last executing test programs: 8m5.418155348s ago: executing program 2 (id=968): r0 = socket(0x40000000015, 0x5, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) epoll_create1(0x0) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x4b, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) setpriority(0x0, 0x0, 0x2) sysfs$2(0x2, 0x8000000000000000, &(0x7f0000000000)=""/114) r2 = socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r3, &(0x7f0000000580)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) read$FUSE(r4, &(0x7f000000a400)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000008400)="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", 0x2000, 0x0) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5}, 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x4842, 0x0) writev(r6, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000e00)='t', 0x2fd200}, {0x0, 0x2200}, {&(0x7f0000001000)="d6", 0x20c00}], 0x21) write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) 8m3.329532081s ago: executing program 2 (id=980): syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbf18000000000000000000000000000aa4e200e2200649078020000000100000004001000628e0960f6d6d3f6ee6d6b84b345dccac643e7df3e526ff07833b291322d4a74882ed6741e7632daeaec0c95f2ad1cd68fb3d9fd3efe8e4ea8b5ec7448ddd6a321590400b89612"], 0x0) 8m3.237611808s ago: executing program 2 (id=982): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000001a80)={0x2, 0x0, {&(0x7f0000001940)=""/163, 0xa3, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000002b00)={0x2, 0x0, {&(0x7f0000000600)=""/13, 0xd, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000340)={0x2, 0x0, {&(0x7f0000000080)=""/78, 0x4e, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000008c0)={0x2, 0x0, {&(0x7f0000000500)=""/38, 0x26, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000940)={0x2, 0x0, {&(0x7f0000000540)=""/176, 0xb0, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)={[{@quota}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x37]}}]}) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f00000002c0)='./file0\x00') 8m3.03523905s ago: executing program 2 (id=986): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x1, @mcast2, 0x1}}, {{0xa, 0x0, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffd}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61158c000000000061134c0000000000bfa00000000000000705000008004ef02d3501000000000095000000000000006916000000000000bf67000000000000350605000fff07206706000004000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9d0cc7d3b4814261bdb94a050000a28a404be266df76965947c73c00c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b540dcfc7ad0500c4063b3b8754c0686cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e567238809000000000000000ae2fb494059bba8e3b680324a188090eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb40000000000000000000000000040007abf9c20d89cbc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eb29000000000000003cc3aa39ee4b1386bab561cda886fa64ffffff7f473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59801fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d00000000d3114dbc7e2bf2402a75fd7a5573336004088000000000000000fb38c7f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf73400000000000000cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce91798adc2dca8710d5c617df01f82a73f6bd61d1f5b2a443faa9bda0577383dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea90000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8a10300004d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224bb031bbee6d23cef7074f6d718b06ca80b57aa183dd0c39e9d8547c666b6764a3c7dd62a94eee45881441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a365b5b11df7216652b5703f31e078ecdefe8e6bfc45a9980a7a8de863e3477dd47d0f11611ca92d89641a183c8f629f17cfc28fde209a793d9c0cdde3bb3f82670d33396982988b9f5207a732908fdf1506f307ccae47a69319ee2242272e4f7ceb7a40e49a21ce6405af3ecb3381bf0668749c81fc6c2d97e68a693e3e622af52e572f4fa7b20d5c72cf5ff8016461130a46803de45029489921a48bd7688dd593e4a3e9803263ecbd8ae8570293508ebe5fabc1842cbc01ae8fabbf41820c31b7bb83a3439d4540f839ed5c23828a33d7645baa1ec32bb7aa8a786bb0997ccf6bba0a2cf6ef2157a63974d5e525a3f3f7f993ea9e82732ccc2e12c631012175d5d474bef818bdf8f27a7e563684a225dee6ca5f5ff18a89ac6c627ff0e0e4769b6fbcfc847b20960704a4b13e962333bddb966de8bcade6f6bd3915a580ddec2e1bd88fbfdb749789cdc946822212f1cbacb03ba8d3e51e48ccdae20a43bf79ca0131b830620a97877242989e78dfec1d6df5f97ca5cddece50d0cae5d6eabbc1913aa3660e0b00000000000000000000004000bc16b71cb118d93461aa2914d6e454ef05c41beab7382787ba46b68c8d8b35da9fb58b259b4447b59c667ddcac0bb2d066eb0579be84bdca8ed5d693411b7e5b21efaceddacef03daa9772f2715b5613ae0d88f8d109e36f8b8871b646d9ebbcc25d527ad3f828c92cb6597f82ed4d496a519007781be0c7cac07fc508a585f415ef81a887475286df80fb6ff9c6524d0e22d50f88ca15545bc688063b04eb8e0248aca60b9983dd5966216499ccfc0551f6e0323859ae64f55e4d496a695f8e6382aa714b92f95dcfd0b456d9ce7a24f736e4009ef64230e8f83f8283a4cc5f178d4698b94ccd8d0e0e3e2e35e1a7ac0cb3ee52013e8c2802d2f89b3f708fb53c17c3e4fbe0326ee510c4317b5f5f1eb34ca8441c23755acfc469909b16fba134de01d484c1b380622d37"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x37de6c8a68769c38}, 0x48) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r1 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5\xcb\xbcf\xe4\x85\x0e\xa4\xe6>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x198\xac\xd3q\xe4vPGU\x00'/270, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x20000, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000b80), r2) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000240)='./file0\x00', 0x0) r3 = dup(r1) write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c464a030103ff0700000000000002000300040000003e03000038000000d600000097700000fe03200001", @ANYRES32=r3], 0x75) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 8m2.816878043s ago: executing program 2 (id=990): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYRES64=r2, @ANYRESDEC=0x0, @ANYRESOCT=0x0], 0x3c}, 0x1, 0x0, 0x0, 0xb5dec56f96dc71dd}, 0x4040800) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) 8m2.469048926s ago: executing program 2 (id=993): r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'macvlan1\x00'}) r1 = accept4$llc(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300)=0x10, 0x0) setsockopt$llc_int(r1, 0x10c, 0x0, &(0x7f0000000340)=0x6, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) lsm_list_modules(&(0x7f0000002600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000000)=0x7b, 0x0) r2 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x178, 0x1403, 0x100, 0x70bd2b, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pim6reg1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'nr0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6tnl0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_team\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macsec0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pim6reg1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge_slave_1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'netpci0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6tnl0\x00'}}]}, 0x178}, 0x1, 0x0, 0x0, 0x4c004}, 0x50) 8m2.263879123s ago: executing program 32 (id=993): r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'macvlan1\x00'}) r1 = accept4$llc(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300)=0x10, 0x0) setsockopt$llc_int(r1, 0x10c, 0x0, &(0x7f0000000340)=0x6, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) lsm_list_modules(&(0x7f0000002600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000000)=0x7b, 0x0) r2 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x178, 0x1403, 0x100, 0x70bd2b, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pim6reg1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'nr0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6tnl0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_team\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macsec0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pim6reg1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge_slave_1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'netpci0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6tnl0\x00'}}]}, 0x178}, 0x1, 0x0, 0x0, 0x4c004}, 0x50) 1m51.515073038s ago: executing program 0 (id=2375): connect$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0xc0a40, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0xff) r2 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000180)={'pcmmio\x00', [0x5c25, 0xd, 0x1, 0x0, 0x2, 0x6, 0xc, 0x10001, 0x7ffd, 0xfe, 0x2, 0x1, 0x20000c, 0x403, 0x6, 0x9, 0x1, 0x5, 0x3, 0x40000003, 0x89, 0xfd, 0xb27, 0x0, 0x800b, 0x8, 0x5, 0x8, 0x8, 0x10000, 0xfffffff3]}) 1m51.258058974s ago: executing program 0 (id=2376): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) listen(0xffffffffffffffff, 0x14) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getsockopt(0xffffffffffffffff, 0xc, 0x80, &(0x7f0000000240)=""/49, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = eventfd2(0xe5c, 0x80000) r2 = eventfd2(0x4001, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x2) r9 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) read$ptp(r8, 0x0, 0x0) write$cgroup_subtree(r9, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r9, &(0x7f00000001c0)={[{0x2b, 'cpu'}]}, 0x5) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f00000002c0)={'veth0_vlan\x00', @random='D\x00\x00\x00(E'}) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000100)={r1, 0x40007, 0x2, r2}) 1m50.338794122s ago: executing program 0 (id=2382): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@deltfilter={0x1bfc, 0x2d, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2, 0xffff}, {0xe, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x1bcc, 0x2, [@TCA_CGROUP_POLICE={0x454, 0x2, [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xc7c99d8, 0x10001, 0x0, 0x7fffffff, 0x9, 0xd, 0x7, 0x4, 0x4, 0x7, 0x80000001, 0x0, 0x5, 0x3, 0xffffff34, 0x0, 0x7, 0xffffffff, 0x4, 0x6, 0x9, 0x3, 0x2, 0x34e, 0x88a, 0x8, 0x1, 0x1, 0x3ff, 0x206c, 0xfffffffa, 0x9, 0x2, 0x5, 0x90d, 0x0, 0xffffffff, 0x1f, 0x8, 0x7, 0x9, 0x3, 0x8, 0x8, 0x10000, 0x7fff, 0x1, 0x9, 0x8cea5f96, 0x100, 0x4, 0x891c, 0x1, 0x8, 0xc785586c, 0x4, 0x7fffffff, 0x2, 0x9, 0x7b, 0x7, 0x9, 0x2, 0xd5a, 0x7, 0x9, 0x0, 0xfd4d, 0xffffffff, 0xfffffff6, 0x66, 0x6, 0x5, 0x0, 0x9, 0x6, 0x2, 0x8, 0x2, 0x67, 0x2, 0x80000001, 0x2, 0xe0000000, 0x6, 0x1, 0x8, 0x0, 0x8, 0xfffffffb, 0x200, 0x2, 0x0, 0x9, 0x5, 0x5, 0x9, 0x5, 0x74, 0xae, 0xdb, 0x4028eba2, 0x6, 0xfffffffe, 0x6, 0x0, 0xfffffffd, 0x5, 0x3ff, 0x4, 0x8, 0x2, 0x8, 0x6f, 0x6, 0x7, 0x9, 0x7, 0xfff, 0xfffffff9, 0x7fffffff, 0x9, 0x0, 0x2, 0xff, 0x2, 0x2, 0xe30, 0x200, 0x200, 0x5, 0x7, 0x0, 0xc, 0xa3, 0x5, 0x1, 0x5, 0x4, 0x5, 0x3, 0xbbd9, 0x8000, 0x5, 0x5a8ea34b, 0x2, 0xfffffff7, 0x57c, 0x8de, 0x7, 0x6, 0x2a8, 0x4, 0x67, 0x8, 0x8, 0x0, 0x1ff, 0xd, 0x5, 0x4, 0x101, 0x1000, 0x8e5, 0x1, 0x9, 0x5, 0x2, 0x87, 0x4, 0x1, 0x0, 0x7, 0x7a, 0x0, 0x76, 0x4, 0xff, 0x5, 0x7, 0x5, 0x0, 0x5, 0xb, 0xe, 0x200, 0x6, 0x8, 0x7, 0x5, 0xb16f, 0xff, 0x7, 0x3, 0xfdb1, 0xffffffff, 0x100, 0x10001, 0x2, 0x80, 0x7ff, 0x5, 0x3, 0xe02c, 0xe, 0x7ff, 0xfffffff9, 0x1bff, 0x6, 0x5, 0x5, 0x3, 0x44, 0x1, 0x2, 0x8, 0x4, 0x423, 0x0, 0x6, 0x7, 0x2, 0x2, 0x1b68, 0xffffffff, 0x81, 0x20ca, 0x18b, 0x1, 0x1, 0xe0f, 0xffff, 0x3, 0x8, 0x3, 0x401, 0xe, 0x7fffffff, 0x8cb6, 0x0, 0x4, 0x7, 0x2, 0xbb6, 0x7fffffff, 0x3, 0x3, 0x101, 0x7ff, 0x40, 0x0, 0x7, 0x6, 0xfffffff9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x401}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x25}]}, @TCA_CGROUP_ACT={0x1430, 0x1, [@m_ife={0xa0, 0xc, 0x0, 0x0, {{0x8}, {0x64, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x20, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x8}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0x4550, 0x20000000, 0x62d, 0x4}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0x6}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x62b, 0x3, 0x8, 0x1}, 0x1}}]}, {0x18, 0x6, "c6dc3c3249336690f7c4ce9e4a48567bb93ce94e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_nat={0x1e8, 0x1d, 0x0, 0x0, {{0x8}, {0x144, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x5, 0x10000000, 0x0, 0x6}, @private=0xa010102, @loopback, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x101, 0x0, 0x7, 0xa00, 0x5}, @dev={0xac, 0x14, 0x14, 0x3f}, @private=0xa010102, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1fc00, 0x1c2, 0xffffffffffffffff, 0x8, 0x5}, @multicast1, @empty, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xd, 0x5, 0xfffffffd, 0x2}, @multicast1, @rand_addr=0x64010100, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xed39, 0x2008001, 0x20000000, 0x7, 0x9}, @remote, @rand_addr=0x64010100, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0xfffffff9, 0x6, 0x80, 0x4}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x1, 0x7, 0x5, 0xb4b}, @broadcast, @remote, 0x8c8b19b1f669ee6f}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xc, 0x5, 0xf324, 0x5}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0x1}}]}, {0x7e, 0x6, "686e0c104b673c4250dcfdef31d193861ff0d7d898bbf9e3d96d43de5a681adfb43286cda3b7cbadc1e4cdff1e67d8bcfd8869e9282aae82226020faf634452e14e030801905cce7a1ce008f58cf17f880ef58d724365216d77af768cd39647c0581d2a3223c2cdb43c079ca92bfc23c4b53f37cf0c60f850426"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_pedit={0xf40, 0x11, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0xc4c, 0x551, 0x2, 0x8001, 0x6}, 0x16, 0xff, [{0x7, 0x0, 0x9, 0x8, 0x7, 0x8}]}, [{0x3, 0xffff, 0x0, 0x189, 0x7, 0x2}, {0x4, 0x80, 0x1, 0x3, 0x9, 0x3ff}, {0xbac2, 0x4, 0x5, 0x1, 0x200, 0xea05}, {0x101, 0x2, 0xeb, 0x2, 0xb, 0x6}, {0x400, 0x94, 0x8, 0x3, 0x10, 0xc}, {0x6, 0x5, 0x9, 0xffffffff, 0xe057, 0x1ff}, {0x40000000, 0x1, 0xfbf4, 0x5, 0xa5, 0x5}, {0x34988b73, 0x6, 0x8000, 0x7, 0x3, 0x6}, {0x9, 0xae8, 0x6, 0x7, 0x5, 0x80000001}, {0x7, 0x8, 0x1000, 0x80, 0x2, 0x10}, {0x9, 0x3, 0x3, 0x6, 0x3a54, 0x7}, {0xfffffff8, 0x6, 0xb, 0x4, 0x3, 0x8}, {0x401, 0x200, 0x9, 0x3, 0x4, 0x6}, {0x9, 0xa8d, 0xa3, 0x0, 0x8001, 0xfffffff9}, {0x1c, 0x8, 0x2, 0x2, 0x9, 0x1ff}, {0xffffffff, 0x2, 0xfffffff7, 0x1, 0x1, 0x4}, {0x7c8, 0x0, 0xb2f, 0x4, 0x8001, 0xfffffffb}, {0x3, 0xfff, 0x1000, 0x7, 0x9, 0x7}, {0x5, 0x8000, 0x1000, 0x9, 0xd14, 0xfffffff9}, {0x2, 0x5, 0x2, 0x5, 0x800, 0x8}, {0x0, 0xbc, 0x4, 0x2, 0x8000, 0x3}, {0x5, 0x5, 0x9, 0x8001, 0x20003, 0x2}, {0x1, 0x7, 0x9, 0xffffffbf, 0xffffff03}, {0x6, 0x1, 0x7ff, 0x2, 0x9d, 0x7}, {0x6a, 0x1000, 0x8, 0x9, 0x18, 0xfffffff8}, {0x30, 0x5, 0x5, 0xbc3, 0x8, 0xffffffff}, {0xf4, 0x7, 0x81, 0x9, 0x1, 0x1}, {0x1000, 0x8, 0x3, 0xfffffffd, 0xff, 0x9}, {0x8, 0x0, 0x8, 0xba8, 0x2, 0x8}, {0x1, 0x80000000, 0xfffff651, 0x4, 0x1, 0x9}, {0x5, 0x7, 0x5, 0x91f9, 0x200}, {0x9, 0x83, 0x100, 0x1, 0xffff, 0x2}, {0x0, 0x0, 0x7fffffff, 0x97cc, 0x8, 0x6}, {0x5, 0x537e7dea, 0x5, 0x6, 0x4, 0x4}, {0x6d8d, 0xfffffffb, 0x5, 0x10001, 0x9, 0xc}, {0x8, 0x6, 0x1, 0x3, 0x2, 0x200}, {0x3, 0x10, 0x69, 0x3, 0x6, 0x2}, {0x7, 0xa2dd, 0xff, 0x8, 0xf61, 0x6}, {0x34d4, 0x2, 0x9, 0x1e1, 0x3, 0x1}, {0x4, 0x564b, 0x28, 0x9, 0x3, 0x1}, {0x1000200, 0x1, 0x7, 0xd513, 0x5, 0x8}, {0x0, 0x7fff, 0x0, 0x2, 0x5, 0xfffffffc}, {0x4, 0xcc5, 0x1000, 0x7, 0x80, 0x2}, {0x9, 0x6, 0x1ff, 0x515, 0x15, 0x81}, {0x5, 0x0, 0x2, 0xfffffffc, 0x8, 0x400}, {0x8, 0x1, 0x40, 0x1ff, 0x5, 0x6}, {0x8bf, 0x6, 0x7fffffff, 0x3, 0x6, 0x4}, {0x80000001, 0x88, 0x800000, 0x2, 0xffff8001, 0x2}, {0x9, 0x7, 0x3, 0x4, 0x8, 0x4}, {0xfffffffa, 0x9, 0x1b6b, 0xf, 0x80, 0x94}, {0x200, 0xfffff378, 0x8, 0x3, 0x7, 0x7}, {0x2, 0x3, 0x80000001, 0x0, 0xfffffffe, 0x6}, {0x2, 0xfff, 0x9, 0x2, 0x4, 0x3}, {0x1000007, 0x80000001, 0x6, 0x9, 0xfffffbff, 0x5}, {0x0, 0x447, 0x8, 0x7, 0x44, 0x5}, {0x7fff, 0x8, 0x9, 0x4, 0x40, 0x3}, {0x1, 0x4, 0x252, 0x10, 0x0, 0x8}, {0x6, 0x4, 0x3, 0xa7, 0x4, 0x4}, {0x5, 0x7, 0x2, 0x7, 0xfffff000, 0x4}, {0x1cc, 0x5, 0x48, 0x5, 0x6, 0x80}, {0x0, 0x5, 0x0, 0xfffa}, {0x3, 0xdc0, 0xe, 0x0, 0x6}, {0x5504, 0x55, 0x21, 0x4, 0x0, 0x1}, {0x4c, 0x1, 0x7f, 0xc44, 0x7fffffff, 0x2}, {0xfffff644, 0x49d, 0x0, 0x0, 0x8001, 0x5}, {0x7, 0x6, 0x9, 0x1, 0x6, 0x9}, {0x0, 0x6c800, 0x0, 0x558, 0x5, 0x5}, {0x6, 0xbc, 0x4, 0x3, 0x2, 0xfffffffe}, {0x2, 0x2, 0xffff, 0x4, 0x7}, {0x0, 0x10001, 0x0, 0x6, 0x8001, 0x1}, {0x2, 0x861, 0x10001, 0x80, 0x0, 0xfffffffd}, {0x8, 0x5, 0x7f0, 0x5, 0x5, 0x4}, {0x38, 0xfffffffd, 0x2, 0x3, 0x9, 0x7}, {0x8, 0x8, 0x5, 0x3, 0xbcd9, 0x3}, {0x11be, 0x5, 0x0, 0x7, 0x4, 0x80000000}, {0xd9, 0x6, 0x7fff, 0x4, 0x7, 0x9c7}, {0x100, 0x7, 0x5, 0x800, 0x3, 0x9}, {0xffffff80, 0x0, 0x4, 0x8000, 0x5, 0x3}, {0x8000, 0x8, 0x200, 0x3, 0x200, 0xffffffff}, {0x400, 0x40000000, 0x6, 0xae, 0xfff, 0x81}, {0x4, 0x8, 0x10001, 0xb, 0x9, 0xfa4a}, {0xa2f, 0xfffffff9, 0x0, 0xfba, 0x9, 0x7ff}, {0xe3fa, 0x4, 0x3, 0x5, 0x2, 0x5d}, {0x1, 0xb1f, 0x0, 0x0, 0x8, 0xcf}, {0x0, 0x0, 0xe294, 0x8, 0xe996, 0x3}, {0x4, 0x8, 0x9, 0x3ff, 0x80000001, 0x8}, {0x6a4f, 0x3, 0x3, 0x6, 0xffffffff, 0x1}, {0xf, 0xe3, 0x1, 0x4, 0x6, 0x9}, {0x3, 0x2, 0x9, 0x7fff, 0xe9e, 0xffffffff}, {0x1, 0x0, 0xe5, 0x25, 0x8, 0x829}, {0x7fffffff, 0x7fff, 0xf, 0x3, 0xe, 0xfffffff7}, {0x9, 0x8, 0x3, 0x10000, 0x3, 0xe}, {0x23, 0x8, 0x0, 0x6, 0x9f3, 0x8}, {0x9, 0x8, 0x101, 0x10, 0x1, 0x7}, {0x3, 0x4, 0x0, 0x0, 0x7, 0x7}, {0x6, 0x100, 0x0, 0x2, 0xfffffffe, 0x4}, {0x6, 0x10001, 0x200, 0x2, 0x9, 0x100}, {0x9, 0x1, 0x4, 0x1000, 0x9, 0x7}, {0xfffffff4, 0x6, 0x1, 0x7, 0x5, 0xfffffff7}, {0xb, 0x3, 0x3, 0x40, 0x6, 0x31}, {0x80000000, 0x75, 0x8001, 0x6, 0x3}, {0x6, 0xfffffffa, 0xfff, 0x8001, 0x4ea3, 0x13}, {0xffffffff, 0x401, 0x6, 0xda83, 0x80000001, 0xa}, {0xd49a, 0x9, 0x9, 0x2, 0x6, 0x4}, {0xfffffffc, 0x80000000, 0x8, 0x80, 0x9}, {0xfffffff4, 0x2, 0x2, 0x2, 0x5, 0x7f}, {0x2, 0xfffff0b3, 0x5, 0x4, 0x400, 0xe8}, {0x3, 0x7, 0x8, 0xf, 0x3, 0xfffffff9}, {0xc85, 0x3, 0x158c, 0xd, 0x4, 0x2}, {0x9, 0x7, 0x7, 0x1, 0x1, 0x40}, {0x200, 0x4ad095db, 0x8, 0x4, 0x43a, 0x1}, {0x5, 0x5, 0x9, 0x4, 0xcd, 0x8}, {0x9, 0x80000000, 0x7c5e, 0x77, 0x3d1, 0x5}, {0x0, 0x6, 0x9, 0xa5b8, 0x7, 0x5b0}, {0x90, 0x4, 0x8000, 0x10000, 0x8}, {0x2, 0x7fff, 0xf, 0x2, 0x8, 0x3}, {0x1, 0x5, 0xa4bb, 0x1, 0x3, 0x7}, {0x3, 0x3, 0xa, 0x4, 0x2, 0x6}, {0x4, 0x0, 0x9c, 0x6fb4, 0xdf, 0x3}, {0xfffffff8, 0xf, 0x5, 0x1, 0x9, 0x2}, {0x3, 0x91a, 0x7, 0x7fff, 0x6, 0xffff}, {0x6, 0x5e, 0xffffe3be, 0x9, 0xcd1, 0x3}, {0x400, 0x4, 0x79f00cee, 0x9, 0x40, 0x3ff}, {0x2, 0x7, 0xffffffff, 0x3, 0x1000, 0xb6f}, {0x57, 0x4, 0x8, 0x6, 0x7, 0x7f}, {0x9, 0x1, 0x4, 0xffffffff, 0x9, 0xb459}, {0x5, 0x9, 0x189, 0x0, 0x4}, {0x8, 0x2, 0x4f9f, 0x3, 0x800, 0x401}], [{0x2}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2}, {0x3}, {0x1, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x5}, {0x1}, {0x4}, {}, {0x5, 0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x3, 0x3}, {0x4}, {0x4}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x3}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {}, {0x1}, {0x1, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x0, 0x2}, {0x5}, {0x3}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x4}, {0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x2, 0x1}, {0x5, 0x53d0e78fb1749b20}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x3}, {0x0, 0xa0f94a89673f6485}, {0x4}, {0x5}, {0x4, 0x1}, {0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x2}, {0xd, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x36e2d0da2d610288}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x3}, {}, {0x1}, {0x1, 0x1}, {0x2}], 0xff}}]}, {0xd9, 0x6, "3739d693f22d31e5fb60854e878b79c8e0a0cb660859040693bc7273de2a205c05c9dd9e6d4a4832a2f71bb177f092827e37fd74ec3dcf6da0464df55ad5f2b6cd70b838ac96e26dc6e3b4aafe86f358f9857609efe76a61046af31c4a777d81b6f5202ce2649e86b6f2bc50a10e3a38dd7a558504039fdaa900beb7f40204a55b9e1f308bb3544d066700f642db657905ebbb26c446745ed576e1ecb8eca6797048da88e97b11ff18a7a1fd9e60596e005a01b8434a514b5e701931aebf2042485bf229a5394c007e46de0381f4871030b1fcadbe"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_xt={0x264, 0xb, 0x0, 0x0, {{0x7}, {0x1d4, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x9c, 0x6, {0x2000, 'nat\x00', 0x92, 0x5, "8747397b0cffffbd6b17f1d30e5facc4ba680e71ca1855dde5224a83eb12816fb535d6ef72d00c374d492d6925db024824fca66b37b5929f6eb7a85257be761e5985ad6a625d2617ece0bc5696c5e80c7f68f95ad88e6e308e2c10bf4b98955dc4e023d4f29a431f8e451a6bf3b42e616948"}}, @TCA_IPT_TARG={0x10d, 0x6, {0x3, 'filter\x00', 0x7, 0x7, "7ca63c0bafa93cb06d9c341c1ebf3a4c3a3a39c645a0756320b1fb6acfd034cbf8ff0d9f9e8726dbff3aacacbd00123daec55d474b57e1808f0a7940e9f34333f449d7c40c707d3cc4a42b4c10923d3687e0df0375b6cdd847f17282909ac6e77e96f7805651c1d6724eb2073d07a5ad348496f241019055548cdc6c4df3dc7432077b1118c972eeea068bddf14fbef7c39cb192f95bb1adf4d9f53eacd5d3ff4c4224a8f75521441a91dbd88a514708460de03c5b9b0ad763ce738332e40096326ad5bf02565d523290cc63d88bbf62eff58b4d069ec868df2830e0e9ed5b0ca62d02"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x6b, 0x6, "b4d7c6f2b14d607b111513476d4af420f755889e39353cb9f6737c719107fd3cd99cd31e6f4d2ff3a229ecd62a58f818c790c03dcae57b1e63df68ef6dd375906917309852f3d52c43ff30ee88237a182869eb218ebfb6b6f770f7312c906db47bced2c03f1d6f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_CGROUP_EMATCHES={0x344, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x58, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x4, 0x7, 0x1ec8}, {{0x4, 0x1, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x202}, {0xffffffffffffffff}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8ae, 0x7, 0x9}, {{0x4, 0x1, 0x1, 0x1}}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x8001, 0x3, 0x9}, {0x81, 0x9, 0x4, 0x80}}}]}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xa, 0x3, 0x9}, {0x0, 0x344, 0x6}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_LIST={0x190, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xffff, 0x1, 0x98d3}, {0x7, 0x8, 0x6, 0x5, 0xc, 0x2}}}, @TCF_EM_IPT={0x164, 0x2, 0x0, 0x0, {{0x1000, 0x9, 0x5}, [@TCA_EM_IPT_MATCH_DATA={0xbd, 0x5, "5829b535353b720b2247afb8c728a6f3a07f88627ad8e343033de10817941eaf329c8c062136958ce6888baf955997d8bab6fc434b37161e8981adb273e95ab8d981697ccddd331881bf8ae8b63b79cb4fdec2c32a23dc43cbf3f1767cd50e4f105f23e07e517bc9fd0f330e01c69bbc797dade919957d4962909ab6f5885e344f21ee511e67f5a23fc1f5d5da16d3e70a504fefc9b6cacf1ff50ff78ef1a7e88d1a21fec4db7c89d65a88e279e151867ca63363054619b013"}, @TCA_EM_IPT_MATCH_DATA={0x12, 0x5, "90a3b603effaa9d66558bb972fcf"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x7b, 0x5, "7e018e7b16706fdb26a42bbac9ea0dfbf3d219ed953a60cb2364b4761391ee637fb90ffe656e0031534adeebdfdff97294501d0ab4065fc87d9d1563a2eb0c340ac46d55a80dee0e419b56849d7efc038a70cc6ce4a2e4eaec82334ba9d454d37fd08caf1f76f3eb38fc42aa93901b88abef4c862dd748"}]}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{}, {0x2, 0x2, 0x7}}}]}, @TCA_EMATCH_TREE_LIST={0x128, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0xe6, 0x2, 0x7}, {0x4, 0x4, 0x1, "e22bcebc"}}}, @TCF_EM_CONTAINER={0xa8, 0x1, 0x0, 0x0, {{0x43, 0x0, 0x5}, "a641729c87c9ef5e2622d755f517bcd228e570dbcb8bb88aea8ef29b3fe5ad5d44547cf9d74927d9a8c0c2a353c60e10bdb0385b304e34990f86cea29c9eeb0df0232359b52750d1fd111e24f11262c5130bbf5d9a44960e7642b636cd2e124e1e6a896806472bc6d76a24ca7115ba713b95214107285377b014603badfa6ceb97930fbecc7a6509b5c01805df578c7e04d4e17b2a669d64df"}}, @TCF_EM_META={0x14, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x5}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR]}]}}, @TCF_EM_NBYTE={0x18, 0x5, 0x0, 0x0, {{0x5b8, 0x2, 0x7}, {0x17c, 0x5, 0x1, "e2d822c115"}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x6, 0x1, 0x5}, {0x3, 0x80000001, 0x27c, 0x4, 0x2, 0x2, 0x2}}}, @TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_RVALUE={0x4, 0x3, [@TCF_META_TYPE_VAR]}, @TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_RVALUE={0x4}]}}]}]}]}}]}, 0x1bfc}, 0x1, 0x0, 0x0, 0x48080}, 0x0) socket(0x2d, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2c0, 0x300, &(0x7f0000000180)=[0x6bd1a312, 0xec63, 0xd, 0x8, 0x98b9, 0x80000000000000c, 0x0, 0x100000000000004, 0x10000, 0x100, 0xfe51, 0x0, 0x3, 0x5, 0x5, 0x49, 0x3fc, 0x4, 0x0, 0x9, 0x8, 0x7, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x96, 0x1, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x10000000003, 0x2, 0x3, 0x4, 0x8, 0x6, 0x6, 0x8000003, 0xa3de, 0x4e, 0x8, 0x5c3e, 0x400, 0x3, 0xfffffffffffffff3, 0xfffffffffffffff8, 0x2, 0xe, 0x7, 0xfffffffffffffffc, 0xe6, 0x200000000000101, 0x5, 0x100004, 0x63, 0x6, 0x7, 0x40000005, 0x1, 0xc, 0xd, 0x5929, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0x4, 0x2, 0xcdc, 0x7, 0x200000002, 0x3, 0x2, 0x8, 0xffffffff, 0x101, 0x4, 0x6, 0xab6, 0x4, 0x4, 0x1, 0x81, 0xb, 0xff, 0x6, 0xe, 0x5, 0x400000000008061d, 0x3, 0x8, 0xf6, 0x4, 0x4, 0x200, 0xfffffffffffffffc, 0xe53e, 0x2c, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x3, 0x5, 0x1, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x4cb, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb690, 0x3ffc00000, 0x8, 0x3]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000290000fb050000003c"], 0x18}, 0xc044) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m50.028317048s ago: executing program 0 (id=2383): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) read$FUSE(0xffffffffffffffff, &(0x7f00000008c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) setpgid(r0, r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0x104) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x3ff1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r5, r5, r5}, 0x0, 0x0, 0x0) 1m48.561126179s ago: executing program 0 (id=2387): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc, 0x7, {0x0, 0x1f00}}, {0xc}}}]}]}, 0xa0}}, 0x0) 1m48.500024964s ago: executing program 0 (id=2388): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f00000001c0)={0x7, {0x2b96c461, 0x72b9, 0x4, 0x10001}}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0a40, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x80, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) socket$alg(0x26, 0x5, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x3, &(0x7f0000000040)=0xfffe, 0x9) accept4(0xffffffffffffffff, &(0x7f0000000100)=@pptp={0x18, 0x2, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x80800) socket(0xa, 0x3, 0xff) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000180)={'pcmmio\x00', [0x5c25, 0xd, 0x1, 0x0, 0x2, 0x6, 0xc, 0x10001, 0x7ffd, 0xfe, 0x2, 0x1, 0x20000c, 0x403, 0x6, 0x9, 0x1, 0x5, 0x3, 0x40000003, 0x89, 0xfd, 0xb27, 0x0, 0x800b, 0x8, 0x5, 0x8, 0x8, 0x10000, 0xfffffff3]}) 1m31.733891361s ago: executing program 33 (id=2388): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f00000001c0)={0x7, {0x2b96c461, 0x72b9, 0x4, 0x10001}}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0a40, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x80, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) socket$alg(0x26, 0x5, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x3, &(0x7f0000000040)=0xfffe, 0x9) accept4(0xffffffffffffffff, &(0x7f0000000100)=@pptp={0x18, 