last executing test programs: 3m17.979909499s ago: executing program 1 (id=254): openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x188ec211, 0x200000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000540)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x1, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dce, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x800003, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0xa, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x1a, 0x8, 0x8f, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xffffffff, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x58f, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0xffffffff, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x0, 0x9, 0xffffffff, 0x5, 0x81, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x1, 0x400, 0x102, 0x1, 0x41, 0x4, 0xee4b, 0x2000004, 0x1, 0x4000000c, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x8, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1001, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x1000, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000a40)=ANY=[@ANYBLOB='f'], 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000b00)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000c00)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000c40)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000c80)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000080)={0x7, 0x1e, 0x4, 0x90, "02413ed073c8bb316e5e1aae05c71e03ec12d49bc1b71a373274effbdb2828a3"}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f00000001c0)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40280, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r12 = gettid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x24, r9, 0xa23, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r12}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008880}, 0x20000084) 3m17.669618215s ago: executing program 1 (id=255): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x4b) mount(0x0, &(0x7f00000005c0)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./proc/sys/net/ipv4/conf/default/accept_source_route\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000001140)='./debug\x00', &(0x7f0000001180)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000011c0)='./debug/split_huge_pages\x00', 0x1, 0x0) write(r1, &(0x7f0000001200)='/,0x000000,0x4', 0xe) pwritev(r0, &(0x7f0000000680)=[{&(0x7f00000006c0)="0f", 0x1}], 0x1, 0x1000, 0x7) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newtaction={0x894, 0x30, 0xfbed, 0x70bd29, 0x25dfdbff, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4000, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x6, 0x0, 0x3, 0x4, 0x2, 0x2, 0x4000, 0x0, 0x0, 0x9, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffc, 0x3, 0x5f41fde7, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x6, 0x0, 0x5, 0x7ff, 0x0, 0x4e16, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x8001, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffb, 0x1, 0xfffffff8, 0x100000, 0x2, 0xfffffffd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x75d, 0x0, 0x0, 0xf, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x3bf0, 0x2, 0x0, 0x0, 0x0, 0x835e, 0x0, 0x10, 0x0, 0x1, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x2, 0x1000, 0x0, 0x0, 0x9, 0x3, 0xa088, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x87, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xb7fe6bd0, 0x6, 0x1ffffffe, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000008, 0x0, 0xaa84911, 0x5, 0x0, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1ff, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0xfff, 0x1, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2b4, 0x0, 0xfffffffc, 0x200, 0x0, 0x0, 0xffffffff, 0x7, 0x0, 0x0, 0x0, 0x3a4f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x800007, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x0, 0x40000, 0x4, 0x2, 0x4, 0x0, 0x0, 0x0, 0x894e, 0x0, 0x2, 0x0, 0x9, 0x0, 0x17a00, 0x0, 0x5, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8db, 0xffffffff, 0x0, 0x9, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x10, 0x0, 0x0, 0xf, 0x0, 0x7c, 0x0, 0x5, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xcd9, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x0, 0x10000, 0x0, 0x8001, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x4000, 0x10, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0xfffffff9, 0xfffffffe, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x319e, 0xfb18, 0x6, 0x9, 0x0, 0x484a, 0x0, 0x2, 0x0, 0x6, 0x0, 0xfffffffc, 0x9, 0x4, 0x20000000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfbfffffe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x5a62, 0x0, 0x0, 0xffffffff, 0x0, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x103, 0xfffc, 0x5}, {0x5, 0x0, 0x0, 0x9, 0x0, 0xfffffffc}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x2}}}}]}]}, 0x894}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x438, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x368, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvfrom$inet6(r4, &(0x7f00000013c0)=""/4096, 0x1000, 0x7632550300efebbb, &(0x7f00000023c0)={0xa, 0x4e22, 0x4, @private0, 0xfffffff7}, 0x1c) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001240)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001280)='./dev\x00', &(0x7f00000012c0)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./dev/mtdblock0\x00', 0x42, 0x1ff) write$FUSE_INIT(r6, &(0x7f0000001340)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x3, 0x4802000, 0x8000, 0x0, 0x2, 0x3, 0x0, 0x0, 0x8, 0x5}}, 0x50) close(r6) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/xt_recent/syz0\x00', 0x2, 0x3) ioctl$sock_bt_hci(r0, 0x400448dc, &(0x7f0000001040)="3658208b4eccdbffab05327e85608ad7655adf47de99dda01f222eeabc4027f989762d7dcdc32abccdc475bdc50d84892dc8b3581b99d8f2873bfa6fcb95504c295731b8537a3884e413ba4046efd833e2ab4e1b7e74c45a0ed2bcc2103041c986bf252a9f49879242077d0d0525a82bd1c668c64996d1a861ec98e8acdc85f42aff1ef46f17123cefeded73bc5e2c76e978b18dcfd063cc65b68f") write$P9_RREADDIR(r7, &(0x7f0000000000)={0xb, 0x29, 0x1, {0xd43}}, 0xb) 3m17.607402126s ago: executing program 1 (id=257): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000100001042dbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0024000000419cee140012800b00010067656e3e50a985b564d9b58e7413baf60c5f39eddf99533578e6a47057bd54af7b06eacfd10f58c270a6bc4417dec12c41f42943e99080d265694ef9ea45b4e1d805000000b314df5a4e102fff1f740000000000000000000000000059cc4ceb1e0084e7ded790e79d01cb7115f0720a376a5b27c1e876a7323f15aab47bb0879191bed664ee30f4b76653c7858b252c1cdf2e", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x4000000) 3m17.607280384s ago: executing program 1 (id=258): symlinkat(&(0x7f00000006c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000940)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000980)='./bus\x00', &(0x7f00000009c0), 0xa14000, &(0x7f0000000a00)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000a40)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000b00)='./file7/file0\x00', 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f0000000000)) rename(&(0x7f0000000080)='./file7/file0\x00', &(0x7f0000000300)='./file0\x00') 3m17.509215769s ago: executing program 1 (id=259): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRES8=r0, @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x2000}, 0x40090) memfd_create(&(0x7f00000005c0)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) r1 = add_key$user(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, &(0x7f0000000780), 0x0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000880)={r1, r2, r1}, &(0x7f00000008c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000940), 0x20042, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04330a"], 0xd) fsopen(0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x858}, 0x20004804) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)={0x14, 0x9, 0x6, 0x201, 0x70bd2c, 0x25dfdbfb, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4048040}, 0x4004881) r6 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000a80)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newlink={0x48, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4801, 0x15335}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4c011}, 0x44830) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000601000d00000000000000000000001004000000000000000000000903000000000003006100"], 0x0, 0x52}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80800) ioctl$sock_inet_SIOCGIFDSTADDR(r6, 0x8917, &(0x7f0000000100)={'macsec0\x00', {0x2, 0x0, @initdev}}) sendmsg$nl_route(r7, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_delneigh={0x28, 0x1e, 0x100, 0x0, 0x0, {0x7, 0x0, 0x0, r9, 0x0, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) 3m17.266479276s ago: executing program 1 (id=261): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1e9) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='3', 0x4e) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4}, 0x20050800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x2c, r3, 0x105, 0x70bd25, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x40006) getgroups(0x0, 0x0) syz_open_dev$evdev(0x0, 0x6, 0x458601) capset(&(0x7f0000000540)={0x20071026}, &(0x7f0000000580)={0x0, 0x2, 0x3, 0x0, 0x500000}) r4 = syz_clone3(&(0x7f00000005c0)={0x180801400, &(0x7f0000000640), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_procfs(0x0, &(0x7f0000000680)='fd/3\x00') ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) write$P9_RGETLOCK(r0, &(0x7f0000000400)={0x21, 0x37, 0x2, {0x0, 0x4, 0x5, r4, 0x3, 'lo\x00'}}, 0x21) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) 3m17.195077122s ago: executing program 32 (id=261): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1e9) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='3', 0x4e) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4}, 0x20050800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x2c, r3, 0x105, 0x70bd25, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x40006) getgroups(0x0, 0x0) syz_open_dev$evdev(0x0, 0x6, 0x458601) capset(&(0x7f0000000540)={0x20071026}, &(0x7f0000000580)={0x0, 0x2, 0x3, 0x0, 0x500000}) r4 = syz_clone3(&(0x7f00000005c0)={0x180801400, &(0x7f0000000640), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_procfs(0x0, &(0x7f0000000680)='fd/3\x00') ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) write$P9_RGETLOCK(r0, &(0x7f0000000400)={0x21, 0x37, 0x2, {0x0, 0x4, 0x5, r4, 0x3, 'lo\x00'}}, 0x21) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) 3m12.548466704s ago: executing program 0 (id=309): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x40, 0x122) mkdirat(r0, &(0x7f0000000900)='./file0\x00', 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x38}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x20, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000240)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)=0x0) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r10) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000000440)=0x0) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r12], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000540)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000580)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000005c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000600)=0x0) r17 = openat$nci(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) r18 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r19 = syz_genetlink_get_family_id$nfc(&(0x7f0000000680), r18) ioctl$IOCTL_GET_NCIDEV_IDX(r17, 0x0, &(0x7f00000006c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r18, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r19, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r20], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000880)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x54, r6, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r20}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0xc001) 3m9.395772597s ago: executing program 0 (id=331): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="0000000007a46762b6822de098115c5d461948be000490ba9c210417a33c6968061a206a809a50df783323e9229919acdc30a14af854cc2d2f966961f623ff7e64c42d3382caaa0a82dd6c9a1799b959a197de448a3ecfac4af8a5eebdf93be429f8267694c900a888ab00d48419f35b04daef4f5333acbb9dc73402ed17af3c10f839111076eb", @ANYRES16=r2, @ANYBLOB="27082abd7000fedbdf25450000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000054}, 0x800) r3 = memfd_create(&(0x7f00000004c0)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000500)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl(r4, 0x40186f40, &(0x7f00000002c0)) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x2080, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000d40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d00)={&(0x7f00000006c0)={0x61c, 0x10, 0x400, 0x70bd26, 0x25dfdbfd, {0x2}, [@nested={0x106, 0xb6, 0x0, 0x1, [@nested={0x4, 0x9a}, @generic="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"]}, @generic="36d3cd0f9e28e5dde51cc0ea30c3ec236767d8555f2bd330f9dda16a18c56e68e209480b9a34481575bc38c6a14c707a01a7325e25219643802a3391ca5d5b2457da8896d432b56645caa50c643c26e1df124c1787aacaa0998bd8e283c63aaffdf505721ad6e2a12c0e0fe360d4292a163180363e9771c2a0d4219de72f221dd2928117f2e759c1781ca209021f450f1ea6b194181b1f1f5c1a4991d4f7505c06975cac672991f2d0cc00618987909748d22afd208923b3147896b0981b80ac86fdbfd0a8", @nested={0x14, 0x11c, 0x0, 0x1, [@typed={0x4, 0x10c}, @typed={0xc, 0x169, 0x0, 0x0, @str='-%\']-(^\x00'}]}, @nested={0x38, 0x2b, 0x0, 0x1, [@nested={0x4, 0xef}, @typed={0x8, 0xb4, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x15f, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @nested={0x4, 0x8d}, @typed={0x12, 0x3e, 0x0, 0x0, @str='/dev/ubi_ctrl\x00'}, @typed={0x8, 0x55, 0x0, 0x0, @fd=r5}]}, @nested={0x106, 0xea, 0x0, 0x1, [@generic="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", @nested={0x4, 0x9b}]}, @nested={0x197, 0x14b, 0x0, 0x1, [@typed={0x4, 0x137}, @typed={0x13, 0x110, 0x0, 0x0, @binary="3b5aa8e33f0677cf1d911d6a11ef24"}, @generic="604390fc3cca3ba99108761a35ad04732882fefa7ac9c53c5743ba91e30f1f66ad79baca72e8da75266227ac6fbfd7cb20b5824f1e16d429b08e5dfa9db4479a7c82b4490e301ee58e9b3a1f645c64e43be834c02142a03ad1f8c9ac3b343f56e4f88ddc4689812a8e59aa466f9875f12beeac42893884036851ca39b1f7e6db6145d7501d6ea873656e8dc50a63a2f042", @typed={0x8, 0x63, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x14c}, @generic="ef1643fa59886e17cef9f780355bf09eba43e74443a0d53a07841e0bfa5a4743eccd90f167759d74db43a46c0bbe33f9f9a3b016144a7db0ab139192d185070fe66b80b74acdd2355fb8ce1f37d891c4f8d101be641500921cec7349546f8a831af0ed7917fbae074178b0d4ce7af73994176a3a4bfa1216ddc8ce9e9bc68d943744d3b952384a3426c40e2cc4c25bc3d87f800703e8edd728838ce97d1b955eaa5b8eabf5db72924fb216e412c1997bcd6440c751724beaf172e1699d6ea5675671ab913ca0a6b04dfe1c5c1129ea37cbc556e27b05b78656f059a49b8f"]}, @nested={0x14b, 0x2d, 0x0, 0x1, [@generic="5280fe1ec5c4d9142bae90ad392e5cafde841680a14a377cc8d2cb1748e9f958a09ece24b60f41dd72730b558c08ca4325ac0e974c0f9b2c54ef9a621acd650c1bd5c3cc9ebb740ff118237ce3cc1302061519d241a470834d429f38ba59b5d37a24088bd6a41d5b314b40d909728e69128729e6f4da4168611c9aa8719867f9867b65f054182a9a7f292b2e6c6e", @generic="56bb878f7e03ab4164bd33b42073e2cc7a13f1e51569dc48868ecfa84e323b927955f5e992f728ad9c3acaee1e49c0ab929b7596373cfe528dc8fcb78a0d95bf94f696297c1e952dddcd01914817172870d93f4c21b79ec7531f0dd5e77cc6ab3955e29a80930a63b1240a38f3211e4393d8b1fc4f420bbda718bb6c20c6fcc213a241beff95d2ded8eac4ed8f13543cbacb9f01cbd890270e42648d3915e805e22806a8ba7892a8ac24023b68690f1a75c97d3fbf", @nested={0x4, 0x152}]}]}, 0x61c}, 0x1, 0x0, 0x0, 0x800}, 0x20000040) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480010001004009868609446594f10e40eb1168cb30000000000000004000000000000", @ANYRES32=0x0, @ANYBLOB="0040000044400200280012800b00010067656e65766500001800028014000700fe8000000000000000000000000000aa"], 0x48}}, 0x2000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000600000006868100000000009500000027000000006dde70981162a374236e4dc75f8b49418fa6626f92bcb1284bb9c6dbedf2fd31887a87a4e52d11c6286e432d53a97857749d7c084af3f721e27e1fa4b6fbc7", @ANYRES8=r3, @ANYBLOB="41342cb7a27226fa6dae9917dd2427d8a92cf8c22b", @ANYRES16=r4, @ANYRESDEC=r1], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x79d8}, 0x94) 3m9.306219054s ago: executing program 0 (id=334): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000140)=0xb, 0xffffffffffffff6e) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a23e00f9e505bbc964a0d3880bf0104a0a0a2f0d311efee16c7e85a0125b38f961918f99bf9c2c146e42327f178dc2b3ca936e7f7fff01f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853a0e9885cefbfca3f27cc", 0xffffffffffffff13, 0x40045, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000380)="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", 0x1b5}, {&(0x7f0000000540)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee5604080000005f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88cf1b612298d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e519e8", 0xa7}, {&(0x7f0000000600)="0b0ec2a1e3fc84788972f461fec27348bd54a57f68a85a0200ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b84359e76eee93584aad3f751172c449fb00"/165, 0xa5}, {&(0x7f0000000840)="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", 0xbd5}, {&(0x7f0000001440)="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", 0x12a}], 0x5}}], 0x1, 0x40c0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001580)={&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000002700)=""/4093, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f00000025c0)=0x78) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000002600)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x7ffffffe, 0x0}, &(0x7f0000002640)=0x40) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) fsetxattr(r1, &(0x7f0000002680)=@random={'osx.', '\\+.\x05\xd3\\}&[:\x00'}, &(0x7f00000026c0)='\x00', 0x1, 0x1) mount(&(0x7f0000000080)=@md0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)='smb3\x00', 0x208001, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x4, 0x0, {0x0, 0x1000000}}]}}, 0x0, 0x32, 0x0, 0x1}, 0x20) r2 = syz_open_dev$mtd(&(0x7f0000000700), 0x0, 0x2) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000740)={0x2, 0x0, 0x98, &(0x7f0000000780)={0x4, 0x10000, 0x1}}) 3m9.304196279s ago: executing program 0 (id=341): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540), 0x2210088, 0x0) chdir(&(0x7f0000000580)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) syz_emit_ethernet(0x3e, &(0x7f0000002680)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @val={@val={0x88a8, 0x0, 0x1, 0x3}, {0x8100, 0x4, 0x0, 0x3}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x28, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) close(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000026c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000002700)='./proc\x00', &(0x7f0000002740)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002780)='./proc/kmsg\x00', 0x800, 0x0) read(r1, 0x0, 0x0) openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r2 = eventfd2(0x2, 0x801) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x0, r2}) setns(0xc9, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x64) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f00000002c0)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4) ioctl$XFS_IOC_FSGEOMETRY_V4(r2, 0x8070587c, &(0x7f0000000380)) connect$inet(r5, &(0x7f0000000340)={0x2, 0x0, @remote}, 0x10) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMODE(r7, 0x4bfa, &(0x7f0000000400)) write(r6, &(0x7f0000000600)='sessname=s0 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) 3m5.950644132s ago: executing program 0 (id=336): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) setxattr$security_capability(&(0x7f0000000540)='mtd0\x00', 0x0, &(0x7f0000000580)=@v3={0x3000000, [{0x962b, 0x7}, {0xfffffff1, 0x5}]}, 0x18, 0x1) mount(&(0x7f00000005c0)=@filename='mtd0\x00', &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000680)='./file0\x00') getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f00000006c0)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000980)=0xf) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f00000009c0)={0x1000, 0x3, 0x3, 0x7, 0x0, "d942c49f2087666cbc9a1fa593d511d35ae8e3", 0x3, 0x400}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x83, 0x0, &(0x7f0000000700)) openat(0xffffffffffffff9c, &(0x7f0000000740)='./file2\x00', 0x101042, 0x15) syz_clone(0x2000, &(0x7f0000000780), 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mknod$loop(&(0x7f00000007c0)='./file0\x00', 0xfff, 0x1) execve(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x143102) writev(r1, &(0x7f0000000a40)=[{&(0x7f0000000a80)="94", 0xf000}, {0x0}], 0x2) write(r1, 0x0, 0x0) link(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) r2 = syz_usb_connect(0x5, 0x58, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, &(0x7f0000000bc0)={0x14, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000000a00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001600)={0x14, 0x0, &(0x7f0000000d40)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000100)={0x40, 0x8, 0x8, "003cb3a4aa50323f"}, 0x0, 0x0, 0x0, 0x0}) socket$can_raw(0x1d, 0x3, 0x1) syz_usb_control_io(r2, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0x14, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open$dir(&(0x7f0000000000)='./file0\x00', 0x80000, 0x0) 3m5.950033215s ago: executing program 0 (id=339): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000400), 0x2, 0xe}}, 0x20) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0xc138fd03, &(0x7f00000003c0)="04000000000000000000000038010000000000000200000000000000fffffe000000000000000fffff000000000000002e2e364e2229") 3m5.949831865s ago: executing program 33 (id=339): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000400), 0x2, 0xe}}, 0x20) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0xc138fd03, &(0x7f00000003c0)="04000000000000000000000038010000000000000200000000000000fffffe000000000000000fffff000000000000002e2e364e2229") 2m5.209592549s ago: executing program 5 (id=928): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x15, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg(r1, &(0x7f00000003c0)={&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x2, @multicast, 'tunl0\x00'}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)="d2704e4486ea43074a8b", 0xa}, {&(0x7f00000000c0)="16021629a5a5ab17c27cf0b41676e7ba668bc85b46d96697af71a2277df6a632f2273871d21b6db69982837edfac182c3ff674e556c34de748a8fadb4c863bed507ffcfa2ecb0b4b93b48b7f619f8cfdea09ad45c8691df743c743c05de1f5d37fd3dd3c445ff819b1e4f7f607816025765d5de613b62b09cbda7813ba1e2d1d93360a179e7ecf9870aa4b97dec84223b9ab7d303007179a6ec7e68500d2972f0578bd0c799e39ff7fe3eef837ed11ac294a0975bf965c151d7cdccab82cc628d9dc908339e3ca6e0b09110d45b8282ca4617b4da814ab9671e59845fba8de31ad006c82a2f1e7b3658b193b74ad63d8d38d96ddff9c5033fc", 0xf9}], 0x2, &(0x7f0000000200)=[{0xf0, 0x102, 0x2, "6e3c967c8313129eecc6fa626053b37f06d41f2afa90f0e1bc54324e350a482c1c96c12a3630e3a58568b37a043421baf21e54f4fbea423a3ae6abdf3f6ed8630139ace0afc22b5c18721f4c6e44cee983815d4d124327229e666cb1bb63b5175e8827760114c47a7840d9bf962729b7aaf507d341a004b825fae19ec337e24aae37f2b4f5d0c93c9a0d7c2cdb1915cb4b894e5c17d0b69d63edd1c9b6037548b0e99c298bd591e7df7dd381ac847b63c80d638fc3b7481b3607a0808e46fe001ad015e2f0c5c1020f1c062ab4231b3d43563b2b7dccf96e275b"}, {0x88, 0x115, 0x100, "067f135d082f0e2d818adbfda307e24e880cd6c53d46a3addb7f8af6dcb519c69c05e84e122f064c78a0f01d3c1fd6a02fde4523cecfdf65c77580556969eb2360911f10e70a5e9e70c509f61b943f8c205e199ee2ff483d31a40609c483c8d0c2a37745b81b2e83f4c3a708843883b3bb415e2e9bc4"}, {0x10, 0x101, 0x5}], 0x188}, 0x4008010) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) connect$inet(r1, &(0x7f0000000a40)={0x2, 0x15, @loopback}, 0x10) r3 = accept4(r0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x8, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)=@ocfs2_parent={0x18, 0x2, {{0x9, 0x4, 0x4}, {0x95e1, 0xffffff81, 0x1}}}, 0x0, 0x0) sendto(r3, &(0x7f0000000400)="a87fb908a9fa0a81a811bbbdba18e1a49e2d48c0affba3cdb199", 0x1a, 0x240048c1, 0x0, 0x0) 2m4.352273814s ago: executing program 5 (id=945): r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/99, 0x63}, {&(0x7f00000000c0)=""/99, 0x63}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r1, &(0x7f0000000180)="606900c113d6d674b01fbe6fdd1d1d71bda13b112698692459af3a743890d775f15d37e93420625bd41e2ac91ec9b68b4bc8eb14dd397620c9787dd5a64fdb3aa55df882f77dc1d4c051935d6106f2b82544878fae3476522cabd6921eac5783a0d759b37544fd3afe7b6c15f26252d9c0ef213c5dce8fee5d847ee0a903c0ba68efa52bacd4b08f94b1836e782091f3cdfe8dab", 0x94, 0x4, &(0x7f0000000240)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000280), 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, r3, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0x26, 0xa8, @random="a8bf812c58a60a31f55471432472fdddc47b99029c5d5279ca959bc95d47f3754479"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x54}, 0x1, 0x0, 0x0, 0x4051}, 0x4040001) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000440)={[0x9]}, 0x8) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000000480)) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x80, r3, 0x20, 0x70bd26, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x80}}, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000600)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0\x00'}) sendmsg$AUDIT_ADD_RULE(r5, &(0x7f0000000b40)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000680)={0x480, 0x3f3, 0x8, 0x70bd2c, 0x25dfdbfc, {0x1, 0x0, 0x28, [0x55a9, 0x9, 0x1, 0xab, 0x3, 0xb703, 0xfff, 0x790db1c5, 0x10000, 0x2, 0x6, 0x4, 0x8, 0x1, 0x6, 0x3, 0x3, 0x6, 0x5, 0x8, 0xb3, 0xe, 0x4, 0x81, 0x9, 0x2, 0x1c1f, 0x5, 0x4, 0x2e46, 0x4, 0x5, 0x0, 0x4, 0x25, 0x8, 0x6, 0xff, 0x3, 0x800000, 0x4, 0x4, 0x0, 0x590b, 0x4, 0x0, 0x3, 0x3, 0xc, 0x2e5c0d4b, 0x8001, 0x5a1, 0x0, 0x3, 0x846, 0x5, 0x3, 0x381d, 0x5, 0x9, 0x30, 0x52a2ea47, 0xc4, 0x3], [0xcd84, 0x8, 0xf6, 0x100, 0x7, 0x8, 0xfffffffc, 0x5, 0x8c44, 0x2, 0x1, 0x2, 0x101, 0x3, 0x4, 0x6, 0x1b14, 0x9, 0x4, 0x1, 0x6, 0x1c, 0x4, 0x6, 0xef5, 0x4, 0x9, 0x4c, 0x6, 0x800, 0xab1e, 0x7be, 0x100, 0x7, 0xe05, 0x800, 0x1, 0x6, 0x2, 0xffff, 0x0, 0x7, 0x6, 0x6, 0xffffffff, 0x2, 0x8, 0x7, 0x7, 0x6, 0x0, 0xb9, 0x0, 0x6ce, 0x2, 0x20080, 0x40, 0x0, 0x3, 0x3784, 0x7f, 0x5, 0x3, 0x81], [0x800, 0x3, 0x98c, 0x3, 0x1ff, 0x7, 0x9, 0xffff, 0xffffffda, 0x4, 0xb36, 0x6, 0x1, 0x8, 0x6, 0x6, 0x1, 0x8, 0x9, 0x3, 0x3, 0x7a, 0x80000000, 0x4, 0x969b, 0x2, 0x1, 0x3, 0x10, 0xf1e, 0x9, 0x4, 0x4, 0x5, 0xd, 0x5, 0x1f2, 0x9, 0x2, 0x5, 0x7, 0xffff7fff, 0x200, 0x5, 0x2, 0x3, 0x80, 0x200, 0xb, 0x3, 0x5, 0x2, 0x9, 0xfffffffd, 0x40, 0x89, 0xe, 0xfffffffb, 0x9, 0x9, 0x3ff, 0xfffffff1, 0x1d2c, 0x6], [0x4, 0x6, 0xfffffffb, 0x8001, 0x3, 0x4, 0x3, 0x8, 0x40, 0x40, 0x3, 0xf22, 0x9, 0x5, 0x8, 0x40, 0x8, 0xffffffff, 0x3, 0x7, 0x7, 0x0, 0x0, 0x80000000, 0x91, 0x8001, 0x8, 0xfffffffb, 0x2, 0x9, 0xfffffff4, 0xff, 0x5, 0x9, 0x9, 0x2, 0x8260, 0x4, 0x267d, 0x8, 0x9, 0x2811916e, 0x1, 0xf66, 0x2, 0x8, 0x9, 0x7fff, 0x10000, 0xc, 0x7, 0x11, 0x2252, 0x1, 0x5, 0x7ff, 0x4, 0xfffffff8, 0x9, 0xffff, 0x200, 0x7, 0x10, 0x7fffffff], 0x5d, ['0000:00:10.0\x00', 