last executing test programs: 1m54.861513067s ago: executing program 0 (id=626): r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b036c00e0ff64000200475400", 0xd, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x49801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}]}}}]}, 0x38}}, 0x0) sendto$packet(r0, &(0x7f0000000600)="05d936277c6f5422007f83477ca1b2f8e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40890, &(0x7f0000000200)={0x11, 0x86dd, r6, 0x1, 0x4, 0x6, @multicast}, 0x14) (fail_nth: 2) 1m54.74552449s ago: executing program 0 (id=630): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x1fffffffffffffcd, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700000000000000008000273500000075"], 0x0, 0xbb5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000fff07007706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad35010000000000840400000000000014000000100000009500000000000000db13d5d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r8, @ANYBLOB="08002600940900000800b700"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1m54.685464181s ago: executing program 0 (id=631): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) ftruncate(0xffffffffffffffff, 0xb66f) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7ffff006) 1m54.618774353s ago: executing program 0 (id=633): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d", 0x24}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r3, 0x0, 0x0, 0x8800, &(0x7f0000000400)={0x1a, 0x0, 0xd, 0x1f, 0x8, 0xf, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) listen(r3, 0x7) accept(r3, 0x0, 0x0) read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r5, 0x89e2, &(0x7f0000000100)=@default) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r6, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r7, &(0x7f0000003480)={0x2020}, 0x2020) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000077ee000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NFNL_MSG_CTHELPER_DEL(r8, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x90, 0x2, 0x9, 0x5, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xd}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}, @NFCTH_TUPLE={0x6c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2a}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x10) r9 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r10 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r10, 0x4c00, r9) dup2(r9, r0) 1m51.421404166s ago: executing program 0 (id=682): socket$igmp6(0xa, 0x3, 0x2) r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x40040, 0x0) ioctl$BSG_IO(r0, 0x2285, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3c}}}, 0x24) bind$rxrpc(r1, &(0x7f0000000080)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0x80, @remote, 0xfffffffe}}, 0x24) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x1f, 0x800, 0x3) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newtfilter={0x2c, 0x2c, 0x400, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0x6}, {0x1, 0x1}, {0xe, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x7, 0xffffffffffffffff, 0x6, 0x6}, 0x7b}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x40}, 0x2) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000314000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) syz_open_dev$usbfs(&(0x7f0000000300), 0x8, 0x242000) r10 = accept4(r2, 0x0, 0x0, 0x80000) recvmsg$can_j1939(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)=""/4095, 0xfff}], 0x1}, 0x10000) 1m51.211569412s ago: executing program 0 (id=686): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x1, 0x3}, 0x8) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x2}, 0x3}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000340)={0x81, 0x0, {0x3, 0x1, 0x10001, 0x1, 0x1000}, 0x6}) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0xff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m51.163910849s ago: executing program 32 (id=686): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x1, 0x3}, 0x8) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x2}, 0x3}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000340)={0x81, 0x0, {0x3, 0x1, 0x10001, 0x1, 0x1000}, 0x6}) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0xff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m16.038720354s ago: executing program 2 (id=1115): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000081c0)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x1, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0xfffffffffffffffd, 0x1, 0x0, 0x5dc, 0x120, 0x2000, 0x0, r2, 0x0, 0x501, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1004cc80, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r3, 0x1269, &(0x7f00000002c0)={0x1, 0x0, 0x98, &(0x7f0000000580)={0xfffffffffffffffd, 0x0, 0x4}}) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r4, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000100)=""/59, 0x3b}, {&(0x7f0000000540)=""/110, 0x6e}], 0x2}, 0xfff}], 0x1, 0x10002, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 1m15.860439617s ago: executing program 2 (id=1119): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000040)={0x0, 0x0, 0x3, &(0x7f0000000080)={0x0, "7ea08680448ae1cd0313388152f6a5dcd36f82e3050721215ed97a9793ecd18a42"}}) r2 = openat$cgroup_type(r0, &(0x7f0000000240), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) 1m15.805527022s ago: executing program 2 (id=1121): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x6, @mcast2={0xff, 0x3}}, 0x1c) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0xa00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40345410, &(0x7f00000004c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x80605414, 0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) timer_create(0x3, &(0x7f0000000140)={0x0, 0x2e, 0x2, @thr={0x0, 0x0}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x30, r6, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x6, 0x3, 0x223c2ee8, 0x907c}}}}, 0x30}, 0x1, 0x0, 0x0, 0x881}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r6, 0xf904343cd5c439b5, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x1, @media='eth\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xe42, 0x9, 0xfffffffffffffffb, 0x5, 0x10000, 0x3, 0x4002004c2, 0x100000007ff, 0x1, 0x0, 0x10000000000400, 0x80, 0x8b, 0x0, 0x8, 0x8b], 0x58000, 0x240046}) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m15.560807846s ago: executing program 2 (id=1122): syz_io_uring_setup(0x10b, &(0x7f00000003c0)={0x0, 0x334b, 0x80, 0x3, 0x805}, 0x0, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="20000000f10002000600000000000000000002"], 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0xfffffffd, 0x9, 0x41595556, 0x7, 0x1, [{0x8000006, 0xd382}, {0xdc5, 0x7}, {0x0, 0x4}, {0x6, 0x10000}, {0x1000, 0xd3}, {0x6, 0x6}, {0x1, 0x5}, {0xdfffffff, 0x8000}], 0x7, 0x7, 0x2, 0x0, 0x1}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x24, 0x2c, 0xc27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0xa}, {0x0, 0x9}, {0x1, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wg2\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@getqdisc={0x40, 0x26, 0x800, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xffe0, 0xe}, {0x0, 0x7}, {0xfff1, 0xa}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x440c0}, 0x2) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000900)={0x10c, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x5}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1f60}, @ETHTOOL_A_CHANNELS_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xffffffff}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4}, 0x408d0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x5, 0x40004041, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r7, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r7, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r7, 0x400454cb, 0x1) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000077ee000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r9 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r9, 0x4c00, r8) dup2(r8, r1) r10 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCSIFBR(r10, 0x8941, &(0x7f0000000180)=@generic={0x1, 0x9, 0x54e}) 1m15.357873959s ago: executing program 2 (id=1125): r0 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000240), 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0xcf, &(0x7f0000000000)=0x42c8, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3) getsockname$packet(r3, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x437, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r4, 0x704c3, 0xc4a48b7f26bf141b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x1) mount(0x0, 0x0, 0x0, 0x208004, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) syz_usb_connect(0x3, 0x3d, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(0x3) sendmmsg$inet(r2, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000100)}}], 0x1, 0x4880) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x2f, 0xfffffffffffffe7e, 0x1d4}, 0x28) 1m15.220396865s ago: executing program 2 (id=1128): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x40000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0x1, 0x80000000, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xe}, {0xf, 0x9}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x10}}, @TCA_RATE={0x6, 0x5, {0x7, 0xfb}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000850}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe7e7}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004015) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r2) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000007c0)) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000800)=ANY=[@ANYBLOB="542fac490ab5a88d1f66a29ba101146cf900000007bdb185e3dbdb36fd3f29b24943f7d347283b717c492fae725b20be94389520964abd390d5cb8973f0d30f1f23cfeddfa163f2d8e0354596da42e1befc2b6e6fc0f2d86c54405", @ANYRES16=r4, @ANYBLOB="010029bd7000ffdbdf2502000000100001800c00070006000000000000000c00028006000e004e200000240002800800080001040000080009007f00000008000300020000000800090003000000"], 0x54}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYRES64], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22c8a6dc94}, 0x4008840) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="ac000000210001002abd7000fddbdf25ff010000000000000000000000000001fc0200000000000000000000000000014e2210004e24a61f0200008029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b06b6e00020000000c001c00a6c6a59785", @ANYRES32=0x0, @ANYBLOB="010000005000110064010101000000000000000000000000ff010000000000000000000000000001fe80000000000000000000000000004364010100000000000000000000000000ff0400000635000002000a00"], 0xac}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28000000400007012bbd700001000000047c000008004280040007000c0001800600060080"], 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r7, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES32=r7, @ANYBLOB="000326bd7000fddbdf251600000008000300", @ANYRES32=r9, @ANYBLOB="0a000600ffffffffffff00000a00060008021100000100000a001a0008021100000000000a001a0008021100000100000a001a0008021100000000000a001a00ffffffffffff00000a001a000802210000000000"], 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1c081) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m15.127856715s ago: executing program 33 (id=1128): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x40000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0x1, 0x80000000, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xe}, {0xf, 0x9}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x10}}, @TCA_RATE={0x6, 0x5, {0x7, 0xfb}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000850}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe7e7}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004015) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r2) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000007c0)) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000800)=ANY=[@ANYBLOB="542fac490ab5a88d1f66a29ba101146cf900000007bdb185e3dbdb36fd3f29b24943f7d347283b717c492fae725b20be94389520964abd390d5cb8973f0d30f1f23cfeddfa163f2d8e0354596da42e1befc2b6e6fc0f2d86c54405", @ANYRES16=r4, @ANYBLOB="010029bd7000ffdbdf2502000000100001800c00070006000000000000000c00028006000e004e200000240002800800080001040000080009007f00000008000300020000000800090003000000"], 0x54}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYRES64], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22c8a6dc94}, 0x4008840) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="ac000000210001002abd7000fddbdf25ff010000000000000000000000000001fc0200000000000000000000000000014e2210004e24a61f0200008029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b06b6e00020000000c001c00a6c6a59785", @ANYRES32=0x0, @ANYBLOB="010000005000110064010101000000000000000000000000ff010000000000000000000000000001fe80000000000000000000000000004364010100000000000000000000000000ff0400000635000002000a00"], 0xac}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28000000400007012bbd700001000000047c000008004280040007000c0001800600060080"], 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r7, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES32=r7, @ANYBLOB="000326bd7000fddbdf251600000008000300", @ANYRES32=r9, @ANYBLOB="0a000600ffffffffffff00000a00060008021100000100000a001a0008021100000000000a001a0008021100000100000a001a0008021100000000000a001a00ffffffffffff00000a001a000802210000000000"], 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1c081) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m12.980483161s ago: executing program 5 (id=1165): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000003c0)=0x8091, 0x4) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x20}}], 0x400000000000172, 0x4001c00) 1m12.980052097s ago: executing program 5 (id=1166): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000001000000000000000300000085000000410000001800000003000000000000000400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000001a000100000000000000000002000000000000001700"], 0x30}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x1bc, 0x0, &(0x7f0000000680)="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", 0x0, 0x1, 0x0, 0xfffffffffffffd38, 0x0, 0x0, 0x0, 0x7, 0x9, 0xee4}, 0x4c) 1m12.928567335s ago: executing program 5 (id=1168): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f00000008c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000190001002cbd700000c8c3532d"], 0x24}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(&(0x7f0000002040)='./file0\x00', &(0x7f0000000080)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00') symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newtfilter={0x38, 0x2c, 0xd23, 0x70bd22, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x2400}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4084}, 0x8000) 1m12.831218917s ago: executing program 5 (id=1172): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x1c, 0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_SEQ_SYNC(r2, 0x5101) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x400, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') lsetxattr$trusted_overlay_redirect(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180), &(0x7f0000000200)='./bus\x00', 0x6, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r4, 0x47f, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f00000003c0)="951aa14bd6f68579cac67c83bf8d4500e5cea1bb1596d4ee6645fa16fa7cacb9214070a622a2c57b89075f59b85c7b5b2c41edc9d2cd5a2c95ed1c2cf72425be9c1a2df1b60a309bc3228d7e85b300f0d7a042a40166b9208e9d2e423c32ad8e47adedf5dc425c6bcb031fb2230835d41afc23476eae602bad3246417e5ac757", 0x80}]) open$dir(&(0x7f0000000100)='./file0\x00', 0x2137, 0x84) 1m12.711298496s ago: executing program 5 (id=1173): r0 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r1}}, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000000206010100000000000000000700ffff140007800800124000000005050015000900000005000100f6ffff38050005000a00000005000400000000000900020073797a310000000013000300686173683a6e65742c6966616365"], 0x60}, 0x1, 0x0, 0x0, 0x4081}, 0x50) (async) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) listen(r3, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) connect$unix(r0, &(0x7f00000005c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) dup3(r0, r3, 0x0) 1m10.850522918s ago: executing program 5 (id=1189): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r1, 0x9, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) lseek(r4, 0x2, 0x1) ioctl$KVM_CAP_HYPERV_SYNIC2(r4, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000002c0)={0x2, 0x0, [{0x400000b0, 0x0, 0x5}, {0x400000b1, 0x0, 0x2}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000240)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f0000259000/0x3000)=nil, 0x0, 0x0, 0x0, 0xc, 0x4b, 0xe4, 0x0, 0x2f}) getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000000140)=""/198, &(0x7f0000000040)=0xc6) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000005c0)=0xd) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2e, 0x4, {0x7, r7}, [@MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x0, 0x0, 0x1, {@in6_addr=@private2, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x90a2c342030985a5}, 0x40) ioctl$sock_SIOCADDDLCI(r0, 0x5452, &(0x7f0000000100)={'veth1\x00'}) write$vhost_msg_v2(r5, &(0x7f0000000540)={0x2, 0x0, {&(0x7f0000000300)=""/253, 0xfd, &(0x7f0000000400)=""/250, 0x0, 0x3}}, 0x48) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x7) 1m10.743648399s ago: executing program 34 (id=1189): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r1, 0x9, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) lseek(r4, 0x2, 0x1) ioctl$KVM_CAP_HYPERV_SYNIC2(r4, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000002c0)={0x2, 0x0, [{0x400000b0, 0x0, 0x5}, {0x400000b1, 0x0, 0x2}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000240)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f0000259000/0x3000)=nil, 0x0, 0x0, 0x0, 0xc, 0x4b, 0xe4, 0x0, 0x2f}) getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000000140)=""/198, &(0x7f0000000040)=0xc6) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000005c0)=0xd) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2e, 0x4, {0x7, r7}, [@MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x0, 0x0, 0x1, {@in6_addr=@private2, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x90a2c342030985a5}, 0x40) ioctl$sock_SIOCADDDLCI(r0, 0x5452, &(0x7f0000000100)={'veth1\x00'}) write$vhost_msg_v2(r5, &(0x7f0000000540)={0x2, 0x0, {&(0x7f0000000300)=""/253, 0xfd, &(0x7f0000000400)=""/250, 0x0, 0x3}}, 0x48) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x7) 2.659427323s ago: executing program 4 (id=2039): r0 = creat(&(0x7f0000000300)='./file0\x00', 0x1a7) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r0, &(0x7f00000001c0)="64e9", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)=[0x2], 0x0, 0x0, 0x1}}, 0x40) r3 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback={0xff00000000000000}}, 0x1c) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7fec}]}) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000a80)=0x1, 0x4) r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) pwritev(r6, &(0x7f0000000280), 0x0, 0xfffffffd, 0x101) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x28, &(0x7f0000000240), 0x4) close_range(r4, 0xffffffffffffffff, 0x200000000000000) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e20}, {0x2, 0x4e20, @loopback}, {0x2, 0x2, @empty}, 0x4c, 0x0, 0x0, 0x0, 0xfff5, 0x0, 0x1000, 0x3, 0x1}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r8, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) 2.419671502s ago: executing program 6 (id=2043): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007200000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r3}]}}]}, 0x38}, 0x1, 0xfff2, 0x0, 0x20041090}, 0x0) 2.369950638s ago: executing program 4 (id=2044): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0xfc, 0x0, 0x1, 0xffffffff}}}}]}, 0x4c}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000003ac0)="bb", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f00000001c0)="5a93f8b25eabafa3997fcf0068bfdf4b6db2997a52846a38dac5a545e912cd6b4ced1fedd92c1fa0afab1c4ee981049fde0806bb84989a69b540d6910ca212cb9b5e65f99979c194938a9b13f2f5adf765d69aca3eb5a439537d7333352252c8b35a6361182331ce07c70ec53d713563d033d0de532272a01e00"/139, 0xf111973a6f6ab58}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="0000585195c18b846c30882ada03476b025b0800000a00000000fa6303d4808d2b4955ecd0cfe25cd6425819161e305a8f387300895f1a75f5b7116d1e3ad0345ed0fc", 0x2}], 0x1}}], 0x3, 0x60cd894) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_queued\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r2, 0x0) 2.309393444s ago: executing program 6 (id=2045): r0 = epoll_create1(0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) close(0x3) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = dup(0xffffffffffffffff) write$FUSE_INIT(r2, &(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x7ff, 0x20100100, 0x0, 0x8, 0x9, 0x1, 0x0, 0x0, 0x80, 0x1}}, 0x50) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x90000014}) 2.198136713s ago: executing program 1 (id=2046): r0 = syz_create_resource$binfmt(&(0x7f00000003c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r3, r4, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, &(0x7f0000000780)) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 2.195524416s ago: executing program 1 (id=2048): r0 = syz_create_resource$binfmt(&(0x7f00000003c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r3, r4, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, &(0x7f0000000780)) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 