0x2, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x80800) socket(0xa, 0x3, 0xff) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000180)={'pcmmio\x00', [0x5c25, 0xd, 0x1, 0x0, 0x2, 0x6, 0xc, 0x10001, 0x7ffd, 0xfe, 0x2, 0x1, 0x20000c, 0x403, 0x6, 0x9, 0x1, 0x5, 0x3, 0x40000003, 0x89, 0xfd, 0xb27, 0x0, 0x800b, 0x8, 0x5, 0x8, 0x8, 0x10000, 0xfffffff3]}) 5.407098414s ago: executing program 4 (id=2696): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0a40, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0x4001c00) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000180)={'pcmmio\x00', [0x5c25, 0xd, 0x1, 0x0, 0x2, 0x6, 0xc, 0x10001, 0x7ffd, 0xfe, 0x2, 0x1, 0x20000c, 0x403, 0x6, 0x9, 0x1, 0x5, 0x3, 0x40000003, 0x89, 0xfd, 0xb27, 0x2000, 0x800b, 0x8, 0x5, 0x8, 0x8, 0x10000, 0xfffffff3]}) 5.218390828s ago: executing program 4 (id=2699): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) listen(0xffffffffffffffff, 0x14) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getsockopt(0xffffffffffffffff, 0xc, 0x80, &(0x7f0000000240)=""/49, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = eventfd2(0xe5c, 0x80000) r2 = eventfd2(0x4001, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x2) r9 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) read$ptp(r8, &(0x7f0000000500)=""/81, 0x51) write$cgroup_subtree(r9, &(0x7f0000000300)=ANY=[@ANYRES16=r7], 0x5) r10 = epoll_create1(0x0) r11 = dup(r10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r11, @ANYBLOB="2c7766646e6f3dd91192d7376e1df8cb8f585112ac792123c0d403fc896daf498365230d32cac27423535c39cad53e1a0aa8fa847defe1c765b7453c5103ee8d070abfd3bd2a000000000000", @ANYRESHEX=r10, @ANYBLOB=',\x00']) write$cgroup_subtree(r11, 0x0, 0x60b7c7626cafb4fc) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f00000002c0)={'veth0_vlan\x00', @random='D\x00\x00\x00(E'}) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000100)={r1, 0x40007, 0x2, r2}) 4.152894751s ago: executing program 4 (id=2705): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc}, {0xc, 0x8, {0x0, 0x1000000}}}}]}]}, 0xa0}}, 0x0) 4.092037822s ago: executing program 3 (id=2708): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@qipcrtr, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/226, 0xe2}, {&(0x7f0000000240)=""/38, 0x26}, {&(0x7f0000000180)=""/173, 0xad}, {0xfffffffffffffffe}, {&(0x7f0000000640)=""/208, 0xd0}], 0x5}, 0x800}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x100, &(0x7f0000000340)) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) fcntl$notify(r1, 0x402, 0x2b) r2 = open$dir(&(0x7f0000000980)='./file0\x00', 0x0, 0xc8) getdents(r2, &(0x7f00000009c0)=""/248, 0xf8) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0xfffe}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250301f2800c00180008ac0f00000000001400010000000000000000000000ffffac"], 0x114}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001080)={0x0, 0xfd7b, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r1, @ANYRES16=r2], 0x6c}, 0x1, 0x0, 0x0, 0x20008840}, 0x80) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="280000000306010800000000000000000200000305000100070000000900020073797a32"], 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x40080d0) 4.09178911s ago: executing program 4 (id=2709): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000100)=0x1, 0x12) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000000000300850000008700000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000200)="1000110ec1e9abc89b0046b30000", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x3c) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f00000001c0)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r9 = socket$nl_route(0x10, 0x3, 0x0) bind$rds(r7, &(0x7f0000000240)={0x2, 0x4e24, @private=0xa010101}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)=ANY=[@ANYBLOB="3c00000010000304000000000000598a8e0000e30000bc6ccb629095cf2387f6ca80fa5f9ba277ec7e3cf5b066dd7eee3e1ebbe63963b2eb33cba573d29530c2c649f202088e09b48a9c58216bb0fdec5ac04df01035184756e3d863d579a729124b9fadb07466d8f55d26795fae6dfa59c02886495bf76308fcc1741025cb9bc1f5", @ANYRES32=0x0, @ANYBLOB="a4280400000800001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r8, @ANYBLOB], 0x3c}}, 0x8000) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000004c0)={0xffe, 0x5, 0xa6a, "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"}) syz_emit_ethernet(0x3a, &(0x7f0000001c00)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500002c0002000000119090780400000007740000fdffffffffffffffc7738cd9e9026ecba4b22c"], 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macsec0\x00'}) 3.38689s ago: executing program 4 (id=2712): socket$netlink(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 3.025089613s ago: executing program 5 (id=2713): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000c80)=[{&(0x7f0000000380)=@in={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1c"], 0x1c, 0x40001}], 0x1, 0x80) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='ntfs3\x00', 0x1000080, 0x0) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x24) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x8, 0x8002}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r6, 0x0, 0x0}, 0x20) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) r7 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) ioctl$TCSETSF(r7, 0x5404, &(0x7f0000000000)={0xe, 0x3a, 0xcbd, 0x10000, 0x18, "f068004507507478e7432c95cc5e8d05e536b8"}) ioctl$VIDIOC_G_EXT_CTRLS(r7, 0xc0185647, &(0x7f0000000240)={0x9e0000, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x990a75, 0x6, '\x00', @ptr=0x5}}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0x10, 0x0, r7, 0x0, &(0x7f0000000280)='./file0/file0\x00', 0x40}) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb, 0x6}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffdb9}, 0x48) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @random, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x14, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0) syz_open_dev$vim2m(&(0x7f0000000180), 0x9, 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r8}, &(0x7f00000000c0), &(0x7f0000000100)='%pK \x00'}, 0x1c) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000206030000000000000000000100000711000300686173683a69702c706f7274000000000c00078008001240fffffffc0900020073797a3100000000050004000100000005000100070000000500050002"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) 2.563847544s ago: executing program 1 (id=2715): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@deltfilter={0x1b68, 0x2d, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2, 0xffff}, {0xe, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x1b38, 0x2, [@TCA_CGROUP_POLICE={0x454, 0x2, [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xc7c99d8, 0x10001, 0x0, 0x7fffffff, 0x9, 0xd, 0x7, 0x4, 0x4, 0x7, 0x80000001, 0x0, 0x5, 0x3, 0xffffff34, 0x0, 0x7, 0xffffffff, 0x4, 0x6, 0x9, 0x3, 0x2, 0x34e, 0x88a, 0x8, 0x1, 0x1, 0x3ff, 0x206c, 0xfffffffa, 0x9, 0x2, 0x5, 0x90d, 0x0, 0xffffffff, 0x1f, 0x8, 0x7, 0x9, 0x3, 0x8, 0x8, 0x10000, 0x7fff, 0x1, 0x9, 0x8cea5f96, 0x100, 0x4, 0x891c, 0x1, 0x8, 0xc785586c, 0x4, 0x7fffffff, 0x2, 0x9, 0x7b, 0x7, 0x9, 0x2, 0xd5a, 0x7, 0x9, 0x0, 0xfd4d, 0xffffffff, 0xfffffff6, 0x66, 0x6, 0x5, 0x0, 0x9, 0x6, 0x2, 0x8, 0x2, 0x67, 0x2, 0x80000001, 0x2, 0xe0000000, 0x6, 0x1, 0x8, 0x0, 0x8, 0xfffffffb, 0x200, 0x2, 0x0, 0x9, 0x5, 0x5, 0x9, 0x5, 0x74, 0xae, 0xdb, 0x4028eba2, 0x6, 0xfffffffe, 0x6, 0x0, 0xfffffffd, 0x5, 0x3ff, 0x4, 0x8, 0x2, 0x8, 0x6f, 0x6, 0x7, 0x9, 0x7, 0xfff, 0xfffffff9, 0x7fffffff, 0x9, 0x0, 0x2, 0xff, 0x2, 0x2, 0xe30, 0x200, 0x200, 0x5, 0x7, 0x0, 0xc, 0xa3, 0x5, 0x1, 0x5, 0x4, 0x5, 0x3, 0xbbd9, 0x8000, 0x5, 0x5a8ea34b, 0x2, 0xfffffff7, 0x57c, 0x8de, 0x7, 0x6, 0x2a8, 0x4, 0x67, 0x8, 0x8, 0x0, 0x1ff, 0xd, 0x5, 0x4, 0x101, 0x1000, 0x8e5, 0x1, 0x9, 0x5, 0x2, 0x87, 0x4, 0x1, 0x0, 0x7, 0x7a, 0x0, 0x76, 0x4, 0xff, 0x5, 0x7, 0x5, 0x0, 0x5, 0xb, 0xe, 0x200, 0x6, 0x8, 0x7, 0x5, 0xb16f, 0xff, 0x7, 0x3, 0xfdb1, 0xffffffff, 0x100, 0x10001, 0x2, 0x80, 0x7ff, 0x5, 0x3, 0xe02c, 0xe, 0x7ff, 0xfffffff9, 0x1bff, 0x6, 0x5, 0x5, 0x3, 0x44, 0x1, 0x2, 0x8, 0x4, 0x423, 0x0, 0x6, 0x7, 0x2, 0x2, 0x1b68, 0xffffffff, 0x81, 0x20ca, 0x18b, 0x1, 0x1, 0xe0f, 0xffff, 0x3, 0x8, 0x3, 0x401, 0xe, 0x7fffffff, 0x8cb6, 0x0, 0x4, 0x7, 0x2, 0xbb6, 0x7fffffff, 0x3, 0x3, 0x101, 0x7ff, 0x40, 0x0, 0x7, 0x6, 0xfffffff9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x401}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x25}]}, @TCA_CGROUP_ACT={0x1430, 0x1, [@m_ife={0xa0, 0xc, 0x0, 0x0, {{0x8}, {0x64, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x20, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x8}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0x4550, 0x20000000, 0x62d, 0x4}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0x6}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x62b, 0x3, 0x8, 0x1}, 0x1}}]}, {0x18, 0x6, "c6dc3c3249336690f7c4ce9e4a48567bb93ce94e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_nat={0x1e8, 0x1d, 0x0, 0x0, {{0x8}, {0x144, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x5, 0x10000000, 0x0, 0x6}, @private=0xa010102, @loopback, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x101, 0x0, 0x7, 0xa00, 0x5}, @dev={0xac, 0x14, 0x14, 0x3f}, @private=0xa010102, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1fc00, 0x1c2, 0xffffffffffffffff, 0x8, 0x5}, @multicast1, @empty, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xd, 0x5, 0xfffffffd, 0x2}, @multicast1, @rand_addr=0x64010100, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xed39, 0x2008001, 0x20000000, 0x7, 0x9}, @remote, @rand_addr=0x64010100, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0xfffffff9, 0x6, 0x80, 0x4}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x1, 0x7, 0x5, 0xb4b}, @broadcast, @remote, 0x8c8b19b1f669ee6f}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xc, 0x5, 0xf324, 0x5}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0x1}}]}, {0x7e, 0x6, "686e0c104b673c4250dcfdef31d193861ff0d7d898bbf9e3d96d43de5a681adfb43286cda3b7cbadc1e4cdff1e67d8bcfd8869e9282aae82226020faf634452e14e030801905cce7a1ce008f58cf17f880ef58d724365216d77af768cd39647c0581d2a3223c2cdb43c079ca92bfc23c4b53f37cf0c60f850426"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_pedit={0xf40, 0x11, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0xc4c, 0x551, 0x2, 0x8001, 0x6}, 0x16, 0xff, [{0x7, 0x0, 0x9, 0x8, 0x7, 0x8}]}, [{0x3, 0xffff, 0x0, 0x189, 0x7, 0x2}, {0x4, 0x80, 0x1, 0x3, 0x9, 0x3ff}, {0xbac2, 0x4, 0x5, 0x1, 0x200, 0xea05}, {0x101, 0x2, 0xeb, 0x2, 0xb, 0x6}, {0x400, 0x94, 0x8, 0x3, 0x10, 0xc}, {0x6, 0x5, 0x9, 0xffffffff, 0xe057, 0x1ff}, {0x40000000, 0x1, 0xfbf4, 0x5, 0xa5, 0x5}, {0x34988b73, 0x6, 0x8000, 0x7, 0x3, 0x6}, {0x9, 0xae8, 0x6, 0x7, 0x5, 0x80000001}, {0x7, 0x8, 0x1000, 0x80, 0x2, 0x10}, {0x9, 0x3, 0x3, 0x6, 0x3a54, 0x7}, {0xfffffff8, 0x6, 0xb, 0x4, 0x3, 0x8}, {0x401, 0x200, 0x9, 0x3, 0x4, 0x6}, {0x9, 0xa8d, 0xa3, 0x0, 0x8001, 0xfffffff9}, {0x1c, 0x8, 0x2, 0x2, 0x9, 0x1ff}, {0xffffffff, 0x2, 0xfffffff7, 0x1, 0x1, 0x4}, {0x7c8, 0x0, 0xb2f, 0x4, 0x8001, 0xfffffffb}, {0x3, 0xfff, 0x1000, 0x7, 0x9, 0x7}, {0x5, 0x8000, 0x1000, 0x9, 0xd14, 0xfffffff9}, {0x2, 0x5, 0x2, 0x5, 0x800, 0x8}, {0x0, 0xbc, 0x4, 0x2, 0x8000, 0x3}, {0x5, 0x5, 0x9, 0x8001, 0x20003, 0x2}, {0x1, 0x7, 0x9, 0xffffffbf, 0xffffff03}, {0x6, 0x1, 0x7ff, 0x2, 0x9d, 0x7}, {0x6a, 0x1000, 0x8, 0x9, 0x18, 0xfffffff8}, {0x30, 0x5, 0x5, 0xbc3, 0x8, 0xffffffff}, {0xf4, 0x7, 0x81, 0x9, 0x1, 0x1}, {0x1000, 0x8, 0x3, 0xfffffffd, 0xff, 0x9}, {0x8, 0x0, 0x8, 0xba8, 0x2, 0x8}, {0x1, 0x80000000, 0xfffff651, 0x4, 0x1, 0x9}, {0x5, 0x7, 0x5, 0x91f9, 0x200}, {0x9, 0x83, 0x100, 0x1, 0xffff, 0x2}, {0x0, 0x0, 0x7fffffff, 0x97cc, 0x8, 0x6}, {0x5, 0x537e7dea, 0x5, 0x6, 0x4, 0x4}, {0x6d8d, 0xfffffffb, 0x5, 0x10001, 0x9, 0xc}, {0x8, 0x6, 0x1, 0x3, 0x2, 0x200}, {0x3, 0x10, 0x69, 0x3, 0x6, 0x2}, {0x7, 0xa2dd, 0xff, 0x8, 0xf61, 0x6}, {0x34d4, 0x2, 0x9, 0x1e1, 0x3, 0x1}, {0x4, 0x564b, 0x28, 0x9, 0x3, 0x1}, {0x1000200, 0x1, 0x7, 0xd513, 0x5, 0x8}, {0x0, 0x7fff, 0x0, 0x2, 0x5, 0xfffffffc}, {0x4, 0xcc5, 0x1000, 0x7, 0x80, 0x2}, {0x9, 0x6, 0x1ff, 0x515, 0x15, 0x81}, {0x5, 0x0, 0x2, 0xfffffffc, 0x8, 0x400}, {0x8, 0x1, 0x40, 0x1ff, 0x5, 0x6}, {0x8bf, 0x6, 0x7fffffff, 0x3, 0x6, 0x4}, {0x80000001, 0x88, 0x800000, 0x2, 0xffff8001, 0x2}, {0x9, 0x7, 0x3, 0x4, 0x8, 0x4}, {0xfffffffa, 0x9, 0x1b6b, 0xf, 0x80, 0x94}, {0x200, 0xfffff378, 0x8, 0x3, 0x7, 0x7}, {0x2, 0x3, 0x80000001, 0x0, 0xfffffffe, 0x6}, {0x2, 0xfff, 0x9, 0x2, 0x4, 0x3}, {0x1000007, 0x80000001, 0x6, 0x9, 0xfffffbff, 0x5}, {0x0, 0x447, 0x8, 0x7, 0x44, 0x5}, {0x7fff, 0x8, 0x9, 0x4, 0x40, 0x3}, {0x1, 0x4, 0x252, 0x10, 0x0, 0x8}, {0x6, 0x4, 0x3, 0xa7, 0x4, 0x4}, {0x5, 0x7, 0x2, 0x7, 0xfffff000, 0x4}, {0x1cc, 0x5, 0x48, 0x5, 0x6, 0x80}, {0x0, 0x5, 0x0, 0xfffa}, {0x3, 0xdc0, 0xe, 0x0, 0x6}, {0x5504, 0x55, 0x21, 0x4, 0x0, 0x1}, {0x4c, 0x1, 0x7f, 0xc44, 0x7fffffff, 0x2}, {0xfffff644, 0x49d, 0x0, 0x0, 0x8001, 0x5}, {0x7, 0x6, 0x9, 0x1, 0x6, 0x9}, {0x0, 0x6c800, 0x0, 0x558, 0x5, 0x5}, {0x6, 0xbc, 0x4, 0x3, 0x2, 0xfffffffe}, {0x2, 0x2, 0xffff, 0x4, 0x7}, {0x0, 0x10001, 0x0, 0x6, 0x8001, 0x1}, {0x2, 0x861, 0x10001, 0x80, 0x0, 0xfffffffd}, {0x8, 0x5, 0x7f0, 0x5, 0x5, 0x4}, {0x38, 0xfffffffd, 0x2, 0x3, 0x9, 0x7}, {0x8, 0x8, 0x5, 0x3, 0xbcd9, 0x3}, {0x11be, 0x5, 0x0, 0x7, 0x4, 0x80000000}, {0xd9, 0x6, 0x7fff, 0x4, 0x7, 0x9c7}, {0x100, 0x7, 0x5, 0x800, 0x3, 0x9}, {0xffffff80, 0x0, 0x4, 0x8000, 0x5, 0x3}, {0x8000, 0x8, 0x200, 0x3, 0x200, 0xffffffff}, {0x400, 0x40000000, 0x6, 0xae, 0xfff, 0x81}, {0x4, 0x8, 0x10001, 0xb, 0x9, 0xfa4a}, {0xa2f, 0xfffffff9, 0x0, 0xfba, 0x9, 0x7ff}, {0xe3fa, 0x4, 0x3, 0x5, 0x2, 0x5d}, {0x1, 0xb1f, 0x0, 0x0, 0x8, 0xcf}, {0x0, 0x0, 0xe294, 0x8, 0xe996, 0x3}, {0x4, 0x8, 0x9, 0x3ff, 0x80000001, 0x8}, {0x6a4f, 0x3, 0x3, 0x6, 0xffffffff, 0x1}, {0xf, 0xe3, 0x1, 0x4, 0x6, 0x9}, {0x3, 0x2, 0x9, 0x7fff, 0xe9e, 0xffffffff}, {0x1, 0x0, 0xe5, 0x25, 0x8, 0x829}, {0x7fffffff, 0x7fff, 0xf, 0x3, 0xe, 0xfffffff7}, {0x9, 0x8, 0x3, 0x10000, 0x3, 0xe}, {0x23, 0x8, 0x0, 0x6, 0x9f3, 0x8}, {0x9, 0x8, 0x101, 0x10, 0x1, 0x7}, {0x3, 0x4, 0x0, 0x0, 0x7, 0x7}, {0x6, 0x100, 0x0, 0x2, 0xfffffffe, 0x4}, {0x6, 0x10001, 0x200, 0x2, 0x9, 0x100}, {0x9, 0x1, 0x4, 0x1000, 0x9, 0x7}, {0xfffffff4, 0x6, 0x1, 0x7, 0x5, 0xfffffff7}, {0xb, 0x3, 0x3, 0x40, 0x6, 0x31}, {0x80000000, 0x75, 0x8001, 0x6, 0x3}, {0x6, 0xfffffffa, 0xfff, 0x8001, 0x4ea3, 0x13}, {0xffffffff, 0x401, 0x6, 0xda83, 0x80000001, 0xa}, {0xd49a, 0x9, 0x9, 0x2, 0x6, 0x4}, {0xfffffffc, 0x80000000, 0x8, 0x80, 0x9}, {0xfffffff4, 0x2, 0x2, 0x2, 0x5, 0x7f}, {0x2, 0xfffff0b3, 0x5, 0x4, 0x400, 0xe8}, {0x3, 0x7, 0x8, 0xf, 0x3, 0xfffffff9}, {0xc85, 0x3, 0x158c, 0xd, 0x4, 0x2}, {0x9, 0x7, 0x7, 0x1, 0x1, 0x40}, {0x200, 0x4ad095db, 0x8, 0x4, 0x43a, 0x1}, {0x5, 0x5, 0x9, 0x4, 0xcd, 0x8}, {0x9, 0x80000000, 0x7c5e, 0x77, 0x3d1, 0x5}, {0x0, 0x6, 0x9, 0xa5b8, 0x7, 0x5b0}, {0x90, 0x4, 0x8000, 0x10000, 0x8}, {0x2, 0x7fff, 0xf, 0x2, 0x8, 0x3}, {0x1, 0x5, 0xa4bb, 0x1, 0x3, 0x7}, {0x3, 0x3, 0xa, 0x4, 0x2, 0x6}, {0x4, 0x0, 0x9c, 0x6fb4, 0xdf, 0x3}, {0xfffffff8, 0xf, 0x5, 0x1, 0x9, 0x2}, {0x3, 0x91a, 0x7, 0x7fff, 0x6, 0xffff}, {0x6, 0x5e, 0xffffe3be, 0x9, 0xcd1, 0x3}, {0x400, 0x4, 0x79f00cee, 0x9, 0x40, 0x3ff}, {0x2, 0x7, 0xffffffff, 0x3, 0x1000, 0xb6f}, {0x57, 0x4, 0x8, 0x6, 0x7, 0x7f}, {0x9, 0x1, 0x4, 0xffffffff, 0x9, 0xb459}, {0x5, 0x9, 0x189, 0x0, 0x4}, {0x8, 0x2, 0x4f9f, 0x3, 0x800, 0x401}], [{0x2}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2}, {0x3}, {0x1, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x5}, {0x1}, {0x4}, {}, {0x5, 0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x3, 0x3}, {0x4}, {0x4}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x3}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {}, {0x1}, {0x1, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x0, 0x2}, {0x5}, {0x3}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x4}, {0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x2, 0x1}, {0x5, 0x53d0e78fb1749b20}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x3}, {0x0, 0xa0f94a89673f6485}, {0x4}, {0x5}, {0x4, 0x1}, {0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x2}, {0xd, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x36e2d0da2d610288}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x3}, {}, {0x1}, {0x1, 0x1}, {0x2}], 0xff}}]}, {0xd9, 0x6, "3739d693f22d31e5fb60854e878b79c8e0a0cb660859040693bc7273de2a205c05c9dd9e6d4a4832a2f71bb177f092827e37fd74ec3dcf6da0464df55ad5f2b6cd70b838ac96e26dc6e3b4aafe86f358f9857609efe76a61046af31c4a777d81b6f5202ce2649e86b6f2bc50a10e3a38dd7a558504039fdaa900beb7f40204a55b9e1f308bb3544d066700f642db657905ebbb26c446745ed576e1ecb8eca6797048da88e97b11ff18a7a1fd9e60596e005a01b8434a514b5e701931aebf2042485bf229a5394c007e46de0381f4871030b1fcadbe"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_xt={0x264, 0xb, 0x0, 0x0, {{0x7}, {0x1d4, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x9c, 0x6, {0x2000, 'nat\x00', 0x92, 0x5, "8747397b0cffffbd6b17f1d30e5facc4ba680e71ca1855dde5224a83eb12816fb535d6ef72d00c374d492d6925db024824fca66b37b5929f6eb7a85257be761e5985ad6a625d2617ece0bc5696c5e80c7f68f95ad88e6e308e2c10bf4b98955dc4e023d4f29a431f8e451a6bf3b42e616948"}}, @TCA_IPT_TARG={0x10d, 0x6, {0x3, 'filter\x00', 0x7, 0x7, "7ca63c0bafa93cb06d9c341c1ebf3a4c3a3a39c645a0756320b1fb6acfd034cbf8ff0d9f9e8726dbff3aacacbd00123daec55d474b57e1808f0a7940e9f34333f449d7c40c707d3cc4a42b4c10923d3687e0df0375b6cdd847f17282909ac6e77e96f7805651c1d6724eb2073d07a5ad348496f241019055548cdc6c4df3dc7432077b1118c972eeea068bddf14fbef7c39cb192f95bb1adf4d9f53eacd5d3ff4c4224a8f75521441a91dbd88a514708460de03c5b9b0ad763ce738332e40096326ad5bf02565d523290cc63d88bbf62eff58b4d069ec868df2830e0e9ed5b0ca62d02"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x6b, 0x6, "b4d7c6f2b14d607b111513476d4af420f755889e39353cb9f6737c719107fd3cd99cd31e6f4d2ff3a229ecd62a58f818c790c03dcae57b1e63df68ef6dd375906917309852f3d52c43ff30ee88237a182869eb218ebfb6b6f770f7312c906db47bced2c03f1d6f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_CGROUP_EMATCHES={0x2b0, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x58, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x4, 0x7, 0x1ec8}, {{0x4, 0x1, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x202}, {0xffffffffffffffff}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8ae, 0x7, 0x9}, {{0x4, 0x1, 0x1, 0x1}}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x8001, 0x3, 0x9}, {0x81, 0x9, 0x4, 0x80}}}]}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xa, 0x3, 0x9}, {0x0, 0x344, 0x6}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_LIST={0x190, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xffff, 0x1, 0x98d3}, {0x7, 0x8, 0x6, 0x5, 0xc, 0x2}}}, @TCF_EM_IPT={0x164, 0x2, 0x0, 0x0, {{0x1000, 0x9, 0x5}, [@TCA_EM_IPT_MATCH_DATA={0xbd, 0x5, "5829b535353b720b2247afb8c728a6f3a07f88627ad8e343033de10817941eaf329c8c062136958ce6888baf955997d8bab6fc434b37161e8981adb273e95ab8d981697ccddd331881bf8ae8b63b79cb4fdec2c32a23dc43cbf3f1767cd50e4f105f23e07e517bc9fd0f330e01c69bbc797dade919957d4962909ab6f5885e344f21ee511e67f5a23fc1f5d5da16d3e70a504fefc9b6cacf1ff50ff78ef1a7e88d1a21fec4db7c89d65a88e279e151867ca63363054619b013"}, @TCA_EM_IPT_MATCH_DATA={0x12, 0x5, "90a3b603effaa9d66558bb972fcf"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x7b, 0x5, "7e018e7b16706fdb26a42bbac9ea0dfbf3d219ed953a60cb2364b4761391ee637fb90ffe656e0031534adeebdfdff97294501d0ab4065fc87d9d1563a2eb0c340ac46d55a80dee0e419b56849d7efc038a70cc6ce4a2e4eaec82334ba9d454d37fd08caf1f76f3eb38fc42aa93901b88abef4c862dd748"}]}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{}, {0x2, 0x2, 0x7}}}]}, @TCA_EMATCH_TREE_LIST={0x94, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0xe6, 0x2, 0x7}, {0x4, 0x4, 0x1, "e22bcebc"}}}, @TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x43, 0x0, 0x5}}}, @TCF_EM_META={0x14, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x5}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT]}]}}, @TCF_EM_NBYTE={0x18, 0x5, 0x0, 0x0, {{0x5b8, 0x2, 0x7}, {0x17c, 0x5, 0x1, "e2d822c115"}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x6, 0x1, 0x5}, {0x3, 0x80000001, 0x27c, 0x4, 0x2, 0x2, 0x2}}}, @TCF_EM_META={0x2c, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_RVALUE={0x9, 0x3, [@TCF_META_TYPE_VAR="05bdcca73d"]}, @TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_RVALUE={0x4}]}}]}]}]}}]}, 0x1b68}, 0x1, 0x0, 0x0, 0x48080}, 0x0) socket(0x2d, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2c0, 0x300, &(0x7f0000000180)=[0x6bd1a312, 0xec63, 0xd, 0x8, 0x98b9, 0x80000000000000c, 0x0, 0x100000000000004, 0x10000, 0x100, 0xfe51, 0x0, 0x3, 0x5, 0x5, 0x49, 0x3fc, 0x4, 0x0, 0x9, 0x8, 0x7, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x96, 0x1, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x10000000003, 0x2, 0x3, 0x4, 0x8, 0x6, 0x6, 0x8000003, 0xa3de, 0x4e, 0x8, 0x5c3e, 0x400, 0x3, 0xfffffffffffffff3, 0xfffffffffffffff8, 0x2, 0xe, 0x7, 0xfffffffffffffffc, 0xe6, 0x200000000000101, 0x5, 0x100004, 0x63, 0x6, 0x7, 0x40000005, 0x1, 0xc, 0xd, 0x5929, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0x4, 0x2, 0xcdc, 0x7, 0x200000002, 0x3, 0x2, 0x8, 0xffffffff, 0x101, 0x4, 0x6, 0xab6, 0x4, 0x4, 0x1, 0x81, 0xb, 0xff, 0x6, 0xe, 0x5, 0x400000000008061d, 0x3, 0x8, 0xf6, 0x4, 0x4, 0x200, 0xfffffffffffffffc, 0xe53e, 0x2c, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x3, 0x5, 0x1, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x4cb, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb690, 0x3ffc00000, 0x8, 0x3]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000290000fb050000003c"], 0x18}, 0xc044) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.561896904s ago: executing program 3 (id=2716): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000206030000000000000200000100000711000300686173683a69702c706f7274000000000c00078008001240fffffffc0900020073797a3100000000050004000100000005000100070000000500050002"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) 2.479737953s ago: executing program 1 (id=2717): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) listen(0xffffffffffffffff, 0x14) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getsockopt(0xffffffffffffffff, 0xc, 0x80, &(0x7f0000000240)=""/49, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) eventfd2(0xe5c, 0x80000) eventfd2(0x4001, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000040)=@get={0x1, &(0x7f0000000580)=""/163, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) getpriority(0x2, r3) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x2) r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) read$ptp(r7, &(0x7f0000000500)=""/81, 0x51) r9 = socket$inet6(0xa, 0x5, 0x81) setsockopt$inet6_int(r9, 0x29, 0x46, 0x0, 0x0) write$cgroup_subtree(r7, &(0x7f0000000400)=ANY=[@ANYRES64=0x0], 0x5) write$cgroup_subtree(r8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f00000002c0)={'veth0_vlan\x00', @random='D\x00\x00\x00(E'}) 2.479364157s ago: executing program 3 (id=2718): syz_open_dev$usbfs(&(0x7f0000000040), 0xb, 0x101301) (async) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xb, 0x101301) unshare(0x22020400) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) (async) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000280)='memory.pressure\x00', 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendfile64(r4, r3, 0x0, 0x8) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000bc0)=@newtaction={0x48, 0x30, 0x48b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000bc0)=@newtaction={0x48, 0x30, 0x48b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}}, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) (async) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) (async) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x141440, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b837364b2b3a860a058e52ed6dbd5d88c00a44cf1f0ae77fc380ee79798a0005b8045dea6f2b9647d04c3ad2fc5d841fc3d664890b377b09fcc36d25514f09ba9a4c", @ANYRESOCT=r6, @ANYBLOB="010002000020fedbdf252500000008000300", @ANYRES32=r9, @ANYBLOB="08002600161700000a00060050505050505000000800350000000000080026001b170000080022014002000008009f000100000011000700cfa87c7b", @ANYBLOB="a7683a2b4f51ebb4d13491249e02ddec7acb30e86a6cd84cf37d71d0c1dfd848cf75d63ab5edabd2be580b0777c0c59db691aa5d7ca73df2fbc0d69de13aec30c8fe060f8258b02b74e658da1c93be50aaebb8508abf0a10fa075ce0", @ANYRESHEX=r8, @ANYRES32=r7], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x2) (async) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b837364b2b3a860a058e52ed6dbd5d88c00a44cf1f0ae77fc380ee79798a0005b8045dea6f2b9647d04c3ad2fc5d841fc3d664890b377b09fcc36d25514f09ba9a4c", @ANYRESOCT=r6, @ANYBLOB="010002000020fedbdf252500000008000300", @ANYRES32=r9, @ANYBLOB="08002600161700000a00060050505050505000000800350000000000080026001b170000080022014002000008009f000100000011000700cfa87c7b", @ANYBLOB="a7683a2b4f51ebb4d13491249e02ddec7acb30e86a6cd84cf37d71d0c1dfd848cf75d63ab5edabd2be580b0777c0c59db691aa5d7ca73df2fbc0d69de13aec30c8fe060f8258b02b74e658da1c93be50aaebb8508abf0a10fa075ce0", @ANYRESHEX=r8, @ANYRES32=r7], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x2) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="0102000000000b0000006700000008000300", @ANYRES32=r11, @ANYBLOB="0800c300741300000800c400010000000400c5"], 0x30}}, 0x0) r12 = userfaultfd(0x80001) ioctl$UFFDIO_API(r12, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x1c}) (async) ioctl$UFFDIO_API(r12, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x1c}) read(r12, &(0x7f0000000200)=""/145, 0x91) ioctl$UFFDIO_REGISTER(r12, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) 2.009894856s ago: executing program 5 (id=2719): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) lseek(r0, 0x8, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r0, 0x6, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x12, 0x4, "f57e5ef15120e9d21adb0e79d37720bb28b999428d5d85b4a9846f4dedf2e92a0f427aec0ae75722f07e34c4d78272579da906824a2e49e1631f576df3863f52", "a9480e105e4a8ec7614ef0a300adcdd468850ddd0c93672f883f718dd7bea252ed2cf90d5b17886a3f91af2e0af34375025c0bcac54527442c3f967f62287558", "ee701d78ca0365bd067d3fe452c791bf24d0bd081ab93ee29278e75514a11bdc", [0x10001, 0x5]}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0ffb}]}) acct(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000540)={0x2b8, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xaa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa60}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}]}, @TIPC_NLA_MEDIA={0x24, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x409}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "39c18a59fa03ca8125fff849e000b8b642dcda1a523df3b784a95335867eae"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_NODE={0xa8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "dbe04c0b0842ef2943385d41795ac23cf39d5baaefccb7537d2554"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "26895faec117039c3cadbe342c6914c37ba7a43dc429be3671b5b49cae969a3ad0c35213"}}]}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x20000080}, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 