 [ 633.228768][ C3] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 633.231260][ C3] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff90c81340 [ 633.233766][ C3] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 633.236263][ C3] R10: 000000000000000c R11: 0000000000000000 R12: ffff888051bdb928 [ 633.238774][ C3] R13: ffff888077103128 R14: 0000000000000000 R15: dffffc0000000000 [ 633.241290][ C3] rate_control_send_low+0x2a8/0x7e0 [ 633.242971][ C3] ? rcu_is_watching+0x12/0xc0 [ 633.244531][ C3] rate_control_get_rate+0x1be/0x5c0 [ 633.246241][ C3] ieee80211_beacon_get_finish+0x45a/0x690 [ 633.248092][ C3] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 633.250118][ C3] __ieee80211_beacon_get+0x795/0x1ee0 [ 633.251862][ C3] ? __lock_acquire+0x4a5/0x2630 [ 633.253475][ C3] ieee80211_beacon_get_tim+0xa6/0x280 [ 633.255201][ C3] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 633.257171][ C3] mac80211_hwsim_beacon_tx+0x4d6/0xa00 [ 633.258931][ C3] __iterate_interfaces+0x2e6/0x650 [ 633.260596][ C3] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 633.262547][ C3] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 633.264472][ C3] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 633.266688][ C3] mac80211_hwsim_beacon+0x105/0x1b0 [ 633.268364][ C3] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 633.270223][ C3] __hrtimer_run_queues+0x516/0x990 [ 633.271885][ C3] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 633.273699][ C3] ? ktime_get_update_offsets_now+0x2cd/0x4d0 [ 633.275636][ C3] hrtimer_run_softirq+0x17d/0x350 [ 633.277310][ C3] handle_softirqs+0x1ea/0x910 [ 633.278855][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 633.280548][ C3] __irq_exit_rcu+0xef/0x150 [ 633.282046][ C3] irq_exit_rcu+0x9/0x30 [ 633.283435][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 633.285239][ C3] [ 633.286186][ C3] [ 633.287142][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 633.289048][ C3] RIP: 0010:__text_poke+0x4ec/0xac0 [ 633.290740][ C3] Code: 00 48 85 db 0f 85 89 02 00 00 e8 cf 47 5b 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 9d 42 5b 00 48 85 db 0f 85 cf 04 00 00 af 47 5b 00 48 8b 7c 24 78 e8 95 e1 cb 09 e8 90 04 c9 09 31 ff [ 633.296730][ C3] RSP: 0000:ffffc90006a5f8b0 EFLAGS: 00000293 [ 633.298664][ C3] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81ab0591 [ 633.301166][ C3] RDX: ffff8880279a8000 RSI: ffffffff81ab059f RDI: ffff8880279a8000 [ 633.303658][ C3] RBP: ffffffff82647eb8 R08: 0000000000000007 R09: 0000000000000000 [ 633.306155][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000eb9 [ 633.308604][ C3] R13: ffffffff8e7a75c0 R14: 0000000000000001 R15: 8000000000000063 [ 633.311107][ C3] ? kmem_cache_alloc_noprof+0x98/0x780 [ 633.312868][ C3] ? __text_poke+0x771/0xac0 [ 633.314378][ C3] ? __text_poke+0x77f/0xac0 [ 633.315879][ C3] ? __pfx_text_poke_memcpy+0x10/0x10 [ 633.317608][ C3] ? __pfx___text_poke+0x10/0x10 [ 633.319199][ C3] ? kmem_cache_alloc_noprof+0x98/0x780 [ 633.320963][ C3] ? kmem_cache_alloc_noprof+0x98/0x780 [ 633.322723][ C3] smp_text_poke_batch_finish+0x2fb/0xc60 [ 633.324518][ C3] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 633.326481][ C3] ? arch_jump_label_transform_queue+0xc0/0x120 [ 633.328436][ C3] ? find_held_lock+0x2b/0x80 [ 633.329924][ C3] arch_jump_label_transform_apply+0x1c/0x30 [ 633.331812][ C3] jump_label_update+0x37a/0x550 [ 633.333416][ C3] static_key_disable_cpuslocked+0x162/0x1c0 [ 633.335297][ C3] static_key_disable+0x1a/0x20 [ 633.336864][ C3] toggle_allocation_gate+0x149/0x2d0 [ 633.338571][ C3] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 633.340446][ C3] ? __pfx_autoremove_wake_function+0x10/0x10 [ 633.342388][ C3] process_one_work+0x9c2/0x1840 [ 633.343996][ C3] ? __pfx_process_one_work+0x10/0x10 [ 633.345711][ C3] ? assign_work+0x19c/0x250 [ 633.347197][ C3] worker_thread+0x5da/0xe40 [ 633.348703][ C3] ? kthread+0x17d/0x730 [ 633.350078][ C3] ? __pfx_worker_thread+0x10/0x10 [ 633.351719][ C3] kthread+0x3b3/0x730 [ 633.353043][ C3] ? __pfx_kthread+0x10/0x10 [ 633.354551][ C3] ? ret_from_fork+0x79/0xaf0 [ 633.356055][ C3] ? ret_from_fork+0x79/0xaf0 [ 633.357585][ C3] ? rcu_is_watching+0x12/0xc0 [ 633.359124][ C3] ? __pfx_kthread+0x10/0x10 [ 633.360609][ C3] ret_from_fork+0x754/0xaf0 [ 633.362067][ C3] ? __pfx_ret_from_fork+0x10/0x10 [ 633.363712][ C3] ? __switch_to+0x7b9/0x10c0 [ 633.365236][ C3] ? __pfx_kthread+0x10/0x10 [ 633.366725][ C3] ret_from_fork_asm+0x1a/0x30 [ 633.368298][ C3] [ 633.369997][ C3] Kernel Offset: disabled [ 633.371389][ C3] Rebooting in 86400 seconds..