'l2_drops\x00', 'netdevsim', '/selinux/avc/cache_stats\x00', '!,^^#)+%@\x00', '-h)S\x00', 'devlink\x00', '\x00', '[+)\x00', 'netdevsim']}, [""]}, 0x480}, 0x1, 0x0, 0x0, 0x20008000}, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r4) sendmsg$NL80211_CMD_SET_WDS_PEER(r5, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x50, r6, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x2}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x40000) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS_V2(r4, 0x84, 0x25, &(0x7f0000000d00)={0x1, @in6={{0xa, 0x4e21, 0x30eefe7e, @loopback, 0x4}}, 0x54, 0x401, 0x7}, &(0x7f0000000dc0)=0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000e00)={r7, @in6={{0xa, 0x4e20, 0x8, @mcast1, 0xf}}, 0x93d5, 0x8}, 0x90) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f00), r1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000f80)={'syztnl1\x00', &(0x7f0000000f40)={'syztnl1\x00', 0x0, 0x20, 0x40, 0x401, 0xd9, {{0x6, 0x4, 0x0, 0x6, 0x18, 0x66, 0x0, 0xef, 0x6, 0x0, @multicast2, @private=0xa010102, {[@ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001040)={'syztnl2\x00', &(0x7f0000000fc0)={'ip6gre0\x00', 0x0, 0x4, 0x8, 0x4, 0xf58, 0x2, @remote, @loopback, 0x80, 0x700, 0xd, 0x9}}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000001080)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000001140)={'syztnl0\x00', &(0x7f00000010c0)={'ip6_vti0\x00', 0x0, 0x4, 0x5, 0x2, 0x10000, 0x0, @dev={0xfe, 0x80, '\x00', 0x2d}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7807, 0x1, 0x4, 0x3}}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f0000001300)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001180)={0x104, r8, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) r13 = syz_genetlink_get_family_id$fou(&(0x7f0000001380), r5) sendmsg$FOU_CMD_GET(r0, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x34, r13, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_IFINDEX={0x8, 0xb, r9}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x5b7ff943a5658e6}, 0x4) read(r0, &(0x7f0000001480)=""/190, 0xbe) r14 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_REGS(r14, 0x4090ae82, &(0x7f0000001540)={[0x2, 0x5, 0x9, 0x10, 0x4, 0x8001, 0x5, 0x5, 0x7, 0x0, 0xd4, 0x1, 0x4bfe, 0x2, 0x0, 0x13c0], 0x58000, 0x800}) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x1}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x4) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000001740)={0x0, 0x5f33, 0x8000, 0x3, 0x218, 0x0, r0}, &(0x7f0000001840)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3673, 0x1, 0x2, 0x61, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x15d9, 0x4000, 0x3, 0x3d8, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8560, 0x40000, 0x1, 0x285}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x32a7, 0x800, 0x3, 0x1dd, 0x0, r5}}], 0x4, &(0x7f0000002ac0)={0x2e, 0x3c, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, '\x00', {0x3, 0xc, 0x0, &(0x7f0000001ac0)=@buf_4k="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"}}, &(0x7f0000002b40)) 2m4.27288638s ago: executing program 5 (id=946): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/block/nullb0/queue/nr_requests\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') sendfile(r0, r0, 0x0, 0xf000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000007b40)={0x0, 0x0, &(0x7f0000007b80)={&(0x7f0000007bc0)=ANY=[@ANYBLOB="a80000002100010026bd7000fbdbdf2564010102000000000000000000b500077bede400000000000000000000800000000000014e2400004e21ffff0200a0a0", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b36b6e000100000008001f00030000005000110000000000000000000000000000000000ac1414aa000000000000000000000000640101000000000000000000000000007f00000100000000000000000000000032010000023500000a000200"], 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x90) sendfile(r1, r1, &(0x7f0000000000)=0xfffffffffffffff2, 0x0) 2m4.223156784s ago: executing program 5 (id=949): sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001380)={&(0x7f00000016c0)=ANY=[@ANYBLOB="309154490f1e9372c8924da697610000000008c803353ad6e01da7a7f3551663010400000000000000000500000906000240891400000c000480080001f0b7b8d99024c4af3221a2d5deeef826f541d0b9a03e"], 0x30}, 0x1, 0x0, 0x0, 0x11}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_open_dev$sndpcmp(&(0x7f0000001940), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000001980)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x71a0, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x9, 0xffffffff, 0x0, 0xffffffff, 0x2, 0xffffffff], [0xffffffff, 0x0, 0x80000001, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0x5}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xfffffffb}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0x80}, {0x0, 0xffffffff}, {0x8, 0xffffffff}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x40084149, &(0x7f0000001c00)=0xfb) write$P9_RSTATu(r0, 0x0, 0x6e) r1 = syz_io_uring_setup(0x208c, &(0x7f0000000200)={0x0, 0xcb14, 0x10100, 0x3, 0x4001bf}, &(0x7f0000000040), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000001480)=[{&(0x7f0000000080)=""/255, 0xff}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/74, 0x4a}, {&(0x7f0000001300)=""/125, 0x7d}, {&(0x7f0000001500)=""/215, 0xd7}], 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000001440)='./sys\x00', &(0x7f0000001600)='sysfs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$ndb(&(0x7f0000001780), 0x0, 0x181) r2 = openat(0xffffffffffffff9c, &(0x7f00000017c0)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000001800)='0', 0x1) modify_ldt$write(0x1, &(0x7f0000001840)={0x806, 0xffffffffffffffff}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000001640)='./sys/bus/serio/devices/serio1/drvctl\x00', 0x1, 0x0) write(r3, &(0x7f0000001680)='res', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000001c40)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000001c80)='./gadget\x00', &(0x7f0000001cc0)='gadgetfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000001d00)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r4, &(0x7f0000001d40)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) read$FUSE(r4, &(0x7f0000001dc0)={0x2020}, 0x2020) timer_create(0x0, &(0x7f0000003e00)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000003e40)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000003e80)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000003ec0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r6 = syz_open_dev$dri(&(0x7f00000001c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000001740)) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) 2m3.682136808s ago: executing program 5 (id=957): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) setxattr$security_capability(&(0x7f0000000540)='mtd0\x00', 0x0, &(0x7f0000000580)=@v3={0x3000000, [{0x962b, 0x7}, {0xfffffff1, 0x5}]}, 0x18, 0x1) mount(&(0x7f00000005c0)=@filename='mtd0\x00', &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000680)='./file0\x00') getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f00000006c0)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000980)=0xf) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f00000009c0)={0x1000, 0x3, 0x3, 0x7, 0x0, "d942c49f2087666cbc9a1fa593d511d35ae8e3", 0x3, 0x400}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x83, 0x0, &(0x7f0000000700)) openat(0xffffffffffffff9c, &(0x7f0000000740)='./file2\x00', 0x101042, 0x15) syz_clone(0x2000, &(0x7f0000000780), 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mknod$loop(&(0x7f00000007c0)='./file0\x00', 0xfff, 0x1) execve(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x143102) writev(r1, &(0x7f0000000a40)=[{&(0x7f0000000a80)="94", 0xf000}, {0x0}], 0x2) write(r1, 0x0, 0x0) link(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) r2 = syz_usb_connect(0x5, 0x58, &(0x7f0000000d80)=ANY=[@ANYBLOB="120110038e3ac62094064600020e061003090439d8011adab6a2a5bf066ca8080905080920000709800904e40503b956da02091508000004011c0101000000200007039a0705d15b89f26d0905090340007a0a8400000000362cac74483f1a22ffa84fea2e9211b41c484c5bcd824b0fc276dd3b1bb251b0e8e56264477cdab73586ab04ad5aaa868af86f8be55f142cfd5e17b51343aa32d474cb3f01cf52ed5678a02e480a700c3dd77257b3cc84d167dc8d05c18b50fca384fc1ed7fa9c939ae359aeb652432c39e970e96285dc5ec25c11d571a604e8038005aa6a4b3113a6c2a5b034d4e807caa340eccf04b41e0720da3d2dfcb615cf9b68b91a6d6a644804e203d2618ed93a827291a78156d7ab41ac817220774bfcd6500976d4a9270af6a77afe1a1ef396d6a0e44be8ea90157e904b5d434aa15ce88dc4f3f67b734c9d56"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, &(0x7f0000000bc0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000000a00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001600)={0x14, 0x0, &(0x7f0000000d40)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000100)={0x40, 0x8, 0x8, "003cb3a4aa50323f"}, 0x0, 0x0, 0x0, 0x0}) socket$can_raw(0x1d, 0x3, 0x1) syz_usb_control_io(r2, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0x14, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open$dir(&(0x7f0000000000)='./file0\x00', 0x80000, 0x0) 2m2.096565181s ago: executing program 5 (id=971): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000480)={[0x6000, 0xe000, 0xd000, 0x41000], 0x1, 0x2, 0xff5}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_connect(0x3, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b5e67420ac0592027388010203010902220001000000440904770001039a02000905000100000000000705e3", @ANYBLOB="8b75"], 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x4, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xfe, 0x7fffffff}]}) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0x38}}, 0x0) ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f0000000280)=""/230) 2m2.000204669s ago: executing program 34 (id=971): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000480)={[0x6000, 0xe000, 0xd000, 0x41000], 0x1, 0x2, 0xff5}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_connect(0x3, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b5e67420ac0592027388010203010902220001000000440904770001039a02000905000100000000000705e3", @ANYBLOB="8b75"], 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x4, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xfe, 0x7fffffff}]}) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0x38}}, 0x0) ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f0000000280)=""/230) 1m48.773856563s ago: executing program 6 (id=1109): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x1c, 0x2f, 0x9, 0x70bd24, 0x25dfdbfb, {0x4, 0x0, 0x20}, [@typed={0x7, 0xb, 0x0, 0x0, @str='\x05\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x20040004) 1m48.64107827s ago: executing program 6 (id=1111): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x4, 0x1, 0x0, @vifc_lcl_addr=@empty, @empty}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'pimreg\x00', 0x0}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x140, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000300)) r3 = syz_open_pts(r2, 0x2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000340)=0xf) ioctl$TCSBRK(r3, 0x400455c8, 0x2) mbind(&(0x7f0000002000/0x3000)=nil, 0x3000, 0xa002, &(0x7f0000000640)=0x3ff, 0x61, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f00000006c0)={[{0x22a, 0x2, 0xfe, 0x0, 0x0, 0x88, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x0, 0x4, 0x24, 0xfd, 0x1000000}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000780)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000380)=0x2f) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140)='E\x00', 0x2, 0x0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r8) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x120, r10, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}, @ETHTOOL_A_LINKMODES_HEADER={0x4}, @ETHTOOL_A_LINKMODES_OURS={0x100, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x68, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '#[)\'\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x72c1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'ip6tnl\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x101}, @ETHTOOL_A_BITSET_BITS={0x88, 0x3, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '*:\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x21, 0x2, '&:/%,{{&\xa7[#\xf1,\'!g%$P/.\xfe#@[2p*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'pimreg\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '##+,*:-+)*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x80}, 0x20008040) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @empty, @empty, @local}}}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$bt_hci(r9, &(0x7f0000000600)={0x1f, 0x1, 0x4}, 0x6) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4428}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m48.334714726s ago: executing program 6 (id=1117): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (fail_nth: 7) syz_usb_disconnect(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40042, 0x1) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000380)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x4b4, 0x931e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x8b, 0xc0, 0x6, {0x8, 0xb, 0x0, 0x0, 0x1, 0x5, 0x20, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5, 0x8, 0x9, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x1, 0x5, 0xaf, {0x8, 0x25, 0x1, 0x82, 0xf, 0x80, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xb, 0x1, 0x2, {0x8, 0x25, 0x1, 0x80, 0x7b832adf99b526f, 0x1, 0x9}}}}}}}}]}}, 0x0) 1m45.306205178s ago: executing program 6 (id=1154): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000004c0)={'syzkaller1\x00', 0x800}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4000002d) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./sys\x00', &(0x7f0000000740)='sysfs\x00', 0x0, 0x0) (async, rerun: 32) connect$unix(0xffffffffffffffff, &(0x7f0000000800)=@abs={0x0, 0x0, 0x4e23}, 0x6e) (async, rerun: 32) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000880), 0x318, 0x0) clock_nanosleep(0x9, 0x1, &(0x7f0000000900)={0x0, 0x989680}, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1d7) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000180), 0x40, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) (async) chdir(&(0x7f0000000200)='./bus\x00') (async) open(&(0x7f0000000240)='.\x00', 0x5d5481, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000980)={0x0, &(0x7f00000009c0)}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000a00)={0x7, &(0x7f0000000a40)=[{0x101, 0xff, 0x2, 0x3}, {0x100, 0x9, 0xfa, 0x7}, {0xb, 0x6, 0x8, 0x5}, {0x7bc, 0x9, 0xec, 0x3}, {0x3, 0x2, 0x91, 0x1e2}, {0x100, 0x9, 0x4, 0xffff}, {0x9, 0x6}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000a80)={0x1, &(0x7f0000000ac0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) r1 = socket(0xa, 0x5, 0x0) connect$inet(r1, &(0x7f0000000b00)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) (async) write(r0, &(0x7f0000000b80)='1', 0x1) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000bc0)='./sys/bus/pci/rescan\x00', 0x1, 0x47) write(r2, &(0x7f0000000c00)='1', 0x1) 1m44.445257622s ago: executing program 6 (id=1156): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x1f, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000004000000000000000300000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="00000097b11068cf68e1a2000800000085000000a5000000184200000300000000000000000000003463180001000000bf91000000000000b7020000020000008500000085"], 0x0, 0x6b4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff7}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000341000000000000001000004000000000000000700000085100000fbffffff18640000030000f9ff000000020000009500"/64], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x34, &(0x7f0000000000)=""/114}, 0xa8) 1m44.157439705s ago: executing program 6 (id=1159): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x6, 0x2) syz_emit_ethernet(0xe, &(0x7f0000000100)={@random="8ddfd5cefee4", @remote, @void, {@generic={0x1a}}}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x4, 0x1, 0x4, 0x0, 0x7}) r1 = socket(0x10, 0x3, 0x0) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1c00000021006bcd210002006e04fcff80000010000000017aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) memfd_create(0x0, 0x6) io_uring_setup(0x1bc2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x178) ptrace(0x4206, 0x0) waitid(0x1, 0x0, 0x0, 0x21000006, 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='jffs2\x00', 0x800040, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1a7) setxattr$incfs_metadata(&(0x7f0000000340)='./mnt\x00', &(0x7f0000000380), &(0x7f00000003c0)="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", 0xf8b, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001380)='./proc\x00', 0x1ff) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405668, &(0x7f0000000140)={0x1ff, 0x2, 0x1, "0000087aba10fdfffffbe30b51751bc53051a30000000000000016ebffffff00", 0x47504a4d}) 1m44.104847221s ago: executing program 35 (id=1159): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x6, 0x2) syz_emit_ethernet(0xe, &(0x7f0000000100)={@random="8ddfd5cefee4", @remote, @void, {@generic={0x1a}}}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x4, 0x1, 0x4, 0x0, 0x7}) r1 = socket(0x10, 0x3, 0x0) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1c00000021006bcd210002006e04fcff80000010000000017aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) memfd_create(0x0, 0x6) io_uring_setup(0x1bc2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x178) ptrace(0x4206, 0x0) waitid(0x1, 0x0, 0x0, 0x21000006, 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='jffs2\x00', 0x800040, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1a7) setxattr$incfs_metadata(&(0x7f0000000340)='./mnt\x00', &(0x7f0000000380), &(0x7f00000003c0)="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", 0xf8b, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001380)='./proc\x00', 0x1ff) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405668, &(0x7f0000000140)={0x1ff, 0x2, 0x1, "0000087aba10fdfffffbe30b51751bc53051a30000000000000016ebffffff00", 0x47504a4d}) 1m43.799567147s ago: executing program 4 (id=1161): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) setxattr$security_capability(&(0x7f0000000540)='mtd0\x00', 0x0, &(0x7f0000000580)=@v3={0x3000000, [{0x962b, 0x7}, {0xfffffff1, 0x5}]}, 0x18, 0x1) mount(&(0x7f00000005c0)=@filename='mtd0\x00', &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000680)='./file0\x00') getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f00000006c0)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000980)=0xf) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f00000009c0)={0x1000, 0x3, 0x3, 0x7, 0x0, "d942c49f2087666cbc9a1fa593d511d35ae8e3", 0x3, 0x400}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x83, 0x0, &(0x7f0000000700)) openat(0xffffffffffffff9c, &(0x7f0000000740)='./file2\x00', 0x101042, 0x15) syz_clone(0x2000, &(0x7f0000000780), 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mknod$loop(&(0x7f00000007c0)='./file0\x00', 0xfff, 0x1) execve(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x143102) writev(r1, &(0x7f0000000a40)=[{&(0x7f0000000a80)="94", 0xf000}, {0x0}], 0x2) write(r1, 0x0, 0x0) link(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) r2 = syz_usb_connect(0x5, 0x58, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, &(0x7f0000000bc0)={0x14, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000011c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001600)={0x14, 0x0, &(0x7f0000000d40)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000100)={0x40, 0x8, 0x8, "003cb3a4aa50323f"}, 0x0, 0x0, 0x0, 0x0}) socket$can_raw(0x1d, 0x3, 0x1) syz_usb_control_io(r2, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0x14, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open$dir(&(0x7f0000000000)='./file0\x00', 0x80000, 0x0) 1m40.742982953s ago: executing program 4 (id=1207): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000480)="ffffffffffff0211223344550806000108000604000242054305123400000000ff4305029afe00000000", 0x2a, 0x24048010, &(0x7f00000004c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) 1m40.683428266s ago: executing program 4 (id=1208): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x78) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001600)=@base={0x14, 0x4, 0x4, 0x4}, 0x48) lseek(r0, 0x7fffdfff, 0x2) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000001080)={0x0, 0x3e5, 0x1, 0xb9e084391695ee1d}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000080)={r2, "928f4d0000000000000000f77b9200"}) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000001680)) getdents64(r0, 0x0, 0xfb) rt_sigprocmask(0x0, &(0x7f0000001780)={[0x456]}, &(0x7f00000017c0), 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000001480)='net/fib_triestat\x00') preadv(r3, &(0x7f00000014c0)=[{&(0x7f0000001500)=""/208, 0xd0}], 0x1, 0x2a, 0xd) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000040)=0x3, 0x4) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001a00)='/sys/fs/cgroup', 0x0, 0x0) getdents(r4, &(0x7f0000001a40)=""/240, 0xf0) getdents64(r4, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000018c0)={'syztnl1\x00', &(0x7f0000001840)={'sit0\x00', 0x0, 0x7800, 0x0, 0x5, 0x8, {{0xd, 0x4, 0x1, 0x1b, 0x34, 0x67, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, @multicast1, {[@timestamp={0x44, 0x1c, 0xca, 0x0, 0x9, [0x84f, 0x0, 0x5, 0x2, 0x80000000, 0x8]}, @end, @end]}}}}}) sendmsg$nl_route(r0, &(0x7f00000019c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x352635661b6bd78e}, 0xc, &(0x7f0000001980)={&(0x7f0000001900)=@ipv4_deladdr={0x50, 0x15, 0x200, 0x70bd2c, 0x25dfdbfd, {0x2, 0x20, 0x40, 0xff, r5}, [@IFA_LABEL={0x14, 0x3, 'dvmrp0\x00'}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_LABEL={0x14, 0x3, 'dvmrp1\x00'}, @IFA_BROADCAST={0x8, 0x4, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x4002040}, 0x8000800) 1m40.622494666s ago: executing program 4 (id=1209): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) chdir(&(0x7f0000000200)='./file0\x00') r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000580)={0x0, 'dvmrp1\x00', {0x3}, 0x4}) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000340)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r2, 0x5608) sysinfo(&(0x7f0000000000)=""/196) r3 = syz_open_dev$usbfs(&(0x7f0000000280), 0x77, 0x101301) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000500)='cpuset.memory_spread_page\x00', 0x2, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000007c0)=0x25, 0x4) setns(0xffffffffffffffff, 0x24020000) capset(&(0x7f0000000480)={0x19980330}, &(0x7f00000004c0)={0x0, 0x0, 0x815, 0x13, 0xfffffffd, 0x4}) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000640)={0x8}, 0x9) write(r6, &(0x7f0000000680)="240000001e005f0214fffffffffffff807000000050000000000000005000b000d000000", 0x24) r7 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0, 0x25) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x14, r8, 0xf21, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4044085}, 0x24008840) open_by_handle_at(r7, &(0x7f0000000540)=ANY=[@ANYBLOB="10"], 0x454680) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f00000002c0)={0xa1, 0x0, 0x802, 0xfffe, 0x0, 0x4, 0x0}) 1m40.431138642s ago: executing program 4 (id=1211): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000440)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000006c0)='syz_tun\x00', 0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000700)={0x0, 0x1c, &(0x7f0000000740)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000780)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f00000007c0)=@assoc_value={0x0}, &(0x7f0000000800)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, &(0x7f0000000080)=0x9c) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)="a0", 0x1}], 0x1}}], 0x1, 0x10000845) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./proc/thread-self/fail-nth\x00', 0x42, 0x0) write(r4, &(0x7f0000000680)='3', 0x4e) close(0x3) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb5}}, 0x2}}, 0x2e) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) write$ppp(0xffffffffffffffff, &(0x7f0000000000)="5868ca9388128c8bfa96d4186df857791d1c4d12e144e91a1f90c4eda4c5433f87a0d8364a449dfd429c534f208bffabffc9947c8282a737ebe5f60bef2c6f0220962ce81717ac774e592ef61054e89059a551964d060000000c696a7787", 0xfffffcfe) socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000940), 0x8ab43, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_SET_CPUID(r10, 0x4008ae8a, &(0x7f0000000980)={0x1, 0x0, [{0x1, 0xd2bd, 0x100005, 0xe8e8, 0xfffffffa}]}) syz_genetlink_get_family_id$smc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001a00)=ANY=[@ANYBLOB="560040e2ef8b0050dd739105e288e592049ab937a4ba89d3e798ef0009821cce4e8156ffa240d84e5321d6bf46de2f3138c920839c371306ea3bb2ebcbb147ea9435e1d07cfcffd1e3f678faa69a02fe6969afb25939e64d55f69678000000009985a62a18a98af27b7498c08f59ab8439b9db7e063218e3a6707fffffff3dece562cea4a25a77b88a33aef324dd24509099bbd0d4bf761ceb3fbaeebe", @ANYBLOB="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", @ANYBLOB="0100a0219f310300000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x3c619392209edc70}, 0x4040010) getsockopt(r7, 0x111, 0x3, 0x0, &(0x7f0000000280)) socket$nl_route(0x10, 0x3, 0x0) 1m39.842413797s ago: executing program 4 (id=1215): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) setxattr$security_capability(&(0x7f0000000540)='mtd0\x00', 0x0, &(0x7f0000000580)=@v3={0x3000000, [{0x962b, 0x7}, {0xfffffff1, 0x5}]}, 0x18, 0x1) mount(&(0x7f00000005c0)=@filename='mtd0\x00', &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000680)='./file0\x00') getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f00000006c0)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000980)=0xf) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f00000009c0)={0x1000, 0x3, 0x3, 0x7, 0x0, "d942c49f2087666cbc9a1fa593d511d35ae8e3", 0x3, 0x400}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x83, 0x0, &(0x7f0000000700)) openat(0xffffffffffffff9c, &(0x7f0000000740)='./file2\x00', 0x101042, 0x15) syz_clone(0x2000, &(0x7f0000000780), 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mknod$loop(&(0x7f00000007c0)='./file0\x00', 0xfff, 0x1) execve(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x143102) writev(r1, &(0x7f0000000a40)=[{&(0x7f0000000a80)="94", 0xf000}, {0x0}], 0x2) write(r1, 0x0, 0x0) link(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) r2 = syz_usb_connect(0x5, 0x58, &(0x7f0000000d80)=ANY=[@ANYBLOB="120110038e3ac62094064600020e061003090439d8011adab6a2a5bf066ca8080905080920000709800904e40503b956da02091508000004011c0101000000200007039a0705d15b89f26d0905090340007a0a8400000000362cac74483f1a22ffa84fea2e9211b41c484c5bcd824b0fc276dd3b1bb251b0e8e56264477cdab73586ab04ad5aaa868af86f8be55f142cfd5e17b51343aa32d474cb3f01cf52ed5678a02e480a700c3dd77257b3cc84d167dc8d05c18b50fca384fc1ed7fa9c939ae359aeb652432c39e970e96285dc5ec25c11d571a604e8038005aa6a4b3113a6c2a5b034d4e807caa340eccf04b41e0720da3d2dfcb615cf9b68b91a6d6a644804e203d2618ed93a827291a78156d7ab41ac817220774bfcd6500976d4a9270af6a77afe1a1ef396d6a0e44be8ea90157e904b5d434aa15ce88dc4f3f67b734c9d56"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, &(0x7f0000000bc0)={0x14, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000011c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001600)={0x14, 