1.895433036s ago: executing program 5 (id=2720): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000100)=0x1, 0x12) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000000000300850000008700000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000200)="1000110ec1e9abc89b0046b30000", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x3c) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f00000001c0)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r9 = socket$nl_route(0x10, 0x3, 0x0) bind$rds(r7, &(0x7f0000000240)={0x2, 0x4e24, @private=0xa010101}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)=ANY=[@ANYBLOB="3c00000010000304000000000000598a8e0000e30000bc6ccb629095cf2387f6ca80fa5f9ba277ec7e3cf5b066dd7eee3e1ebbe63963b2eb33cba573d29530c2c649f202088e09b48a9c58216bb0fdec5ac04df01035184756e3d863d579a729124b9fadb07466d8f55d26795fae6dfa59c02886495bf76308fcc1741025cb9bc1f5", @ANYRES32=0x0, @ANYBLOB="a4280400000800001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r8, @ANYBLOB], 0x3c}}, 0x8000) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000004c0)={0xffe, 0x5, 0xa6a, "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"}) syz_emit_ethernet(0x3a, &(0x7f0000001c00)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500002c0002000000119090780400000007740000fdffffffffffffffc7738cd9e9026ecba4b22c"], 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macsec0\x00'}) 1.603569943s ago: executing program 5 (id=2721): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc}, {0xc, 0x8, {0x0, 0x8000000}}}}]}]}, 0xa0}}, 0x0) 1.603165109s ago: executing program 5 (id=2722): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) syz_usbip_server_init(0x6) read$FUSE(0xffffffffffffffff, &(0x7f00000008c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) setpgid(r0, r2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x3ff1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r3, r3, r3}, 0x0, 0x0, 0x0) 1.512210777s ago: executing program 1 (id=2723): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x2e, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xda}, {}, {}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x8}, @alu={0x7, 0x0, 0x0, 0xb, 0x6, 0x0, 0xfffffffffffffffc}, @ldst={0x0, 0x2, 0x1, 0x8, 0x1, 0x18, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @map_fd={0x18, 0x5}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x1}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a3000000000080041007369770014003300766c616e310000000000000000000000bfdb60c594546c18e604a6739d4acce8854f579770a4d89d81c4645cdde5b7bedcb85a7a629182bb31cbe7ac1adbd92f3a1eadf5a9702a96f7c41212f64802f41ce190e624cd68c53f7292307f0d8e3d98f880fdfaa8df92d67030c7ff61d0262ae765c2386918945330eec547780e69481f55086dc3ef703b43ad9a7e60e74e3c138558f7b93d2f7569c0906ce495ce256879d8ccaaf37acc62e4f94c2dae9b"], 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x14, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r3, @ANYBLOB="a4a201f4939c383fd44e41d0aa4e999c5222be733acfb118ad2f306db817800869ea65c94b3292f6f55c6842073e50afc9100c8be1060fc7ffc73ab6a6af09acaaf16b0b5e20699ee46a57f0a0fe5b839373f041d6acd83b033d9c9bef50a57480f0cbe07601c956a89a651bec77bb19b239935167b45d2066ac2477a45ba793e13a88d8a0b8d170d026ad8ecf8ddc23a2254d323204d8a39bfec95c6abfd5d5450931e62eb1b7134c7e109c"], 0x40}}, 0x0) r4 = gettid() r5 = syz_open_procfs(r4, &(0x7f0000000500)='status\x00') r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) dup2(r6, r6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x2) syz_open_procfs(0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) open$dir(0x0, 0x0, 0x1) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="ad4300000000000020c015"], 0x14}, 0x1, 0x0, 0x0, 0x1004}, 0x2) read$FUSE(r5, &(0x7f0000003440)={0x2020}, 0x2020) 1.505422167s ago: executing program 1 (id=2724): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000004, 0x3}, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000300)={0x2, 0x0, [{0x250, 0x0, 0x100000001}, {0x25d, 0x0, 0xf35}]}) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async) r4 = syz_open_dev$vim2m(0x0, 0xa, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000140)={0x0, 0x34324142, 0x2, @discrete={0x1, 0x401}}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, 0x0, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00e5617acbb797cb06558569073bb359dd4a396c706fe40105a6d11569b7c9211eb54774a4ce9e304a2a5cdd88fd37a03181e38b4561199c105285f332f9e84234c2bc5da25a6a92934fa7aac69bda3adf904ff6910e43db4b9ba97e56c38d785253e4fe90ad742f55c569e9827d4afc1facfba79fa57f432b2bad8ec5", @ANYRES16=r6, @ANYBLOB="010027bd60000400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000500130001000000"], 0x3c}}, 0x20) (async) r8 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r8, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r8, 0x0) ioctl$KVM_CAP_HYPERV_TLBFLUSH(r2, 0x4068aea3, &(0x7f0000000400)) (async) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) (async) modify_ldt$write(0x1, &(0x7f0000000000)={0xfff, 0x100000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000080)={0xd7, 0x1000, 0x2000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() 1.399461734s ago: executing program 3 (id=2725): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@qipcrtr, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/226, 0xe2}, {0x0}, {&(0x7f0000000180)=""/173, 0xad}, {0xfffffffffffffffe}, {&(0x7f0000000640)=""/208, 0xd0}], 0x5}, 0x800}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000580)=""/154, 0x9a}, {0x0}, {&(0x7f0000000840)=""/22, 0x16}], 0x3}, 0x3}], 0x2, 0x100, &(0x7f0000000340)) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) fcntl$notify(r1, 0x402, 0x2b) r2 = open$dir(&(0x7f0000000980)='./file0\x00', 0x0, 0xc8) getdents(r2, &(0x7f00000009c0)=""/248, 0xf8) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0xfffe}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250301f2800c00180008ac0f00000000001400010000000000000000000000ffffac"], 0x114}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000001080)={0x0, 0xfd7b, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r1, @ANYRES16=r2], 0x6c}, 0x1, 0x0, 0x0, 0x20008840}, 0x80) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="280000000306010800000000000000000200000305000100070000000900020073797a32"], 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x40080d0) 1.17518116s ago: executing program 1 (id=2726): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@deltfilter={0x1b68, 0x2d, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2, 0xffff}, {0xe, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x1b38, 0x2, [@TCA_CGROUP_POLICE={0x454, 0x2, [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xc7c99d8, 0x10001, 0x0, 0x7fffffff, 0x9, 0xd, 0x7, 0x4, 0x4, 0x7, 0x80000001, 0x0, 0x5, 0x3, 0xffffff34, 0x0, 0x7, 0xffffffff, 0x4, 0x6, 0x9, 0x3, 0x2, 0x34e, 0x88a, 0x8, 0x1, 0x1, 0x3ff, 0x206c, 0xfffffffa, 0x9, 0x2, 0x5, 0x90d, 0x0, 0xffffffff, 0x1f, 0x8, 0x7, 0x9, 0x3, 0x8, 0x8, 0x10000, 0x7fff, 0x1, 0x9, 0x8cea5f96, 0x100, 0x4, 0x891c, 0x1, 0x8, 0xc785586c, 0x4, 0x7fffffff, 0x2, 0x9, 0x7b, 0x7, 0x9, 0x2, 0xd5a, 0x7, 0x9, 0x0, 0xfd4d, 0xffffffff, 0xfffffff6, 0x66, 0x6, 0x5, 0x0, 0x9, 0x6, 0x2, 0x8, 0x2, 0x67, 0x2, 0x80000001, 0x2, 0xe0000000, 0x6, 0x1, 0x8, 0x0, 0x8, 0xfffffffb, 0x200, 0x2, 0x0, 0x9, 0x5, 0x5, 0x9, 0x5, 0x74, 0xae, 0xdb, 0x4028eba2, 0x6, 0xfffffffe, 0x6, 0x0, 0xfffffffd, 0x5, 0x3ff, 0x4, 0x8, 0x2, 0x8, 0x6f, 0x6, 0x7, 0x9, 0x7, 0xfff, 0xfffffff9, 0x7fffffff, 0x9, 0x0, 0x2, 0xff, 0x2, 0x2, 0xe30, 0x200, 0x200, 0x5, 0x7, 0x0, 0xc, 0xa3, 0x5, 0x1, 0x5, 0x4, 0x5, 0x3, 0xbbd9, 0x8000, 0x5, 0x5a8ea34b, 0x2, 0xfffffff7, 0x57c, 0x8de, 0x7, 0x6, 0x2a8, 0x4, 0x67, 0x8, 0x8, 0x0, 0x1ff, 0xd, 0x5, 0x4, 0x101, 0x1000, 0x8e5, 0x1, 0x9, 0x5, 0x2, 0x87, 0x4, 0x1, 0x0, 0x7, 0x7a, 0x0, 0x76, 0x4, 0xff, 0x5, 0x7, 0x5, 0x0, 0x5, 0xb, 0xe, 0x200, 0x6, 0x8, 0x7, 0x5, 0xb16f, 0xff, 0x7, 0x3, 0xfdb1, 0xffffffff, 0x100, 0x10001, 0x2, 0x80, 0x7ff, 0x5, 0x3, 0xe02c, 0xe, 0x7ff, 0xfffffff9, 0x1bff, 0x6, 0x5, 0x5, 0x3, 0x44, 0x1, 0x2, 0x8, 0x4, 0x423, 0x0, 0x6, 0x7, 0x2, 0x2, 0x1b68, 0xffffffff, 0x81, 0x20ca, 0x18b, 0x1, 0x1, 0xe0f, 0xffff, 0x3, 0x8, 0x3, 0x401, 0xe, 0x7fffffff, 0x8cb6, 0x0, 0x4, 0x7, 0x2, 0xbb6, 0x7fffffff, 0x3, 0x3, 0x101, 0x7ff, 0x40, 0x0, 0x7, 0x6, 0xfffffff9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x401}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x25}]}, @TCA_CGROUP_ACT={0x1430, 0x1, [@m_ife={0xa0, 0xc, 0x0, 0x0, {{0x8}, {0x64, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x20, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x8}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0x4550, 0x20000000, 0x62d, 0x4}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0x6}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x62b, 0x3, 0x8, 0x1}, 0x1}}]}, {0x18, 0x6, "c6dc3c3249336690f7c4ce9e4a48567bb93ce94e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_nat={0x1e8, 0x1d, 0x0, 0x0, {{0x8}, {0x144, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x5, 0x10000000, 0x0, 0x6}, @private=0xa010102, @loopback, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x101, 0x0, 0x7, 0xa00, 0x5}, @dev={0xac, 0x14, 0x14, 0x3f}, @private=0xa010102, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1fc00, 0x1c2, 0xffffffffffffffff, 0x8, 0x5}, @multicast1, @empty, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xd, 0x5, 0xfffffffd, 0x2}, @multicast1, @rand_addr=0x64010100, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xed39, 0x2008001, 0x20000000, 0x7, 0x9}, @remote, @rand_addr=0x64010100, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0xfffffff9, 0x6, 0x80, 0x4}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x1, 0x7, 0x5, 0xb4b}, @broadcast, @remote, 0x8c8b19b1f669ee6f}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xc, 0x5, 0xf324, 0x5}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0x1}}]}, {0x7e, 0x6, "686e0c104b673c4250dcfdef31d193861ff0d7d898bbf9e3d96d43de5a681adfb43286cda3b7cbadc1e4cdff1e67d8bcfd8869e9282aae82226020faf634452e14e030801905cce7a1ce008f58cf17f880ef58d724365216d77af768cd39647c0581d2a3223c2cdb43c079ca92bfc23c4b53f37cf0c60f850426"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_pedit={0xf40, 0x11, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0xc4c, 0x551, 0x2, 0x8001, 0x6}, 0x16, 0xff, [{0x7, 0x0, 0x9, 0x8, 0x7, 0x8}]}, [{0x3, 0xffff, 0x0, 0x189, 0x7, 0x2}, {0x4, 0x80, 0x1, 0x3, 0x9, 0x3ff}, {0xbac2, 0x4, 0x5, 0x1, 0x200, 0xea05}, {0x101, 0x2, 0xeb, 0x2, 0xb, 0x6}, {0x400, 0x94, 0x8, 0x3, 0x10, 0xc}, {0x6, 0x5, 0x9, 0xffffffff, 0xe057, 0x1ff}, {0x40000000, 0x1, 0xfbf4, 0x5, 0xa5, 0x5}, {0x34988b73, 0x6, 0x8000, 0x7, 0x3, 0x6}, {0x9, 0xae8, 0x6, 0x7, 0x5, 0x80000001}, {0x7, 0x8, 0x1000, 0x80, 0x2, 0x10}, {0x9, 0x3, 0x3, 0x6, 0x3a54, 0x7}, {0xfffffff8, 0x6, 0xb, 0x4, 0x3, 0x8}, {0x401, 0x200, 0x9, 0x3, 0x4, 0x6}, {0x9, 0xa8d, 0xa3, 0x0, 0x8001, 0xfffffff9}, {0x1c, 0x8, 0x2, 0x2, 0x9, 0x1ff}, {0xffffffff, 0x2, 0xfffffff7, 0x1, 0x1, 0x4}, {0x7c8, 0x0, 0xb2f, 0x4, 0x8001, 0xfffffffb}, {0x3, 0xfff, 0x1000, 0x7, 0x9, 0x7}, {0x5, 0x8000, 0x1000, 0x9, 0xd14, 0xfffffff9}, {0x2, 0x5, 0x2, 0x5, 0x800, 0x8}, {0x0, 0xbc, 0x4, 0x2, 0x8000, 0x3}, {0x5, 0x5, 0x9, 0x8001, 0x20003, 0x2}, {0x1, 0x7, 0x9, 0xffffffbf, 0xffffff03}, {0x6, 0x1, 0x7ff, 0x2, 0x9d, 0x7}, {0x6a, 0x1000, 0x8, 0x9, 0x18, 0xfffffff8}, {0x30, 0x5, 0x5, 0xbc3, 0x8, 0xffffffff}, {0xf4, 0x7, 0x81, 0x9, 0x1, 0x1}, {0x1000, 0x8, 0x3, 0xfffffffd, 0xff, 0x9}, {0x8, 0x0, 0x8, 0xba8, 0x2, 0x8}, {0x1, 0x80000000, 0xfffff651, 0x4, 0x1, 0x9}, {0x5, 0x7, 0x5, 0x91f9, 0x200}, {0x9, 0x83, 0x100, 0x1, 0xffff, 0x2}, {0x0, 0x0, 0x7fffffff, 0x97cc, 0x8, 0x6}, {0x5, 0x537e7dea, 0x5, 0x6, 0x4, 0x4}, {0x6d8d, 0xfffffffb, 0x5, 0x10001, 0x9, 0xc}, {0x8, 0x6, 0x1, 0x3, 0x2, 0x200}, {0x3, 0x10, 0x69, 0x3, 0x6, 0x2}, {0x7, 0xa2dd, 0xff, 0x8, 0xf61, 0x6}, {0x34d4, 0x2, 0x9, 0x1e1, 0x3, 0x1}, {0x4, 0x564b, 0x28, 0x9, 0x3, 0x1}, {0x1000200, 0x1, 0x7, 0xd513, 0x5, 0x8}, {0x0, 0x7fff, 0x0, 0x2, 0x5, 0xfffffffc}, {0x4, 0xcc5, 0x1000, 0x7, 0x80, 0x2}, {0x9, 0x6, 0x1ff, 0x515, 0x15, 0x81}, {0x5, 0x0, 0x2, 0xfffffffc, 0x8, 0x400}, {0x8, 0x1, 0x40, 0x1ff, 0x5, 0x6}, {0x8bf, 0x6, 0x7fffffff, 0x3, 0x6, 0x4}, {0x80000001, 0x88, 0x800000, 0x2, 0xffff8001, 0x2}, {0x9, 0x7, 0x3, 0x4, 0x8, 0x4}, {0xfffffffa, 0x9, 0x1b6b, 0xf, 0x80, 0x94}, {0x200, 0xfffff378, 0x8, 0x3, 0x7, 0x7}, {0x2, 0x3, 0x80000001, 0x0, 0xfffffffe, 0x6}, {0x2, 0xfff, 0x9, 0x2, 0x4, 0x3}, {0x1000007, 0x80000001, 0x6, 0x9, 0xfffffbff, 0x5}, {0x0, 0x447, 0x8, 0x7, 0x44, 0x5}, {0x7fff, 0x8, 0x9, 0x4, 0x40, 0x3}, {0x1, 0x4, 0x252, 0x10, 0x0, 0x8}, {0x6, 0x4, 0x3, 0xa7, 0x4, 0x4}, {0x5, 0x7, 0x2, 0x7, 0xfffff000, 0x4}, {0x1cc, 0x5, 0x48, 0x5, 0x6, 0x80}, {0x0, 0x5, 0x0, 0xfffa}, {0x3, 0xdc0, 0xe, 0x0, 0x6}, {0x5504, 0x55, 0x21, 0x4, 0x0, 0x1}, {0x4c, 0x1, 0x7f, 0xc44, 0x7fffffff, 0x2}, {0xfffff644, 0x49d, 0x0, 0x0, 0x8001, 0x5}, {0x7, 0x6, 0x9, 0x1, 0x6, 0x9}, {0x0, 0x6c800, 0x0, 0x558, 0x5, 0x5}, {0x6, 0xbc, 0x4, 0x3, 0x2, 0xfffffffe}, {0x2, 0x2, 0xffff, 0x4, 0x7}, {0x0, 0x10001, 0x0, 0x6, 0x8001, 0x1}, {0x2, 0x861, 0x10001, 0x80, 0x0, 0xfffffffd}, {0x8, 0x5, 0x7f0, 0x5, 0x5, 0x4}, {0x38, 0xfffffffd, 0x2, 0x3, 0x9, 0x7}, {0x8, 0x8, 0x5, 0x3, 0xbcd9, 0x3}, {0x11be, 0x5, 0x0, 0x7, 0x4, 0x80000000}, {0xd9, 0x6, 0x7fff, 0x4, 0x7, 0x9c7}, {0x100, 0x7, 0x5, 0x800, 0x3, 0x9}, {0xffffff80, 0x0, 0x4, 0x8000, 0x5, 0x3}, {0x8000, 0x8, 0x200, 0x3, 0x200, 0xffffffff}, {0x400, 0x40000000, 0x6, 0xae, 0xfff, 0x81}, {0x4, 0x8, 0x10001, 0xb, 0x9, 0xfa4a}, {0xa2f, 0xfffffff9, 0x0, 0xfba, 0x9, 0x7ff}, {0xe3fa, 0x4, 0x3, 0x5, 0x2, 0x5d}, {0x1, 0xb1f, 0x0, 0x0, 0x8, 0xcf}, {0x0, 0x0, 0xe294, 0x8, 0xe996, 0x3}, {0x4, 0x8, 0x9, 0x3ff, 0x80000001, 0x8}, {0x6a4f, 0x3, 0x3, 0x6, 0xffffffff, 0x1}, {0xf, 0xe3, 0x1, 0x4, 0x6, 0x9}, {0x3, 0x2, 0x9, 0x7fff, 0xe9e, 0xffffffff}, {0x1, 0x0, 0xe5, 0x25, 0x8, 0x829}, {0x7fffffff, 0x7fff, 0xf, 0x3, 0xe, 0xfffffff7}, {0x9, 0x8, 0x3, 0x10000, 0x3, 0xe}, {0x23, 0x8, 0x0, 0x6, 0x9f3, 0x8}, {0x9, 0x8, 0x101, 0x10, 0x1, 0x7}, {0x3, 0x4, 0x0, 0x0, 0x7, 0x7}, {0x6, 0x100, 0x0, 0x2, 0xfffffffe, 0x4}, {0x6, 0x10001, 0x200, 0x2, 0x9, 0x100}, {0x9, 0x1, 0x4, 0x1000, 0x9, 0x7}, {0xfffffff4, 0x6, 0x1, 0x7, 0x5, 0xfffffff7}, {0xb, 0x3, 0x3, 0x40, 0x6, 0x31}, {0x80000000, 0x75, 0x8001, 0x6, 0x3}, {0x6, 0xfffffffa, 0xfff, 0x8001, 0x4ea3, 0x13}, {0xffffffff, 0x401, 0x6, 0xda83, 0x80000001, 0xa}, {0xd49a, 0x9, 0x9, 0x2, 0x6, 0x4}, {0xfffffffc, 0x80000000, 0x8, 0x80, 0x9}, {0xfffffff4, 0x2, 0x2, 0x2, 0x5, 0x7f}, {0x2, 0xfffff0b3, 0x5, 0x4, 0x400, 0xe8}, {0x3, 0x7, 0x8, 0xf, 0x3, 0xfffffff9}, {0xc85, 0x3, 0x158c, 0xd, 0x4, 0x2}, {0x9, 0x7, 0x7, 0x1, 0x1, 0x40}, {0x200, 0x4ad095db, 0x8, 0x4, 0x43a, 0x1}, {0x5, 0x5, 0x9, 0x4, 0xcd, 0x8}, {0x9, 0x80000000, 0x7c5e, 0x77, 0x3d1, 0x5}, {0x0, 0x6, 0x9, 0xa5b8, 0x7, 0x5b0}, {0x90, 0x4, 0x8000, 0x10000, 0x8}, {0x2, 0x7fff, 0xf, 0x2, 0x8, 0x3}, {0x1, 0x5, 0xa4bb, 0x1, 0x3, 0x7}, {0x3, 0x3, 0xa, 0x4, 0x2, 0x6}, {0x4, 0x0, 0x9c, 0x6fb4, 0xdf, 0x3}, {0xfffffff8, 0xf, 0x5, 0x1, 0x9, 0x2}, {0x3, 0x91a, 0x7, 0x7fff, 0x6, 0xffff}, {0x6, 0x5e, 0xffffe3be, 0x9, 0xcd1, 0x3}, {0x400, 0x4, 0x79f00cee, 0x9, 0x40, 0x3ff}, {0x2, 0x7, 0xffffffff, 0x3, 0x1000, 0xb6f}, {0x57, 0x4, 0x8, 0x6, 0x7, 0x7f}, {0x9, 0x1, 0x4, 0xffffffff, 0x9, 0xb459}, {0x5, 0x9, 0x189, 0x0, 0x4}, {0x8, 0x2, 0x4f9f, 0x3, 0x800, 0x401}], [{0x2}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2}, {0x3}, {0x1, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x5}, {0x1}, {0x4}, {}, {0x5, 0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x3, 0x3}, {0x4}, {0x4}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x3}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {}, {0x1}, {0x1, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x0, 0x2}, {0x5}, {0x3}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x4}, {0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x2, 0x1}, {0x5, 0x53d0e78fb1749b20}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x3}, {0x0, 0xa0f94a89673f6485}, {0x4}, {0x5}, {0x4, 0x1}, {0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x2}, {0xd, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x36e2d0da2d610288}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x3}, {}, {0x1}, {0x1, 0x1}, {0x2}], 0xff}}]}, {0xd9, 0x6, "3739d693f22d31e5fb60854e878b79c8e0a0cb660859040693bc7273de2a205c05c9dd9e6d4a4832a2f71bb177f092827e37fd74ec3dcf6da0464df55ad5f2b6cd70b838ac96e26dc6e3b4aafe86f358f9857609efe76a61046af31c4a777d81b6f5202ce2649e86b6f2bc50a10e3a38dd7a558504039fdaa900beb7f40204a55b9e1f308bb3544d066700f642db657905ebbb26c446745ed576e1ecb8eca6797048da88e97b11ff18a7a1fd9e60596e005a01b8434a514b5e701931aebf2042485bf229a5394c007e46de0381f4871030b1fcadbe"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_xt={0x264, 0xb, 0x0, 0x0, {{0x7}, {0x1d4, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x9c, 0x6, {0x2000, 'nat\x00', 0x92, 0x5, "8747397b0cffffbd6b17f1d30e5facc4ba680e71ca1855dde5224a83eb12816fb535d6ef72d00c374d492d6925db024824fca66b37b5929f6eb7a85257be761e5985ad6a625d2617ece0bc5696c5e80c7f68f95ad88e6e308e2c10bf4b98955dc4e023d4f29a431f8e451a6bf3b42e616948"}}, @TCA_IPT_TARG={0x10d, 0x6, {0x3, 'filter\x00', 0x7, 0x7, "7ca63c0bafa93cb06d9c341c1ebf3a4c3a3a39c645a0756320b1fb6acfd034cbf8ff0d9f9e8726dbff3aacacbd00123daec55d474b57e1808f0a7940e9f34333f449d7c40c707d3cc4a42b4c10923d3687e0df0375b6cdd847f17282909ac6e77e96f7805651c1d6724eb2073d07a5ad348496f241019055548cdc6c4df3dc7432077b1118c972eeea068bddf14fbef7c39cb192f95bb1adf4d9f53eacd5d3ff4c4224a8f75521441a91dbd88a514708460de03c5b9b0ad763ce738332e40096326ad5bf02565d523290cc63d88bbf62eff58b4d069ec868df2830e0e9ed5b0ca62d02"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x6b, 0x6, "b4d7c6f2b14d607b111513476d4af420f755889e39353cb9f6737c719107fd3cd99cd31e6f4d2ff3a229ecd62a58f818c790c03dcae57b1e63df68ef6dd375906917309852f3d52c43ff30ee88237a182869eb218ebfb6b6f770f7312c906db47bced2c03f1d6f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_CGROUP_EMATCHES={0x2b0, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x58, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x4, 0x7, 0x1ec8}, {{0x4, 0x1, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x202}, {0xffffffffffffffff}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8ae, 0x7, 0x9}, {{0x4, 0x1, 0x1, 0x1}}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x8001, 0x3, 0x9}, {0x81, 0x9, 0x4, 0x80}}}]}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xa, 0x3, 0x9}, {0x0, 0x344, 0x6}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_LIST={0x190, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xffff, 0x1, 0x98d3}, {0x7, 0x8, 0x6, 0x5, 0xc, 0x2}}}, @TCF_EM_IPT={0x164, 0x2, 0x0, 0x0, {{0x1000, 0x9, 0x5}, [@TCA_EM_IPT_MATCH_DATA={0xbd, 0x5, "5829b535353b720b2247afb8c728a6f3a07f88627ad8e343033de10817941eaf329c8c062136958ce6888baf955997d8bab6fc434b37161e8981adb273e95ab8d981697ccddd331881bf8ae8b63b79cb4fdec2c32a23dc43cbf3f1767cd50e4f105f23e07e517bc9fd0f330e01c69bbc797dade919957d4962909ab6f5885e344f21ee511e67f5a23fc1f5d5da16d3e70a504fefc9b6cacf1ff50ff78ef1a7e88d1a21fec4db7c89d65a88e279e151867ca63363054619b013"}, @TCA_EM_IPT_MATCH_DATA={0x12, 0x5, "90a3b603effaa9d66558bb972fcf"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x7b, 0x5, "7e018e7b16706fdb26a42bbac9ea0dfbf3d219ed953a60cb2364b4761391ee637fb90ffe656e0031534adeebdfdff97294501d0ab4065fc87d9d1563a2eb0c340ac46d55a80dee0e419b56849d7efc038a70cc6ce4a2e4eaec82334ba9d454d37fd08caf1f76f3eb38fc42aa93901b88abef4c862dd748"}]}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{}, {0x2, 0x2, 0x7}}}]}, @TCA_EMATCH_TREE_LIST={0x94, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0xe6, 0x2, 0x7}, {0x4, 0x4, 0x1, "e22bcebc"}}}, @TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x43, 0x0, 0x5}}}, @TCF_EM_META={0x14, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x5}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT]}]}}, @TCF_EM_NBYTE={0x18, 0x5, 0x0, 0x0, {{0x5b8, 0x2, 0x7}, {0x17c, 0x5, 0x1, "e2d822c115"}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x6, 0x1, 0x5}, {0x3, 0x80000001, 0x27c, 0x4, 0x2, 0x2, 0x2}}}, @TCF_EM_META={0x2c, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_RVALUE={0x9, 0x3, [@TCF_META_TYPE_VAR="05bdcca73d"]}, @TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_RVALUE={0x4}]}}]}]}]}}]}, 0x1b68}, 0x1, 0x0, 0x0, 0x48080}, 0x0) socket(0x2d, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2c0, 0x300, &(0x7f0000000180)=[0x6bd1a312, 0xec63, 0xd, 0x8, 0x98b9, 0x80000000000000c, 0x0, 0x100000000000004, 0x10000, 0x100, 0xfe51, 0x0, 0x3, 0x5, 0x5, 0x49, 0x3fc, 0x4, 0x0, 0x9, 0x8, 0x7, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x96, 0x1, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x10000000003, 0x2, 0x3, 0x4, 0x8, 0x6, 0x6, 0x8000003, 0xa3de, 0x4e, 0x8, 0x5c3e, 0x400, 0x3, 0xfffffffffffffff3, 0xfffffffffffffff8, 0x2, 0xe, 0x7, 0xfffffffffffffffc, 0xe6, 0x200000000000101, 0x5, 0x100004, 0x63, 0x6, 0x7, 0x40000005, 0x1, 0xc, 0xd, 0x5929, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0x4, 0x2, 0xcdc, 0x7, 0x200000002, 0x3, 0x2, 0x8, 0xffffffff, 0x101, 0x4, 0x6, 0xab6, 0x4, 0x4, 0x1, 0x81, 0xb, 0xff, 0x6, 0xe, 0x5, 0x400000000008061d, 0x3, 0x8, 0xf6, 0x4, 0x4, 0x200, 0xfffffffffffffffc, 0xe53e, 0x2c, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x3, 0x5, 0x1, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x4cb, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb690, 0x3ffc00000, 0x8, 0x3]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000290000fb050000003c"], 0x18}, 0xc044) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.173272524s ago: executing program 1 (id=2727): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000280)='./file0\x00', 0x0, 0x18}, 0x14) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xc, 0xffe0}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_TC={0x5}]}}]}, 0x44}}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$tun(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0003"], 0xfdef) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f"], 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0xfefffffa, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x110, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 773.712477ms ago: executing program 4 (id=2728): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000c80)=[{&(0x7f0000000380)=@in={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1c"], 0x1c, 0x40001}], 0x1, 0x80) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='ntfs3\x00', 0x1000080, 0x0) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x24) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x8, 0x8002}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r6, 0x0, 0x0}, 0x20) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) r7 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) ioctl$TCSETSF(r7, 0x5404, &(0x7f0000000000)={0xe, 0x3a, 0xcbd, 0x10000, 0x18, "f068004507507478e7432c95cc5e8d05e536b8"}) ioctl$VIDIOC_G_EXT_CTRLS(r7, 0xc0185647, &(0x7f0000000240)={0x9e0000, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x990a75, 0x6, '\x00', @ptr=0x5}}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0x10, 0x0, r7, 0x0, &(0x7f0000000280)='./file0/file0\x00', 0x40}) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb, 0x6}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffdb9}, 0x48) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @random, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x14, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0) syz_open_dev$vim2m(&(0x7f0000000180), 0x9, 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r8}, &(0x7f00000000c0), &(0x7f0000000100)='%pK \x00'}, 0x1c) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000206030000000000000000000100000711000300686173683a69702c706f7274000000000c00078008001240fffffffc0900020073797a3100000000050004000100000005000100070000000500050002"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) 256.569192ms ago: executing program 5 (id=2729): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000100)=0x1, 0x12) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000000000300850000008700000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000200)="1000110ec1e9abc89b0046b30000", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x3c) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f00000001c0)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r9 = socket$nl_route(0x10, 0x3, 0x0) bind$rds(r7, &(0x7f0000000240)={0x2, 0x4e24, @private=0xa010101}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)=ANY=[@ANYBLOB="3c00000010000304000000000000598a8e0000e30000bc6ccb629095cf2387f6ca80fa5f9ba277ec7e3cf5b066dd7eee3e1ebbe63963b2eb33cba573d29530c2c649f202088e09b48a9c58216bb0fdec5ac04df01035184756e3d863d579a729124b9fadb07466d8f55d26795fae6dfa59c02886495bf76308fcc1741025cb9bc1f5", @ANYRES32=0x0, @ANYBLOB="a4280400000800001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r8, @ANYBLOB], 0x3c}}, 0x8000) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000004c0)={0xfff, 0x5, 0xa6a, "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"}) syz_emit_ethernet(0x3a, &(0x7f0000001c00)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500002c0002000000119090780400000007740000fdffffffffffffffc7738cd9e9026ecba4b22c"], 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macsec0\x00'}) 74.842802ms ago: executing program 3 (id=2730): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000206030000000000000001000100000711000300686173683a69702c706f7274000000000c00078008001240fffffffc0900020073797a3100000000050004000100000005000100070000000500050002"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) 0s ago: executing program 3 (id=2731): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00') chdir(&(0x7f0000000080)='./file0\x00') setpgid(r3, r3) setpgid(0x0, r3) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1f00, 0x12) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40100, 0x0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x70bd26, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x6400c844) kernel console output (not intermixed with test programs): 0x167/0x2eb0 [ 635.732240][T15733] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 635.732275][T15733] ? kasan_save_track+0x14/0x30 [ 635.732296][T15733] ? kasan_save_free_info+0x3b/0x60 [ 635.732312][T15733] ? __kasan_slab_free+0x5f/0x80 [ 635.732331][T15733] ? kfree+0x2f8/0x6e0 [ 635.732345][T15733] ? tomoyo_path_number_perm+0x470/0x580 [ 635.732364][T15733] ? security_file_ioctl_compat+0x9b/0x240 [ 635.732383][T15733] ? __ia32_compat_sys_ioctl+0xc3/0x370 [ 635.732403][T15733] ? __do_fast_syscall_32+0xe8/0x680 [ 635.732431][T15733] comedi_unlocked_ioctl+0x1582/0x2eb0 [ 