2.110231797s ago: executing program 1 (id=2049): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001300)=@mangle={'mangle\x00', 0x2, 0x6, 0x548, 0x2b8, 0x1c0, 0x3a8, 0x2b8, 0x2b8, 0x548, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x5, 0xc}, {0xffffffffffffffff, 0x4}, 0x6, 0x7ff}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'wg0\x00', {}, {}, 0x6, 0x7f, 0x4}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {}, {}, 0x68c7}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x48000000, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @private0, [0xff, 0x0, 0xffffff00, 0xffffffff], [0xffffff00, 0xffffff, 0xff, 0xffffffff], 'geneve0\x00', 'xfrm0\x00', {0xff}, {}, 0x3a, 0x5, 0x0, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv4=@loopback}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private0, [0xff, 0xffffffff, 0x7f7fff00, 0xffffffff], [0xff000000, 0xcf16d9bfdc28978c, 0x0, 0xffffffff], 'veth0\x00', 'dvmrp1\x00', {0xff}, {}, 0x2c, 0x0, 0x1, 0x8}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) 2.109832248s ago: executing program 1 (id=2050): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2080, 0x0) close(r1) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000000)=@phonet={0x23, 0x3, 0xc7, 0x6}, 0x80) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000800)=@assoc_value={r4, 0x3}, 0x8) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, @bcast, @bpq0, 0x2, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000070900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000040) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000cc0)={{r7, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000c80)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r8}, 0x4) pwritev(r3, &(0x7f0000000780)=[{&(0x7f0000000500)="f5a30584850865b7cbdcb0261283cc2c951174b79cfc057a9a564d6cd05c1c377ecc0f51d0eec6b0c9be3f2d67d4190779aca2a2f7072da516cab4d2bdeb7b067db82185be37f426287634954394cd80005439c7eecaa9a2f3afebf271cf8076ff3f0a40389ba85ffd456bdee24791c7beb24dc7e7c2d4a4f6711150b55b2b1b01f2bcd35a8441570be7edde12827647453f8f070800ffb138478e67fa3f18c20fd88f8ee8187611f61f274676f8fef5f730fe8ac37f810b0831f0e593fafd17d51df73812f8a610229473e2f4dbe87db868b8891fa419a83dc86120a90d109254e1e8528df5", 0xe6}, {&(0x7f0000000180)="11a8d87ad522284e6593269921", 0xd}, {&(0x7f0000000600)="5536add7ac5cca1801bd100e3927c5d3ef4f34f90787e498244f560b61a18b51f0309ebece6990ab5f7afbaaaff5d29d60e12fd55f5f1b82cb910a48f35f9a410ad344e7a0128ef76edee6396611278dc54e0ee25e9cbd5e02297575b227716ebf619a23307554cb2569bc52fdee575f085c89ee13", 0x75}, {&(0x7f00000001c0)="52a1a885b8fefc3b3c3f5736b309e223c44c05ba", 0x14}, {&(0x7f0000000680)="056f2ddc2c11a90512a2a15d19d5aee79ed37cf63681fa4c968052a9cbc91465b50da35367b003ce91c0e44b145d5431616d6b4002ba4ed4330b2c1a403242946b63e63258fd4ebc2fe7035177968e22c4168848230eb324d4672a320c0927e0b1815e3b65735c37b6f5ef8a8dd4b2b55f5995fae94206deb42323e5d20e3a26bd6fc7668879de7ea034b0db9efe1675a9f52dce8f15d506086463ec9b04292092c00b09e34a826fde91c18fc0c81954f3c1f116fdbc7f63ca351a6bef728db525ef72cd78fe2b3ebd6c8bebc28dfd86d6cd080165aa4591616386af", 0xdc}, {&(0x7f0000001580)="f24e1fe6741def5c0a663fdc06b9577788adad752de60a4bd5eb24a472964b69c8ba7a69a72b50ba838fc566430ce8fc8ea7ba42eac8a71727bd34285f950dfbd75ed269c08b0402fba0d0474174746c0714a1001423e826020d9b001ce7bdbd5177cc4b4e8793820c8781d314dd15d739057cb39c8e831950afebbb5dd6b9ee9909b1f59acb9955f963646f32330cbb5f283fe9597a7d356b0f4584d8a304e5a8d486a00cf2e837fe0fb3ade664531a4257ae545a608591b49c986cc3d4450f380a1cd821a977938d6fc1ed8391b5ac66e9f4e0b517f3dcd650c6e44f84d1f327659b996beb20e4cdc85e5cb48cbe7c020b5b9d4a79d4c8433f7b7c9a25e953d17526020208ec8eddb5b1ba91111f66bae37ebea543877f086ae13a87b6af2a14e98edc4b8c4525cea17d2eec66f5e6aad28ebf51483edeb2f16dac9faa1e0f8a54f6c8254964657629e7a99e12bc7e6a97bf6d8cf00059cd210a8c9a3e63cccb10712bee287a073b55af4486d5e5b9f88db72482019076a5d0d3868d6b55f1dda93259dfad37882bf35049d43384a08c6c86a82b1bc5e5ec79b60e3afc4771706dcc93510a7d4cc62bf3919935f736471640c6a2c641bc6b093bceee19a7e785a63ee0ac58af42c09c9fe9e45a6267d34e9265fb305d9c67f59af4fa8cb9965ee8482f4628732a93cc3f50712337875280fb9683adf2ff98f1ec432ec2c7e43a72d2c125c357536878f0561b983b5efcc7a2f49117def39742199d56963a40f97aef87a1efc5f65d9a2b70fa50cf031dd6daa5da070ca9f004bce91d5ff3ab0b9a445b3750737c9c1e7d596e2da8a4e6575df72dcf8ff6c7daaf9628797bafcc8a7e348a7b4d0bbf0cfd1046f1b6ec7978869e11f87350f35ff922dbd23fad7473f75f50d2bc13056b3717937667e49998eb1d2287c55e455f1bb0dee22e5cfe5ed54634301ec085bcc1f782af684e85126ee0b639308059622c107856f249ad14628e4e35494d43ecdd50ab04f1e0ed0259db6e2f7100f2ac57fdbf9d48fc7085442c3094855700cc64cd27074719bf9dd1a2aac45ede3ad85018f47608df5cd82007886ce4f00e4c9fd2a881dc093ce8c62c22ab550cef00e5b32b60a87468199fc49d09aa6c6358309c2f0c43a12aed5ba49e95cc9c46247e7af5cc43f669b9704690fbecda714e607075dcdbf6b666378ed40b18b7bc179b177f57807a1a0c595f001a5e6dac789441a747e036934b48237712fa5675a14785c6f51bcad50854d12b571e42f2708de589d0b8e980023249a78fb16e057317d6c1b285f1398f61116786ec3c882c09b9c29b6198f4becb62373489ebe18f495b35e67b335ff73d5d0931406cd509a7b2e55e10ebd76538e490dfacee1e17736bbb01f6cf89205c3989a6b89cf342f52c30443ed468f62e6f48f57972d0b6da9fc96e78b8878b3122ac2810250a2d6aea4debac4ff69c9fc2ceca2850fa4a1a8eeb4f6962af7bc87384d2ee15a88feac90d8ec87bc3fb7e9af4fba61262fd4d2b28e8a2a189721da2cd11c05f698575f09e2c539577644ff4f382fa85cb5d918e323cc0156889285c522c5f812fac6eb7b0bab67c41bc00eb77de0ef5afc516ebd7e288dab182d2ea133d0858f0a01142d596f839a1b0ad2ed937000e46ae59ab457d7bc383c45e69991b0c4d8d83cc85036a566c4996868fe1f67db31637c331333e4a2e2372f256dd854049f8dfa08f4debd2f4ace5964e557d8233cbcf2b8284240c855ecec489b64cf2b159562e06e123e68f67753e7ec14f05fdfc0ef3d40e5fa13c333e3d62a066b6ff2e92ad5d4e32bdfecaf56ce85bdda86a87363de34140355963582bedf817186c3cd79ac692dd2f5664095637a3f5d2e0c2ff8ca966558a38010727ae2e7a52a6dec6cb74327002613f5b15c7672bf0fa38ba9d6966a70cb06e986cd860d87309d16b3039100f46fdfe2fb54b08a8394e8114609a18582f1f96e0819ef5214b724ee06245f71a83b2c80d27717fdfda4e7c6f1b070e198d62f311f63e29c512725ca61ecf872073322abb533375b2d2c865289b4bdc84e47078a2f687aa3f64292caa796a791374de796b956a68d8dbb5ea3f65668469b6a7fd00b7c1a573bf74a458b5b5523c0e8c8890186c1868baf824702defb967151f1ec886a505ad8b8d2a06c8b6706ff895faffa175972952988f77eee343c9661cf50752751a9c497e742ee92341512b0cbf9c3dbbcca4053783af4256c789acb976c043dfdd5b92c523b82bbdeea42af32f2f776fa4a8ec235db96594e2ab2989ec707ec1ef7850fa28a2a4eb5512f6024d0e5a3aa288286d54ebf91c887971f678c6a33a1df6bde1dd6bde6d28e0d4f31a147b759a9b33ad709b0b8b2e99bc0d25e5aff583403f43d4f25fba3362ae04c74205eac0244bddd0ed35510c4836dcbb5317a660d4330274d4e04b069301262d798e6d66b83413ee4296514c02ed25614c55a8a77130cc56fc813afc7da35758aa2f90f9a6820622fe04fa32ce009251e6fab28724b6477cf1f6315a0fd35eb6a557689c8261a1c5ee38fbf4bb9e1b08ed567efad7734a782f063ccf15bd12028c56a8f29cd0144d9fb06e484dd789db8325f407bf565f8db1b62479ae18132eb53e042fe2598fd4168d3a1d8fe15d326c9117d65ba71bb60a16b3c79fa9f37f5859da9e98e2d8316685e52b8a6c5a5b78fc5351baf56544eeb18cf9b8d0d5ffcefe4630f0d680e16a1544c3b318d6fa41c3aaf0ec4212743b0f3efb31fbfb693aad1721733b78fd715bc66140121d9c331b65c2342e1c48002745605245350b719e1f4e9923b516d56ff8a435b29707ae18838eb12a82f450888d6cd0b4b53389bdd58881bfad3c7203905389df96694ee859560b18dead41ce8b1ba5012b4da51a6f6459ec1b70173cd3b53f804c01ac2d01a700ab8e4c3e58b20e699917869e57bf56d68c5d89dd958ba585bdbb13b94dfc1cb210756d025503ab57da5f1af3ef3e5cc1b87bd0baa16f8b8fce37dcb55a44b2ba6f84959cccfdaa1525dc5cd3e2284128f33692a5ee597c2dbc9ffbd2ce7376e71656071b89c73757972bf79833c8f857f1791587457915a571479643aedba2c3b6f9380d2803e9eda6480572b16752dd10a0cbd9d0f1e924bae86ce8fb9d8f726e631aa15db1d858435f2cf76dbdeeeba18208421cb0bed248befcafacbc160c7b0121f44297d87928ccab8224b21fc25f9b1e00dbb62728deda9ae27e4116c8c4939f9c2c37f2028ea7d86f38a97ea1e9e8cce293dad45282bc7e654b7a44975c61f050624266b666adc68f1a93badc149ad0e28fa5b4fc8ffa63dc47ff3087a3e35a0b18920849dd1566434947a29eb9337371fd87d2abe92b4614a577621209346cc6ebfc7f5fed84dd341df7c7145b3472ce98c1b848312dcab251dcffb4736b6599e1bd6f3a3fbe2b517ac10f47fc64f6b889d2140ee172af1d8c3b884eb77f2acbabbf272db99ffcd548ddbdfb528a10c5474592cb4bd8b5978a88c3faf8c6abe18d979192183a40c5c29a35724aa0caa087893b45b39ed8284abf78e451e571b9ce15698fa8488dfaf5dcadec8c5c6b3639064af14f230e6f2d159f62d4d3d62d3ed7e72223481448f99fb45140c205fb628d7705202adaf3d5fbddacbd32e8f327f42c1a878d2e1d859a14674c73365f480778184d6d5cde13a845e55f08eb596ffb7668b1c28321b1d080ef34e0555d9b6b1be8df47644e9da052bb7d667542fd192cd3d637d0608409d14e2e7a4ba899a03bffacee310a36c4f772a2a773cb80a72a5160b7cb2171a7b38c12fd48fb2487432df65377794e977320bc6a674bbb3429ef6dfb669f5be9fd40c98739cc3b374ef56595555719fa982d7fe827ddc2f15bb8a7a7ab97bfcbb1b6318a6b993b0ac44d32140c0e3839824cc852bb5367bee0d270aa370cf043176a5d666db633e3bbdad63e8c3bd598a063e6c569943a23f4f1395495c0d77ff2af02a0aca61f27fca20a8f3010e5891223b55b6362ac3ae5ba654c2148b1c4e77f2ec57405a4e6c675d8833cdad99ba78f686d6879f72180a1e5f9f08091326ba4807d08c70f962454424ca50262c7984583d47c81948e6ea990b8b69cf81b413ca34949081cd26bae90559d1cdbc8a12db01fcaaeeb0057a1ad727e4b9ef0a10c0d738a027034a3ba4cc3931321a12f576f6d08608d2dd021425c96c1c0f0362d532fdc64d38ee0131ab3100b16bdfb0775354e24c8bb963b7a42c9724ee00ef361f2b6c09e7b3a8ce5715afd74bf80242297234d57ab45040b5d6687d048807eb0bf0a45267cccc24520c8c3477991cee9883218755a11747ad214d4199393f2eef68ab1d9cdee40c9eeeb1f499a7aea76ad813a3eb0ba15dc4b55f2ab1afb5cc37ffbeaebe87f98583d746c082aa838649f7f421b0d756ebe657d32b7868834ecd4a4a1804212d0c4f4691d953094407757aa479ef7b9479c57949fa21719d90788cfde0f0c948fd46aac8b98d6c7fe6e8c3d70fc49ecf33cbe7222b7ef30eea0e67e13b56319a50f095191f4e3d60015f9ccfafee69d557cd0e545e3a1916337c4caa4cca915af69a6ab336113abb393c972d97eff61b74aeb149415e70c2981c0dee8c504ba422aab4cff374653b19bd4bd3667c9cc9a43b193cca4274b93216b9247d49bd83b5783d6b41e44683ce8170bc6794f6b3abeabbf23ac44b95b5523546e50c350760acf292dceb1c013db16d44da2358596e87585abebfa51ab75e246bd4402fded29e95a8d2b2d66c4af7fd362a9ccbbf043904965b01f94059fd256b226d6e74bac4aa153ca57ea6ef95568dec574334b255ab5409d88e097e024feca6f9b9ac4d7cd687928b43ace346beb7b19f5c6f9dbf6b35d4f8055f6c4e392e157c2bfc57779994bbd5e7f995b086076353604fe9fff8ae2c35f87577d1ec0dc91223bdfa121d2470d7be71438b3465f323b53a5681f43a34ea24f4ffcdcd18eace9aef20ce707ef5db714bc484c6ec9e81ca668b5a8f7eaf0d852612426d72d6b0a83195dd7c4b46ed47eba002acb2074a5bc1b97ee4496a45571bc6cc47cde545a6286edceb7d5e1a84c2f91a4471d29e6ffcbb8d342780edda5220592d672c8ddc16a074272f96a6c1e7342982f9e698907094a8f702ad6abac1783b9c4f9df758e00100b5391df41ed7e8ed1eacb0d374b621ec11ebbe65e4ad865840742abb3b4fd3a117afeda17725644625e3c7a2ab0770f2cbf14942311fe4e2f55d763988d1f365063bb88f8b9ba954425adeecc307d2af5ac50d246926b6effaae0b84706c9f3081d2012589fffae28655fd44a6ad83736c0755e2754ee9d0791556bc7ca271014abdc7a16a1bedc394dcdd798ddebb17f0abedf8ea5b4a3c75f242c01c2b571063aebcec6d8685bf020d6140860ffe9421da756ff38b57fcbce98c98a5525c14221a6aa50080585de9efadeb612ad710263cdbcedd2cdef6f8c0d21e329297605d379be628e41f7c3c93d3c9577051c9b0f1720b6ff40ded4e0043941c55f8c21448f6e3fe8952e8f803e484aaf4caccf2f00d6999d43a1e23f3a8f5ead553248efed6da77225ee3ad1a977304a9c72bfbc66f82bc2e7398b20a33f7817da6069baeb41fbe7c07d2192ffa31f89d1af80b613da1cfe588cecf74b84d618ddc7cc4876a7bcb48bc1d6de6f55ec932c23a948baa8f2ef8024acf2d4fb6e0e41a5a0b0e82999f5895a8883aa4a32c0a61ec472fb5ccf0c66a16e1ba490965e54654a", 0x1000}, {&(0x7f0000002580)="5e2701bd043e955b310061b5fce8fe4a561d56861bccb1f950e80121bc8a2b233d147068c52b01d41d30bd4505e67049f9a004e2576c4be48da91f9579f1c184d1aa1b195e39742ac74cdfd26defc45111c4b367cff03448bfaed5dde04f7deb9f71006aaaf555aaf65c5c4dd1b8e9e4dffc545aab6ed598abd09d1b63a510a922c82ee7e90068218e29652974c0fdca12c978b7c5ac9a87399b51dfe5b927d2179e04806829892d4681626ad1949097ee126b7a411b7274321f99dd03119555c79b8c2977b70582cf39379ee6872fd5f2951a10c81989230aeacd3d9ea722d11a4934e282e86dfeace61e6e65b4440c3a9744b9b05fe743d851f6f7817ffaf31589a2abc71b0971c1148949119a9d0eafc9950067e4f6dc61faf369d21cfb56ea55cc7eeb7ba1fc63292038e131e852772cb178fa1b96c89f4441d1f0e16087ebb77c3e2f2544e4c1785a9e9f37d04f2a864ee379836676ec7dbee50c58be8a2a791fa487a5053ca8bf9818fa87a67d2355f0cb3942bee0ff1c1e9e6f786239ece48232f9a54d8bab5842a07f3062fe7befb79e73f6214c4bb7a06afded7e605954c13b8003e92ffe3eb7eceefcdaded1577cd9606d63caf2a50e83ae6002d07f8340fbfa7f64bc247fcb690d04e72ff20b3c6f69b2466330256b7f8ed3f4d647188454e27291ba6da75d8dfa04a04e940282bf022628e5158646882850f63ff3fb14654baf0306ccaa0077ae945a17f16e168ea213a0e08a9fdb559288425ac23b8a6cdfd63ae3708e1d9cb18cc5ee466a797871c0770f0ba5cec0e9ca5b814800863afca566c88845630544eb3e2f945259eb5ad4b6db4216dda46967542e772b4352210ede97764d32bace0aa314a880ff3b71399e5624aae055a226aae49294beb6f63a17db10bc612485e0c15cdaf1c6d99f448ada35caedbb9140b534a9960916d7e820e9982a8a0d5ac13f90240dbb902bb54ba8ded41b973c6ce7794fd2c227ceb61759274ef3e03b9745e2ccd3ddeb69d0180f8dc29b2f0f1ead0af721f2266fd2d3d48d954fdf3f8b9e07a0bfd049017cf9ca55bf87424622d6b7ed9982ebe98b536e6778f0181cb9e7e4525f755581be2335266688038844e922b27d988d46a8967019c13ec2ddc15d35efdd4b528668fa44cd3ecbbb44d45ee0377b4dfc61debf23f5291334752ed695198cb93699e3e83e1a7f3de4853edf54b937fd2007644677f0cb60ee3f077504f80d2cab3717eb40916ab604d7c9618e6974ffebb61235027f44e3c2878b782210430cb8d28d03b620528e5206e567ad145630f6fee4284c538f698cf36290e0baf87982993d5f0c6656109666184c6a0944b1433631f1f46877ec161fe2e90bce409efb6a8d96167546ed62589ed132c74e06d791b65cc368cf621a60721d28f9aebf661c901f1f8c2d004dcdbeecf75b61fa514ceaacf7090dab753f2000a80f6a72e3594c56451476fb9f791f896768925a70d5e57b48b5f1d095087073dc2defec013f8c0bc6968440cc95d198a54d74322dc4182367eb2bcbc5bfe423f2e2ba3b502389c4d5a93cb13c846b6eca912df105e69ceab5e91bf7eb79df55d0c2cfc6a033a744d017cc20f2778261383f827a0b8271fb5bceaf0768919cb7a8f8e3ed71ac2e2240a84e05cc8de20dc023977e085d38568cfc8457d23e4415fcff6d428acbb4c06b623033d2f34791080bfe4a9b9078d5d65a9911dea10a2cf5eb097f227dd587169f49cd8f3ccac67b9f8df795368169a7d3d76a72421afaab248d27a61b1b91918e558bf45b15a6c6bf02c5974f3c7ab74a163b5b0e0d4e110517f1260698938bcb24a5e8e2279a507ad191419970a67e9408563736be01553a457ec440eef4080a5020e0b3b57a6afd1f155cd31361985ce564805833d838641dbd33aabee37926726d12e7969c108c65a624dc76f82c4d9a55cef56c50c029078373c409d2101c711f80306301084e5a5d0c48c9175e91558efdb4d4b851158bd500747cb5c999996b4c3def7cef2446e04f506b51176abc827afa6477264cddce17ec4676700c3968dc111d99cf33fc8e49ef112cb036c21f73d9694c891537a981b27cb86741119de8a80398966aebf53635b2d7065a820c541ab4edd7bfab45c92239378af962297058aac70f025584268a4468e420f7e27e57ecf560be39855ed5ae49e10e5aada1745b775855b75a2758f78dfc03b83ac5cbcb32699118cdfbce30871bc4826aafd607f1c8a3411c107b9cb15dd86c6a8052d0de7419bd8632ecf232eec65d32313f442b349a5f6f0a1e56b5ec86d2e8ac32e83eac7aff48ff7133bc0da24839ceed7fd3b852837759583f528702ed0627f0a33f2ef73b5c9c995390ade2d22223cf4c7a05c547b89a1897e3a1f4655f2b3160e25ea95f9603d81440fb541bf807e6682e08543ee3b4b4d6fc5f8b0325e2bb66ee5b9ef99cc1f033e1437c57b597f63ba18b0c8f432bf2aed7861648792e8460ac917a575ca16457f380555f4f99362875116f3db4a30179c6340e513568b56da6c67c44e04fdb4aafca1554c9d6c6e8f4015e09d416d7aa84a37a20394faca1506261d4d9d7fcdf0e2c45d047778f9247d2f688ad037c38d75bf22ff5adcad1b31556cbe7382c0c2e40b36361c696f8979e77de55d56f67aa7c0401b8413e8d55314b8c8675a3b2e281112bbacad3cd38b87e0b40e26f17b15115f980708deed40efed148b8474d485cd723cdbadc6b0e3d4e0d9730b0fbecec9347537a57a885df23837b6358fb100a14627747c1cd706ec34f84737ad1408d95a9eaee7336295810d8b1a7be87e718d0aa835545bd6f3db6fc06e48b079173990a55696cae8db617e190b7a7a87771208195b61e014fd0d85aa7ac0cb56f5d3cd7da49fdae4fc2ee3d55a0ea78ead26e772d46864e3cdac30a8dcf6008fae58d35c7a33f12720939088b87928f11c6b41808e1524438ba4e570a0f8ad4e668af5124622c7d6a077e3b51d03db4c2d1be1ca04d5892e0b66adaf2717c94f14e3795e2b8b28c5956d8fc3d2a84b848b9d7b2a32c9cb6e6aae8a6b4de6d30afe53a4cf086960636c9d14b070f12f73376d380a856787eb7784f1ae2c355f9aa21c942a4208bbae027fbd43f8423e3e9b249c67892be83dc203e928e9ab90ee897dcfc0fa930ff7aea6d0c4ef6a637dee3d6cf78d76d47ee7cdc87310ae7100ee905d7d174f985eb667812999f381cb57446bb2e24b6e6b353fed07ba84f8b496cd680acc616005ff82f6e5e7fc14db1c47934dec0b22cb7a300d2f20a77e6d875d59359e9ad74aadbd35fcc7e02424c773d42ccbedfe19e7e997c337d366a16280e2e478d41ffd6b212aaf86e667e543bc8feeb5b8aa18ed94532df534903e9d023f38455bbff595cfa4a2acdbc2c5f07a2016ca8a0a68db75fad1314d5095cc3da10014fceed19487fc17eb1be7b5cf5b582c38018ddd82c527f4f8447ea5225a5c92e73272b930e4437530ecf83395d852a083a182259570650a9aeecce5fedb30207b72014b427acc508314d9b90f9c297c7e37669b8f8f6aeeebe0d5788f3dc563f05c64255ec4d244078572f6de60dd391aedf07c339741043499a240848bc993585cd3cc5d7d77a33d3a460955dcf4dc86e94876f2348b4e2d85002da466e632252f6db84c77bb27ab1915efea92059e99ea71db160d8d944588694b6e58192ac386c6d97b5602933db26aedb36aaa3e5668e91cfae0db9560524d5db9013a348e809da637d179bd2c9cb33d55747513a0aa4f8d91c6788198ad5b711ec3c6aa5acba13b0c6c0ea34a5a4e7cf10dce2f2549406a8679f89d10886a4e40b46dae4effd82e45768a44f8c380abc10424617860507e1fee936a9cfa2c1d271f367e3bac772783154447b2d67348737a0572fa46d06bf9ccd61a37561fc81ca45b31d5deaad338a44fdbd00b541ce5c7385acb7837ebba5072fe7967202503728b1f31c69bf2fbe0db395662c83d7520e342bf408a95c036a6515ede18df7715adef7f86d0e72dc2f97aa880f2ee5b116e63b909ae558604facbc61c1a0480480f2cde32392832a7371797c743b09fca0afb6631f20c09685dbd283666f1ab2b7576afc66ee8aff1d6b391852d59955c5f263fb15c17d64500aa54ab0a3a9abeaa13ae87f4ed4ac7c34061ccd212e4e2f0928858d58924943f3686b10ba0fdd3f247034536ab8bb1197f83787dae0ad0932356f908c5c2a8948f7998f22dbdf04c69cd3855f64dc49130465fc01c87473600f8460552ad7de67585036c3f86147a1a6fd92874e3e5e4b1261f1bef2364c0833363bc3d98509938105eb08667425a1f8d4e3178cffdd5a3eb71aab5fd56231ec0b3fc217350eb76281348c718b5416ec4b09bdd108c8729662897186ba0922c26e612607688a1e56b8e09822c20756eb01d2f0d1a5848f2514902f8655d712a1aceae6ccf83bb7ba14a17d84c595d635839fe4f79710b9af77e3fbcdea0080c5fe83d512d2b4ff448a1a2d1c07b8e8445ad79988f916cabb37a8ae4cca04d43fe10531afac86c18c8cb18307afe1dc4295f2250ef27377ce8e19ebf1ba81248affc52319c674689d1d0c636bf350521b3f49f40974c55c11c3cc657923303fd140cb5e7bcc64639eda1c0dee04df180cc997111ceac2130dfd3805d4d5443af63b033aeeedc82f549806d5c9381131f831b9201a4229581fba10a719a9ba3d28fedbc4167536862ae078ec1d533c45ebb37db7f46c7a8ae5c9b6bcc311e283bb5a52c9599f696ce7f75f0a3ccb6e277fac1b94b04b66481e0cf9aef49647b40e6f7f8d95d9d56c269716e166af07ca2f0a6c1aa5daabd01de79878cf93fac1cb3e2dfbe861fc25a69104db6d28c9f778330df5b2426a5e8754b900de33eef478de3f2ffad7a5d32c7dd8f1b3cdbdd1b76374895c231dff3d01c8ba80a85f983f61b6b2bb94ce45fa34fe349ea811ec20f1ee4f223632ae80f0f2a6b831e6b44d3000c7585a7e6aa6c167761163c46b27508e9f0bf8006b7f6bfc4b5c1d0e089d9a22295a5fdd2a7e1db748e313f9b56e49a5bcf50085c066db73e783d36b47a188bd154aa38a21f1afdcec861d6f5610ad5d40a15f883aeb26e2406090b34bc94c09a78fd2d3d2db1b8cae1e0bb388814de1a007b8eb7cced9b5514088d4a15dbb6ff51ab9dee84e0a1460221a374088f1870c8d73331323404376b6c8e0f3d66ecd8450b4910d5152730a0424aae70dd5fbfe04b1d493882f038a96764a8b66da59145e3d60c01768ecdbc2e689d9f54ace10d47e67cbe7bdac5f468ae05e7ea24a418197dad814df7e4c80157f941cdf45ad4acc4d7ebdde30cb1e9e28d6eaa3c70022d73676399b1e0fae71192a0e24c989c06e2439a24f70b4401538044d2d813e4c91b98df731ef03fb3efa509d8fbf311cced6acb89709a802653784b4346dbf826a6823dd733fdfdbd3258686ea7cc78a0f009ce5be15560fb65c4196db0cd90c05c226140834d04540a8c015615d259151e5e1d0132160836345a9c48488d08ecfe74014d4af7f8a52baccd317dc89374412fea35fb12e09dd575f3f64b69e81c3f95ef49b2c60c9f30dcba75426c1f0ca3e76d7080f371ce6a865415f9e559e6e1dbb8ae8393f56049eca38826f0a5fc5867fcc1016e1710a9a974975d864e9aaea8d62fd9e120e4d540f69ebbcef1b2d68f8bfac584ee07ad74ad349db2d0f46f2f40fc1b99ef4e796a109f89979438c35bdcbf29bfc429c6592094d53c46066", 0x1000}], 0x7, 0x6, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r9, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) close_range(r6, 0xffffffffffffffff, 0x0) r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'bond_slave_0\x00'}) connect$rose(r10, &(0x7f0000000140)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0x3, [@bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) connect$rose(r10, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @bcast, @default]}, 0x40) 2.029549475s ago: executing program 1 (id=2051): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000000c0)='fd', 0x0, r2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x4000000805, 0x0) sendto$inet(r4, &(0x7f00000002c0)="eb", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000000)={r6, 0x1}, 0x8) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f00000001c0)={0x7fff, 0xab5, &(0x7f0000000080), &(0x7f0000000300)="59b754630f4736875734ffa7b6", 0x0, 0xd}) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000100)={0x28, 0x5, r11, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r10, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r11, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r12) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="010026bd7000fedbdf255d00000008000300", @ANYRES32=r14, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x2000c001}, 0x40000) ioctl$IOMMU_IOAS_COPY(r10, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r11, r11, 0x3, 0xfffffffffffffffa, 0x3fff}) ioctl$IOMMU_IOAS_MAP(r10, 0x3b85, &(0x7f0000000180)={0x28, 0x6, r11, 0x0, &(0x7f0000000340)="c2", 0x1, 0x7a}) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, 0x0) r15 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r15, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r15, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0xfffffffffffffed0}], 0x1, 0x11, 0x0, 0x0) 1.880088445s ago: executing program 1 (id=2052): r0 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r0, 0x80079a0) close(0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, 0x0, 0x0) r1 = fsopen(&(0x7f0000000140)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) lseek(r0, 