last executing test programs: 9m12.81824059s ago: executing program 32 (id=1694): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003002000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x7fff}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x10000, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a78302205252b9ae7d8be5638396a0fa0583974f3f28302280b7b4d3c9e13d74dbc7b9e8718956dd5f", 0x5d}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093fd548fca4f3a6e7391c8acfda620b96e71569873b28a43558b1c85f34b806418d36165411c9ebd66627a", 0x55}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8c94e6bdf0c72c8e528f0778c5b5ad28a834e43f387c8282e50e7d6b0cd91a93f87f645b32c1f200f7d9f101c7bcf701e4462f36e5fe5503da319f5261659f63d203e503fc3476bb556d4987fbfbf", 0xbd}, {0x0}], 0x4, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5m43.368489771s ago: executing program 33 (id=7754): r0 = socket(0x10, 0x803, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f00005a4000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004054) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x400970, 0x1f280, 0xfffffffe, 0x399}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x1, 0x40, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x3}}, 0xb) ioctl$KVM_CAP_PMU_CAPABILITY(0xffffffffffffffff, 0x4068aea3, &(0x7f00000002c0)={0xd4, 0x0, 0x3}) r3 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz2\x00'}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}}, 0xac}}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) io_uring_enter(r1, 0x8ae, 0xfbb9, 0x35, 0x0, 0x0) file_setattr(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa2, 0x3, 0x4, 0x7}, 0x18, 0x100) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = syz_open_dev$vim2m(&(0x7f0000000280), 0x4eb36, 0x2) write$binfmt_misc(r7, &(0x7f0000000140), 0x0) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0xfdfd, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r2, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4008040) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="340000001200010025bd7000fddbdf2500000000", @ANYRES32=r6], 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x20004800) syz_emit_ethernet(0x56, &(0x7f0000000140)={@multicast, @local, @void, {@canfd={0xd, {{0x2, 0x0, 0x0, 0x1}, 0x23, 0x0, 0x0, 0x0, "541f4693b4fd84d03db86f6c130f5ea2c56da560202dba1dc241d143b33edd548d984373dfd136d3bc14ff343042262e7e59cbaca895580e32ae41e2984aa1d1"}}}}, 0x0) 5m39.764707581s ago: executing program 34 (id=7814): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003002000851000000600000018000000", @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a02000000000118010000202078250000000000202020"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x7fff}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x10000, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a78302205252b9ae7d8be5638396a0fa0583974f3f28302280b7b4d3c9e13d74dbc7b9e8718956", 0x5b}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093fd548fca4f3a6e7391c8acfda620b96e71569873b28a43558b1c85f34b806418d36165411c9ebd66627a", 0x55}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8c94e6bdf0c72c8e528f0778c5b5ad28a834e43f387c8282e50e7d6b0cd91a93f87f645b32c1f200f7d9f101c7bcf701e4462f36e5fe5503da319f5261659f63d203e503fc3476bb556d4987fbfbf", 0xbd}, {0x0}], 0x4, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5m25.163658984s ago: executing program 35 (id=7812): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@handle, @fda={0x66646185, 0x4, 0x1, 0x1a}, @fda={0x66646185, 0x3, 0x0, 0x38}}, &(0x7f00000006c0)={0x0, 0x18, 0x38}}, 0x400}], 0x0, 0x0, 0x0}) r1 = socket$alg(0x26, 0x5, 0x0) accept4$alg(r1, 0x0, 0x0, 0x80800) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x6) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000002e40)=[{{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000440)="1f65d07702b68001ce267ce10a105f0954a81755996870265cc735425d9034fc4c749f47a6ab72f14fc552332561ac3368a5093b936cef8b87f95e78c0c6b319c83ada15368b2b99bd691d9cd1ff1fd14e3269885b81528e9506cb7406c6fe5c93847028922ced785467988f627276b14fb5668a10c62ab3e11b4a21ea11104ab11ae4c3ccc107cf040d545f", 0x8c}, {&(0x7f0000000600)="55b95bc7e971ddd3d27b30c1c349bc63cc0f9f4b2327de201714b63f2e1ec43b2f52249074e57f110a44b4846710f379365ad848dd679152217d2568f24b761b9f861cd2edf00732aa96868ace2a1f7c277d63ff5806c643bc28113afd2fa0eb4af06738ce75667f6d027ef66e6fc94be99b1c586b", 0x75}, {&(0x7f0000001c80)="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", 0x1000}, {&(0x7f0000001b80)="595feed98911ce36d2e709e0eb8b319a07a9a981f684dac46b00b6ea7246a9d754ed80144d5cd40695b61d7f6a916a223c3eee40e7f49d7ce8c182b76c58fd0a5a8b206c190627981e8cf05e718f4e3a6c86085d6e56243711819991b6c297002f76fb9b94d8c2e9aa16e45ac50e3d083f99006553b44efb0b453bdbdf03ddf3571d36a4966d97cad570a16f3b70ac553f1734bca50c88b06eddcb7665d8260f205fdd7ebc0b09082e097f2cbc219ef7721a44aa6801ee4e87fecd17cc82e3e60b5b8e9a1db25e13a402f733f48234ad31f5133761f29f2f48e5ff96fd2c58e333375343c631", 0xe6}, {&(0x7f00000007c0)="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", 0x191}, {&(0x7f0000001980)="65629b8e425ee21f2ca89e30c021cc7d9b06dcfe67b1f86bc1495e7fa59df0aac973dc45eb9262f1fa93779725b75b6c007ef9d3c69b2677202910f2afe9787a29f403e36b875b1d7392282d63d0f7417dd5b91a394343d349f67e2eea9244435cff3b0a03f3f6ad15658a9530858e1d4d3f5256e5f200ccbbd8689d5ffe645a706e2ffe84aa50008ae04cd76c730c09cc907f02f2152e7168887ac76ac16b5044715fd1a276a7d41228289066a320ded78f57c1eb17026f05d470f92829791db8b270b503", 0xc5}, {&(0x7f00000017c0)="907f0dd0e08f013c031640ad011b95e83701a859c4733c1d2f15023af7ae087d5d5fb59000b5d8ab7f000000db2fc060b3cb9de55eaee4e25ff424f361637bd25271d2be8cd3a8176942bd1faf5cd9008014a1accfbb537f689767ad326106b930683a1ab3a64a8f2bbe46a4a2e414f72ecb7c589d071fe32600d0845c20baedcee00a77b227e1326922a4e38b8c493a2e25e6d2689b12d296b0456793a1594e712c0b57281478226b27b20318b375b931eeda3fd15b7719a54893b461d3788cca62f14722ec26913cf61967d2000000002e69456188ed784d64cfd8f28458e6ce990353", 0xe4}], 0x7, 0x0, 0x0, 0x4}}], 0x1, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) read(r6, &(0x7f00000003c0)=""/68, 0x44) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000180)={r3, r4/1000+10000}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYRES16, @ANYRES8], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r10, 0x29, 0xd2, &(0x7f0000000980)={{0xa, 0x0, 0xd, @remote, 0xfffffffe}, {0xa, 0x4e22, 0x0, @mcast1}, 0x0, {[0x7b0, 0x0, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x100]}}, 0x5c) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r11, 0x5) readv(r8, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000540)=""/141, 0x8d}], 0x2) madvise(&(0x7f00000b2000/0x4000)=nil, 0x4000, 0x3) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) setsockopt$netlink_NETLINK_NO_ENOBUFS(r10, 0x10e, 0x5, &(0x7f0000000040)=0x9, 0x4) sendmsg$inet(r9, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000280)="09d1", 0x2}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b0014000000000000000000000007"], 0x38}, 0x0) 4m47.181558462s ago: executing program 36 (id=8683): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x79, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0x6, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7f, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 14) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x8000000, 0xe, 0x3, 0xfffffffe, 0x0, [{0x2, 0x4, 0x7, '\x00', 0x8}, {0x9, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x7f, 0x9, '\x00', 0x67}, {0x0, 0x5, 0xd4, '\x00', 0xf}, {0x7, 0x10, 0xc, '\x00', 0x5}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0xc}, {0x7f, 0xd, 0x5, '\x00', 0xb}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x5, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x2, '\x00', 0xb}, {0xc7, 0x6, 0x2, '\x00', 0x8}, {0x5, 0x9, 0x5, '\x00', 0xc}, {0x7, 0xc1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x5, 0x4, '\x00', 0x23}]}}) 3m43.12234731s ago: executing program 4 (id=9748): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x1}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x14, 0x70bd26, 0x25dfdbfc, {0x7, 0x0, 0x0, r4}}, 0x18}, 0x1, 0x0, 0x0, 0x8044}, 0x48085) r9 = socket$netlink(0x10, 0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x2, 0x5, 0xbd, 0x4}, {0x80, 0x7f, 0xf, 0x8}, {0x100, 0x40, 0x81, 0x22a9}, {0x6, 0x12, 0x8, 0x5}, {0xfffb, 0x50, 0x34, 0xf48}, {0x5, 0xa, 0xc1, 0xffff}]}, 0x10) write(r9, &(0x7f0000000440)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x29) 3m43.061513178s ago: executing program 4 (id=9749): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003002000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a02000000000118010000202078250000000000202020"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10000, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a78302205252b9ae7d8be5638396a0fa0583974f3f28302280b7b4d3c9e13d74dbc7b9e8718956dd5f", 0x5d}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093", 0x2b}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8c94e6bdf0c72c8e528f0778c5b5ad28a834e43f387c8282e50e7d6b0cd91a93f87f645b32c1f200f7d9f101c7bcf701e4462f36e5fe5503da319f5261659f63d203e503fc3476bb556d4987fbfbf", 0xbd}, {0x0}], 0x4, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3m42.992365978s ago: executing program 4 (id=9750): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="20000000000000100000000100000010e7fe77b8e6f14bc78a709de490349fff805e7473d4677f2e263d6299ce319057cc000c0f0dc1843035825f39c304a47e75dbfe0594c004e6d0ad1bcd67784d6e6ba83dd07151a6c5e2265cf5569802a37dfef8a5685f698a1a88e86bb9e397254bda422905f7843c16ac57e62755322f367ecdebd8b39d3d418973916f24c48457f50c923bbdf1d5d6ebb177880018d7b701120d4047d9cf270b159e4af63d4404a64af9cedf712cc11ade516c607242ca224a32a38b24ae03a2", @ANYRES32=0x0, @ANYBLOB="1800000000000000840000000500000000000000da750000"], 0x38, 0x4800}, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000780)={0x50, 0x0, r2, {0x7, 0x1f, 0x3, 0xc0004, 0x1, 0x4, 0x8, 0x40, 0x0, 0x0, 0x1, 0x1}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x16}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x4401, 0xdc) pipe(&(0x7f0000000300)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000340), &(0x7f0000000380)=0x4) dup3(r3, r1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r6, &(0x7f00000000c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1, 0x2}}, 0x12) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x17, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x101}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x10}, 0x94) 3m42.893554437s ago: executing program 4 (id=9752): mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000004c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000500)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl(r0, 0x3b8e, &(0x7f0000000000)="10") ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000580)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl(r0, 0x3b89, &(0x7f0000001000)="3000000004000000030000000600000000000000000000002d5d000004") mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r6 = socket(0xa, 0x1, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00070c2bbd70000000000002000000", @ANYRES32=r8, @ANYBLOB="4000100a140001"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20024090) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xc, 0xa, 0x0, 0x5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r12) sendmsg$TIPC_CMD_ENABLE_BEARER(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 3m42.773637635s ago: executing program 4 (id=9753): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="000100"/14], 0x1c}}, 0x0) 3m42.544085013s ago: executing program 4 (id=9756): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003002000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10000, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a78302205252b9ae7d8be5638396a0fa0583974f3f28302280b7b4d3c9e13d74dbc7b9e8718956dd5f", 0x5d}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093", 0x2b}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8c94e6bdf0c72c8e528f0778c5b5ad28a834e43f387c8282e50e7d6b0cd91a93f87f645b32c1f200f7d9f101c7bcf701e4462f36e5fe550", 0xa6}], 0x3, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f406", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3m42.474992308s ago: executing program 37 (id=9756): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003002000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10000, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a78302205252b9ae7d8be5638396a0fa0583974f3f28302280b7b4d3c9e13d74dbc7b9e8718956dd5f", 0x5d}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093", 0x2b}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8c94e6bdf0c72c8e528f0778c5b5ad28a834e43f387c8282e50e7d6b0cd91a93f87f645b32c1f200f7d9f101c7bcf701e4462f36e5fe550", 0xa6}], 0x3, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f406", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3m25.573022733s ago: executing program 9 (id=9949): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=@ipv4_delrule={0x30, 