0x0, &(0x7f0000000d40)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000100)={0x40, 0x8, 0x8, "003cb3a4aa50323f"}, 0x0, 0x0, 0x0, 0x0}) socket$can_raw(0x1d, 0x3, 0x1) syz_usb_control_io(r2, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0x14, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open$dir(&(0x7f0000000000)='./file0\x00', 0x80000, 0x0) 1m39.731020147s ago: executing program 36 (id=1215): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) setxattr$security_capability(&(0x7f0000000540)='mtd0\x00', 0x0, &(0x7f0000000580)=@v3={0x3000000, [{0x962b, 0x7}, {0xfffffff1, 0x5}]}, 0x18, 0x1) mount(&(0x7f00000005c0)=@filename='mtd0\x00', &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000680)='./file0\x00') getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f00000006c0)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000980)=0xf) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f00000009c0)={0x1000, 0x3, 0x3, 0x7, 0x0, "d942c49f2087666cbc9a1fa593d511d35ae8e3", 0x3, 0x400}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x83, 0x0, &(0x7f0000000700)) openat(0xffffffffffffff9c, &(0x7f0000000740)='./file2\x00', 0x101042, 0x15) syz_clone(0x2000, &(0x7f0000000780), 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mknod$loop(&(0x7f00000007c0)='./file0\x00', 0xfff, 0x1) execve(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x143102) writev(r1, &(0x7f0000000a40)=[{&(0x7f0000000a80)="94", 0xf000}, {0x0}], 0x2) write(r1, 0x0, 0x0) link(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) r2 = syz_usb_connect(0x5, 0x58, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, &(0x7f0000000bc0)={0x14, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000011c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001600)={0x14, 0x0, &(0x7f0000000d40)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000100)={0x40, 0x8, 0x8, "003cb3a4aa50323f"}, 0x0, 0x0, 0x0, 0x0}) socket$can_raw(0x1d, 0x3, 0x1) syz_usb_control_io(r2, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0x14, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open$dir(&(0x7f0000000000)='./file0\x00', 0x80000, 0x0) 51.231751105s ago: executing program 8 (id=1216): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0xfffffffc, 0x8}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfb, 0x80}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfc, 0x100}, 0xc) r10 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfe, 0x1}, 0xc) r11 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r11, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc) socket$netlink(0x10, 0x3, 0xa) bind$netlink(r11, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc) r12 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r12, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x80020000}, 0x48) r13 = socket$netlink(0x10, 0x3, 0x4) writev(r13, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 43.379318039s ago: executing program 7 (id=1160): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000140)={r0, &(0x7f0000000040)='\x00', 0x20000, &(0x7f0000000080)={@_ha_fsid={[0x5, 0x8]}, {0x2f, 0xffff, 0x9, 0x5}}, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x1}) getpeername$tipc(r1, &(0x7f0000000200)=@id, &(0x7f00000001c0)=0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000180)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000240)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4) socket$inet6(0xa, 0x2, 0x0) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000140)={r0, &(0x7f0000000040)='\x00', 0x20000, &(0x7f0000000080)={@_ha_fsid={[0x5, 0x8]}, {0x2f, 0xffff, 0x9, 0x5}}, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x1}) (async) getpeername$tipc(r1, &(0x7f0000000200)=@id, &(0x7f00000001c0)=0x10) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000180)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000240)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) (async) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4) (async) 42.651605922s ago: executing program 8 (id=1216): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0xfffffffc, 0x8}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfb, 0x80}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfc, 0x100}, 0xc) r10 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfe, 0x1}, 0xc) r11 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r11, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc) socket$netlink(0x10, 0x3, 0xa) bind$netlink(r11, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc) r12 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r12, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x80020000}, 0x48) r13 = socket$netlink(0x10, 0x3, 0x4) writev(r13, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 40.738439124s ago: executing program 8 (id=1216): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0xfffffffc, 0x8}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfb, 0x80}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfc, 0x100}, 0xc) r10 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfe, 0x1}, 0xc) r11 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r11, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc) socket$netlink(0x10, 0x3, 0xa) bind$netlink(r11, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc) r12 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r12, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x80020000}, 0x48) r13 = socket$netlink(0x10, 0x3, 0x4) writev(r13, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 34.789471934s ago: executing program 7 (id=1160): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000140)={r0, &(0x7f0000000040)='\x00', 0x20000, &(0x7f0000000080)={@_ha_fsid={[0x5, 0x8]}, {0x2f, 0xffff, 0x9, 0x5}}, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x1}) getpeername$tipc(r1, &(0x7f0000000200)=@id, &(0x7f00000001c0)=0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000180)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000240)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4) socket$inet6(0xa, 0x2, 0x0) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000140)={r0, &(0x7f0000000040)='\x00', 0x20000, &(0x7f0000000080)={@_ha_fsid={[0x5, 0x8]}, {0x2f, 0xffff, 0x9, 0x5}}, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x1}) (async) getpeername$tipc(r1, &(0x7f0000000200)=@id, &(0x7f00000001c0)=0x10) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000180)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000240)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) (async) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4) (async) 31.043487952s ago: executing program 8 (id=1216): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0xfffffffc, 0x8}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfb, 0x80}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfc, 0x100}, 0xc) r10 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfe, 0x1}, 0xc) r11 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r11, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc) socket$netlink(0x10, 0x3, 0xa) bind$netlink(r11, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc) r12 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r12, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x80020000}, 0x48) r13 = socket$netlink(0x10, 0x3, 0x4) writev(r13, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 23.266477669s ago: executing program 7 (id=1160): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000140)={r0, &(0x7f0000000040)='\x00', 0x20000, &(0x7f0000000080)={@_ha_fsid={[0x5, 0x8]}, {0x2f, 0xffff, 0x9, 0x5}}, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x1}) getpeername$tipc(r1, &(0x7f0000000200)=@id, &(0x7f00000001c0)=0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000180)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000240)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4) socket$inet6(0xa, 0x2, 0x0) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000140)={r0, &(0x7f0000000040)='\x00', 0x20000, &(0x7f0000000080)={@_ha_fsid={[0x5, 0x8]}, {0x2f, 0xffff, 0x9, 0x5}}, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x1}) (async) getpeername$tipc(r1, &(0x7f0000000200)=@id, &(0x7f00000001c0)=0x10) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000180)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000240)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) (async) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4) (async) 18.500528788s ago: executing program 8 (id=1216): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0xfffffffc, 0x8}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfb, 0x80}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfc, 0x100}, 0xc) r10 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfe, 0x1}, 0xc) r11 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r11, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc) socket$netlink(0x10, 0x3, 0xa) bind$netlink(r11, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc) r12 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r12, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x80020000}, 0x48) r13 = socket$netlink(0x10, 0x3, 0x4) writev(r13, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 13.73224418s ago: executing program 7 (id=1160): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000140)={r0, &(0x7f0000000040)='\x00', 0x20000, &(0x7f0000000080)={@_ha_fsid={[0x5, 0x8]}, {0x2f, 0xffff, 0x9, 0x5}}, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x1}) getpeername$tipc(r1, &(0x7f0000000200)=@id, &(0x7f00000001c0)=0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000180)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000240)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4) socket$inet6(0xa, 0x2, 0x0) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000140)={r0, &(0x7f0000000040)='\x00', 0x20000, &(0x7f0000000080)={@_ha_fsid={[0x5, 0x8]}, {0x2f, 0xffff, 0x9, 0x5}}, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x1}) (async) getpeername$tipc(r1, &(0x7f0000000200)=@id, &(0x7f00000001c0)=0x10) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000180)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000240)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) (async) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4) (async) 12.149373349s ago: executing program 8 (id=1216): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0xfffffffc, 0x8}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfb, 0x80}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfc, 0x100}, 0xc) r10 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfe, 0x1}, 0xc) r11 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r11, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc) socket$netlink(0x10, 0x3, 0xa) bind$netlink(r11, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc) r12 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r12, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x80020000}, 0x48) r13 = socket$netlink(0x10, 0x3, 0x4) writev(r13, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 6.477305705s ago: executing program 3 (id=1812): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4eb36, 0x2) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x2, 0x600aa}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x2}]}}}]}, 0x40}}, 0x24008040) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r4, 0x2) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) syz_emit_ethernet(0x36, &(0x7f0000000b00)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x20, 0x2}}}}}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x900, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0xe6}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x10) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x1, 0x0, 0x8}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0xfdfd, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}]}, 0x58}}, 0x0) 6.380219067s ago: executing program 3 (id=1813): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000100)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x1) ioctl$UI_DEV_CREATE(r3, 0x5501) write$uinput_user_dev(r2, &(0x7f0000000640)={'syz0\x00', {0x7, 0x4, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0xfffffffe, 0x0, 0xa9ba, 0xc1f, 0x1, 0x101, 0x3, 0x9, 0xffff, 0x9, 0x2, 0x9, 0x0, 0x3, 0xe, 0x40003, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0x4, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x3, 0x0, 0xf, 0xa33, 0x5, 0x80, 0x401, 0x3, 0xa3a, 0xfffffffd, 0x7, 0xb, 0x3, 0xffff8001, 0x2, 0x4, 0x80000000, 0x1, 0xb, 0x5, 0xfffffffe, 0x5, 0xb6, 0x1, 0x7fe, 0x7fff, 0x4e, 0x1000002, 0x8], [0x2, 0x1, 0x10000, 0x9, 0xb66, 0x2, 0x5, 0x80000001, 0x8000001, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x6, 0x8, 0x9, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x6, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0x80, 0x2, 0x81, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x3, 0x6, 0x525ba681, 0x4f71, 0x3, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x100008b, 0x10000, 0xfe4, 0x3ff], [0x0, 0x7, 0x4, 0x3, 0x7a8, 0x10001, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x80000001, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x0, 0x6, 0x4, 0xfffffff7, 0x2, 0x3, 0x0, 0x1, 0x3, 0x4c, 0x3, 0x1, 0x2, 0x0, 0x9, 0x80, 0x9, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xe, 0x7, 0x47, 0x7, 0x0, 0x11, 0x3, 0x1, 0x5, 0x7, 0x8000, 0xffc, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x10003, 0x10, 0x4e26, 0x6, 0x40, 0x7, 0x497, 0x4, 0x5, 0x0, 0x5, 0x56, 0xc28, 0x9, 0x10001, 0x0, 0x7, 0x79a, 0x40, 0x9, 0x6, 0xc421, 0x80000001, 0x6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x4, 0x3ff, 0x10, 0xd, 0x6, 0x8000, 0x4f, 0x78d, 0x6, 0x1, 0xffffb029, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x1, 0x7, 0x4, 0x0, 0x8000b, 0x400, 0x8, 0x0, 0x200008, 0x10001, 0x9a33247, 0x6, 0x0, 0x1, 0x8001, 0xfffffff4, 0x2000005]}, 0x45c) close_range(r0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x0) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='sessname=s0 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) 6.29378615s ago: executing program 3 (id=1814): r0 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000240), &(0x7f0000000340)=0x4) (async, rerun: 64) r1 = fsopen(&(0x7f0000000040)='nfs4\x00', 0x0) (rerun: 64) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='minorversion\x00', &(0x7f00000000c0)='1\x00', 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000002ac3b38b7dfd1f304f89a303c53880010", @ANYRES32=0x0, @ANYBLOB="4b190300401000001c0012800b0001006d616373656300000c00028005000d000200000008000500", @ANYRES32=r3, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x404d818}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002000d9030000000000000000020000000000000f00000000080010000a"], 0x24}}, 0x4000000) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file2\x00', 0x18d042, 0x15) pwrite64(r4, 0x0, 0x0, 0xfb2200) (async) sendmsg$rds(r4, &(0x7f0000000dc0)={&(0x7f00000003c0)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/237, 0xed}, {&(0x7f0000000600)=""/175, 0xaf}, {&(0x7f00000006c0)}, {&(0x7f0000000700)=""/83, 0x53}], 0x6, &(0x7f0000000bc0)=[@mask_fadd={0x58, 0x114, 0x8, {{0x10001, 0x7fffffff}, &(0x7f0000000800)=0x5, &(0x7f0000000840)=0x8, 0x10, 0xe, 0x12, 0x7, 0x21, 0x6}}, @fadd={0x58, 0x114, 0x6, {{0x67, 0x9}, &(0x7f0000000880)=0xf, &(0x7f00000008c0)=0x1, 0x5, 0xfffffffeffffffff, 0x0, 0x1, 0x1, 0xfffffffffffff7e6}}, @mask_fadd={0x58, 0x114, 0x8, {{0x10, 0x1}, &(0x7f0000000900)=0x4, &(0x7f0000000940)=0x7ff, 0x2000000000000000, 0x7b9, 0xdc6, 0x0, 0x11, 0x3ff}}, @cswp={0x58, 0x114, 0x7, {{0x5, 0x4}, &(0x7f0000000980), &(0x7f00000009c0)=0x3, 0x8, 0xd843, 0x6, 0x200, 0x11, 0x7}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000a00)=""/201, 0xc9}, &(0x7f0000000b00), 0x5d}}, @rdma_dest={0x18, 0x114, 0x2, {0xb, 0xc967}}, @mask_cswp={0x58, 0x114, 0x9, {{0x4, 0x155}, &(0x7f0000000b40)=0xe, &(0x7f0000000b80)=0x4, 0x5, 0x9, 0x24, 0x7fffffffffffffff, 0x20, 0x1}}], 0x200, 0x4010}, 0x20000000) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(r6, &(0x7f0000000f00)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x6c, r7, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x6c}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x3}, @IEEE802154_ATTR_CAPABILITY={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x6}, @IEEE802154_ATTR_CAPABILITY={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008080}, 0x14) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 6.286022712s ago: executing program 3 (id=1815): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000180)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000001c0)={"627e1ee26840b90a75e1ac317c98988e", 0x0, 0x0, {0x4, 0x7}, {0x9}, 0xfffffffffffffff9, [0xffff, 0x52, 0x5, 0xae81, 0x9d84, 0x8000000000000001, 0xd, 0x100, 0xffffffffffffffff, 0xf, 0x6, 0x0, 0xd4, 0x3, 0x4, 0x3]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000002c0)={"46f62775537e5bb5b85ee7fe3357b321", r2, r3, {0x8001}, {0x800, 0x80000001}, 0x40, [0x8, 0x7, 0x3, 0x93e, 0xb8, 0x6f76, 0x8000, 0x10000, 0x6, 0x990000, 0x5, 0x5, 0x7b85, 0x5, 0x3, 0x5]}) timer_settime(r1, 0x1, &(0x7f00000000c0)={{}, {0x0, 0x3938700}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f0000000080)=@other={0x20300002000006a0, 0x0}) 5.232095175s ago: executing program 3 (id=1821): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) r2 = open(&(0x7f0000000580)='./file0\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x10, &(0x7f0000000900)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000054000001b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000c309000041000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xd}, 0x94) mkdirat(r2, &(0x7f00000005c0)='./file0\x00', 0x0) r4 = open(&(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f0000000680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f0000000700)='./file0\x00', 0x2) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000000406050000000000000000000a0000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400e9ffb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000001c0)=r5, 0x4) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r7, &(0x7f0000000740)=[{{&(0x7f0000000780)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) setsockopt$sock_int(r7, 0x1, 0x9, &(0x7f00000007c0)=0x5, 0x4) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/oops_count', 0x40, 0x0) readv(r8, &(0x7f0000000300)=[{&(0x7f0000000340)=""/237, 0xed}], 0x1) r9 = socket$kcm(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$kcm(r9, &(0x7f0000000200)={&(0x7f0000000240)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7ffffff7}, 0x0) 5.231487622s ago: executing program 3 (id=1822): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) sendmsg$inet(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000140c000980a3ca014000000081140000001100010000000000000000000100000a8aed48c048344eff2313794a9bc608f51cb10d65de50f206e020055d220a83bb844ab944a7e2b838ca433b5a"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000140c000980a3ca014000000081140000001100010000000000000000000100000a8aed48c048344eff2313794a9bc608f51cb10d65de50f206e020055d220a83bb844ab944a7e2b838ca433b5a"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = inotify_init() r4 = fcntl$dupfd(r3, 0x406, r3) r5 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x13, r4, 0x0) userfaultfd(0x80001) (async) r6 = userfaultfd(0x80001) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000002, 0x9132, 0xffffffffffffffff, 0xa2c6000) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000980)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f00000009c0)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_MMIO(r5, 0x20, &(0x7f0000000a00)="898af54270aac7e9556f7d7e207b0d92d026e22b33eb8275", 0x0, 0x18) (async) syz_memcpy_off$KVM_EXIT_MMIO(r5, 0x20, &(0x7f0000000a00)="898af54270aac7e9556f7d7e207b0d92d026e22b33eb8275", 0x0, 0x18) syz_memcpy_off$KVM_EXIT_MMIO(r5, 0x20, &(0x7f0000000a40)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r6, 0xc020662a, &(0x7f0000000c40)={0x2, 0xfffffffffffffffc, 0x4, 0x23d, 0x6, 0x0, [{0x967, 0x6, 0x3, '\x00', 0x1}, {0xd, 0xff, 0x4, '\x00', 0xc0d}, {0x1, 0x0, 0xe, '\x00', 0x200}, {0x100000001, 0xfff, 0x4, '\x00', 0x2083}, {0x402, 0x1000, 0x8000000000000000, '\x00', 0x2000}, {0x6, 0xb0c8, 0x8, '\x00', 0x82}]}) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000400)={&(0x7f0000001000)}, 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000440)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0xb, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0x6, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x408a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x9, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x5, 0x2], [0x7, 0xf69b, 0x40000006, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x89b, 0xad, 0x2, 0x809, 0x40, 0xa7, 0xffd, 0x0, 0x200b398, 0xff, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x90d, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x8002, 0xb], [0x2, 0xfffffffe, 0x9, 0x7, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x5, 0x7ffe, 0x28, 0x1, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x8d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x2, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x8, 0x100008, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8005, 0x7fff, 0x3, 0x6, 0xf, 0x0, 0x0, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000440)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0xb, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0x6, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x408a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x9, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x5, 0x2], [0x7, 0xf69b, 0x40000006, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x89b, 0xad, 0x2, 0x809, 0x40, 0xa7, 0xffd, 0x0, 0x200b398, 0xff, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x90d, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x8002, 0xb], [0x2, 0xfffffffe, 0x9, 0x7, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x5, 0x7ffe, 0x28, 0x1, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x8d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x2, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x8, 0x100008, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8005, 0x7fff, 0x3, 0x6, 0xf, 0x0, 0x0, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000dc0)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x35, 0x5, 0x57e, 0x330, 0x0, 0x0, "0600ff0901a101150026ff007508951f852009018102852109018102852209018102851609019102851709019102851509019102c0"}}, 0x14d) close(r8) (async) close(r8) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000900)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x38, 0x0, r7, 0x0, 0x0, 0x0, 0x10040, 0x1}) io_uring_enter(0xffffffffffffffff, 0x1, 0x1, 0x5, 0x0, 0x0) (async) io_uring_enter(0xffffffffffffffff, 0x1, 0x1, 0x5, 0x0, 0x0) 4.88164907s ago: executing program 7 (id=1160): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000140)={r0, &(0x7f0000000040)='\x00', 0x20000, &(0x7f0000000080)={@_ha_fsid={[0x5, 0x8]}, {0x2f, 0xffff, 0x9, 0x5}}, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x1}) getpeername$tipc(r1, &(0x7f0000000200)=@id, &(0x7f00000001c0)=0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000180)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000240)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4) socket$inet6(0xa, 0x2, 0x0) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000140)={r0, &(0x7f0000000040)='\x00', 0x20000, &(0x7f0000000080)={@_ha_fsid={[0x5, 0x8]}, {0x2f, 0xffff, 0x9, 0x5}}, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x1}) (async) getpeername$tipc(r1, &(0x7f0000000200)=@id, &(0x7f00000001c0)=0x10) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000180)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000240)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) (async) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4) (async) 3.223288704s ago: executing program 7 (id=1160): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000140)={r0, &(0x7f0000000040)='\x00', 0x20000, &(0x7f0000000080)={@_ha_fsid={[0x5, 0x8]}, {0x2f, 0xffff, 0x9, 0x5}}, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x1}) getpeername$tipc(r1, &(0x7f0000000200)=@id, &(0x7f00000001c0)=0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000180)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000240)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4) socket$inet6(0xa, 0x2, 0x0) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000140)={r0, &(0x7f0000000040)='\x00', 0x20000, &(0x7f0000000080)={@_ha_fsid={[0x5, 0x8]}, {0x2f, 0xffff, 0x9, 0x5}}, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x1}) (async) getpeername$tipc(r1, &(0x7f0000000200)=@id, &(0x7f00000001c0)=0x10) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000180)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000240)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) (async) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4) (async) 1.299592378s ago: executing program 2 (id=1830): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x100000001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4005, 0x2, {0x1, @win={{0x821}, 0x0, 0xfffffff8, 0x0, 0x0, 0x0}}}) (fail_nth: 25) 1.246211672s ago: executing program 2 (id=1831): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/kvm_amd/parameters/avic\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/100, 0x64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000200)="d8df7e23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b9500200000f01c8b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0x60}], 0x1, 0x2, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fdf000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, 0x0}], 0x1, 0x1b, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f00000002c0)={0x13, 0x5, 0xfd}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x7, 0x80000000486, 0x7, 0xc, 0x80000005, 0x9, 0x10e, 0x81, 0x8000ffffbffc, 0x9, 0xff, 0x1000a9ab, 0x5, 0xb, 0x4000400000000], 0x0, 0xc0401}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 854.503534ms ago: executing program 2 (id=1832): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x8000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/class/graphics/fbcon/rotate_all\x00', 0x1, 0x0) write(r2, &(0x7f0000000480)='3', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r3 = inotify_init() r4 = creat(&(0x7f0000000080)='./file0\x00', 0x104) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[], 0x13) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f00000004c0)={0x23800000, &(0x7f0000000540)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x5, &(0x7f0000000580)=0x0) io_submit(r8, 0x1, &(0x7f00000005c0)=[&(0x7f0000000600)={0x0, 0x0, 0x0, 0x3, 0x6, r7, 0x0}]) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=[0x5], 0x0, 0x0, 0x1, 0x1, r6}}, 0x40) close_range(r3, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r9, &(0x7f00000001c0)='1', 0x1) 260.101037ms ago: executing program 2 (id=1833): r0 = socket$inet_tcp(0x2, 0x1, 0x6) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000740)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket(0x10, 0x803, 0x0) splice(r1, 0x0, r3, 0x0, 