0x80000, 0x3) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x2000000000100000) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) 1.490690541s ago: executing program 4 (id=2056): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f00000002c0)='iso9660\x00', 0x0) socket(0x2, 0x3, 0xff) socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_setup(0x46fb, &(0x7f0000000140)={0x0, 0x304e, 0x0, 0x2, 0xbfdffffc}, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) userfaultfd(0x801) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000780)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xdffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) syz_open_pts(r0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x1a2c42) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3}) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r3}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) 1.330549618s ago: executing program 4 (id=2059): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000240)={'das1800\x00', [0xfdd, 0x8, 0xd, 0xa, 0xe, 0x3, 0xa, 0x2007, 0x20a, 0x1, 0x5, 0x4, 0x4b, 0x0, 0x6, 0xb4c, 0xffffffff, 0x2, 0x8, 0x4, 0x89, 0xe2, 0x400, 0x20001e58, 0x5, 0xe6b, 0x6, 0xc, 0x65e, 0x43, 0xfffffff7]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000001580)='yeah', 0x4) ioctl$COMEDI_POLL(0xffffffffffffffff, 0x640f) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000925000/0x3000)=nil, &(0x7f0000339000/0x1000)=nil, 0x3000, 0x1}) mkdir(&(0x7f0000000940)='./file0\x00', 0x51) readlink(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)=""/168, 0xa8) r2 = accept$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, &(0x7f0000000000)=0x6e) recvmsg(r2, &(0x7f0000001540)={&(0x7f00000001c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)=""/4, 0x4}, {&(0x7f0000000300)=""/71, 0x47}, {&(0x7f0000000380)=""/126, 0x7e}, {&(0x7f0000000400)=""/203, 0xcb}], 0x4, &(0x7f0000000540)=""/4096, 0x1000}, 0x40000000) 1.330336062s ago: executing program 4 (id=2060): r0 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x1) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000180)={0x1, "abccc87d5c1d9ec766e249dfba6e47737cada846be69801d9c2817e258ba6f81", 0x2, 0xfffffff9, 0x1, 0x17e7, 0x40000, 0x8}) 1.27043595s ago: executing program 4 (id=2061): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) close(0x3) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = dup(r0) write$FUSE_INIT(r2, &(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x7ff, 0x20100100, 0x0, 0x8, 0x9, 0x1, 0x0, 0x0, 0x80, 0x1}}, 0x50) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080)={0x90000014}) 1.018878273s ago: executing program 3 (id=2066): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0xddd6, 0x100, 0x0, 0x218}, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000040)=0x7ff, 0x46) r4 = fcntl$dupfd(r3, 0x406, r3) write$cgroup_pid(r4, 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) write(r5, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) fchdir(r2) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x700, 0x0) 908.210629ms ago: executing program 6 (id=2067): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f00000002c0)='iso9660\x00', 0x0) socket(0x2, 0x3, 0xff) socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_setup(0x46fb, &(0x7f0000000140)={0x0, 0x304e, 0x0, 0x2, 0xbfdffffc}, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) userfaultfd(0x801) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000780)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xdffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x1a2c42) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3}) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r3}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) 789.897253ms ago: executing program 3 (id=2068): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x34, 0x1e, 0x21, 0x70bd2b, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x16, 0x1, 0x0, 0x0, @str='\x85\x95\x1aq\vT\xd4\xc5:\xd8\x7f:_\xa9\xe2\x00\xf7\x8a'}]}, 0x34}}, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f00000000c0)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x0) pread64(r1, 0x0, 0x0, 0x1) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r2, &(0x7f0000000b00)=[{&(0x7f0000000940)='\r', 0x2000}], 0x2) 740.244567ms ago: executing program 3 (id=2069): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x7116, 0x4, 0x8}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in6={{0xa, 0x4e24, 0x8, @remote, 0x401}}, 0x1, 0x8, 0x2, 0x1, 0x44, 0x5, 0x6}, &(0x7f00000001c0)=0x9c) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r2, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0xc31fe084736598c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x4000004) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r5, 0x2) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000002c00070100000000fddbdf25017c000008000180020000001c000280180001"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0xc010) 739.922327ms ago: executing program 3 (id=2070): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0xb4200) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001780), 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x4) socket$packet(0x11, 0xa, 0x300) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3c0, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x168, 0x1d0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 660.366264ms ago: executing program 3 (id=2071): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x6, @local, 0x80}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000001000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) 659.369548ms ago: executing program 3 (id=2072): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) close(0x4) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CAP_MEMORY_FAULT_INFO(r1, 0x4068aea3, &(0x7f0000000140)) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) clock_settime(0xfffffffb, 0x0) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYRES16=r1], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', r4}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_ext={0x1c, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000050000000000789ddd00010c00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x7771, 0x0, 0x0, 0xd7b8dbcd861891a2, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xa51c, r1, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) syz_usb_control_io$hid(r2, 0x0, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) unshare(0x20000400) bpf$BPF_GET_PROG_INFO(0x21, 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f00000000c0)={0x2, 0x1, 0x2}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r7, 0x4068aea3, &(0x7f0000000600)) bind$rds(r5, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_ERR(r8, 0x4001af84, &(0x7f0000000080)={0x1}) sendmsg$rds(r5, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa0100fe}, 0x10, 0x0, 0x0, &(0x7f00000018c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x3}, {&(0x7f00000001c0)=""/117, 0x75}, &(0x7f0000001b40)=[{&(0x7f0000000140)=""/86, 0x56}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{0x3, 0x3}, {0x0}, &(0x7f0000001800)=[{&(0x7f00000002c0)=""/89, 0xa5}], 0x1, 0x30, 0x1ee}}], 0x90}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r9 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r9, 0xc018480d, &(0x7f0000000100)={0x3, 0x200, 0xde4, 0x5, 0x80000, 0x1}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 58.972885ms ago: executing program 6 (id=2073): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5, 0x0, 0x38, 0x59, &(0x7f0000000240), &(0x7f0000000380), 0x8, 0x7c, 0x8, 0x0, 0x0}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) r3 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r2, &(0x7f0000000240), &(0x7f00000000c0)=@tcp=r3}, 0x20) ppoll(&(0x7f0000000100)=[{r3, 0x200}], 0x1, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c00000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008001e0020"], 0x3c}, 0x1, 0x2000000000000000}, 0x0) r5 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x8982) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f00000000c0)={"0e00", 0x0, 0x6, 0x2, 0x0, 0x1, "f700000000000000000500", '\x00', "0200", "fcffffff", ["5089986400005cacf10000b6", "8e1500", "0c436d743c97c443084000", "ff81000000008000"]}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000701fefffff8ff000000017c0000040042800c00018006000600800a000014000280100014800c0016800800b600884709"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x7, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f0000000040)='GPL\x00', 0x5}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x10, 0x4, 0x8, 0x5}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, &(0x7f0000000000), &(0x7f0000000040)=r7}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r7, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffff, 0x8, 0x0, 0x0}}, 0x10) 236.748µs ago: executing program 6 (id=2074): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1, 0x28, 0x0, 0x4000, 0x81, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0xca, 0x0, 0x1000}}}}}}, 0x0) 0s ago: executing program 6 (id=2075): r0 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000240), 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0xcf, &(0x7f0000000000)=0x42c8, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3) getsockname$packet(r3, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x437, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r4, 0x704c3, 0xc4a48b7f26bf141b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x1) mount(0x0, 0x0, 0x0, 0x208004, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) syz_usb_connect(0x3, 0x3d, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(0x3) sendmmsg$inet(r2, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x20, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x20e, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x31, 0x2f}, 0x50) kernel console output (not intermixed with test programs): 0x2930 [ 190.326885][T12874] ? do_vfs_ioctl+0x226/0x13e0 [ 190.326904][T12874] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 190.326919][T12874] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 190.326942][T12874] ? __pfx_usbtmc_ioctl+0x10/0x10 [ 190.326962][T12874] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 190.326997][T12874] ? selinux_file_ioctl+0x139/0x290 [ 190.327014][T12874] ? selinux_file_ioctl+0xb4/0x290 [ 190.327034][T12874] ? __pfx_usbtmc_ioctl+0x10/0x10 [ 190.327056][T12874] __x64_sys_ioctl+0x18e/0x210 [ 190.327075][T12874] do_syscall_64+0xc9/0xf80 [ 190.327098][T12874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.327116][T12874] RIP: 0033:0x7fe32579acb9 [ 190.327131][T12874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.327148][T12874] RSP: 002b:00007fe326593028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 190.327166][T12874] RAX: ffffffffffffffda RBX: 00007fe325a15fa0 RCX: 00007fe32579acb9 [ 190.327178][T12874] RDX: 0000200000000040 RSI: 00000000c0145b0e RDI: 0000000000000005 [ 190.327188][T12874] RBP: 00007fe326593090 R08: 0000000000000000 R09: 0000000000000000 [ 190.327198][T12874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.327209][T12874] R13: 00007fe325a16038 R14: 00007fe325a15fa0 R15: 00007ffe5a242cd8 [ 190.327233][T12874] [ 190.328460][ T75] usb 8-1: USB disconnect, device number 22 [ 190.590725][ T6017] usb 6-1: USB disconnect, device number 46 [ 190.628668][T12885] tipc: Enabling of bearer rejected, already enabled [ 190.633615][T12885] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 190.645094][T12885] syzkaller0: mtu greater than device maximum [ 190.924860][T12896] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 191.112933][T12907] Driver unsupported XDP return value 0 on prog (id 160) dev N/A, expect packet loss! [ 191.160931][T12909] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 4Ï€!F€õïVl‘uc'f`å”Þ†’;œ1µ [ 191.347702][ T40] audit: type=1400 audit(191.265:709): avc: denied { mounton } for pid=12908 comm="syz.6.1453" path="/58/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 191.347764][T12909] fuse: Invalid rootmode [ 191.700876][T13043] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1461'. [ 191.703777][T13043] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1461'. [ 191.706867][T13043] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1461'. [ 191.709822][T13043] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1461'. [ 191.803127][T13046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.350558][T13049] tipc: Enabling of bearer rejected, failed to enable media [ 192.353810][T13049] tipc: Enabling of bearer rejected, failed to enable media [ 192.357197][T13049] tipc: Enabling of bearer rejected, failed to enable media [ 192.360271][T13049] tipc: Enabling of bearer rejected, failed to enable media [ 192.363315][T13049] tipc: Enabling of bearer rejected, failed to enable media [ 192.367185][T13049] tipc: Enabling of bearer rejected, failed to enable media [ 192.370253][T13049] tipc: Enabling of bearer rejected, failed to enable media [ 192.373726][T13049] tipc: Enabling of bearer rejected, failed to enable media [ 192.377086][T13049] tipc: Enabling of bearer rejected, failed to enable media [ 192.380225][T13049] tipc: Enabling of bearer rejected, failed to enable media [ 192.383309][T13049] tipc: Enabling of bearer rejected, failed to enable media [ 192.386518][T13049] tipc: Enabling of bearer rejected, failed to enable media [ 192.389601][T13049] tipc: Enabling of bearer rejected, failed to enable media [ 192.392681][T13050] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1463'. [ 192.395672][T13049] tipc: Enabling of bearer rejected, failed to enable media [ 192.398997][T13050] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1463'. [ 192.402199][T13049] tipc: Enabling of bearer rejected, failed to enable media [ 192.405812][T13050] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1463'. [ 192.411141][T13049] tipc: Enabling of bearer rejected, failed to enable media [ 192.414785][T13050] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1463'. [ 192.418086][T13049] tipc: Enabling of bearer rejected, failed to enable media [ 192.421881][T13049] tipc: Enabling of bearer rejected, failed to enable media [ 192.425554][T13049] tipc: Enabling of bearer rejected, failed to enable media [ 192.429608][T13049] tipc: Enabling of bearer rejected, failed to enable media [ 192.432675][T13049] tipc: Enabling of bearer rejected, failed to enable media [ 192.437324][T13049] tipc: Enabling of bearer rejected, failed to enable media [ 192.440938][T13049] tipc: Enabling of bearer rejected, failed to enable media [ 192.444617][T13049] tipc: Enabling of bearer rejected, failed to enable media [ 192.448369][T13049] tipc: Enabling of bearer rejected, failed to enable media [ 192.451980][T13049] tipc: Enabling of bearer rejected, failed to enable media [ 192.455703][T13049] tipc: Enabling of bearer rejected, failed to enable media [ 192.459483][T13049] tipc: Enabling of bearer rejected, failed to enable media [ 192.463116][T13049] tipc: Enabling of bearer rejected, failed to enable media [ 192.466803][T13049] tipc: Enabling of bearer rejected, failed to enable media [ 192.469807][T13049] tipc: Enabling of bearer rejected, failed to enable media [ 192.472736][T13049] tipc: Enabling of bearer rejected, failed to enable media [ 192.475675][T13049] tipc: Enabling of bearer rejected, failed to enable media [ 192.806416][ T5936] Bluetooth: hci0: command 0x1003 tx timeout [ 192.809858][ T5940] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 193.006348][ T8510] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 193.157539][ T8510] usb 9-1: Using ep0 maxpacket: 8 [ 193.162309][ T8510] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 193.165786][ T8510] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 193.170705][ T8510] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 193.174815][ T8510] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 193.179342][ T8510] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 193.184740][ T8510] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 193.188923][ T8510] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.250084][T13068] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 193.399468][T13057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.401742][ T40] audit: type=1400 audit(193.315:710): avc: denied { relabelfrom } for pid=13076 comm="syz.6.1472" name="" dev="pipefs" ino=41172 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 193.402560][T13057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.419528][ T8510] usb 9-1: usb_control_msg returned -32 [ 193.421338][ T8510] usbtmc 9-1:16.0: can't read capabilities [ 193.431343][ T8510] usb 9-1: USB disconnect, device number 12 [ 193.995316][T13197] __nla_validate_parse: 29 callbacks suppressed [ 193.995327][T13197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1480'. [ 194.691939][T13199] lo: Caught tx_queue_len zero misconfig [ 194.696205][T13199] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 194.778803][ T40] audit: type=1400 audit(194.695:711): avc: denied { unmount } for pid=10810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 194.795005][T13214] (syz.3.1484,13214,2):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 194.795030][ T40] audit: type=1400 audit(194.705:712): avc: denied { create } for pid=13213 comm="syz.3.1484" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 194.865884][T13222] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13222 comm=syz.6.1488 [ 194.873747][T13222] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1488'. [ 194.894861][T13222] 8021q: adding VLAN 0 to HW filter on device bond1 [ 194.914483][T13222] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 195.056216][ T5710] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 195.227968][ T5710] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 195.230713][ T5710] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 195.234670][ T5710] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 195.238929][ T5710] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 195.242397][ T5710] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 195.246536][ T5710] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 195.249428][ T5710] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.253853][ T5710] usb 9-1: config 0 descriptor?? [ 195.257029][T13216] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 195.447265][ T82] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 195.626199][ T6017] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 195.665125][ T5710] plantronics 0003:047F:FFFF.0008: reserved main item tag 0xd [ 195.673651][ T5710] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 195.761173][ T40] audit: type=1400 audit(195.675:713): avc: denied { accept } for pid=13339 comm="syz.6.1495" path="socket:[39301]" dev="sockfs" ino=39301 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 195.776293][ T6017] usb 8-1: Using ep0 maxpacket: 8 [ 195.779544][ T6017] usb 8-1: config 0 interface 0 has no altsetting 0 [ 195.781729][ T6017] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 195.784553][ T6017] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.797032][ T6017] usb 8-1: config 0 descriptor?? [ 195.931378][ T5710] usb 9-1: USB disconnect, device number 13 [ 196.005231][T13337] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 196.212558][ T6017] mcp2221 0003:04D8:00DD.0009: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 196.418175][T13337] netlink: 'syz.3.1494': attribute type 29 has an invalid length. [ 196.420612][T13337] netlink: 'syz.3.1494': attribute type 3 has an invalid length. [ 196.423452][T13337] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1494'. [ 196.438256][ T6017] usb 8-1: USB disconnect, device number 23 [ 196.896301][ T5940] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 196.896307][ T5936] Bluetooth: hci0: command 0x1003 tx timeout [ 196.958171][T13356] 0xfffffffffffffffd-0x000000020000 : "" [ 196.960101][T13356] mtd: partition "" is out of reach -- disabled [ 196.974034][T13356] ftl_cs: FTL header not found. [ 197.002196][T13362] netlink: 'syz.3.1500': attribute type 21 has an invalid length. [ 197.005324][T13362] IPv6: NLM_F_CREATE should be specified when creating new route [ 197.220076][ T5940] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 197.389035][T13475] netlink: 'syz.4.1505': attribute type 9 has an invalid length. [ 197.392720][ T40] audit: type=1400 audit(197.305:714): avc: denied { watch } for pid=13474 comm="syz.4.1505" path="pipe:[40527]" dev="pipefs" ino=40527 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 197.400165][T13475] No control pipe specified [ 197.668539][T13492] tipc: Enabling of bearer rejected, already enabled [ 197.675184][T13492] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 197.679382][T13492] syzkaller0: mtu greater than device maximum [ 197.876472][ T75] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 197.946395][T13500] kvm: apic: phys broadcast and lowest prio [ 198.006655][ T75] usb 9-1: device descriptor read/64, error -71 [ 198.246219][ T75] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 198.376207][ T75] usb 9-1: device descriptor read/64, error -71 [ 198.486408][ T75] usb usb9-port1: attempt power cycle [ 198.647368][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 198.826223][ T75] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 198.847267][ T75] usb 9-1: device descriptor read/8, error -71 [ 198.956222][ T832] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 199.086278][ T75] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 199.106239][ T832] usb 6-1: Using ep0 maxpacket: 8 [ 199.107589][ T75] usb 9-1: device descriptor read/8, error -71 [ 199.110060][ T832] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 199.114462][ T832] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 199.117782][ T832] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1056, setting to 1024 [ 199.121236][ T832] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 199.124389][ T832] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 199.129054][ T832] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 199.131897][ T832] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.136296][ T53] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 199.216498][ T75] usb usb9-port1: unable to enumerate USB device [ 199.287078][ T53] usb 11-1: Using ep0 maxpacket: 8 [ 199.289976][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.290427][ T53] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 199.296484][ T53] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 199.300626][ T53] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 199.304270][ T53] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 199.309441][ T53] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 199.312673][ T53] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.336848][ T832] usb 6-1: GET_CAPABILITIES returned 0 [ 199.338776][ T832] usbtmc 6-1:16.0: can't read capabilities [ 199.519473][ T53] usb 11-1: GET_CAPABILITIES returned 0 [ 199.521299][ T53] usbtmc 11-1:16.0: can't read capabilities [ 199.537633][T13507] FAULT_INJECTION: forcing a failure. [ 199.537633][T13507] name failslab, interval 1, probability 0, space 0, times 0 [ 199.541731][T13507] CPU: 2 UID: 0 PID: 13507 Comm: syz.1.1517 Tainted: G L syzkaller #0 PREEMPT(full) [ 199.541756][T13507] Tainted: [L]=SOFTLOCKUP [ 199.541762][T13507] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 199.541771][T13507] Call Trace: [ 199.541778][T13507] [ 199.541785][T13507] dump_stack_lvl+0x100/0x190 [ 199.541810][T13507] should_fail_ex.cold+0x5/0xa [ 199.541837][T13507] should_failslab+0xc2/0x120 [ 199.541857][T13507] ? usb_alloc_urb+0x66/0xa0 [ 199.541878][T13507] __kmalloc_noprof+0xf6/0x9c0 [ 199.541899][T13507] ? usb_alloc_urb+0x66/0xa0 [ 199.541919][T13507] usb_alloc_urb+0x66/0xa0 [ 199.541940][T13507] usbtmc_create_urb+0x13/0x150 [ 199.541958][T13507] usbtmc_generic_read+0x3dc/0x1810 [ 199.541984][T13507] ? __pfx_usbtmc_generic_read+0x10/0x10 [ 199.542002][T13507] ? __might_fault+0xc5/0x140 [ 199.542018][T13507] ? __might_fault+0xc5/0x140 [ 199.542043][T13507] usbtmc_ioctl+0x12c9/0x2930 [ 199.542062][T13507] ? do_vfs_ioctl+0x226/0x13e0 [ 199.542077][T13507] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 199.542116][T13507] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 199.542136][T13507] ? __pfx_usbtmc_ioctl+0x10/0x10 [ 199.542153][T13507] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 199.542184][T13507] ? selinux_file_ioctl+0x139/0x290 [ 199.542199][T13507] ? selinux_file_ioctl+0xb4/0x290 [ 199.542216][T13507] ? __pfx_usbtmc_ioctl+0x10/0x10 [ 199.542235][T13507] __x64_sys_ioctl+0x18e/0x210 [ 199.542252][T13507] do_syscall_64+0xc9/0xf80 [ 199.542271][T13507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.542287][T13507] RIP: 0033:0x7efe97d9acb9 [ 199.542301][T13507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.542316][T13507] RSP: 002b:00007efe98bed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 199.542332][T13507] RAX: ffffffffffffffda RBX: 00007efe98015fa0 RCX: 00007efe97d9acb9 [ 199.542342][T13507] RDX: 0000200000000040 RSI: 00000000c0145b0e RDI: 0000000000000005 [ 199.542352][T13507] RBP: 00007efe98bed090 R08: 0000000000000000 R09: 0000000000000000 [ 199.542362][T13507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.542371][T13507] R13: 00007efe98016038 R14: 00007efe98015fa0 R15: 00007fffb3666cc8 [ 199.542393][T13507] [ 199.543226][ T8510] usb 6-1: USB disconnect, device number 47 [ 199.720361][ T53] usb 11-1: USB disconnect, device number 6 [ 200.006345][ T5940] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 200.006410][ T5936] Bluetooth: hci0: command 0x1003 tx timeout [ 200.183254][ T40] audit: type=1400 audit(200.095:715): avc: denied { getopt } for pid=13510 comm="syz.1.1519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 200.526734][T13519] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 200.620633][ T40] audit: type=1400 audit(200.535:716): avc: denied { shutdown } for pid=13527 comm="syz.1.1525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 200.816179][ T8510] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 200.906388][ T40] audit: type=1326 audit(200.815:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13538 comm="syz.3.1529" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe32579acb9 code=0x20000000 [ 200.966660][ T53] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 200.986202][ T8510] usb 11-1: Using ep0 maxpacket: 8 [ 200.989426][ T8510] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 200.992876][ T8510] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 201.006159][ T8510] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 201.009559][ T8510] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 201.013638][ T8510] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 201.016936][ T8510] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.126240][ T53] usb 9-1: Using ep0 maxpacket: 8 [ 201.129372][ T53] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 201.132959][ T53] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 201.136395][ T53] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 201.140165][ T53] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 201.144924][ T53] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 201.148307][ T53] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.206523][ T1150] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 201.227529][ T8510] usb 11-1: GET_CAPABILITIES returned 0 [ 201.229891][ T8510] usbtmc 11-1:16.0: can't read capabilities [ 201.363855][ T53] usb 9-1: GET_CAPABILITIES returned 0 [ 201.365718][ T53] usbtmc 9-1:16.0: can't read capabilities [ 201.428991][ T8510] usb 11-1: USB disconnect, device number 7 [ 201.559744][ T842] usb 9-1: USB disconnect, device number 18 [ 201.774326][T13564] comedi comedi0: Cannot bond this driver to itself! [ 201.854508][T13570] xt_hashlimit: size too large, truncated to 1048576 [ 202.128344][T13688] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 202.294615][ T40] audit: type=1400 audit(202.205:718): avc: denied { connect } for pid=13699 comm="syz.4.1551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 202.305249][T13702] FAULT_INJECTION: forcing a failure. [ 202.305249][T13702] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.306955][T13700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1551'. [ 202.309678][T13702] CPU: 0 UID: 0 PID: 13702 Comm: syz.1.1552 Tainted: G L syzkaller #0 PREEMPT(full) [ 202.309696][T13702] Tainted: [L]=SOFTLOCKUP [ 202.309700][T13702] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 202.309706][T13702] Call Trace: [ 202.309710][T13702] [ 202.309714][T13702] dump_stack_lvl+0x100/0x190 [ 202.309733][T13702] should_fail_ex.cold+0x5/0xa [ 202.309752][T13702] _copy_from_iter+0x1f4/0x1690 [ 202.309769][T13702] ? alloc_pages_mpol+0x25a/0x550 [ 202.309784][T13702] ? __pfx__copy_from_iter+0x10/0x10 [ 202.309798][T13702] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 202.309818][T13702] copy_page_from_iter+0xde/0x180 [ 202.309834][T13702] tun_build_skb.constprop.0+0x2ea/0x15d0 [ 202.309854][T13702] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 202.309878][T13702] ? _kstrtoull+0x13c/0x1f0 [ 202.309888][T13702] ? __pfx__kstrtoull+0x10/0x10 [ 202.309899][T13702] tun_get_user+0x16d0/0x3e10 [ 202.309919][T13702] ? __pfx_tun_get_user+0x10/0x10 [ 202.309935][T13702] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 202.309955][T13702] ? find_held_lock+0x2b/0x80 [ 202.309969][T13702] ? tun_get+0x191/0x370 [ 202.309981][T13702] ? tun_get+0x191/0x370 [ 202.309998][T13702] tun_chr_write_iter+0xdc/0x200 [ 202.310014][T13702] vfs_write+0x6ac/0x1070 [ 202.310026][T13702] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 202.310042][T13702] ? __pfx_vfs_write+0x10/0x10 [ 202.310052][T13702] ? find_held_lock+0x2b/0x80 [ 202.310102][T13702] ksys_write+0x12a/0x250 [ 202.310120][T13702] ? __pfx_ksys_write+0x10/0x10 [ 202.310133][T13702] ? do_user_addr_fault+0x8d6/0x12f0 [ 202.310150][T13702] do_syscall_64+0xc9/0xf80 [ 202.310163][T13702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.310174][T13702] RIP: 0033:0x7efe97d5b58e [ 202.310183][T13702] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 202.310193][T13702] RSP: 002b:00007efe98becfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 202.310205][T13702] RAX: ffffffffffffffda RBX: 00007efe98bed6c0 RCX: 00007efe97d5b58e [ 202.310212][T13702] RDX: 0000000000000026 RSI: 00002000000007c0 RDI: 00000000000000c8 [ 202.310218][T13702] RBP: 00007efe98bed090 R08: 0000000000000000 R09: 0000000000000000 [ 202.310224][T13702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.310230][T13702] R13: 00007efe98016038 R14: 00007efe98015fa0 R15: 00007fffb3666cc8 [ 202.310244][T13702] [ 202.497764][T13709] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1555'. [ 202.589277][T13718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1558'. [ 202.616196][ T5710] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 202.637500][T13721] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1557'. [ 202.786213][ T5710] usb 11-1: Using ep0 maxpacket: 8 [ 202.790099][ T5710] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 202.795100][ T5710] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 202.799457][ T5710] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 202.803646][ T5710] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 202.809410][ T5710] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 202.813212][ T5710] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.866173][ T8510] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 203.016991][ T8510] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 203.021433][ T8510] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 203.021575][ T5710] usb 11-1: GET_CAPABILITIES returned 0 [ 203.025042][ T8510] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 203.027146][ T5710] usbtmc 11-1:16.0: can't read capabilities [ 203.031617][ T8510] usb 9-1: config 0 interface 0 has no altsetting 0 [ 203.038212][ T8510] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 203.042139][ T8510] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 203.056172][ T8510] usb 9-1: config 0 interface 0 has no altsetting 0 [ 203.060376][ T8510] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 203.064073][ T8510] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 203.068991][ T8510] usb 9-1: config 0 interface 0 has no altsetting 0 [ 203.072967][ T8510] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 203.076978][ T8510] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 203.081498][ T8510] usb 9-1: config 0 interface 0 has no altsetting 0 [ 203.085304][ T8510] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 203.089206][ T8510] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 203.097034][ T8510] usb 9-1: config 0 interface 0 has no altsetting 0 [ 203.102013][ T8510] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 203.104595][T13724] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1560'. [ 203.105707][ T8510] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 203.105734][ T8510] usb 9-1: config 0 interface 0 has no altsetting 0 [ 203.110406][T13724] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1560'. [ 203.114702][ T8510] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 203.123605][ T8510] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 203.128697][ T8510] usb 9-1: config 0 interface 0 has no altsetting 0 [ 203.132503][ T8510] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 203.136505][ T8510] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 203.141395][ T8510] usb 9-1: config 0 interface 0 has no altsetting 0 [ 203.146175][ T8510] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 203.150022][ T8510] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 203.153492][ T8510] usb 9-1: Product: syz [ 203.155363][ T8510] usb 9-1: Manufacturer: syz [ 203.157630][ T8510] usb 9-1: SerialNumber: syz [ 203.163281][ T8510] usb 9-1: config 0 descriptor?? [ 203.171274][ T8510] yurex 9-1:0.0: USB YUREX device now attached to Yurex #1 [ 203.229304][ T61] usb 11-1: USB disconnect, device number 8 [ 203.370900][ T5710] usb 9-1: USB disconnect, device number 19 [ 203.377015][ T5710] yurex 9-1:0.0: USB YUREX #1 now disconnected [ 203.607933][ T40] audit: type=1400 audit(203.525:719): avc: denied { bind } for pid=13743 comm="syz.1.1566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 203.657515][ T40] audit: type=1400 audit(203.575:720): avc: denied { watch_mount } for pid=13746 comm="syz.1.1567" path="/369" dev="tmpfs" ino=1934 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 203.722991][T13749] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 203.729399][T13749] afs: Unknown parameter '–)›@möõçŽÑ{çÒôFÔÆh·' [ 203.915359][T13760] mkiss: ax0: crc mode is auto. [ 203.940336][T13764] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1574'. [ 203.962724][T13766] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1576'. [ 203.965736][T13766] 0ªX¹¦À: renamed from caif0 [ 203.969535][T13766] 0ªX¹¦À: entered allmulticast mode [ 203.971404][T13766] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 203.984149][T13767] x_tables: duplicate underflow at hook 1 [ 204.074149][T13772] netlink: 'syz.3.1578': attribute type 13 has an invalid length. [ 204.116553][T13774] netlink: 'syz.6.1579': attribute type 1 has an invalid length. [ 204.152798][T13772] tipc: Resetting bearer [ 204.179261][T13774] 8021q: adding VLAN 0 to HW filter on device bond2 [ 204.182966][T13779] bond2: option tlb_dynamic_lb: unable to set because the bond device is up [ 204.239204][T13782] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1581'. [ 204.636528][ T53] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 204.786211][ T5710] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 204.796866][ T53] usb 9-1: Using ep0 maxpacket: 16 [ 204.800768][ T53] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.805323][ T53] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.809600][ T53] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 204.814892][ T53] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 204.818843][ T53] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.824279][ T53] usb 9-1: config 0 descriptor?? [ 204.884856][T13909] FAULT_INJECTION: forcing a failure. [ 204.884856][T13909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.891488][T13909] CPU: 2 UID: 0 PID: 13909 Comm: syz.1.1592 Tainted: G L syzkaller #0 PREEMPT(full) [ 204.891515][T13909] Tainted: [L]=SOFTLOCKUP [ 204.891520][T13909] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 204.891528][T13909] Call Trace: [ 204.891534][T13909] [ 204.891541][T13909] dump_stack_lvl+0x100/0x190 [ 204.891567][T13909] should_fail_ex.cold+0x5/0xa [ 204.891594][T13909] _copy_from_user+0x2e/0xd0 [ 204.891615][T13909] copy_msghdr_from_user+0x9f/0x4f0 [ 204.891632][T13909] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 204.891650][T13909] ? _kstrtoull+0x13c/0x1f0 [ 204.891663][T13909] ? __pfx__kstrtoull+0x10/0x10 [ 204.891682][T13909] ___sys_sendmsg+0x106/0x1e0 [ 204.891698][T13909] ? __pfx____sys_sendmsg+0x10/0x10 [ 204.891744][T13909] __sys_sendmmsg+0x205/0x430 [ 204.891766][T13909] ? __pfx___sys_sendmmsg+0x10/0x10 [ 204.891792][T13909] ? __fget_files+0x215/0x3d0 [ 204.891810][T13909] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 204.891837][T13909] ? fput+0x79/0x100 [ 204.891856][T13909] ? ksys_write+0x1ac/0x250 [ 204.891872][T13909] ? __pfx_ksys_write+0x10/0x10 [ 204.891892][T13909] __x64_sys_sendmmsg+0x9c/0x100 [ 204.891910][T13909] ? lockdep_hardirqs_on+0x78/0x100 [ 204.891926][T13909] do_syscall_64+0xc9/0xf80 [ 204.891945][T13909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.891960][T13909] RIP: 0033:0x7efe97d9acb9 [ 204.891974][T13909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.891988][T13909] RSP: 002b:00007efe98bed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 204.892004][T13909] RAX: ffffffffffffffda RBX: 00007efe98015fa0 RCX: 00007efe97d9acb9 [ 204.892014][T13909] RDX: 0000000000000001 RSI: 00002000000018c0 RDI: 0000000000000006 [ 204.892024][T13909] RBP: 00007efe98bed090 R08: 0000000000000000 R09: 0000000000000000 [ 204.892033][T13909] R10: 0000000000004880 R11: 0000000000000246 R12: 0000000000000001 [ 204.892051][T13909] R13: 00007efe98016038 R14: 00007efe98015fa0 R15: 00007fffb3666cc8 [ 204.892073][T13909] [ 204.964480][ T8510] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 204.986211][ T5710] usb 8-1: Using ep0 maxpacket: 16 [ 204.991458][ T5710] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 204.994958][ T5710] usb 8-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 204.998768][ T5710] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 205.002266][ T5710] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 205.007103][ T5710] usb 8-1: config 0 interface 0 has no altsetting 0 [ 205.011993][ T5710] usb 8-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 205.015393][ T5710] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.018093][ T5710] usb 8-1: Product: syz [ 205.019451][ T5710] usb 8-1: Manufacturer: syz [ 205.020939][ T5710] usb 8-1: SerialNumber: syz [ 205.024151][ T5710] usb 8-1: config 0 descriptor?? [ 205.027224][T13903] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 205.116357][ T8510] usb 11-1: Using ep0 maxpacket: 8 [ 205.119363][ T8510] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 205.122436][ T8510] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 205.125469][ T8510] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1056, setting to 1024 [ 205.130160][ T8510] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 205.134423][ T8510] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 205.140219][ T8510] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 205.143885][ T8510] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.232898][ T53] shield 0003:0955:7214.000A: unknown main item tag 0x0 [ 205.233507][T13903] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 205.235261][ T53] shield 0003:0955:7214.000A: unknown main item tag 0x0 [ 205.240304][ T53] shield 0003:0955:7214.000A: unknown main item tag 0x0 [ 205.240983][ T5710] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input20 [ 205.242519][ T53] shield 0003:0955:7214.000A: unknown main item tag 0x0 [ 205.249379][ T53] shield 0003:0955:7214.000A: unknown main item tag 0x0 [ 205.255687][ T53] input: HID 0955:7214 Haptics as /devices/virtual/input/input21 [ 205.283387][ T53] shield 0003:0955:7214.000A: Registered Thunderstrike controller [ 205.289410][ T53] shield 0003:0955:7214.000A: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 205.353173][ T8510] usb 11-1: GET_CAPABILITIES returned 0 [ 205.355077][ T8510] usbtmc 11-1:16.0: can't read capabilities [ 205.434196][T13893] netlink: 'syz.4.1586': attribute type 2 has an invalid length. [ 205.436831][T13893] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1586'. [ 205.443003][T13893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.448597][T13893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.452687][ T6018] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 205.452936][ T832] usb 9-1: USB disconnect, device number 20 [ 205.456840][ T6018] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 205.466832][ T6018] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 205.470795][ T6018] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 205.502843][ T8510] usb 8-1: USB disconnect, device number 24 [ 205.552615][T13907] FAULT_INJECTION: forcing a failure. [ 205.552615][T13907] name failslab, interval 1, probability 0, space 0, times 0 [ 205.556897][T13907] CPU: 3 UID: 0 PID: 13907 Comm: syz.6.1591 Tainted: G L syzkaller #0 PREEMPT(full) [ 205.556925][T13907] Tainted: [L]=SOFTLOCKUP [ 205.556930][T13907] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 205.556941][T13907] Call Trace: [ 205.556948][T13907] [ 205.556955][T13907] dump_stack_lvl+0x100/0x190 [ 205.556984][T13907] should_fail_ex.cold+0x5/0xa [ 205.557008][T13907] should_failslab+0xc2/0x120 [ 205.557022][T13907] __kmalloc_cache_noprof+0x80/0x810 [ 205.557033][T13907] ? usbtmc_create_urb+0x59/0x150 [ 205.557055][T13907] ? usbtmc_create_urb+0x59/0x150 [ 205.557067][T13907] usbtmc_create_urb+0x59/0x150 [ 205.557080][T13907] usbtmc_generic_read+0x3dc/0x1810 [ 205.557097][T13907] ? __pfx_usbtmc_generic_read+0x10/0x10 [ 205.557110][T13907] ? __might_fault+0xc5/0x140 [ 205.557121][T13907] ? __might_fault+0xc5/0x140 [ 205.557138][T13907] usbtmc_ioctl+0x12c9/0x2930 [ 205.557151][T13907] ? do_vfs_ioctl+0x226/0x13e0 [ 205.557162][T13907] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 205.557171][T13907] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 205.557184][T13907] ? __pfx_usbtmc_ioctl+0x10/0x10 [ 205.557196][T13907] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 205.557217][T13907] ? selinux_file_ioctl+0x139/0x290 [ 205.557227][T13907] ? selinux_file_ioctl+0xb4/0x290 [ 205.557238][T13907] ? __pfx_usbtmc_ioctl+0x10/0x10 [ 205.557252][T13907] __x64_sys_ioctl+0x18e/0x210 [ 205.557264][T13907] do_syscall_64+0xc9/0xf80 [ 205.557277][T13907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.557288][T13907] RIP: 0033:0x7f2f3219acb9 [ 205.557300][T13907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.557310][T13907] RSP: 002b:00007f2f32fae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 205.557322][T13907] RAX: ffffffffffffffda RBX: 00007f2f32415fa0 RCX: 00007f2f3219acb9 [ 205.557328][T13907] RDX: 0000200000000040 RSI: 00000000c0145b0e RDI: 0000000000000005 [ 205.557335][T13907] RBP: 00007f2f32fae090 R08: 0000000000000000 R09: 0000000000000000 [ 205.557341][T13907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.557347][T13907] R13: 00007f2f32416038 R14: 00007f2f32415fa0 R15: 00007ffcbda05458 [ 205.557361][T13907] [ 205.557934][ T6018] usb 11-1: USB disconnect, device number 9 [ 206.152482][ T40] audit: type=1400 audit(206.065:721): avc: denied { create } for pid=13922 comm="syz.6.1598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 206.597015][T14050] batadv_slave_1: entered promiscuous mode [ 206.666769][T14049] batadv_slave_1: left promiscuous mode [ 206.697888][T14052] kAFS: unable to lookup cell '(,c¾ûL' [ 206.701126][T14052] kAFS: unable to lookup cell '(,' [ 206.872315][ T40] audit: type=1400 audit(206.785:722): avc: denied { listen } for pid=14067 comm="syz.6.1615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 206.886252][ T5940] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 206.886782][ T5936] Bluetooth: hci0: command 0x1003 tx timeout [ 207.406260][ T61] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 207.546244][ T61] usb 8-1: device descriptor read/64, error -71 [ 207.617306][T14190] veth1_macvtap: Caught tx_queue_len zero misconfig [ 207.617886][T14186] __nla_validate_parse: 1 callbacks suppressed [ 207.617900][T14186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1621'. [ 207.632051][T14190] netlink: 'syz.4.1622': attribute type 10 has an invalid length. [ 207.645810][T14190] batman_adv: batadv0: Adding interface: team0 [ 207.651283][T14190] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.663619][T14190] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 207.670788][T14190] netlink: 'syz.4.1622': attribute type 10 has an invalid length. [ 207.674217][T14190] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1622'. [ 207.679033][T14190] team0: entered promiscuous mode [ 207.681177][T14190] team_slave_0: entered promiscuous mode [ 207.683688][T14190] team_slave_1: entered promiscuous mode [ 207.691022][T14190] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.694074][T14190] batman_adv: batadv0: Interface activated: team0 [ 207.697524][T14190] batman_adv: batadv0: Interface deactivated: team0 [ 207.700335][T14190] batman_adv: batadv0: Removing interface: team0 [ 207.705092][T14190] bridge0: port 3(team0) entered blocking state [ 207.708930][T14190] bridge0: port 3(team0) entered disabled state [ 207.711709][T14190] team0: entered allmulticast mode [ 207.713892][T14190] team_slave_0: entered allmulticast mode [ 207.716752][T14190] team_slave_1: entered allmulticast mode [ 207.721956][T14190] bridge0: port 3(team0) entered blocking state [ 207.724702][T14190] bridge0: port 3(team0) entered forwarding state [ 207.738119][T14198] tipc: Enabling of bearer rejected, already enabled [ 207.744709][T14198] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 207.766548][T14198] syzkaller0: mtu greater than device maximum [ 207.807483][ T61] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 207.893806][ T40] audit: type=1400 audit(207.805:723): avc: denied { accept } for pid=14211 comm="syz.6.1631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 207.947219][ T61] usb 8-1: device descriptor read/64, error -71 [ 208.036298][ T34] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 208.056575][ T61] usb usb8-port1: attempt power cycle [ 208.180674][T14222] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1635'. [ 208.184292][T14222] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1635'. [ 208.188502][T14222] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=14222 comm=syz.6.1635 [ 208.193760][T14222] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1635'. [ 208.198617][ T34] usb 9-1: Using ep0 maxpacket: 8 [ 208.201421][ T34] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 208.204147][ T34] usb 9-1: config 0 has no interface number 0 [ 208.206033][ T34] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 208.209849][ T34] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 208.214326][ T34] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 208.218808][ T34] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 208.223435][ T34] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 208.227034][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.231991][ T34] usb 9-1: config 0 descriptor?? [ 208.242649][ T34] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 208.246594][ T40] audit: type=1400 audit(208.165:724): avc: denied { create } for pid=14226 comm="syz.6.1636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 208.256254][ T832] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 208.406716][ T61] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 208.406912][ T832] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 208.413819][ T832] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 208.417618][ T832] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 208.421916][ T832] usb 6-1: config 0 interface 0 has no altsetting 0 [ 208.425883][ T832] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 208.429789][ T832] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 208.434474][ T832] usb 6-1: config 0 interface 0 has no altsetting 0 [ 208.437508][ T61] usb 8-1: device descriptor read/8, error -71 [ 208.440543][ T832] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 208.444297][ T832] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 208.449198][ T832] usb 6-1: config 0 interface 0 has no altsetting 0 [ 208.453302][ T832] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 208.456983][ T832] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 208.460536][ T832] usb 6-1: config 0 interface 0 has no altsetting 0 [ 208.464125][ T832] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 208.468114][ T832] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 208.472683][ T832] usb 6-1: config 0 interface 0 has no altsetting 0 [ 208.477013][ T832] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 208.480591][ T832] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 208.484955][ T832] usb 6-1: config 0 interface 0 has no altsetting 0 [ 208.489984][ T832] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 208.492218][ T8510] usb 9-1: USB disconnect, device number 21 [ 208.492265][ C3] ldusb 9-1:0.55: usb_submit_urb failed (-19) [ 208.493504][ T832] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 208.504039][ T832] usb 6-1: config 0 interface 0 has no altsetting 0 [ 208.516707][ T832] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 208.520244][ T832] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 208.524324][ T832] usb 6-1: config 0 interface 0 has no altsetting 0 [ 208.528197][ T832] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 208.531122][ T832] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 208.534182][ T832] usb 6-1: Product: syz [ 208.535602][ T832] usb 6-1: Manufacturer: syz [ 208.537247][ T832] usb 6-1: SerialNumber: syz [ 208.540385][ T832] usb 6-1: config 0 descriptor?? [ 208.555620][ T832] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 208.639641][T14239] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1641'. [ 208.644603][T14239] l2tp_ppp: sess 2/0: no socket in recv [ 208.686228][ T61] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 208.717499][ T61] usb 8-1: device descriptor read/8, error -71 [ 208.800503][ C0] usb 6-1: yurex_control_callback - control failed: -71 [ 208.800756][ T34] usb 6-1: USB disconnect, device number 48 [ 208.807265][ T34] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 208.826472][ T61] usb usb8-port1: unable to enumerate USB device [ 209.751110][T14250] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 209.901780][T14256] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 210.204683][T14271] FAULT_INJECTION: forcing a failure. [ 210.204683][T14271] name failslab, interval 1, probability 0, space 0, times 0 [ 210.209754][T14271] CPU: 3 UID: 0 PID: 14271 Comm: syz.3.1654 Tainted: G L syzkaller #0 PREEMPT(full) [ 210.209780][T14271] Tainted: [L]=SOFTLOCKUP [ 210.209786][T14271] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 210.209795][T14271] Call Trace: [ 210.209802][T14271] [ 210.209809][T14271] dump_stack_lvl+0x100/0x190 [ 210.209836][T14271] should_fail_ex.cold+0x5/0xa [ 210.209863][T14271] should_failslab+0xc2/0x120 [ 210.209884][T14271] kmem_cache_alloc_noprof+0x83/0x780 [ 210.209902][T14271] ? is_bpf_text_address+0x8a/0x1a0 [ 210.209925][T14271] ? dst_alloc+0x99/0x1a0 [ 210.209947][T14271] ? dst_alloc+0x99/0x1a0 [ 210.209963][T14271] dst_alloc+0x99/0x1a0 [ 210.210014][T14271] rt_dst_alloc+0x35/0x3a0 [ 210.210040][T14271] ip_route_input_slow+0x15b8/0x3fa0 [ 210.210062][T14271] ? __pfx_ip_route_input_slow+0x10/0x10 [ 210.210081][T14271] ? __lock_acquire+0x4a5/0x2630 [ 210.210101][T14271] ? __pfx_ipt_do_table+0x10/0x10 [ 210.210126][T14271] ? iptable_mangle_hook+0x71/0x4b0 [ 210.210146][T14271] ip_route_input_noref+0x122/0x2e0 [ 210.210164][T14271] ? __pfx_ip_route_input_noref+0x10/0x10 [ 210.210186][T14271] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 210.210204][T14271] ? sock_wfree+0x12e/0x830 [ 210.210225][T14271] ip_rcv_finish_core+0x471/0x2220 [ 210.210249][T14271] ip_rcv+0x1c0/0x5d0 [ 210.210268][T14271] ? __pfx_ip_rcv+0x10/0x10 [ 210.210284][T14271] __netif_receive_skb_one_core+0x197/0x1e0 [ 210.210302][T14271] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 210.210322][T14271] ? lock_acquire+0x17c/0x330 [ 210.210342][T14271] __netif_receive_skb+0x1f/0x120 [ 210.210360][T14271] netif_receive_skb+0x139/0x760 [ 210.210378][T14271] ? __pfx_netif_receive_skb+0x10/0x10 [ 210.210403][T14271] tun_rx_batched.isra.0+0x3f6/0x750 [ 210.210426][T14271] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 210.210452][T14271] ? tun_get_user+0x1c7e/0x3e10 [ 210.210472][T14271] ? rcu_is_watching+0x12/0xc0 [ 210.210497][T14271] tun_get_user+0x1e2e/0x3e10 [ 210.210527][T14271] ? __pfx_tun_get_user+0x10/0x10 [ 210.210550][T14271] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 210.210580][T14271] ? find_held_lock+0x2b/0x80 [ 210.210599][T14271] ? tun_get+0x191/0x370 [ 210.210617][T14271] ? tun_get+0x191/0x370 [ 210.210642][T14271] tun_chr_write_iter+0xdc/0x200 [ 210.210665][T14271] vfs_write+0x6ac/0x1070 [ 210.210683][T14271] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 210.210706][T14271] ? __pfx_vfs_write+0x10/0x10 [ 210.210721][T14271] ? find_held_lock+0x2b/0x80 [ 210.210755][T14271] ksys_write+0x12a/0x250 [ 210.210771][T14271] ? __pfx_ksys_write+0x10/0x10 [ 210.210787][T14271] ? do_user_addr_fault+0x8d6/0x12f0 [ 210.210813][T14271] do_syscall_64+0xc9/0xf80 [ 210.210832][T14271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.210848][T14271] RIP: 0033:0x7fe32575b58e [ 210.210861][T14271] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 210.210876][T14271] RSP: 002b:00007fe326592fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 210.210892][T14271] RAX: ffffffffffffffda RBX: 00007fe3265936c0 RCX: 00007fe32575b58e [ 210.210903][T14271] RDX: 0000000000000026 RSI: 00002000000007c0 RDI: 00000000000000c8 [ 210.210913][T14271] RBP: 00007fe326593090 R08: 0000000000000000 R09: 0000000000000000 [ 210.210923][T14271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.210932][T14271] R13: 00007fe325a16038 R14: 00007fe325a15fa0 R15: 00007ffe5a242cd8 [ 210.210955][T14271] [ 210.716330][ T34] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 210.730008][ T40] audit: type=1400 audit(210.645:725): avc: denied { read } for pid=14382 comm="syz.6.1659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 210.776827][ T8510] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 210.845682][ T40] audit: type=1400 audit(210.755:726): avc: denied { execute } for pid=14389 comm="syz.4.1661" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=42390 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 210.887025][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 210.890510][ T34] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 210.893697][ T34] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 210.897263][ T34] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1056, setting to 1024 [ 210.900773][ T34] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 210.904035][ T34] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 210.908609][ T34] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 210.911618][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.935407][T14395] FAULT_INJECTION: forcing a failure. [ 210.935407][T14395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.940533][T14395] CPU: 3 UID: 0 PID: 14395 Comm: syz.4.1663 Tainted: G L syzkaller #0 PREEMPT(full) [ 210.940562][T14395] Tainted: [L]=SOFTLOCKUP [ 210.940567][T14395] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 210.940573][T14395] Call Trace: [ 210.940577][T14395] [ 210.940582][T14395] dump_stack_lvl+0x100/0x190 [ 210.940600][T14395] should_fail_ex.cold+0x5/0xa [ 210.940619][T14395] _copy_from_user+0x2e/0xd0 [ 210.940635][T14395] move_addr_to_kernel+0x65/0x170 [ 210.940646][T14395] copy_msghdr_from_user+0x417/0x4f0 [ 210.940657][T14395] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 210.940670][T14395] ? _kstrtoull+0x13c/0x1f0 [ 210.940679][T14395] ? __pfx__kstrtoull+0x10/0x10 [ 210.940692][T14395] ___sys_sendmsg+0x106/0x1e0 [ 210.940703][T14395] ? __pfx____sys_sendmsg+0x10/0x10 [ 210.940730][T14395] __sys_sendmmsg+0x205/0x430 [ 210.940746][T14395] ? __pfx___sys_sendmmsg+0x10/0x10 [ 210.940764][T14395] ? __fget_files+0x215/0x3d0 [ 210.940778][T14395] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 210.940796][T14395] ? fput+0x79/0x100 [ 210.940811][T14395] ? ksys_write+0x1ac/0x250 [ 210.940822][T14395] ? __pfx_ksys_write+0x10/0x10 [ 210.940836][T14395] __x64_sys_sendmmsg+0x9c/0x100 [ 210.940849][T14395] ? lockdep_hardirqs_on+0x78/0x100 [ 210.940861][T14395] do_syscall_64+0xc9/0xf80 [ 210.940874][T14395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.940885][T14395] RIP: 0033:0x7f80da59acb9 [ 210.940895][T14395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.940905][T14395] RSP: 002b:00007f80db402028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 210.940916][T14395] RAX: ffffffffffffffda RBX: 00007f80da815fa0 RCX: 00007f80da59acb9 [ 210.940923][T14395] RDX: 0000000000000001 RSI: 00002000000018c0 RDI: 0000000000000006 [ 210.940929][T14395] RBP: 00007f80db402090 R08: 0000000000000000 R09: 0000000000000000 [ 210.940935][T14395] R10: 0000000000004880 R11: 0000000000000246 R12: 0000000000000001 [ 210.940942][T14395] R13: 00007f80da816038 R14: 00007f80da815fa0 R15: 00007ffea28ef968 [ 210.940955][T14395] [ 211.122286][T14398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1664'. [ 211.176697][T14401] tipc: Enabling of bearer rejected, already enabled [ 211.182434][T14401] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 211.185585][T14401] syzkaller0: mtu less than device minimum [ 211.228689][ T34] usb 8-1: usb_control_msg returned -71 [ 211.232041][ T34] usbtmc 8-1:16.0: can't read capabilities [ 211.240845][ T34] usb 8-1: USB disconnect, device number 29 [ 211.386839][T14412] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 211.441816][T14414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1671'. [ 211.662169][T14422] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1675'. [ 211.708861][T14424] Bluetooth: MGMT ver 1.23 [ 211.716485][ T61] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 211.784204][T14427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1677'. [ 211.886198][ T61] usb 6-1: Using ep0 maxpacket: 16 [ 211.889247][ T61] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 211.892347][ T61] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 211.895630][ T61] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 211.901893][ T61] usb 6-1: config 1 interface 0 has no altsetting 0 [ 211.908186][ T61] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 211.911980][ T61] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.915471][ T61] usb 6-1: Product: syz [ 211.926217][ T61] usb 6-1: Manufacturer: syz [ 211.928171][ T61] usb 6-1: SerialNumber: syz [ 211.958721][T14437] netlink: 'syz.3.1681': attribute type 13 has an invalid length. [ 211.975882][T14437] tipc: Resetting bearer [ 212.144320][ T61] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 49 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 212.166286][ T8510] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 212.327317][ T8510] usb 11-1: Using ep0 maxpacket: 8 [ 212.331599][ T8510] usb 11-1: config 0 interface 0 has no altsetting 0 [ 212.334615][ T8510] usb 11-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 212.341137][ T8510] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.344057][ T40] audit: type=1400 audit(212.255:727): avc: denied { read write } for pid=14415 comm="syz.1.1672" name="lp0" dev="devtmpfs" ino=3551 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 212.354153][ T40] audit: type=1400 audit(212.255:728): avc: denied { open } for pid=14415 comm="syz.1.1672" path="/dev/usb/lp0" dev="devtmpfs" ino=3551 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 212.355284][ T8510] usb 11-1: config 0 descriptor?? [ 212.364647][ T40] audit: type=1400 audit(212.265:729): avc: denied { ioctl } for pid=14415 comm="syz.1.1672" path="/dev/usb/lp0" dev="devtmpfs" ino=3551 ioctlcmd=0x60b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 212.417050][T14546] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 212.419682][T14546] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 212.422589][T14546] tipc: Resetting bearer [ 212.617919][T14416] netlink: 'syz.1.1672': attribute type 11 has an invalid length. [ 212.639560][ T842] usb 6-1: USB disconnect, device number 49 [ 212.648822][ T842] usblp0: removed [ 212.793782][ T8510] mcp2221 0003:04D8:00DD.000B: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 212.966463][ T5936] Bluetooth: hci0: command 0x1003 tx timeout [ 212.968934][ T5940] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 213.057689][ T8510] usb 11-1: USB disconnect, device number 10 [ 213.171671][T14667] xt_hashlimit: size too large, truncated to 1048576 [ 213.524248][T14671] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16154 sclass=netlink_route_socket pid=14671 comm=syz.4.1694 [ 213.750879][T14685] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1700'. [ 213.893565][ T40] audit: type=1400 audit(213.805:730): avc: denied { mount } for pid=14695 comm="syz.4.1705" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 213.894330][T14697] overlayfs: failed to resolve './file0:/': -2 [ 213.900795][ T40] audit: type=1400 audit(213.805:731): avc: denied { mounton } for pid=14695 comm="syz.4.1705" path="/238/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 213.924600][T14697] 9pnet_fd: p9_fd_create_unix (14697): problem connecting socket: ./file0: -111 [ 213.943688][ T40] audit: type=1400 audit(213.855:732): avc: denied { unmount } for pid=8452 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 213.956179][T14701] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1707'. [ 214.018044][T14710] FAULT_INJECTION: forcing a failure. [ 214.018044][T14710] name failslab, interval 1, probability 0, space 0, times 0 [ 214.018074][T14710] CPU: 0 UID: 0 PID: 14710 Comm: syz.3.1711 Tainted: G L syzkaller #0 PREEMPT(full) [ 214.018090][T14710] Tainted: [L]=SOFTLOCKUP [ 214.018094][T14710] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 214.018100][T14710] Call Trace: [ 214.018104][T14710] [ 214.018108][T14710] dump_stack_lvl+0x100/0x190 [ 214.018142][T14710] should_fail_ex.cold+0x5/0xa [ 214.018161][T14710] should_failslab+0xc2/0x120 [ 214.018176][T14710] ? tomoyo_realpath_from_path+0xb6/0x690 [ 214.018194][T14710] __kmalloc_noprof+0xf6/0x9c0 [ 214.018209][T14710] ? tomoyo_realpath_from_path+0xb6/0x690 [ 214.018221][T14710] tomoyo_realpath_from_path+0xb6/0x690 [ 214.018236][T14710] tomoyo_path_number_perm+0x23c/0x580 [ 214.018253][T14710] ? tomoyo_path_number_perm+0x22e/0x580 [ 214.018271][T14710] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 214.018307][T14710] ? find_held_lock+0x2b/0x80 [ 214.018322][T14710] ? hook_file_ioctl_common+0x146/0x410 [ 214.018336][T14710] ? __fget_files+0x215/0x3d0 [ 214.018352][T14710] ? __fget_files+0x21f/0x3d0 [ 214.018367][T14710] security_file_ioctl+0xd3/0x230 [ 214.018380][T14710] __x64_sys_ioctl+0xb7/0x210 [ 214.018391][T14710] do_syscall_64+0xc9/0xf80 [ 214.018409][T14710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.018421][T14710] RIP: 0033:0x7fe32579acb9 [ 214.018429][T14710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.018440][T14710] RSP: 002b:00007fe326593028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 214.018451][T14710] RAX: ffffffffffffffda RBX: 00007fe325a15fa0 RCX: 00007fe32579acb9 [ 214.018458][T14710] RDX: 0000200000000180 RSI: 00000000c050561a RDI: 0000000000000003 [ 214.018464][T14710] RBP: 00007fe326593090 R08: 0000000000000000 R09: 0000000000000000 [ 214.018470][T14710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.018476][T14710] R13: 