0x21, 0xb12becd5a2b54ddf, 0x70bd2c, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0xfffffffffffffda0, 0x11, 'vcan0\x00'}]}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04230d00c90001"], 0x10) 3m25.452836196s ago: executing program 9 (id=9951): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x873, 0x2}, 0xe) (async) connect$packet(r0, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0xa, 0x6, @remote}, 0x14) (async) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x7f9f, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000100)={0x0, 0x1, 0x3, &(0x7f0000000080)={0x0, "e953e14fcab3efeb00000000000000000876060ec031fa7e00"}}) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448ca, 0x0) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x82842) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000040)="05000000010001", 0x7) (async) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e0508460c"], 0x8) (async) socket$netlink(0x10, 0x3, 0x0) read(r1, &(0x7f0000000140)=""/132, 0x84) 3m25.361505643s ago: executing program 9 (id=9952): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000e80)={0x0, &(0x7f0000000cc0)=[@nested_create_vm={0x12d, 0x18}, @wr_crn={0x67, 0x20, {0x8, 0xea}}, @wrmsr={0x65, 0x20, {0xbfd, 0x2}}, @rdmsr={0x66, 0x18, {0x365}}, @nested_amd_vmload={0x182, 0x18}, @wrmsr={0x65, 0x20, {0xa6c, 0x10000}}, @enable_nested={0x12c, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @ro32=0x440c, 0x1e, 0xf58, 0xffffffffffffffff}}, @wr_drn={0x68, 0x20, {0x2, 0x8000000000000001}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0x16, 0x7, 0xe, 0x10001}}], 0x150}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r1, 0x4068aea3, &(0x7f0000000f00)={0xc7, 0x0, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x301, 0x4, 0xfffffffd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x800, 0x3, 0xd, 0x6}, 0x29}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x48020}, 0x20000840) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000180)={[0x5, 0xc7c8, 0x40000, 0x3, 0x4, 0x4, 0x3, 0x6, 0x800, 0x8, 0x2, 0x1, 0xff, 0x5, 0x3, 0x3], 0x9000, 0x40800}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x18, r5, 0x100, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@ipv6_getaddrlabel={0x30, 0x1a, 0x1, 0x70bd26, 0x0, {0x2, 0x0, 0x20}, [@IFAL_ADDRESS={0x14, 0x1, @private2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001dc0), 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000001ec0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r7, 0x3b83, &(0x7f0000001f00)={0x28, 0x10000, 0x0, r8, 0x85b8b, 0x8, 0x0, 0x14d47b}) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r9, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x1, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="10da9e776a7058bffa0b8b87c4eec9123ffb5783500d4b498dde1fe4ccdcb3356dae904836ed1218e38bb27c1ff44bd367a4ae58fa643e873f2165156fb130e75734e6367007c4f9b9f8cc515c7b8d6a60af800f5fa458e5cf5dfcddbe3a50ffa1d2292f343ae9fc3eec0c28c9ba5e89768e27f82f68efa10ea055e9d6291ac22f51956d8a6484b62b8c66d59f8b92de64e8d8847fa690ec149326d0a3c94583364f5a7a11694d6f80105a79117d6359257ccc1d8d98c1dd6e51d9027e7f1efbdcd7de8456df7df748c5313f15c798b367357a2cb3f26074aff060f07da2f8c316867eaaa238b55c95ba8f6a2d3a940e5b", @ANYRES16=r10, @ANYBLOB="010026bd7000fddbdf25030000000500050002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmmsg$inet(r3, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c864) sendto$inet(r3, &(0x7f0000000c80)="e8", 0x6200, 0x88050000, 0x0, 0x0) 3m25.163954168s ago: executing program 9 (id=9955): r0 = socket(0x400000000010, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r2 = getpid() kcmp(r2, r2, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, r3, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x48040}, 0x20000000) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TARGET={0x8, 0x1, 0x8}]}}]}, 0x38}}, 0x4c840) 3m25.163586316s ago: executing program 9 (id=9956): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000002000a0002cc864d1e94"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x11, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xd, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file1\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000034c0)=@bpf_lsm={0x1d, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000100000000000006000000180000000800000000000000090000009500b50290e40000641856d27c33f50b241dcf776060d597ae5f74df3adc3dc04df06c4794da707ada3fae0dc0d8ab60ce4d9f2246b715a25c6e8ebe35f70b9d0cece1194473270f6a1af0cec1fc63e43cb15668ccb6c9699e681bd175a44a6d35124a5bb5398d4698475c81af6403afed72e9bd35703d67824427ac07aea557716147cab33325f839627229937e79499bc4"], &(0x7f0000000180)='GPL\x00', 0x2a0d, 0x0, &(0x7f0000000200), 0x41100, 0x5, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0xffffff81, 0x7fffffff, 0x81}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000003400)=[r0, r7, r7, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000003440)=[{0x2, 0x4, 0xf}, {0x2, 0x3, 0x7, 0x2}, {0x2, 0x803, 0xc, 0x5}, {0x5, 0x2, 0xd, 0x6}, {0x2, 0xa0000000, 0x1, 0xa}], 0x10, 0xd}, 0x94) mmap$snddsp_control(&(0x7f0000ffa000/0x3000)=nil, 0x1000, 0x1, 0x10, 0xffffffffffffffff, 0x83000000) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$FIOCLEX(r8, 0x5451) close(r5) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xc, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x2848000}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) fstatfs(r8, &(0x7f00000005c0)=""/191) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r10) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000500)=@IORING_OP_FILES_UPDATE={0x14, 0x40, 0x0, 0x0, 0x1, &(0x7f0000000280)=[0xffffffffffffffff], 0x1}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r11, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01002cbd7000ffdbdf250200000014000180060005004e2200000500020001"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x14) 3m24.881402077s ago: executing program 9 (id=9957): mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x800000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xfd5e, &(0x7f0000000f80)=[{&(0x7f0000000880)='m', 0x1}], 0x1}, 0x5) setsockopt$sock_attach_bpf(r0, 0x1, 0xa, &(0x7f0000000180), 0x4) recvmsg$unix(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e2403220c"], 0x7) 3m24.749437149s ago: executing program 38 (id=9957): mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x800000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xfd5e, &(0x7f0000000f80)=[{&(0x7f0000000880)='m', 0x1}], 0x1}, 0x5) setsockopt$sock_attach_bpf(r0, 0x1, 0xa, &(0x7f0000000180), 0x4) recvmsg$unix(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e2403220c"], 0x7) 2m37.883161558s ago: executing program 6 (id=10434): timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, 0x0, 0x42082, 0x0) close(0xffffffffffffffff) sendmmsg$inet6(r1, &(0x7f0000008c80)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0xfd4e, @empty, 0xc}, 0x1c, 0x0, 0x0, 0x0, 0xffa7}}], 0x1, 0x20000800) 2m37.742685585s ago: executing program 6 (id=10437): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003002000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a02000000000118010000202078250000000000202020"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f046}) recvmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10000, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a78302205252b9ae7d8be5638396a0fa0583974f3f28302280b7b4d3c9e13d74dbc7b9e8718956dd5f", 0x5d}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093", 0x2b}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8c94e6bdf0c72c8e528f0778c5b5ad28a834e43f387c8282e50e7d6b0cd91a93f87f645b32c1f200f7d9f101c7bcf701e4462f36e5fe5503da319f5261659f63d203e503fc3476bb556d4987fbfbf", 0xbd}, {0x0}], 0x4, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="c0033c4f37ac6e0300000000000000258cb3a8129c8cd94ec04ccc521eb1dc9404ef1d82d4fa3e3ea6af2bfaa39cdde45b395f0e13485c75099f5532efb1dc6badfca918ad9870d5b9722a", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x40084}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r0}, 0x8) 2m37.651820721s ago: executing program 6 (id=10440): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) listen(r0, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x234e}, 0x0) 2m37.483484626s ago: executing program 6 (id=10442): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0xe020400) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 2m37.392893807s ago: executing program 6 (id=10444): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x2, 0x2, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_EXPECT_HELP_NAME={0x8, 0x6, 'RAS\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004090}, 0x4004000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'wg0\x00', {0x2, 0x4e22, @broadcast}}) 2m36.932625513s ago: executing program 6 (id=10448): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000160001ea"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x60, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)) 2m36.830102804s ago: executing program 39 (id=10448): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000160001ea"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x60, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)) 2m33.074078739s ago: executing program 1 (id=10483): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000200)={0x8283, 0x1, [{0x9}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="020500030a0000000000000000000000030006cf638dbe30bdf16aaff535f6006c0000000200000000000000000000000000000002000100000000000000060b00000000030005000000000002000000ac1414bb0000000000000000"], 0x50}, 0x1, 0x7}, 0x4) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/platform/devices/pcspkr/uevent\x00', 0x1, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c813}, 0x40000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffffe3, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002301040028bd7000ffdbdf25160000000800420005e25588543f4f406ac803d4022bef9989e983421d167c6c7e489b6c212f69f52541e4b0fd2140ce7780c6c6265dfce19940bd7fd4ed2e3febb18290a2f62ee6cd9ae342188fcd788e4cb324967941d011a02b7a320e87adeccfdaea0ab94cda38cd2171ac41bf1290e707c8343f770f48c52788462940b50039e61d8b1a8005d5645e75382533ac9a4f7d8f29cf8b2ceff900d8df71902690aa21c300006e16c326bc423f9638515b9504"], 0x1c}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r4, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) write(r2, &(0x7f0000001080)='a', 0x1) 2m32.77184971s ago: executing program 1 (id=10485): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000050428bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4000000004000000240012800b0001006970766c616e0000140002800600010000000000060001000200000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x54}, 0x1, 0x81000000, 0x0, 0x4080}, 0x0) 2m32.160444586s ago: executing program 1 (id=10492): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000002000a0002cc864d1e94"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x11, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xd, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x5, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file1\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000034c0)=@bpf_lsm={0x1d, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x2a0d, 0x0, &(0x7f0000000200), 0x41100, 0x5, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000003400)=[r0, r7, r7, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000003440)=[{0x2, 0x4, 0xf}, {0x2, 0x3, 0x7, 0x2}, {0x5, 0x2, 0xd, 0x6}, {0x2, 0xa0000000, 0x1, 0xa}], 0x10, 0xd}, 0x94) mmap$snddsp_control(&(0x7f0000ffa000/0x3000)=nil, 0x1000, 0x1, 0x10, 0xffffffffffffffff, 0x83000000) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$FIOCLEX(r8, 0x5451) close(r5) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) fstatfs(r8, &(0x7f00000005c0)=""/191) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r10) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000500)=@IORING_OP_FILES_UPDATE={0x14, 0x40, 0x0, 0x0, 0x1, &(0x7f0000000280)=[0xffffffffffffffff], 0x1}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r11, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01002cbd7000ffdbdf250200000014000180060005004e2200000500020001"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x14) 2m30.846241017s ago: executing program 1 (id=10502): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0xe020400) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 2m30.578245491s ago: executing program 1 (id=10496): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet_sctp(r0, &(0x7f0000006240)=[{0x0, 0x0, &(0x7f0000000780)=[{0x0}, {&(0x7f0000000480)="cf4a1e93489489671fe50f83a397f0db2f33d454d616b2009ba858", 0x1b}, {&(0x7f0000000500)="872daa3013c515f04108fccef6f8f95e34015799685768823dca2ad088b3ff94ac7a5b77d7a5ed5e211205d068ca80bbe0665722ea82c167da66003a5ffec59b519614c05893c08c12c3a9cff4a29a3e17c74fc674e796143c73f0c37dc2015111bd", 