0x1100000000f339, 0x0) listen(r0, 0x5) close(0x3) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = syz_clone(0x21000200, 0x0, 0x0, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(r5, r5, 0x8, &(0x7f0000000140)={0x2b, 0x0, 0xfffffffb}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f00000000c0), 0x4) r6 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x169802, 0x0) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r9, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_kvm_setup_syzos_vm$x86(r9, &(0x7f0000694000/0x400000)=nil) socket$inet_sctp(0x2, 0x5, 0x84) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fe535ea6ef044a009f3eb84cf890debfe83e000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r11 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r11, &(0x7f00000006c0)='3', 0x4e) setsockopt$sock_int(r9, 0x1, 0x46, &(0x7f0000000280), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r10, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740), ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000100)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x24, &(0x7f0000000800), 0x0, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x6d, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0x25, &(0x7f0000000440)=@raw=[@cb_func={0x18, 0x5, 0x4, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x1}, @ldst={0x3, 0x1, 0x6, 0x4, 0x3, 0x10}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x6}, @jmp={0x5, 0x1, 0xc, 0x4, 0x7, 0xfffffffffffffff8, 0x8}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}], &(0x7f0000000580)='syzkaller\x00', 0x9, 0xa8, &(0x7f00000005c0)=""/168, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x20, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x4, 0x9, 0x40, 0xcaf}, 0x10, r12, r10, 0x1, &(0x7f0000000a40)=[r4, r4, r4, r4, r0, r4, r4], &(0x7f0000000a80)=[{0x0, 0x1, 0x3}], 0x10, 0x9}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) 86.028797ms ago: executing program 2 (id=1834): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', 0x2, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/hid.usb0/protocol\x00', 0x2, 0x0) write(r1, &(0x7f0000000480)='1', 0x1) accept4(0xffffffffffffffff, &(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, &(0x7f00000000c0)=0x80, 0x800) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000004c0)={0x80000001, 0x6, 0x0, 0x7fff, 0x0, "85440df0457ddb709398cae6d8da37eeab9fef", 0x5, 0x2}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$input_event(r1, &(0x7f0000000500)={{0x0, 0x2710}, 0x12, 0x6, 0x180000}, 0x18) 0s ago: executing program 2 (id=1835): r0 = syz_usb_connect(0x5, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e75f9208c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300001007c109050c04400006030f07059acbf5"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x8000) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000440)={0x14, &(0x7f0000000380)={0x0, 0x31, 0x76, {0x76, 0x22, "f5d3a2cc4884c8b14e49caeb63b07ea933d498d73016f25cc78d762b152bdf3e4a5ff4a43fa60d1965a07adfd5feee56c6736be8aaab4873b5117806d466b6e0ac4836d2bfbf69e96102e95af2ecbfa4f1415adabf38177eee37c48da286e7b1ac3518c88b7cd828d8b24177a3447cb8b9f7a7ef"}}, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000006c0)={0x44, &(0x7f0000000480)={0x40, 0x30, 0x62, "01ccfeac882b6b2b8ac727233d0b4d3967de47afa55c8a2705070bb3b0169464553d2561d38a57073be9c26eed72881ae73560e11ce8b560c223051690a53a87d650893dbdbf19924afdad4830a2a01852dd41522b1205385ebe4e64069bd150499a"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0xed}, &(0x7f0000000580)={0x20, 0x80, 0x1c, {0x4, 0x5, 0x64116ca, 0x0, 0x8, 0xee2, 0x58b, 0xa1, 0xfffa, 0x2, 0x6, 0x7}}, &(0x7f00000005c0)={0x20, 0x85, 0x4, 0x7fffffff}, &(0x7f0000000600)={0x20, 0x83, 0x2}, &(0x7f0000000640)={0x20, 0x87, 0x2, 0x7}, &(0x7f0000000680)={0x20, 0x89, 0x2, 0x1}}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x1e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) setns(0xc9, 0x0) r3 = socket(0x8, 0x5, 0x5) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000740)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f00000007c0)=0x0, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000880)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r8, 0x4b72, &(0x7f0000000940)={0x4, 0xfffffffc, 0x17, 0xc, 0x100, &(0x7f0000000980)="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"}) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000900)=0xfffffe01, 0x4) write$char_usb(r1, &(0x7f0000000180)="26899e7a297d15fa13568863b7e8d5c23c719d403720a1106c8bcd34f579a7141fa570cc42ed9a8421886bbf30753888b252deeb5a533aaa856ca3085684ceebb2d3420fb3f4fff702e0f62f9d4abdcf28d7f9e74119178abc3fa0a9cd3da2a6ee0061a63a5416bc37c6e2d7e423c36853a0b12a260bdcdf9614464c607a9f8a339064fe82e375266b7e053a9dd5fd146913e96225d102aaa81610cbb1a1960cf79b398449972b0af34b371820fa87b424b6a53cd2777ca7221d07a38d155fafede48816bcaebdbd4b6bf17a8d3c9ae06e82ce63810b6245b181fbcf75836189d81a0d2b8b58cdaebb4a4360c1c2ed0d334805dab3", 0xf5) kernel console output (not intermixed with test programs): 17][T13197] dev_attr_store+0x58/0x80 [ 218.834128][T13197] ? __pfx_dev_attr_store+0x10/0x10 [ 218.834140][T13197] sysfs_kf_write+0xf2/0x150 [ 218.834158][T13197] kernfs_fop_write_iter+0x3e0/0x5f0 [ 218.834172][T13197] ? __pfx_sysfs_kf_write+0x10/0x10 [ 218.834191][T13197] vfs_write+0x6af/0x1050 [ 218.834205][T13197] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 218.834222][T13197] ? __pfx_vfs_write+0x10/0x10 [ 218.834234][T13197] ? find_held_lock+0x2b/0x80 [ 218.834261][T13197] ksys_write+0x12a/0x250 [ 218.834275][T13197] ? __pfx_ksys_write+0x10/0x10 [ 218.834293][T13197] do_syscall_64+0x123/0x790 [ 218.834315][T13197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.834333][T13197] RIP: 0033:0x7ff5cc59e1d9 [ 218.834351][T13197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.834369][T13197] RSP: 002b:00007ff5cd551028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 218.834389][T13197] RAX: ffffffffffffffda RBX: 00007ff5cc825fa0 RCX: 00007ff5cc59e1d9 [ 218.834402][T13197] RDX: 0000000000000033 RSI: 0000200000000600 RDI: 0000000000000003 [ 218.834414][T13197] RBP: 00007ff5cd551090 R08: 0000000000000000 R09: 0000000000000000 [ 218.834426][T13197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 218.834438][T13197] R13: 00007ff5cc826038 R14: 00007ff5cc825fa0 R15: 00007fffe3b20408 [ 218.834458][T13197] [ 218.905871][T13201] ip_vti0: entered allmulticast mode [ 218.906337][T13201] support for cryptoloop has been removed. Use dm-crypt instead. [ 218.974817][T13206] FAULT_INJECTION: forcing a failure. [ 218.974817][T13206] name failslab, interval 1, probability 5, space 0, times 9960 [ 218.974840][T13206] CPU: 3 UID: 0 PID: 13206 Comm: syz.2.1652 Tainted: G L syzkaller #0 PREEMPT(full) [ 218.974856][T13206] Tainted: [L]=SOFTLOCKUP [ 218.974860][T13206] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 218.974867][T13206] Call Trace: [ 218.974871][T13206] [ 218.974876][T13206] dump_stack_lvl+0x100/0x190 [ 218.974897][T13206] should_fail_ex.cold+0x5/0xa [ 218.974913][T13206] should_failslab+0xc2/0x120 [ 218.974931][T13206] kmem_cache_alloc_noprof+0x92/0x6a0 [ 218.974944][T13206] ? __fget_files+0x215/0x3d0 [ 218.974960][T13206] ? create_new_namespaces+0x30/0xac0 [ 218.974976][T13206] create_new_namespaces+0x30/0xac0 [ 218.974993][T13206] __do_sys_setns+0x213/0x1d90 [ 218.975010][T13206] ? __pfx___do_sys_setns+0x10/0x10 [ 218.975030][T13206] do_syscall_64+0x123/0x790 [ 218.975048][T13206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.975059][T13206] RIP: 0033:0x7ff5cc59e1d9 [ 218.975069][T13206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.975079][T13206] RSP: 002b:00007ff5cd551028 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 218.975091][T13206] RAX: ffffffffffffffda RBX: 00007ff5cc825fa0 RCX: 00007ff5cc59e1d9 [ 218.975098][T13206] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000c9 [ 218.975105][T13206] RBP: 00007ff5cc635888 R08: 0000000000000000 R09: 0000000000000000 [ 218.975112][T13206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.975118][T13206] R13: 00007ff5cc826038 R14: 00007ff5cc825fa0 R15: 00007fffe3b20408 [ 218.975133][T13206] [ 218.984738][ T43] audit: type=1400 audit(1792148143.990:2119): avc: denied { map } for pid=13204 comm="syz.2.1652" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 218.984883][ T43] audit: type=1400 audit(1792148143.990:2120): avc: denied { execute } for pid=13204 comm="syz.2.1652" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 218.999523][ T5728] Bluetooth: hci1: command 0x0c1a tx timeout [ 219.092304][T13091] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 219.093861][T13091] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 219.098112][T13091] wireguard: wg0: Could not create IPv4 socket [ 219.099964][T13091] wireguard: wg1: Could not create IPv4 socket [ 219.103116][T13091] wireguard: wg2: Could not create IPv4 socket [ 219.729789][ T43] audit: type=1400 audit(1792148144.674:2121): avc: denied { write } for pid=13208 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.783024][ T43] audit: type=1400 audit(1792148144.720:2122): avc: denied { write } for pid=13211 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.933843][ T43] audit: type=1400 audit(1792148144.858:2123): avc: denied { write } for pid=13214 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.978523][ T43] audit: type=1400 audit(1792148144.904:2124): avc: denied { write } for pid=13217 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.400510][ T43] audit: type=1400 audit(1792148145.292:2125): avc: denied { write } for pid=13228 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.540848][T13238] netlink: 'syz.2.1653': attribute type 1 has an invalid length. [ 220.569166][T13238] 8021q: adding VLAN 0 to HW filter on device bond7 [ 220.577760][T13238] bond7: (slave gretap5): making interface the new active one [ 220.578373][T13238] bond7: (slave gretap5): Enslaving as an active interface with an up link [ 220.622558][ T5735] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 220.630578][ T5735] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 220.633802][ T5735] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 220.650401][ T5735] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 220.650877][ T5735] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 220.794407][T13266] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 220.863770][T13247] Failed to initialize the IGMP autojoin socket (err -2) [ 220.882243][T13274] FAULT_INJECTION: forcing a failure. [ 220.882243][T13274] name failslab, interval 1, probability 5, space 0, times 9959 [ 220.882275][T13274] CPU: 0 UID: 0 PID: 13274 Comm: syz.2.1660 Tainted: G L syzkaller #0 PREEMPT(full) [ 220.882317][T13274] Tainted: [L]=SOFTLOCKUP [ 220.882324][T13274] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 220.882335][T13274] Call Trace: [ 220.882342][T13274] [ 220.882350][T13274] dump_stack_lvl+0x100/0x190 [ 220.882384][T13274] should_fail_ex.cold+0x5/0xa [ 220.882413][T13274] should_failslab+0xc2/0x120 [ 220.882441][T13274] kmem_cache_alloc_noprof+0x92/0x6a0 [ 220.882468][T13274] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 220.882505][T13274] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 220.882541][T13274] mmu_topup_memory_caches+0x25/0x170 [ 220.882565][T13274] kvm_mmu_load+0xe8/0x2580 [ 220.882594][T13274] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 220.882623][T13274] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 220.882654][T13274] ? __pfx_kvm_mmu_load+0x10/0x10 [ 220.882676][T13274] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 220.882698][T13274] ? kvm_check_and_inject_events+0x896/0x1050 [ 220.882729][T13274] vcpu_run+0x419f/0x61a0 [ 220.882750][T13274] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 220.882792][T13274] ? __pfx_vcpu_run+0x10/0x10 [ 220.882820][T13274] ? lock_acquire+0x1d1/0x380 [ 220.882841][T13274] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1dd0 [ 220.882868][T13274] ? fpu_swap_kvm_fpstate+0x217/0x460 [ 220.882900][T13274] ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 220.882924][T13274] kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 220.882961][T13274] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 220.882983][T13274] ? lock_acquire+0x1d1/0x380 [ 220.883003][T13274] ? do_raw_write_lock+0x11e/0x260 [ 220.883025][T13274] ? find_held_lock+0x2b/0x80 [ 220.883052][T13274] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 220.883076][T13274] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 220.883108][T13274] kvm_vcpu_ioctl+0x730/0x1700 [ 220.883135][T13274] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 220.883162][T13274] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 220.883188][T13274] ? do_vfs_ioctl+0x226/0x13e0 [ 220.883212][T13274] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 220.883233][T13274] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 220.883265][T13274] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 220.883315][T13274] ? __fget_files+0x34/0x3d0 [ 220.883355][T13274] ? selinux_file_ioctl+0x13b/0x290 [ 220.883381][T13274] ? selinux_file_ioctl+0xb6/0x290 [ 220.883409][T13274] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 220.883436][T13274] __x64_sys_ioctl+0x18e/0x210 [ 220.883462][T13274] do_syscall_64+0x123/0x790 [ 220.883493][T13274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.883513][T13274] RIP: 0033:0x7ff5cc59e1d9 [ 220.883530][T13274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.883548][T13274] RSP: 002b:00007ff5cd551028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 220.883567][T13274] RAX: ffffffffffffffda RBX: 00007ff5cc825fa0 RCX: 00007ff5cc59e1d9 [ 220.883581][T13274] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 220.883593][T13274] RBP: 00007ff5cd551090 R08: 0000000000000000 R09: 0000000000000000 [ 220.883605][T13274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 220.883617][T13274] R13: 00007ff5cc826038 R14: 00007ff5cc825fa0 R15: 00007fffe3b20408 [ 220.883644][T13274] [ 221.134390][T13294] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1664'. [ 221.137469][T13295] netlink: 'syz.3.1665': attribute type 1 has an invalid length. [ 221.159794][T13295] 8021q: adding VLAN 0 to HW filter on device bond13 [ 221.161531][T13295] FAULT_INJECTION: forcing a failure. [ 221.161531][T13295] name failslab, interval 1, probability 5, space 0, times 9958 [ 221.161560][T13295] CPU: 0 UID: 0 PID: 13295 Comm: syz.3.1665 Tainted: G L syzkaller #0 PREEMPT(full) [ 221.161586][T13295] Tainted: [L]=SOFTLOCKUP [ 221.161593][T13295] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 221.161604][T13295] Call Trace: [ 221.161611][T13295] [ 221.161620][T13295] dump_stack_lvl+0x100/0x190 [ 221.161653][T13295] should_fail_ex.cold+0x5/0xa [ 221.161680][T13295] should_failslab+0xc2/0x120 [ 221.161709][T13295] __kmalloc_cache_noprof+0x91/0x6d0 [ 221.161730][T13295] ? register_netdevice+0x50c/0x25a0 [ 221.161758][T13295] register_netdevice+0x50c/0x25a0 [ 221.161782][T13295] ? ip_tunnel_find+0x1f9/0x420 [ 221.161806][T13295] ? __pfx_register_netdevice+0x10/0x10 [ 221.161826][T13295] ? net_generic+0xea/0x2a0 [ 221.161855][T13295] ip_tunnel_newlink+0x2c2/0x8f0 [ 221.161879][T13295] ? ipgre_newlink_encap_setup+0x180/0x350 [ 221.161900][T13295] ? __pfx_ip_tunnel_newlink+0x10/0x10 [ 221.161932][T13295] ? __asan_memset+0x23/0x50 [ 221.161958][T13295] ipgre_newlink+0x1c9/0x250 [ 221.161979][T13295] ? __pfx_ipgre_newlink+0x10/0x10 [ 221.162000][T13295] ? __pfx_validate_linkmsg+0x10/0x10 [ 221.162028][T13295] ? rtnl_create_link+0xa4b/0xf80 [ 221.162050][T13295] ? __pfx_ipgre_newlink+0x10/0x10 [ 221.162071][T13295] rtnl_newlink+0x1697/0x2620 [ 221.162101][T13295] ? __pfx_rtnl_newlink+0x10/0x10 [ 221.162121][T13295] ? avc_has_perm_noaudit+0x56/0x470 [ 221.162144][T13295] ? find_held_lock+0x2b/0x80 [ 221.162171][T13295] ? avc_has_perm_noaudit+0x11e/0x470 [ 221.162190][T13295] ? avc_has_perm_noaudit+0x11e/0x470 [ 221.162235][T13295] ? lock_acquire+0x1d1/0x380 [ 221.162257][T13295] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 221.162277][T13295] ? find_held_lock+0x2b/0x80 [ 221.162303][T13295] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 221.162322][T13295] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 221.162345][T13295] ? __pfx_rtnl_newlink+0x10/0x10 [ 221.162368][T13295] rtnetlink_rcv_msg+0x95e/0xe90 [ 221.162390][T13295] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 221.162418][T13295] ? ref_tracker_free+0x37e/0x6c0 [ 221.162443][T13295] netlink_rcv_skb+0x159/0x420 [ 221.162472][T13295] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 221.162496][T13295] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 221.162532][T13295] ? netlink_deliver_tap+0x1ae/0xcc0 [ 221.162565][T13295] netlink_unicast+0x585/0x850 [ 221.162597][T13295] ? __pfx_netlink_unicast+0x10/0x10 [ 221.162632][T13295] netlink_sendmsg+0x8b0/0xda0 [ 221.162665][T13295] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.162696][T13295] ? selinux_socket_sendmsg+0x198/0x2f0 [ 221.162727][T13295] ____sys_sendmsg+0xa4d/0xbe0 [ 221.162748][T13295] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.162779][T13295] ? __pfx_____sys_sendmsg+0x10/0x10 [ 221.162808][T13295] ? lock_acquire+0x1d1/0x380 [ 221.162829][T13295] ? get_pid_task+0x2a/0x250 [ 221.162858][T13295] ___sys_sendmsg+0x190/0x1e0 [ 221.162884][T13295] ? __pfx____sys_sendmsg+0x10/0x10 [ 221.162909][T13295] ? get_pid_task+0x106/0x250 [ 221.162948][T13295] ? find_held_lock+0x2b/0x80 [ 221.162992][T13295] __sys_sendmsg+0x160/0x210 [ 221.163043][T13295] ? __pfx___sys_sendmsg+0x10/0x10 [ 221.163078][T13295] do_syscall_64+0x123/0x790 [ 221.163108][T13295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.163127][T13295] RIP: 0033:0x7f0db5b9e1d9 [ 221.163143][T13295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.163160][T13295] RSP: 002b:00007f0db6a20028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 221.163179][T13295] RAX: ffffffffffffffda RBX: 00007f0db5e25fa0 RCX: 00007f0db5b9e1d9 [ 221.163192][T13295] RDX: 0000000000000804 RSI: 00002000000003c0 RDI: 0000000000000003 [ 221.163203][T13295] RBP: 00007f0db6a20090 R08: 0000000000000000 R09: 0000000000000000 [ 221.163215][T13295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 221.163226][T13295] R13: 00007f0db5e26038 R14: 00007f0db5e25fa0 R15: 00007ffd0585fd88 [ 221.163251][T13295] [ 221.279619][T13309] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1669'. [ 221.279623][T13310] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1669'. [ 221.301019][T13309] 8021q: adding VLAN 0 to HW filter on device bond8 [ 221.318200][T13309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1669'. [ 221.322100][T13309] bridge4: entered promiscuous mode [ 221.323630][T13309] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 221.832661][T13341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1673'. [ 221.902487][T13341] syzkaller0: entered promiscuous mode [ 221.902502][T13341] syzkaller0: entered allmulticast mode [ 221.904026][T13341] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=24429 sclass=netlink_route_socket pid=13341 comm=syz.2.1673 [ 222.006132][T13354] FAULT_INJECTION: forcing a failure. [ 222.006132][T13354] name failslab, interval 1, probability 5, space 0, times 9957 [ 222.006166][T13354] CPU: 1 UID: 0 PID: 13354 Comm: syz.2.1676 Tainted: G L syzkaller #0 PREEMPT(full) [ 222.006191][T13354] Tainted: [L]=SOFTLOCKUP [ 222.006199][T13354] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 222.006212][T13354] Call Trace: [ 222.006220][T13354] [ 222.006227][T13354] dump_stack_lvl+0x100/0x190 [ 222.006262][T13354] should_fail_ex.cold+0x5/0xa [ 222.006292][T13354] should_failslab+0xc2/0x120 [ 222.006341][T13354] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 222.006368][T13354] ? find_held_lock+0x2b/0x80 [ 222.006401][T13354] ? alloc_inode+0x183/0x250 [ 222.006428][T13354] alloc_inode+0x183/0x250 [ 222.006457][T13354] path_from_stashed+0x25b/0x760 [ 222.006478][T13354] ? do_raw_spin_unlock+0x145/0x1e0 [ 222.006509][T13354] ns_get_path+0x60/0x80 [ 222.006529][T13354] proc_ns_get_link+0x260/0x2e0 [ 222.006550][T13354] ? __pfx_proc_ns_get_link+0x10/0x10 [ 222.006579][T13354] pick_link+0xd17/0x13c0 [ 222.006601][T13354] ? rcu_is_watching+0x13/0xc0 [ 222.006629][T13354] ? __pfx_proc_ns_get_link+0x10/0x10 [ 222.006652][T13354] step_into_slowpath+0x9b3/0x1150 [ 222.006677][T13354] ? proc_ns_dir_lookup+0x1da/0x390 [ 222.006702][T13354] ? __pfx_step_into_slowpath+0x10/0x10 [ 222.006737][T13354] path_openat+0xfab/0x2440 [ 222.006767][T13354] ? __pfx_path_openat+0x10/0x10 [ 222.006799][T13354] do_file_open+0x20e/0x430 [ 222.006829][T13354] ? __pfx_do_file_open+0x10/0x10 [ 222.006874][T13354] ? _raw_spin_unlock+0x28/0x50 [ 222.006898][T13354] ? alloc_fd+0x471/0x7a0 [ 222.006934][T13354] do_sys_openat2+0x10f/0x1e0 [ 222.006953][T13354] ? __pfx_do_sys_openat2+0x10/0x10 [ 222.006981][T13354] __x64_sys_openat+0x12d/0x210 [ 222.006997][T13354] ? __pfx___x64_sys_openat+0x10/0x10 [ 222.007025][T13354] do_syscall_64+0x123/0x790 [ 222.007054][T13354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.007074][T13354] RIP: 0033:0x7ff5cc55ea0e [ 222.007091][T13354] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 222.007110][T13354] RSP: 002b:00007ff5cd550f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 222.007130][T13354] RAX: ffffffffffffffda RBX: 00007ff5cd5516c0 RCX: 00007ff5cc55ea0e [ 222.007142][T13354] RDX: 0000000000000000 RSI: 00007ff5cc634fb6 RDI: ffffffffffffff9c [ 222.007154][T13354] RBP: 00007ff5cc635888 R08: 0000000000000000 R09: 0000000000000000 [ 222.007166][T13354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.007177][T13354] R13: 00007ff5cc826038 R14: 00007ff5cc825fa0 R15: 00007fffe3b20408 [ 222.007205][T13354] [ 222.012360][T13247] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 222.015685][T13247] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 222.018057][T13247] wireguard: wg0: Could not create IPv4 socket [ 222.020104][T13247] wireguard: wg1: Could not create IPv4 socket [ 222.025347][T13247] wireguard: wg2: Could not create IPv4 socket [ 222.051777][T13356] cougar: G6 mapped to space [ 222.053661][T13356] FAULT_INJECTION: forcing a failure. [ 222.053661][T13356] name failslab, interval 1, probability 5, space 0, times 10000 [ 222.053680][T13356] CPU: 3 UID: 0 PID: 13356 Comm: syz.2.1677 Tainted: G L syzkaller #0 PREEMPT(full) [ 222.053696][T13356] Tainted: [L]=SOFTLOCKUP [ 222.053700][T13356] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 222.053707][T13356] Call Trace: [ 222.053711][T13356] [ 222.053716][T13356] dump_stack_lvl+0x100/0x190 [ 222.053737][T13356] should_fail_ex.cold+0x5/0xa [ 222.053755][T13356] should_failslab+0xc2/0x120 [ 222.053773][T13356] __kmalloc_noprof+0xfc/0x840 [ 222.053789][T13356] ? sk_prot_alloc+0x10b/0x2a0 [ 222.053805][T13356] sk_prot_alloc+0x10b/0x2a0 [ 222.053820][T13356] sk_alloc+0x36/0xe80 [ 222.053839][T13356] packet_create+0x127/0x8e0 [ 222.053853][T13356] __sock_create+0x339/0x860 [ 222.053871][T13356] __sys_socket+0x14d/0x260 [ 222.053886][T13356] ? __pfx___sys_socket+0x10/0x10 [ 222.053905][T13356] __x64_sys_socket+0x72/0xb0 [ 222.053919][T13356] ? lockdep_hardirqs_on+0x7d/0x110 [ 222.053935][T13356] do_syscall_64+0x123/0x790 [ 222.053952][T13356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.053963][T13356] RIP: 0033:0x7ff5cc59e1d9 [ 222.053972][T13356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.053983][T13356] RSP: 002b:00007ff5cd551028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 222.053994][T13356] RAX: ffffffffffffffda RBX: 00007ff5cc825fa0 RCX: 00007ff5cc59e1d9 [ 222.054001][T13356] RDX: 0000000000000300 RSI: 0000000000000003 RDI: 0000000000000011 [ 222.054008][T13356] RBP: 00007ff5cc635888 R08: 0000000000000000 R09: 0000000000000000 [ 222.054014][T13356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.054021][T13356] R13: 00007ff5cc826038 R14: 00007ff5cc825fa0 R15: 00007fffe3b20408 [ 222.054035][T13356] [ 222.054574][T13356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1677'. [ 223.175084][T13397] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13397 comm=syz.3.1684 [ 223.491151][T13413] program syz.3.1686 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 223.571887][T13421] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 223.620230][T13424] ucma_write: process 1380 (syz.3.1690) changed security contexts after opening file descriptor, this is not allowed. [ 223.918440][T13435] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1691'. [ 223.920173][T13435] FAULT_INJECTION: forcing a failure. [ 223.920173][T13435] name failslab, interval 1, probability 5, space 0, times 9999 [ 223.920194][T13435] CPU: 2 UID: 0 PID: 13435 Comm: syz.2.1691 Tainted: G L syzkaller #0 PREEMPT(full) [ 223.920209][T13435] Tainted: [L]=SOFTLOCKUP [ 223.920214][T13435] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 223.920220][T13435] Call Trace: [ 223.920225][T13435] [ 223.920230][T13435] dump_stack_lvl+0x100/0x190 [ 223.920251][T13435] should_fail_ex.cold+0x5/0xa [ 223.920269][T13435] should_failslab+0xc2/0x120 [ 223.920286][T13435] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 223.920301][T13435] ? sock_alloc_inode+0x26/0x2c0 [ 223.920316][T13435] ? __pfx_sock_alloc_inode+0x10/0x10 [ 223.920330][T13435] sock_alloc_inode+0x26/0x2c0 [ 223.920343][T13435] ? __pfx_sock_alloc_inode+0x10/0x10 [ 223.920356][T13435] alloc_inode+0x68/0x250 [ 223.920369][T13435] sock_alloc+0x44/0x280 [ 223.920381][T13435] ? security_socket_create+0x7f/0x250 [ 223.920396][T13435] __sock_create+0xc2/0x860 [ 223.920419][T13435] __sys_socket+0x14d/0x260 [ 223.920441][T13435] ? __pfx___sys_socket+0x10/0x10 [ 223.920470][T13435] __x64_sys_socket+0x72/0xb0 [ 223.920493][T13435] ? lockdep_hardirqs_on+0x7d/0x110 [ 223.920521][T13435] do_syscall_64+0x123/0x790 [ 223.920551][T13435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.920577][T13435] RIP: 0033:0x7ff5cc59e1d9 [ 223.920587][T13435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.920599][T13435] RSP: 002b:00007ff5cd551028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 223.920612][T13435] RAX: ffffffffffffffda RBX: 00007ff5cc825fa0 RCX: 00007ff5cc59e1d9 [ 223.920620][T13435] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 223.920626][T13435] RBP: 00007ff5cc635888 R08: 0000000000000000 R09: 0000000000000000 [ 223.920633][T13435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.920642][T13435] R13: 00007ff5cc826038 R14: 00007ff5cc825fa0 R15: 00007fffe3b20408 [ 223.920657][T13435] [ 223.920664][T13435] socket: no more sockets [ 224.011668][T13441] FAULT_INJECTION: forcing a failure. [ 224.011668][T13441] name failslab, interval 1, probability 5, space 0, times 9998 [ 224.011700][T13441] CPU: 3 UID: 0 PID: 13441 Comm: syz.2.1693 Tainted: G L syzkaller #0 PREEMPT(full) [ 224.011725][T13441] Tainted: [L]=SOFTLOCKUP [ 224.011734][T13441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 224.011744][T13441] Call Trace: [ 224.011751][T13441] [ 224.011759][T13441] dump_stack_lvl+0x100/0x190 [ 224.011794][T13441] should_fail_ex.cold+0x5/0xa [ 224.011821][T13441] should_failslab+0xc2/0x120 [ 224.011850][T13441] kmem_cache_alloc_noprof+0x92/0x6a0 [ 224.011873][T13441] ? _raw_spin_unlock+0x28/0x50 [ 224.011905][T13441] ? alloc_empty_file+0x5b/0x1c0 [ 224.011930][T13441] alloc_empty_file+0x5b/0x1c0 [ 224.011953][T13441] dentry_open+0x46/0xd0 [ 224.011982][T13441] do_mq_open+0x5a8/0x9c0 [ 224.012009][T13441] ? __pfx_do_mq_open+0x10/0x10 [ 224.012032][T13441] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 224.012065][T13441] __x64_sys_mq_open+0x152/0x1e0 [ 224.012089][T13441] ? __pfx___x64_sys_mq_open+0x10/0x10 [ 224.012125][T13441] do_syscall_64+0x123/0x790 [ 224.012155][T13441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.012175][T13441] RIP: 0033:0x7ff5cc59e1d9 [ 224.012191][T13441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.012210][T13441] RSP: 002b:00007ff5cd551028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 224.012229][T13441] RAX: ffffffffffffffda RBX: 00007ff5cc825fa0 RCX: 00007ff5cc59e1d9 [ 224.012242][T13441] RDX: 00000000000000e8 RSI: 0000000000000040 RDI: 0000200000000280 [ 224.012254][T13441] RBP: 00007ff5cc635888 R08: 0000000000000000 R09: 0000000000000000 [ 224.012266][T13441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.012276][T13441] R13: 00007ff5cc826038 R14: 00007ff5cc825fa0 R15: 00007fffe3b20408 [ 224.012304][T13441] [ 224.106551][T13445] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 224.106576][T13445] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 224.107710][T13445] vhci_hcd vhci_hcd.0: Device attached [ 224.125818][T13446] vhci_hcd: connection closed [ 224.130388][ T8008] vhci_hcd vhci_hcd.2: stop threads [ 224.131010][ T8008] vhci_hcd vhci_hcd.2: release socket [ 224.131025][ T8008] vhci_hcd vhci_hcd.2: disconnect device [ 224.152045][ T43] kauditd_printk_skb: 39 callbacks suppressed [ 224.152058][ T43] audit: type=1400 audit(1792148148.754:2165): avc: denied { write } for pid=13444 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.196698][ T43] audit: type=1400 audit(1792148148.791:2166): avc: denied { write } for pid=13450 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.305209][ T43] audit: type=1400 audit(1792148148.893:2167): avc: denied { write } for pid=13452 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.361857][ T43] audit: type=1400 audit(1792148148.939:2168): avc: denied { write } for pid=13455 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.432854][T13459] syzkaller0: entered promiscuous mode [ 224.432901][T13459] syzkaller0: entered allmulticast mode [ 224.483859][ T43] audit: type=1400 audit(1792148149.059:2169): avc: denied { write } for pid=13457 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.535381][ T43] audit: type=1400 audit(1792148149.114:2170): avc: denied { write } for pid=13462 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.596050][T13469] Device name not specified. [ 224.596050][T13469] [ 224.626091][ T43] audit: type=1400 audit(1792148149.188:2171): avc: denied { write } for pid=13466 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.681677][ T43] audit: type=1400 audit(1792148149.244:2172): avc: denied { write } for pid=13471 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.778669][ T43] audit: type=1400 audit(1792148149.336:2173): avc: denied { write } for pid=13479 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.825011][ T43] audit: type=1400 audit(1792148149.373:2174): avc: denied { write } for pid=13486 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 225.085629][ T5771] usb 7-1: new high-speed USB device number 93 using dummy_hcd [ 225.270387][ T5771] usb 7-1: New USB device found, idVendor=28de, idProduct=1302, bcdDevice= 0.00 [ 225.271432][ T5771] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.271466][ T5771] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.275172][ T5771] usb 7-1: config 0 descriptor?? [ 225.537336][T13490] overlay: Bad value for 'upperdir' [ 225.953553][ T5728] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 225.953584][ T5728] Bluetooth: hci1: unexpected event for opcode 0x206e [ 225.955275][ T5728] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 225.987878][ T5735] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 225.991048][ T5735] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 225.995966][ T5735] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 225.998061][ T5735] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 226.000661][ T5735] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 226.209436][T13536] Failed to initialize the IGMP autojoin socket (err -2) [ 226.534930][T13567] FAULT_INJECTION: forcing a failure. [ 226.534930][T13567] name failslab, interval 1, probability 5, space 0, times 9996 [ 226.534954][T13567] CPU: 3 UID: 0 PID: 13567 Comm: syz.3.1708 Tainted: G L syzkaller #0 PREEMPT(full) [ 226.534969][T13567] Tainted: [L]=SOFTLOCKUP [ 226.534973][T13567] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 226.534981][T13567] Call Trace: [ 226.534986][T13567] [ 226.534991][T13567] dump_stack_lvl+0x100/0x190 [ 226.535024][T13567] should_fail_ex.cold+0x5/0xa [ 226.535042][T13567] should_failslab+0xc2/0x120 [ 226.535060][T13567] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 226.535076][T13567] ? sock_alloc_inode+0x26/0x2c0 [ 226.535091][T13567] ? __pfx_sock_alloc_inode+0x10/0x10 [ 226.535105][T13567] sock_alloc_inode+0x26/0x2c0 [ 226.535118][T13567] ? __pfx_sock_alloc_inode+0x10/0x10 [ 226.535131][T13567] alloc_inode+0x68/0x250 [ 226.535144][T13567] sock_alloc+0x44/0x280 [ 226.535156][T13567] ? security_socket_create+0x7f/0x250 [ 226.535172][T13567] __sock_create+0xc2/0x860 [ 226.535189][T13567] __sys_socket+0x14d/0x260 [ 226.535204][T13567] ? __pfx___sys_socket+0x10/0x10 [ 226.535223][T13567] __x64_sys_socket+0x72/0xb0 [ 226.535238][T13567] ? lockdep_hardirqs_on+0x7d/0x110 [ 226.535256][T13567] do_syscall_64+0x123/0x790 [ 226.535273][T13567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.535285][T13567] RIP: 0033:0x7f0db5b9fa47 [ 226.535295][T13567] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.535305][T13567] RSP: 002b:00007f0db6a1ef98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 226.535317][T13567] RAX: ffffffffffffffda RBX: 00007f0db5e25fa0 RCX: 00007f0db5b9fa47 [ 226.535325][T13567] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 226.535333][T13567] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 226.535340][T13567] R10: 0000200000000440 R11: 0000000000000286 R12: 0000000000000000 [ 226.535348][T13567] R13: 00007f0db5e26038 R14: 00007f0db5e25fa0 R15: 00007ffd0585fd88 [ 226.535363][T13567] [ 226.535417][T13567] socket: no more sockets [ 226.786158][T11858] usb 8-1: new high-speed USB device number 76 using dummy_hcd [ 226.948915][T11858] usb 8-1: Using ep0 maxpacket: 32 [ 226.949503][T11858] usb 8-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 226.950569][T11858] usb 8-1: config 0 has an invalid interface number: 119 but max is 0 [ 226.950582][T11858] usb 8-1: config 0 has no interface number 0 [ 226.950600][T11858] usb 8-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 226.950612][T11858] usb 8-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 226.950625][T11858] usb 8-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 226.950640][T11858] usb 8-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 226.952612][T11858] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.952626][T11858] usb 8-1: Product: syz [ 226.952635][T11858] usb 8-1: Manufacturer: syz [ 226.952643][T11858] usb 8-1: SerialNumber: syz [ 226.957416][T11858] usb 8-1: config 0 descriptor?? [ 226.962316][T11858] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.119/input/input59 [ 227.180245][T11858] usb 8-1: USB disconnect, device number 76 [ 227.767848][T13607] FAULT_INJECTION: forcing a failure. [ 227.767848][T13607] name failslab, interval 1, probability 5, space 0, times 9995 [ 227.767869][T13607] CPU: 3 UID: 0 PID: 13607 Comm: syz.3.1709 Tainted: G L syzkaller #0 PREEMPT(full) [ 227.767884][T13607] Tainted: [L]=SOFTLOCKUP [ 227.767889][T13607] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 227.767896][T13607] Call Trace: [ 227.767900][T13607] [ 227.767905][T13607] dump_stack_lvl+0x100/0x190 [ 227.767926][T13607] should_fail_ex.cold+0x5/0xa [ 227.767955][T13607] should_failslab+0xc2/0x120 [ 227.767974][T13607] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 227.767991][T13607] ? __alloc_skb+0x140/0x710 [ 227.768006][T13607] __alloc_skb+0x140/0x710 [ 227.768016][T13607] ? __alloc_skb+0x5b7/0x710 [ 227.768027][T13607] ? __pfx___alloc_skb+0x10/0x10 [ 227.768039][T13607] ? __asan_memcpy+0x3c/0x60 [ 227.768054][T13607] alloc_uevent_skb+0x7d/0x210 [ 227.768069][T13607] kobject_uevent_env+0x122c/0x18b0 [ 227.768090][T13607] net_rx_queue_update_kobjects+0x1dd/0x760 [ 227.768108][T13607] ? kset_register+0x1bb/0x290 [ 227.768123][T13607] netdev_register_kobject+0x2c6/0x410 [ 227.768141][T13607] register_netdevice+0x15b6/0x25a0 [ 227.768158][T13607] ? __pfx_register_netdevice+0x10/0x10 [ 227.768175][T13607] bond_newlink+0x6a/0x100 [ 227.768194][T13607] ? __pfx_bond_newlink+0x10/0x10 [ 227.768211][T13607] rtnl_newlink+0x1697/0x2620 [ 227.768229][T13607] ? __pfx_rtnl_newlink+0x10/0x10 [ 227.768241][T13607] ? avc_has_perm_noaudit+0x56/0x470 [ 227.768253][T13607] ? find_held_lock+0x2b/0x80 [ 227.768270][T13607] ? avc_has_perm_noaudit+0x11e/0x470 [ 227.768281][T13607] ? avc_has_perm_noaudit+0x11e/0x470 [ 227.768308][T13607] ? lock_acquire+0x1d1/0x380 [ 227.768320][T13607] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 227.768333][T13607] ? find_held_lock+0x2b/0x80 [ 227.768349][T13607] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 227.768360][T13607] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 227.768374][T13607] ? __pfx_rtnl_newlink+0x10/0x10 [ 227.768387][T13607] rtnetlink_rcv_msg+0x95e/0xe90 [ 227.768402][T13607] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 227.768420][T13607] ? ref_tracker_free+0x37e/0x6c0 [ 227.768434][T13607] netlink_rcv_skb+0x159/0x420 [ 227.768451][T13607] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 227.768465][T13607] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 227.768493][T13607] ? netlink_deliver_tap+0x1ae/0xcc0 [ 227.768513][T13607] netlink_unicast+0x585/0x850 [ 227.768533][T13607] ? __pfx_netlink_unicast+0x10/0x10 [ 227.768555][T13607] netlink_sendmsg+0x8b0/0xda0 [ 227.768576][T13607] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.768596][T13607] ? selinux_socket_sendmsg+0x198/0x2f0 [ 227.768615][T13607] ____sys_sendmsg+0xa4d/0xbe0 [ 227.768629][T13607] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.768648][T13607] ? __pfx_____sys_sendmsg+0x10/0x10 [ 227.768669][T13607] ___sys_sendmsg+0x190/0x1e0 [ 227.768685][T13607] ? __pfx____sys_sendmsg+0x10/0x10 [ 227.768700][T13607] ? futex_wait+0x11e/0x370 [ 227.768718][T13607] ? find_held_lock+0x2b/0x80 [ 227.768744][T13607] __sys_sendmsg+0x160/0x210 [ 227.768756][T13607] ? __pfx___sys_sendmsg+0x10/0x10 [ 227.768775][T13607] do_syscall_64+0x123/0x790 [ 227.768793][T13607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.768805][T13607] RIP: 0033:0x7f0db5b9e1d9 [ 227.768815][T13607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.768826][T13607] RSP: 002b:00007f0db6a20028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 227.768838][T13607] RAX: ffffffffffffffda RBX: 00007f0db5e25fa0 RCX: 00007f0db5b9e1d9 [ 227.768845][T13607] RDX: 5821c98b097a09f2 RSI: 00002000000005c0 RDI: 0000000000000005 [ 227.768852][T13607] RBP: 00007f0db5c35888 R08: 0000000000000000 R09: 0000000000000000 [ 227.768882][T13607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.768890][T13607] R13: 00007f0db5e26038 R14: 00007f0db5e25fa0 R15: 00007ffd0585fd88 [ 227.768906][T13607] [ 228.082124][ T5771] usbhid 7-1:0.0: can't add hid device: -71 [ 228.082263][ T5771] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 228.101219][ T5771] usb 7-1: USB disconnect, device number 93 [ 228.121729][T13629] CIFS: VFS: UNC: path must begin with // or \\ [ 228.121744][T13629] Malformed UNC in devname [ 228.121744][T13629] [ 228.121756][T13629] CIFS: VFS: Malformed UNC in devname [ 228.136484][T13630] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1714'. [ 228.152791][T13630] qrtr: Invalid version 2 [ 228.259303][ T5728] Bluetooth: hci0: command tx timeout [ 228.454320][ T5771] usb 7-1: new high-speed USB device number 94 using dummy_hcd [ 228.616839][ T5771] usb 7-1: Using ep0 maxpacket: 32 [ 228.619983][ T5771] usb 7-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 228.620995][ T5771] usb 7-1: config 0 has an invalid interface number: 119 but max is 0 [ 228.621015][ T5771] usb 7-1: config 0 has no interface number 0 [ 228.621044][ T5771] usb 7-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 228.621061][ T5771] usb 7-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 228.621082][ T5771] usb 7-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 228.621111][ T5771] usb 7-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 228.623106][ T5771] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.623123][ T5771] usb 7-1: Product: syz [ 228.623137][ T5771] usb 7-1: Manufacturer: syz [ 228.623148][ T5771] usb 7-1: SerialNumber: syz [ 228.625259][ T5771] usb 7-1: config 0 descriptor?? [ 228.632565][ T5771] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.119/input/input60 [ 228.860159][ T5771] usb 7-1: USB disconnect, device number 94 [ 229.274575][T13536] netdevsim netdevsim7 netdevsim0: renamed from eth26 [ 229.282632][T13536] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 229.283070][T13536] netdevsim netdevsim7 netdevsim1: renamed from eth27 [ 229.292578][T13536] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 229.293495][T13536] netdevsim netdevsim7 netdevsim2: renamed from eth28 [ 229.296558][T13536] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 229.297130][T13536] netdevsim netdevsim7 netdevsim3: renamed from eth29 [ 229.306029][T13536] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 229.698733][T13536] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 229.701643][T13536] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 229.704097][T13536] wireguard: wg0: Could not create IPv4 socket [ 229.705843][T13536] wireguard: wg1: Could not create IPv4 socket [ 229.707518][T13536] wireguard: wg2: Could not create IPv4 socket [ 230.081125][ T43] kauditd_printk_skb: 71 callbacks suppressed [ 230.081141][ T43] audit: type=1400 audit(1792148154.229:2246): avc: denied { write } for pid=13682 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.126417][ T43] audit: type=1400 audit(1792148154.275:2247): avc: denied { write } for pid=13685 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.231515][ T43] audit: type=1400 audit(1792148154.368:2248): avc: denied { write } for pid=13688 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.281066][ T43] audit: type=1400 audit(1792148154.414:2249): avc: denied { write } for pid=13691 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.331611][ T43] audit: type=1400 audit(1792148154.460:2250): avc: denied { write } for pid=13693 comm="syz-executor" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 230.339815][T13696] FAULT_INJECTION: forcing a failure. [ 230.339815][T13696] name failslab, interval 1, probability 5, space 0, times 9994 [ 230.339848][T13696] CPU: 0 UID: 0 PID: 13696 Comm: syz.3.1717 Tainted: G L syzkaller #0 PREEMPT(full) [ 230.339873][T13696] Tainted: [L]=SOFTLOCKUP [ 230.339880][T13696] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 230.339890][T13696] Call Trace: [ 230.339897][T13696] [ 230.339904][T13696] dump_stack_lvl+0x100/0x190 [ 230.339935][T13696] should_fail_ex.cold+0x5/0xa [ 230.339961][T13696] should_failslab+0xc2/0x120 [ 230.339988][T13696] kmem_cache_alloc_noprof+0x92/0x6a0 [ 230.340012][T13696] ? do_getname+0x35/0x390 [ 230.340034][T13696] do_getname+0x35/0x390 [ 230.340056][T13696] do_sys_openat2+0xc7/0x1e0 [ 230.340075][T13696] ? __pfx_do_sys_openat2+0x10/0x10 [ 230.340093][T13696] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 230.340128][T13696] __x64_sys_openat+0x12d/0x210 [ 230.340146][T13696] ? __pfx___x64_sys_openat+0x10/0x10 [ 230.340191][T13696] do_syscall_64+0x123/0x790 [ 230.340221][T13696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.340243][T13696] RIP: 0033:0x7f0db5b9e1d9 [ 230.340260][T13696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.340278][T13696] RSP: 002b:00007f0db6a20028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 230.340298][T13696] RAX: ffffffffffffffda RBX: 00007f0db5e25fa0 RCX: 00007f0db5b9e1d9 [ 230.340310][T13696] RDX: 0000000000080d01 RSI: 0000200000000680 RDI: ffffffffffffff9c [ 230.340321][T13696] RBP: 00007f0db5c35888 R08: 0000000000000000 R09: 0000000000000000 [ 230.340334][T13696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 230.340344][T13696] R13: 00007f0db5e26038 R14: 00007f0db5e25fa0 R15: 00007ffd0585fd88 [ 230.340369][T13696] [ 230.407079][ T5728] Bluetooth: hci2: unexpected event for opcode 0x2039 [ 230.436105][ T5735] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 230.440317][ T5735] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 230.442083][ T5735] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 230.445659][ T5735] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 230.445904][ T5735] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 230.452418][ T43] audit: type=1400 audit(1792148154.571:2251): avc: denied { write } for pid=13698 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.497358][ T43] audit: type=1400 audit(1792148154.608:2252): avc: denied { write } for pid=13712 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.579339][T13725] syzkaller0: entered promiscuous mode [ 230.579361][T13725] syzkaller0: entered allmulticast mode [ 230.647115][T13705] Failed to initialize the IGMP autojoin socket (err -2) [ 230.706425][T13733] veth0_to_team: entered promiscuous mode [ 230.708143][T13733] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 231.039501][T13740] FAULT_INJECTION: forcing a failure. [ 231.039501][T13740] name failslab, interval 1, probability 5, space 0, times 9993 [ 231.039533][T13740] CPU: 0 UID: 0 PID: 13740 Comm: syz.2.1726 Tainted: G L syzkaller #0 PREEMPT(full) [ 231.039559][T13740] Tainted: [L]=SOFTLOCKUP [ 231.039566][T13740] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 231.039578][T13740] Call Trace: [ 231.039592][T13740] [ 231.039600][T13740] dump_stack_lvl+0x100/0x190 [ 231.039642][T13740] should_fail_ex.cold+0x5/0xa [ 231.039668][T13740] should_failslab+0xc2/0x120 [ 231.039704][T13740] __kmalloc_noprof+0xfc/0x840 [ 231.039728][T13740] ? __pfx_dynamic_dname+0x10/0x10 [ 231.039749][T13740] ? tomoyo_encode2+0xfb/0x3c0 [ 231.039780][T13740] tomoyo_encode2+0xfb/0x3c0 [ 231.039813][T13740] tomoyo_encode+0x29/0x50 [ 231.039839][T13740] tomoyo_realpath_from_path+0x18c/0x690 [ 231.039874][T13740] tomoyo_path_number_perm+0x23c/0x580 [ 231.039898][T13740] ? tomoyo_path_number_perm+0x22e/0x580 [ 231.039923][T13740] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 231.039959][T13740] ? __lock_acquire+0x5c0/0x1f40 [ 231.039995][T13740] ? __fget_files+0x34/0x3d0 [ 231.040023][T13740] ? find_held_lock+0x2b/0x80 [ 231.040056][T13740] ? hook_file_ioctl_common+0x140/0x440 [ 231.040083][T13740] ? __fget_files+0x21f/0x3d0 [ 231.040115][T13740] security_file_ioctl+0xd3/0x230 [ 231.040141][T13740] __x64_sys_ioctl+0xb7/0x210 [ 231.040167][T13740] do_syscall_64+0x123/0x790 [ 231.040202][T13740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.040222][T13740] RIP: 0033:0x7ff5cc59e1d9 [ 231.040239][T13740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.040256][T13740] RSP: 002b:00007ff5cd551028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 231.040280][T13740] RAX: ffffffffffffffda RBX: 00007ff5cc825fa0 RCX: 00007ff5cc59e1d9 [ 231.040292][T13740] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 231.040303][T13740] RBP: 00007ff5cd551090 R08: 0000000000000000 R09: 0000000000000000 [ 231.040314][T13740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.040325][T13740] R13: 00007ff5cc826038 R14: 00007ff5cc825fa0 R15: 00007fffe3b20408 [ 231.040351][T13740] [ 231.040366][T13740] ERROR: Out of memory at tomoyo_realpath_from_path. [ 231.188889][T13744] rnbd_client L607: Mapping device /dev/ram0 on session s0, (access_mode: rw, nr_poll_queues: 0) [ 231.199322][T13744] FAULT_INJECTION: forcing a failure. [ 231.199322][T13744] name failslab, interval 1, probability 5, space 0, times 9992 [ 231.199344][T13744] CPU: 2 UID: 0 PID: 13744 Comm: syz.3.1728 Tainted: G L syzkaller #0 PREEMPT(full) [ 231.199359][T13744] Tainted: [L]=SOFTLOCKUP [ 231.199364][T13744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 231.199370][T13744] Call Trace: [ 231.199379][T13744] [ 231.199384][T13744] dump_stack_lvl+0x100/0x190 [ 231.199411][T13744] should_fail_ex.cold+0x5/0xa [ 231.199428][T13744] should_failslab+0xc2/0x120 [ 231.199448][T13744] kmem_cache_alloc_noprof+0x92/0x6a0 [ 231.199464][T13744] ? __kernfs_new_node+0xd2/0xa10 [ 231.199480][T13744] __kernfs_new_node+0xd2/0xa10 [ 231.199496][T13744] ? __pfx___kernfs_new_node+0x10/0x10 [ 231.199510][T13744] ? lock_acquire+0x1d1/0x380 [ 231.199523][T13744] ? kernfs_root+0x23/0x2a0 [ 231.199534][T13744] ? find_held_lock+0x2b/0x80 [ 231.199551][T13744] ? kernfs_root+0xee/0x2a0 [ 231.199562][T13744] ? kernfs_root+0xee/0x2a0 [ 231.199576][T13744] kernfs_new_node+0x117/0x150 [ 231.199597][T13744] __kernfs_create_file+0x53/0x350 [ 231.199615][T13744] sysfs_add_file_mode_ns+0x207/0x3c0 [ 231.199636][T13744] sysfs_merge_group+0x194/0x340 [ 231.199649][T13744] ? __pfx_sysfs_merge_group+0x10/0x10 [ 231.199661][T13744] ? bus_add_device+0x2e2/0x6c0 [ 231.199678][T13744] ? __pfx_bus_add_device+0x10/0x10 [ 231.199693][T13744] ? __pfx_dev_add_physical_location+0x10/0x10 [ 231.199709][T13744] dpm_sysfs_add+0x237/0x280 [ 231.199723][T13744] device_add+0x9f4/0x1970 [ 231.199737][T13744] ? __pfx_device_add+0x10/0x10 [ 231.199749][T13744] ? lockdep_init_map_type+0x5c/0x250 [ 231.199764][T13744] ? __init_waitqueue_head+0xca/0x150 [ 231.199782][T13744] rtrs_clt_open+0x580/0x1450 [ 231.199800][T13744] ? __pfx_rnbd_clt_link_ev+0x10/0x10 [ 231.199815][T13744] rnbd_clt_map_device+0x12eb/0x2730 [ 231.199830][T13744] ? kasan_save_stack+0x3f/0x50 [ 231.199847][T13744] ? __pfx_rnbd_clt_map_device+0x10/0x10 [ 231.199859][T13744] ? __irq_work_queue_local+0x1f4/0x510 [ 231.199877][T13744] ? __pfx___irq_work_queue_local+0x10/0x10 [ 231.199895][T13744] ? console_srcu_read_unlock+0x41/0x60 [ 231.199910][T13744] ? __pfx_rnbd_clt_link_ev+0x10/0x10 [ 231.199924][T13744] ? irq_work_queue+0xd1/0x100 [ 231.199953][T13744] ? rnbd_clt_map_device_store+0x670/0xe00 [ 231.199966][T13744] ? rnbd_clt_map_device_store+0x72f/0xe00 [ 231.199982][T13744] rnbd_clt_map_device_store+0x7c6/0xe00 [ 231.199999][T13744] ? __pfx_rnbd_clt_map_device_store+0x10/0x10 [ 231.200012][T13744] ? __lock_acquire+0x5c0/0x1f40 [ 231.200027][T13744] ? lock_acquire+0x1d1/0x380 [ 231.200048][T13744] ? bpf_ksym_find+0x128/0x1c0 [ 231.200069][T13744] ? look_up_lock_class+0x55/0x120 [ 231.200090][T13744] ? register_lock_class+0x3f/0x7b0 [ 231.200129][T13744] ? lock_acquire+0x1d1/0x380 [ 231.200142][T13744] ? kernfs_fop_write_iter+0x2c2/0x5f0 [ 231.200162][T13744] ? __lock_acquire+0x5c0/0x1f40 [ 231.200175][T13744] ? __lock_acquire+0x5c0/0x1f40 [ 231.200193][T13744] ? lock_acquire+0x1d1/0x380 [ 231.200206][T13744] ? sysfs_file_kobj+0x21/0x290 [ 231.200222][T13744] ? find_held_lock+0x2b/0x80 [ 231.200239][T13744] ? sysfs_file_kobj+0xe4/0x290 [ 231.200256][T13744] ? __pfx_rnbd_clt_map_device_store+0x10/0x10 [ 231.200269][T13744] ? dev_attr_store+0x58/0x80 [ 231.200280][T13744] dev_attr_store+0x58/0x80 [ 231.200292][T13744] ? __pfx_dev_attr_store+0x10/0x10 [ 231.200305][T13744] sysfs_kf_write+0xf2/0x150 [ 231.200322][T13744] kernfs_fop_write_iter+0x3e0/0x5f0 [ 231.200336][T13744] ? __pfx_sysfs_kf_write+0x10/0x10 [ 231.200355][T13744] vfs_write+0x6af/0x1050 [ 231.200370][T13744] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 231.200386][T13744] ? __pfx_vfs_write+0x10/0x10 [ 231.200399][T13744] ? find_held_lock+0x2b/0x80 [ 231.200425][T13744] ksys_write+0x12a/0x250 [ 231.200439][T13744] ? __pfx_ksys_write+0x10/0x10 [ 231.200458][T13744] do_syscall_64+0x123/0x790 [ 231.200475][T13744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.200488][T13744] RIP: 0033:0x7f0db5b9e1d9 [ 231.200498][T13744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.200509][T13744] RSP: 002b:00007f0db6a20028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 231.200524][T13744] RAX: ffffffffffffffda RBX: 00007f0db5e25fa0 RCX: 00007f0db5b9e1d9 [ 231.200531][T13744] RDX: 0000000000000033 RSI: 0000200000000600 RDI: 0000000000000003 [ 231.200538][T13744] RBP: 00007f0db6a20090 R08: 0000000000000000 R09: 0000000000000000 [ 231.200545][T13744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 231.200552][T13744] R13: 00007f0db5e26038 R14: 00007f0db5e25fa0 R15: 00007ffd0585fd88 [ 231.200567][T13744] [ 231.234715][T13746] program syz.2.1729 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 231.287839][T13748] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1730'. [ 231.366427][T13748] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13748 comm=syz.3.1730 [ 231.377553][ T43] audit: type=1400 audit(1792148155.420:2253): avc: denied { mount } for pid=13747 comm="syz.3.1730" name="/" dev="ramfs" ino=61687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 231.392889][ T43] audit: type=1400 audit(1792148155.438:2254): avc: denied { unmount } for pid=5726 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 231.433595][T13753] bond15: entered promiscuous mode [ 231.433878][T13753] 8021q: adding VLAN 0 to HW filter on device bond15 [ 231.443493][T13753] bond16: entered promiscuous mode [ 231.443671][T13753] 8021q: adding VLAN 0 to HW filter on device bond16 [ 231.465873][T13753] bond17: entered promiscuous mode [ 231.466281][T13753] 8021q: adding VLAN 0 to HW filter on device bond17 [ 231.473693][T13751] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 231.473896][T13751] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 231.474062][T13759] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 231.489840][T13753] bond18: entered promiscuous mode [ 231.490069][T13753] 8021q: adding VLAN 0 to HW filter on device bond18 [ 231.507813][T13753] bond19: entered promiscuous mode [ 231.508163][T13753] 8021q: adding VLAN 0 to HW filter on device bond19 [ 231.523820][T13753] bond20: entered promiscuous mode [ 231.524037][T13753] 8021q: adding VLAN 0 to HW filter on device bond20 [ 231.544224][T13753] bond21: entered promiscuous mode [ 231.544461][T13753] 8021q: adding VLAN 0 to HW filter on device bond21 [ 231.560390][T13753] bond22: entered promiscuous mode [ 231.560609][T13753] 8021q: adding VLAN 0 to HW filter on device bond22 [ 231.575284][T13753] bond23: entered promiscuous mode [ 231.575476][T13753] 8021q: adding VLAN 0 to HW filter on device bond23 [ 231.593308][T13753] bond24: entered promiscuous mode [ 231.593505][T13753] 8021q: adding VLAN 0 to HW filter on device bond24 [ 231.615282][T13753] bond25: entered promiscuous mode [ 231.615596][T13753] 8021q: adding VLAN 0 to HW filter on device bond25 [ 231.629269][T13753] bond26: entered promiscuous mode [ 231.629465][T13753] 8021q: adding VLAN 0 to HW filter on device bond26 [ 231.640390][T13753] bond27: entered promiscuous mode [ 231.640633][T13753] 8021q: adding VLAN 0 to HW filter on device bond27 [ 231.664234][T13753] bond28: entered promiscuous mode [ 231.664487][T13753] 8021q: adding VLAN 0 to HW filter on device bond28 [ 231.675086][T13753] bond29: entered promiscuous mode [ 231.675260][T13753] 8021q: adding VLAN 0 to HW filter on device bond29 [ 231.691085][T13753] bond30: entered promiscuous mode [ 231.691295][T13753] 8021q: adding VLAN 0 to HW filter on device bond30 [ 231.709892][T13753] bond31: entered promiscuous mode [ 231.710128][T13753] 8021q: adding VLAN 0 to HW filter on device bond31 [ 231.721630][T13753] bond32: entered promiscuous mode [ 231.721816][T13753] 8021q: adding VLAN 0 to HW filter on device bond32 [ 231.734999][T13753] bond33: entered promiscuous mode [ 231.735264][T13753] 8021q: adding VLAN 0 to HW filter on device bond33 [ 231.763905][T13753] bond34: entered promiscuous mode [ 231.764123][T13753] 8021q: adding VLAN 0 to HW filter on device bond34 [ 231.780796][T13753] bond35: entered promiscuous mode [ 231.781043][T13753] 8021q: adding VLAN 0 to HW filter on device bond35 [ 231.796911][T13753] bond36: entered promiscuous mode [ 231.799598][T13753] 8021q: adding VLAN 0 to HW filter on device bond36 [ 231.810956][T13753] bond37: entered promiscuous mode [ 231.811186][T13753] 8021q: adding VLAN 0 to HW filter on device bond37 [ 231.829646][T13753] bond38: entered promiscuous mode [ 231.829866][T13753] 8021q: adding VLAN 0 to HW filter on device bond38 [ 231.841445][T13753] bond39: entered promiscuous mode [ 231.841656][T13753] 8021q: adding VLAN 0 to HW filter on device bond39 [ 231.874479][T13753] bond40: entered promiscuous mode [ 231.874835][T13753] 8021q: adding VLAN 0 to HW filter on device bond40 [ 231.887943][T13750] input: ImExPS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input61 [ 231.888829][ T43] audit: type=1400 audit(1792148155.900:2255): avc: denied { search } for pid=5127 comm="acpid" name="/" dev="sda1" ino=2 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 231.930508][T13753] bond41: entered promiscuous mode [ 231.931078][T13753] 8021q: adding VLAN 0 to HW filter on device bond41 [ 231.959091][T13753] bond42: entered promiscuous mode [ 231.960714][T13753] 8021q: adding VLAN 0 to HW filter on device bond42 [ 232.006167][T13753] bond43: entered promiscuous mode [ 232.006457][T13753] 8021q: adding VLAN 0 to HW filter on device bond43 [ 232.021767][T13753] bond44: entered promiscuous mode [ 232.022007][T13753] 8021q: adding VLAN 0 to HW filter on device bond44 [ 232.042003][T13753] bond45: entered promiscuous mode [ 232.042224][T13753] 8021q: adding VLAN 0 to HW filter on device bond45 [ 232.051637][T13753] bond46: entered promiscuous mode [ 232.051810][T13753] 8021q: adding VLAN 0 to HW filter on device bond46 [ 232.062807][T13753] bond47: entered promiscuous mode [ 232.063040][T13753] 8021q: adding VLAN 0 to HW filter on device bond47 [ 232.203600][T13802] FAULT_INJECTION: forcing a failure. [ 232.203600][T13802] name failslab, interval 1, probability 5, space 0, times 9991 [ 232.203623][T13802] CPU: 3 UID: 0 PID: 13802 Comm: syz.3.1735 Tainted: G L syzkaller #0 PREEMPT(full) [ 232.203638][T13802] Tainted: [L]=SOFTLOCKUP [ 232.203642][T13802] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 232.203649][T13802] Call Trace: [ 232.203653][T13802] [ 232.203658][T13802] dump_stack_lvl+0x100/0x190 [ 232.203679][T13802] should_fail_ex.cold+0x5/0xa [ 232.203696][T13802] should_failslab+0xc2/0x120 [ 232.203713][T13802] kmem_cache_alloc_noprof+0x92/0x6a0 [ 232.203728][T13802] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 232.203749][T13802] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 232.203770][T13802] mmu_topup_memory_caches+0x25/0x170 [ 232.203785][T13802] kvm_mmu_load+0xe8/0x2580 [ 232.203799][T13802] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 232.203816][T13802] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 232.203836][T13802] ? __pfx_kvm_mmu_load+0x10/0x10 [ 232.203848][T13802] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 232.203861][T13802] ? kvm_check_and_inject_events+0x896/0x1050 [ 232.203877][T13802] vcpu_run+0x419f/0x61a0 [ 232.203890][T13802] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 232.203914][T13802] ? __pfx_vcpu_run+0x10/0x10 [ 232.203931][T13802] ? lock_acquire+0x1d1/0x380 [ 232.203943][T13802] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1dd0 [ 232.203960][T13802] ? fpu_swap_kvm_fpstate+0x217/0x460 [ 232.203980][T13802] ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 232.203994][T13802] kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 232.204013][T13802] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 232.204027][T13802] ? lock_acquire+0x1d1/0x380 [ 232.204040][T13802] ? do_raw_write_lock+0x11e/0x260 [ 232.204055][T13802] ? find_held_lock+0x2b/0x80 [ 232.204072][T13802] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 232.204088][T13802] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 232.204107][T13802] kvm_vcpu_ioctl+0x730/0x1700 [ 232.204124][T13802] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 232.204141][T13802] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 232.204157][T13802] ? do_vfs_ioctl+0x226/0x13e0 [ 232.204172][T13802] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 232.204184][T13802] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 232.204203][T13802] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 232.204225][T13802] ? __fget_files+0x34/0x3d0 [ 232.204256][T13802] ? selinux_file_ioctl+0x13b/0x290 [ 232.204277][T13802] ? selinux_file_ioctl+0xb6/0x290 [ 232.204301][T13802] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 232.204319][T13802] __x64_sys_ioctl+0x18e/0x210 [ 232.204334][T13802] do_syscall_64+0x123/0x790 [ 232.204352][T13802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.204364][T13802] RIP: 0033:0x7f0db5b9e1d9 [ 232.204374][T13802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.204385][T13802] RSP: 002b:00007f0db6a20028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 232.204397][T13802] RAX: ffffffffffffffda RBX: 00007f0db5e25fa0 RCX: 00007f0db5b9e1d9 [ 232.204405][T13802] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 232.204412][T13802] RBP: 00007f0db6a20090 R08: 0000000000000000 R09: 0000000000000000 [ 232.204423][T13802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 232.204430][T13802] R13: 00007f0db5e26038 R14: 00007f0db5e25fa0 R15: 00007ffd0585fd88 [ 232.204445][T13802] [ 232.402730][T13705] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 232.404030][T13705] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 232.405110][T13705] wireguard: wg0: Could not create IPv4 socket [ 232.406290][T13705] wireguard: wg1: Could not create IPv4 socket [ 232.407427][T13705] wireguard: wg2: Could not create IPv4 socket [ 232.438016][T13824] netlink: 'syz.2.1736': attribute type 1 has an invalid length. [ 232.461586][T13824] 8021q: adding VLAN 0 to HW filter on device bond9 [ 232.498080][T13830] FAULT_INJECTION: forcing a failure. [ 232.498080][T13830] name fail_futex, interval 1, probability 0, space 0, times 0 [ 232.498104][T13830] CPU: 2 UID: 0 PID: 13830 Comm: syz.3.1738 Tainted: G L syzkaller #0 PREEMPT(full) [ 232.498120][T13830] Tainted: [L]=SOFTLOCKUP [ 232.498124][T13830] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 232.498130][T13830] Call Trace: [ 232.498135][T13830] [ 232.498139][T13830] dump_stack_lvl+0x100/0x190 [ 232.498171][T13830] should_fail_ex.cold+0x5/0xa [ 232.498189][T13830] get_futex_key+0x1d0/0x14f0 [ 232.498207][T13830] ? __pfx_get_futex_key+0x10/0x10 [ 232.498222][T13830] ? vfs_writev+0x1d5/0xdd0 [ 232.498238][T13830] ? rcu_is_watching+0x13/0xc0 [ 232.498255][T13830] ? vfs_writev+0x1d5/0xdd0 [ 232.498268][T13830] ? kfree+0x1e5/0x6d0 [ 232.498278][T13830] ? import_iovec+0x101/0x130 [ 232.498297][T13830] futex_wake+0xf4/0x5e0 [ 232.498308][T13830] ? futex_wait+0x11e/0x370 [ 232.498321][T13830] ? __pfx_futex_wake+0x10/0x10 [ 232.498332][T13830] ? __pfx_vfs_writev+0x10/0x10 [ 232.498346][T13830] ? rcu_read_lock_any_held+0x6a/0x90 [ 232.498360][T13830] do_futex+0x2b2/0x440 [ 232.498386][T13830] ? __pfx_do_futex+0x10/0x10 [ 232.498407][T13830] __x64_sys_futex+0x34f/0x4d0 [ 232.498426][T13830] ? __pfx___x64_sys_futex+0x10/0x10 [ 232.498443][T13830] ? __pfx_do_writev+0x10/0x10 [ 232.498461][T13830] do_syscall_64+0x123/0x790 [ 232.498482][T13830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.498494][T13830] RIP: 0033:0x7f0db5b9e1d9 [ 232.498504][T13830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.498515][T13830] RSP: 002b:00007f0db6a200e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 232.498528][T13830] RAX: ffffffffffffffda RBX: 00007f0db5e25fa8 RCX: 00007f0db5b9e1d9 [ 232.498536][T13830] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0db5e25fac [ 232.498544][T13830] RBP: 00007f0db5e25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 232.498551][T13830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.498558][T13830] R13: 00007f0db5e26038 R14: 00007ffd0585fca0 R15: 00007ffd0585fd88 [ 232.498573][T13830] [ 232.509258][T13824] bond9: (slave gretap6): making interface the new active one [ 232.516928][T13824] bond9: (slave gretap6): Enslaving as an active interface with an up link [ 232.629871][T13842] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1741'. [ 233.302719][T13854] SELinux: Context system_u:object_r:mail_spool_t:s0 is not valid (left unmapped). [ 234.137670][T13887] openvswitch: netlink: nsh attr 350 is out of range max 3 [ 234.139266][T13887] FAULT_INJECTION: forcing a failure. [ 234.139266][T13887] name failslab, interval 1, probability 5, space 0, times 10000 [ 234.139286][T13887] CPU: 2 UID: 0 PID: 13887 Comm: syz.2.1747 Tainted: G L syzkaller #0 PREEMPT(full) [ 234.139302][T13887] Tainted: [L]=SOFTLOCKUP [ 234.139306][T13887] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 234.139313][T13887] Call Trace: [ 234.139318][T13887] [ 234.139323][T13887] dump_stack_lvl+0x100/0x190 [ 234.139344][T13887] should_fail_ex.cold+0x5/0xa [ 234.139360][T13887] should_failslab+0xc2/0x120 [ 234.139378][T13887] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 234.139394][T13887] ? __d_alloc+0x35/0xa50 [ 234.139408][T13887] __d_alloc+0x35/0xa50 [ 234.139426][T13887] d_alloc_parallel+0x105/0x14c0 [ 234.139451][T13887] ? lock_acquire+0x1d1/0x380 [ 234.139473][T13887] ? __d_lookup+0x73/0x4a0 [ 234.139498][T13887] ? __pfx_d_alloc_parallel+0x10/0x10 [ 234.139516][T13887] ? __d_lookup+0x25c/0x4a0 [ 234.139532][T13887] ? __d_lookup+0x266/0x4a0 [ 234.139550][T13887] lookup_open+0x6bb/0x1990 [ 234.139569][T13887] path_openat+0xa2c/0x2440 [ 234.139587][T13887] ? __pfx_path_openat+0x10/0x10 [ 234.139607][T13887] do_file_open+0x20e/0x430 [ 234.139624][T13887] ? __pfx_do_file_open+0x10/0x10 [ 234.139646][T13887] ? __pfx_kfree_link+0x10/0x10 [ 234.139665][T13887] ? _raw_spin_unlock+0x28/0x50 [ 234.139679][T13887] ? alloc_fd+0x471/0x7a0 [ 234.139700][T13887] do_sys_openat2+0x10f/0x1e0 [ 234.139711][T13887] ? __pfx_do_sys_openat2+0x10/0x10 [ 234.139727][T13887] __x64_sys_openat+0x12d/0x210 [ 234.139738][T13887] ? __pfx___x64_sys_openat+0x10/0x10 [ 234.139749][T13887] ? selinux_file_ioctl+0xb6/0x290 [ 234.139771][T13887] do_syscall_64+0x123/0x790 [ 234.139789][T13887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.139801][T13887] RIP: 0033:0x7ff5cc55ea0e [ 234.139810][T13887] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 234.139822][T13887] RSP: 002b:00007ff5cd550ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 234.139834][T13887] RAX: ffffffffffffffda RBX: 00007ff5cd5516c0 RCX: 00007ff5cc55ea0e [ 234.139841][T13887] RDX: 0000000000000002 RSI: 00007ff5cd550f90 RDI: ffffffffffffff9c [ 234.139848][T13887] RBP: 00007ff5cc635888 R08: 0000000000000000 R09: 0000000000000000 [ 234.139855][T13887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.139862][T13887] R13: 00007ff5cc826038 R14: 00007ff5cc825fa0 R15: 00007fffe3b20408 [ 234.139877][T13887] [ 234.141857][T13887] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1747'. [ 234.144345][T13887] hsr_slave_0: left promiscuous mode [ 234.154151][T13887] hsr_slave_1: left promiscuous mode [ 234.852442][T13914] program syz.2.1748 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 234.852483][T13914] ata1.00: invalid transfer count 0 [ 235.535025][ T43] kauditd_printk_skb: 46 callbacks suppressed [ 235.535043][ T43] audit: type=1400 audit(1792148159.261:2302): avc: denied { write } for pid=13948 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.619632][ T43] audit: type=1400 audit(1792148159.344:2303): avc: denied { write } for pid=13950 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.671940][ T43] audit: type=1400 audit(1792148159.390:2304): avc: denied { write } for pid=13953 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.762898][ T43] audit: type=1400 audit(1792148159.473:2305): avc: denied { write } for pid=13955 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.800055][ T43] audit: type=1400 audit(1792148159.510:2306): avc: denied { write } for pid=13958 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.898995][ T43] audit: type=1400 audit(1792148159.602:2307): avc: denied { write } for pid=13960 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.944210][ T43] audit: type=1400 audit(1792148159.639:2308): avc: denied { write } for pid=13963 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 236.078368][ T43] audit: type=1400 audit(1792148159.759:2309): avc: denied { write } for pid=13965 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 236.129858][ T43] audit: type=1400 audit(1792148159.814:2310): avc: denied { write } for pid=13968 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 236.258920][ T43] audit: type=1400 audit(1792148159.934:2311): avc: denied { write } for pid=13971 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 236.567375][T10453] usb 7-1: new high-speed USB device number 95 using dummy_hcd [ 236.730790][T10453] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 236.731686][T10453] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 236.731700][T10453] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.731709][T10453] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 236.731729][T10453] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.733235][T10453] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 236.733254][T10453] usb 7-1: Product: syz [ 236.733267][T10453] usb 7-1: Manufacturer: syz [ 236.742786][T10453] cdc_wdm 7-1:1.0: skipping garbage [ 236.742797][T10453] cdc_wdm 7-1:1.0: skipping garbage [ 236.745956][T10453] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device [ 236.745966][T10453] cdc_wdm 7-1:1.0: Unknown control protocol [ 236.954925][T10453] usb 7-1: USB disconnect, device number 95 [ 237.591890][ T5728] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 237.595922][ T5728] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 237.598022][ T5728] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 237.604755][ T5728] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 237.605389][T14020] program syz.3.1754 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 237.605600][T14020] FAULT_INJECTION: forcing a failure. [ 237.605600][T14020] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.605625][T14020] CPU: 3 UID: 0 PID: 14020 Comm: syz.3.1754 Tainted: G L syzkaller #0 PREEMPT(full) [ 237.605650][T14020] Tainted: [L]=SOFTLOCKUP [ 237.605657][T14020] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 237.605668][T14020] Call Trace: [ 237.605675][T14020] [ 237.605683][T14020] dump_stack_lvl+0x100/0x190 [ 237.605713][T14020] should_fail_ex.cold+0x5/0xa [ 237.605737][T14020] _copy_to_user+0x32/0xd0 [ 237.605765][T14020] simple_read_from_buffer+0xcb/0x170 [ 237.605794][T14020] proc_fail_nth_read+0x1af/0x230 [ 237.605821][T14020] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 237.605849][T14020] ? rw_verify_area+0xce/0x6d0 [ 237.605867][T14020] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 237.605893][T14020] vfs_read+0x1e4/0xb40 [ 237.605914][T14020] ? lock_acquire+0x1d1/0x380 [ 237.605934][T14020] ? __fget_files+0x34/0x3d0 [ 237.605958][T14020] ? __pfx_vfs_read+0x10/0x10 [ 237.605976][T14020] ? find_held_lock+0x2b/0x80 [ 237.606002][T14020] ? __fget_files+0x215/0x3d0 [ 237.606031][T14020] ? __fget_files+0x21f/0x3d0 [ 237.606070][T14020] ksys_read+0x12a/0x250 [ 237.606091][T14020] ? __pfx_ksys_read+0x10/0x10 [ 237.606144][T14020] do_syscall_64+0x123/0x790 [ 237.606173][T14020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.606192][T14020] RIP: 0033:0x7f0db5b5ea0e [ 237.606209][T14020] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 237.606226][T14020] RSP: 002b:00007f0db6a1ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 237.606245][T14020] RAX: ffffffffffffffda RBX: 00007f0db6a206c0 RCX: 00007f0db5b5ea0e [ 237.606258][T14020] RDX: 000000000000000f RSI: 00007f0db6a200a0 RDI: 0000000000000004 [ 237.606270][T14020] RBP: 00007f0db6a20090 R08: 0000000000000000 R09: 0000000000000000 [ 237.606282][T14020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.606293][T14020] R13: 00007f0db5e26038 R14: 00007f0db5e25fa0 R15: 00007ffd0585fd88 [ 237.606320][T14020] [ 237.606930][ T5728] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 237.677605][T10453] usb 7-1: new high-speed USB device number 96 using dummy_hcd [ 237.783197][T14041] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 237.821448][T14017] Failed to initialize the IGMP autojoin socket (err -2) [ 237.827233][T10453] usb 7-1: device descriptor read/64, error -71 [ 237.831555][ T1161] nvmet: Created nvm controller 1 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:288e951d-b43d-461b-a5a9-14c7b388ff9e. [ 237.858709][T14041] nvme nvme0: creating 4 I/O queues. [ 237.865931][T14041] nvme nvme0: new ctrl: "testsubsys" [ 238.107622][T10453] usb 7-1: new high-speed USB device number 97 using dummy_hcd [ 238.134477][T14067] syzkaller0: entered promiscuous mode [ 238.134497][T14067] syzkaller0: entered allmulticast mode [ 238.257378][T10453] usb 7-1: device descriptor read/64, error -71 [ 238.261962][T14073] netlink: 'syz.3.1760': attribute type 2 has an invalid length. [ 238.261984][T14073] netlink: 'syz.3.1760': attribute type 2 has an invalid length. [ 238.271612][T14073] syzkaller1: entered promiscuous mode [ 238.271632][T14073] syzkaller1: entered allmulticast mode [ 238.377175][T10453] usb usb7-port1: attempt power cycle [ 238.756253][T10453] usb 7-1: new high-speed USB device number 98 using dummy_hcd [ 238.788407][T10453] usb 7-1: device descriptor read/8, error -71 [ 238.938767][T14017] netdevsim netdevsim7 netdevsim0: renamed from eth26 [ 238.941801][T14017] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 238.942315][T14017] netdevsim netdevsim7 netdevsim1: renamed from eth27 [ 238.949626][T14017] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 238.951210][T14017] netdevsim netdevsim7 netdevsim2: renamed from eth28 [ 238.962448][T14017] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 238.963057][T14017] netdevsim netdevsim7 netdevsim3: renamed from eth29 [ 238.964861][T14017] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 239.058770][T10453] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 239.080944][T10453] usb 7-1: device descriptor read/8, error -71 [ 239.211574][T10453] usb usb7-port1: unable to enumerate USB device [ 239.365188][T14017] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 239.366628][T14017] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 239.367690][T14017] wireguard: wg0: Could not create IPv4 socket [ 239.368727][T14017] wireguard: wg1: Could not create IPv4 socket [ 239.369813][T14017] wireguard: wg2: Could not create IPv4 socket [ 240.447362][ T5728] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 240.448257][ T5728] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 240.449770][ T5728] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 240.450555][ T5728] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 240.451000][ T5728] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 240.645172][T14145] Failed to initialize the IGMP autojoin socket (err -2) [ 241.237469][ T43] kauditd_printk_skb: 47 callbacks suppressed [ 241.237490][ T43] audit: type=1400 audit(1792148164.523:2359): avc: denied { mount } for pid=14179 comm="syz.2.1762" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 241.249976][T14180] FAULT_INJECTION: forcing a failure. [ 241.249976][T14180] name failslab, interval 1, probability 5, space 0, times 9995 [ 241.250007][T14180] CPU: 3 UID: 0 PID: 14180 Comm: syz.2.1762 Tainted: G L syzkaller #0 PREEMPT(full) [ 241.250030][T14180] Tainted: [L]=SOFTLOCKUP [ 241.250037][T14180] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 241.250047][T14180] Call Trace: [ 241.250053][T14180] [ 241.250060][T14180] dump_stack_lvl+0x100/0x190 [ 241.250089][T14180] should_fail_ex.cold+0x5/0xa [ 241.250115][T14180] should_failslab+0xc2/0x120 [ 241.250139][T14180] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 241.250162][T14180] ? sock_alloc_inode+0x26/0x2c0 [ 241.250197][T14180] ? __pfx_sock_alloc_inode+0x10/0x10 [ 241.250218][T14180] sock_alloc_inode+0x26/0x2c0 [ 241.250239][T14180] ? __pfx_sock_alloc_inode+0x10/0x10 [ 241.250259][T14180] alloc_inode+0x68/0x250 [ 241.250280][T14180] sock_alloc+0x44/0x280 [ 241.250297][T14180] ? security_socket_create+0x7f/0x250 [ 241.250320][T14180] __sock_create+0xc2/0x860 [ 241.250347][T14180] __sys_socket+0x14d/0x260 [ 241.250376][T14180] ? __pfx___sys_socket+0x10/0x10 [ 241.250407][T14180] __x64_sys_socket+0x72/0xb0 [ 241.250429][T14180] ? lockdep_hardirqs_on+0x7d/0x110 [ 241.250478][T14180] do_syscall_64+0x123/0x790 [ 241.250505][T14180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.250524][T14180] RIP: 0033:0x7ff5cc59e1d9 [ 241.250538][T14180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.250554][T14180] RSP: 002b:00007ff5cd551028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 241.250570][T14180] RAX: ffffffffffffffda RBX: 00007ff5cc825fa0 RCX: 00007ff5cc59e1d9 [ 241.250582][T14180] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 241.250592][T14180] RBP: 00007ff5cc635888 R08: 0000000000000000 R09: 0000000000000000 [ 241.250602][T14180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.250612][T14180] R13: 00007ff5cc826038 R14: 00007ff5cc825fa0 R15: 00007fffe3b20408 [ 241.250636][T14180] [ 241.250685][T14180] socket: no more sockets [ 241.286849][T14182] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=14182 comm=syz.3.1764 [ 241.350301][T14189] random: crng reseeded on system resumption [ 241.517176][T14206] Bluetooth: MGMT ver 1.23 [ 241.644651][T14145] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 241.645883][T14145] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 241.647156][T14145] wireguard: wg0: Could not create IPv4 socket [ 241.648750][T14145] wireguard: wg1: Could not create IPv4 socket [ 241.649820][T14145] wireguard: wg2: Could not create IPv4 socket [ 241.673658][T14213] netlink: 'syz.2.1768': attribute type 10 has an invalid length. [ 241.701740][T14213] netlink: 'syz.2.1768': attribute type 10 has an invalid length. [ 241.764908][ T5735] Bluetooth: hci2: unexpected event for opcode 0x2041 [ 242.052162][ T43] audit: type=1400 audit(1792148165.280:2360): avc: denied { write } for pid=14222 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.101069][ T43] audit: type=1400 audit(1792148165.326:2361): avc: denied { write } for pid=14225 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.210685][ T43] audit: type=1400 audit(1792148165.418:2362): avc: denied { write } for pid=14228 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.261148][ T43] audit: type=1400 audit(1792148165.474:2363): avc: denied { write } for pid=14231 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.398121][ T43] audit: type=1400 audit(1792148165.603:2364): avc: denied { write } for pid=14234 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.467390][T14243] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1771'. [ 242.469951][ T43] audit: type=1400 audit(1792148165.658:2365): avc: denied { write } for pid=14244 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.471718][T14245] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1770'. [ 242.471730][T14245] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1770'. [ 242.471739][T14245] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1770'. [ 242.527720][ T43] audit: type=1400 audit(1792148165.723:2366): avc: denied { map } for pid=14238 comm="syz.3.1771" path="/dev/null" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=chr_file permissive=1 [ 242.714265][ T43] audit: type=1400 audit(1792148165.889:2367): avc: denied { write } for pid=14247 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.778818][ T43] audit: type=1400 audit(1792148165.954:2368): avc: denied { write } for pid=14250 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.496822][T14289] netlink: 'syz.2.1777': attribute type 1 has an invalid length. [ 243.509859][T14289] 8021q: adding VLAN 0 to HW filter on device bond10 [ 246.732742][ T43] kauditd_printk_skb: 41 callbacks suppressed [ 246.732755][ T43] audit: type=1400 audit(1792148169.600:2410): avc: denied { write } for pid=14390 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.786202][ T43] audit: type=1400 audit(1792148169.656:2411): avc: denied { write } for pid=14393 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.944085][ T43] audit: type=1400 audit(1792148169.794:2412): avc: denied { write } for pid=14396 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.991999][ T43] audit: type=1400 audit(1792148169.840:2413): avc: denied { write } for pid=14399 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 247.153232][ T43] audit: type=1400 audit(1792148169.988:2414): avc: denied { write } for pid=14402 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 247.206425][ T43] audit: type=1400 audit(1792148170.044:2415): avc: denied { write } for pid=14405 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 247.213362][ T43] audit: type=1400 audit(1792148170.044:2416): avc: denied { write } for pid=14406 comm="syz-executor" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 247.245331][T14411] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1780'. [ 247.245510][T14411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1780'. [ 247.245519][T14411] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1780'. [ 247.286553][ T5728] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 247.295950][ T5728] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 247.297901][ T5728] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 247.298734][ T5728] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 247.298976][ T5728] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 247.332302][T14423] tipc: Enabling of bearer rejected, failed to enable media [ 247.332403][T14423] tipc: Enabling of bearer rejected, failed to enable media [ 247.332534][T14423] tipc: Enabling of bearer rejected, failed to enable media [ 247.332633][T14423] tipc: Enabling of bearer rejected, failed to enable media [ 247.332703][T14423] tipc: Enabling of bearer rejected, failed to enable media [ 247.332797][T14423] tipc: Enabling of bearer rejected, failed to enable media [ 247.332869][T14423] tipc: Enabling of bearer rejected, failed to enable media [ 247.332935][T14423] tipc: Enabling of bearer rejected, failed to enable media [ 247.333003][T14423] tipc: Enabling of bearer rejected, failed to enable media [ 247.333069][T14423] tipc: Enabling of bearer rejected, failed to enable