635.732452][T15733] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 635.732483][T15733] ? kasan_quarantine_put+0x10a/0x240 [ 635.732504][T15733] ? lockdep_hardirqs_on+0x7c/0x110 [ 635.732531][T15733] ? find_held_lock+0x2b/0x80 [ 635.732550][T15733] ? tomoyo_path_number_perm+0x295/0x580 [ 635.732572][T15733] ? tomoyo_path_number_perm+0x18d/0x580 [ 635.732594][T15733] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 635.732615][T15733] comedi_compat_ioctl+0x1ed/0xda0 [ 635.732626][T15733] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 635.732637][T15733] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 635.732655][T15733] ? do_vfs_ioctl+0x128/0x14f0 [ 635.732668][T15733] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 635.732685][T15733] ? find_held_lock+0x2b/0x80 [ 635.732698][T15733] ? hook_file_ioctl_common+0x144/0x410 [ 635.732715][T15733] ? __fget_files+0x20e/0x3c0 [ 635.732729][T15733] ? __fput_deferred+0x480/0x480 [ 635.732748][T15733] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 635.732766][T15733] __ia32_compat_sys_ioctl+0x242/0x370 [ 635.732789][T15733] __do_fast_syscall_32+0xe8/0x680 [ 635.732815][T15733] do_fast_syscall_32+0x32/0x80 [ 635.732827][T15733] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 635.732847][T15733] RIP: 0023:0xf703d579 [ 635.732860][T15733] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 635.732876][T15733] RSP: 002b:00000000f542d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 635.732892][T15733] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000040946400 [ 635.732903][T15733] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 635.732913][T15733] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 635.732921][T15733] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 635.732927][T15733] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 635.732950][T15733] [ 635.955434][ T6108] usb 6-1: Using ep0 maxpacket: 32 [ 636.065465][ T6108] usb 6-1: unable to get BOS descriptor or descriptor too short [ 636.094140][ T5954] Bluetooth: hci1: command tx timeout [ 636.144907][T15757] qnx6: unable to read the first superblock [ 636.152855][ T6027] IPVS: starting estimator thread 0... [ 636.243778][T15758] IPVS: using max 48 ests per chain, 115200 per kthread [ 636.366897][ T6108] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 636.369417][ T6108] usb 6-1: can't read configurations, error -71 [ 636.564014][T15762] netlink: 'syz.4.2276': attribute type 1 has an invalid length. [ 636.576304][T15762] 8021q: adding VLAN 0 to HW filter on device bond9 [ 636.664683][T15765] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2276'. [ 636.701996][T15762] bond9: (slave veth15): Enslaving as an active interface with a down link [ 636.953069][T15777] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2280'. [ 636.956975][T15777] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2280'. [ 637.118583][ T5945] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 637.134907][ T5945] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 637.139480][ T5945] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 637.143962][ T5945] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 637.147178][ T5945] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 637.922208][ T24] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 638.068298][T15784] chnl_net:caif_netlink_parms(): no params data found [ 638.082549][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 638.267846][T15556] bond0: (slave netdevsim0): Releasing backup interface [ 638.276145][T15784] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.278785][T15784] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.281316][T15784] bridge_slave_0: entered allmulticast mode [ 638.284395][T15784] bridge_slave_0: entered promiscuous mode [ 638.289978][T15784] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.292422][T15784] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.294854][T15784] bridge_slave_1: entered allmulticast mode [ 638.298419][T15784] bridge_slave_1: entered promiscuous mode [ 638.355879][T15784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 638.361927][T15784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 638.394494][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 638.400287][T15784] team0: Port device team_slave_0 added [ 638.403731][ T24] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 638.406241][ T24] usb 5-1: can't read configurations, error -71 [ 638.409120][T15784] team0: Port device team_slave_1 added [ 638.437345][T15784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 638.439669][T15784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 638.448120][T15784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 638.744478][T15556] bond12 (unregistering): (slave gretap1): Releasing active interface [ 639.167185][T15556] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 639.175054][T15556] bond0 (unregistering): Released all slaves [ 639.256245][T15556] bond1 (unregistering): (slave veth3): Releasing active interface [ 639.260855][T15556] bond1 (unregistering): Released all slaves [ 639.267544][T15556] bond2 (unregistering): Released all slaves [ 639.343467][T15556] bond3 (unregistering): (slave veth5): Releasing active interface [ 639.344072][ T5945] Bluetooth: hci4: command tx timeout [ 639.351118][T15556] bond3 (unregistering): Released all slaves [ 639.433724][T15556] bond4 (unregistering): (slave veth7): Releasing active interface [ 639.438648][T15556] bond4 (unregistering): Released all slaves [ 639.534123][T15556] bond5 (unregistering): (slave veth11): Releasing active interface [ 639.539407][T15556] bond5 (unregistering): Released all slaves [ 639.618905][T15556] bond6 (unregistering): (slave veth13): Releasing active interface [ 639.622819][T15556] bond6 (unregistering): Released all slaves [ 639.698738][T15556] bond7 (unregistering): (slave veth15): Releasing active interface [ 639.703515][T15556] bond7 (unregistering): Released all slaves [ 639.797721][T15556] bond8 (unregistering): (slave veth17): Releasing active interface [ 639.801361][T15556] bond8 (unregistering): Released all slaves [ 639.871165][T15556] bond9 (unregistering): Released all slaves [ 639.941118][T15556] bond10 (unregistering): Released all slaves [ 640.012522][T15556] bond11 (unregistering): Released all slaves [ 640.019064][T15556] bond12 (unregistering): Released all slaves [ 640.091731][T15556] bond13 (unregistering): (slave veth19): Releasing active interface [ 640.095977][T15556] bond13 (unregistering): Released all slaves [ 640.166135][T15556] bond14 (unregistering): (slave veth21): Releasing active interface [ 640.169736][T15556] bond14 (unregistering): Released all slaves [ 640.243113][T15556] bond15 (unregistering): (slave veth23): Releasing active interface [ 640.246578][T15556] bond15 (unregistering): Released all slaves [ 640.320052][T15556] bond16 (unregistering): (slave veth25): Releasing active interface [ 640.324819][T15556] bond16 (unregistering): Released all slaves [ 640.397402][T15556] bond17 (unregistering): (slave veth27): Releasing active interface [ 640.400982][T15556] bond17 (unregistering): Released all slaves [ 640.407495][T15784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 640.410605][T15784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 640.421851][T15784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 640.430717][T15836] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2293'. [ 640.433958][T15836] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2293'. [ 640.447915][T15845] wireguard0: entered promiscuous mode [ 640.450100][T15845] wireguard0: entered allmulticast mode [ 640.677981][ T6027] infiniband syz1: ib_query_port failed (-19) [ 640.775774][T15556] : left promiscuous mode [ 640.787539][T15857] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 640.789793][T15857] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 640.811008][T15857] vhci_hcd vhci_hcd.0: Device attached [ 641.107988][T10378] usb 46-1: SetAddress Request (38) to port 0 [ 641.110762][T10378] usb 46-1: new SuperSpeed USB device number 38 using vhci_hcd [ 641.431209][T15858] vhci_hcd: connection reset by peer [ 641.433850][T15478] vhci_hcd vhci_hcd.4: stop threads [ 641.435557][T15478] vhci_hcd vhci_hcd.4: release socket [ 641.437380][T15478] vhci_hcd vhci_hcd.4: disconnect device [ 641.481940][T15842] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 641.556134][T15784] hsr_slave_0: entered promiscuous mode [ 641.558852][T15784] hsr_slave_1: entered promiscuous mode [ 641.561357][T15784] debugfs: 'hsr0' already exists in 'hsr' [ 641.563316][T15784] Cannot create hsr debugfs directory [ 641.578874][ T5945] Bluetooth: hci4: command tx timeout [ 642.042539][T15556] hsr_slave_0: left promiscuous mode [ 642.047451][T15863] CIFS: VFS: Malformed UNC in devname [ 642.066688][T15556] hsr_slave_1: left promiscuous mode [ 642.157532][T15868] siw: device registration error -23 [ 642.742559][ T1143] smc: removing ib device syz2 [ 642.824408][T15883] netlink: 'syz.3.2307': attribute type 1 has an invalid length. [ 642.826956][T15883] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2307'. [ 643.212743][T15868] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 643.331568][T15784] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 643.357696][T15784] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 643.377386][T15784] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 643.388678][T15784] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 643.508573][T15784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 643.517616][T15784] 8021q: adding VLAN 0 to HW filter on device team0 [ 643.537699][T15784] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 643.541380][T15784] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 643.584417][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.586824][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 643.601230][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.603509][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 643.737216][T15784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 643.769377][T15784] veth0_vlan: entered promiscuous mode [ 643.774992][T15784] veth1_vlan: entered promiscuous mode [ 643.794232][T15784] veth0_macvtap: entered promiscuous mode [ 643.799894][T15784] veth1_macvtap: entered promiscuous mode [ 643.805007][ T5945] Bluetooth: hci4: command tx timeout [ 643.844235][T15784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 643.856635][T15784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 643.868667][ T1143] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.871558][ T1143] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.881408][ T1143] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.904025][ T1143] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.907855][ T1175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.911308][ T1175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.928426][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.935656][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 644.170946][T15920] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2314'. [ 644.180088][T15921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2310'. [ 644.187292][T15920] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2314'. [ 644.371243][T15556] IPVS: stop unused estimator thread 0... [ 644.394488][T15933] siw: device registration error -23 [ 644.418165][T15933] wireguard0: entered promiscuous mode [ 644.420027][T15933] wireguard0: entered allmulticast mode [ 646.015133][ T5945] Bluetooth: hci4: command tx timeout [ 646.392303][T15969] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2327'. [ 646.395482][T15970] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2327'. [ 646.534855][T10378] usb 46-1: device descriptor read/8, error -110 [ 646.946835][T10378] usb usb46-port1: attempt power cycle [ 646.969959][T15989] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2334'. [ 646.973641][T15989] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2334'. [ 647.037349][T15993] FAULT_INJECTION: forcing a failure. [ 647.037349][T15993] name failslab, interval 1, probability 0, space 0, times 0 [ 647.042009][T15993] CPU: 3 UID: 0 PID: 15993 Comm: syz.0.2336 Tainted: G L syzkaller #0 PREEMPT(full) [ 647.042026][T15993] Tainted: [L]=SOFTLOCKUP [ 647.042030][T15993] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 647.042036][T15993] Call Trace: [ 647.042040][T15993] [ 647.042045][T15993] dump_stack_lvl+0x16c/0x1f0 [ 647.042082][T15993] should_fail_ex+0x512/0x640 [ 647.042101][T15993] ? fs_reclaim_acquire+0xae/0x150 [ 647.042121][T15993] should_failslab+0xc2/0x120 [ 647.042138][T15993] __kmalloc_noprof+0xeb/0x910 [ 647.042150][T15993] ? tomoyo_encode2+0x100/0x3e0 [ 647.042168][T15993] ? tomoyo_encode2+0x100/0x3e0 [ 647.042182][T15993] tomoyo_encode2+0x100/0x3e0 [ 647.042198][T15993] tomoyo_encode+0x29/0x50 [ 647.042212][T15993] tomoyo_realpath_from_path+0x18f/0x6e0 [ 647.042231][T15993] tomoyo_path_number_perm+0x245/0x580 [ 647.042243][T15993] ? tomoyo_path_number_perm+0x237/0x580 [ 647.042257][T15993] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 647.042284][T15993] ? find_held_lock+0x2b/0x80 [ 647.042298][T15993] ? hook_file_ioctl_common+0x144/0x410 [ 647.042314][T15993] ? __fget_files+0x20e/0x3c0 [ 647.042329][T15993] ? __fput_deferred+0x480/0x480 [ 647.042343][T15993] security_file_ioctl_compat+0x9b/0x240 [ 647.042357][T15993] __ia32_compat_sys_ioctl+0xc3/0x370 [ 647.042373][T15993] __do_fast_syscall_32+0xe8/0x680 [ 647.042392][T15993] do_fast_syscall_32+0x32/0x80 [ 647.042402][T15993] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 647.042416][T15993] RIP: 0023:0xf703d579 [ 647.042425][T15993] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 647.042437][T15993] RSP: 002b:00000000f542d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 647.042448][T15993] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000040946400 [ 647.042455][T15993] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 647.042461][T15993] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 647.042467][T15993] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 647.042473][T15993] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 647.042487][T15993] [ 647.042497][T15993] ERROR: Out of memory at tomoyo_realpath_from_path. [ 647.311575][T16004] siw: device registration error -23 [ 647.332564][T16004] wireguard0: entered promiscuous mode [ 647.334513][T16004] wireguard0: entered allmulticast mode [ 647.586975][T10378] usb usb46-port1: unable to enumerate USB device [ 648.003386][ T24] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 648.164172][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 648.168029][ T24] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 648.172198][ T24] usb 6-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 648.177175][ T24] usb 6-1: config 179 has no interface number 0 [ 648.179305][ T24] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 648.183605][ T24] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 648.189751][ T24] usb 6-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 648.194792][ T24] usb 6-1: config 179 interface 65 has no altsetting 0 [ 648.197887][ T24] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 648.200836][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.366912][T16024] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2345'. [ 648.370060][T16024] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2345'. [ 648.577618][T16031] FAULT_INJECTION: forcing a failure. [ 648.577618][T16031] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 648.582790][T16031] CPU: 3 UID: 0 PID: 16031 Comm: syz.3.2347 Tainted: G L syzkaller #0 PREEMPT(full) [ 648.582807][T16031] Tainted: [L]=SOFTLOCKUP [ 648.582811][T16031] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 648.582818][T16031] Call Trace: [ 648.582822][T16031] [ 648.582826][T16031] dump_stack_lvl+0x16c/0x1f0 [ 648.582861][T16031] should_fail_ex+0x512/0x640 [ 648.582881][T16031] _copy_from_user+0x2e/0xd0 [ 648.582893][T16031] do_devconfig_ioctl+0x11c/0x710 [ 648.582911][T16031] ? comedi_unlocked_ioctl+0x167/0x2eb0 [ 648.582922][T16031] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 648.582944][T16031] ? kasan_save_track+0x14/0x30 [ 648.582959][T16031] ? kasan_save_free_info+0x3b/0x60 [ 648.582970][T16031] ? __kasan_slab_free+0x5f/0x80 [ 648.582985][T16031] ? kfree+0x2f8/0x6e0 [ 648.582995][T16031] ? tomoyo_path_number_perm+0x470/0x580 [ 648.583008][T16031] ? security_file_ioctl_compat+0x9b/0x240 [ 648.583021][T16031] ? __ia32_compat_sys_ioctl+0xc3/0x370 [ 648.583035][T16031] ? __do_fast_syscall_32+0xe8/0x680 [ 648.583055][T16031] comedi_unlocked_ioctl+0x1582/0x2eb0 [ 648.583070][T16031] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 648.583089][T16031] ? kasan_quarantine_put+0x10a/0x240 [ 648.583103][T16031] ? lockdep_hardirqs_on+0x7c/0x110 [ 648.583135][T16031] ? find_held_lock+0x2b/0x80 [ 648.583151][T16031] ? tomoyo_path_number_perm+0x295/0x580 [ 648.583165][T16031] ? tomoyo_path_number_perm+0x18d/0x580 [ 648.583179][T16031] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 648.583193][T16031] comedi_compat_ioctl+0x1ed/0xda0 [ 648.583204][T16031] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 648.583216][T16031] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 648.583233][T16031] ? do_vfs_ioctl+0x128/0x14f0 [ 648.583247][T16031] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 648.583264][T16031] ? find_held_lock+0x2b/0x80 [ 648.583277][T16031] ? hook_file_ioctl_common+0x144/0x410 [ 648.583293][T16031] ? __fget_files+0x20e/0x3c0 [ 648.583308][T16031] ? __fput_deferred+0x480/0x480 [ 648.583321][T16031] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 648.583333][T16031] __ia32_compat_sys_ioctl+0x242/0x370 [ 648.583348][T16031] __do_fast_syscall_32+0xe8/0x680 [ 648.583366][T16031] do_fast_syscall_32+0x32/0x80 [ 648.583376][T16031] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 648.583390][T16031] RIP: 0023:0xf701d579 [ 648.583399][T16031] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 648.583410][T16031] RSP: 002b:00000000f540d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 648.583421][T16031] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000040946400 [ 648.583428][T16031] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 648.583434][T16031] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 648.583440][T16031] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 648.583447][T16031] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 648.583460][T16031] [ 650.322165][T16049] bridge2: entered allmulticast mode [ 650.343137][T16049] : renamed from hsr0 [ 651.327117][ T6032] usb 6-1: USB disconnect, device number 43 [ 651.576023][T16060] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2355'. [ 651.579396][T16060] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2355'. [ 651.673141][T16064] netlink: 'syz.3.2356': attribute type 1 has an invalid length. [ 651.699601][T16064] 8021q: adding VLAN 0 to HW filter on device bond1 [ 651.732822][T16064] bond1: (slave veth3): Enslaving as an active interface with a down link [ 651.753048][T16069] random: crng reseeded on system resumption [ 651.764826][T16064] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2356'. [ 651.901128][T16077] binder: 16076:16077 ioctl c0306201 80000640 returned -22 [ 652.983619][T16105] netlink: 'syz.1.2368': attribute type 1 has an invalid length. [ 653.009256][T16106] netlink: 'syz.0.2364': attribute type 1 has an invalid length. [ 653.011929][T16106] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2364'. [ 653.047346][T16109] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2368'. [ 653.254332][T16115] netlink: 'syz.1.2371': attribute type 1 has an invalid length. [ 653.410446][T16118] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2371'. [ 653.883265][ T24] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 654.065508][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 654.069928][ T24] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 654.073197][ T24] usb 8-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 654.078273][ T24] usb 8-1: config 179 has no interface number 0 [ 654.081231][ T24] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 654.085044][ T24] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 654.089874][ T24] usb 8-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 654.096155][ T24] usb 8-1: config 179 interface 65 has no altsetting 0 [ 654.099509][ T24] usb 8-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 654.103155][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.759233][ T6032] usb 8-1: USB disconnect, device number 9 [ 656.317587][T16155] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 656.320194][T16155] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 656.337280][T16155] vhci_hcd vhci_hcd.0: Device attached [ 656.363247][T16153] MPI: mpi too large (130952 bits) [ 656.434366][T16156] vhci_hcd: connection closed [ 656.434854][T10196] vhci_hcd vhci_hcd.0: stop threads [ 656.439005][T10196] vhci_hcd vhci_hcd.0: release socket [ 656.441140][T10196] vhci_hcd vhci_hcd.0: disconnect device [ 656.728000][T16161] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 656.730783][T16161] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 656.733793][T16161] vhci_hcd vhci_hcd.0: Device attached [ 656.762135][T16159] MPI: mpi too large (130952 bits) [ 657.037061][ T24] usb 46-1: SetAddress Request (42) to port 0 [ 657.039195][ T24] usb 46-1: new SuperSpeed USB device number 42 using vhci_hcd [ 657.250819][ T143] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 657.411183][ T143] usb 8-1: Using ep0 maxpacket: 32 [ 657.495913][T16162] vhci_hcd: connection reset by peer [ 657.499162][T14478] vhci_hcd vhci_hcd.4: stop threads [ 657.501664][T14478] vhci_hcd vhci_hcd.4: release socket [ 657.506058][T14478] vhci_hcd vhci_hcd.4: disconnect device [ 657.561300][T16183] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2387'. [ 657.564918][T16183] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2387'. [ 657.617502][ T143] usb 8-1: unable to get BOS descriptor or descriptor too short [ 657.623037][ T143] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 657.628258][ T143] usb 8-1: can't read configurations, error -71 [ 658.116721][ T6009] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 658.332132][ T6009] usb 6-1: Using ep0 maxpacket: 8 [ 658.341399][ T6009] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 658.344232][ T6009] usb 6-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 658.347916][ T6009] usb 6-1: config 179 has no interface number 0 [ 658.350269][ T6009] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 658.354679][ T6009] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 658.358882][ T6009] usb 6-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 658.363912][ T6009] usb 6-1: config 179 interface 65 has no altsetting 0 [ 658.366375][ T6009] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 658.369767][ T6009] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.789252][T16195] genirq: Flags mismatch irq 31. 