0x62}, {&(0x7f0000000580)="0ede0539c63d5db50432ce2a2a743035e2f873a578c8a5d259cdedd71a8ee848b234fb8861a169b53861708e621ef9a1ca9359a6698b823b8d8d255425e459eaed36737ca53bb145cba4a51bfdaa8dafac5f700467413a95463d74c61cb30fe63f982665a0a1fd5cc64477fb05fe", 0x6e}, {&(0x7f0000000640)="265f3720bf9d330a79e6a47e5460b17d0cd0321a3c6c0f27b814b804d8088161ab8254ba225f59c38b5e1a1fa7bbd40cbc3f0ebe29dd43db6a81f23afaa3f3ab14953a", 0x43}], 0x5, 0x0, 0x0, 0x20000000}], 0x1, 0x20000000) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="91f8a9849519def28691bbc4173c3d6f357d0272b7e95a136b3ffec75b73e6937b7b22a1319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000f2ffffff2e3591ceb1757de97fb25500620d0d30506e7429fa5337b74945da657f794d5b5bf89588e07b14a17f069912dc0c3f201bff8b9a687b85baa11244632642a9be7b42b6b5882b738f05eba73221490e2d5c17cf406be2796eec488a5b5268f507ee8d6f3dd1d64abc785708eb9bd24e352a98", 0xc3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000880)="b527ce144a9e865255e6f85f4d18156225c3396c992b47cedd740a6a6c3c82aba6b56bd441a6dd0856d664fb959853821ce9917ed023550816ba4b21413e5e7c41c7e2197da810d26109c4572ec3dfb28073599772cf3e04b596b22fce7db25609f21c6da4db35a48c20cdfa45bba59b", 0x70}, {&(0x7f0000002300)="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", 0x1ab}], 0x2}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000140)="005bd59ea6e8b3e0e917b21f7ed0cd7b84ced4929f916ac3dc05a5f738f237fe4f6dcfa6e816645a5c9dba071ed15f985b8352928ef8ebdb06be85dfd44b6103e8cf0f5e465977f0fda712316367a66294fd", 0x52, 0x10008095, 0x0, 0x0) 2m30.43252904s ago: executing program 1 (id=10499): socket(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x80, 0x89, 0x0, 0x3, 0x8d], 0x100000, 0x2c08c6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_io_uring_setup(0x27c8, &(0x7f0000000540)={0x0, 0x800069ea, 0x3000, 0x3, 0x14b}, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x8, 0x8, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r4, 0x1, 0x1, 0x1, 0x0, 0x0) 2m30.201155739s ago: executing program 40 (id=10499): socket(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x80, 0x89, 0x0, 0x3, 0x8d], 0x100000, 0x2c08c6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_io_uring_setup(0x27c8, &(0x7f0000000540)={0x0, 0x800069ea, 0x3000, 0x3, 0x14b}, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x8, 0x8, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r4, 0x1, 0x1, 0x1, 0x0, 0x0) 55.082307615s ago: executing program 8 (id=11473): syz_emit_ethernet(0x1f, &(0x7f0000001100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="e955f5ea6ade", @void, {@llc_tr={0x11, {@snap={0xaa, 0x0, '/', "a74338", 0x88e7, "840f767ab0bdfcb9cc"}}}}}, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000040)={0x0, 0xe1, "490aa12f2f5635d0c46124a70d7b6319bd1477651a865810b3713546ef96ebd48a0fe5e380e35df9f06919b35eb69e499d3c512d752b372e2be46e2ef4e710bf776d21f00557dfd0f42e4b5c93ead27a967556aee8c16cff9e8dab5970bf6fe818468cd60da8a6f9b733ea282ef77845938976468a16ba64fd2837fc01504d990aff3cf7f2218456bc07370ed575712630ffac9b56ac561dc44090c459eef6ebda5d869e10f6f51661ab55fe330de245d0f909e43e52ffe92ebb644cb591e1a2b723fe2dd85f0bfaf398ed06aa86a43dd18fcf357fe2647e56389ebfeb9c6d8562"}, &(0x7f0000000140)=0xe9) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x2, 0x700, 0x700, 0x2c}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='fdinfo/3\x00') read$eventfd(r3, &(0x7f0000000100), 0xfffffd79) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000180)={r2, 0x1}, &(0x7f00000001c0)=0x8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 55.023230027s ago: executing program 8 (id=11474): mount(&(0x7f0000000080)=@sg0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000000)='ubifs\x00', 0x200000, 0x0) socket$inet(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06000000040000004000000005"], 0x48) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x6f1dd9aa, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}) dup(r0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$CDROMREADAUDIO(r2, 0x530e, &(0x7f0000000080)={@lba=0x7, 0x1, 0x21, &(0x7f0000000040)=""/33}) socket(0x10, 0x803, 0x0) syz_io_uring_setup(0x383e, &(0x7f0000000400)={0x0, 0x0, 0x400, 0x2, 0x55}, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r3 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) socket$phonet_pipe(0x23, 0x5, 0x2) socket$packet(0x11, 0x2, 0x300) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7ffeffff}]}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xfee00, 0x296a, 0x4, 0x3, 0x0, [{0x98, 0x37, 0x81, '\x00', 0x7f}, {0x41, 0x8, 0x30, '\x00', 0xf5}, {0xe9, 0x1, 0x9, '\x00', 0x11}, {0x7, 0x9, 0x3, '\x00', 0x8f}, {0x3, 0x7f, 0x92, '\x00', 0xa}, {0xf, 0xe3, 0x8, '\x00', 0xaa}, {0x6, 0x8, 0x6, '\x00', 0x8}, {0x1, 0x3, 0x8, '\x00', 0x67}, {0x80, 0xfc, 0xa, '\x00', 0x8}, {0x8, 0x2, 0x13, '\x00', 0x9f}, {0x8, 0xa, 0x6, '\x00', 0x3}, {0x2, 0xa, 0x3, '\x00', 0xa}, {0x1e, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x7}, {0x5, 0xa0, 0x47, '\x00', 0x4}, {0x7, 0x3, 0x3, '\x00', 0xa7}, {0x5, 0x0, 0xf, '\x00', 0x7}, {0x5e, 0xa, 0x8}, {0x7f, 0x6, 0x7, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x5, 0x8, 0x20, '\x00', 0xfc}, {0x6, 0xff, 0xc6, '\x00', 0x8}]}}) close_range(r4, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x141000) 53.849480443s ago: executing program 8 (id=11488): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@iv={0x60, 0x117, 0x2, 0x47, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x78, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000b40)="86545d2157646172b815", 0xa}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac", 0x89}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 52.943214328s ago: executing program 8 (id=11496): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x1c, r0, 0xd9b2794f6a139537, 0x0, 0xe70303e7, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 52.893073334s ago: executing program 8 (id=11497): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000080c2300000c0003800400038004000500180001801400020076657468305f746f5f626f6e64000000"], 0x38}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="54010000100001002dbd7000c2617a00fe880007000000fdff00000000000101ac1414bb00000000000000000000006400"/60, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fe80000000000000000000000000002c000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000002000000000000000000000000000002000000000000000000000002000100cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000025bd7000000000000000000028bd7000aa0e0000"], 0x154}}, 0x0) ioctl$CDROMVOLCTRL(0xffffffffffffffff, 0x5392, &(0x7f0000000000)={0xb, 0x3, 0x8, 0x8}) r2 = syz_open_dev$sg(&(0x7f0000005980), 0x0, 0xc0b41) ioctl$SG_IO(r2, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffe, 0x6, 0xf8, @buffer={0x0, 0xe9, &(0x7f0000000000)=""/233}, &(0x7f0000000440)="153606ee522b", 0x0, 0x3, 0x0, 0x3, 0x0}) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_print_times', 0x20206, 0xac) sendfile(r3, r3, 0x0, 0x68) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xd3283d036ae269b3, 0x8031, 0xffffffffffffffff, 0x99cf0000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r6, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) ioctl$KVM_SET_IRQCHIP(r5, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1}}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x0, 0x10) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r7, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 52.798742118s ago: executing program 8 (id=11498): mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) lchown(&(0x7f0000000040)='my_tracefs/events/task/task_rename/filter\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) read$FUSE(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r0, &(0x7f0000002380)={0x18, 0x0, r1, {0x81}}, 0x18) 43.902639825s ago: executing program 0 (id=11582): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x83, 0x7, 0xe1, 0x81, 0x9, 0xf9, 0x40, 0x42, 0xfb, 0x8, 0xc, 0x4, 0xe9, 0x4, 0xfc, 0x38}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x100000000005, 0x20, 0x3, 0x2, 0x80000000106c, 0x100, 0x8000000000000, 0x80000004000080, 0x1c00000, 0x8, 0x0, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x3, &(0x7f0000002280)=ANY=[], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xff010000) 43.64551997s ago: executing program 0 (id=11583): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x4, 0x0, 0x0, 0x6d0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000740)="440f20c03505000020440f22c0fb01c966bad104ed00000f23c00f21f866b846008ed00f23f80f01cbb8010000000f01c146a7b9670900000f3236660fc6b8730f0000c9b98f020000b8b9000000ba000000000f30460f01c8", 0x59}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x42, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x62000000) 43.351720074s ago: executing program 0 (id=11585): rt_sigtimedwait(&(0x7f0000000040)={[0x9]}, &(0x7f00000000c0), &(0x7f00000001c0)={0x77359400}, 0x8) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x8000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="09000000040000000800000004"], 0x50) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x189000, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xd5) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000100)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r3, &(0x7f0000000040), 0x0}, 0x20) ppoll(&(0x7f0000000000)=[{r0, 0x4000}], 0x1, 0x0, 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0xa0201, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0xfffffffffffffe1f, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe01, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000500)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x600, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe10804000000af8e0e3dc11d875397bdb22d0000b420a1a93e527d3d458d080000000000000000000000000000000000000000004300", "f4bd00000080190000efffca0000000000001a000000ff00", [0x2]}}) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0xff51) 40.223053123s ago: executing program 0 (id=11621): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x1c, r0, 0xd9b2794f6a139537, 0x0, 0xe7030c00, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 40.103011464s ago: executing program 0 (id=11623): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x109000, 0x1f7) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x10, 0x4000003e, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) capset(&(0x7f0000001b00)={0x20071026, 0xffffffffffffffff}, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000380)=0x2, 0x4) setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f00000007c0), 0x10) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) 40.041989087s ago: executing program 0 (id=11624): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) socket(0x400000000010, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r9, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r10, 0x6000}], 0x1, 0x0, 0x0, 0x0) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x72, 0x1, 0x7fff0000}]}) close_range(r11, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r12, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r12}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) sendmsg$nl_route(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x503, 0x70bd27, 0x702, {0x0, 0x0, 0x0, r12, 0x6000, 0x41bde}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x40}, 0x1, 0x0, 0x0, 0xc005}, 0x440b0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r13, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r13, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @remote, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r13, 0x6, 0x1f, &(0x7f0000000580), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r13, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r13, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) setsockopt$inet6_tcp_TLS_TX(r13, 0x11a, 0x2, &(0x7f00000000c0)=@ccm_128={{0x304}, "608d77a9b70d876f", "8f0abac5c77c7ccc0049c8d1a83ef37b", "8cbe0bfe", "f06432a835b478c3"}, 0x28) 37.772521372s ago: executing program 41 (id=11498): mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) lchown(&(0x7f0000000040)='my_tracefs/events/task/task_rename/filter\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) read$FUSE(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r0, &(0x7f0000002380)={0x18, 0x0, r1, {0x81}}, 0x18) 25.027848977s ago: executing program 42 (id=11624): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) socket(0x400000000010, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r9, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r10, 0x6000}], 0x1, 0x0, 0x0, 0x0) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x72, 0x1, 0x7fff0000}]}) close_range(r11, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r12, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r12}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) sendmsg$nl_route(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x503, 0x70bd27, 0x702, {0x0, 0x0, 0x0, r12, 0x6000, 0x41bde}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x40}, 0x1, 