00007fe325a16038 R14: 00007fe325a15fa0 R15: 00007ffe5a242cd8 [ 214.018491][T14710] [ 214.018495][T14710] ERROR: Out of memory at tomoyo_realpath_from_path. [ 214.233268][T14724] Failed to get privilege flags for destination (handle=0x2:0x0) [ 214.310941][T14737] FAULT_INJECTION: forcing a failure. [ 214.310941][T14737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.324712][T14737] CPU: 3 UID: 0 PID: 14737 Comm: syz.3.1723 Tainted: G L syzkaller #0 PREEMPT(full) [ 214.324732][T14737] Tainted: [L]=SOFTLOCKUP [ 214.324736][T14737] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 214.324742][T14737] Call Trace: [ 214.324745][T14737] [ 214.324750][T14737] dump_stack_lvl+0x100/0x190 [ 214.324779][T14737] should_fail_ex.cold+0x5/0xa [ 214.324799][T14737] _copy_to_user+0x32/0xd0 [ 214.324820][T14737] simple_read_from_buffer+0xcb/0x170 [ 214.324836][T14737] proc_fail_nth_read+0x1af/0x230 [ 214.324852][T14737] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 214.324868][T14737] ? rw_verify_area+0xce/0x6d0 [ 214.324879][T14737] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 214.324894][T14737] vfs_read+0x1e4/0xb30 [ 214.324907][T14737] ? __pfx_vfs_read+0x10/0x10 [ 214.324918][T14737] ? find_held_lock+0x2b/0x80 [ 214.324934][T14737] ? __fget_files+0x215/0x3d0 [ 214.324949][T14737] ? __fget_files+0x21f/0x3d0 [ 214.324967][T14737] ksys_read+0x12a/0x250 [ 214.324978][T14737] ? __pfx_ksys_read+0x10/0x10 [ 214.324991][T14737] ? fput+0x79/0x100 [ 214.325009][T14737] do_syscall_64+0xc9/0xf80 [ 214.325044][T14737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.325057][T14737] RIP: 0033:0x7fe32575b58e [ 214.325066][T14737] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 214.325076][T14737] RSP: 002b:00007fe326592fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 214.325087][T14737] RAX: ffffffffffffffda RBX: 00007fe3265936c0 RCX: 00007fe32575b58e [ 214.325094][T14737] RDX: 000000000000000f RSI: 00007fe3265930a0 RDI: 0000000000000006 [ 214.325100][T14737] RBP: 00007fe326593090 R08: 0000000000000000 R09: 0000000000000000 [ 214.325106][T14737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.325113][T14737] R13: 00007fe325a16038 R14: 00007fe325a15fa0 R15: 00007ffe5a242cd8 [ 214.325127][T14737] [ 214.361533][T14746] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1726'. [ 214.364202][T14742] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 214.442558][T14756] tipc: Enabling of bearer rejected, already enabled [ 214.450848][T14756] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 214.462410][T14756] syzkaller0: mtu less than device minimum [ 214.499793][T14762] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 214.656150][ T832] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 214.796202][ T832] usb 9-1: device descriptor read/64, error -71 [ 214.901718][ T40] audit: type=1326 audit(214.815:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14775 comm="syz.1.1737" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe97d9acb9 code=0x7ffc0000 [ 214.911253][ T40] audit: type=1326 audit(214.815:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14775 comm="syz.1.1737" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe97d9acb9 code=0x7ffc0000 [ 214.929540][ T40] audit: type=1326 audit(214.815:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14775 comm="syz.1.1737" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efe97d9acb9 code=0x7ffc0000 [ 214.948763][ T40] audit: type=1326 audit(214.815:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14775 comm="syz.1.1737" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efe97d9acb9 code=0x0 [ 215.056178][ T832] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 215.186223][ T832] usb 9-1: device descriptor read/64, error -71 [ 215.303270][ T832] usb usb9-port1: attempt power cycle [ 215.656272][ T832] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 215.676853][ T832] usb 9-1: device descriptor read/8, error -71 [ 215.916238][ T832] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 215.936900][ T832] usb 9-1: device descriptor read/8, error -71 [ 216.046758][ T832] usb usb9-port1: unable to enumerate USB device [ 216.184002][T14799] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=14799 comm=syz.1.1744 [ 216.843572][T15063] netlink: 'syz.3.1759': attribute type 13 has an invalid length. [ 216.903420][T15064] xfrm1: entered allmulticast mode [ 217.103984][T15066] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 217.174332][T15179] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1763'. [ 217.184468][T15179] nfs4: Unknown parameter 'rdma/snd/timer' [ 217.194009][T15179] input: syz0 as /devices/virtual/input/input22 [ 217.253360][ T6017] tipc: Resetting bearer [ 217.383663][T15187] FAULT_INJECTION: forcing a failure. [ 217.383663][T15187] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.388030][T15187] CPU: 3 UID: 0 PID: 15187 Comm: syz.3.1765 Tainted: G L syzkaller #0 PREEMPT(full) [ 217.388048][T15187] Tainted: [L]=SOFTLOCKUP [ 217.388051][T15187] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 217.388058][T15187] Call Trace: [ 217.388062][T15187] [ 217.388066][T15187] dump_stack_lvl+0x100/0x190 [ 217.388084][T15187] should_fail_ex.cold+0x5/0xa [ 217.388104][T15187] _copy_from_user+0x2e/0xd0 [ 217.388119][T15187] ____sys_sendmsg+0x1d1/0xc30 [ 217.388131][T15187] ? __pfx_____sys_sendmsg+0x10/0x10 [ 217.388143][T15187] ? _kstrtoull+0x13c/0x1f0 [ 217.388152][T15187] ? __pfx__kstrtoull+0x10/0x10 [ 217.388164][T15187] ___sys_sendmsg+0x190/0x1e0 [ 217.388176][T15187] ? __pfx____sys_sendmsg+0x10/0x10 [ 217.388207][T15187] __sys_sendmmsg+0x205/0x430 [ 217.388223][T15187] ? __pfx___sys_sendmmsg+0x10/0x10 [ 217.388241][T15187] ? __fget_files+0x215/0x3d0 [ 217.388255][T15187] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 217.388273][T15187] ? fput+0x79/0x100 [ 217.388287][T15187] ? ksys_write+0x1ac/0x250 [ 217.388298][T15187] ? __pfx_ksys_write+0x10/0x10 [ 217.388312][T15187] __x64_sys_sendmmsg+0x9c/0x100 [ 217.388326][T15187] ? lockdep_hardirqs_on+0x78/0x100 [ 217.388337][T15187] do_syscall_64+0xc9/0xf80 [ 217.388349][T15187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.388360][T15187] RIP: 0033:0x7fe32579acb9 [ 217.388369][T15187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.388380][T15187] RSP: 002b:00007fe326572028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 217.388391][T15187] RAX: ffffffffffffffda RBX: 00007fe325a16090 RCX: 00007fe32579acb9 [ 217.388397][T15187] RDX: 0000000000000001 RSI: 00002000000018c0 RDI: 0000000000000006 [ 217.388404][T15187] RBP: 00007fe326572090 R08: 0000000000000000 R09: 0000000000000000 [ 217.388410][T15187] R10: 0000000000004880 R11: 0000000000000246 R12: 0000000000000001 [ 217.388416][T15187] R13: 00007fe325a16128 R14: 00007fe325a16090 R15: 00007ffe5a242cd8 [ 217.388430][T15187] [ 217.513476][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 217.513487][ T40] audit: type=1400 audit(217.425:756): avc: denied { create } for pid=15195 comm="syz.4.1769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 217.525020][ T40] audit: type=1400 audit(217.435:757): avc: denied { mount } for pid=15195 comm="syz.4.1769" name="/" dev="rpc_pipefs" ino=42778 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 217.539723][T15197] binder: 15193:15197 unknown command 0 [ 217.539934][ T40] audit: type=1400 audit(217.455:758): avc: denied { watch watch_reads } for pid=15195 comm="syz.4.1769" path="/250/file0" dev="rpc_pipefs" ino=42778 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 217.541685][T15197] binder: 15193:15197 ioctl c0306201 2000000001c0 returned -22 [ 217.564317][T15196] netlink: 'syz.4.1769': attribute type 10 has an invalid length. [ 217.568445][T15196] bond0: (slave wlan1): Opening slave failed [ 217.571294][ T40] audit: type=1400 audit(217.485:759): avc: denied { unmount } for pid=15195 comm="syz.4.1769" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 217.826206][ T6018] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 217.986207][ T6018] usb 11-1: Using ep0 maxpacket: 8 [ 217.990338][ T6018] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 217.995154][ T6018] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 217.999530][ T6018] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 218.003748][ T6018] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 218.009594][ T6018] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 218.013392][ T6018] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.106584][ T40] audit: type=1400 audit(218.025:760): avc: denied { unmount } for pid=5937 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 218.223683][ T6018] usb 11-1: GET_CAPABILITIES returned 0 [ 218.226877][ T6018] usbtmc 11-1:16.0: can't read capabilities [ 218.425399][ T6018] usb 11-1: USB disconnect, device number 11 [ 218.802430][ T40] audit: type=1400 audit(218.715:761): avc: denied { lock } for pid=15237 comm="syz.1.1782" path="socket:[42904]" dev="sockfs" ino=42904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 219.366394][ T6017] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 219.367556][ T5940] Bluetooth: hci4: command 0x0c1a tx timeout [ 219.368522][ T6017] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 219.516394][ T6000] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 219.666570][ T6000] usb 6-1: Using ep0 maxpacket: 8 [ 219.669373][ T6000] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 219.672917][ T6000] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 219.676236][ T6000] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 219.679376][ T6000] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 219.683404][ T6000] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 219.687981][ T6000] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.894052][ T6000] usb 6-1: GET_CAPABILITIES returned 0 [ 219.895840][ T6000] usbtmc 6-1:16.0: can't read capabilities [ 219.906362][ T59] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 220.056248][ T59] usb 11-1: Using ep0 maxpacket: 8 [ 220.060890][ T59] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 220.064187][ T59] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 220.067611][ T59] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1056, setting to 1024 [ 220.071242][ T59] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 220.074540][ T59] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 220.078972][ T59] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 220.082001][ T59] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.095849][ T75] usb 6-1: USB disconnect, device number 50 [ 220.289026][ T59] usb 11-1: GET_CAPABILITIES returned 0 [ 220.291089][ T59] usbtmc 11-1:16.0: can't read capabilities [ 220.490629][ C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 220.494552][ C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 220.497966][ C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 220.500982][ C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 220.503895][ C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 220.508311][ C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 220.511316][ C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 220.514267][ C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 220.518054][ C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 220.521705][ C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 220.524768][ C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 220.528325][ C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 220.531668][ C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 220.534983][ C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 220.537879][ C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 220.540823][ C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 220.553868][ T6018] usb 11-1: USB disconnect, device number 12 [ 220.644651][T15306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1805'. [ 220.738615][ T40] audit: type=1400 audit(220.655:762): avc: denied { connect } for pid=15310 comm="syz.1.1807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 220.755905][T15310] delete_channel: no stack [ 220.936251][ T6017] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 221.026241][ T6000] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 221.106243][ T6017] usb 9-1: Using ep0 maxpacket: 8 [ 221.110671][ T6017] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 221.115015][ T6017] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 221.119422][ T6017] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1056, setting to 1024 [ 221.124085][ T6017] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 221.131614][ T6017] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 221.137472][ T6017] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 221.141278][ T6017] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.160810][ T40] audit: type=1400 audit(221.075:763): avc: denied { ioctl } for pid=15314 comm="syz.6.1809" path="socket:[43690]" dev="sockfs" ino=43690 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 221.176467][ T6000] usb 6-1: Using ep0 maxpacket: 8 [ 221.180232][ T6000] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 221.183715][ T6000] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 221.187512][ T6000] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 221.192876][ T6000] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 221.198714][ T6000] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 221.202488][ T6000] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.349458][ T6017] usb 9-1: GET_CAPABILITIES returned 0 [ 221.351331][ T6017] usbtmc 9-1:16.0: can't read capabilities [ 221.410551][ T6000] usb 6-1: GET_CAPABILITIES returned 0 [ 221.412640][ T6000] usbtmc 6-1:16.0: can't read capabilities [ 221.446380][ T5940] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 221.550755][T15304] FAULT_INJECTION: forcing a failure. [ 221.550755][T15304] name failslab, interval 1, probability 0, space 0, times 0 [ 221.554884][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.558860][T15304] CPU: 1 UID: 0 PID: 15304 Comm: syz.4.1804 Tainted: G L syzkaller #0 PREEMPT(full) [ 221.558885][T15304] Tainted: [L]=SOFTLOCKUP [ 221.558891][T15304] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 221.558901][T15304] Call Trace: [ 221.558906][T15304] [ 221.558913][T15304] dump_stack_lvl+0x100/0x190 [ 221.558934][T15304] should_fail_ex.cold+0x5/0xa [ 221.558954][T15304] should_failslab+0xc2/0x120 [ 221.558968][T15304] __kmalloc_cache_noprof+0x80/0x810 [ 221.558980][T15304] ? usbtmc_create_urb+0x59/0x150 [ 221.558996][T15304] ? usbtmc_create_urb+0x59/0x150 [ 221.559008][T15304] usbtmc_create_urb+0x59/0x150 [ 221.559020][T15304] usbtmc_generic_read+0x3dc/0x1810 [ 221.559038][T15304] ? __pfx_usbtmc_generic_read+0x10/0x10 [ 221.559051][T15304] ? __might_fault+0xc5/0x140 [ 221.559063][T15304] ? __might_fault+0xc5/0x140 [ 221.559080][T15304] usbtmc_ioctl+0x12c9/0x2930 [ 221.559093][T15304] ? do_vfs_ioctl+0x226/0x13e0 [ 221.559104][T15304] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 221.559113][T15304] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 221.559126][T15304] ? __pfx_usbtmc_ioctl+0x10/0x10 [ 221.559140][T15304] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 221.559160][T15304] ? selinux_file_ioctl+0x139/0x290 [ 221.559176][T15304] ? selinux_file_ioctl+0xb4/0x290 [ 221.559188][T15304] ? __pfx_usbtmc_ioctl+0x10/0x10 [ 221.559202][T15304] __x64_sys_ioctl+0x18e/0x210 [ 221.559213][T15304] do_syscall_64+0xc9/0xf80 [ 221.559227][T15304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.559238][T15304] RIP: 0033:0x7f80da59acb9 [ 221.559248][T15304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.559259][T15304] RSP: 002b:00007f80db402028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 221.559270][T15304] RAX: ffffffffffffffda RBX: 00007f80da815fa0 RCX: 00007f80da59acb9 [ 221.559277][T15304] RDX: 0000200000000040 RSI: 00000000c0145b0e RDI: 0000000000000005 [ 221.559283][T15304] RBP: 00007f80db402090 R08: 0000000000000000 R09: 0000000000000000 [ 221.559289][T15304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.559295][T15304] R13: 00007f80da816038 R14: 00007f80da815fa0 R15: 00007ffea28ef968 [ 221.559309][T15304] [ 221.559906][ T6000] usb 9-1: USB disconnect, device number 26 [ 221.638671][ T61] usb 6-1: USB disconnect, device number 51 [ 221.746211][ T6017] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 221.927643][ T6017] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 221.931513][ T6017] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 221.934848][ T6017] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 221.938264][ T6017] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.945156][T15321] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 221.951490][ T6017] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 222.068567][T15323] ufs: You didn't specify the type of your ufs filesystem [ 222.068567][T15323] [ 222.068567][T15323] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 222.068567][T15323] [ 222.068567][T15323] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 222.082318][T15323] ufs: failed to set blocksize [ 222.232794][ T59] usb 8-1: USB disconnect, device number 30 [ 222.904591][T15364] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.1827'. [ 224.259386][T15414] fuse: Bad value for 'fd' [ 224.299639][T15416] fuse: blksize only supported for fuseblk [ 224.302015][T15416] openvswitch: netlink: Flow actions attr not present in new flow. [ 224.545029][T15426] netlink: 'syz.6.1848': attribute type 39 has an invalid length. [ 224.586239][ T8510] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 224.598306][ T40] audit: type=1400 audit(224.515:764): avc: denied { read } for pid=15425 comm="syz.6.1848" lport=60165 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 224.687149][T15431] macsec3: entered promiscuous mode [ 224.688921][T15431] macsec3: entered allmulticast mode [ 224.758535][ T8510] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 224.761854][ T8510] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 224.764790][ T8510] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 224.768703][ T8510] usb 9-1: config 0 interface 0 has no altsetting 0 [ 224.771548][ T8510] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 224.774431][ T8510] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 224.780685][ T8510] usb 9-1: config 0 interface 0 has no altsetting 0 [ 224.784472][ T8510] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 224.788843][ T8510] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 224.796143][ T8510] usb 9-1: config 0 interface 0 has no altsetting 0 [ 224.804225][ T8510] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 224.807308][ T8510] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 224.810702][ T8510] usb 9-1: config 0 interface 0 has no altsetting 0 [ 224.823366][ T8510] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 224.827029][ T8510] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 224.831115][ T8510] usb 9-1: config 0 interface 0 has no altsetting 0 [ 224.835061][ T8510] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 224.835105][ T8510] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 224.835127][ T8510] usb 9-1: config 0 interface 0 has no altsetting 0 [ 224.835973][ T8510] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 224.850430][ T8510] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 224.850448][ T8510] usb 9-1: config 0 interface 0 has no altsetting 0 [ 224.857052][ T8510] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 224.865969][ T8510] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 224.865987][ T8510] usb 9-1: config 0 interface 0 has no altsetting 0 [ 224.868063][ T8510] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 224.876908][ T8510] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 224.876923][ T8510] usb 9-1: Product: syz [ 224.881746][ T8510] usb 9-1: Manufacturer: syz [ 224.881756][ T8510] usb 9-1: SerialNumber: syz [ 224.892835][ T8510] usb 9-1: config 0 descriptor?? [ 224.899869][ T8510] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 224.922694][T15439] fuse: Bad value for 'fd' [ 224.936221][ T6018] usb 8-1: new low-speed USB device number 31 using dummy_hcd [ 224.956233][ T59] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 225.008381][T15443] No such timeout policy "syz1" [ 225.066225][ T6018] usb 8-1: device descriptor read/64, error -71 [ 225.096187][ T59] usb 11-1: device descriptor read/64, error -71 [ 225.100973][ T75] usb 9-1: USB disconnect, device number 27 [ 225.108609][ T75] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 225.326282][ T6018] usb 8-1: new low-speed USB device number 32 using dummy_hcd [ 225.346251][ T59] usb 11-1: new high-speed USB device number 14 using dummy_hcd [ 225.426195][ T832] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 225.456305][ T6018] usb 8-1: device descriptor read/64, error -71 [ 225.486329][ T59] usb 11-1: device descriptor read/64, error -71 [ 225.566583][ T6018] usb usb8-port1: attempt power cycle [ 225.586198][ T832] usb 6-1: Using ep0 maxpacket: 8 [ 225.590135][ T832] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 225.594429][ T832] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 225.596578][ T59] usb usb11-port1: attempt power cycle [ 225.598657][ T832] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1056, setting to 1024 [ 225.604747][ T832] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 225.609121][ T832] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 225.614389][ T832] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 225.617415][ T832] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.729956][T15455] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1860'. [ 225.822321][ T832] usb 6-1: GET_CAPABILITIES returned 0 [ 225.824202][ T832] usbtmc 6-1:16.0: can't read capabilities [ 225.916163][ T6018] usb 8-1: new low-speed USB device number 33 using dummy_hcd [ 225.936749][ T6018] usb 8-1: device descriptor read/8, error -71 [ 225.946224][ T59] usb 11-1: new high-speed USB device number 15 using dummy_hcd [ 225.966672][ T59] usb 11-1: device descriptor read/8, error -71 [ 226.023270][T15450] FAULT_INJECTION: forcing a failure. [ 226.023270][T15450] name failslab, interval 1, probability 0, space 0, times 0 [ 226.027592][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 226.031180][T15450] CPU: 0 UID: 0 PID: 15450 Comm: syz.1.1858 Tainted: G L syzkaller #0 PREEMPT(full) [ 226.031198][T15450] Tainted: [L]=SOFTLOCKUP [ 226.031203][T15450] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 226.031210][T15450] Call Trace: [ 226.031214][T15450] [ 226.031219][T15450] dump_stack_lvl+0x100/0x190 [ 226.031239][T15450] should_fail_ex.cold+0x5/0xa [ 226.031260][T15450] should_failslab+0xc2/0x120 [ 226.031276][T15450] __kmalloc_cache_noprof+0x80/0x810 [ 226.031288][T15450] ? dummy_urb_enqueue+0xa3/0x880 [ 226.031307][T15450] ? dummy_urb_enqueue+0xa3/0x880 [ 226.031323][T15450] dummy_urb_enqueue+0xa3/0x880 [ 226.031338][T15450] ? mark_held_locks+0x40/0x70 [ 226.031349][T15450] ? usb_hcd_map_urb_for_dma+0x28a/0x1170 [ 226.031365][T15450] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 226.031378][T15450] usb_hcd_submit_urb+0x26c/0x2150 [ 226.031396][T15450] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 226.031412][T15450] usb_submit_urb+0x8aa/0x1910 [ 226.031424][T15450] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 226.031437][T15450] usbtmc_generic_read+0x508/0x1810 [ 226.031457][T15450] ? __pfx_usbtmc_generic_read+0x10/0x10 [ 226.031470][T15450] ? __might_fault+0xc5/0x140 [ 226.031482][T15450] ? __might_fault+0xc5/0x140 [ 226.031500][T15450] usbtmc_ioctl+0x12c9/0x2930 [ 226.031514][T15450] ? do_vfs_ioctl+0x226/0x13e0 [ 226.031525][T15450] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 226.031535][T15450] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 226.031549][T15450] ? __pfx_usbtmc_ioctl+0x10/0x10 [ 226.031563][T15450] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 226.031585][T15450] ? selinux_file_ioctl+0x139/0x290 [ 226.031596][T15450] ? selinux_file_ioctl+0xb4/0x290 [ 226.031608][T15450] ? __pfx_usbtmc_ioctl+0x10/0x10 [ 226.031623][T15450] __x64_sys_ioctl+0x18e/0x210 [ 226.031635][T15450] do_syscall_64+0xc9/0xf80 [ 226.031649][T15450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.031661][T15450] RIP: 0033:0x7efe97d9acb9 [ 226.031671][T15450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.031682][T15450] RSP: 002b:00007efe98bed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 226.031694][T15450] RAX: ffffffffffffffda RBX: 00007efe98015fa0 RCX: 00007efe97d9acb9 [ 226.031701][T15450] RDX: 0000200000000040 RSI: 00000000c0145b0e RDI: 0000000000000005 [ 226.031708][T15450] RBP: 00007efe98bed090 R08: 0000000000000000 R09: 0000000000000000 [ 226.031714][T15450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.031721][T15450] R13: 00007efe98016038 R14: 00007efe98015fa0 R15: 00007fffb3666cc8 [ 226.031736][T15450] [ 226.032811][ T832] usb 6-1: USB disconnect, device number 52 [ 226.186208][ T6018] usb 8-1: new low-speed USB device number 34 using dummy_hcd [ 226.206686][ T6018] usb 8-1: device descriptor read/8, error -71 [ 226.226641][ T59] usb 11-1: new high-speed USB device number 16 using dummy_hcd [ 226.246981][ T59] usb 11-1: device descriptor read/8, error -71 [ 226.316777][ T6018] usb usb8-port1: unable to enumerate USB device [ 226.356470][ T59] usb usb11-port1: unable to enumerate USB device [ 226.917944][ C0] sr 2:0:0:0: [sr0] tag#2 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 226.921956][ C0] sr 2:0:0:0: [sr0] tag#2 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 227.339221][T15498] tmpfs: Bad value for 'mpol' [ 227.790482][T15515] tipc: Enabled bearer , priority 0 [ 227.793234][T15515] syzkaller0: entered promiscuous mode [ 227.795063][T15515] syzkaller0: entered allmulticast mode [ 227.799472][T15515] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 227.809987][T15515] syzkaller0: mtu greater than device maximum [ 227.813388][T15513] tipc: Resetting bearer [ 227.821696][ T40] audit: type=1400 audit(227.725:765): avc: denied { remount } for pid=15518 comm="syz.4.1881" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 227.831943][T15513] tipc: Disabling bearer [ 227.838022][ T40] audit: type=1400 audit(227.755:766): avc: denied { unmount } for pid=8452 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 227.858650][T15523] netlink: 'syz.1.1883': attribute type 32 has an invalid length. [ 227.861270][T15525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1884'. [ 227.916829][T15530] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 227.983651][ T40] audit: type=1400 audit(227.895:767): avc: denied { getopt } for pid=15537 comm="syz.6.1886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 228.313163][T15561] netlink: 'syz.1.1894': attribute type 10 has an invalid length. [ 228.324074][T15561] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 228.328705][T15561] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 228.333341][T15561] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 228.576160][ T832] usb 11-1: new high-speed USB device number 17 using dummy_hcd [ 228.659498][T15579] No source specified [ 228.671918][T15579] openvswitch: netlink: Key type 134 is out of range max 32 [ 228.703082][T15577] loop5: detected capacity change from 0 to 4095 [ 228.726251][ T832] usb 11-1: Using ep0 maxpacket: 8 [ 228.733327][ T832] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 228.742412][ T832] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 228.746865][ T832] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 228.751032][ T832] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 228.756760][ T832] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 228.760397][ T832] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.765412][T15582] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.769974][T15582] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1901'. [ 228.774221][T15582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1901'. [ 228.976752][ T832] usb 11-1: GET_CAPABILITIES returned 0 [ 228.979135][ T832] usbtmc 11-1:16.0: can't read capabilities [ 229.094006][T15592] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig [ 229.177708][ C3] usbtmc 11-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 229.182702][T15563] usbtmc 11-1:16.0: Unable to send data, error -71 [ 229.189707][ T53] usb 11-1: USB disconnect, device number 17 [ 229.351591][T15611] xt_hashlimit: size too large, truncated to 1048576 [ 229.687173][T15768] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1923'. [ 229.745898][ T40] audit: type=1400 audit(229.655:768): avc: denied { create } for pid=15731 comm="syz.1.1923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 229.753761][ T40] audit: type=1400 audit(229.655:769): avc: denied { write } for pid=15731 comm="syz.1.1923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 229.985503][T15860] netlink: 'syz.6.1933': attribute type 39 has an invalid length. [ 230.067369][T15866] FAULT_INJECTION: forcing a failure. [ 230.067369][T15866] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.071761][T15866] CPU: 3 UID: 0 PID: 15866 Comm: syz.6.1934 Tainted: G L syzkaller #0 PREEMPT(full) [ 230.071778][T15866] Tainted: [L]=SOFTLOCKUP [ 230.071782][T15866] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 230.071788][T15866] Call Trace: [ 230.071793][T15866] [ 230.071798][T15866] dump_stack_lvl+0x100/0x190 [ 230.071816][T15866] should_fail_ex.cold+0x5/0xa [ 230.071835][T15866] _copy_to_user+0x32/0xd0 [ 230.071851][T15866] simple_read_from_buffer+0xcb/0x170 [ 230.071865][T15866] proc_fail_nth_read+0x1af/0x230 [ 230.071881][T15866] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 230.071897][T15866] ? rw_verify_area+0xce/0x6d0 [ 230.071906][T15866] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 230.071921][T15866] vfs_read+0x1e4/0xb30 [ 230.071934][T15866] ? __pfx_vfs_read+0x10/0x10 [ 230.071944][T15866] ? find_held_lock+0x2b/0x80 [ 230.071959][T15866] ? __fget_files+0x215/0x3d0 [ 230.071974][T15866] ? __fget_files+0x21f/0x3d0 [ 230.071990][T15866] ksys_read+0x12a/0x250 [ 230.072001][T15866] ? __pfx_ksys_read+0x10/0x10 [ 230.072012][T15866] ? v4l2_ioctl+0x1c5/0x250 [ 230.072024][T15866] ? fput+0x79/0x100 [ 230.072040][T15866] do_syscall_64+0xc9/0xf80 [ 230.072054][T15866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.072066][T15866] RIP: 0033:0x7f2f3215b58e [ 230.072079][T15866] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 230.072090][T15866] RSP: 002b:00007f2f32fadfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 230.072101][T15866] RAX: ffffffffffffffda RBX: 00007f2f32fae6c0 RCX: 00007f2f3215b58e [ 230.072108][T15866] RDX: 000000000000000f RSI: 00007f2f32fae0a0 RDI: 0000000000000004 [ 230.072114][T15866] RBP: 00007f2f32fae090 R08: 0000000000000000 R09: 0000000000000000 [ 230.072120][T15866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.072126][T15866] R13: 00007f2f32416038 R14: 00007f2f32415fa0 R15: 00007ffcbda05458 [ 230.072141][T15866] [ 230.406228][ T6000] usb 11-1: new low-speed USB device number 18 using dummy_hcd [ 230.589577][ T6000] usb 11-1: config 0 has an invalid interface number: 1 but max is 0 [ 230.593260][ T6000] usb 11-1: config 0 has no interface number 0 [ 230.596002][ T6000] usb 11-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 25247, setting to 8 [ 230.600731][ T6000] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 230.603797][ T6000] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.608531][ T6000] usb 11-1: config 0 descriptor?? [ 230.610696][T15869] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 230.617860][ T6000] iowarrior 11-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 230.835530][ T59] usb 11-1: USB disconnect, device number 18 [ 230.854866][T15878] netlink: 504 bytes leftover after parsing attributes in process `syz.4.1939'. [ 230.858329][T15877] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1938'. [ 231.044634][T15888] Dead loop on virtual device ip6_vti0, fix it urgently! [ 231.048150][T15888] Dead loop on virtual device ip6_vti0, fix it urgently! [ 231.050649][T15888] Dead loop on virtual device ip6_vti0, fix it urgently! [ 231.053027][T15888] Dead loop on virtual device ip6_vti0, fix it urgently! [ 231.055337][T15888] Dead loop on virtual device ip6_vti0, fix it urgently! [ 231.058818][T15888] Dead loop on virtual device ip6_vti0, fix it urgently! [ 231.106289][ T61] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 231.146371][ T10] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 231.267770][ T61] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 231.270733][ T61] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 231.274318][ T61] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 231.279954][ T61] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 231.284468][ T61] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 231.290900][ T61] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 231.294695][ T61] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 231.298319][ T61] usb 9-1: Product: syz [ 231.300166][ T61] usb 9-1: Manufacturer: syz [ 231.306233][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 231.309122][ T10] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 231.312143][ T10] usb 8-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 231.315547][ T10] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 231.318894][ T10] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 231.319241][ T61] cdc_wdm 9-1:1.0: skipping garbage [ 231.321937][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 231.323697][ T61] cdc_wdm 9-1:1.0: skipping garbage [ 231.327537][ T10] usb 8-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 231.328810][ T61] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 231.330654][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.332485][ T61] cdc_wdm 9-1:1.0: Unknown control protocol [ 231.335020][ T10] usb 8-1: Product: syz [ 231.335034][ T10] usb 8-1: Manufacturer: syz [ 231.335041][ T10] usb 8-1: SerialNumber: syz [ 231.336518][ T10] usb 8-1: config 0 descriptor?? [ 231.388838][T15894] Invalid source name [ 231.390175][T15894] UBIFS error (pid: 15894): cannot open "ubifs", error -22 [ 231.406217][T15896] input: syz0 as /devices/virtual/input/input24 [ 231.549480][ T10] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input25 [ 231.553089][ T5328] synaptics_usb 8-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 231.558645][ T5328] synaptics_usb 8-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 231.568768][ T5328] synaptics_usb 8-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 231.583549][ T5328] synaptics_usb 8-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 231.600646][ T5328] synaptics_usb 8-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 231.615549][ T5328] synaptics_usb 8-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 231.620619][T13741] synaptics_usb 8-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 231.642479][ T5328] synaptics_usb 8-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 231.667269][ T5328] synaptics_usb 8-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 231.700060][ T59] usb 9-1: USB disconnect, device number 28 [ 231.806172][T15882] synaptics_usb 8-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 231.815213][ T10] usb 8-1: USB disconnect, device number 35 [ 231.918242][T15915] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1955'. [ 232.526267][ T61] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 232.533759][T15993] F2FS-fs (nbd6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 232.537619][T15993] F2FS-fs (nbd6): Can't find valid F2FS filesystem in 1th superblock [ 232.540979][T15993] F2FS-fs (nbd6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 232.544061][T15993] F2FS-fs (nbd6): Can't find valid F2FS filesystem in 2th superblock [ 232.676245][ T61] usb 9-1: Using ep0 maxpacket: 8 [ 232.679587][ T61] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 232.684013][ T61] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 232.687495][ T61] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 232.690826][ T61] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 232.696847][ T61] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 232.700716][ T61] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.807594][T16070] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1971'. [ 232.810574][T16070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1971'. [ 232.909724][ T61] usb 9-1: usb_control_msg returned -71 [ 232.911666][ T61] usbtmc 9-1:16.0: can't read capabilities [ 232.926426][ T61] usb 9-1: USB disconnect, device number 29 [ 233.027604][T16079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1976'. [ 233.176204][ T10] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 233.348193][ T10] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 233.353530][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 233.357916][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 233.362672][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 233.367117][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 233.371619][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 233.376645][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 233.380819][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 233.384755][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 233.389581][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 233.393901][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 233.398228][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 233.403194][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 233.407445][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 233.411427][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 233.416324][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 233.420205][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 233.424253][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 233.428510][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 233.431402][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 233.434379][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 233.439112][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 233.443037][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 233.447458][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 233.452357][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 233.457650][ T10] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 233.458361][T16099] FAULT_INJECTION: forcing a failure. [ 233.458361][T16099] name failslab, interval 1, probability 0, space 0, times 0 [ 233.460784][ T10] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 233.460797][ T10] usb 8-1: Product: syz [ 233.465836][T16099] CPU: 3 UID: 0 PID: 16099 Comm: syz.4.1981 Tainted: G L syzkaller #0 PREEMPT(full) [ 233.465862][T16099] Tainted: [L]=SOFTLOCKUP [ 233.465868][T16099] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 233.465877][T16099] Call Trace: [ 233.465883][T16099] [ 233.465889][T16099] dump_stack_lvl+0x100/0x190 [ 233.465932][T16099] should_fail_ex.cold+0x5/0xa [ 233.465960][T16099] should_failslab+0xc2/0x120 [ 233.465982][T16099] ? tomoyo_realpath_from_path+0xb6/0x690 [ 233.466007][T16099] __kmalloc_noprof+0xf6/0x9c0 [ 233.466030][T16099] ? tomoyo_realpath_from_path+0xb6/0x690 [ 233.466047][T16099] tomoyo_realpath_from_path+0xb6/0x690 [ 233.466085][T16099] tomoyo_path_number_perm+0x23c/0x580 [ 233.466110][T16099] ? tomoyo_path_number_perm+0x22e/0x580 [ 233.466141][T16099] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 233.466189][T16099] ? find_held_lock+0x2b/0x80 [ 233.466210][T16099] ? hook_file_ioctl_common+0x146/0x410 [ 233.466229][T16099] ? __fget_files+0x215/0x3d0 [ 233.466253][T16099] ? __fget_files+0x21f/0x3d0 [ 233.466273][T16099] security_file_ioctl+0xd3/0x230 [ 233.466295][T16099] __x64_sys_ioctl+0xb7/0x210 [ 233.466313][T16099] do_syscall_64+0xc9/0xf80 [ 233.466340][T16099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.466356][T16099] RIP: 0033:0x7f80da59acb9 [ 233.466366][T16099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.466377][T16099] RSP: 002b:00007f80db402028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 233.466388][T16099] RAX: ffffffffffffffda RBX: 00007f80da815fa0 RCX: 00007f80da59acb9 [ 233.466395][T16099] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000007 [ 233.466401][T16099] RBP: 00007f80db402090 R08: 0000000000000000 R09: 0000000000000000 [ 233.466407][T16099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.466414][T16099] R13: 00007f80da816038 R14: 00007f80da815fa0 R15: 00007ffea28ef968 [ 233.466428][T16099] [ 233.466633][T16099] ERROR: Out of memory at tomoyo_realpath_from_path. [ 233.468118][ T10] usb 8-1: Manufacturer: syz [ 233.554894][ T10] usb 8-1: SerialNumber: syz [ 233.562594][ T10] usb 8-1: config 0 descriptor?? [ 233.577254][T16105] Cannot find del_set index 0 as target [ 233.581800][ T10] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 233.624073][T16107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1986'. [ 233.688699][T16114] tmpfs: Unknown parameter '0xffffffffffffffff' [ 233.768581][ T75] usb 8-1: USB disconnect, device number 36 [ 233.771277][ T75] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 233.916363][ T59] usb 11-1: new high-speed USB device number 19 using dummy_hcd [ 234.066197][ T59] usb 11-1: Using ep0 maxpacket: 8 [ 234.069106][ T59] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 234.072575][ T59] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 234.075715][ T59] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 234.078868][ T59] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 234.082905][ T59] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 234.085794][ T59] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.293476][ T59] usb 11-1: usb_control_msg returned -71 [ 234.295411][ T59] usbtmc 11-1:16.0: can't read capabilities [ 234.300868][ T59] usb 11-1: USB disconnect, device number 19 [ 234.388513][T16140] tmpfs: Unknown parameter '0xffffffffffffffff' [ 234.530285][T16144] ubi5: attaching mtd0 [ 234.533306][T16144] ubi5: scanning is finished [ 234.534832][T16144] ubi5: empty MTD device detected [ 234.568829][T16247] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 234.575152][T16247] netlink: 'syz.1.2001': attribute type 3 has an invalid length. [ 234.628908][T16144] ubi5 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt5d", error -4 [ 234.696221][T16256] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.705289][T16256] nft_compat: unsupported protocol 0 [ 234.767230][ T40] audit: type=1400 audit(234.675:770): avc: denied { read } for pid=16353 comm="syz.1.2007" path="socket:[51887]" dev="sockfs" ino=51887 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 234.785804][T16361] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 234.834128][T16363] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2008'. [ 234.863846][ T40] audit: type=1400 audit(234.775:771): avc: denied { node_bind } for pid=16366 