00200000 (pcmmio) vs. 00200000 (eth1-tx-0) [ 660.935987][T16207] siw: device registration error -23 [ 660.949970][T10378] usb 6-1: USB disconnect, device number 44 [ 660.971393][T16207] wireguard0: entered promiscuous mode [ 660.973669][T16207] wireguard0: entered allmulticast mode [ 661.798088][T16219] vhci_hcd vhci_hcd.0: port 0 already used [ 661.814249][T16219] MPI: mpi too large (130952 bits) [ 661.870521][T16218] xt_CT: You must specify a L4 protocol and not use inversions on it [ 662.399130][T16229] netlink: 'syz.4.2398': attribute type 1 has an invalid length. [ 662.435849][ T24] usb 46-1: device descriptor read/8, error -110 [ 662.519820][T16229] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2398'. [ 662.863875][ T24] usb usb46-port1: attempt power cycle [ 662.917095][ T6059] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 663.077242][ T6059] usb 6-1: Using ep0 maxpacket: 32 [ 663.335755][ T6059] usb 6-1: unable to get BOS descriptor or descriptor too short [ 663.339869][ T6059] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 663.342949][ T6059] usb 6-1: can't read configurations, error -71 [ 663.466170][ T24] usb usb46-port1: unable to enumerate USB device [ 664.406311][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 664.409553][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 664.563370][ T6059] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 664.809058][ T6059] usb 6-1: Using ep0 maxpacket: 8 [ 664.812614][ T6059] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 664.816181][ T6059] usb 6-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 664.820178][ T6059] usb 6-1: config 179 has no interface number 0 [ 664.822922][ T6059] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 664.827097][ T6059] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 664.831777][ T6059] usb 6-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 664.837328][ T6059] usb 6-1: config 179 interface 65 has no altsetting 0 [ 664.840183][ T6059] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 664.844232][ T6059] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.656909][T16256] netlink: 'syz.4.2401': attribute type 1 has an invalid length. [ 665.659528][T16256] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2401'. [ 666.049960][T16274] netlink: 'syz.4.2407': attribute type 4 has an invalid length. [ 666.054646][T16274] netlink: 'syz.4.2407': attribute type 4 has an invalid length. [ 666.404802][T16279] netlink: 'syz.4.2408': attribute type 1 has an invalid length. [ 666.407495][T16279] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2408'. [ 667.220804][ T6059] usb 6-1: USB disconnect, device number 47 [ 668.037612][ T24] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 668.197952][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 668.201166][ T24] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 668.204279][ T24] usb 6-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 668.208874][ T24] usb 6-1: config 179 has no interface number 0 [ 668.211054][ T24] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 668.214725][ T24] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 668.218705][ T24] usb 6-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 668.223514][ T24] usb 6-1: config 179 interface 65 has no altsetting 0 [ 668.225841][ T24] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 668.228819][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.771748][T16295] FAULT_INJECTION: forcing a failure. [ 669.771748][T16295] name failslab, interval 1, probability 0, space 0, times 0 [ 669.775821][T16295] CPU: 2 UID: 0 PID: 16295 Comm: syz.3.2411 Tainted: G L syzkaller #0 PREEMPT(full) [ 669.775838][T16295] Tainted: [L]=SOFTLOCKUP [ 669.775842][T16295] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 669.775849][T16295] Call Trace: [ 669.775853][T16295] [ 669.775858][T16295] dump_stack_lvl+0x16c/0x1f0 [ 669.775893][T16295] should_fail_ex+0x512/0x640 [ 669.775910][T16295] ? __kmalloc_cache_noprof+0x5f/0x800 [ 669.775925][T16295] should_failslab+0xc2/0x120 [ 669.775943][T16295] __kmalloc_cache_noprof+0x80/0x800 [ 669.775955][T16295] ? lockdep_init_map_type+0x5c/0x270 [ 669.775966][T16295] ? comedi_device_postconfig+0x2cb/0xcd0 [ 669.775983][T16295] ? comedi_device_postconfig+0x2cb/0xcd0 [ 669.775995][T16295] comedi_device_postconfig+0x2cb/0xcd0 [ 669.776008][T16295] ? pcmmio_attach+0x6e/0xe10 [ 669.776021][T16295] comedi_device_attach+0x3cf/0x900 [ 669.776038][T16295] do_devconfig_ioctl+0x1b1/0x710 [ 669.776053][T16295] ? comedi_unlocked_ioctl+0x167/0x2eb0 [ 669.776064][T16295] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 669.776087][T16295] ? kasan_save_track+0x14/0x30 [ 669.776101][T16295] ? kasan_save_free_info+0x3b/0x60 [ 669.776112][T16295] ? __kasan_slab_free+0x5f/0x80 [ 669.776126][T16295] ? kfree+0x2f8/0x6e0 [ 669.776136][T16295] ? tomoyo_path_number_perm+0x470/0x580 [ 669.776148][T16295] ? security_file_ioctl_compat+0x9b/0x240 [ 669.776162][T16295] ? __ia32_compat_sys_ioctl+0xc3/0x370 [ 669.776182][T16295] ? __do_fast_syscall_32+0xe8/0x680 [ 669.776206][T16295] comedi_unlocked_ioctl+0x1582/0x2eb0 [ 669.776221][T16295] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 669.776247][T16295] ? kasan_quarantine_put+0x10a/0x240 [ 669.776268][T16295] ? lockdep_hardirqs_on+0x7c/0x110 [ 669.776293][T16295] ? find_held_lock+0x2b/0x80 [ 669.776307][T16295] ? tomoyo_path_number_perm+0x295/0x580 [ 669.776322][T16295] ? tomoyo_path_number_perm+0x18d/0x580 [ 669.776336][T16295] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 669.776350][T16295] comedi_compat_ioctl+0x1ed/0xda0 [ 669.776361][T16295] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 669.776373][T16295] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 669.776390][T16295] ? do_vfs_ioctl+0x128/0x14f0 [ 669.776404][T16295] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 669.776421][T16295] ? find_held_lock+0x2b/0x80 [ 669.776434][T16295] ? hook_file_ioctl_common+0x144/0x410 [ 669.776451][T16295] ? __fget_files+0x20e/0x3c0 [ 669.776470][T16295] ? __fput_deferred+0x480/0x480 [ 669.776484][T16295] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 669.776495][T16295] __ia32_compat_sys_ioctl+0x242/0x370 [ 669.776511][T16295] __do_fast_syscall_32+0xe8/0x680 [ 669.776530][T16295] do_fast_syscall_32+0x32/0x80 [ 669.776540][T16295] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 669.776554][T16295] RIP: 0023:0xf701d579 [ 669.776563][T16295] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 669.776573][T16295] RSP: 002b:00000000f540d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 669.776584][T16295] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000040946400 [ 669.776591][T16295] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 669.776611][T16295] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 669.776618][T16295] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 669.776624][T16295] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 669.776638][T16295] [ 670.158345][T16299] vhci_hcd vhci_hcd.0: port 0 already used [ 670.173095][T16299] MPI: mpi too large (130952 bits) [ 670.779531][ T6009] usb 6-1: USB disconnect, device number 48 [ 671.445132][T16316] netlink: 'syz.1.2417': attribute type 1 has an invalid length. [ 671.447886][T16316] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2417'. [ 672.230757][T16333] vhci_hcd vhci_hcd.0: port 0 already used [ 672.276761][T16333] MPI: mpi too large (130952 bits) [ 672.709572][ T6059] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 672.880415][ T6059] usb 6-1: Using ep0 maxpacket: 8 [ 672.883949][ T6059] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 672.886657][ T6059] usb 6-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 672.890069][ T6059] usb 6-1: config 179 has no interface number 0 [ 672.893106][ T6059] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 672.896786][ T6059] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 672.900530][ T6059] usb 6-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 672.906052][ T6059] usb 6-1: config 179 interface 65 has no altsetting 0 [ 672.908702][ T6059] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 672.911764][ T6059] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.712822][T16336] netlink: 'syz.4.2420': attribute type 1 has an invalid length. [ 673.720761][T16336] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2420'. [ 674.484986][ T5954] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 674.495510][ T5954] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 674.498817][ T5954] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 674.501867][ T5954] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 674.504851][ T5954] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 674.682900][T16345] chnl_net:caif_netlink_parms(): no params data found [ 674.831417][T16345] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.834614][T16345] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.839655][T16345] bridge_slave_0: entered allmulticast mode [ 674.844784][T16345] bridge_slave_0: entered promiscuous mode [ 674.861699][T16345] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.864780][T16345] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.867133][T16345] bridge_slave_1: entered allmulticast mode [ 674.869223][ T24] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 674.872596][T16345] bridge_slave_1: entered promiscuous mode [ 674.894565][T16345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 674.901464][T16345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 674.921089][T16345] team0: Port device team_slave_0 added [ 674.927024][T16345] team0: Port device team_slave_1 added [ 674.949521][T16345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 674.952438][T16345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 674.963982][T16345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 674.969008][T16345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 674.971529][T16345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 674.982120][T16345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 675.010763][T16345] hsr_slave_0: entered promiscuous mode [ 675.013022][T16345] hsr_slave_1: entered promiscuous mode [ 675.015279][T16345] debugfs: 'hsr0' already exists in 'hsr' [ 675.017166][T16345] Cannot create hsr debugfs directory [ 675.050762][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 675.058909][ T24] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 675.061806][ T24] usb 8-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 675.065048][ T24] usb 8-1: config 179 has no interface number 0 [ 675.067184][ T24] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 675.070788][ T24] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 675.074620][ T24] usb 8-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 675.079350][ T24] usb 8-1: config 179 interface 65 has no altsetting 0 [ 675.081890][ T24] usb 8-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 675.084826][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.114132][T16345] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 675.118751][T16345] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 675.122837][T16345] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 675.127298][T16345] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 675.144776][T16345] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.147335][T16345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 675.149830][T16345] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.152127][T16345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 675.182696][T16345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 675.192049][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.196423][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.208113][T16345] 8021q: adding VLAN 0 to HW filter on device team0 [ 675.216653][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.220036][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 675.228613][T15556] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.232158][T15556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 675.393086][ T29] usb 6-1: USB disconnect, device number 49 [ 675.421366][T16345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 675.627226][T16345] veth0_vlan: entered promiscuous mode [ 675.632726][T16345] veth1_vlan: entered promiscuous mode [ 675.648938][T16345] veth0_macvtap: entered promiscuous mode [ 675.654679][T16345] veth1_macvtap: entered promiscuous mode [ 675.664333][T16345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 675.673073][T16345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 675.680005][ T1143] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.684176][ T1143] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.689601][ T1143] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.694320][ T1143] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.754779][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.758529][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.775847][ T6461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.778622][ T6461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.838132][T16380] FAULT_INJECTION: forcing a failure. [ 675.838132][T16380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 675.842617][T16380] CPU: 2 UID: 0 PID: 16380 Comm: syz.5.2423 Tainted: G L syzkaller #0 PREEMPT(full) [ 675.842635][T16380] Tainted: [L]=SOFTLOCKUP [ 675.842638][T16380] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 675.842645][T16380] Call Trace: [ 675.842649][T16380] [ 675.842653][T16380] dump_stack_lvl+0x16c/0x1f0 [ 675.842674][T16380] should_fail_ex+0x512/0x640 [ 675.842689][T16380] _copy_from_user+0x2e/0xd0 [ 675.842701][T16380] do_devconfig_ioctl+0x11c/0x710 [ 675.842718][T16380] ? comedi_unlocked_ioctl+0x167/0x2eb0 [ 675.842729][T16380] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 675.842752][T16380] ? kasan_save_track+0x14/0x30 [ 675.842766][T16380] ? kasan_save_free_info+0x3b/0x60 [ 675.842778][T16380] ? __kasan_slab_free+0x5f/0x80 [ 675.842792][T16380] ? kfree+0x2f8/0x6e0 [ 675.842803][T16380] ? tomoyo_path_number_perm+0x470/0x580 [ 675.842815][T16380] ? security_file_ioctl_compat+0x9b/0x240 [ 675.842828][T16380] ? __ia32_compat_sys_ioctl+0xc3/0x370 [ 675.842841][T16380] ? __do_fast_syscall_32+0xe8/0x680 [ 675.842861][T16380] comedi_unlocked_ioctl+0x1582/0x2eb0 [ 675.842876][T16380] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 675.842895][T16380] ? kasan_quarantine_put+0x10a/0x240 [ 675.842909][T16380] ? lockdep_hardirqs_on+0x7c/0x110 [ 675.842927][T16380] ? find_held_lock+0x2b/0x80 [ 675.842943][T16380] ? tomoyo_path_number_perm+0x295/0x580 [ 675.842957][T16380] ? tomoyo_path_number_perm+0x18d/0x580 [ 675.842971][T16380] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 675.842990][T16380] comedi_compat_ioctl+0x1ed/0xda0 [ 675.843002][T16380] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 675.843013][T16380] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 675.843030][T16380] ? do_vfs_ioctl+0x128/0x14f0 [ 675.843043][T16380] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 675.843060][T16380] ? find_held_lock+0x2b/0x80 [ 675.843073][T16380] ? hook_file_ioctl_common+0x144/0x410 [ 675.843089][T16380] ? __fget_files+0x20e/0x3c0 [ 675.843104][T16380] ? __fput_deferred+0x480/0x480 [ 675.843118][T16380] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 675.843129][T16380] __ia32_compat_sys_ioctl+0x242/0x370 [ 675.843144][T16380] __do_fast_syscall_32+0xe8/0x680 [ 675.843162][T16380] do_fast_syscall_32+0x32/0x80 [ 675.843172][T16380] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 675.843186][T16380] RIP: 0023:0xf709d579 [ 675.843195][T16380] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 675.843206][T16380] RSP: 002b:00000000f548d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 675.843217][T16380] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000040946400 [ 675.843223][T16380] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 675.843229][T16380] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 675.843235][T16380] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 675.843241][T16380] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 675.843254][T16380] [ 676.251303][T16385] netlink: 'syz.5.2429': attribute type 1 has an invalid length. [ 676.254015][T16385] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2429'. [ 676.684279][T16389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2430'. [ 676.720547][ T5945] Bluetooth: hci3: command tx timeout [ 676.739165][T16390] veth0: entered promiscuous mode [ 676.741996][T16390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2430'. [ 677.231190][T16398] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 677.233372][T16398] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 677.236420][T16398] vhci_hcd vhci_hcd.0: Device attached [ 677.277252][T16401] netlink: 'syz.1.2431': attribute type 1 has an invalid length. [ 677.286782][T16398] MPI: mpi too large (130952 bits) [ 677.288631][T16401] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2431'. [ 677.531021][ T24] usb 48-1: SetAddress Request (2) to port 0 [ 677.533159][ T24] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 677.650231][ T29] usb 8-1: USB disconnect, device number 12 [ 677.914373][T16399] vhci_hcd: connection reset by peer [ 677.918208][ T6461] vhci_hcd vhci_hcd.5: stop threads [ 677.920503][ T6461] vhci_hcd vhci_hcd.5: release socket [ 677.926601][ T6461] vhci_hcd vhci_hcd.5: disconnect device [ 677.965118][T16415] kvm: kvm [16414]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x187) = 0x8000 [ 678.110537][T16418] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2445'. [ 678.113521][T16418] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2445'. [ 678.952976][ T5945] Bluetooth: hci3: command tx timeout [ 680.170779][T16434] netlink: 'syz.4.2440': attribute type 1 has an invalid length. [ 680.176683][T16434] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2440'. [ 680.449403][ T6108] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 680.460157][ T5994] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 680.473214][T12397] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 680.610331][ T6108] usb 8-1: Using ep0 maxpacket: 8 [ 680.631579][ T6108] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 680.635336][ T6108] usb 8-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 680.639308][ T6108] usb 8-1: config 179 has no interface number 0 [ 680.641503][ T6108] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 680.647477][ T6108] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 680.663961][ T5994] usb 6-1: Using ep0 maxpacket: 8 [ 680.667363][T12397] usb 10-1: Using ep0 maxpacket: 8 [ 680.670078][ T6108] usb 8-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 680.675879][ T6108] usb 8-1: config 179 interface 65 has no altsetting 0 [ 680.678961][ T5994] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 680.682583][ T5994] usb 6-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 680.694404][ T6108] usb 8-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 680.698510][ T6108] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.703669][ T5994] usb 6-1: config 179 has no interface number 0 [ 680.706581][ T5994] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 680.711475][ T5994] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 680.716548][ T5994] usb 6-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 680.727956][ T5994] usb 6-1: config 179 interface 65 has no altsetting 0 [ 680.731018][ T5994] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 680.735091][ T5994] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.783576][T12397] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 680.787180][T12397] usb 10-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 680.792353][T12397] usb 10-1: config 179 has no interface number 0 [ 680.795130][T12397] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 680.799951][T12397] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 680.804931][T12397] usb 10-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 680.810567][T12397] usb 10-1: config 179 interface 65 has no altsetting 0 [ 680.812774][T12397] usb 10-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 680.815676][T12397] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.165836][ T5945] Bluetooth: hci3: command tx timeout [ 682.296422][ T29] usb 8-1: USB disconnect, device number 13 [ 682.374147][ T6032] usb 6-1: USB disconnect, device number 50 [ 682.571480][T16460] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2443'. [ 682.673225][T16464] kvm: kvm [16463]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x187) = 0x8000 [ 682.946230][ T6032] usb 10-1: USB disconnect, device number 2 [ 682.961968][ T24] usb 48-1: device descriptor read/8, error -110 [ 683.111011][T16472] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 683.113245][T16472] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 683.389380][ T5945] Bluetooth: hci3: command tx timeout [ 683.391975][ T24] usb usb48-port1: attempt power cycle [ 683.592483][T16472] vhci_hcd vhci_hcd.0: Device attached [ 683.650090][T16480] netlink: 'syz.4.2450': attribute type 1 has an invalid length. [ 683.669048][T16480] 8021q: adding VLAN 0 to HW filter on device bond10 [ 683.699845][T16480] bond10: (slave veth17): Enslaving as an active interface with a down link [ 683.708364][T16480] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2450'. [ 683.763493][T16473] vhci_hcd: connection closed [ 683.764860][ T1175] vhci_hcd vhci_hcd.1: stop threads [ 683.768361][ T1175] vhci_hcd vhci_hcd.1: release socket [ 683.770109][ T1175] vhci_hcd vhci_hcd.1: disconnect device [ 683.996692][ T24] usb usb48-port1: unable to enumerate USB device [ 684.013869][T16486] netlink: 'syz.4.2451': attribute type 1 has an invalid length. [ 684.016636][T16486] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2451'. [ 684.134543][T16490] FAULT_INJECTION: forcing a failure. [ 684.134543][T16490] name failslab, interval 1, probability 0, space 0, times 0 [ 684.138861][T16490] CPU: 3 UID: 0 PID: 16490 Comm: syz.5.2452 Tainted: G L syzkaller #0 PREEMPT(full) [ 684.138879][T16490] Tainted: [L]=SOFTLOCKUP [ 684.138883][T16490] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 684.138890][T16490] Call Trace: [ 684.138894][T16490] [ 684.138898][T16490] dump_stack_lvl+0x16c/0x1f0 [ 684.138919][T16490] should_fail_ex+0x512/0x640 [ 684.138931][T16490] ? __kmalloc_noprof+0xca/0x910 [ 684.138945][T16490] should_failslab+0xc2/0x120 [ 684.138963][T16490] __kmalloc_noprof+0xeb/0x910 [ 684.138975][T16490] ? _raw_write_unlock+0x28/0x50 [ 684.138990][T16490] ? comedi_alloc_devpriv+0x22/0x60 [ 684.139005][T16490] ? comedi_alloc_devpriv+0x22/0x60 [ 684.139016][T16490] comedi_alloc_devpriv+0x22/0x60 [ 684.139029][T16490] pcmmio_attach+0x91/0xe10 [ 684.139042][T16490] comedi_device_attach+0x3b3/0x900 [ 684.139058][T16490] do_devconfig_ioctl+0x1b1/0x710 [ 684.139074][T16490] ? comedi_unlocked_ioctl+0x167/0x2eb0 [ 684.139085][T16490] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 684.139108][T16490] ? kasan_save_track+0x14/0x30 [ 684.139122][T16490] ? kasan_save_free_info+0x3b/0x60 [ 684.139133][T16490] ? __kasan_slab_free+0x5f/0x80 [ 684.139147][T16490] ? kfree+0x2f8/0x6e0 [ 684.139157][T16490] ? tomoyo_path_number_perm+0x470/0x580 [ 684.139169][T16490] ? security_file_ioctl_compat+0x9b/0x240 [ 684.139182][T16490] ? __ia32_compat_sys_ioctl+0xc3/0x370 [ 684.139195][T16490] ? __do_fast_syscall_32+0xe8/0x680 [ 684.139215][T16490] comedi_unlocked_ioctl+0x1582/0x2eb0 [ 684.139230][T16490] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 684.139249][T16490] ? kasan_quarantine_put+0x10a/0x240 [ 684.139263][T16490] ? lockdep_hardirqs_on+0x7c/0x110 [ 684.139282][T16490] ? find_held_lock+0x2b/0x80 [ 684.139297][T16490] ? tomoyo_path_number_perm+0x295/0x580 [ 684.139312][T16490] ? tomoyo_path_number_perm+0x18d/0x580 [ 684.139326][T16490] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 684.139340][T16490] comedi_compat_ioctl+0x1ed/0xda0 [ 684.139351][T16490] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 684.139362][T16490] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 684.139380][T16490] ? do_vfs_ioctl+0x128/0x14f0 [ 684.139393][T16490] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 684.139410][T16490] ? find_held_lock+0x2b/0x80 [ 684.139423][T16490] ? hook_file_ioctl_common+0x144/0x410 [ 684.139440][T16490] ? __fget_files+0x20e/0x3c0 [ 684.139454][T16490] ? __fput_deferred+0x480/0x480 [ 684.139468][T16490] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 684.139479][T16490] __ia32_compat_sys_ioctl+0x242/0x370 [ 684.139494][T16490] __do_fast_syscall_32+0xe8/0x680 [ 684.139517][T16490] do_fast_syscall_32+0x32/0x80 [ 684.139527][T16490] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 684.139541][T16490] RIP: 0023:0xf709d579 [ 684.139550][T16490] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 684.139561][T16490] RSP: 002b:00000000f548d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 684.139571][T16490] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000040946400 [ 684.139578][T16490] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 684.139585][T16490] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 684.139591][T16490] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 684.139597][T16490] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 684.139610][T16490] [ 684.277450][T16492] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2453'. [ 684.865249][ T24] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 685.035728][ T24] usb 10-1: Using ep0 maxpacket: 8 [ 685.043001][ T24] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 685.047080][ T24] usb 10-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 685.051463][ T24] usb 10-1: config 179 has no interface number 0 [ 685.054332][ T24] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 685.060543][ T24] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 685.065525][ T24] usb 10-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 685.071651][ T24] usb 10-1: config 179 interface 65 has no altsetting 0 [ 685.074641][ T24] usb 10-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 685.079082][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.272991][T16503] netlink: 'syz.1.2456': attribute type 1 has an invalid length. [ 685.275773][T16503] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2456'. [ 686.758710][T16512] netlink: 'syz.4.2457': attribute type 1 has an invalid length. [ 686.763581][T16512] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2457'. [ 686.813831][T16516] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2458'. [ 686.819009][T16516] autofs: Unknown parameter '' [ 686.865661][T16518] netlink: 'syz.1.2459': attribute type 1 has an invalid length. [ 686.879499][T16518] 8021q: adding VLAN 0 to HW filter on device bond1 [ 686.911782][T16518] bond1: (slave veth1): Enslaving as an active interface with a down link [ 686.924191][T16518] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2459'. [ 687.623590][ T29] usb 10-1: USB disconnect, device number 3 [ 688.226624][T16530] FAULT_INJECTION: forcing a failure. [ 688.226624][T16530] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 688.240553][T16530] CPU: 0 UID: 0 PID: 16530 Comm: syz.5.2463 Tainted: G L syzkaller #0 PREEMPT(full) [ 688.240572][T16530] Tainted: [L]=SOFTLOCKUP [ 688.240575][T16530] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 688.240582][T16530] Call Trace: [ 688.240585][T16530] [ 688.240590][T16530] dump_stack_lvl+0x16c/0x1f0 [ 688.240623][T16530] should_fail_ex+0x512/0x640 [ 688.240639][T16530] should_fail_alloc_page+0xe7/0x130 [ 688.240658][T16530] prepare_alloc_pages+0x401/0x670 [ 688.240678][T16530] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 688.240693][T16530] ? __pfx___split_page_owner+0x10/0x10 [ 688.240713][T16530] ? __vmap_pages_range_noflush+0x3e7/0x670 [ 688.240730][T16530] ? is_vmalloc_addr+0x86/0xa0 [ 688.240742][T16530] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 688.240755][T16530] ? is_vmalloc_or_module_addr+0x47/0x60 [ 688.240769][T16530] ? __kasan_unpoison_vmalloc+0x22/0x30 [ 688.240783][T16530] ? __vmalloc_node_range_noprof+0x1259/0x16b0 [ 688.240798][T16530] ? comedi_buf_alloc+0x2fa/0x9d0 [ 688.240814][T16530] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 688.240832][T16530] ? policy_nodemask+0xea/0x4e0 [ 688.240850][T16530] alloc_pages_mpol+0x1fb/0x550 [ 688.240867][T16530] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 688.240888][T16530] alloc_pages_noprof+0x131/0x390 [ 688.240905][T16530] get_zeroed_page_noprof+0x18/0xb0 [ 688.240921][T16530] comedi_buf_alloc+0x63e/0x9d0 [ 688.240936][T16530] ? __init_swait_queue_head+0xca/0x150 [ 688.240951][T16530] comedi_device_postconfig+0x3dc/0xcd0 [ 688.240965][T16530] ? pcmmio_attach+0x6e/0xe10 [ 688.240978][T16530] comedi_device_attach+0x3cf/0x900 [ 688.240994][T16530] do_devconfig_ioctl+0x1b1/0x710 [ 688.241010][T16530] ? comedi_unlocked_ioctl+0x167/0x2eb0 [ 688.241021][T16530] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 688.241044][T16530] ? kasan_save_track+0x14/0x30 [ 688.241057][T16530] ? kasan_save_free_info+0x3b/0x60 [ 688.241068][T16530] ? __kasan_slab_free+0x5f/0x80 [ 688.241082][T16530] ? kfree+0x2f8/0x6e0 [ 688.241092][T16530] ? tomoyo_path_number_perm+0x470/0x580 [ 688.241105][T16530] ? security_file_ioctl_compat+0x9b/0x240 [ 688.241118][T16530] ? __ia32_compat_sys_ioctl+0xc3/0x370 [ 688.241131][T16530] ? __do_fast_syscall_32+0xe8/0x680 [ 688.241151][T16530] comedi_unlocked_ioctl+0x1582/0x2eb0 [ 688.241166][T16530] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 688.241185][T16530] ? kasan_quarantine_put+0x10a/0x240 [ 688.241199][T16530] ? lockdep_hardirqs_on+0x7c/0x110 [ 688.241217][T16530] ? find_held_lock+0x2b/0x80 [ 688.241232][T16530] ? tomoyo_path_number_perm+0x295/0x580 [ 688.241246][T16530] ? tomoyo_path_number_perm+0x18d/0x580 [ 688.241260][T16530] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 688.241274][T16530] comedi_compat_ioctl+0x1ed/0xda0 [ 688.241285][T16530] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 688.241296][T16530] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 688.241313][T16530] ? do_vfs_ioctl+0x128/0x14f0 [ 688.241327][T16530] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 