0x0, 0x0, 0xc005}, 0x440b0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r13, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r13, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @remote, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r13, 0x6, 0x1f, &(0x7f0000000580), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r13, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r13, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) setsockopt$inet6_tcp_TLS_TX(r13, 0x11a, 0x2, &(0x7f00000000c0)=@ccm_128={{0x304}, "608d77a9b70d876f", "8f0abac5c77c7ccc0049c8d1a83ef37b", "8cbe0bfe", "f06432a835b478c3"}, 0x28) 5.231321351s ago: executing program 5 (id=11983): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0xffff0000) 5.113171583s ago: executing program 5 (id=11984): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) sendto$inet6(r0, &(0x7f0000000040), 0x27, 0xf203, &(0x7f0000000100)={0xa, 0x4e23, 0x100000, @loopback}, 0x1c) 5.112378756s ago: executing program 5 (id=11986): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x9, 0x3, 0x260, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c0) r0 = socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = syz_io_uring_setup(0x31d7, &(0x7f0000000700)={0x0, 0xcf13, 0x10100, 0x4, 0x262c}, &(0x7f0000000340), &(0x7f0000000240), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bind$bt_l2cap(r2, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe) listen(r2, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000cc40)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000000010000000000ffdbdf2504000080"], 0x14}], 0x1}, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x2cc}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x1}) readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/110, 0x6e}], 0x1) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000426000/0x4000)=nil, 0x4000}, 0x3}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a32000000000500040000000000050005000a000000050001000600000014000780080006400000000208000c"], 0x58}}, 0x20000000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) shutdown(r4, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r6, 0x4068aea3, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYRES8=r2, @ANYRES32=0x0, @ANYBLOB="4800000000000000240012"], 0x44}, 0x1, 0x0, 0x0, 0x4c040}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a050000000000000000000a00fffe38000000090a010300000000000000000700000008000f40000000020900010073797a310000000008000a400000000008000f400000000114"], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e65766500005000028005000800000000000400380205000900010000000500"], 0x88}}, 0x810) 4.822692051s ago: executing program 5 (id=11992): timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, 0x0, 0x42082, 0x0) close(0xffffffffffffffff) sendmmsg$inet6(r1, &(0x7f0000008c80)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0xfd4e, @empty, 0xc}, 0x1c, 0x0}}], 0x1, 0x20002000) 4.541956243s ago: executing program 5 (id=11996): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd700006dcdf250100000008000100", @ANYRES32=r2, @ANYBLOB="4400028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x60}, 0x1, 0x400000000000000}, 0x0) 4.362789975s ago: executing program 5 (id=11999): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5241}, 0x94) r1 = syz_clone(0xa1c68400, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={0x0, 0x7fffffff}, 0x8) r3 = syz_pidfd_open(r1, 0x0) syz_usb_disconnect(0xffffffffffffffff) setns(r3, 0x10000000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) r5 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r5, 0x29, 0x4b, 0x0, 0x4) listen(0xffffffffffffffff, 0x5) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r4, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x608003) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000004b40)='./binderfs/binder-control\x00', 0x802, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, 0xffffffffffffffff, 0x4, 0x0, @void}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002500090025bd7000fddbdfff0600000008000100"], 0x1c}, 0x1, 0x0, 0x0, 0x4040002}, 0x4000080) 1.472933152s ago: executing program 3 (id=12037): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000011c0)="b9ffddc1ddcccdf175537d53888edf", 0x0, 0x600, 0x60000009, 0x0, 0xf380, 0x0, 0x0}, 0x50) 1.382725175s ago: executing program 3 (id=12038): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000050428bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4000000004000000240012800b0001006970766c616e0000140002800600010000000000060001000200000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x54}, 0x1, 0x6000000000000000, 0x0, 0x4080}, 0x0) 1.230690588s ago: executing program 7 (id=12039): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/usb/devices/usb1/urbnum/file0\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/usb/devices/usb1/urbnum\x00', 0x0, 0x0) read(r0, &(0x7f0000000380), 0x64) (async) write$vhost_msg(r0, &(0x7f0000000240)={0x1, {&(0x7f0000000000), 0x0, &(0x7f0000000040)=""/108, 0x2, 0x1}}, 0x48) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r1, 0x20, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0xfffffff9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0x6, [@enum64={0x8, 0x9, 0x0, 0x13, 0x1, 0x0, [{0xf, 0xc527, 0x1}, {0x6, 0x0, 0x101}, {0xe, 0xb4dd, 0x8}, {0x9, 0x6, 0x4}, {0xe, 0x4, 0x7fffffff}, {0x1, 0x385, 0x18}, {0x8, 0x0, 0x1c}, {0x7, 0x10000, 0x9}, {0xb, 0x4b21, 0x9}]}, @struct={0x9, 0x0, 0x0, 0x4, 0x1, 0xa07d}, @float={0xe, 0x0, 0x0, 0x10, 0x10}]}, {0x0, [0x5f, 0x5f, 0x61, 0x61]}}, &(0x7f00000002c0)=""/21, 0xae, 0x15, 0x0, 0x6b2, 0x10000, @value=r0}, 0x28) (async) dup3(r0, r0, 0x0) 1.122740247s ago: executing program 7 (id=12040): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfff7ffff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x22, 0x32e6, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0xdd86, r3, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x881}, 0x0) 1.122432771s ago: executing program 3 (id=12041): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x60}, 0x1, 0xf5ffffff}, 0x0) 972.798945ms ago: executing program 3 (id=12042): r0 = socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) (async) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x1b, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000001100)={r3, 0x3}, 0x8) (async) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000001100)={r3, 0x3}, 0x8) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r4, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) socket(0x400000000010, 0x3, 0x0) (async) r5 = socket(0x400000000010, 0x3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0x401, 0xf, 0x8, 0x86, 0x2, 0x3, 0x7f, 0xa6, 0x4d, 0x9, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0xd, 0x7, 0x5, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0x20003, 0x8, 0x4c76, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7fc, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000004, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff3, 0x129432f6, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x7, 0x7ffb, 0x6, 0x500, 0x401, 0x10001, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0xd, 0xfffff256, 0x2, 0x1, 0xfdfffffd, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0xe79, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0xff, 0x4, 0xb, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x2, 0x400003, 0x6, 0x4, 0x6d01, 0x6, 0x34, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0x12b, 0x8a6, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x2008077f, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2000004, 0xffff, 0x6, 0x80000000, 0xb9, 0xce4, 0x10001fc, 0x10002, 0x4184, 0x5, 0x7, 0x2, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x1622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x3, 0x5, 0x0, 0x30b1d693, 0xfffff4f0, 0x4, 0x7, 0x7, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0x30, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xffff}, {0x0, 0x1}, {0x1, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xf0000000}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r7, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd61fbddf000083aff00f1ffffffffffffff00ffffac1e0001ff0200000000000000000000000000018100907800820004"], 0x0) 971.924768ms ago: executing program 2 (id=12043): r0 = socket(0x28, 0x801, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x30000009}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newtaction={0x4e8, 0x30, 0x100, 0x70bd29, 0x25dfdbfe, {}, [{0x4d4, 0x1, [@m_skbedit={0x9c, 0x1b, 0x0, 0x0, {{0xc}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x6, 0xd}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x2, 0x3, 0x3, 0xfff}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x401, 0x5, 0x5, 0x7, 0x76}}]}, {0x1d, 0x6, "6cbc0be399313f4862f2515a09a917bc7d87e474f1fa546fba"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x6b31a6586b121e0b, 0x2}}}}, @m_police={0x434, 0x19, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9880, 0xfffffc00, 0xfffffff8, 0x6, 0x800, 0x80000000, 0x7d, 0xfffffffd, 0x3ff, 0xfffffe01, 0x7, 0x1, 0x0, 0x5, 0x3, 0x3, 0x4, 0x8, 0x200, 0x0, 0xfffffffe, 0x8000, 0x2, 0x92, 0x4, 0x3, 0x6, 0x2, 0xe, 0x2b8, 0x50, 0x5, 0x9, 0x3, 0x6, 0x10000, 0x7fff, 0x0, 0xb, 0x8, 0x5, 0xf, 0x1, 0x9, 0x99b, 0x4, 0x6, 0x0, 0x3, 0x6, 0x4, 0x5, 0x2, 0x7, 0x7, 0x5, 0x3, 0x5, 0x29, 0x0, 0x8, 0x2, 0x80000000, 0xaf9d, 0x6, 0x9, 0x80000001, 0x7, 0x5, 0xfffffffb, 0xd00000, 0x9e, 0x8, 0x2, 0x3, 0x6, 0x8, 0x3, 0x3, 0x2, 0x100, 0xfffffc01, 0x6, 0x545, 0x0, 0x9, 0x200, 0xd3, 0x0, 0x5, 0x7, 0x2, 0x8, 0x9, 0x451f, 0x1, 0xaffc, 0xfffffffd, 0x9294, 0x3, 0x1, 0x71b, 0x2, 0x9, 0x80, 0x6, 0x401, 0x9, 0x8001, 0x4, 0x10, 0x200, 0x91e, 0x80000001, 0x793bd975, 0x71f, 0x9, 0x8, 0x6, 0x5, 0x9f6, 0xf, 0x4, 0x6, 0x7f, 0x2, 0xb, 0x2eb, 0x4, 0x0, 0xdd65, 0x80000000, 0x6, 0x8, 0x0, 0xff800000, 0xfffffff2, 0x4, 0x1000, 0x0, 0x7, 0xa882, 0x7, 0x9, 0x881, 0x4, 0x8, 0x2, 0x80, 0x0, 0x8000, 0xfffffffb, 0x10001, 0x4, 0x5, 0x8, 0x0, 0x0, 0x7ff, 0xfff, 0x40, 0x0, 0x9, 0xe, 0xc, 0x1, 0x5, 0x81, 0x6, 0x7ff, 0x86, 0x2, 0xcd, 0x0, 0x8, 0x8, 0xd9bd, 0xcc3c, 0x92, 0xa, 0x9, 0x2, 0x26, 0x4, 0x80000000, 0xb, 0x4, 0x80, 0xe5, 0x1026, 0x3, 0xffffffe1, 0xfffffff3, 0x4, 0x7fff, 0x1, 0x1, 0x0, 0xd7ec, 0xd, 0xfffffffb, 0x0, 0x915, 0x3, 0x5, 0x6, 0x7, 0x10, 0x3, 0x6, 0x0, 0xb017, 0x8, 0x1, 0x8, 0x3, 0x3ff, 0xd37, 0x3ff, 0xe54, 0x9191, 0xff, 0x3, 0xff, 0xc0000000, 0x0, 0x5, 0x87, 0x5, 0x0, 0xef0, 0x8, 0xd, 0x6, 0x3, 0x4, 0xfffffff0, 0x200, 0x0, 0xbc, 0x7, 0x3ff, 0x1, 0xffffff6f, 0x40, 0x9, 0x5, 0x7, 0x8000, 0x6, 0x774, 0x10001, 0x5af, 0xc, 0x7, 0x80000000]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x6fe4b901c62758b}}}}]}]}, 0x4e8}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x1}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="000008004500001c000100004001"], 0x20) r7 = add_key$keyring(&(0x7f000000fa80), &(0x7f000000fac0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r8 = add_key$user(&(0x7f000000fb00), &(0x7f000000fb40)={'syz', 0x1}, &(0x7f000000fb80)="37480ccb54", 0x5, r7) keyctl$search(0xa, r8, &(0x7f000000fc00)='encrypted\x00', &(0x7f000000fc40)={'syz', 0x3}, 0xfffffffffffffffa) socket(0x28, 0x801, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x30000009}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newtaction={0x4e8, 0x30, 0x100, 0x70bd29, 0x25dfdbfe, {}, [{0x4d4, 0x1, [@m_skbedit={0x9c, 0x1b, 0x0, 0x0, {{0xc}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x6, 0xd}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x2, 0x3, 0x3, 0xfff}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x401, 0x5, 0x5, 0x7, 0x76}}]}, {0x1d, 0x6, "6cbc0be399313f4862f2515a09a917bc7d87e474f1fa546fba"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x6b31a6586b121e0b, 0x2}}}}, @m_police={0x434, 0x19, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9880, 0xfffffc00, 0xfffffff8, 0x6, 0x800, 0x80000000, 0x7d, 0xfffffffd, 0x3ff, 0xfffffe01, 0x7, 0x1, 0x0, 0x5, 0x3, 0x3, 0x4, 0x8, 0x200, 0x0, 0xfffffffe, 0x8000, 0x2, 0x92, 0x4, 0x3, 0x6, 0x2, 0xe, 0x2b8, 0x50, 0x5, 0x9, 0x3, 0x6, 0x10000, 0x7fff, 0x0, 0xb, 0x8, 0x5, 0xf, 0x1, 0x9, 0x99b, 0x4, 0x6, 0x0, 0x3, 0x6, 0x4, 0x5, 0x2, 0x7, 0x7, 0x5, 0x3, 0x5, 0x29, 0x0, 0x8, 0x2, 0x80000000, 0xaf9d, 0x6, 0x9, 0x80000001, 0x7, 0x5, 0xfffffffb, 0xd00000, 0x9e, 0x8, 0x2, 0x3, 0x6, 0x8, 0x3, 0x3, 0x2, 0x100, 0xfffffc01, 0x6, 0x545, 0x0, 0x9, 0x200, 0xd3, 0x0, 0x5, 0x7, 0x2, 0x8, 0x9, 0x451f, 0x1, 0xaffc, 0xfffffffd, 0x9294, 0x3, 0x1, 0x71b, 0x2, 0x9, 0x80, 0x6, 0x401, 0x9, 0x8001, 0x4, 0x10, 0x200, 0x91e, 0x80000001, 0x793bd975, 0x71f, 0x9, 0x8, 0x6, 0x5, 0x9f6, 0xf, 0x4, 0x6, 0x7f, 0x2, 0xb, 0x2eb, 0x4, 0x0, 0xdd65, 0x80000000, 0x6, 0x8, 0x0, 0xff800000, 0xfffffff2, 0x4, 0x1000, 0x0, 0x7, 0xa882, 0x7, 0x9, 0x881, 0x4, 0x8, 0x2, 0x80, 0x0, 0x8000, 0xfffffffb, 0x10001, 0x4, 0x5, 0x8, 0x0, 0x0, 0x7ff, 0xfff, 0x40, 0x0, 0x9, 0xe, 0xc, 0x1, 0x5, 0x81, 0x6, 0x7ff, 0x86, 0x2, 0xcd, 0x0, 0x8, 0x8, 0xd9bd, 0xcc3c, 0x92, 0xa, 0x9, 0x2, 0x26, 