media [ 247.333137][T14423] tipc: Enabling of bearer rejected, failed to enable media [ 247.333203][T14423] tipc: Enabling of bearer rejected, failed to enable media [ 247.333269][T14423] tipc: Enabling of bearer rejected, failed to enable media [ 247.333336][T14423] tipc: Enabling of bearer rejected, failed to enable media [ 247.333402][T14423] tipc: Enabling of bearer rejected, failed to enable media [ 247.333468][T14423] tipc: Enabling of bearer rejected, failed to enable media [ 247.333542][T14423] tipc: Enabling of bearer rejected, failed to enable media [ 247.333610][T14423] tipc: Enabling of bearer rejected, failed to enable media [ 247.333820][T14423] tipc: Enabling of bearer rejected, failed to enable media [ 247.333888][T14423] tipc: Enabling of bearer rejected, failed to enable media [ 247.333958][T14423] tipc: Enabling of bearer rejected, failed to enable media [ 247.334024][T14423] tipc: Enabling of bearer rejected, failed to enable media [ 247.337294][T14423] tipc: Enabling of bearer rejected, failed to enable media [ 247.337414][T14423] tipc: Enabling of bearer rejected, failed to enable media [ 247.337486][T14423] tipc: Enabling of bearer rejected, failed to enable media [ 247.337560][T14423] tipc: Enabling of bearer rejected, failed to enable media [ 247.337628][T14423] tipc: Enabling of bearer rejected, failed to enable media [ 247.337698][T14423] tipc: Enabling of bearer rejected, failed to enable media [ 247.337765][T14423] tipc: Enabling of bearer rejected, failed to enable media [ 247.337835][T14423] tipc: Enabling of bearer rejected, failed to enable media [ 247.337901][T14423] tipc: Enabling of bearer rejected, failed to enable media [ 247.337971][T14423] tipc: Enabling of bearer rejected, failed to enable media [ 247.338038][T14423] tipc: Enabling of bearer rejected, failed to enable media [ 247.386096][ T43] audit: type=1400 audit(1792148170.200:2417): avc: denied { write } for pid=14420 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 247.444509][ T43] audit: type=1400 audit(1792148170.265:2418): avc: denied { write } for pid=14438 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 247.459584][T14414] Failed to initialize the IGMP autojoin socket (err -2) [ 247.470249][T14437] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 247.733417][ T43] audit: type=1400 audit(1792148170.524:2419): avc: denied { write } for pid=14444 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.189544][T14414] netdevsim netdevsim7 netdevsim0: renamed from eth26 [ 248.192577][T14414] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 248.193322][T14414] netdevsim netdevsim7 netdevsim1: renamed from eth27 [ 248.195332][T14414] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 248.196538][T14414] netdevsim netdevsim7 netdevsim2: renamed from eth28 [ 248.202134][T14414] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 248.202595][T14414] netdevsim netdevsim7 netdevsim3: renamed from eth29 [ 248.210932][T14414] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 248.599750][T14414] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 248.601039][T14414] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 248.603132][T14414] wireguard: wg0: Could not create IPv4 socket [ 248.604988][T14414] wireguard: wg1: Could not create IPv4 socket [ 248.606830][T14414] wireguard: wg2: Could not create IPv4 socket [ 249.575726][ T5728] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 249.582885][ T5728] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 249.583838][ T5728] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 249.588715][ T5728] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 249.589222][ T5728] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 249.800669][T14485] Failed to initialize the IGMP autojoin socket (err -2) [ 250.020603][T11858] usb 7-1: new high-speed USB device number 100 using dummy_hcd [ 250.215470][T11858] usb 7-1: Using ep0 maxpacket: 8 [ 250.215989][T11858] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 250.216962][T11858] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.216974][T11858] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 250.216999][T11858] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 250.217013][T11858] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 250.217033][T11858] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.226974][T11858] hub 7-1:1.0: bad descriptor, ignoring hub [ 250.226992][T11858] hub 7-1:1.0: probe with driver hub failed with error -5 [ 250.227220][T11858] cdc_wdm 7-1:1.0: skipping garbage [ 250.227228][T11858] cdc_wdm 7-1:1.0: skipping garbage [ 250.227952][T11858] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device [ 250.227961][T11858] cdc_wdm 7-1:1.0: Unknown control protocol [ 250.562404][T11858] usb 7-1: USB disconnect, device number 100 [ 250.930466][ T851] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 251.103700][ T851] usb 7-1: Using ep0 maxpacket: 32 [ 251.106248][ T851] usb 7-1: unable to get BOS descriptor or descriptor too short [ 251.106282][ T851] usb 7-1: New USB device found, idVendor=04b4, idProduct=931e, bcdDevice= 0.40 [ 251.110187][ T851] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 251.110212][ T851] usb 7-1: can't read configurations, error -71 [ 251.708761][ T5735] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 251.709217][ T5735] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 251.709249][ T5735] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 251.709278][ T5735] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 251.709309][ T5735] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 251.709337][ T5735] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 251.709366][ T5735] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 251.709401][ T5735] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 251.709439][ T5735] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 251.709474][ T5735] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 251.709501][ T5735] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 251.709531][ T5735] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 251.709559][ T5735] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 251.709586][ T5735] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 251.709614][ T5735] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 251.709642][ T5735] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 251.709669][ T5735] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 251.709697][ T5735] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 251.710672][ T5735] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 251.710701][ T5735] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 251.710728][ T5735] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 251.710754][ T5735] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 251.710780][ T5735] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 251.710807][ T5735] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 251.710833][ T5735] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 251.710859][ T5735] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 251.710886][ T5735] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 251.710912][ T5735] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 251.710938][ T5735] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 251.710966][ T5735] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 251.710992][ T5735] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 251.711018][ T5735] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 251.711078][ T5735] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 251.829548][ T5735] Bluetooth: hci0: command tx timeout [ 252.037416][T14517] netlink: 'syz.3.1795': attribute type 2 has an invalid length. [ 252.041855][T14517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1795'. [ 252.044934][T14517] hsr_slave_0: left promiscuous mode [ 252.045679][T14517] hsr_slave_1: left promiscuous mode [ 252.051041][T14517] FAULT_INJECTION: forcing a failure. [ 252.051041][T14517] name failslab, interval 1, probability 5, space 0, times 9992 [ 252.051063][T14517] CPU: 0 UID: 0 PID: 14517 Comm: syz.3.1795 Tainted: G L syzkaller #0 PREEMPT(full) [ 252.051079][T14517] Tainted: [L]=SOFTLOCKUP [ 252.051084][T14517] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 252.051092][T14517] Call Trace: [ 252.051096][T14517] [ 252.051101][T14517] dump_stack_lvl+0x100/0x190 [ 252.051133][T14517] should_fail_ex.cold+0x5/0xa [ 252.051150][T14517] should_failslab+0xc2/0x120 [ 252.051171][T14517] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 252.051186][T14517] ? __alloc_skb+0x140/0x710 [ 252.051203][T14517] __alloc_skb+0x140/0x710 [ 252.051212][T14517] ? __alloc_skb+0x5b7/0x710 [ 252.051222][T14517] ? __pfx___alloc_skb+0x10/0x10 [ 252.051232][T14517] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 252.051251][T14517] rtmsg_ifa+0x16a/0x270 [ 252.051264][T14517] ? __pfx_rtmsg_ifa+0x10/0x10 [ 252.051275][T14517] ? lock_acquire+0x1d1/0x380 [ 252.051297][T14517] __inet_del_ifa+0x3cb/0xf40 [ 252.051321][T14517] inetdev_event+0x40e/0x17f0 [ 252.051343][T14517] ? ib_netdevice_event+0xfc/0x330 [ 252.051362][T14517] ? __pfx_inetdev_event+0x10/0x10 [ 252.051383][T14517] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 252.051416][T14517] notifier_call_chain+0x99/0x3f0 [ 252.051453][T14517] call_netdevice_notifiers_info+0xbe/0x110 [ 252.051479][T14517] unregister_netdevice_many_notify+0x1149/0x2150 [ 252.051509][T14517] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 252.051534][T14517] ? unregister_netdevice_queue+0x22e/0x3c0 [ 252.051556][T14517] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 252.051578][T14517] ? hsr_del_nodes+0x150/0x1e0 [ 252.051637][T14517] rtnl_dellink+0x472/0xb40 [ 252.051658][T14517] ? __pfx_hsr_dellink+0x10/0x10 [ 252.051676][T14517] ? kasan_save_track+0x14/0x30 [ 252.051699][T14517] ? kasan_save_free_info+0x3b/0x70 [ 252.051716][T14517] ? __kasan_slab_free+0x5f/0x80 [ 252.051738][T14517] ? __pfx_rtnl_dellink+0x10/0x10 [ 252.051755][T14517] ? nlmon_xmit+0xa5/0xe0 [ 252.051775][T14517] ? dev_hard_start_xmit+0x121/0x760 [ 252.051798][T14517] ? __dev_queue_xmit+0x1c25/0x4a40 [ 252.051823][T14517] ? netlink_sendmsg+0x8b0/0xda0 [ 252.051848][T14517] ? ____sys_sendmsg+0xa4d/0xbe0 [ 252.051906][T14517] ? __lock_acquire+0x5c0/0x1f40 [ 252.051937][T14517] ? lock_acquire+0x1d1/0x380 [ 252.051957][T14517] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 252.051977][T14517] ? find_held_lock+0x2b/0x80 [ 252.052001][T14517] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 252.052019][T14517] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 252.052040][T14517] ? __pfx_rtnl_dellink+0x10/0x10 [ 252.052059][T14517] rtnetlink_rcv_msg+0x95e/0xe90 [ 252.052079][T14517] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 252.052106][T14517] ? ref_tracker_free+0x37e/0x6c0 [ 252.052128][T14517] netlink_rcv_skb+0x159/0x420 [ 252.052154][T14517] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 252.052174][T14517] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 252.052208][T14517] ? netlink_deliver_tap+0x1ae/0xcc0 [ 252.052236][T14517] netlink_unicast+0x585/0x850 [ 252.052278][T14517] ? __pfx_netlink_unicast+0x10/0x10 [ 252.052312][T14517] netlink_sendmsg+0x8b0/0xda0 [ 252.052344][T14517] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.052373][T14517] ? selinux_socket_sendmsg+0x198/0x2f0 [ 252.052406][T14517] ____sys_sendmsg+0xa4d/0xbe0 [ 252.052427][T14517] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.052455][T14517] ? __pfx_____sys_sendmsg+0x10/0x10 [ 252.052488][T14517] ___sys_sendmsg+0x190/0x1e0 [ 252.052511][T14517] ? __pfx____sys_sendmsg+0x10/0x10 [ 252.052534][T14517] ? futex_wait+0x11e/0x370 [ 252.052561][T14517] ? find_held_lock+0x2b/0x80 [ 252.052602][T14517] __sys_sendmsg+0x160/0x210 [ 252.052619][T14517] ? __pfx___sys_sendmsg+0x10/0x10 [ 252.052650][T14517] do_syscall_64+0x123/0x790 [ 252.052677][T14517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.052695][T14517] RIP: 0033:0x7f0db5b9e1d9 [ 252.052712][T14517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.052727][T14517] RSP: 002b:00007f0db6a20028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.052771][T14517] RAX: ffffffffffffffda RBX: 00007f0db5e25fa0 RCX: 00007f0db5b9e1d9 [ 252.052785][T14517] RDX: 0000000000000000 RSI: 0000200000000b00 RDI: 000000000000000a [ 252.052798][T14517] RBP: 00007f0db5c35888 R08: 0000000000000000 R09: 0000000000000000 [ 252.052809][T14517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.052820][T14517] R13: 00007f0db5e26038 R14: 00007f0db5e25fa0 R15: 00007ffd0585fd88 [ 252.052846][T14517] [ 252.378455][ T43] kauditd_printk_skb: 8 callbacks suppressed [ 252.378467][ T43] audit: type=1400 audit(1792148174.816:2428): avc: denied { ioctl } for pid=14520 comm="syz.2.1797" path="socket:[65839]" dev="sockfs" ino=65839 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 252.532088][T14533] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1800'. [ 252.558143][T14533] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1015 sclass=netlink_route_socket pid=14533 comm=syz.2.1800 [ 252.684065][ T43] audit: type=1400 audit(1792148175.093:2429): avc: denied { open } for pid=14534 comm="syz.2.1801" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=65872 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 252.733078][T14538] FAULT_INJECTION: forcing a failure. [ 252.733078][T14538] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.733102][T14538] CPU: 3 UID: 0 PID: 14538 Comm: syz.3.1802 Tainted: G L syzkaller #0 PREEMPT(full) [ 252.733117][T14538] Tainted: [L]=SOFTLOCKUP [ 252.733122][T14538] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 252.733129][T14538] Call Trace: [ 252.733134][T14538] [ 252.733138][T14538] dump_stack_lvl+0x100/0x190 [ 252.733159][T14538] should_fail_ex.cold+0x5/0xa [ 252.733176][T14538] _copy_from_iter+0x1f4/0x1690 [ 252.733194][T14538] ? __asan_memset+0x23/0x50 [ 252.733209][T14538] ? __pfx__copy_from_iter+0x10/0x10 [ 252.733225][T14538] ? __pfx___alloc_skb+0x10/0x10 [ 252.733241][T14538] netlink_sendmsg+0x808/0xda0 [ 252.733261][T14538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.733285][T14538] ? selinux_socket_sendmsg+0x198/0x2f0 [ 252.733304][T14538] ____sys_sendmsg+0xa4d/0xbe0 [ 252.733317][T14538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.733336][T14538] ? __pfx_____sys_sendmsg+0x10/0x10 [ 252.733354][T14538] ? lock_acquire+0x1d1/0x380 [ 252.733366][T14538] ? get_pid_task+0x2a/0x250 [ 252.733384][T14538] ___sys_sendmsg+0x190/0x1e0 [ 252.733400][T14538] ? __pfx____sys_sendmsg+0x10/0x10 [ 252.733415][T14538] ? get_pid_task+0x106/0x250 [ 252.733436][T14538] ? find_held_lock+0x2b/0x80 [ 252.733462][T14538] __sys_sendmsg+0x160/0x210 [ 252.733473][T14538] ? __pfx___sys_sendmsg+0x10/0x10 [ 252.733492][T14538] do_syscall_64+0x123/0x790 [ 252.733588][T14538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.733601][T14538] RIP: 0033:0x7f0db5b9e1d9 [ 252.733610][T14538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.733621][T14538] RSP: 002b:00007f0db6a20028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.733633][T14538] RAX: ffffffffffffffda RBX: 00007f0db5e25fa0 RCX: 00007f0db5b9e1d9 [ 252.733640][T14538] RDX: 000000000000c000 RSI: 0000200000000140 RDI: 0000000000000003 [ 252.733647][T14538] RBP: 00007f0db6a20090 R08: 0000000000000000 R09: 0000000000000000 [ 252.733654][T14538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.733660][T14538] R13: 00007f0db5e26038 R14: 00007f0db5e25fa0 R15: 00007ffd0585fd88 [ 252.733675][T14538] [ 252.755892][T14540] program syz.3.1803 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 252.889672][T14548] FAULT_INJECTION: forcing a failure. [ 252.889672][T14548] name failslab, interval 1, probability 5, space 0, times 9986 [ 252.889694][T14548] CPU: 0 UID: 0 PID: 14548 Comm: syz.3.1807 Tainted: G L syzkaller #0 PREEMPT(full) [ 252.889709][T14548] Tainted: [L]=SOFTLOCKUP [ 252.889713][T14548] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 252.889720][T14548] Call Trace: [ 252.889725][T14548] [ 252.889729][T14548] dump_stack_lvl+0x100/0x190 [ 252.889750][T14548] should_fail_ex.cold+0x5/0xa [ 252.889784][T14548] should_failslab+0xc2/0x120 [ 252.889802][T14548] __kmalloc_cache_node_noprof+0x94/0x720 [ 252.889817][T14548] ? lockdep_init_map_type+0x5c/0x250 [ 252.889832][T14548] ? __alloc_workqueue+0x1211/0x1950 [ 252.889850][T14548] __alloc_workqueue+0x1211/0x1950 [ 252.889870][T14548] alloc_workqueue_noprof+0xc7/0x130 [ 252.889885][T14548] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 252.889901][T14548] ? bond_init+0xc0/0xb80 [ 252.889915][T14548] ? find_held_lock+0x2b/0x80 [ 252.889931][T14548] ? bond_init+0x187/0xb80 [ 252.889944][T14548] ? bond_init+0x187/0xb80 [ 252.889959][T14548] bond_init+0x1b8/0xb80 [ 252.889973][T14548] ? kasan_save_track+0x14/0x30 [ 252.889987][T14548] ? __kasan_kmalloc+0xaa/0xb0 [ 252.890003][T14548] ? __pfx_bond_init+0x10/0x10 [ 252.890015][T14548] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 252.890028][T14548] ? register_netdevice+0x50c/0x25a0 [ 252.890043][T14548] ? __pfx_bond_init+0x10/0x10 [ 252.890056][T14548] register_netdevice+0x685/0x25a0 [ 252.890070][T14548] ? __pfx_validate_linkmsg+0x10/0x10 [ 252.890082][T14548] ? __pfx_register_netdevice+0x10/0x10 [ 252.890099][T14548] bond_newlink+0x6a/0x100 [ 252.890116][T14548] ? __pfx_bond_newlink+0x10/0x10 [ 252.890133][T14548] rtnl_newlink+0x1697/0x2620 [ 252.890151][T14548] ? __pfx_rtnl_newlink+0x10/0x10 [ 252.890162][T14548] ? avc_has_perm_noaudit+0x56/0x470 [ 252.890175][T14548] ? find_held_lock+0x2b/0x80 [ 252.890192][T14548] ? avc_has_perm_noaudit+0x11e/0x470 [ 252.890204][T14548] ? avc_has_perm_noaudit+0x11e/0x470 [ 252.890230][T14548] ? lock_acquire+0x1d1/0x380 [ 252.890243][T14548] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 252.890256][T14548] ? find_held_lock+0x2b/0x80 [ 252.890272][T14548] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 252.890285][T14548] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 252.890298][T14548] ? __pfx_rtnl_newlink+0x10/0x10 [ 252.890311][T14548] rtnetlink_rcv_msg+0x95e/0xe90 [ 252.890325][T14548] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 252.890343][T14548] ? ref_tracker_free+0x37e/0x6c0 [ 252.890357][T14548] netlink_rcv_skb+0x159/0x420 [ 252.890376][T14548] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 252.890390][T14548] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 252.890417][T14548] ? netlink_deliver_tap+0x1ae/0xcc0 [ 252.890437][T14548] netlink_unicast+0x585/0x850 [ 252.890456][T14548] ? __pfx_netlink_unicast+0x10/0x10 [ 252.890478][T14548] netlink_sendmsg+0x8b0/0xda0 [ 252.890498][T14548] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.890518][T14548] ? selinux_socket_sendmsg+0x198/0x2f0 [ 252.890536][T14548] ____sys_sendmsg+0xa4d/0xbe0 [ 252.890549][T14548] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.890568][T14548] ? __pfx_____sys_sendmsg+0x10/0x10 [ 252.890586][T14548] ? lock_acquire+0x1d1/0x380 [ 252.890598][T14548] ? get_pid_task+0x2a/0x250 [ 252.890615][T14548] ___sys_sendmsg+0x190/0x1e0 [ 252.890632][T14548] ? __pfx____sys_sendmsg+0x10/0x10 [ 252.890646][T14548] ? get_pid_task+0x106/0x250 [ 252.890668][T14548] ? find_held_lock+0x2b/0x80 [ 252.890694][T14548] __sys_sendmsg+0x160/0x210 [ 252.890706][T14548] ? __pfx___sys_sendmsg+0x10/0x10 [ 252.890725][T14548] do_syscall_64+0x123/0x790 [ 252.890743][T14548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.890755][T14548] RIP: 0033:0x7f0db5b9e1d9 [ 252.890765][T14548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.890776][T14548] RSP: 002b:00007f0db6a20028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.890788][T14548] RAX: ffffffffffffffda RBX: 00007f0db5e25fa0 RCX: 00007f0db5b9e1d9 [ 252.890795][T14548] RDX: 5821c98b097a09f2 RSI: 00002000000005c0 RDI: 0000000000000005 [ 252.890802][T14548] RBP: 00007f0db6a20090 R08: 0000000000000000 R09: 0000000000000000 [ 252.890809][T14548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 252.890816][T14548] R13: 00007f0db5e26038 R14: 00007f0db5e25fa0 R15: 00007ffd0585fd88 [ 252.890831][T14548] [ 253.008764][ T43] audit: type=1400 audit(1792148175.389:2430): avc: denied { bind } for pid=14549 comm="syz.3.1808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 253.009012][ T43] audit: type=1400 audit(1792148175.389:2431): avc: denied { listen } for pid=14549 comm="syz.3.1808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 253.084718][ T5735] Bluetooth: hci2: unexpected event for opcode 0x0270 [ 253.257044][T14560] use of bytesused == 0 is deprecated and will be removed in the future, [ 253.257054][T14560] use the actual size instead. [ 253.315031][T14562] input: syz0 as /devices/virtual/input/input63 [ 253.316911][ T43] audit: type=1400 audit(1792148175.684:2432): avc: denied { search } for pid=5127 comm="acpid" name="/" dev="sda1" ino=2 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 253.320577][ T43] audit: type=1400 audit(1792148175.684:2433): avc: denied { search } for pid=5127 comm="acpid" name="/" dev="sda1" ino=2 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 253.347031][ T43] audit: type=1400 audit(1792148175.712:2434): avc: denied { search } for pid=5127 comm="acpid" name="/" dev="sda1" ino=2 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 253.350279][ T43] audit: type=1400 audit(1792148175.712:2435): avc: denied { search } for pid=5127 comm="acpid" name="/" dev="sda1" ino=2 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 253.351575][ T43] audit: type=1400 audit(1792148175.712:2436): avc: denied { search } for pid=5127 comm="acpid" name="/" dev="sda1" ino=2 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 253.355948][T14562] rnbd_client L607: Mapping device /dev/ram0 on session s0, (access_mode: rw, nr_poll_queues: 0) [ 253.356458][T14562] rtrs_client L2101: : Failed to resolve address, err: -ENODEV [ 253.356509][T14562] rtrs_client L2644: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 253.409045][T14565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1814'. [ 253.724708][T14575] binder: BINDER_SET_CONTEXT_MGR already set [ 253.724718][T14575] binder: 14574:14575 ioctl 4018620d 2000000001c0 returned -16 [ 253.763145][T14580] input: syz0 as /devices/virtual/input/input64 [ 253.770298][ T43] audit: type=1400 audit(1792148176.090:2437): avc: denied { search } for pid=5127 comm="acpid" name="/" dev="sda1" ino=2 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 253.846622][T14582] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 254.082521][ T5735] Bluetooth: hci0: command tx timeout [ 254.115422][T11949] usb 7-1: new high-speed USB device number 103 using dummy_hcd [ 254.277500][T11949] usb 7-1: Using ep0 maxpacket: 8 [ 254.278827][T11949] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 254.279806][T11949] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 254.279853][T11949] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 254.279871][T11949] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 254.279891][T11949] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 254.279910][T11949] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 254.279942][T11949] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.504044][T14587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1822'. [ 254.504068][T11949] usb 7-1: usb_control_msg returned -32 [ 254.504097][T11949] usbtmc 7-1:16.0: can't read capabilities [ 254.507800][T14586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1822'. [ 254.652571][ T851] wiimote 0005:057E:0330.0008: hidraw1: BLUETOOTH HID v0.00 Device [syz1] on syz0 [ 254.653560][ T851] wiimote 0005:057E:0330.0008: New device registered [ 254.656997][T14586] wiimote 0005:057E:0330.0008: Device removed [ 254.683959][T14589] fido_id[14589]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 254.898550][T14590] FAULT_INJECTION: forcing a failure. [ 254.898550][T14590] name failslab, interval 1, probability 5, space 0, times 9985 [ 254.898583][T14590] CPU: 2 UID: 0 PID: 14590 Comm: syz.2.1820 Tainted: G L syzkaller #0 PREEMPT(full) [ 254.898606][T14590] Tainted: [L]=SOFTLOCKUP [ 254.898612][T14590] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 254.898621][T14590] Call Trace: [ 254.898627][T14590] [ 254.898635][T14590] dump_stack_lvl+0x100/0x190 [ 254.898663][T14590] should_fail_ex.cold+0x5/0xa [ 254.898688][T14590] should_failslab+0xc2/0x120 [ 254.898712][T14590] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 254.898735][T14590] ? __d_alloc+0x35/0xa50 [ 254.898756][T14590] __d_alloc+0x35/0xa50 [ 254.898775][T14590] d_alloc_pseudo+0x1c/0xc0 [ 254.898796][T14590] alloc_file_pseudo+0x118/0x290 [ 254.898815][T14590] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 254.898834][T14590] ? mas_preallocate+0x528/0xee0 [ 254.898862][T14590] __shmem_file_setup+0x205/0x460 [ 254.898907][T14590] ? __pfx___shmem_file_setup+0x10/0x10 [ 254.898935][T14590] ? vm_area_alloc+0x1f/0x160 [ 254.898964][T14590] shmem_zero_setup+0x96/0x1b0 [ 254.898984][T14590] __mmap_region+0x26b6/0x32e0 [ 254.899008][T14590] ? __pfx___mmap_region+0x10/0x10 [ 254.899027][T14590] ? ima_match_policy+0x8c2/0x23e0 [ 254.899057][T14590] ? __lock_acquire+0x5c0/0x1f40 [ 254.899092][T14590] ? __lock_acquire+0x5c0/0x1f40 [ 254.899124][T14590] ? hrtimer_start_range_ns_common+0x778/0x16f0 [ 254.899183][T14590] ? avc_has_perm_noaudit+0x145/0x470 [ 254.899209][T14590] mmap_region+0x3db/0x6d0 [ 254.899229][T14590] ? rcu_is_watching+0x13/0xc0 [ 254.899253][T14590] ? __pfx_mmap_region+0x10/0x10 [ 254.899275][T14590] ? selinux_mmap_addr+0xe2/0x110 [ 254.899295][T14590] ? bpf_lsm_mmap_addr+0x9/0x30 [ 254.899318][T14590] ? security_mmap_addr+0x71/0x1e0 [ 254.899343][T14590] ? __get_unmapped_area+0x255/0x3e0 [ 254.899369][T14590] do_mmap+0x12c7/0x1c30 [ 254.899395][T14590] ? lock_acquire+0x1d1/0x380 [ 254.899413][T14590] ? __pfx_do_mmap+0x10/0x10 [ 254.899444][T14590] ? __pfx_down_write_killable+0x10/0x10 [ 254.899476][T14590] ? find_held_lock+0x2b/0x80 [ 254.899507][T14590] vm_mmap_pgoff+0x28d/0x470 [ 254.899533][T14590] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 254.899559][T14590] ? __pfx_do_futex+0x10/0x10 [ 254.899588][T14590] ksys_mmap_pgoff+0xe4/0x610 [ 254.899611][T14590] ? __x64_sys_futex+0x358/0x4d0 [ 254.899635][T14590] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 254.899656][T14590] ? xfd_validate_state+0x129/0x190 [ 254.899679][T14590] __x64_sys_mmap+0x125/0x190 [ 254.899701][T14590] do_syscall_64+0x123/0x790 [ 254.899727][T14590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.899746][T14590] RIP: 0033:0x7ff5cc59e1d9 [ 254.899762][T14590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.899777][T14590] RSP: 002b:00007ff5cd530028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 254.899795][T14590] RAX: ffffffffffffffda RBX: 00007ff5cc826090 RCX: 00007ff5cc59e1d9 [ 254.899807][T14590] RDX: 0000000002000007 RSI: 0000000000c00000 RDI: 0000000000000000 [ 254.899817][T14590] RBP: 00007ff5cc635888 R08: ffffffffffffffff R09: 0000000000000000 [ 254.899827][T14590] R10: 000000000401d031 R11: 0000000000000246 R12: 0000000000000000 [ 254.899838][T14590] R13: 00007ff5cc826128 R14: 00007ff5cc826090 R15: 00007fffe3b20408 [ 254.899862][T14590] [ 254.901474][ T1161] usb usb11-port1: device 11-1 not suspended yet [ 254.901497][T14590] cdc_wdm 