688.241344][T16530] ? find_held_lock+0x2b/0x80 [ 688.241357][T16530] ? hook_file_ioctl_common+0x144/0x410 [ 688.241374][T16530] ? __fget_files+0x20e/0x3c0 [ 688.241388][T16530] ? __fput_deferred+0x480/0x480 [ 688.241402][T16530] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 688.241413][T16530] __ia32_compat_sys_ioctl+0x242/0x370 [ 688.241428][T16530] __do_fast_syscall_32+0xe8/0x680 [ 688.241447][T16530] do_fast_syscall_32+0x32/0x80 [ 688.241457][T16530] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 688.241471][T16530] RIP: 0023:0xf709d579 [ 688.241480][T16530] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 688.241491][T16530] RSP: 002b:00000000f548d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 688.241502][T16530] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000040946400 [ 688.241509][T16530] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 688.241515][T16530] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 688.241521][T16530] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 688.241527][T16530] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 688.241541][T16530] [ 688.242202][T16530] comedi comedi3: Buffer allocation failed [ 688.627844][T16527] mkiss: ax0: crc mode is auto. [ 688.892768][T16546] mkiss: ax0: crc mode is auto. [ 688.955043][T16547] netlink: 'syz.3.2468': attribute type 1 has an invalid length. [ 688.977218][T16547] 8021q: adding VLAN 0 to HW filter on device bond2 [ 689.044196][T16547] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2468'. [ 689.083983][T16550] siw: device registration error -23 [ 689.126082][T16546] bond2: (slave veth5): Enslaving as an active interface with a down link [ 689.165827][T16550] wireguard0: entered promiscuous mode [ 689.167613][T16550] wireguard0: entered allmulticast mode [ 691.289738][ T40] audit: type=1800 audit(2000000320.720:1326): pid=16598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2479" name="nullb0" dev="tmpfs" ino=267 res=0 errno=0 [ 693.067896][T16616] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2482'. [ 693.071779][T16616] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2482'. [ 696.788995][T16603] Set syz1 is full, maxelem 65536 reached [ 698.440949][T16653] netlink: 'syz.4.2490': attribute type 1 has an invalid length. [ 698.443700][T16653] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2490'. [ 699.082689][T16658] wireguard0: entered promiscuous mode [ 699.093868][T16658] wireguard0: entered allmulticast mode [ 699.135464][T16614] Set syz1 is full, maxelem 65536 reached [ 699.405633][T16640] Set syz1 is full, maxelem 65536 reached [ 699.444701][T16665] FAULT_INJECTION: forcing a failure. [ 699.444701][T16665] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 699.450455][T16665] CPU: 0 UID: 0 PID: 16665 Comm: syz.4.2493 Tainted: G L syzkaller #0 PREEMPT(full) [ 699.450482][T16665] Tainted: [L]=SOFTLOCKUP [ 699.450489][T16665] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 699.450500][T16665] Call Trace: [ 699.450506][T16665] [ 699.450513][T16665] dump_stack_lvl+0x16c/0x1f0 [ 699.450546][T16665] should_fail_ex+0x512/0x640 [ 699.450570][T16665] should_fail_alloc_page+0xe7/0x130 [ 699.450600][T16665] prepare_alloc_pages+0x401/0x670 [ 699.450634][T16665] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 699.450656][T16665] ? should_fail_alloc_page+0xee/0x130 [ 699.450687][T16665] ? rcu_is_watching+0x12/0xc0 [ 699.450712][T16665] ? trace_mm_page_alloc+0x11b/0x180 [ 699.450739][T16665] ? __alloc_frozen_pages_noprof+0x292/0x2430 [ 699.450761][T16665] ? stack_trace_save+0x8e/0xc0 [ 699.450788][T16665] ? __pfx_stack_trace_save+0x10/0x10 [ 699.450816][T16665] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 699.450839][T16665] ? find_held_lock+0x2b/0x80 [ 699.450865][T16665] ? kasan_save_stack+0x42/0x60 [ 699.450890][T16665] ? __get_vm_area_node+0x1ca/0x330 [ 699.450917][T16665] ? __vmalloc_node_noprof+0xad/0xf0 [ 699.450933][T16665] ? comedi_device_postconfig+0x3dc/0xcd0 [ 699.450954][T16665] ? comedi_device_attach+0x3cf/0x900 [ 699.450973][T16665] ? do_devconfig_ioctl+0x1b1/0x710 [ 699.450997][T16665] ? comedi_unlocked_ioctl+0x1582/0x2eb0 [ 699.451013][T16665] ? comedi_compat_ioctl+0x1ed/0xda0 [ 699.451029][T16665] ? __ia32_compat_sys_ioctl+0x242/0x370 [ 699.451051][T16665] ? __do_fast_syscall_32+0xe8/0x680 [ 699.451088][T16665] alloc_pages_bulk_noprof+0x77a/0x1410 [ 699.451110][T16665] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 699.451138][T16665] ? policy_nodemask+0xea/0x4e0 [ 699.451168][T16665] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 699.451192][T16665] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 699.451231][T16665] __kasan_populate_vmalloc+0xfb/0x220 [ 699.451260][T16665] alloc_vmap_area+0x98d/0x2a50 [ 699.451298][T16665] ? __pfx_alloc_vmap_area+0x10/0x10 [ 699.451331][T16665] __get_vm_area_node+0x1ca/0x330 [ 699.451364][T16665] __vmalloc_node_range_noprof+0x247/0x16b0 [ 699.451383][T16665] ? comedi_buf_alloc+0x2fa/0x9d0 [ 699.451403][T16665] ? __do_fast_syscall_32+0xe8/0x680 [ 699.451435][T16665] ? do_fast_syscall_32+0x32/0x80 [ 699.451450][T16665] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 699.451480][T16665] ? comedi_buf_alloc+0x2fa/0x9d0 [ 699.451508][T16665] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 699.451539][T16665] ? comedi_buf_alloc+0x2fa/0x9d0 [ 699.451560][T16665] __vmalloc_node_noprof+0xad/0xf0 [ 699.451577][T16665] ? comedi_buf_alloc+0x2fa/0x9d0 [ 699.451602][T16665] comedi_buf_alloc+0x2fa/0x9d0 [ 699.451627][T16665] ? __init_swait_queue_head+0xca/0x150 [ 699.451652][T16665] comedi_device_postconfig+0x3dc/0xcd0 [ 699.451674][T16665] ? pcmmio_attach+0x6e/0xe10 [ 699.451696][T16665] comedi_device_attach+0x3cf/0x900 [ 699.451724][T16665] do_devconfig_ioctl+0x1b1/0x710 [ 699.451750][T16665] ? comedi_unlocked_ioctl+0x167/0x2eb0 [ 699.451768][T16665] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 699.451806][T16665] ? kasan_save_track+0x14/0x30 [ 699.451828][T16665] ? kasan_save_free_info+0x3b/0x60 [ 699.451846][T16665] ? __kasan_slab_free+0x5f/0x80 [ 699.451870][T16665] ? kfree+0x2f8/0x6e0 [ 699.451886][T16665] ? tomoyo_path_number_perm+0x470/0x580 [ 699.451906][T16665] ? security_file_ioctl_compat+0x9b/0x240 [ 699.451927][T16665] ? __ia32_compat_sys_ioctl+0xc3/0x370 [ 699.451948][T16665] ? __do_fast_syscall_32+0xe8/0x680 [ 699.451980][T16665] comedi_unlocked_ioctl+0x1582/0x2eb0 [ 699.452007][T16665] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 699.452042][T16665] ? kasan_quarantine_put+0x10a/0x240 [ 699.452065][T16665] ? lockdep_hardirqs_on+0x7c/0x110 [ 699.452095][T16665] ? find_held_lock+0x2b/0x80 [ 699.452119][T16665] ? tomoyo_path_number_perm+0x295/0x580 [ 699.452144][T16665] ? tomoyo_path_number_perm+0x18d/0x580 [ 699.452166][T16665] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 699.452190][T16665] comedi_compat_ioctl+0x1ed/0xda0 [ 699.452208][T16665] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 699.452227][T16665] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 699.452254][T16665] ? do_vfs_ioctl+0x128/0x14f0 [ 699.452276][T16665] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 699.452305][T16665] ? find_held_lock+0x2b/0x80 [ 699.452327][T16665] ? hook_file_ioctl_common+0x144/0x410 [ 699.452355][T16665] ? __fget_files+0x20e/0x3c0 [ 699.452378][T16665] ? __fput_deferred+0x480/0x480 [ 699.452400][T16665] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 699.452424][T16665] __ia32_compat_sys_ioctl+0x242/0x370 [ 699.452449][T16665] __do_fast_syscall_32+0xe8/0x680 [ 699.452479][T16665] do_fast_syscall_32+0x32/0x80 [ 699.452496][T16665] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 699.452517][T16665] RIP: 0023:0xf7fb1579 [ 699.452532][T16665] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 699.452549][T16665] RSP: 002b:00000000f54a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 699.452567][T16665] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000040946400 [ 699.452579][T16665] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 699.452589][T16665] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 699.452599][T16665] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 699.452609][T16665] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 699.452634][T16665] [ 699.452677][T16665] syz.4.2493: vmalloc error: size 8192, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 700.318929][T16665] CPU: 2 UID: 0 PID: 16665 Comm: syz.4.2493 Tainted: G L syzkaller #0 PREEMPT(full) [ 700.318947][T16665] Tainted: [L]=SOFTLOCKUP [ 700.318951][T16665] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 700.318958][T16665] Call Trace: [ 700.318962][T16665] [ 700.318966][T16665] dump_stack_lvl+0x16c/0x1f0 [ 700.318987][T16665] warn_alloc+0x248/0x3a0 [ 700.319004][T16665] ? __pfx_warn_alloc+0x10/0x10 [ 700.319025][T16665] ? __get_vm_area_node+0x2cd/0x330 [ 700.319057][T16665] ? __get_vm_area_node+0x2cd/0x330 [ 700.319082][T16665] ? __get_vm_area_node+0x208/0x330 [ 700.319115][T16665] __vmalloc_node_range_noprof+0xbe0/0x16b0 [ 700.319132][T16665] ? __do_fast_syscall_32+0xe8/0x680 [ 700.319157][T16665] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 700.319185][T16665] ? comedi_buf_alloc+0x2fa/0x9d0 [ 700.319208][T16665] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 700.319229][T16665] ? comedi_buf_alloc+0x2fa/0x9d0 [ 700.319242][T16665] __vmalloc_node_noprof+0xad/0xf0 [ 700.319253][T16665] ? comedi_buf_alloc+0x2fa/0x9d0 [ 700.319268][T16665] comedi_buf_alloc+0x2fa/0x9d0 [ 700.319283][T16665] ? __init_swait_queue_head+0xca/0x150 [ 700.319298][T16665] comedi_device_postconfig+0x3dc/0xcd0 [ 700.319312][T16665] ? pcmmio_attach+0x6e/0xe10 [ 700.319326][T16665] comedi_device_attach+0x3cf/0x900 [ 700.319343][T16665] do_devconfig_ioctl+0x1b1/0x710 [ 700.319359][T16665] ? comedi_unlocked_ioctl+0x167/0x2eb0 [ 700.319370][T16665] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 700.319392][T16665] ? kasan_save_track+0x14/0x30 [ 700.319407][T16665] ? kasan_save_free_info+0x3b/0x60 [ 700.319418][T16665] ? __kasan_slab_free+0x5f/0x80 [ 700.319437][T16665] ? kfree+0x2f8/0x6e0 [ 700.319447][T16665] ? tomoyo_path_number_perm+0x470/0x580 [ 700.319459][T16665] ? security_file_ioctl_compat+0x9b/0x240 [ 700.319472][T16665] ? __ia32_compat_sys_ioctl+0xc3/0x370 [ 700.319485][T16665] ? __do_fast_syscall_32+0xe8/0x680 [ 700.319505][T16665] comedi_unlocked_ioctl+0x1582/0x2eb0 [ 700.319520][T16665] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 700.319539][T16665] ? kasan_quarantine_put+0x10a/0x240 [ 700.319554][T16665] ? lockdep_hardirqs_on+0x7c/0x110 [ 700.319572][T16665] ? find_held_lock+0x2b/0x80 [ 700.319592][T16665] ? tomoyo_path_number_perm+0x295/0x580 [ 700.319613][T16665] ? tomoyo_path_number_perm+0x18d/0x580 [ 700.319633][T16665] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 700.319649][T16665] comedi_compat_ioctl+0x1ed/0xda0 [ 700.319660][T16665] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 700.319671][T16665] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 700.319689][T16665] ? do_vfs_ioctl+0x128/0x14f0 [ 700.319702][T16665] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 700.319719][T16665] ? find_held_lock+0x2b/0x80 [ 700.319732][T16665] ? hook_file_ioctl_common+0x144/0x410 [ 700.319749][T16665] ? __fget_files+0x20e/0x3c0 [ 700.319764][T16665] ? __fput_deferred+0x480/0x480 [ 700.319777][T16665] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 700.319789][T16665] __ia32_compat_sys_ioctl+0x242/0x370 [ 700.319804][T16665] __do_fast_syscall_32+0xe8/0x680 [ 700.319823][T16665] do_fast_syscall_32+0x32/0x80 [ 700.319833][T16665] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 700.319846][T16665] RIP: 0023:0xf7fb1579 [ 700.319855][T16665] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 700.319865][T16665] RSP: 002b:00000000f54a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 700.319876][T16665] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000040946400 [ 700.319882][T16665] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 700.319888][T16665] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 700.319895][T16665] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 700.319901][T16665] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 700.319914][T16665] [ 700.319918][T16665] Mem-Info: [ 700.472529][T16665] active_anon:11016 inactive_anon:114 isolated_anon:0 [ 700.472529][T16665] active_file:2584 inactive_file:14107 isolated_file:0 [ 700.472529][T16665] unevictable:1768 dirty:335 writeback:0 [ 700.472529][T16665] slab_reclaimable:6789 slab_unreclaimable:64869 [ 700.472529][T16665] mapped:36907 shmem:10387 pagetables:1261 [ 700.472529][T16665] sec_pagetables:326 bounce:0 [ 700.472529][T16665] kernel_misc_reclaimable:0 [ 700.472529][T16665] free:30566 free_pcp:15228 free_cma:0 [ 700.490433][T16665] Node 0 active_anon:20kB inactive_anon:216kB active_file:0kB inactive_file:164kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:16kB dirty:16kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9792kB pagetables:1880kB sec_pagetables:1204kB all_unreclaimable? yes Balloon:0kB [ 700.503699][T16665] Node 1 active_anon:44644kB inactive_anon:240kB active_file:10336kB inactive_file:56264kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:147612kB dirty:1324kB writeback:0kB shmem:38012kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9332kB pagetables:3164kB sec_pagetables:100kB all_unreclaimable? no Balloon:0kB [ 700.526624][T16665] Node 0 DMA free:2004kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:464kB local_pcp:20kB free_cma:0kB [ 700.540368][T16665] lowmem_reserve[]: 0 289 289 289 289 [ 700.542742][T16665] Node 0 DMA32 free:16308kB boost:0kB min:13332kB low:16664kB high:19996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20kB inactive_anon:216kB active_file:0kB inactive_file:164kB unevictable:3536kB writepending:16kB zspages:180kB present:1032196kB managed:296812kB mlocked:0kB bounce:0kB free_pcp:11356kB local_pcp:3656kB free_cma:0kB [ 700.556825][T16665] lowmem_reserve[]: 0 0 0 0 0 [ 700.559233][T16665] Node 1 DMA32 free:103932kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:45680kB inactive_anon:240kB active_file:10336kB inactive_file:56264kB unevictable:3536kB writepending:1328kB zspages:4572kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:47100kB local_pcp:5424kB free_cma:0kB [ 700.913237][T16665] lowmem_reserve[]: 0 0 0 0 0 [ 700.915465][T16665] Node 0 DMA: 1*4kB (U) 2*8kB (UM) 0*16kB 0*32kB 1*64kB (M) 1*128kB (U) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2004kB [ 700.921638][T16665] Node 0 DMA32: 31*4kB (UME) 237*8kB (UME) 201*16kB (UM) 126*32kB (UME) 50*64kB (UME) 16*128kB (UME) 7*256kB (UME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16308kB [ 700.928749][T16665] Node 1 DMA32: 205*4kB (UM) 373*8kB (UME) 852*16kB (UM) 92*32kB (ME) 166*64kB (UME) 119*128kB (UME) 62*256kB (UME) 30*512kB (UME) 19*1024kB (UM) 3*2048kB (UM) 0*4096kB = 103068kB [ 700.936321][T16665] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 700.941638][T16665] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 700.945881][T16665] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 701.584136][T16665] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 701.606679][T16665] 24655 total pagecache pages [ 701.608766][T16665] 664 pages in swap cache [ 701.610665][T16665] Free swap = 104568kB [ 701.612471][T16665] Total swap = 124996kB [ 701.614296][T16665] 524155 pages RAM [ 701.615937][T16665] 0 pages HighMem/MovableOnly [ 701.723930][T16665] 209059 pages reserved [ 701.725334][T16665] 0 pages cma reserved [ 701.726701][T16665] comedi comedi3: Buffer allocation failed [ 701.986312][T16687] vhci_hcd vhci_hcd.0: port 0 already used [ 701.999117][T16687] MPI: mpi too large (130952 bits) [ 705.080350][T16707] siw: device registration error -23 [ 705.104804][T16707] wireguard0: entered promiscuous mode [ 705.107256][T16707] wireguard0: entered allmulticast mode [ 706.649954][T16742] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2510'. [ 706.654265][T16742] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2510'. [ 707.774634][T15908] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 707.967096][T15908] usb 10-1: Using ep0 maxpacket: 8 [ 707.970605][T15908] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 707.973318][T15908] usb 10-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 707.987651][T15908] usb 10-1: config 179 has no interface number 0 [ 707.993842][T15908] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 707.997522][T15908] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 708.009801][T15908] usb 10-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 708.015417][T15908] usb 10-1: config 179 interface 65 has no altsetting 0 [ 708.017698][T15908] usb 10-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 708.031175][T15908] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.059135][T16783] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2523'. [ 710.138591][ T29] usb 10-1: USB disconnect, device number 4 [ 710.254218][T16786] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 710.261354][T16786] block device autoloading is deprecated and will be removed. [ 710.324785][T16786] loop0: detected capacity change from 0 to 7 [ 710.591801][T16790] Set syz1 is full, maxelem 65536 reached [ 710.919587][ T29] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 712.008067][ T29] usb 10-1: Using ep0 maxpacket: 8 [ 712.011174][ T29] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 712.014106][ T29] usb 10-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 712.017608][ T29] usb 10-1: config 179 has no interface number 0 [ 712.019844][ T29] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 712.023489][ T29] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 712.027563][ T29] usb 10-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 712.031924][ T29] usb 10-1: config 179 interface 65 has no altsetting 0 [ 712.034220][ T29] usb 10-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 712.037189][ T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.492470][ T29] usb 10-1: USB disconnect, device number 5 [ 713.290983][ T5994] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 713.472705][ T5994] usb 8-1: Using ep0 maxpacket: 8 [ 713.476577][ T5994] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 713.480184][ T5994] usb 8-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 713.484625][ T5994] usb 8-1: config 179 has no interface number 0 [ 713.487306][ T5994] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 713.491951][ T5994] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 713.497145][ T5994] usb 8-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 713.502859][ T5994] usb 8-1: config 179 interface 65 has no altsetting 0 [ 713.505823][ T5994] usb 8-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 713.509666][ T5994] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.695255][T16822] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 714.983514][ T1025] usb 8-1: USB disconnect, device number 14 [ 715.011718][T16859] MPI: mpi too large (130952 bits) [ 715.207303][T16866] netlink: 'syz.3.2540': attribute type 1 has an invalid length. [ 715.221543][T16866] 8021q: adding VLAN 0 to HW filter on device bond3 [ 715.260870][T16866] bond3: (slave veth7): Enslaving as an active interface with a down link [ 715.289908][T16866] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2540'. [ 715.997056][T16874] input: syz0 as /devices/virtual/input/input14 [ 716.007805][ T5994] kernel read not supported for file /bus/input/devices (pid: 5994 comm: kworker/3:3) [ 716.567321][T16187] syz_tun (unregistering): left allmulticast mode [ 716.917302][T16886] Set syz1 is full, maxelem 65536 reached [ 717.148072][T10196] bridge_slave_1: left allmulticast mode [ 717.150939][T10196] bridge_slave_1: left promiscuous mode [ 717.153844][T10196] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.886469][T10196] bond1 (unregistering): (slave veth3): Releasing active interface [ 717.891412][T10196] bond1 (unregistering): Released all slaves [ 718.000508][T10196] bond2 (unregistering): (slave veth7): Releasing active interface [ 718.005002][T10196] bond2 (unregistering): Released all slaves [ 718.111252][T10196] bond3 (unregistering): (slave veth9): Releasing active interface [ 718.116058][T10196] bond3 (unregistering): Released all slaves [ 718.327644][T16904] netlink: 'syz.5.2549': attribute type 1 has an invalid length. [ 718.339565][T16904] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2549'. [ 718.362059][T10196] bond4 (unregistering): (slave veth13): Releasing active interface [ 718.365085][T10196] bond4 (unregistering): Released all slaves [ 718.569033][T10196] bond5 (unregistering): Released all slaves [ 718.667877][T10196] bond6 (unregistering): Released all slaves [ 718.756641][T10196] bond0 (unregistering): (slave veth15): Releasing active interface [ 718.767883][T10196] bond0 (unregistering): Released all slaves [ 718.861879][T10196] bond7 (unregistering): (slave veth17): Releasing active interface [ 718.865249][T10196] bond7 (unregistering): Released all slaves [ 718.947319][T10196] bond8 (unregistering): (slave veth19): Releasing active interface [ 718.951272][T10196] bond8 (unregistering): Released all slaves [ 719.027786][T10196] bond9 (unregistering): (slave veth21): Releasing active interface [ 719.032538][T10196] bond9 (unregistering): Released all slaves [ 719.116962][T10196] bond10 (unregistering): (slave veth23): Releasing active interface [ 719.124185][T10196] bond10 (unregistering): Released all slaves [ 719.232572][T10196] bond11 (unregistering): (slave veth25): Releasing active interface [ 719.238650][T10196] bond11 (unregistering): Released all slaves [ 719.319034][T10196] bond12 (unregistering): (slave veth27): Releasing active interface [ 719.322793][T10196] bond12 (unregistering): Released all slaves [ 719.462483][T10196] tipc: Disabling bearer [ 719.473542][T10196] tipc: Left network mode [ 719.508124][T16913] wireguard0: entered promiscuous mode [ 719.510632][T16913] wireguard0: entered allmulticast mode [ 719.808628][T10196] hsr_slave_0: left promiscuous mode [ 719.817370][T10196] hsr_slave_1: left promiscuous mode [ 719.892853][T16924] Set syz1 is full, maxelem 65536 reached [ 720.658180][T10196] team0 (unregistering): Port device batadv3 removed [ 720.667458][T10196] team0 (unregistering): Port device batadv2 removed [ 721.965365][T10196] team0 (unregistering): Port device team_slave_1 removed [ 722.002753][T16941] netlink: 'syz.5.2557': attribute type 1 has an invalid length. [ 722.005515][T16941] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2557'. [ 722.081130][T10196] team0 (unregistering): Port device team_slave_0 removed [ 722.464874][T16949] MPI: mpi too large (130952 bits) [ 722.799542][T16951] kvm: kvm [16950]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x187) = 0x8000 [ 722.997723][T16958] netlink: 'syz.4.2563': attribute type 1 has an invalid length. [ 723.084710][T16958] 8021q: adding VLAN 0 to HW filter on device bond11 [ 723.107267][T16962] bond11: (slave veth19): Enslaving as an active interface with a down link [ 723.142672][T16958] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2563'. [ 723.369789][T10196] IPVS: stop unused estimator thread 0... [ 724.178893][T16976] siw: device registration error -23 [ 725.274674][T16980] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2569'. [ 725.278157][T16980] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2569'. [ 725.809872][T16991] siw: device registration error -23 [ 725.939412][T16996] siw: device registration error -23 [ 727.789519][T17012] FAULT_INJECTION: forcing a failure. [ 727.789519][T17012] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 727.794118][T17012] CPU: 1 UID: 0 PID: 17012 Comm: syz.5.2579 Tainted: G L syzkaller #0 PREEMPT(full) [ 727.794136][T17012] Tainted: [L]=SOFTLOCKUP [ 727.794140][T17012] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 727.794146][T17012] Call Trace: [ 727.794150][T17012] [ 727.794155][T17012] dump_stack_lvl+0x16c/0x1f0 [ 727.794191][T17012] should_fail_ex+0x512/0x640 [ 727.794210][T17012] _copy_from_iter+0x2a4/0x16c0 [ 727.794224][T17012] ? __alloc_skb+0x220/0x410 [ 727.794236][T17012] ? __alloc_skb+0x35d/0x410 [ 727.794248][T17012] ? __pfx__copy_from_iter+0x10/0x10 [ 727.794260][T17012] ? netlink_autobind.isra.0+0x158/0x370 [ 727.794281][T17012] netlink_sendmsg+0x820/0xdd0 [ 727.794299][T17012] ? __pfx_netlink_sendmsg+0x10/0x10 [ 727.794316][T17012] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 727.794337][T17012] ____sys_sendmsg+0xa5d/0xc30 [ 727.794356][T17012] ? __pfx_____sys_sendmsg+0x10/0x10 [ 727.794372][T17012] ? get_compat_msghdr+0x11a/0x170 [ 727.794391][T17012] ___sys_sendmsg+0x134/0x1d0 [ 727.794406][T17012] ? __pfx____sys_sendmsg+0x10/0x10 [ 727.794425][T17012] ? find_held_lock+0x2b/0x80 [ 727.794448][T17012] __sys_sendmsg+0x16d/0x220 [ 727.794462][T17012] ? __pfx___sys_sendmsg+0x10/0x10 [ 727.794481][T17012] ? do_user_addr_fault+0x843/0x1370 [ 727.794497][T17012] __do_fast_syscall_32+0xe8/0x680 [ 727.794516][T17012] do_fast_syscall_32+0x32/0x80 [ 727.794526][T17012] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 727.794539][T17012] RIP: 0023:0xf709d579 [ 727.794548][T17012] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 727.794559][T17012] RSP: 002b:00000000f548d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 727.794569][T17012] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800003c0 [ 727.794576][T17012] RDX: 0000000020004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 727.794582][T17012] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 727.794588][T17012] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 727.794595][T17012] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 727.794608][T17012] [ 728.278855][ T40] audit: type=1326 audit(2000000355.358:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17018 comm="syz.3.2582" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 728.289045][ T40] audit: type=1326 audit(2000000355.358:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17018 comm="syz.3.2582" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 728.296163][ T40] audit: type=1326 audit(2000000355.367:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17018 comm="syz.3.2582" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 728.303108][ T40] audit: type=1326 audit(2000000355.367:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17018 comm="syz.3.2582" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 728.310092][ T40] audit: type=1326 audit(2000000355.367:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17018 comm="syz.3.2582" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 728.362978][ T40] audit: type=1326 audit(2000000355.367:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17018 