comm="syz.3.2010" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 234.921136][ T40] audit: type=1400 audit(234.835:772): avc: denied { create } for pid=16377 comm="syz.1.2013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 235.003026][T16387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2013'. [ 235.003711][T16386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2017'. [ 235.012431][ T40] audit: type=1400 audit(234.925:773): avc: denied { read } for pid=16385 comm="syz.3.2017" path="socket:[46834]" dev="sockfs" ino=46834 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 235.014372][T16386] input: syz0 as /devices/virtual/input/input26 [ 235.745505][T16508] fuse: Unknown parameter '0x00000000000000060x0000000000000006' [ 235.746613][T16508] IPVS: Unknown mcast interface: macvlan0 [ 235.837633][T16510] netlink: 'syz.6.2027': attribute type 13 has an invalid length. [ 235.926975][ T40] audit: type=1400 audit(235.845:774): avc: denied { create } for pid=16522 comm="syz.1.2038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 235.928841][T16523] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 235.934825][ T40] audit: type=1400 audit(235.845:775): avc: denied { getopt } for pid=16522 comm="syz.1.2038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 235.965000][T16526] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.988597][T16526] nft_compat: unsupported protocol 0 [ 236.172124][ T40] audit: type=1400 audit(236.085:776): avc: denied { write } for pid=16527 comm="syz.1.2033" name="file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 236.284268][ T40] audit: type=1400 audit(236.195:777): avc: denied { ioctl } for pid=16540 comm="syz.6.2036" path="socket:[50849]" dev="sockfs" ino=50849 ioctlcmd=0x42d4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 236.297253][ T40] audit: type=1400 audit(236.205:778): avc: denied { getopt } for pid=16540 comm="syz.6.2036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 236.320277][T16546] FAULT_INJECTION: forcing a failure. [ 236.320277][T16546] name failslab, interval 1, probability 0, space 0, times 0 [ 236.324380][T16546] CPU: 1 UID: 0 PID: 16546 Comm: syz.6.2037 Tainted: G L syzkaller #0 PREEMPT(full) [ 236.324397][T16546] Tainted: [L]=SOFTLOCKUP [ 236.324401][T16546] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 236.324407][T16546] Call Trace: [ 236.324412][T16546] [ 236.324416][T16546] dump_stack_lvl+0x100/0x190 [ 236.324447][T16546] should_fail_ex.cold+0x5/0xa [ 236.324467][T16546] should_failslab+0xc2/0x120 [ 236.324481][T16546] ? tomoyo_encode2+0xfb/0x3c0 [ 236.324493][T16546] __kmalloc_noprof+0xf6/0x9c0 [ 236.324507][T16546] ? tomoyo_encode2+0xfb/0x3c0 [ 236.324518][T16546] tomoyo_encode2+0xfb/0x3c0 [ 236.324531][T16546] tomoyo_encode+0x29/0x50 [ 236.324542][T16546] tomoyo_realpath_from_path+0x18c/0x690 [ 236.324558][T16546] tomoyo_path_number_perm+0x23c/0x580 [ 236.324574][T16546] ? tomoyo_path_number_perm+0x22e/0x580 [ 236.324592][T16546] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 236.324623][T16546] ? find_held_lock+0x2b/0x80 [ 236.324638][T16546] ? hook_file_ioctl_common+0x146/0x410 [ 236.324658][T16546] ? __fget_files+0x215/0x3d0 [ 236.324681][T16546] ? __fget_files+0x21f/0x3d0 [ 236.324705][T16546] security_file_ioctl+0xd3/0x230 [ 236.324725][T16546] __x64_sys_ioctl+0xb7/0x210 [ 236.324745][T16546] do_syscall_64+0xc9/0xf80 [ 236.324762][T16546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.324773][T16546] RIP: 0033:0x7f2f3219acb9 [ 236.324783][T16546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.324793][T16546] RSP: 002b:00007f2f32fae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 236.324804][T16546] RAX: ffffffffffffffda RBX: 00007f2f32415fa0 RCX: 00007f2f3219acb9 [ 236.324811][T16546] RDX: 0000000000000000 RSI: 0000000000006411 RDI: 0000000000000003 [ 236.324817][T16546] RBP: 00007f2f32fae090 R08: 0000000000000000 R09: 0000000000000000 [ 236.324825][T16546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.324831][T16546] R13: 00007f2f32416038 R14: 00007f2f32415fa0 R15: 00007ffcbda05458 [ 236.324846][T16546] [ 236.324870][T16546] ERROR: Out of memory at tomoyo_realpath_from_path. [ 236.442306][ T40] audit: type=1400 audit(236.355:779): avc: denied { name_bind } for pid=16547 comm="syz.4.2039" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 236.509971][T16553] __nla_validate_parse: 2 callbacks suppressed [ 236.509983][T16553] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2041'. [ 236.514882][T16553] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2041'. [ 236.618820][T16551] uprobe: syz.4.2039:16551 failed to unregister, leaking uprobe [ 236.960852][T16573] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 237.026188][ T59] usb 11-1: new high-speed USB device number 20 using dummy_hcd [ 237.176297][ T59] usb 11-1: Using ep0 maxpacket: 8 [ 237.182693][ T59] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 237.187462][ T59] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 237.191435][ T59] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 237.195546][ T59] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 237.200595][ T59] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 237.203532][ T59] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.415779][ T59] usb 11-1: GET_CAPABILITIES returned 0 [ 237.418400][ T59] usbtmc 11-1:16.0: can't read capabilities [ 237.478494][T16585] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2054'. [ 237.506290][ T75] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 237.619210][ T59] usb 11-1: USB disconnect, device number 20 [ 237.636194][ T75] usb 6-1: device descriptor read/64, error -71 [ 237.876707][ T75] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 238.016265][ T75] usb 6-1: device descriptor read/64, error -71 [ 238.046275][ T61] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 238.126368][ T75] usb usb6-port1: attempt power cycle [ 238.186226][ T61] usb 9-1: device descriptor read/64, error -71 [ 238.275584][T16719] SELinux: Context system_u:object_r:dlm_control_device_t:s0 is not valid (left unmapped). [ 238.281011][T16719] [U] [ 238.282709][T16719] [U] [ 238.283799][T16719] [U] [ 238.284838][T16719] [U] [ 238.286044][T16719] [U] [ 238.286979][T16719] [U] [ 238.287865][T16719] [U] [ 238.288865][T16719] [U] [ 238.290099][T16719] [U] [ 238.291031][T16719] [U] [ 238.291936][T16719] [U] [ 238.292834][T16719] [U] [ 238.293826][T16719] [U] [ 238.294726][T16719] [U] [ 238.295633][T16719] [U] [ 238.296563][T16719] [U] [ 238.298863][T16718] [U] [ 238.324827][T16721] erspan0: entered promiscuous mode [ 238.330856][T16721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2069'. [ 238.334518][T16721] erspan0: left promiscuous mode [ 238.456358][ T61] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 238.466342][ T75] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 238.487047][ T75] usb 6-1: device descriptor read/8, error -71 [ 238.596270][ T61] usb 9-1: device descriptor read/64, error -71 [ 238.716262][ T6017] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 238.716435][ T61] usb usb9-port1: attempt power cycle [ 238.726240][ T75] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 238.746848][ T75] usb 6-1: device descriptor read/8, error -71 [ 238.846225][ T6017] usb 8-1: device descriptor read/64, error -71 [ 238.856717][ T75] usb usb6-port1: unable to enumerate USB device [ 239.018992][T16730] netlink: 'syz.6.2073': attribute type 30 has an invalid length. [ 239.032738][T16730] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.056533][ T61] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 239.077208][ T61] usb 9-1: device descriptor read/8, error -71 [ 239.096191][ T6017] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 239.226212][ T6017] usb 8-1: device descriptor read/64, error -71 [ 239.316204][ T61] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 239.336514][ T6017] usb usb8-port1: attempt power cycle [ 239.336603][ T61] usb 9-1: device descriptor read/8, error -71 [ 239.448391][ T61] usb usb9-port1: unable to enumerate USB device [ 239.686379][ T6017] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 239.716884][ T6017] usb 8-1: device descriptor read/8, error -71 [ 239.956325][ T6017] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 239.978236][ T6017] usb 8-1: device descriptor read/8, error -71 [ 240.087377][ T6017] usb usb8-port1: unable to enumerate USB device [ 240.256513][ C1] ------------[ cut here ]------------ [ 240.256707][ C0] ------------[ cut here ]------------ [ 240.259554][ C1] ODEBUG: free active (active state 0) object: ffff88802e152c90 object type: timer_list hint: rose_t0timer_expiry+0x0/0x150 [ 240.261899][ C0] ODEBUG: free active (active state 0) object: ffff888036de9090 object type: timer_list hint: rose_t0timer_expiry+0x0/0x150 [ 240.261941][ C0] WARNING: lib/debugobjects.c:612 at debug_print_object+0x18e/0x2a0, CPU#0: swapper/0/0 [ 240.266947][ C1] WARNING: lib/debugobjects.c:612 at debug_print_object+0x18e/0x2a0, CPU#1: swapper/1/0 [ 240.272298][ C0] Modules linked in: [ 240.275945][ C1] Modules linked in: [ 240.275970][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 240.275997][ C1] Tainted: [L]=SOFTLOCKUP [ 240.276004][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 240.276015][ C1] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 240.280978][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 240.281013][ C0] Tainted: [L]=SOFTLOCKUP [ 240.281022][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 240.281034][ C0] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 240.281057][ C0] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d d2 1e d2 0b 41 56 48 8b 14 dd 60 47 fa 8b 4c 89 e6 <67> 48 0f b9 3a 58 83 05 7c 06 c8 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 240.281074][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 240.281093][ C0] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 240.281106][ C0] RDX: ffffffff8bfa46a0 RSI: ffffffff8bfa42c0 RDI: ffffffff90c194c0 [ 240.281120][ C0] RBP: 0000000000000002 R08: ffff888036de9090 R09: ffffffff8b92b900 [ 240.281133][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8bfa42c0 [ 240.281146][ C0] R13: ffffffff8b92b940 R14: ffffffff8a660f80 R15: ffffc90000007b18 [ 240.281160][ C0] FS: 0000000000000000(0000) GS:ffff8880d65dc000(0000) knlGS:0000000000000000 [ 240.281192][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 240.282876][ C1] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d d2 1e d2 0b 41 56 48 8b 14 dd 60 47 fa 8b 4c 89 e6 <67> 48 0f b9 3a 58 83 05 7c 06 c8 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 240.284512][ C0] CR2: 00007efe98bccd58 CR3: 000000002a1c4000 CR4: 0000000000352ef0 [ 240.288446][ C1] RSP: 0018:ffffc900006a0a18 EFLAGS: 00010246 [ 240.290390][ C0] Call Trace: [ 240.293827][ C1] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 240.296350][ C0] [ 240.300053][ C1] RDX: ffffffff8bfa46a0 RSI: ffffffff8bfa42c0 RDI: ffffffff90c194c0 [ 240.301877][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 240.305445][ C1] RBP: 0000000000000001 R08: ffff88802e152c90 R09: ffffffff8b92b900 [ 240.305464][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8bfa42c0 [ 240.305476][ C1] R13: ffffffff8b92b940 R14: ffffffff8a660f80 R15: ffffc900006a0b18 [ 240.305489][ C1] FS: 0000000000000000(0000) GS:ffff8880d66dc000(0000) knlGS:0000000000000000 [ 240.305522][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 240.308033][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 240.315223][ C1] CR2: 0000001b30b04ff8 CR3: 000000002778d000 CR4: 0000000000352ef0 [ 240.317875][ C0] debug_check_no_obj_freed+0x4da/0x630 [ 240.321116][ C1] Call Trace: [ 240.324443][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 240.327620][ C1] [ 240.327630][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 240.330930][ C0] ? mark_held_locks+0x40/0x70 [ 240.334197][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 240.338018][ C0] ? kasan_quarantine_put+0x104/0x240 [ 240.340363][ C1] debug_check_no_obj_freed+0x4da/0x630 [ 240.348239][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 240.351421][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 240.353996][ C0] kfree+0x34c/0x690 [ 240.355415][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 240.358855][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 240.359868][ C1] kfree+0x34c/0x690 [ 240.363192][ C0] ? rose_timer_expiry+0x53f/0x630 [ 240.364975][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 240.368423][ C0] ? rose_timer_expiry+0x53f/0x630 [ 240.371129][ C1] ? rose_timer_expiry+0x53f/0x630 [ 240.371160][ C1] ? rose_timer_expiry+0x53f/0x630 [ 240.374509][ C0] rose_timer_expiry+0x53f/0x630 [ 240.377759][ C1] rose_timer_expiry+0x53f/0x630 [ 240.380448][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 240.382388][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 240.385795][ C0] call_timer_fn+0x19a/0x590 [ 240.388113][ C1] call_timer_fn+0x19a/0x590 [ 240.389553][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 240.391762][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 240.393020][ C0] ? __run_timers+0x747/0xac0 [ 240.395331][ C1] ? find_held_lock+0x2b/0x80 [ 240.397444][ C0] ? __run_timers+0x747/0xac0 [ 240.399533][ C1] ? __run_timers+0x747/0xac0 [ 240.401772][ C0] ? rcu_is_watching+0x12/0xc0 [ 240.403898][ C1] ? __run_timers+0x747/0xac0 [ 240.406165][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 240.408654][ C1] ? rcu_is_watching+0x12/0xc0 [ 240.410409][ C0] __run_timers+0x757/0xac0 [ 240.412261][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 240.414557][ C0] ? __pfx___run_timers+0x10/0x10 [ 240.415848][ C1] __run_timers+0x757/0xac0 [ 240.418127][ C0] run_timer_base+0x114/0x190 [ 240.420044][ C1] ? __pfx___run_timers+0x10/0x10 [ 240.422196][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 240.424281][ C1] run_timer_base+0x114/0x190 [ 240.424306][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 240.426550][ C0] ? rcu_is_watching+0x12/0xc0 [ 240.428501][ C1] ? rcu_is_watching+0x12/0xc0 [ 240.430602][ C0] run_timer_softirq+0x1a/0x50 [ 240.432560][ C1] run_timer_softirq+0x1a/0x50 [ 240.434811][ C0] handle_softirqs+0x1ea/0x910 [ 240.436787][ C1] handle_softirqs+0x1ea/0x910 [ 240.438778][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 240.440455][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 240.442545][ C0] __irq_exit_rcu+0xef/0x150 [ 240.444441][ C1] __irq_exit_rcu+0xef/0x150 [ 240.446471][ C0] irq_exit_rcu+0x9/0x30 [ 240.448214][ C1] irq_exit_rcu+0x9/0x30 [ 240.450262][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 240.452042][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 240.454011][ C0] [ 240.456275][ C1] [ 240.458316][ C0] [ 240.459950][ C1] [ 240.462237][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 240.463850][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 240.463869][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 240.463883][ C1] Code: 76 78 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 83 cc 14 00 fb f4 fc 31 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 240.463895][ C1] RSP: 0018:ffffc90000177df0 EFLAGS: 00000202 [ 240.465845][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 240.465876][ C0] Code: 76 78 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 83 cc 14 00 fb f4 fc 31 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 240.467867][ C1] [ 240.467876][ C1] RAX: 00000000002ac143 RBX: ffff88801e2b24c0 RCX: ffffffff8b76b4b5 [ 240.470032][ C0] RSP: 0018:ffffffff8e207e00 EFLAGS: 00000202 [ 240.471798][ C1] RDX: 0000000000000000 RSI: ffffffff8dc45476 RDI: ffffffff8bfa35a0 [ 240.473819][ C0] [ 240.475919][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: ffffed100d4a673d [ 240.475932][ C1] R10: ffff88806a5339eb R11: 0000000000000000 R12: ffffed1003c56498 [ 240.475939][ C1] R13: 0000000000000001 R14: ffffffff90b74bd0 R15: 0000000000000000 [ 240.475952][ C1] ? ct_kernel_exit+0x125/0x180 [ 240.475973][ C1] default_idle+0x9/0x10 [ 240.478067][ C0] RAX: 00000000002b52d3 RBX: ffffffff8e297ac0 RCX: ffffffff8b76b4b5 [ 240.480015][ C1] default_idle_call+0x6c/0xb0 [ 240.482074][ C0] RDX: 0000000000000000 RSI: ffffffff8dc45476 RDI: ffffffff8bfa35a0 [ 240.483662][ C1] do_idle+0x35b/0x4b0 [ 240.485675][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed100d48673d [ 240.487532][ C1] ? __pfx_do_idle+0x10/0x10 [ 240.489815][ C0] R10: ffff88806a4339eb R11: 0000000000000000 R12: fffffbfff1c52f58 [ 240.491886][ C1] ? do_idle+0x2b8/0x4b0 [ 240.493867][ C0] R13: 0000000000000000 R14: ffffffff90b74bd0 R15: 0000000000000000 [ 240.495714][ C1] cpu_startup_entry+0x4f/0x60 [ 240.497645][ C0] ? ct_kernel_exit+0x125/0x180 [ 240.499220][ C1] start_secondary+0x21d/0x2d0 [ 240.501566][ C0] default_idle+0x9/0x10 [ 240.503879][ C1] ? __pfx_start_secondary+0x10/0x10 [ 240.503911][ C1] common_startup_64+0x13e/0x148 [ 240.505193][ C0] default_idle_call+0x6c/0xb0 [ 240.506221][ C1] [ 240.506231][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 240.506241][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 240.506257][ C1] Tainted: [L]=SOFTLOCKUP [ 240.506262][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 240.506268][ C1] Call Trace: [ 240.506273][ C1] [ 240.506278][ C1] dump_stack_lvl+0x100/0x190 [ 240.506295][ C1] vpanic+0x20d/0x630 [ 240.506308][ C1] panic+0xd1/0xd1 [ 240.506317][ C1] ? __pfx_panic+0x10/0x10 [ 240.506332][ C1] ? check_panic_on_warn+0x1f/0x90 [ 240.506346][ C1] check_panic_on_warn.cold+0x19/0x34 [ 240.506358][ C1] ? debug_print_object+0x18e/0x2a0 [ 240.506369][ C1] __warn.cold+0x191/0x2f8 [ 240.506382][ C1] __report_bug+0x296/0x3d0 [ 240.506392][ C1] ? debug_print_object+0x18e/0x2a0 [ 240.506404][ C1] ? __pfx___report_bug+0x10/0x10 [ 240.506422][ C1] report_bug_entry+0xe1/0x290 [ 240.506432][ C1] ? debug_print_object+0x19b/0x2a0 [ 240.506444][ C1] handle_bug+0x1c9/0x2a0 [ 240.506457][ C1] exc_invalid_op+0x17/0x50 [ 240.506471][ C1] asm_exc_invalid_op+0x1a/0x20 [ 240.506482][ C1] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 240.506494][ C1] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d d2 1e d2 0b 41 56 48 8b 14 dd 60 47 fa 8b 4c 89 e6 <67> 48 0f b9 3a 58 83 05 7c 06 c8 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 240.506505][ C1] RSP: 0018:ffffc900006a0a18 EFLAGS: 00010246 [ 240.506515][ C1] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 240.506522][ C1] RDX: ffffffff8bfa46a0 RSI: ffffffff8bfa42c0 RDI: ffffffff90c194c0 [ 240.506530][ C1] RBP: 0000000000000001 R08: ffff88802e152c90 R09: ffffffff8b92b900 [ 240.506538][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8bfa42c0 [ 240.506544][ C1] R13: ffffffff8b92b940 R14: ffffffff8a660f80 R15: ffffc900006a0b18 [ 240.506552][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 240.506576][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 240.506592][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 240.506605][ C1] debug_check_no_obj_freed+0x4da/0x630 [ 240.506622][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 240.506637][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 240.506654][ C1] kfree+0x34c/0x690 [ 240.506664][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 240.506677][ C1] ? rose_timer_expiry+0x53f/0x630 [ 240.506691][ C1] ? rose_timer_expiry+0x53f/0x630 [ 240.506702][ C1] rose_timer_expiry+0x53f/0x630 [ 240.506715][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 240.506732][ C1] call_timer_fn+0x19a/0x590 [ 240.506749][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 240.506765][ C1] ? find_held_lock+0x2b/0x80 [ 240.506781][ C1] ? __run_timers+0x747/0xac0 [ 240.506791][ C1] ? __run_timers+0x747/0xac0 [ 240.506801][ C1] ? rcu_is_watching+0x12/0xc0 [ 240.506818][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 240.506829][ C1] __run_timers+0x757/0xac0 [ 240.506843][ C1] ? __pfx___run_timers+0x10/0x10 [ 240.506861][ C1] run_timer_base+0x114/0x190 [ 240.506871][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 240.506882][ C1] ? rcu_is_watching+0x12/0xc0 [ 240.506897][ C1] run_timer_softirq+0x1a/0x50 [ 240.506907][ C1] handle_softirqs+0x1ea/0x910 [ 240.506924][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 240.506942][ C1] __irq_exit_rcu+0xef/0x150 [ 240.506957][ C1] irq_exit_rcu+0x9/0x30 [ 240.506972][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 240.506984][ C1] [ 240.506988][ C1] [ 240.506992][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 240.507004][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 240.507016][ C1] Code: 76 78 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 83 cc 14 00 fb f4 fc 31 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 240.507027][ C1] RSP: 0018:ffffc90000177df0 EFLAGS: 00000202 [ 240.507036][ C1] RAX: 00000000002ac143 RBX: ffff88801e2b24c0 RCX: ffffffff8b76b4b5 [ 240.507043][ C1] RDX: 0000000000000000 RSI: ffffffff8dc45476 RDI: ffffffff8bfa35a0 [ 240.507050][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: ffffed100d4a673d [ 240.507057][ C1] R10: ffff88806a5339eb R11: 0000000000000000 R12: ffffed1003c56498 [ 240.507064][ C1] R13: 0000000000000001 R14: ffffffff90b74bd0 R15: 0000000000000000 [ 240.507074][ C1] ? ct_kernel_exit+0x125/0x180 [ 240.507089][ C1] default_idle+0x9/0x10 [ 240.507101][ C1] default_idle_call+0x6c/0xb0 [ 240.507115][ C1] do_idle+0x35b/0x4b0 [ 240.507130][ C1] ? __pfx_do_idle+0x10/0x10 [ 240.507145][ C1] ? do_idle+0x2b8/0x4b0 [ 240.507162][ C1] cpu_startup_entry+0x4f/0x60 [ 240.507177][ C1] start_secondary+0x21d/0x2d0 [ 240.507188][ C1] ? __pfx_start_secondary+0x10/0x10 [ 240.507203][ C1] common_startup_64+0x13e/0x148 [ 240.507223][ C1] [ 240.508167][ C1] Kernel Offset: disabled