11-1:1.0: Error autopm - -16 [ 255.815627][ T851] wiimote 0005:057E:0330.0008: detected device: Nintendo Wii Remote Plus (Gen 2) [ 255.843570][ T851] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0008/input/input66 [ 255.846722][ T851] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0008/input/input67 [ 255.872771][ T851] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0008/input/input65 [ 256.243486][ T5728] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 256.244259][ T5728] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 256.244977][ T5728] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 256.245806][ T5728] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 256.246915][ T5728] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 256.346362][ T5735] Bluetooth: hci0: command tx timeout [ 256.437975][T14592] Failed to initialize the IGMP autojoin socket (err -2) [ 257.111260][T11858] usb 7-1: USB disconnect, device number 103 [ 257.219064][T14485] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 257.220300][T14485] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 257.221399][T14485] wireguard: wg0: Could not create IPv4 socket [ 257.222544][T14485] wireguard: wg1: Could not create IPv4 socket [ 257.228475][T14485] wireguard: wg2: Could not create IPv4 socket [ 257.904110][ T43] kauditd_printk_skb: 8 callbacks suppressed [ 257.904127][ T43] audit: type=1400 audit(1792148179.913:2446): avc: denied { write } for pid=14618 comm="syz-executor" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 257.963087][T14622] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.3276800.0), cmd(9) [ 257.980294][ T5728] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 257.985408][ T5728] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 257.986781][ T5728] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 257.989424][ T5728] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 257.989950][ T5728] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 258.199759][T14623] Failed to initialize the IGMP autojoin socket (err -2) [ 258.408098][T14648] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2583 sclass=netlink_route_socket pid=14648 comm=syz.2.1829 [ 258.427390][T14650] FAULT_INJECTION: forcing a failure. [ 258.427390][T14650] name failslab, interval 1, probability 5, space 0, times 9984 [ 258.427412][T14650] CPU: 0 UID: 0 PID: 14650 Comm: syz.2.1830 Tainted: G L syzkaller #0 PREEMPT(full) [ 258.427427][T14650] Tainted: [L]=SOFTLOCKUP [ 258.427432][T14650] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 258.427438][T14650] Call Trace: [ 258.427442][T14650] [ 258.427447][T14650] dump_stack_lvl+0x100/0x190 [ 258.427468][T14650] should_fail_ex.cold+0x5/0xa [ 258.427484][T14650] should_failslab+0xc2/0x120 [ 258.427502][T14650] __kmalloc_noprof+0xfc/0x840 [ 258.427516][T14650] ? __vb2_queue_alloc+0x23e/0x1160 [ 258.427535][T14650] __vb2_queue_alloc+0x23e/0x1160 [ 258.427558][T14650] vb2_core_create_bufs+0x5fa/0xa30 [ 258.427578][T14650] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 258.427597][T14650] ? lock_acquire+0x1d1/0x380 [ 258.427610][T14650] ? __video_do_ioctl+0x50f/0xdf0 [ 258.427625][T14650] vb2_create_bufs+0x40c/0x830 [ 258.427642][T14650] ? __pfx_vb2_create_bufs+0x10/0x10 [ 258.427658][T14650] ? v4l_sanitize_colorspace+0x220/0x410 [ 258.427676][T14650] vb2_ioctl_create_bufs+0x244/0x3e0 [ 258.427692][T14650] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 258.427708][T14650] vidioc_create_bufs+0x7d/0xf0 [ 258.427721][T14650] v4l_create_bufs+0x17d/0x270 [ 258.427734][T14650] __video_do_ioctl+0xb2a/0xdf0 [ 258.427749][T14650] ? __might_fault+0xc5/0x140 [ 258.427761][T14650] ? __pfx___video_do_ioctl+0x10/0x10 [ 258.427779][T14650] video_usercopy+0x47a/0x1730 [ 258.427793][T14650] ? __pfx___video_do_ioctl+0x10/0x10 [ 258.427807][T14650] ? __pfx_video_usercopy+0x10/0x10 [ 258.427830][T14650] v4l2_ioctl+0x1bd/0x250 [ 258.427860][T14650] ? __pfx_v4l2_ioctl+0x10/0x10 [ 258.427876][T14650] __x64_sys_ioctl+0x18e/0x210 [ 258.427891][T14650] do_syscall_64+0x123/0x790 [ 258.427910][T14650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.427922][T14650] RIP: 0033:0x7ff5cc59e1d9 [ 258.427932][T14650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.427942][T14650] RSP: 002b:00007ff5cd551028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 258.427954][T14650] RAX: ffffffffffffffda RBX: 00007ff5cc825fa0 RCX: 00007ff5cc59e1d9 [ 258.427961][T14650] RDX: 0000200000000380 RSI: 00000000c100565c RDI: 0000000000000003 [ 258.427968][T14650] RBP: 00007ff5cd551090 R08: 0000000000000000 R09: 0000000000000000 [ 258.427974][T14650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 258.427981][T14650] R13: 00007ff5cc826038 R14: 00007ff5cc825fa0 R15: 00007fffe3b20408 [ 258.427995][T14650] [ 258.571102][T14652] kvm_intel: kvm [14651]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x97ee [ 258.580799][T14652] kvm [14651]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0xc430 [ 258.580957][T14652] kvm [14651]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0xdfe8 [ 258.592735][T14652] kvm [14651]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x9d0e [ 258.603719][T14652] kvm [14651]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9b8a [ 259.113106][T14654] pci 0000:00:05.0: [1af4:1009] type 00 class 0x000200 conventional PCI endpoint [ 259.117894][T14654] pci 0000:00:05.0: BAR 0 [io 0x2020-0x203f] [ 259.117952][T14654] pci 0000:00:05.0: BAR 1 [mem 0x80001000-0x80001fff] [ 259.118127][T14654] pci 0000:00:05.0: BAR 4 [mem 0x380800008000-0x38080000bfff 64bit pref] [ 259.133088][T14654] pci 0000:00:05.0: Adding to iommu group 5 [ 259.144355][T14654] pci 0000:00:05.0: BAR 4 [mem 0x380800008000-0x38080000bfff 64bit pref]: assigned [ 259.146896][T14654] pci 0000:00:05.0: BAR 1 [mem 0x80001000-0x80001fff]: assigned [ 259.147005][T14654] pci 0000:00:05.0: BAR 0 [io 0x2020-0x203f]: assigned [ 259.975059][T11873] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 260.137481][T11873] usb 7-1: Using ep0 maxpacket: 8 [ 260.138327][T11873] usb 7-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 260.139483][T11873] usb 7-1: config 0 has an invalid interface number: 186 but max is 0 [ 260.139503][T11873] usb 7-1: config 0 has no interface number 0 [ 260.139532][T11873] usb 7-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 260.139550][T11873] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 260.139568][T11873] usb 7-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 260.139588][T11873] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 260.139609][T11873] usb 7-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 260.141852][T11873] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.141870][T11873] usb 7-1: Product: syz [ 260.141882][T11873] usb 7-1: Manufacturer: syz [ 260.141895][T11873] usb 7-1: SerialNumber: syz [ 260.144114][T11873] usb 7-1: config 0 descriptor?? [ 260.235112][ T5728] Bluetooth: hci0: command tx timeout [ 260.373099][T11873] iowarrior 7-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior1 [ 260.412626][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.589580][T14666] cdc_wdm 11-1:1.0: Error autopm - -16 [ 260.589642][ T1161] usb usb11-port1: device 11-1 not suspended yet [ 260.977365][T14667] ================================================================== [ 260.977381][T14667] BUG: KASAN: slab-out-of-bounds in soft_cursor+0x458/0xa10 [ 260.977414][T14667] Read of size 46 at addr ffff8880599475c0 by task syz.2.1835/14667 [ 260.977429][T14667] [ 260.977439][T14667] CPU: 1 UID: 0 PID: 14667 Comm: syz.2.1835 Tainted: G L syzkaller #0 PREEMPT(full) [ 260.977462][T14667] Tainted: [L]=SOFTLOCKUP [ 260.977469][T14667] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 260.977479][T14667] Call Trace: [ 260.977486][T14667] [ 260.977493][T14667] dump_stack_lvl+0x100/0x190 [ 260.977517][T14667] print_report+0x13d/0x4b0 [ 260.977540][T14667] ? __virt_addr_valid+0x239/0x430 [ 260.977557][T14667] ? soft_cursor+0x458/0xa10 [ 260.977575][T14667] kasan_report+0xdf/0x1c0 [ 260.977600][T14667] ? soft_cursor+0x458/0xa10 [ 260.977623][T14667] kasan_check_range+0x10f/0x1e0 [ 260.977639][T14667] __asan_memcpy+0x23/0x60 [ 260.977660][T14667] soft_cursor+0x458/0xa10 [ 260.977683][T14667] ccw_cursor+0xd7f/0x15b0 [ 260.977708][T14667] ? __pfx_ccw_cursor+0x10/0x10 [ 260.977735][T14667] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 260.977757][T14667] ? get_color+0x1da/0x450 [ 260.977776][T14667] ? __pfx_ccw_cursor+0x10/0x10 [ 260.977799][T14667] fbcon_cursor+0x43c/0x5e0 [ 260.977818][T14667] ? __mutex_unlock_slowpath+0x35d/0x930 [ 260.977848][T14667] hide_cursor+0x87/0x230 [ 260.977874][T14667] redraw_screen+0x5d4/0x760 [ 260.977899][T14667] ? mark_held_locks+0x40/0x70 [ 260.977920][T14667] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 260.977945][T14667] ? __pfx_redraw_screen+0x10/0x10 [ 260.977970][T14667] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 260.977997][T14667] vc_do_resize+0xc3d/0xeb0 [ 260.978027][T14667] ? __pfx_vc_do_resize+0x10/0x10 [ 260.978054][T14667] ? __local_bh_enable_ip+0xa5/0x120 [ 260.978076][T14667] ? lockdep_hardirqs_on+0x7d/0x110 [ 260.978103][T14667] ? kernel_fpu_end+0x5f/0x80 [ 260.978127][T14667] ? __local_bh_enable_ip+0xa5/0x120 [ 260.978149][T14667] fbcon_do_set_font+0x443/0x8c0 [ 260.978174][T14667] fbcon_set_font+0x4be/0x730 [ 260.978195][T14667] ? __pfx_fbcon_set_font+0x10/0x10 [ 260.978214][T14667] con_font_op+0x991/0x1020 [ 260.978233][T14667] ? __pfx_con_font_op+0x10/0x10 [ 260.978251][T14667] ? __might_fault+0xc5/0x140 [ 260.978271][T14667] ? __might_fault+0xc5/0x140 [ 260.978294][T14667] vt_ioctl+0xe00/0x3170 [ 260.978317][T14667] ? __pfx_vt_ioctl+0x10/0x10 [ 260.978338][T14667] ? tomoyo_path_number_perm+0x28f/0x580 [ 260.978367][T14667] ? tomoyo_path_number_perm+0x188/0x580 [ 260.978394][T14667] ? __pfx_futex_wait+0x10/0x10 [ 260.978426][T14667] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 260.978452][T14667] ? tty_jobctrl_ioctl+0x152/0xce0 [ 260.978475][T14667] ? __pfx_vt_ioctl+0x10/0x10 [ 260.978499][T14667] tty_ioctl+0x26a/0x1800 [ 260.978530][T14667] ? __pfx_tty_ioctl+0x10/0x10 [ 260.978558][T14667] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 260.978590][T14667] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 260.978621][T14667] ? __fget_files+0x34/0x3d0 [ 260.978653][T14667] ? selinux_file_ioctl+0x13b/0x290 [ 260.978679][T14667] ? selinux_file_ioctl+0xb6/0x290 [ 260.978706][T14667] ? __pfx_tty_ioctl+0x10/0x10 [ 260.978735][T14667] __x64_sys_ioctl+0x18e/0x210 [ 260.978759][T14667] do_syscall_64+0x123/0x790 [ 260.978786][T14667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.978807][T14667] RIP: 0033:0x7ff5cc59e1d9 [ 260.978823][T14667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.978842][T14667] RSP: 002b:00007ff5cd530028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 260.978862][T14667] RAX: ffffffffffffffda RBX: 00007ff5cc826090 RCX: 00007ff5cc59e1d9 [ 260.978875][T14667] RDX: 0000200000000940 RSI: 0000000000004b72 RDI: 0000000000000007 [ 260.978887][T14667] RBP: 00007ff5cc635888 R08: 0000000000000000 R09: 0000000000000000 [ 260.978900][T14667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.978911][T14667] R13: 00007ff5cc826128 R14: 00007ff5cc826090 R15: 00007fffe3b20408 [ 260.978930][T14667] [ 260.978937][T14667] [ 260.978942][T14667] Allocated by task 14655: [ 260.978951][T14667] kasan_save_stack+0x30/0x50 [ 260.978975][T14667] kasan_save_track+0x14/0x30 [ 260.978997][T14667] __kasan_kmalloc+0xaa/0xb0 [ 260.979019][T14667] __kmalloc_noprof+0x32f/0x840 [ 260.979040][T14667] font_data_rotate+0x353/0x3b0 [ 260.979061][T14667] fbcon_rotate_font+0x2bf/0x510 [ 260.979082][T14667] fbcon_modechanged+0x218/0x7f0 [ 260.979100][T14667] fbcon_set_all_vcs+0x39b/0x470 [ 260.979117][T14667] rotate_all_store+0x31e/0x410 [ 260.979158][T14667] dev_attr_store+0x58/0x80 [ 260.979177][T14667] sysfs_kf_write+0xf2/0x150 [ 260.979205][T14667] kernfs_fop_write_iter+0x3e0/0x5f0 [ 260.979227][T14667] vfs_write+0x6af/0x1050 [ 260.979249][T14667] ksys_write+0x12a/0x250 [ 260.979270][T14667] do_syscall_64+0x123/0x790 [ 260.979295][T14667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.979312][T14667] [ 260.979317][T14667] The buggy address belongs to the object at ffff888059947000 [ 260.979317][T14667] which belongs to the cache kmalloc-1k of size 1024 [ 260.979331][T14667] The buggy address is located 448 bytes to the right of [ 260.979331][T14667] allocated 1024-byte region [ffff888059947000, ffff888059947400) [ 260.979349][T14667] [ 260.979354][T14667] The buggy address belongs to the physical page: [ 260.979362][T14667] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888059940800 pfn:0x59940 [ 260.979379][T14667] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 260.979393][T14667] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 260.979416][T14667] page_type: f5(slab) [ 260.979432][T14667] raw: 00fff00000000240 ffff88801d042dc0 ffffea0001622c10 ffffea000166e410 [ 260.979450][T14667] raw: ffff888059940800 0000000000100009 00000000f5000000 0000000000000000 [ 260.979467][T14667] head: 00fff00000000240 ffff88801d042dc0 ffffea0001622c10 ffffea000166e410 [ 260.979484][T14667] head: ffff888059940800 0000000000100009 00000000f5000000 0000000000000000 [ 260.979500][T14667] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 260.979517][T14667] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 260.979528][T14667] page dumped because: kasan: bad access detected [ 260.979537][T14667] page_owner tracks the page as allocated [ 260.979544][T14667] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1162, tgid 1162 (kworker/u33:8), ts 39431656091 [ 260.979575][T14667] post_alloc_hook+0xfd/0x120 [ 260.979592][T14667] get_page_from_freelist+0x110d/0x35d0 [ 260.979611][T14667] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 260.979631][T14667] new_slab+0xa9/0x6e0 [ 260.979648][T14667] refill_objects+0xe3/0x410 [ 260.979666][T14667] __pcs_replace_empty_main+0x35e/0x650 [ 260.979684][T14667] __kmalloc_noprof+0x67c/0x840 [ 260.979705][T14667] ieee802_11_parse_elems_full+0x17c/0x3c90 [ 260.979725][T14667] ieee80211_inform_bss+0x159/0x1170 [ 260.979742][T14667] cfg80211_inform_single_bss_data+0x898/0x1dc0 [ 260.979770][T14667] cfg80211_inform_bss_data+0x230/0x3c20 [ 260.979796][T14667] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 260.979823][T14667] ieee80211_bss_info_update+0x310/0xab0 [ 260.979841][T14667] ieee80211_ibss_rx_queued_mgmt+0xe04/0x1c70 [ 260.979858][T14667] ieee80211_iface_work+0xa9a/0x1070 [ 260.979876][T14667] cfg80211_wiphy_work+0x2b7/0x550 [ 260.979903][T14667] page_owner free stack trace missing [ 260.979909][T14667] [ 260.979913][T14667] Memory state around the buggy address: [ 260.979922][T14667] ffff888059947480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 260.979935][T14667] ffff888059947500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 260.979947][T14667] >ffff888059947580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 260.979958][T14667] ^ [ 260.979967][T14667] ffff888059947600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 260.979979][T14667] ffff888059947680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 260.979989][T14667] ================================================================== [ 260.980039][T14667] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 261.274072][T14667] CPU: 1 UID: 0 PID: 14667 Comm: syz.2.1835 Tainted: G L syzkaller #0 PREEMPT(full) [ 261.277657][T14667] Tainted: [L]=SOFTLOCKUP [ 261.279249][T14667] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 261.282624][T14667] Call Trace: [ 261.283779][T14667] [ 261.284763][T14667] dump_stack_lvl+0x100/0x190 [ 261.286320][T14667] vpanic+0x553/0x970 [ 261.287662][T14667] ? __pfx_vpanic+0x10/0x10 [ 261.289153][T14667] ? mark_held_locks+0x40/0x70 [ 261.290801][T14667] ? irqentry_exit+0x24d/0xa10 [ 261.292372][T14667] ? soft_cursor+0x458/0xa10 [ 261.294016][T14667] panic+0xd1/0xe0 [ 261.295258][T14667] ? __pfx_panic+0x10/0x10 [ 261.296747][T14667] ? soft_cursor+0x458/0xa10 [ 261.298316][T14667] ? preempt_schedule_common+0x3c/0xb0 [ 261.300020][T14667] check_panic_on_warn.cold+0x19/0x34 [ 261.301839][T14667] end_report.part.0+0x3a/0x90 [ 261.303527][T14667] kasan_report.cold+0xe/0x18 [ 261.305122][T14667] ? soft_cursor+0x458/0xa10 [ 261.306658][T14667] kasan_check_range+0x10f/0x1e0 [ 261.308275][T14667] __asan_memcpy+0x23/0x60 [ 261.309779][T14667] soft_cursor+0x458/0xa10 [ 261.311260][T14667] ccw_cursor+0xd7f/0x15b0 [ 261.312807][T14667] ? __pfx_ccw_cursor+0x10/0x10 [ 261.314533][T14667] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 261.316492][T14667] ? get_color+0x1da/0x450 [ 261.318073][T14667] ? __pfx_ccw_cursor+0x10/0x10 [ 261.319701][T14667] fbcon_cursor+0x43c/0x5e0 [ 261.321259][T14667] ? __mutex_unlock_slowpath+0x35d/0x930 [ 261.323243][T14667] hide_cursor+0x87/0x230 [ 261.324781][T14667] redraw_screen+0x5d4/0x760 [ 261.326319][T14667] ? mark_held_locks+0x40/0x70 [ 261.328037][T14667] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 261.329976][T14667] ? __pfx_redraw_screen+0x10/0x10 [ 261.331728][T14667] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 261.333763][T14667] vc_do_resize+0xc3d/0xeb0 [ 261.335300][T14667] ? __pfx_vc_do_resize+0x10/0x10 [ 261.336988][T14667] ? __local_bh_enable_ip+0xa5/0x120 [ 261.338732][T14667] ? lockdep_hardirqs_on+0x7d/0x110 [ 261.340462][T14667] ? kernel_fpu_end+0x5f/0x80 [ 261.342046][T14667] ? __local_bh_enable_ip+0xa5/0x120 [ 261.343947][T14667] fbcon_do_set_font+0x443/0x8c0 [ 261.345628][T14667] fbcon_set_font+0x4be/0x730 [ 261.347163][T14667] ? __pfx_fbcon_set_font+0x10/0x10 [ 261.348928][T14667] con_font_op+0x991/0x1020 [ 261.350402][T14667] ? __pfx_con_font_op+0x10/0x10 [ 261.352104][T14667] ? __might_fault+0xc5/0x140 [ 261.353770][T14667] ? __might_fault+0xc5/0x140 [ 261.355366][T14667] vt_ioctl+0xe00/0x3170 [ 261.356804][T14667] ? __pfx_vt_ioctl+0x10/0x10 [ 261.358358][T14667] ? tomoyo_path_number_perm+0x28f/0x580 [ 261.360210][T14667] ? tomoyo_path_number_perm+0x188/0x580 [ 261.362125][T14667] ? __pfx_futex_wait+0x10/0x10 [ 261.363791][T14667] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 261.365763][T14667] ? tty_jobctrl_ioctl+0x152/0xce0 [ 261.367373][T14667] ? __pfx_vt_ioctl+0x10/0x10 [ 261.368864][T14667] tty_ioctl+0x26a/0x1800 [ 261.370227][T14667] ? __pfx_tty_ioctl+0x10/0x10 [ 261.371727][T14667] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 261.373784][T14667] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 261.375925][T14667] ? __fget_files+0x34/0x3d0 [ 261.377395][T14667] ? selinux_file_ioctl+0x13b/0x290 [ 261.379028][T14667] ? selinux_file_ioctl+0xb6/0x290 [ 261.380641][T14667] ? __pfx_tty_ioctl+0x10/0x10 [ 261.382158][T14667] __x64_sys_ioctl+0x18e/0x210 [ 261.383669][T14667] do_syscall_64+0x123/0x790 [ 261.385161][T14667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.386987][T14667] RIP: 0033:0x7ff5cc59e1d9 [ 261.388408][T14667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.394384][T14667] RSP: 002b:00007ff5cd530028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 261.396971][T14667] RAX: ffffffffffffffda RBX: 00007ff5cc826090 RCX: 00007ff5cc59e1d9 [ 261.399414][T14667] RDX: 0000200000000940 RSI: 0000000000004b72 RDI: 0000000000000007 [ 261.401856][T14667] RBP: 00007ff5cc635888 R08: 0000000000000000 R09: 0000000000000000 [ 261.404293][T14667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.406724][T14667] R13: 00007ff5cc826128 R14: 00007ff5cc826090 R15: 00007fffe3b20408 [ 261.409173][T14667] [ 261.410668][T14667] Kernel Offset: disabled [ 261.412014][T14667] Rebooting in 86400 seconds.. VM DIAGNOSIS: 09:18:19 Registers: info registers vcpu 0 CPU#0 RAX=1ffff11003a14761 RBX=ffff88801d0a3af0 RCX=0000000000000006 RDX=ffffffff9cc03ce8 RSI=0000000000000004 RDI=ffff88801d0a3b08 RBP=ffffc90000007e80 RSP=ffffc90000007da0 R8 =0000000000000001 R9 =fffff52000000fa2 R10=0000000000000003 R11=0000000000000000 R12=0000000000000004 R13=dffffc0000000000 R14=ffff88806a23ccc0 R15=1ffff92000000fb6 RIP=ffffffff8536ad80 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f082ec90780 ffffffff 00c00000 GS =0000 ffff8880d4946000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3ac8c5 CR3=0000000027ee3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001800000 Opmask01=00000000000003ff Opmask02=00000000d51303ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffa5fe8f68 00007fffa5fe8f68 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffa5fe9470 0000003000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff0f 0e0d0c0b0a090807 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f082ee64b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f082ee64b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 bb00000000000000 00000000000080fe ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 66206e6f69746174 6963696c6f532072 6574756f5220676e 6979616c6564203a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373657264646120 4c4c20726f66206e 6f69746174696369 6c6f532072657475 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 414b4056051f5600 0056564057414144 054c4c05574a4305 4b4a4c5144514c46 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 386566203a367367 616c66726464615f 6669203a73726464 616e7261656c5f66 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ed1555b15c 000055ed14678d50 000055ed15434ed0 000055ed15561190 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffffffffd7fffff fbdedfefbd77fd7f 69737ffff5ffffd1 3a6677efffffffff ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 616c772035316e61 6c772034316e616c 772033316e616c77 2032316e616c7720 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000100000027 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000002f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85b2c0c5 RDI=ffffffff9cc7e660 RBP=ffffffff9cc7e620 RSP=ffffc90005a26c30 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3530383838666652 R12=0000000000000000 R13=000000000000002f R14=0000000000000002 R15=ffffc90005a26f48 RIP=ffffffff85b2c0ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007ff5cd5306c0 ffffffff 00c00000 GS =0000 ffff8880d4a46000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000002000 CR3=000000002ecdd000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000020100001 Opmask01=0000000000000054 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000b95e08e3 b56b93a6dd97ca46 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000cd96f059 a3404bc6b8290580 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000096d77ec 0516ad67fc027877 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000001fe87ec3 e87df59616b56219 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000006958356 a2de9981cfd99e04 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff5cc635eab ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff5cc63600f ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000001db710640 b4e5b025f7011641 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a732520656c6261 7462650064656c69 61662029736e7465 6e28736e74657300 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1f56000540494744 514740004140494c 4443050c564b5140 4b0d564b51405600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff5cc7f45f8 00007ff5cc7f45c8 00007ff5cc7f4600 00007ff5cc7f45e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000002d2605 RBX=ffff8880202d2580 RCX=ffffffff8bd47235 RDX=0000000000000001 RSI=ffffffff8e3e34cb RDI=ffffffff8c625580 RBP=ffffed100405a4b0 RSP=ffffc90000197e00 R8 =0000000000000001 R9 =ffffed100d4867bd R10=ffff88806a433deb R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000032fc4 R15=dffffc0000000000 RIP=ffffffff8bd4576f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d4b46000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3821fc CR3=000000002ecdd000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffe3b208f6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffe3b208f6 00007fffe3b208fc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff5cc635e6b ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff5cc635eab ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff5cc63600f ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff5cc635e9d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 55c5e97cff1f2671 b66d22cb63c2850f d05cf138aac1d6a2 0905856d62d77e38 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 223da59aff8ed9de 94489cf941e1bd41 2b78ba888633e1d0 2d479db664223e51 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fccbc4988b919f92 71de7de8a9b77ee0 70f70681f20b49b2 4ac06931d9c977eb ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3ae6629a8d946ff8 e8e94bc30cdf7802 7693f46731978180 eea9649213901ab1 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d1ecc9044ed6a395 21bc472c64dba5f3 e41529c4dd5bc820 639cff95219dcad6 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000001b6d35 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 11a823eb17a764db 5505ae8194bf7765 22f8158ae6d18d21 1f0942c5314781ce ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 752be3e0c2ca5271 c79a285d89625934 736c84d2b61aed8f bd14b8298ec013c3 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d1ecc9044ed6a395 21bc472c64dba5f3 e41529c4dd5bc820 639cff95219dcad6 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000269b01 RBX=ffff8880202d0000 RCX=ffffffff8bd47235 RDX=0000000000000001 RSI=ffffffff8e3e34cb RDI=ffffffff8c625580 RBP=ffffed100405a000 RSP=ffffc900001a7e00 R8 =0000000000000001 R9 =ffffed100d4a67bd R10=ffff88806a533deb R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000034fc4 R15=dffffc0000000000 RIP=ffffffff8bd4576f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d4c46000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055555770a4a0 CR3=000000003e83b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fec0fc00 Opmask01=000000000000003f Opmask02=000000000100003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000af000000aa 000000a9000000a6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ed1467ed10 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f082ee64b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000d3000000ce 000000cd000000ca ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000df000000dc 000000d7000000d6 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000e9000000e8 000000e5000000e0 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0030303030303031 31323000336d6973 766500303d73656d 616e66692e74656e ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000d0d0d0d0d0d0c 0c0f0d000e50544e 4b58000d004e5850 5c535b5413495853 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ed1467dd10 000055ed146801d0 0000000000000211 000033326e616c77 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 803e00340000006d 697376656474656e 0039000e0000376d 697376656474656e ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8041000400000003 000300080000001b 00b800080000376d 697376656474656e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002000f0000006d 697376656474656e 0001000e803e0034 0000006d69737665 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6474656e0039000e 0000376d69737665 6474656e0038000f 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000e002400000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 36005f20615f206e 6120323220206361 692061200a322030 3100366565640a65 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000