comm="syz.3.2582" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 728.517005][ T40] audit: type=1326 audit(2000000355.367:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17018 comm="syz.3.2582" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 728.545876][ T40] audit: type=1326 audit(2000000355.367:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17018 comm="syz.3.2582" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 728.557849][ T40] audit: type=1326 audit(2000000355.367:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17018 comm="syz.3.2582" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 728.577526][ T40] audit: type=1326 audit(2000000355.367:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17018 comm="syz.3.2582" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 728.721128][T17030] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2585'. [ 728.724956][T17030] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2585'. [ 728.776765][T17032] siw: device registration error -23 [ 728.916691][T17019] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 730.102359][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 730.105188][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 730.526244][T17044] FAULT_INJECTION: forcing a failure. [ 730.526244][T17044] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 730.530858][T17044] CPU: 0 UID: 0 PID: 17044 Comm: syz.3.2590 Tainted: G L syzkaller #0 PREEMPT(full) [ 730.530881][T17044] Tainted: [L]=SOFTLOCKUP [ 730.530885][T17044] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 730.530892][T17044] Call Trace: [ 730.530896][T17044] [ 730.530900][T17044] dump_stack_lvl+0x16c/0x1f0 [ 730.530921][T17044] should_fail_ex+0x512/0x640 [ 730.530936][T17044] should_fail_alloc_page+0xe7/0x130 [ 730.530955][T17044] prepare_alloc_pages+0x401/0x670 [ 730.530973][T17044] ? rcu_is_watching+0x12/0xc0 [ 730.530990][T17044] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 730.531006][T17044] ? __pfx___split_page_owner+0x10/0x10 [ 730.531026][T17044] ? __vmap_pages_range_noflush+0x3e7/0x670 [ 730.531044][T17044] ? is_vmalloc_addr+0x86/0xa0 [ 730.531056][T17044] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 730.531069][T17044] ? is_vmalloc_or_module_addr+0x47/0x60 [ 730.531082][T17044] ? __kasan_unpoison_vmalloc+0x22/0x30 [ 730.531096][T17044] ? __vmalloc_node_range_noprof+0x1259/0x16b0 [ 730.531112][T17044] ? comedi_buf_alloc+0x2fa/0x9d0 [ 730.531129][T17044] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 730.531147][T17044] ? policy_nodemask+0xea/0x4e0 [ 730.531165][T17044] alloc_pages_mpol+0x1fb/0x550 [ 730.531183][T17044] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 730.531203][T17044] alloc_pages_noprof+0x131/0x390 [ 730.531220][T17044] get_zeroed_page_noprof+0x18/0xb0 [ 730.531237][T17044] comedi_buf_alloc+0x63e/0x9d0 [ 730.531252][T17044] ? __init_swait_queue_head+0xca/0x150 [ 730.531267][T17044] comedi_device_postconfig+0x3dc/0xcd0 [ 730.531280][T17044] ? pcmmio_attach+0x6e/0xe10 [ 730.531293][T17044] comedi_device_attach+0x3cf/0x900 [ 730.531310][T17044] do_devconfig_ioctl+0x1b1/0x710 [ 730.531326][T17044] ? comedi_unlocked_ioctl+0x167/0x2eb0 [ 730.531337][T17044] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 730.531359][T17044] ? kasan_save_track+0x14/0x30 [ 730.531380][T17044] ? kasan_save_free_info+0x3b/0x60 [ 730.531397][T17044] ? __kasan_slab_free+0x5f/0x80 [ 730.531421][T17044] ? kfree+0x2f8/0x6e0 [ 730.531437][T17044] ? tomoyo_path_number_perm+0x470/0x580 [ 730.531458][T17044] ? security_file_ioctl_compat+0x9b/0x240 [ 730.531479][T17044] ? __ia32_compat_sys_ioctl+0xc3/0x370 [ 730.531501][T17044] ? __do_fast_syscall_32+0xe8/0x680 [ 730.531523][T17044] comedi_unlocked_ioctl+0x1582/0x2eb0 [ 730.531538][T17044] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 730.531557][T17044] ? kasan_quarantine_put+0x10a/0x240 [ 730.531571][T17044] ? lockdep_hardirqs_on+0x7c/0x110 [ 730.531589][T17044] ? find_held_lock+0x2b/0x80 [ 730.531604][T17044] ? tomoyo_path_number_perm+0x295/0x580 [ 730.531619][T17044] ? tomoyo_path_number_perm+0x18d/0x580 [ 730.531632][T17044] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 730.531647][T17044] comedi_compat_ioctl+0x1ed/0xda0 [ 730.531658][T17044] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 730.531669][T17044] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 730.531686][T17044] ? do_vfs_ioctl+0x128/0x14f0 [ 730.531700][T17044] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 730.531717][T17044] ? find_held_lock+0x2b/0x80 [ 730.531730][T17044] ? hook_file_ioctl_common+0x144/0x410 [ 730.531746][T17044] ? __fget_files+0x20e/0x3c0 [ 730.531761][T17044] ? __fput_deferred+0x480/0x480 [ 730.531774][T17044] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 730.531786][T17044] __ia32_compat_sys_ioctl+0x242/0x370 [ 730.531801][T17044] __do_fast_syscall_32+0xe8/0x680 [ 730.531819][T17044] do_fast_syscall_32+0x32/0x80 [ 730.531829][T17044] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 730.531843][T17044] RIP: 0023:0xf701d579 [ 730.531852][T17044] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 730.531863][T17044] RSP: 002b:00000000f540d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 730.531878][T17044] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000040946400 [ 730.531885][T17044] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 730.531892][T17044] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 730.531898][T17044] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 730.531904][T17044] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 730.531918][T17044] [ 730.532004][T17044] comedi comedi3: Buffer allocation failed [ 731.354807][T17054] MPI: mpi too large (130952 bits) [ 731.572823][T17055] netlink: 'syz.3.2593': attribute type 1 has an invalid length. [ 731.588738][T17055] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2593'. [ 731.631861][T17059] FAULT_INJECTION: forcing a failure. [ 731.631861][T17059] name failslab, interval 1, probability 0, space 0, times 0 [ 731.638535][T17059] CPU: 2 UID: 0 PID: 17059 Comm: syz.5.2594 Tainted: G L syzkaller #0 PREEMPT(full) [ 731.638565][T17059] Tainted: [L]=SOFTLOCKUP [ 731.638572][T17059] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 731.638583][T17059] Call Trace: [ 731.638589][T17059] [ 731.638595][T17059] dump_stack_lvl+0x16c/0x1f0 [ 731.638627][T17059] should_fail_ex+0x512/0x640 [ 731.638644][T17059] ? __kmalloc_cache_noprof+0x5f/0x800 [ 731.638665][T17059] should_failslab+0xc2/0x120 [ 731.638694][T17059] __kmalloc_cache_noprof+0x80/0x800 [ 731.638714][T17059] ? net_generic+0xea/0x2a0 [ 731.638732][T17059] ? ip_set_create+0x346/0x1520 [ 731.638757][T17059] ? ip_set_create+0x346/0x1520 [ 731.638777][T17059] ip_set_create+0x346/0x1520 [ 731.638806][T17059] ? __pfx_ip_set_create+0x10/0x10 [ 731.638844][T17059] ? find_held_lock+0x2b/0x80 [ 731.638873][T17059] nfnetlink_rcv_msg+0x9fc/0x1200 [ 731.638902][T17059] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 731.638926][T17059] ? kfree_skbmem+0x1a4/0x1f0 [ 731.638941][T17059] ? kfree_skbmem+0x1a4/0x1f0 [ 731.638983][T17059] ? __pfx___dev_queue_xmit+0x10/0x10 [ 731.639008][T17059] netlink_rcv_skb+0x158/0x420 [ 731.639034][T17059] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 731.639055][T17059] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 731.639099][T17059] ? ns_capable+0xd7/0x110 [ 731.639125][T17059] nfnetlink_rcv+0x1b3/0x430 [ 731.639145][T17059] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 731.639164][T17059] ? netlink_deliver_tap+0x1ae/0xd30 [ 731.639195][T17059] netlink_unicast+0x5aa/0x870 [ 731.639224][T17059] ? __pfx_netlink_unicast+0x10/0x10 [ 731.639260][T17059] netlink_sendmsg+0x8c8/0xdd0 [ 731.639290][T17059] ? __pfx_netlink_sendmsg+0x10/0x10 [ 731.639319][T17059] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 731.639354][T17059] ____sys_sendmsg+0xa5d/0xc30 [ 731.639385][T17059] ? __pfx_____sys_sendmsg+0x10/0x10 [ 731.639411][T17059] ? get_compat_msghdr+0x11a/0x170 [ 731.639446][T17059] ___sys_sendmsg+0x134/0x1d0 [ 731.639470][T17059] ? __pfx____sys_sendmsg+0x10/0x10 [ 731.639506][T17059] ? find_held_lock+0x2b/0x80 [ 731.639546][T17059] __sys_sendmsg+0x16d/0x220 [ 731.639570][T17059] ? __pfx___sys_sendmsg+0x10/0x10 [ 731.639602][T17059] ? do_user_addr_fault+0x843/0x1370 [ 731.639630][T17059] __do_fast_syscall_32+0xe8/0x680 [ 731.639660][T17059] do_fast_syscall_32+0x32/0x80 [ 731.639678][T17059] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 731.639700][T17059] RIP: 0023:0xf709d579 [ 731.639714][T17059] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 731.639732][T17059] RSP: 002b:00000000f548d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 731.639749][T17059] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800003c0 [ 731.639760][T17059] RDX: 0000000020004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 731.639770][T17059] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 731.639780][T17059] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 731.639790][T17059] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 731.639814][T17059] [ 732.955123][T17077] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2599'. [ 732.959010][T17077] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2599'. [ 733.302226][T17071] hub 8-0:1.0: USB hub found [ 733.304688][T17071] hub 8-0:1.0: 1 port detected [ 733.996797][T17094] FAULT_INJECTION: forcing a failure. [ 733.996797][T17094] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 734.002165][T17094] CPU: 2 UID: 0 PID: 17094 Comm: syz.3.2605 Tainted: G L syzkaller #0 PREEMPT(full) [ 734.002183][T17094] Tainted: [L]=SOFTLOCKUP [ 734.002187][T17094] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 734.002194][T17094] Call Trace: [ 734.002198][T17094] [ 734.002202][T17094] dump_stack_lvl+0x16c/0x1f0 [ 734.002302][T17094] should_fail_ex+0x512/0x640 [ 734.002317][T17094] should_fail_alloc_page+0xe7/0x130 [ 734.002335][T17094] prepare_alloc_pages+0x401/0x670 [ 734.002353][T17094] ? rcu_is_watching+0x12/0xc0 [ 734.002370][T17094] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 734.002386][T17094] ? __pfx___split_page_owner+0x10/0x10 [ 734.002405][T17094] ? __vmap_pages_range_noflush+0x3e7/0x670 [ 734.002422][T17094] ? is_vmalloc_addr+0x86/0xa0 [ 734.002434][T17094] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 734.002447][T17094] ? is_vmalloc_or_module_addr+0x47/0x60 [ 734.002460][T17094] ? __kasan_unpoison_vmalloc+0x22/0x30 [ 734.002474][T17094] ? __vmalloc_node_range_noprof+0x1259/0x16b0 [ 734.002489][T17094] ? comedi_buf_alloc+0x2fa/0x9d0 [ 734.002505][T17094] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 734.002524][T17094] ? policy_nodemask+0xea/0x4e0 [ 734.002542][T17094] alloc_pages_mpol+0x1fb/0x550 [ 734.002559][T17094] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 734.002580][T17094] alloc_pages_noprof+0x131/0x390 [ 734.002597][T17094] get_zeroed_page_noprof+0x18/0xb0 [ 734.002614][T17094] comedi_buf_alloc+0x63e/0x9d0 [ 734.002629][T17094] ? __init_swait_queue_head+0xca/0x150 [ 734.002644][T17094] comedi_device_postconfig+0x3dc/0xcd0 [ 734.002658][T17094] ? pcmmio_attach+0x6e/0xe10 [ 734.002671][T17094] comedi_device_attach+0x3cf/0x900 [ 734.002687][T17094] do_devconfig_ioctl+0x1b1/0x710 [ 734.002704][T17094] ? comedi_unlocked_ioctl+0x167/0x2eb0 [ 734.002715][T17094] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 734.002737][T17094] ? kasan_save_track+0x14/0x30 [ 734.002751][T17094] ? kasan_save_free_info+0x3b/0x60 [ 734.002762][T17094] ? __kasan_slab_free+0x5f/0x80 [ 734.002777][T17094] ? kfree+0x2f8/0x6e0 [ 734.002790][T17094] ? tomoyo_path_number_perm+0x470/0x580 [ 734.002802][T17094] ? security_file_ioctl_compat+0x9b/0x240 [ 734.002816][T17094] ? __ia32_compat_sys_ioctl+0xc3/0x370 [ 734.002829][T17094] ? __do_fast_syscall_32+0xe8/0x680 [ 734.002849][T17094] comedi_unlocked_ioctl+0x1582/0x2eb0 [ 734.002864][T17094] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 734.002884][T17094] ? kasan_quarantine_put+0x10a/0x240 [ 734.002898][T17094] ? lockdep_hardirqs_on+0x7c/0x110 [ 734.002917][T17094] ? find_held_lock+0x2b/0x80 [ 734.002931][T17094] ? tomoyo_path_number_perm+0x295/0x580 [ 734.002946][T17094] ? tomoyo_path_number_perm+0x18d/0x580 [ 734.002961][T17094] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 734.002975][T17094] comedi_compat_ioctl+0x1ed/0xda0 [ 734.002987][T17094] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 734.002998][T17094] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 734.003015][T17094] ? do_vfs_ioctl+0x128/0x14f0 [ 734.003033][T17094] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 734.003051][T17094] ? find_held_lock+0x2b/0x80 [ 734.003065][T17094] ? hook_file_ioctl_common+0x144/0x410 [ 734.003081][T17094] ? __fget_files+0x20e/0x3c0 [ 734.003096][T17094] ? __fput_deferred+0x480/0x480 [ 734.003110][T17094] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 734.003121][T17094] __ia32_compat_sys_ioctl+0x242/0x370 [ 734.003136][T17094] __do_fast_syscall_32+0xe8/0x680 [ 734.003155][T17094] do_fast_syscall_32+0x32/0x80 [ 734.003165][T17094] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 734.003180][T17094] RIP: 0023:0xf701d579 [ 734.003189][T17094] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 734.003200][T17094] RSP: 002b:00000000f540d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 734.003211][T17094] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000040946400 [ 734.003218][T17094] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 734.003225][T17094] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 734.003231][T17094] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 734.003238][T17094] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 734.003252][T17094] [ 734.003335][T17094] comedi comedi3: Buffer allocation failed [ 734.194731][T17096] FAULT_INJECTION: forcing a failure. [ 734.194731][T17096] name failslab, interval 1, probability 0, space 0, times 0 [ 734.200298][T17096] CPU: 3 UID: 0 PID: 17096 Comm: syz.5.2606 Tainted: G L syzkaller #0 PREEMPT(full) [ 734.200327][T17096] Tainted: [L]=SOFTLOCKUP [ 734.200333][T17096] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 734.200346][T17096] Call Trace: [ 734.200353][T17096] [ 734.200361][T17096] dump_stack_lvl+0x16c/0x1f0 [ 734.200394][T17096] should_fail_ex+0x512/0x640 [ 734.200415][T17096] ? __kmalloc_cache_noprof+0x5f/0x800 [ 734.200441][T17096] should_failslab+0xc2/0x120 [ 734.200466][T17096] __kmalloc_cache_noprof+0x80/0x800 [ 734.200484][T17096] ? net_generic+0xea/0x2a0 [ 734.200501][T17096] ? ip_set_create+0x346/0x1520 [ 734.200525][T17096] ? ip_set_create+0x346/0x1520 [ 734.200547][T17096] ip_set_create+0x346/0x1520 [ 734.200577][T17096] ? __pfx_ip_set_create+0x10/0x10 [ 734.200620][T17096] ? find_held_lock+0x2b/0x80 [ 734.200651][T17096] nfnetlink_rcv_msg+0x9fc/0x1200 [ 734.200698][T17096] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 734.200723][T17096] ? kfree_skbmem+0x1a4/0x1f0 [ 734.200738][T17096] ? kfree_skbmem+0x1a4/0x1f0 [ 734.200783][T17096] ? __pfx___dev_queue_xmit+0x10/0x10 [ 734.200809][T17096] netlink_rcv_skb+0x158/0x420 [ 734.200837][T17096] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 734.200859][T17096] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 734.200898][T17096] ? ns_capable+0xd7/0x110 [ 734.200927][T17096] nfnetlink_rcv+0x1b3/0x430 [ 734.200947][T17096] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 734.200967][T17096] ? netlink_deliver_tap+0x1ae/0xd30 [ 734.200997][T17096] netlink_unicast+0x5aa/0x870 [ 734.201028][T17096] ? __pfx_netlink_unicast+0x10/0x10 [ 734.201064][T17096] netlink_sendmsg+0x8c8/0xdd0 [ 734.201092][T17096] ? __pfx_netlink_sendmsg+0x10/0x10 [ 734.201124][T17096] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 734.201161][T17096] ____sys_sendmsg+0xa5d/0xc30 [ 734.201195][T17096] ? __pfx_____sys_sendmsg+0x10/0x10 [ 734.201223][T17096] ? get_compat_msghdr+0x11a/0x170 [ 734.201259][T17096] ___sys_sendmsg+0x134/0x1d0 [ 734.201284][T17096] ? __pfx____sys_sendmsg+0x10/0x10 [ 734.201319][T17096] ? find_held_lock+0x2b/0x80 [ 734.201360][T17096] __sys_sendmsg+0x16d/0x220 [ 734.201386][T17096] ? __pfx___sys_sendmsg+0x10/0x10 [ 734.201421][T17096] ? do_user_addr_fault+0x843/0x1370 [ 734.201449][T17096] __do_fast_syscall_32+0xe8/0x680 [ 734.201482][T17096] do_fast_syscall_32+0x32/0x80 [ 734.201498][T17096] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 734.201521][T17096] RIP: 0023:0xf709d579 [ 734.201536][T17096] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 734.201554][T17096] RSP: 002b:00000000f548d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 734.201574][T17096] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800003c0 [ 734.201585][T17096] RDX: 0000000020004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 734.201596][T17096] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 734.201608][T17096] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 734.201620][T17096] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 734.201647][T17096] [ 734.950147][ T143] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 735.110470][ T143] usb 8-1: Using ep0 maxpacket: 8 [ 735.114443][ T143] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 735.117519][ T143] usb 8-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 735.121746][ T143] usb 8-1: config 179 has no interface number 0 [ 735.124232][ T143] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 735.129656][ T143] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 735.134312][ T143] usb 8-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 735.139593][ T143] usb 8-1: config 179 interface 65 has no altsetting 0 [ 735.142299][ T143] usb 8-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 735.146061][ T143] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.047134][T17113] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2610'. [ 736.050101][T17113] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2610'. [ 736.731017][T17118] netlink: 'syz.5.2607': attribute type 1 has an invalid length. [ 736.734337][T17118] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2607'. [ 737.524738][T17117] Set syz1 is full, maxelem 65536 reached [ 737.683856][ T29] usb 8-1: USB disconnect, device number 15 [ 737.800215][T17131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2616'. [ 737.804244][T17131] netlink: 'syz.1.2616': attribute type 30 has an invalid length. [ 737.807832][T17131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2616'. [ 737.887768][T17135] fuse: Bad value for 'fd' [ 738.169877][T17142] MPI: mpi too large (130952 bits) [ 738.533567][T17150] netlink: 'syz.5.2624': attribute type 1 has an invalid length. [ 738.554735][T17150] 8021q: adding VLAN 0 to HW filter on device bond1 [ 738.589144][T17150] bond1: (slave veth3): Enslaving as an active interface with a down link [ 738.612752][T17150] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2624'. [ 738.659800][ T5994] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 738.671812][T17154] siw: device registration error -23 [ 738.852336][ T5994] usb 8-1: Using ep0 maxpacket: 8 [ 738.860421][ T5994] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 738.886218][ T5994] usb 8-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 738.889585][ T5994] usb 8-1: config 179 has no interface number 0 [ 738.891654][ T5994] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 738.905656][ T5994] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 738.909342][ T5994] usb 8-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 738.914245][ T5994] usb 8-1: config 179 interface 65 has no altsetting 0 [ 738.927020][ T5994] usb 8-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 738.929945][ T5994] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.448148][T17163] netlink: 'syz.5.2627': attribute type 1 has an invalid length. [ 739.450780][T17163] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2627'. [ 741.042647][ T40] kauditd_printk_skb: 222 callbacks suppressed [ 741.042667][ T40] audit: type=1326 audit(2000000367.303:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17201 comm="syz.4.2636" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 741.057594][ T40] audit: type=1326 audit(2000000367.303:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17201 comm="syz.4.2636" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 741.075942][ T40] audit: type=1326 audit(2000000367.303:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17201 comm="syz.4.2636" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 741.090097][ T40] audit: type=1326 audit(2000000367.303:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17201 comm="syz.4.2636" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 741.097821][ T40] audit: type=1326 audit(2000000367.312:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17201 comm="syz.4.2636" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 741.104014][ T40] audit: type=1326 audit(2000000367.312:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17201 comm="syz.4.2636" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 741.110487][ T40] audit: type=1326 audit(2000000367.312:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17201 comm="syz.4.2636" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 741.116737][ T40] audit: type=1326 audit(2000000367.312:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17201 comm="syz.4.2636" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 741.123545][ T40] audit: type=1326 audit(2000000367.312:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17201 comm="syz.4.2636" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 741.129808][ T40] audit: type=1326 audit(2000000367.312:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17201 comm="syz.4.2636" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 741.401175][T17208] netlink: 'syz.5.2637': attribute type 1 has an invalid length. [ 741.408283][T17208] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2637'. [ 741.467651][T17209] usb 8-1: USB disconnect, device number 16 [ 741.549418][T17209] hub 8-0:1.0: USB hub found [ 741.552584][T17209] hub 8-0:1.0: 1 port detected [ 742.258179][T17232] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 742.260217][T17232] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 742.263359][T17232] vhci_hcd vhci_hcd.0: Device attached [ 742.267228][T17232] MPI: mpi too large (130952 bits) [ 742.274024][T17233] vhci_hcd: connection closed [ 742.274651][T15478] vhci_hcd vhci_hcd.5: stop threads [ 742.278024][T15478] vhci_hcd vhci_hcd.5: release socket [ 742.279774][T15478] vhci_hcd vhci_hcd.5: disconnect device [ 742.974111][ T29] libceph: connect (1)[c::]:6789 error -101 [ 742.976756][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 743.177821][T17248] ceph: No mds server is up or the cluster is laggy [ 743.182600][ T5732] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 743.295752][ T29] libceph: connect (1)[c::]:6789 error -101 [ 743.759263][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 745.323104][T17296] Set syz1 is full, maxelem 65536 reached [ 745.950161][T17308] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 745.953044][T17308] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 745.957029][T17308] vhci_hcd vhci_hcd.0: Device attached [ 745.963978][T17308] MPI: mpi too large (130952 bits) [ 746.239462][ T143] usb 48-1: SetAddress Request (6) to port 0 [ 746.242258][ T143] usb 48-1: new SuperSpeed USB device number 6 using vhci_hcd [ 746.692980][T17309] vhci_hcd: connection reset by peer [ 746.696110][ T6583] vhci_hcd vhci_hcd.5: stop threads [ 746.698477][ T6583] vhci_hcd vhci_hcd.5: release socket [ 746.701058][ T6583] vhci_hcd vhci_hcd.5: disconnect device [ 751.638494][ T143] usb 48-1: device descriptor read/8, error -110 [ 752.056460][ T143] usb usb48-port1: attempt power cycle [ 752.665415][ T143] usb usb48-port1: unable to enumerate USB device [ 754.127943][T17352] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 754.130235][T17352] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 754.133215][T17352] vhci_hcd vhci_hcd.0: Device attached [ 754.137510][T17352] MPI: mpi too large (130952 bits) [ 754.139809][T17354] vhci_hcd: connection closed [ 754.140140][T14479] vhci_hcd vhci_hcd.4: stop threads [ 754.143637][T14479] vhci_hcd vhci_hcd.4: release socket [ 754.145433][T14479] vhci_hcd vhci_hcd.4: disconnect device [ 754.310918][T17358] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2666'. [ 754.317472][T17358] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2666'. [ 754.631828][T17376] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 754.634082][T17376] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 754.637071][T17376] vhci_hcd vhci_hcd.0: Device attached [ 754.824217][ T143] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 754.888227][ T143] usb 47-1: new full-speed USB device number 2 using vhci_hcd [ 755.122753][T17389] kvm: kvm [17388]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x187) = 0x8000 [ 755.295539][T17377] vhci_hcd: connection reset by peer [ 755.298386][T14965] vhci_hcd vhci_hcd.5: stop threads [ 755.300662][T14965] vhci_hcd vhci_hcd.5: release socket [ 755.303728][T14965] vhci_hcd vhci_hcd.5: disconnect device [ 756.080153][T17416] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 756.082320][T17416] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 756.084997][T17416] vhci_hcd vhci_hcd.0: Device attached [ 756.093678][T17416] MPI: mpi too large (130952 bits) [ 756.097536][T17419] vhci_hcd: connection closed [ 756.097816][T10068] vhci_hcd vhci_hcd.5: stop threads [ 756.102287][T10068] vhci_hcd vhci_hcd.5: release socket [ 756.104692][T10068] vhci_hcd vhci_hcd.5: disconnect device [ 756.320892][T15908] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 756.491775][T15908] usb 8-1: Using ep0 maxpacket: 8 [ 756.496330][T15908] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 756.499889][T15908] usb 8-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 756.504526][T15908] usb 8-1: config 179 has no interface number 0 [ 756.507810][T15908] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 756.512466][T15908] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 756.517711][T15908] usb 8-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 756.523174][T15908] usb 8-1: config 179 interface 65 has no altsetting 0 [ 756.527046][T15908] usb 8-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 756.530921][T15908] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.410918][T17428] netlink: 'syz.1.2681': attribute type 1 has an invalid length. [ 758.443758][T17428] 8021q: adding VLAN 0 to HW filter on device bond2 [ 758.521462][T17430] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2681'. [ 758.586297][T17428] bond2: (slave veth3): Enslaving as an active interface with a down link [ 759.029699][ T6108] usb 8-1: USB disconnect, device number 18 [ 759.482096][T17439] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2685'. [ 759.485002][T17439] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2685'. [ 759.539384][T17443] siw: device registration error -23 [ 759.547434][T17445] netlink: 'syz.1.2688': attribute type 1 has an invalid length. [ 759.561493][T17445] 8021q: adding VLAN 0 to HW filter on device bond3 [ 759.606722][T17445] bond3: (slave veth5): Enslaving as an active interface with a down link [ 759.673595][T17445] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2688'. [ 759.679493][ T5954] Bluetooth: hci1: command 0x0406 tx timeout [ 759.995572][T17456] netlink: 'syz.3.2689': attribute type 1 has an invalid length. [ 759.998510][T17456] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2689'. [ 760.351074][ T143] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 760.665545][T17467] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2695'. [ 760.668447][T17467] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2695'. [ 760.708220][T17463] vhci_hcd vhci_hcd.0: port 0 already used [ 760.714292][T17463] MPI: mpi too large (130952 bits) [ 760.846527][T17480] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2697'. [ 760.912271][T17481] netlink: 'syz.1.2698': attribute type 1 has an invalid length. [ 760.941836][T17481] 8021q: adding VLAN 0 to HW filter on device bond4 [ 761.002835][T17487] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2698'. [ 761.018798][T17481] bond4: (slave veth7): Enslaving as an active interface with a down link [ 761.117891][T17490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2700'. [ 761.121147][T17490] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2700'. [ 761.124269][T17490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2700'. [ 761.127285][T17490] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2700'. [ 762.010003][T17509] loop6: detected capacity change from 0 to 524279808 [ 762.039479][T17513] netlink: 'syz.4.2709': attribute type 1 has an invalid length. [ 762.064670][T17509] loop6: detected capacity change from 524279808 to 1 [ 762.068726][T17513] 8021q: adding VLAN 0 to HW filter on device bond12 [ 762.078223][T17509] Dev loop6: unable to read RDB block 1 [ 762.080732][T17509] loop6: unable to read partition table [ 762.083039][T17509] loop6: partition table beyond EOD, truncated [ 762.085204][T17509] loop_reread_partitions: partition scan of loop6 (u0v ) failed (rc=-5) [ 762.383637][T17513] bond12: (slave veth21): Enslaving as an active interface with a down link [ 762.437513][T17523] netlink: 'syz.3.2708': attribute type 1 has an invalid length. [ 762.615044][T17525] MPI: mpi too large (130952 bits) [ 763.069239][T17533] /dev/nullb0: Can't open blockdev [ 763.706482][T17548] usb 1-1: USB disconnect, device number 3 [ 764.182611][ T40] kauditd_printk_skb: 348 callbacks suppressed [ 764.182627][ T40] audit: type=1326 audit(2000000388.948:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17554 comm="syz.5.2719" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 764.210828][ T40] audit: type=1326 audit(2000000388.958:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17554 comm="syz.5.2719" exe="/syz-executor" sig=0 arch=40000003 syscall=51 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 764.223188][ T40] audit: type=1326 audit(2000000388.958:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17554 comm="syz.5.2719" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 764.233317][ T40] audit: type=1326 audit(2000000388.958:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17554 comm="syz.5.2719" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 764.243016][ T40] audit: type=1326 audit(2000000388.958:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17554 comm="syz.5.2719" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 764.252421][ T40] audit: type=1326 audit(2000000388.958:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17554 comm="syz.5.2719" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 764.262240][ T40] audit: type=1326 audit(2000000388.958:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17554 comm="syz.5.2719" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 764.264650][T17557] netlink: 'syz.5.2720': attribute type 1 has an invalid length. [ 764.272057][ T40] audit: type=1326 audit(2000000388.958:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17554 comm="syz.5.2719" exe="/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 764.288116][ T40] audit: type=1326 audit(2000000388.958:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17554 comm="syz.5.2719" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 764.313164][T17557] 8021q: adding VLAN 0 to HW filter on device bond2 [ 764.465401][T17557] bond2: (slave veth5): Enslaving as an active interface with a down link [ 764.593915][T17566] siw: device registration error -23 [ 764.685718][T17564] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 764.688241][T17564] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 764.691199][T17564] vhci_hcd vhci_hcd.0: Device attached [ 764.702277][T17564] MPI: mpi too large (130952 bits) [ 764.712220][T17571] vhci_hcd: connection closed [ 764.712548][T14965] vhci_hcd vhci_hcd.5: stop threads [ 764.718650][T14965] vhci_hcd vhci_hcd.5: release socket [ 764.720976][T14965] vhci_hcd vhci_hcd.5: disconnect device [ 765.062088][T17583] netlink: 'syz.3.2725': attribute type 1 has an invalid length. [ 765.064802][T17583] __nla_validate_parse: 69 callbacks suppressed [ 765.064810][T17583] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2725'. [ 765.835144][T17591] /dev/nullb0: Can't open blockdev [ 765.871366][T17594] netlink: 'syz.5.2729': attribute type 1 has an invalid length. [ 765.938798][T17594] 8021q: adding VLAN 0 to HW filter on device bond3 [ 766.007245][T17594] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2729'. [ 766.038158][T17597] bond3: (slave veth7): Enslaving as an active interface with a down link [ 766.219621][T17602] [ 766.220501][T17602] ====================================================== [ 766.222825][T17602] WARNING: possible circular locking dependency detected [ 766.225109][T17602] syzkaller #0 Tainted: G L [ 766.227171][T17602] ------------------------------------------------------ [ 766.229478][T17602] syz.3.2731/17602 is trying to acquire lock: [ 766.231523][T17602] ffff888023f0fc68 (&pipe->mutex){+.+.}-{4:4}, at: anon_pipe_write+0x15d/0x1bd0 [ 766.234651][T17602] [ 766.234651][T17602] but task is already holding lock: [ 766.237065][T17602] ffff88802b5b4948 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x4a6/0xd60 [ 766.240271][T17602] [ 766.240271][T17602] which lock already depends on the new lock. [ 766.240271][T17602] [ 766.243638][T17602] [ 766.243638][T17602] the existing dependency chain (in reverse order) is: [ 766.246576][T17602] [ 766.246576][T17602] -> #3 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 766.246631][T17605] fuse: Unknown parameter '}Ŝ{u_^I0-S3@9S!Džz&|lpyr~c]_4 y0x00000000000000040x000000000000000400000000000000000000' [ 766.249107][T17602] __mutex_lock+0x1aa/0x1ca0 [ 766.249132][T17602] autofs_notify_daemon+0x4a6/0xd60 [ 766.249145][T17602] autofs_wait+0x10f3/0x1ac0 [ 766.249156][T17602] autofs_mount_wait+0x132/0x3c0 [ 766.261849][T17602] autofs_d_automount+0x4b2/0x960 [ 766.263712][T17602] __traverse_mounts+0x1b9/0x830 [ 766.265535][T17602] step_into_slowpath+0x772/0xf50 [ 766.267373][T17602] path_lookupat+0x627/0xc40 [ 766.269073][T17602] filename_lookup+0x224/0x5f0 [ 766.270839][T17602] kern_path+0x35/0x50 [ 766.272400][T17602] lookup_bdev+0xd8/0x280 [ 766.274125][T17602] resume_store+0x1d6/0x490 [ 766.275817][T17602] kobj_attr_store+0x58/0x80 [ 766.277551][T17602] sysfs_kf_write+0xf2/0x150 [ 766.279296][T17602] kernfs_fop_write_iter+0x3af/0x570 [ 766.281223][T17602] vfs_write+0x7d3/0x11d0 [ 766.282865][T17602] ksys_write+0x12a/0x250 [ 766.284542][T17602] __do_fast_syscall_32+0xe8/0x680 [ 766.286466][T17602] do_fast_syscall_32+0x32/0x80 [ 766.288280][T17602] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 766.290594][T17602] [ 766.290594][T17602] -> #2 (&of->mutex){+.+.}-{4:4}: [ 766.293006][T17602] __mutex_lock+0x1aa/0x1ca0 [ 766.294738][T17602] kernfs_seq_start+0x4f/0x2a0 [ 766.296542][T17602] seq_read_iter+0x2c1/0x12d0 [ 766.298186][T17602] kernfs_fop_read_iter+0x46c/0x610 [ 766.300134][T17602] copy_splice_read+0x618/0xc20 [ 766.301962][T17602] do_splice_read+0x285/0x370 [ 766.303720][T17602] splice_direct_to_actor+0x2a1/0xa30 [ 766.305727][T17602] do_splice_direct+0x174/0x240 [ 766.307510][T17602] do_sendfile+0xb06/0xe50 [ 766.309153][T17602] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 766.311217][T17602] __do_fast_syscall_32+0xe8/0x680 [ 766.313079][T17602] do_fast_syscall_32+0x32/0x80 [ 766.314878][T17602] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 766.317114][T17602] [ 766.317114][T17602] -> #1 (&p->lock){+.+.}-{4:4}: [ 766.319546][T17602] __mutex_lock+0x1aa/0x1ca0 [ 766.321273][T17602] seq_read_iter+0xe1/0x12d0 [ 766.323005][T17602] kernfs_fop_read_iter+0x46c/0x610 [ 766.324887][T17602] copy_splice_read+0x618/0xc20 [ 766.326695][T17602] do_splice_read+0x285/0x370 [ 766.328437][T17602] splice_file_to_pipe+0x109/0x120 [ 766.330323][T17602] do_sendfile+0x400/0xe50 [ 766.331955][T17602] __ia32_sys_sendfile64+0x1d7/0x220 [ 766.333914][T17602] __do_fast_syscall_32+0xe8/0x680 [ 766.336286][T17602] do_fast_syscall_32+0x32/0x80 [ 766.338706][T17602] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 766.341594][T17602] [ 766.341594][T17602] -> #0 (&pipe->mutex){+.+.}-{4:4}: [ 766.344766][T17602] __lock_acquire+0x1669/0x2890 [ 766.347142][T17602] lock_acquire+0x179/0x330 [ 766.349279][T17602] __mutex_lock+0x1aa/0x1ca0 [ 766.351085][T17602] anon_pipe_write+0x15d/0x1bd0 [ 766.352897][T17602] __kernel_write_iter+0x720/0xb10 [ 766.354820][T17602] __kernel_write+0xf5/0x140 [ 766.356647][T17602] autofs_notify_daemon+0x4db/0xd60 [ 766.359137][T17602] autofs_wait+0x10f3/0x1ac0 [ 766.361280][T17602] autofs_mount_wait+0x132/0x3c0 [ 766.363622][T17602] autofs_d_automount+0x4b2/0x960 [ 766.365998][T17602] __traverse_mounts+0x1b9/0x830 [ 766.368374][T17602] step_into_slowpath+0x772/0xf50 [ 766.370868][T17602] path_lookupat+0x627/0xc40 [ 766.373166][T17602] filename_lookup+0x224/0x5f0 [ 766.375589][T17602] kern_path+0x35/0x50 [ 766.377676][T17602] lookup_bdev+0xd8/0x280 [ 766.379841][T17602] resume_store+0x1d6/0x490 [ 766.381843][T17602] kobj_attr_store+0x58/0x80 [ 766.383923][T17602] sysfs_kf_write+0xf2/0x150 [ 766.386202][T17602] kernfs_fop_write_iter+0x3af/0x570 [ 766.388775][T17602] vfs_write+0x7d3/0x11d0 [ 766.390999][T17602] ksys_write+0x12a/0x250 [ 766.393156][T17602] __do_fast_syscall_32+0xe8/0x680 [ 766.395663][T17602] do_fast_syscall_32+0x32/0x80 [ 766.398026][T17602] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 766.400988][T17602] [ 766.400988][T17602] other info that might help us debug this: [ 766.400988][T17602] [ 766.404845][T17602] Chain exists of: [ 766.404845][T17602] &pipe->mutex --> &of->mutex --> &sbi->pipe_mutex [ 766.404845][T17602] [ 766.409831][T17602] Possible unsafe locking scenario: [ 766.409831][T17602] [ 766.413135][T17602] CPU0 CPU1 [ 766.415535][T17602] ---- ---- [ 766.417920][T17602] lock(&sbi->pipe_mutex); [ 766.419973][T17602] lock(&of->mutex); [ 766.422815][T17602] lock(&sbi->pipe_mutex); [ 766.425886][T17602] lock(&pipe->mutex); [ 766.427852][T17602] [ 766.427852][T17602] *** DEADLOCK *** [ 766.427852][T17602] [ 766.431457][T17602] 5 locks held by syz.3.2731/17602: [ 766.433806][T17602] #0: ffff88802450d438 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 766.437687][T17602] #1: ffff888044510420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 766.440835][T17602] #2: ffff88802005cc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 766.444006][T17602] #3: ffff88804128a0f8 (kn->active#64){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 766.447428][T17602] #4: ffff88802b5b4948 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x4a6/0xd60 [ 766.450764][T17602] [ 766.450764][T17602] stack backtrace: [ 766.452715][T17602] CPU: 0 UID: 0 PID: 17602 Comm: syz.3.2731 Tainted: G L syzkaller #0 PREEMPT(full) [ 766.452732][T17602] Tainted: [L]=SOFTLOCKUP [ 766.452736][T17602] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 766.452743][T17602] Call Trace: [ 766.452749][T17602] [ 766.452754][T17602] dump_stack_lvl+0x116/0x1f0 [ 766.452773][T17602] print_circular_bug+0x275/0x340 [ 766.452792][T17602] check_noncircular+0x146/0x160 [ 766.452812][T17602] ? __lock_acquire+0x436/0x2890 [ 766.452824][T17602] __lock_acquire+0x1669/0x2890 [ 766.452835][T17602] ? __kasan_check_byte+0x13/0x50 [ 766.452853][T17602] lock_acquire+0x179/0x330 [ 766.452863][T17602] ? anon_pipe_write+0x15d/0x1bd0 [ 766.452879][T17602] ? __pfx___might_resched+0x10/0x10 [ 766.452895][T17602] ? rcu_is_watching+0x12/0xc0 [ 766.452910][T17602] __mutex_lock+0x1aa/0x1ca0 [ 766.452928][T17602] ? anon_pipe_write+0x15d/0x1bd0 [ 766.452943][T17602] ? is_bpf_text_address+0x94/0x1a0 [ 766.452958][T17602] ? kernel_text_address+0x8d/0x100 [ 766.452971][T17602] ? anon_pipe_write+0x15d/0x1bd0 [ 766.452986][T17602] ? unwind_get_return_address+0x59/0xa0 [ 766.453001][T17602] ? __bfs+0x148/0x290 [ 766.453015][T17602] ? __pfx___mutex_lock+0x10/0x10 [ 766.453032][T17602] ? check_irq_usage+0xe8/0xbc0 [ 766.453053][T17602] ? anon_pipe_write+0x15d/0x1bd0 [ 766.453068][T17602] anon_pipe_write+0x15d/0x1bd0 [ 766.453085][T17602] ? lockdep_unlock+0x64/0xd0 [ 766.453098][T17602] ? __lock_acquire+0x12c2/0x2890 [ 766.453109][T17602] ? __pfx_anon_pipe_write+0x10/0x10 [ 766.453126][T17602] ? lock_acquire+0x179/0x330 [ 766.453137][T17602] ? __pfx_anon_pipe_write+0x10/0x10 [ 766.453152][T17602] __kernel_write_iter+0x720/0xb10 [ 766.453169][T17602] ? __pfx___kernel_write_iter+0x10/0x10 [ 766.453190][T17602] ? __mutex_lock+0x27b/0x1ca0 [ 766.453213][T17602] ? __kernel_text_address+0xd/0x40 [ 766.453232][T17602] ? autofs_notify_daemon+0x45a/0xd60 [ 766.453253][T17602] __kernel_write+0xf5/0x140 [ 766.453276][T17602] ? __pfx___kernel_write+0x10/0x10 [ 766.453299][T17602] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 766.453331][T17602] autofs_notify_daemon+0x4db/0xd60 [ 766.453350][T17602] ? __pfx_autofs_notify_daemon+0x10/0x10 [ 766.453385][T17602] ? kernfs_fop_write_iter+0x3af/0x570 [ 766.453410][T17602] ? vfs_write+0x7d3/0x11d0 [ 766.453434][T17602] ? ksys_write+0x12a/0x250 [ 766.453466][T17602] ? lockdep_init_map_type+0x5c/0x270 [ 766.453485][T17602] ? lockdep_init_map_type+0x5c/0x270 [ 766.453504][T17602] autofs_wait+0x10f3/0x1ac0 [ 766.453547][T17602] ? __pfx_autofs_wait+0x10/0x10 [ 766.453565][T17602] ? __pfx_path_check_mount+0x10/0x10 [ 766.453581][T17602] ? find_held_lock+0x2b/0x80 [ 766.453603][T17602] ? path_has_submounts+0xcf/0x120 [ 766.453624][T17602] ? do_raw_spin_unlock+0x172/0x230 [ 766.453644][T17602] ? find_held_lock+0x2b/0x80 [ 766.453667][T17602] autofs_mount_wait+0x132/0x3c0 [ 766.453686][T17602] autofs_d_automount+0x4b2/0x960 [ 766.453705][T17602] __traverse_mounts+0x1b9/0x830 [ 766.453725][T17602] step_into_slowpath+0x772/0xf50 [ 766.453748][T17602] ? __up_read+0x2d1/0x700 [ 766.453768][T17602] ? __pfx_step_into_slowpath+0x10/0x10 [ 766.453789][T17602] ? __lookup_slow+0x420/0x460 [ 766.453817][T17602] path_lookupat+0x627/0xc40 [ 766.453841][T17602] filename_lookup+0x224/0x5f0 [ 766.453865][T17602] ? __pfx_filename_lookup+0x10/0x10 [ 766.453898][T17602] ? getname_kernel+0x52/0x370 [ 766.453916][T17602] ? __asan_memcpy+0x3c/0x60 [ 766.453940][T17602] kern_path+0x35/0x50 [ 766.453963][T17602] lookup_bdev+0xd8/0x280 [ 766.453981][T17602] ? __pfx_lookup_bdev+0x10/0x10 [ 766.453999][T17602] ? __asan_memcpy+0x3c/0x60 [ 766.454021][T17602] resume_store+0x1d6/0x490 [ 766.454041][T17602] ? __pfx_resume_store+0x10/0x10 [ 766.454065][T17602] ? find_held_lock+0x2b/0x80 [ 766.454088][T17602] ? __pfx_resume_store+0x10/0x10 [ 766.454109][T17602] kobj_attr_store+0x58/0x80 [ 766.454136][T17602] ? __pfx_kobj_attr_store+0x10/0x10 [ 766.454164][T17602] sysfs_kf_write+0xf2/0x150 [ 766.454182][T17602] kernfs_fop_write_iter+0x3af/0x570 [ 766.454204][T17602] ? __pfx_sysfs_kf_write+0x10/0x10 [ 766.454222][T17602] vfs_write+0x7d3/0x11d0 [ 766.454245][T17602] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 766.454272][T17602] ? __pfx_vfs_write+0x10/0x10 [ 766.454297][T17602] ? find_held_lock+0x2b/0x80 [ 766.454323][T17602] ksys_write+0x12a/0x250 [ 766.454346][T17602] ? __pfx_ksys_write+0x10/0x10 [ 766.454372][T17602] __do_fast_syscall_32+0xe8/0x680 [ 766.454400][T17602] do_fast_syscall_32+0x32/0x80 [ 766.454416][T17602] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 766.454437][T17602] RIP: 0023:0xf701d579 [ 766.454452][T17602] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 766.454470][T17602] RSP: 002b:00000000f540d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 766.454488][T17602] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000040 [ 766.454499][T17602] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000 [ 766.454511][T17602] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 766.454521][T17602] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 766.454532][T17602] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 766.454548][T17602] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 766.816502][T17602] PM: Image not found (code -22) [ 767.027295][T10593] bond0: (slave syz_tun): Releasing backup interface [ 767.143931][ T46] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.334901][ T46] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.441976][ T46] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.529783][ T46] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.604913][ T46] bridge_slave_1: left allmulticast mode [ 767.607294][ T46] bridge_slave_1: left promiscuous mode [ 767.609659][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.613989][ T46] bridge_slave_0: left allmulticast mode [ 767.616094][ T46] bridge_slave_0: left promiscuous mode [ 767.618389][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.725047][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 767.730698][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 767.735280][ T46] bond0 (unregistering): Released all slaves [ 767.819684][ T46] bond1 (unregistering): (slave veth3): Releasing active interface [ 767.824527][ T46] bond1 (unregistering): Released all slaves [ 767.902340][ T46] bond2 (unregistering): (slave veth5): Releasing active interface [ 767.905953][ T46] bond2 (unregistering): Released all slaves [ 767.912034][ T46] bond3 (unregistering): (slave veth7): Releasing active interface [ 767.915866][ T46] bond3 (unregistering): Released all slaves [ 768.249660][ T46] hsr_slave_0: left promiscuous mode [ 768.252535][ T46] hsr_slave_1: left promiscuous mode [ 768.255225][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 768.258460][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 768.262223][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 768.265406][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 768.271290][ T46] veth1_macvtap: left promiscuous mode [ 768.273861][ T46] veth0_macvtap: left promiscuous mode [ 768.276303][ T46] veth1_vlan: left promiscuous mode [ 768.278623][ T46] veth0_vlan: left promiscuous mode [ 768.480085][ T46] team0 (unregistering): Port device team_slave_1 removed [ 768.500308][ T46] team0 (unregistering): Port device team_slave_0 removed [ 769.188281][ T46] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.271620][ T46] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.335965][ T46] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.377175][ T46] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.454137][ T46] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.528149][ T46] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.592866][ T46] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.665879][ T46] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.757944][ T46] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 769.824638][ T46] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 769.889559][ T46] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 769.932034][ T46] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 769.997137][ T46] bridge_slave_1: left allmulticast mode [ 769.999172][ T46] bridge_slave_1: left promiscuous mode [ 770.001033][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.004380][ T46] bridge_slave_0: left allmulticast mode [ 770.006463][ T46] bridge_slave_0: left promiscuous mode [ 770.008372][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.012023][ T46] bridge_slave_1: left allmulticast mode [ 770.013951][ T46] bridge_slave_1: left promiscuous mode [ 770.015993][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.019152][ T46] bridge_slave_0: left allmulticast mode [ 770.021062][ T46] bridge_slave_0: left promiscuous mode [ 770.023032][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.027375][ T46] bridge_slave_1: left allmulticast mode [ 770.029835][ T46] bridge_slave_1: left promiscuous mode [ 770.032027][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.036191][ T46] bridge_slave_0: left allmulticast mode [ 770.038796][ T46] bridge_slave_0: left promiscuous mode [ 770.041083][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.181559][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 770.189471][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 770.194243][ T46] bond0 (unregistering): Released all slaves [ 770.278819][ T46] bond1 (unregistering): (slave veth3): Releasing active interface [ 770.283328][ T46] bond1 (unregistering): Released all slaves [ 770.372631][ T46] bond2 (unregistering): (slave veth5): Releasing active interface [ 770.377532][ T46] bond2 (unregistering): Released all slaves [ 770.467471][ T46] bond3 (unregistering): (slave veth7): Releasing active interface [ 770.471938][ T46] bond3 (unregistering): Released all slaves [ 770.598080][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 770.603057][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 770.607872][ T46] bond0 (unregistering): Released all slaves [ 770.698505][ T46] bond1 (unregistering): (slave veth1): Releasing active interface [ 770.703026][ T46] bond1 (unregistering): Released all slaves [ 770.792613][ T46] bond2 (unregistering): (slave veth3): Releasing active interface [ 770.797336][ T46] bond2 (unregistering): Released all slaves [ 770.885159][ T46] bond3 (unregistering): (slave veth5): Releasing active interface [ 770.889555][ T46] bond3 (unregistering): Released all slaves [ 770.975805][ T46] bond4 (unregistering): (slave veth7): Releasing active interface [ 770.980412][ T46] bond4 (unregistering): Released all slaves [ 771.080266][ T46] bond2 (unregistering): (slave geneve2): Releasing active interface [ 771.405670][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 771.409689][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 771.413673][ T46] bond0 (unregistering): (slave team0): Releasing backup interface [ 771.417323][ T46] bond0 (unregistering): Released all slaves [ 771.491520][ T46] bond1 (unregistering): Released all slaves [ 771.496105][ T46] bond2 (unregistering): Released all slaves [ 771.576335][ T46] bond3 (unregistering): (slave veth3): Releasing active interface [ 771.580246][ T46] bond3 (unregistering): Released all slaves [ 771.662564][ T46] bond4 (unregistering): (slave veth5): Releasing active interface [ 771.666630][ T46] bond4 (unregistering): Released all slaves [ 771.745884][ T46] bond5 (unregistering): (slave veth7): Releasing active interface [ 771.750253][ T46] bond5 (unregistering): Released all slaves [ 771.828017][ T46] bond6 (unregistering): (slave veth9): Releasing active interface [ 771.831539][ T46] bond6 (unregistering): Released all slaves [ 771.906304][ T46] bond7 (unregistering): (slave veth11): Releasing active interface [ 771.909851][ T46] bond7 (unregistering): Released all slaves [ 771.985607][ T46] bond8 (unregistering): (slave veth13): Releasing active interface [ 771.988726][ T46] bond8 (unregistering): Released all slaves [ 772.069674][ T46] bond9 (unregistering): (slave veth15): Releasing active interface [ 772.073803][ T46] bond9 (unregistering): Released all slaves [ 772.149381][ T46] bond10 (unregistering): (slave veth17): Releasing active interface [ 772.152651][ T46] bond10 (unregistering): Released all slaves [ 772.225285][ T46] bond11 (unregistering): (slave veth19): Releasing active interface [ 772.229287][ T46] bond11 (unregistering): Released all slaves [ 772.306064][ T46] bond12 (unregistering): (slave veth21): Releasing active interface [ 772.311308][ T46] bond12 (unregistering): Released all slaves [ 772.999427][ T46] hsr_slave_0: left promiscuous mode [ 773.002159][ T46] hsr_slave_1: left promiscuous mode [ 773.004790][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 773.008021][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 773.011673][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 773.014863][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 773.020369][ T46] hsr_slave_0: left promiscuous mode [ 773.023017][ T46] hsr_slave_1: left promiscuous mode [ 773.025570][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 773.028654][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 773.032334][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 773.035454][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 773.041446][ T46] hsr_slave_0: left promiscuous mode [ 773.044138][ T46] hsr_slave_1: left promiscuous mode [ 773.046761][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 773.050120][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 773.058206][ T46] veth1_macvtap: left promiscuous mode [ 773.060684][ T46] veth0_macvtap: left promiscuous mode [ 773.063147][ T46] veth1_vlan: left promiscuous mode [ 773.065386][ T46] veth0_vlan: left promiscuous mode [ 773.068305][ T46] veth1_macvtap: left promiscuous mode [ 773.070630][ T46] veth0_macvtap: left promiscuous mode [ 773.074213][ T46] veth1_vlan: left promiscuous mode [ 773.076527][ T46] veth0_vlan: left promiscuous mode [ 773.324277][ T46] team0 (unregistering): Port device team_slave_1 removed [ 773.343850][ T46] team0 (unregistering): Port device team_slave_0 removed [ 773.598633][ T46] team0 (unregistering): Port device team_slave_1 removed [ 773.616196][ T46] team0 (unregistering): Port device team_slave_0 removed [ 774.351211][ T46] team0 (unregistering): Port device team_slave_1 removed [ 774.377120][ T46] team0 (unregistering): Port device team_slave_0 removed [ 774.620999][T16433] infiniband syz0: ib_query_port failed (-19) [ 775.645569][ T46] IPVS: stop unused estimator thread 0... [ 775.649165][ T46] IPVS: stop unused estimator thread 0...