0x4, 0x80000000, 0xb, 0x4, 0x80, 0xe5, 0x1026, 0x3, 0xffffffe1, 0xfffffff3, 0x4, 0x7fff, 0x1, 0x1, 0x0, 0xd7ec, 0xd, 0xfffffffb, 0x0, 0x915, 0x3, 0x5, 0x6, 0x7, 0x10, 0x3, 0x6, 0x0, 0xb017, 0x8, 0x1, 0x8, 0x3, 0x3ff, 0xd37, 0x3ff, 0xe54, 0x9191, 0xff, 0x3, 0xff, 0xc0000000, 0x0, 0x5, 0x87, 0x5, 0x0, 0xef0, 0x8, 0xd, 0x6, 0x3, 0x4, 0xfffffff0, 0x200, 0x0, 0xbc, 0x7, 0x3ff, 0x1, 0xffffff6f, 0x40, 0x9, 0x5, 0x7, 0x8000, 0x6, 0x774, 0x10001, 0x5af, 0xc, 0x7, 0x80000000]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x6fe4b901c62758b}}}}]}]}, 0x4e8}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'}) (async) socket$inet(0x2, 0x2, 0x0) (async) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x1}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) (async) write$tun(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="000008004500001c000100004001"], 0x20) (async) add_key$keyring(&(0x7f000000fa80), &(0x7f000000fac0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) (async) add_key$user(&(0x7f000000fb00), &(0x7f000000fb40)={'syz', 0x1}, &(0x7f000000fb80)="37480ccb54", 0x5, r7) (async) keyctl$search(0xa, r8, &(0x7f000000fc00)='encrypted\x00', &(0x7f000000fc40)={'syz', 0x3}, 0xfffffffffffffffa) (async) 901.735641ms ago: executing program 7 (id=12044): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) sendto$inet6(r0, &(0x7f0000000040), 0x27, 0xf5ff, &(0x7f0000000100)={0xa, 0x4e23, 0x100000, @loopback}, 0x1c) 901.583248ms ago: executing program 3 (id=12045): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet_sctp(r0, &(0x7f0000006240)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000380)="814c594d0bd78f542ea6a16cec7785d432e2f8a665a1968faa5d7b0517bec0169c184f9ad000641ab638f707ba01bd87f403d521f2c4ea80d483c6e7709d741f7525d98c7a2d029f8e6f13003417a90a9d4b3b9be5510b7e12246be2714983cb18c82b4bc716ea5f50b26463b53aa2dab41dbd7135c862ac612c19892b810ca51cc005af6bbcbc9430e06f59cf75804d62df7ecbacfa0a6c500b541c8ba3d7958fe338b7c9d9eecc39328a7cf84cf20fa0e26fc9b2a305de84adec380f24ddb80c043333895aece33ff72f6bd0abc14bcfb340cfd7891ecf601421b795eb664019bf74add4c1481f1e4755a3764d21765640433f", 0xf4}, {&(0x7f0000000480)="cf4a1e93489489671fe50f83a397f0db2f33d454d616b2009ba858", 0x1b}, {&(0x7f0000000500)="872daa3013c515f04108fccef6f8f95e34015799685768823dca2ad088b3ff94ac7a5b77d7a5ed5e211205d068ca80bbe0665722ea82c167da66003a5ffec59b519614c05893c08c12c3a9cff4a29a3e17c74fc674e796143c73f0c37dc2015111bd", 0x62}, {&(0x7f0000000580)="0ede0539c63d5db50432ce2a2a743035e2f873a578c8a5d259cdedd71a8ee848b234fb8861a169b53861708e621ef9a1ca9359a6698b823b8d8d255425e459eaed36737ca53bb145cba4a51bfdaa8dafac5f700467413a95463d74c61cb30fe63f982665a0a1fd5cc64477fb05fe", 0x6e}, {&(0x7f0000000640)="265f3720bf9d330a79e6a47e5460b17d0cd0321a3c6c0f27b814b804d8088161ab8254ba225f59c38b5e1a1fa7bbd40cbc3f0ebe29dd43db6a81f23afaa3f3ab14953a", 0x43}], 0x5, 0x0, 0x0, 0x20000000}], 0x1, 0x20000000) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="91f8a9849519def28691bbc4173c3d6f357d0272b7e95a136b3ffec75b73e6937b7b22a1319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000f2ffffff2e3591ceb1757de97fb25500620d0d30506e7429fa5337b74945da657f794d5b5bf89588e07b14a17f069912dc0c3f201bff8b9a687b85baa11244632642a9be7b42b6b5882b738f05eba73221490e2d5c17cf406be2796eec488a5b5268f507ee8d6f3dd1d64abc785708eb9bd24e352a98", 0xc3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000880)="b527ce144a9e865255e6f85f4d18156225c3396c992b47cedd740a6a6c3c82aba6b56bd441a6dd0856d664fb959853821ce9917ed023550816ba4b21413e5e7c41c7e2197da810d26109c4572ec3dfb28073599772cf3e04b596b22fce7db25609f21c6da4db35a48c20cdfa45bba59b", 0x70}, {&(0x7f0000002300)="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", 0x1a7}], 0x2}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000140)="005bd59ea6e8b3e0e917b21f7ed0cd7b84ced4929f916ac3dc05a5f738f237fe4f6dcfa6e816645a5c9dba071ed15f985b8352928ef8ebdb06be85dfd44b6103e8cf0f5e465977f0fda712316367a66294fd", 0x52, 0x10008095, 0x0, 0xec) 812.790584ms ago: executing program 7 (id=12046): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0xc0010015, 0x0, 0x4}]}) r3 = landlock_create_ruleset(&(0x7f0000000000)={0x8040, 0x0, 0x3, 0x4}, 0x30, 0x2) landlock_restrict_self(r3, 0x3) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x100a1, 0x3, 0x1, 0x2040}, 0x30, 0x0) landlock_restrict_self(r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) syncfs(r5) r7 = landlock_create_ruleset(&(0x7f0000000040)={0x14985, 0x3, 0x3}, 0x18, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x1000, &(0x7f00000003c0)="05dd46d1b20dace98d47fd94c6b3757aa70b6dc9741a59a7738fd4b16895eba148c771258145fcab577d060f355636ceeab619621225e38e0379f61dc121ad12dba8e9bf9ac27da41db944eeadbb4cc3a018445b188c83b3986f4d8f33165101f016f4e7deb2dc9157fa222519cb4df1a053834fa40ba7cd", 0x78, &(0x7f0000000500), &(0x7f0000000580), &(0x7f00000005c0)="d89632b84aa24e396382a9f271c06ef63ef8fbedcead42ba3813fc21d0da35e0399733a84ace486c80a364deb1dfde81f24f38d26a90227911557d5aa5cc34c787a70c504125cb50d00779ef8fc51fd760") sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00010000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0xdbcf66f907e419c}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl(r12, 0x4048aec9, &(0x7f00000000c0)="0300000000000000010000000500"/72) bind$unix(r9, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) splice(r13, 0x0, r14, 0x0, 0x6, 0x4) landlock_restrict_self(r7, 0x1) connect$unix(r8, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) r15 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r15, 0x1, 0x1d, &(0x7f0000000040)=0x10001, 0x4) write$P9_RFSYNC(r13, &(0x7f00000001c0)={0x7, 0x33, 0x1}, 0x7) 732.39204ms ago: executing program 2 (id=12047): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@iv={0x60, 0x117, 0x2, 0x4b, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x78, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000b40)="86545d2157646172b815", 0xa}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac", 0x89}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45", 0xc8}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 572.317125ms ago: executing program 7 (id=12048): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000240)=0x1) close(r1) socket$inet6_udp(0xa, 0x2, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xac}}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0x7}]}, 0x10) getsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000002c0), &(0x7f0000000200)=0xfffffffffffffd91) r4 = socket(0x10, 0x3, 0xc) write(r4, &(0x7f0000000040)="effd00001000ff00fd4344c007110000f3050a00dbfd010000000001ffdf00", 0xfe00) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) fchmodat(r5, &(0x7f00000000c0)='./file0\x00', 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x900, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000480)="8f0978d21b640fc79ca50000c0fe470f06430f01c2440f20c0ac0a0000e39d9d0f22c066460f38809bf77f00000f214a0fc73d0d0000003e653666400fc7775f400f01c4", 0x44}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000a80)={"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"}) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet_sctp(r3, &(0x7f0000006240)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000ec0)="814c594d0bd78f542ea6a16cec7785d432e2f8a665a1968faa5d7b0517bec0169c184f9ad000641ab638f707ba01bd87f403d521f2c4ea80d483c6e7709d741f7525d98c7a2d029f8e6f13003417a90a9d4b3b9be5510b7e12246be2714983cb18c82b4bc716ea5f50b26463b53aa2dab41dbd7135c862ac612c19892b810ca51cc005af6bbcbc9430e06f59cf75804d62df7ecbacfa0a6c500b541c8ba3d7958fe338b7c9d9eecc39328a7cf84cf20fa0e26fc9b2a305de84adec380f24ddb80c043333895aece33ff72f6bd0abc14bcfb340cfd7891ecf601421b795eb664019bf74add4c1481f1e4755a3764d21765640433f", 0xf4}, {&(0x7f0000000480)="cf4a1e93489489671fe50f83a397f0db2f33d454d616b2009ba858", 0x1b}, {&(0x7f0000000500)="872daa3013c515f04108fccef6f8f95e34015799685768823dca2ad088b3ff94ac7a5b77d7a5ed5e211205d068ca80bbe0665722ea82c167da66003a5ffec59b519614c05893c08c12c3a9cff4a29a3e17c74fc674e796143c73f0c37dc2015111bd", 0x62}, {&(0x7f0000000580)="0ede0539c63d5db50432ce2a2a743035e2f873a578c8a5d259cdedd71a8ee848b234fb8861a169b53861708e621ef9a1ca9359a6698b823b8d8d255425e459eaed36737ca53bb145cba4a51bfdaa8dafac5f700467413a95463d74c61cb30fe63f982665a0a1fd5cc64477fb05fe", 0x6e}, {&(0x7f0000000640)="265f3720bf9d330a79e6a47e5460b17d0cd0321a3c6c0f27b814b804d8088161ab8254ba225f59c38b5e1a1fa7bbd40cbc3f0ebe29dd43db6a81f23afaa3f3ab14953a", 0x43}], 0x5, 0x0, 0x0, 0x20000000}], 0x1, 0x20000000) sendmmsg$inet(r3, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="91f8a9849519def28691bbc4173c3d6f357d0272b7e95a136b3ffec75b73e6937b7b22a1319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000f2ffffff2e3591ceb1757de97fb25500620d0d30506e7429fa5337b74945da657f794d5b5bf89588e07b14a17f069912dc0c3f201bff8b9a687b85baa11244632642a9be7b42b6b5882b738f05eba73221490e2d5c17cf406be2796eec488a5b5268f507ee8d6f3dd1d64abc785708eb9bd24e352a98", 0xc3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000880)="b527ce144a9e865255e6f85f4d18156225c3396c992b47cedd740a6a6c3c82aba6b56bd441a6dd0856d664fb959853821ce9917ed023550816ba4b21413e5e7c41c7e2197da810d26109c4572ec3dfb28073599772cf3e04b596b22fce7db25609f21c6da4db35a48c20cdfa45bba59b", 0x70}, {&(0x7f0000002300)="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", 0x1a7}], 0x2}}], 0x2, 0x2090) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r9 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_G_TUNER(r9, 0xc054561d, &(0x7f0000000080)={0x0, "55e05cb6680cc32a4bfdca1886c5aded253bc9c89ed279cb8757af722fec30f7", 0x5, 0x100, 0x2, 0x7, 0x8, 0x0, 0x75, 0x5}) sendto$inet(r3, &(0x7f0000000140)="005bd59ea6e8b3e0e917b21f7ed0cd7b84ced4929f916ac3dc05a5f738f237fe4f6dcfa6e816645a5c9dba071ed15f985b8352928ef8ebdb06be85dfd44b6103e8cf0f5e465977f0fda712316367a66294fd", 0x52, 0x10008095, 0x0, 0x0) 569.952432ms ago: executing program 2 (id=12049): mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='.\x00', &(0x7f0000000000), 0x1000004, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=virtio,afid=0x0000000000004875,msize=0x00000000+0008000,posixacl']) 412.334275ms ago: executing program 2 (id=12050): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'vxcan1\x00', {0x2, 0x0, @loopback}}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0xb0, @mcast2, 0xffff}}}, 0x3a) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x6, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xcd, &(0x7f00000001c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000200), &(0x7f0000000280), 0x8, 0xea, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x503, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}]}}}]}, 0x3c}}, 0x0) 310.902772ms ago: executing program 2 (id=12051): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000050428bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4000000004000000240012800b0001006970766c616e0000140002800600010000000000060001000200000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x54}, 0x1, 0x6558000000000000, 0x0, 0x4080}, 0x0) 102.027552ms ago: executing program 7 (id=12052): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f00000011c0)="b9ffddc1ddcccdf175537d53888edf", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 62) 101.724113ms ago: executing program 2 (id=12053): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000380)={0x0, 0x2, 0x1000, 0xfffffffe, 0x238}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x704, 0x100, 0x1000000, 0x2033f, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x4000, 0x600, 0xdd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x400}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x4000, 0x1, 0xdfffffff}}], 0x1, 0x0, 0x0) 0s ago: executing program 3 (id=12054): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x39, 0x1a, r0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3fffff) chdir(&(0x7f0000000540)='./cgroup\x00') r3 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x45, &(0x7f0000000640), 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000200)=""/179, 0xb3) lseek(r4, 0x5, 0x1) getdents64(r4, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d000000000000000000000010040000000000000000000009030000000000000063"], 0x0, 0x52}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) ioctl$CDROM_DEBUG(r5, 0x5330, 0x1) r6 = pidfd_getfd(r4, r0, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f00000003c0)=0xff, 0x4) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) kernel console output (not intermixed with test programs): 5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 688.406756][ T42] audit: type=1400 audit(1785458188.877:3771): avc: denied { setopt } for pid=4093 comm="syz.2.11625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 688.423899][ T42] audit: type=1400 audit(1785458188.907:3772): avc: denied { read } for pid=4098 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 688.442742][ T42] audit: type=1400 audit(1785458188.927:3773): avc: denied { read open } for pid=4098 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 688.464851][ T42] audit: type=1400 audit(1785458188.927:3774): avc: denied { getattr } for pid=4098 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 688.481578][ T42] audit: type=1400 audit(1785458188.947:3775): avc: denied { write } for pid=4095 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 688.768771][ T62] wlan1: Trigger new scan to find an IBSS to join [ 689.371113][ T4122] FAULT_INJECTION: forcing a failure. [ 689.371113][ T4122] name failslab, interval 1, probability 0, space 0, times 0 [ 689.374906][ T4122] CPU: 0 UID: 0 PID: 4122 Comm: syz.2.11630 Tainted: G L syzkaller #0 PREEMPT(full) [ 689.374924][ T4122] Tainted: [L]=SOFTLOCKUP [ 689.374928][ T4122] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 689.374936][ T4122] Call Trace: [ 689.374964][ T4122] [ 689.374970][ T4122] dump_stack_lvl+0x100/0x190 [ 689.375007][ T4122] should_fail_ex.cold+0x5/0xa [ 689.375036][ T4122] should_failslab+0xc2/0x120 [ 689.375057][ T4122] kmem_cache_alloc_noprof+0x91/0x6a0 [ 689.375077][ T4122] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 689.375101][ T4122] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 689.375119][ T4122] mmu_topup_memory_caches+0x25/0x170 [ 689.375142][ T4122] kvm_mmu_load+0xe2/0x2570 [ 689.375158][ T4122] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 689.375175][ T4122] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 689.375189][ T4122] ? __pfx_kvm_mmu_load+0x10/0x10 [ 689.375204][ T4122] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 689.375218][ T4122] ? kvm_check_and_inject_events+0x873/0x12a0 [ 689.375235][ T4122] ? record_steal_time+0x3a0/0xbb0 [ 689.375250][ T4122] vcpu_run+0x3aaa/0x5de0 [ 689.375271][ T4122] ? trace_event_raw_event_kvm_fpu+0x146/0x200 [ 689.375287][ T4122] ? __pfx_vcpu_run+0x10/0x10 [ 689.375308][ T4122] ? rcu_is_watching+0x12/0xc0 [ 689.375334][ T4122] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 689.375352][ T4122] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 689.375373][ T4122] kvm_vcpu_ioctl+0x730/0x1700 [ 689.375387][ T4122] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 689.375401][ T4122] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 689.375422][ T4122] ? do_vfs_ioctl+0x226/0x13e0 [ 689.375442][ T4122] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 689.375459][ T4122] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 689.375484][ T4122] ? __fget_files+0x215/0x3d0 [ 689.375495][ T4122] ? hook_file_ioctl_common+0x140/0x440 [ 689.375512][ T4122] ? selinux_file_ioctl+0x13b/0x290 [ 689.375530][ T4122] ? selinux_file_ioctl+0xb6/0x290 [ 689.375548][ T4122] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 689.375562][ T4122] __x64_sys_ioctl+0x18e/0x210 [ 689.375580][ T4122] do_syscall_64+0x115/0x870 [ 689.375599][ T4122] ? clear_bhb_loop+0x40/0x90 [ 689.375630][ T4122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.375644][ T4122] RIP: 0033:0x7f60db99e019 [ 689.375655][ T4122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 689.375666][ T4122] RSP: 002b:00007f60d9bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 689.375681][ T4122] RAX: ffffffffffffffda RBX: 00007f60dbc25fa0 RCX: 00007f60db99e019 [ 689.375688][ T4122] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 689.375695][ T4122] RBP: 00007f60d9bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 689.375702][ T4122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 689.375708][ T4122] R13: 00007f60dbc26038 R14: 00007f60dbc25fa0 R15: 00007fff74683d58 [ 689.375723][ T4122] [ 689.880573][ T4130] FAULT_INJECTION: forcing a failure. [ 689.880573][ T4130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 689.891630][ T4130] CPU: 2 UID: 0 PID: 4130 Comm: syz.2.11632 Tainted: G L syzkaller #0 PREEMPT(full) [ 689.891651][ T4130] Tainted: [L]=SOFTLOCKUP [ 689.891655][ T4130] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 689.891662][ T4130] Call Trace: [ 689.891667][ T4130] [ 689.891672][ T4130] dump_stack_lvl+0x100/0x190 [ 689.891690][ T4130] should_fail_ex.cold+0x5/0xa [ 689.891706][ T4130] _copy_to_user+0x32/0xd0 [ 689.891723][ T4130] pagemap_read+0x51b/0x830 [ 689.891744][ T4130] ? __pfx_pagemap_read+0x10/0x10 [ 689.891764][ T4130] ? rw_verify_area+0xce/0x6d0 [ 689.891788][ T4130] ? __pfx_pagemap_read+0x10/0x10 [ 689.891806][ T4130] vfs_read+0x1e4/0xb40 [ 689.891825][ T4130] ? __pfx_vfs_read+0x10/0x10 [ 689.891842][ T4130] ? find_held_lock+0x2b/0x80 [ 689.891857][ T4130] ? __fget_files+0x215/0x3d0 [ 689.891869][ T4130] ? __fget_files+0x215/0x3d0 [ 689.891883][ T4130] ? __fget_files+0x21f/0x3d0 [ 689.891898][ T4130] __x64_sys_pread64+0x1eb/0x250 [ 689.891909][ T4130] ? __pfx___x64_sys_pread64+0x10/0x10 [ 689.891920][ T4130] ? trace_syscall_enter+0xd9/0x110 [ 689.891940][ T4130] do_syscall_64+0x115/0x870 [ 689.891953][ T4130] ? clear_bhb_loop+0x40/0x90 [ 689.891968][ T4130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.891980][ T4130] RIP: 0033:0x7f60db99e019 [ 689.891990][ T4130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 689.892001][ T4130] RSP: 002b:00007f60d9bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 689.892013][ T4130] RAX: ffffffffffffffda RBX: 00007f60dbc25fa0 RCX: 00007f60db99e019 [ 689.892020][ T4130] RDX: 0000000000019000 RSI: 0000200000000200 RDI: 0000000000000003 [ 689.892027][ T4130] RBP: 00007f60d9bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 689.892034][ T4130] R10: 0000001000000000 R11: 0000000000000246 R12: 0000000000000002 [ 689.892041][ T4130] R13: 00007f60dbc26038 R14: 00007f60dbc25fa0 R15: 00007fff74683d58 [ 689.892055][ T4130] [ 690.385224][ T3972] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 690.402767][ T3972] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 690.415436][ T3972] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 690.418455][ T3972] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 690.423665][ T3972] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 690.497388][ T4142] syzkaller0: entered promiscuous mode [ 690.500565][ T4142] syzkaller0: entered allmulticast mode [ 690.504333][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.511044][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.681555][ T4147] netlink: 'syz.2.11638': attribute type 1 has an invalid length. [ 690.728972][ T4147] bond2: entered promiscuous mode [ 690.733603][ T4147] 8021q: adding VLAN 0 to HW filter on device bond2 [ 690.752823][ T4150] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 690.770688][ T4150] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 690.774538][ T4150] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 690.791258][ T4150] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 691.016273][ T4139] lo speed is unknown, defaulting to 1000 [ 691.323529][ T4178] openvswitch: netlink: Flow key attribute not present in set flow. [ 691.358037][ T4178] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11646'. [ 691.494687][ T4139] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.503695][ T4139] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.509700][ T4139] bridge_slave_0: entered allmulticast mode [ 691.519877][ T4139] bridge_slave_0: entered promiscuous mode [ 691.583898][ T4139] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.588873][ T4139] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.593773][ T4139] bridge_slave_1: entered allmulticast mode [ 691.609744][ T4139] bridge_slave_1: entered promiscuous mode [ 691.663775][ T4139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 691.687848][ T4139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 691.713012][ T4186] could not allocate digest TFM handle cmac-aes-ce [ 691.729817][T23009] wlan1: Creating new IBSS network, BSSID 42:e4:e0:20:15:f7 [ 691.739629][ T4139] team0: Port device team_slave_0 added [ 691.742625][ T4192] CIFS mount error: No usable UNC path provided in device string! [ 691.742625][ T4192] [ 691.744157][ T4139] team0: Port device team_slave_1 added [ 691.754116][ T4192] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 691.786752][ T4139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 691.792184][ T4139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 691.803204][ T4139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 691.814701][ T4139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 691.819133][ T4139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 691.839006][ T4139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 691.904264][ T4139] hsr_slave_0: entered promiscuous mode [ 691.907526][ T4139] hsr_slave_1: entered promiscuous mode [ 691.910382][ T4139] debugfs: 'hsr0' already exists in 'hsr' [ 691.912382][ T4139] Cannot create hsr debugfs directory [ 692.450398][ T3972] Bluetooth: hci4: command tx timeout [ 692.755528][ T4221] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4221 comm=syz.2.11652 [ 692.782481][ T4221] netlink: 56 bytes leftover after parsing attributes in process `syz.2.11652'. [ 693.022926][ T4231] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11654'. [ 693.260988][ T4139] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 693.272881][ T4139] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 693.279363][ T4139] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 693.291009][ T4139] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 693.293891][ T4139] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 693.303743][ T4139] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 693.312216][ T4139] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 693.319623][ T4139] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 693.330717][ T42] kauditd_printk_skb: 189 callbacks suppressed [ 693.330728][ T42] audit: type=1400 audit(1785458193.817:3965): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 693.348541][ T41] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 693.352682][ T42] audit: type=1400 audit(1785458193.817:3966): avc: denied { sendto } for pid=15 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 693.371987][ T42] audit: type=1400 audit(1785458193.827:3967): avc: denied { write } for pid=4240 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 693.392142][ T42] audit: type=1400 audit(1785458193.827:3968): avc: denied { remove_name } for pid=4240 comm="rm" name="resolv.conf.eth7.ipv4ll" dev="tmpfs" ino=35461 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 693.420788][ T42] audit: type=1400 audit(1785458193.847:3969): avc: denied { ioctl } for pid=4238 comm="syz.3.11656" path="socket:[217217]" dev="sockfs" ino=217217 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 693.501660][ T4139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 693.511179][ T41] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 693.514786][ T41] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 693.520455][ T4251] syzkaller0: entered promiscuous mode [ 693.522620][ T41] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 693.527456][ T42] audit: type=1400 audit(1785458194.007:3970): avc: denied { write } for pid=4248 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 693.532990][ T4251] syzkaller0: entered allmulticast mode [ 693.536530][ T41] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 693.544413][ T41] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.554609][ T41] usb 7-1: config 0 descriptor?? [ 693.577168][ T4139] 8021q: adding VLAN 0 to HW filter on device team0 [ 693.618124][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.620414][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 693.639025][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.641274][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 693.704342][ T42] audit: type=1400 audit(1785458194.187:3971): avc: denied { write } for pid=4253 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 693.761486][ T4256] FAULT_INJECTION: forcing a failure. [ 693.761486][ T4256] name failslab, interval 1, probability 0, space 0, times 0 [ 693.765299][ T42] audit: type=1400 audit(1785458194.237:3972): avc: denied { module_request } for pid=4139 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 693.785990][ T4256] CPU: 0 UID: 0 PID: 4256 Comm: syz.3.11658 Tainted: G L syzkaller #0 PREEMPT(full) [ 693.786009][ T4256] Tainted: [L]=SOFTLOCKUP [ 693.786013][ T4256] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 693.786021][ T4256] Call Trace: [ 693.786034][ T4256] [ 693.786039][ T4256] dump_stack_lvl+0x100/0x190 [ 693.786083][ T4256] should_fail_ex.cold+0x5/0xa [ 693.786114][ T4256] should_failslab+0xc2/0x120 [ 693.786136][ T4256] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 693.786157][ T4256] ? register_pidns_sysctls+0x48/0x1c0 [ 693.786182][ T4256] kmemdup_noprof+0x29/0x60 [ 693.786201][ T4256] register_pidns_sysctls+0x48/0x1c0 [ 693.786213][ T4256] ? __ns_common_init+0x299/0x4b0 [ 693.786231][ T4256] copy_pid_ns+0x680/0x10a0 [ 693.786255][ T4256] ? __pfx_copy_pid_ns+0x10/0x10 [ 693.786270][ T4256] ? rcu_is_watching+0x12/0xc0 [ 693.786294][ T4256] ? __pfx_copy_mnt_ns+0x10/0x10 [ 693.786312][ T4256] ? kmem_cache_alloc_noprof+0x2d7/0x6a0 [ 693.786326][ T4256] ? create_new_namespaces+0x30/0xac0 [ 693.786344][ T4256] create_new_namespaces+0x2aa/0xac0 [ 693.786363][ T4256] copy_namespaces+0x468/0x5e0 [ 693.786380][ T4256] copy_process+0x385f/0x8030 [ 693.786406][ T4256] ? __pfx_copy_process+0x10/0x10 [ 693.786425][ T4256] ? _copy_from_user+0x59/0xd0 [ 693.786443][ T4256] kernel_clone+0x176/0x9d0 [ 693.786460][ T4256] ? __pfx_kernel_clone+0x10/0x10 [ 693.786483][ T4256] __do_sys_clone3+0x214/0x290 [ 693.786499][ T4256] ? __pfx___do_sys_clone3+0x10/0x10 [ 693.786521][ T4256] ? trace_buffer_unlock_commit_regs+0x375/0x540 [ 693.786550][ T4256] do_syscall_64+0x115/0x870 [ 693.786570][ T4256] ? clear_bhb_loop+0x40/0x90 [ 693.786585][ T4256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.786597][ T4256] RIP: 0033:0x7f3568f9e019 [ 693.786608][ T4256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 693.786619][ T4256] RSP: 002b:00007f3569e73ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 693.786631][ T4256] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f3568f9e019 [ 693.786639][ T4256] RDX: 00007f3569e73f10 RSI: 0000000000000058 RDI: 00007f3569e73f10 [ 693.786645][ T4256] RBP: 00007f3569e74090 R08: 0000000000000000 R09: 0000000000000058 [ 693.786652][ T4256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 693.786658][ T4256] R13: 00007f3569226038 R14: 00007f3569225fa0 R15: 00007fff8ee0bb58 [ 693.786672][ T4256] [ 693.878440][ T42] audit: type=1400 audit(1785458194.277:3973): avc: denied { sys_module } for pid=4139 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 693.934910][ T42] audit: type=1400 audit(1785458194.417:3974): avc: denied { recv } for pid=5681 comm="sshd-session" saddr=10.0.2.2 src=36016 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 693.985901][ T41] usbhid 7-1:0.0: can't add hid device: -71 [ 693.992348][ T41] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 694.008870][ T41] usb 7-1: USB disconnect, device number 45 [ 694.343904][ T4139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 694.528885][ T3972] Bluetooth: hci4: command tx timeout [ 694.707815][ T4139] veth0_vlan: entered promiscuous mode [ 694.743493][ T4139] veth1_vlan: entered promiscuous mode [ 694.786293][ T4139] veth0_macvtap: entered promiscuous mode [ 694.796768][ T4139] veth1_macvtap: entered promiscuous mode [ 694.830492][ T4139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 694.840896][ T4139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 694.973164][ T5816] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.000125][ T5816] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.117910][T23008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.122254][T23008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.231854][T26775] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.242748][T26775] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.263069][ T5816] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.273768][ T5816] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.495488][ T3972] Bluetooth: hci2: unexpected event for opcode 0x0c38 [ 695.699836][ T4324] netlink: 'syz.5.11635': attribute type 1 has an invalid length. [ 695.992469][ T4344] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 696.181691][ T4353] FAULT_INJECTION: forcing a failure. [ 696.181691][ T4353] name failslab, interval 1, probability 0, space 0, times 0 [ 696.195531][ T4350] syzkaller0: entered promiscuous mode [ 696.203823][ T4353] CPU: 0 UID: 0 PID: 4353 Comm: syz.3.11675 Tainted: G L syzkaller #0 PREEMPT(full) [ 696.203843][ T4353] Tainted: [L]=SOFTLOCKUP [ 696.203847][ T4353] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 696.203854][ T4353] Call Trace: [ 696.203858][ T4353] [ 696.203863][ T4353] dump_stack_lvl+0x100/0x190 [ 696.203887][ T4353] should_fail_ex.cold+0x5/0xa [ 696.203903][ T4353] should_failslab+0xc2/0x120 [ 696.203919][ T4353] __kmalloc_noprof+0xfc/0x820 [ 696.203934][ T4353] ? __register_sysctl_table+0xac/0x1650 [ 696.203951][ T4353] __register_sysctl_table+0xac/0x1650 [ 696.203966][ T4353] ? __kasan_kmalloc+0xaa/0xb0 [ 696.203981][ T4353] ? __pfx___register_sysctl_table+0x10/0x10 [ 696.203995][ T4353] ? register_pidns_sysctls+0x48/0x1c0 [ 696.204010][ T4353] ? __asan_memcpy+0x3c/0x60 [ 696.204023][ T4353] register_pidns_sysctls+0x11d/0x1c0 [ 696.204035][ T4353] ? __ns_common_init+0x299/0x4b0 [ 696.204054][ T4353] copy_pid_ns+0x680/0x10a0 [ 696.204071][ T4353] ? __pfx_copy_pid_ns+0x10/0x10 [ 696.204087][ T4353] ? rcu_is_watching+0x12/0xc0 [ 696.204105][ T4353] ? __pfx_copy_mnt_ns+0x10/0x10 [ 696.204121][ T4353] ? kmem_cache_alloc_noprof+0x2d7/0x6a0 [ 696.204135][ T4353] ? create_new_namespaces+0x30/0xac0 [ 696.204153][ T4353] create_new_namespaces+0x2aa/0xac0 [ 696.204173][ T4353] copy_namespaces+0x468/0x5e0 [ 696.204189][ T4353] copy_process+0x385f/0x8030 [ 696.204214][ T4353] ? __pfx_copy_process+0x10/0x10 [ 696.204233][ T4353] ? _copy_from_user+0x59/0xd0 [ 696.204251][ T4353] kernel_clone+0x176/0x9d0 [ 696.204268][ T4353] ? __pfx_kernel_clone+0x10/0x10 [ 696.204291][ T4353] __do_sys_clone3+0x214/0x290 [ 696.204308][ T4353] ? __pfx___do_sys_clone3+0x10/0x10 [ 696.204329][ T4353] ? trace_buffer_unlock_commit_regs+0x375/0x540 [ 696.204358][ T4353] do_syscall_64+0x115/0x870 [ 696.204371][ T4353] ? clear_bhb_loop+0x40/0x90 [ 696.204388][ T4353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.204400][ T4353] RIP: 0033:0x7f3568f9e019 [ 696.204411][ T4353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 696.204422][ T4353] RSP: 002b:00007f3569e73ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 696.204434][ T4353] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f3568f9e019 [ 696.204441][ T4353] RDX: 00007f3569e73f10 RSI: 0000000000000058 RDI: 00007f3569e73f10 [ 696.204448][ T4353] RBP: 00007f3569e74090 R08: 0000000000000000 R09: 0000000000000058 [ 696.204455][ T4353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 696.204461][ T4353] R13: 00007f3569226038 R14: 00007f3569225fa0 R15: 00007fff8ee0bb58 [ 696.204476][ T4353] [ 696.207270][ T4350] syzkaller0: entered allmulticast mode [ 696.320024][ T4355] tipc: Started in network mode [ 696.321658][ T4355] tipc: Node identity ba9428f97b42, cluster identity 4711 [ 696.327339][ T4355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.331829][ T4355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.339407][ T4355] tipc: Enabled bearer , priority 0 [ 696.357437][ T4349] tipc: Resetting bearer [ 696.424081][ T4349] tipc: Disabling bearer [ 696.610200][ T3972] Bluetooth: hci4: command tx timeout [ 696.683475][ T4368] FAULT_INJECTION: forcing a failure. [ 696.683475][ T4368] name failslab, interval 1, probability 0, space 0, times 0 [ 696.691895][ T4368] CPU: 2 UID: 0 PID: 4368 Comm: syz.5.11680 Tainted: G L syzkaller #0 PREEMPT(full) [ 696.691923][ T4368] Tainted: [L]=SOFTLOCKUP [ 696.691929][ T4368] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 696.691940][ T4368] Call Trace: [ 696.691947][ T4368] [ 696.691952][ T4368] dump_stack_lvl+0x100/0x190 [ 696.691980][ T4368] should_fail_ex.cold+0x5/0xa [ 696.691999][ T4368] ? __skb_get_hash_net+0x153/0x560 [ 696.692036][ T4368] should_failslab+0xc2/0x120 [ 696.692058][ T4368] kmem_cache_alloc_noprof+0x91/0x6a0 [ 696.692078][ T4368] ? lock_acquire+0x1b9/0x370 [ 696.692107][ T4368] ? skb_clone+0x190/0x400 [ 696.692127][ T4368] skb_clone+0x190/0x400 [ 696.692151][ T4368] dev_queue_xmit_nit+0x255/0xa60 [ 696.692173][ T4368] ? __pfx_match_fanout_group+0x10/0x10 [ 696.692212][ T4368] dev_hard_start_xmit+0x2f5/0x760 [ 696.692243][ T4368] __dev_queue_xmit+0x1bbf/0x4970 [ 696.692267][ T4368] ? look_up_lock_class+0x64/0x120 [ 696.692286][ T4368] ? __lock_acquire+0x49f/0x1a40 [ 696.692303][ T4368] ? __pfx___dev_queue_xmit+0x10/0x10 [ 696.692317][ T4368] ? register_lock_class+0x40/0x560 [ 696.692344][ T4368] ? __lock_acquire+0x49f/0x1a40 [ 696.692367][ T4368] ? __asan_memcpy+0x3c/0x60 [ 696.692393][ T4368] ip_finish_output2+0xf4a/0x2400 [ 696.692422][ T4368] ? do_csum+0x1a3/0x380 [ 696.692442][ T4368] ? __pfx_ip_finish_output2+0x10/0x10 [ 696.692460][ T4368] ? ip_fraglist_prepare+0x497/0x660 [ 696.692479][ T4368] ip_do_fragment+0x15d1/0x1c10 [ 696.692497][ T4368] ? __pfx_ip_finish_output2+0x10/0x10 [ 696.692525][ T4368] ? __pfx_ip_do_fragment+0x10/0x10 [ 696.692543][ T4368] ? ip_dst_mtu_maybe_forward+0x413/0x960 [ 696.692560][ T4368] ? ip_dst_mtu_maybe_forward+0x413/0x960 [ 696.692578][ T4368] ? ip_dst_mtu_maybe_forward+0x41d/0x960 [ 696.692600][ T4368] ip_fragment.constprop.0+0x161/0x230 [ 696.692621][ T4368] __ip_finish_output.part.0+0x3f8/0x6f0 [ 696.692642][ T4368] ip_output+0x39b/0xc10 [ 696.692657][ T4368] ? __pfx_ip_output+0x10/0x10 [ 696.692677][ T4368] ? __pfx_ip_finish_output+0x10/0x10 [ 696.692695][ T4368] ? rcu_is_watching+0x12/0xc0 [ 696.692720][ T4368] ? __ip_make_skb+0x10a9/0x1f90 [ 696.692737][ T4368] ? kfree+0x1e5/0x6c0 [ 696.692758][ T4368] ? __pfx_ip_output+0x10/0x10 [ 696.692777][ T4368] ip_send_skb+0x232/0x2a0 [ 696.692798][ T4368] udp_send_skb+0xa58/0xfe0 [ 696.692856][ T4368] udp_sendmsg+0x12b1/0x2720 [ 696.692875][ T4368] ? avc_has_perm_noaudit+0x145/0x3b0 [ 696.692899][ T4368] ? __pfx_udp_sendmsg+0x10/0x10 [ 696.692915][ T4368] ? __pfx_avc_has_perm+0x10/0x10 [ 696.692933][ T4368] ? __lock_acquire+0x49f/0x1a40 [ 696.692949][ T4368] ? __pfx_sock_has_perm+0x10/0x10 [ 696.692973][ T4368] ? __pfx_udp_sendmsg+0x10/0x10 [ 696.692985][ T4368] inet_sendmsg+0x105/0x140 [ 696.693000][ T4368] __sys_sendto+0x453/0x4e0 [ 696.693013][ T4368] ? __pfx_inet_sendmsg+0x10/0x10 [ 696.693028][ T4368] ? __pfx___sys_sendto+0x10/0x10 [ 696.693044][ T4368] ? trace_buffer_unlock_commit_regs+0x375/0x540 [ 696.693067][ T4368] ? find_held_lock+0x2b/0x80 [ 696.693077][ T4368] ? trace_syscall_enter+0xd9/0x110 [ 696.693094][ T4368] ? trace_syscall_enter+0xd9/0x110 [ 696.693113][ T4368] __x64_sys_sendto+0xe0/0x1c0 [ 696.693125][ T4368] ? trace_syscall_enter+0xe3/0x110 [ 696.693141][ T4368] do_syscall_64+0x115/0x870 [ 696.693154][ T4368] ? clear_bhb_loop+0x40/0x90 [ 696.693168][ T4368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.693181][ T4368] RIP: 0033:0x7f1d05d9e019 [ 696.693192][ T4368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 696.693204][ T4368] RSP: 002b:00007f1d06d18028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 696.693215][ T4368] RAX: ffffffffffffffda RBX: 00007f1d06026090 RCX: 00007f1d05d9e019 [ 696.693223][ T4368] RDX: 0000000000006200 RSI: 0000200000000c80 RDI: 0000000000000005 [ 696.693230][ T4368] RBP: 00007f1d06d18090 R08: 0000000000000000 R09: 0000000000000000 [ 696.693236][ T4368] R10: 0000000088050000 R11: 0000000000000246 R12: 0000000000000002 [ 696.693243][ T4368] R13: 00007f1d06026128 R14: 00007f1d06026090 R15: 00007ffc356ffb78 [ 696.693257][ T4368] [ 697.116065][ T4376] program syz.2.11683 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 697.151240][ T4379] FAULT_INJECTION: forcing a failure. [ 697.151240][ T4379] name failslab, interval 1, probability 0, space 0, times 0 [ 697.155335][ T4379] CPU: 2 UID: 0 PID: 4379 Comm: syz.5.11685 Tainted: G L syzkaller #0 PREEMPT(full) [ 697.155354][ T4379] Tainted: [L]=SOFTLOCKUP [ 697.155358][ T4379] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 697.155365][ T4379] Call Trace: [ 697.155371][ T4379] [ 697.155376][ T4379] dump_stack_lvl+0x100/0x190 [ 697.155395][ T4379] should_fail_ex.cold+0x5/0xa [ 697.155411][ T4379] should_failslab+0xc2/0x120 [ 697.155427][ T4379] kmem_cache_alloc_noprof+0x91/0x6a0 [ 697.155442][ T4379] ? skb_clone+0x190/0x400 [ 697.155460][ T4379] skb_clone+0x190/0x400 [ 697.155474][ T4379] bpf_clone_redirect+0x166/0x500 [ 697.155502][ T4379] bpf_prog_1939c40fbf65037b+0x5f/0x68 [ 697.155512][ T4379] ? unwind_get_return_address+0x59/0xa0 [ 697.155531][ T4379] ? arch_stack_walk+0xa6/0xf0 [ 697.155556][ T4379] ? __lock_acquire+0x49f/0x1a40 [ 697.155572][ T4379] ? __lock_acquire+0x49f/0x1a40 [ 697.155605][ T4379] ? stack_trace_save+0x8e/0xc0 [ 697.155620][ T4379] ? find_held_lock+0x2b/0x80 [ 697.155630][ T4379] ? bpf_test_timer_enter+0xf7/0x2b0 [ 697.155655][ T4379] ? ktime_get+0x22c/0x320 [ 697.155674][ T4379] ? lockdep_hardirqs_on+0x78/0x100 [ 697.155688][ T4379] ? __pfx___cant_migrate+0x10/0x10 [ 697.155708][ T4379] ? bpf_test_timer_continue+0x17b/0x5d0 [ 697.155724][ T4379] ? lockdep_hardirqs_on+0x78/0x100 [ 697.155738][ T4379] bpf_test_run+0x39c/0xa40 [ 697.155755][ T4379] ? bpf_test_run+0x1c6/0xa40 [ 697.155773][ T4379] ? __pfx_bpf_test_run+0x10/0x10 [ 697.155799][ T4379] ? eth_type_trans+0x2e3/0x720 [ 697.155825][ T4379] bpf_prog_test_run_skb+0x15c4/0x3540 [ 697.155857][ T4379] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 697.155877][ T4379] ? fput+0x79/0x100 [ 697.155897][ T4379] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 697.155915][ T4379] __sys_bpf+0x2a12/0x4e80 [ 697.155932][ T4379] ? __pfx_check_buffer+0x10/0x10 [ 697.155954][ T4379] ? __pfx___sys_bpf+0x10/0x10 [ 697.155965][ T4379] ? __rb_reserve_next.constprop.0+0x6f6/0x1640 [ 697.155989][ T4379] ? ring_buffer_lock_reserve+0x48b/0x11c0 [ 697.156011][ T4379] ? rb_commit+0x129/0x9d0 [ 697.156037][ T4379] ? trace_event_buffer_commit+0x20a/0xa80 [ 697.156058][ T4379] ? __x64_sys_bpf+0xce/0x140 [ 697.156069][ T4379] __x64_sys_bpf+0xce/0x140 [ 697.156080][ T4379] ? rcu_is_watching+0x12/0xc0 [ 697.156100][ T4379] do_syscall_64+0x115/0x870 [ 697.156113][ T4379] ? clear_bhb_loop+0x40/0x90 [ 697.156127][ T4379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.156140][ T4379] RIP: 0033:0x7f1d05d9e019 [ 697.156150][ T4379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 697.156161][ T4379] RSP: 002b:00007f1d06d39028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 697.156172][ T4379] RAX: ffffffffffffffda RBX: 00007f1d06025fa0 RCX: 00007f1d05d9e019 [ 697.156179][ T4379] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 000000000000000a [ 697.156186][ T4379] RBP: 00007f1d06d39090 R08: 0000000000000000 R09: 0000000000000000 [ 697.156193][ T4379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 697.156200][ T4379] R13: 00007f1d06026038 R14: 00007f1d06025fa0 R15: 00007ffc356ffb78 [ 697.156214][ T4379] [ 697.590068][ T4396] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv0, syncid = 0, id = 0 [ 697.979530][ T3972] Bluetooth: hci2: command 0x0401 tx timeout [ 698.089286][ T4407] syzkaller0: entered promiscuous mode [ 698.091035][ T4407] syzkaller0: entered allmulticast mode [ 698.097389][ T4407] tipc: Started in network mode [ 698.100949][ T4407] tipc: Node identity ea8424b7d507, cluster identity 4711 [ 698.108961][ T4407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.115246][ T4407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.123720][ T4407] tipc: Enabled bearer , priority 0 [ 698.133181][ T4405] tipc: Resetting bearer [ 698.174015][ T4405] tipc: Disabling bearer [ 698.391632][ T42] kauditd_printk_skb: 327 callbacks suppressed [ 698.391680][ T42] audit: type=1400 audit(1785458198.877:4300): avc: denied { read } for pid=4417 comm="syz.2.11700" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 698.411828][ T42] audit: type=1400 audit(1785458198.897:4301): avc: denied { open } for pid=4417 comm="syz.2.11700" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 698.426772][ T42] audit: type=1400 audit(1785458198.897:4302): avc: denied { ioctl } for pid=4417 comm="syz.2.11700" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 698.461394][ T42] audit: type=1400 audit(1785458198.947:4303): avc: denied { egress } for pid=23 comm="ksoftirqd/2" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 698.480861][ T42] audit: type=1400 audit(1785458198.947:4304): avc: denied { sendto } for pid=23 comm="ksoftirqd/2" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 698.568877][ T42] audit: type=1400 audit(1785458199.057:4305): avc: denied { recv } for pid=32523 comm="syz-executor" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=46888 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 698.595386][ T42] audit: type=1400 audit(1785458199.077:4306): avc: denied { create } for pid=4422 comm="syz.2.11701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 698.611487][ T42] audit: type=1400 audit(1785458199.097:4307): avc: denied { write } for pid=4422 comm="syz.2.11701" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 698.623848][ T42] audit: type=1400 audit(1785458199.107:4308): avc: denied { write } for pid=4424 comm="syz.5.11702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 698.634318][ T4425] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 698.646951][ T42] audit: type=1400 audit(1785458199.117:4309): avc: denied { read write } for pid=4424 comm="syz.5.11702" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 698.663717][ T4427] FAULT_INJECTION: forcing a failure. [ 698.663717][ T4427] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 698.673896][ T4427] CPU: 2 UID: 0 PID: 4427 Comm: syz.2.11703 Tainted: G L syzkaller #0 PREEMPT(full) [ 698.673920][ T4427] Tainted: [L]=SOFTLOCKUP [ 698.673924][ T4427] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 698.673931][ T4427] Call Trace: [ 698.673943][ T4427] [ 698.673949][ T4427] dump_stack_lvl+0x100/0x190 [ 698.673979][ T4427] should_fail_ex.cold+0x5/0xa [ 698.674000][ T4427] ? prepare_alloc_pages+0x16d/0x5f0 [ 698.674026][ T4427] should_fail_alloc_page+0xeb/0x140 [ 698.674053][ T4427] prepare_alloc_pages+0x1f0/0x5f0 [ 698.674073][ T4427] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 698.674090][ T4427] ? __pfx_debug_object_activate+0x10/0x10 [ 698.674114][ T4427] ? __lock_acquire+0x49f/0x1a40 [ 698.674138][ T4427] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 698.674153][ T4427] ? do_raw_spin_lock+0x128/0x260 [ 698.674175][ T4427] ? __lock_acquire+0x49f/0x1a40 [ 698.674191][ T4427] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 698.674211][ T4427] ? debug_object_assert_init+0x1c4/0x310 [ 698.674229][ T4427] ? rcu_is_watching+0x12/0xc0 [ 698.674254][ T4427] ? trace_hrtimer_start+0x77/0x220 [ 698.674286][ T4427] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 698.674316][ T4427] ? policy_nodemask+0xed/0x4f0 [ 698.674343][ T4427] alloc_pages_mpol+0x1fb/0x540 [ 698.674363][ T4427] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 698.674384][ T4427] folio_alloc_mpol_noprof+0x36/0x260 [ 698.674404][ T4427] shmem_alloc_folio+0x135/0x160 [ 698.674431][ T4427] shmem_alloc_and_add_folio+0x371/0xd40 [ 698.674448][ T4427] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 698.674462][ T4427] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 698.674478][ T4427] shmem_get_folio_gfp+0x6ad/0x1910 [ 698.674494][ T4427] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 698.674507][ T4427] ? ktime_get_coarse_real_ts64_mg+0x235/0x300 [ 698.674524][ T4427] ? lockdep_hardirqs_on+0x78/0x100 [ 698.674541][ T4427] shmem_fault+0x1f9/0xa20 [ 698.674553][ T4427] ? __lock_acquire+0x49f/0x1a40 [ 698.674568][ T4427] ? __pfx_shmem_fault+0x10/0x10 [ 698.674579][ T4427] ? rcu_is_watching+0x12/0xc0 [ 698.674604][ T4427] ? __pfx_filemap_map_pages+0x10/0x10 [ 698.674630][ T4427] __do_fault+0x10b/0x440 [ 698.674644][ T4427] ? find_held_lock+0x2b/0x80 [ 698.674656][ T4427] do_fault+0x2db/0x1750 [ 698.674675][ T4427] __handle_mm_fault+0x187d/0x2a00 [ 698.674697][ T4427] ? mt_find+0x45e/0x8e0 [ 698.674719][ T4427] ? __pfx___handle_mm_fault+0x10/0x10 [ 698.674738][ T4427] ? __pfx_mt_find+0x10/0x10 [ 698.674762][ T4427] ? find_vma+0xbf/0x140 [ 698.674776][ T4427] ? __pfx_find_vma+0x10/0x10 [ 698.674792][ T4427] handle_mm_fault+0x37b/0xa30 [ 698.674815][ T4427] do_user_addr_fault+0x74c/0x12f0 [ 698.674845][ T4427] exc_page_fault+0x6f/0xd0 [ 698.674859][ T4427] asm_exc_page_fault+0x26/0x30 [ 698.674871][ T4427] RIP: 0010:_copy_to_user+0x9f/0xd0 [ 698.674889][ T4427] Code: 89 ee 48 89 ef e8 91 22 ec fc 4d 85 ff 75 26 e8 a7 28 ec fc 89 de 4c 89 e7 e8 4d b6 5c fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 e6 a4 0f 1f 00 0f 01 ca 48 89 cb e8 81 28 ec fc 48 89 d8 5b 5d 41 [ 698.674901][ T4427] RSP: 0018:ffffc900063cfbe8 EFLAGS: 00050246 [ 698.674916][ T4427] RAX: 0000000000000001 RBX: 0000000000001000 RCX: 0000000000000200 [ 698.674923][ T4427] RDX: 0000000000000001 RSI: ffff888035bfee00 RDI: 0000200000016000 [ 698.674930][ T4427] RBP: 0000200000015200 R08: 0000000000000000 R09: ffffed1006b7fdff [ 698.674938][ T4427] R10: ffff888035bfefff R11: 0000000000000000 R12: ffff888035bfe000 [ 698.674945][ T4427] R13: 0000200000016200 R14: 00007ffffffff000 R15: 0000000000000000 [ 698.674960][ T4427] ? _copy_to_user+0x93/0xd0 [ 698.674977][ T4427] pagemap_read+0x51b/0x830 [ 698.674999][ T4427] ? __pfx_pagemap_read+0x10/0x10 [ 698.675020][ T4427] ? rw_verify_area+0xce/0x6d0 [ 698.675042][ T4427] ? __pfx_pagemap_read+0x10/0x10 [ 698.675061][ T4427] vfs_read+0x1e4/0xb40 [ 698.675082][ T4427] ? __pfx_vfs_read+0x10/0x10 [ 698.675099][ T4427] ? find_held_lock+0x2b/0x80 [ 698.675110][ T4427] ? __fget_files+0x215/0x3d0 [ 698.675122][ T4427] ? __fget_files+0x215/0x3d0 [ 698.675136][ T4427] ? __fget_files+0x21f/0x3d0 [ 698.675153][ T4427] __x64_sys_pread64+0x1eb/0x250 [ 698.675165][ T4427] ? __pfx___x64_sys_pread64+0x10/0x10 [ 698.675176][ T4427] ? trace_syscall_enter+0xd9/0x110 [ 698.675197][ T4427] do_syscall_64+0x115/0x870 [ 698.675211][ T4427] ? clear_bhb_loop+0x40/0x90 [ 698.675226][ T4427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.675239][ T4427] RIP: 0033:0x7f60db99e019 [ 698.675250][ T4427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 698.675261][ T4427] RSP: 002b:00007f60d9bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 698.675272][ T4427] RAX: ffffffffffffffda RBX: 00007f60dbc25fa0 RCX: 00007f60db99e019 [ 698.675296][ T4427] RDX: 0000000000019000 RSI: 0000200000000200 RDI: 0000000000000003 [ 698.675304][ T4427] RBP: 00007f60d9bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 698.675312][ T4427] R10: 0000001000000000 R11: 0000000000000246 R12: 0000000000000002 [ 698.675319][ T4427] R13: 00007f60dbc26038 R14: 00007f60dbc25fa0 R15: 00007fff74683d58 [ 698.675335][ T4427] [ 698.691097][ T64] Bluetooth: hci4: command tx timeout [ 698.999205][ T4435] erspan0: entered promiscuous mode [ 699.017301][ T4435] erspan0: left promiscuous mode [ 699.156235][ T4441] IPv6: NLM_F_CREATE should be specified when creating new route [ 699.231473][ T4443] netlink: 'syz.2.11709': attribute type 1 has an invalid length. [ 699.277917][ T4443] bond3: entered promiscuous mode [ 699.284719][ T4443] 8021q: adding VLAN 0 to HW filter on device bond3 [ 699.323383][ T4443] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 699.335423][ T4443] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 699.351659][ T4443] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 699.363979][ T4443] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 699.559025][ T4457] comedi comedi3: no devices specified [ 699.592828][ T64] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 699.596438][ T64] CPU: 0 UID: 0 PID: 64 Comm: kworker/u34:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 699.596458][ T64] Tainted: [L]=SOFTLOCKUP [ 699.596464][ T64] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 699.596474][ T64] Workqueue: hci1 hci_rx_work [ 699.596509][ T64] Call Trace: [ 699.596522][ T64] [ 699.596528][ T64] dump_stack_lvl+0x100/0x190 [ 699.596575][ T64] sysfs_warn_dup.cold+0x1c/0x28 [ 699.596601][ T64] sysfs_create_dir_ns+0x24b/0x2b0 [ 699.596632][ T64] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 699.596655][ T64] ? find_held_lock+0x2b/0x80 [ 699.596672][ T64] ? kobject_add_internal+0x25f/0x930 [ 699.596700][ T64] ? kobject_add_internal+0x25f/0x930 [ 699.596726][ T64] ? do_raw_spin_unlock+0x145/0x1e0 [ 699.596750][ T64] kobject_add_internal+0x2c8/0x930 [ 699.596788][ T64] kobject_add+0x16a/0x1e0 [ 699.596815][ T64] ? __pfx_kobject_add+0x10/0x10 [ 699.596833][ T64] ? class_to_subsys+0x10f/0x150 [ 699.596859][ T64] ? kobject_put+0xb9/0x640 [ 699.596874][ T64] ? _raw_spin_unlock+0x28/0x50 [ 699.596902][ T64] device_add+0x294/0x1970 [ 699.596921][ T64] ? __pfx_dev_set_name+0x10/0x10 [ 699.596945][ T64] ? __pfx_device_add+0x10/0x10 [ 699.596967][ T64] ? mgmt_send_event_skb+0x2fb/0x460 [ 699.596986][ T64] hci_conn_add_sysfs+0x1a3/0x260 [ 699.597010][ T64] le_conn_complete_evt+0x11eb/0x1f60 [ 699.597028][ T64] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 699.597045][ T64] ? hci_event_packet+0x186/0xcd0 [ 699.597061][ T64] hci_le_conn_complete_evt+0x23c/0x3a0 [ 699.597078][ T64] ? skb_pull_data+0x15f/0x1e0 [ 699.597102][ T64] hci_le_meta_evt+0x34a/0x5f0 [ 699.597122][ T64] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 699.597137][ T64] hci_event_packet+0x51c/0xcd0 [ 699.597156][ T64] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 699.597171][ T64] ? __pfx_hci_event_packet+0x10/0x10 [ 699.597190][ T64] ? kcov_remote_start+0x384/0x670 [ 699.597210][ T64] ? lockdep_hardirqs_on+0x78/0x100 [ 699.597234][ T64] hci_rx_work+0x451/0xfc0 [ 699.597249][ T64] process_one_work+0xa23/0x1940 [ 699.597277][ T64] ? __pfx_process_one_work+0x10/0x10 [ 699.597295][ T64] ? __pfx_hci_rx_work+0x10/0x10 [ 699.597314][ T64] worker_thread+0x5ef/0xe50 [ 699.597336][ T64] ? kthread+0x13a/0x450 [ 699.597355][ T64] ? __pfx_worker_thread+0x10/0x10 [ 699.597367][ T64] kthread+0x370/0x450 [ 699.597378][ T64] ? __pfx_kthread+0x10/0x10 [ 699.597395][ T64] ret_from_fork+0x72b/0xd50 [ 699.597419][ T64] ? __pfx_ret_from_fork+0x10/0x10 [ 699.597441][ T64] ? __switch_to+0x800/0x10f0 [ 699.597453][ T64] ? __pfx_kthread+0x10/0x10 [ 699.597472][ T64] ret_from_fork_asm+0x1a/0x30 [ 699.597501][ T64] [ 699.597584][ T64] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 699.694536][ T64] Bluetooth: hci1: failed to register connection device [ 700.293837][ T4487] FAULT_INJECTION: forcing a failure. [ 700.293837][ T4487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 700.298082][ T4487] CPU: 2 UID: 0 PID: 4487 Comm: syz.5.11724 Tainted: G L syzkaller #0 PREEMPT(full) [ 700.298100][ T4487] Tainted: [L]=SOFTLOCKUP [ 700.298104][ T4487] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 700.298111][ T4487] Call Trace: [ 700.298115][ T4487] [ 700.298120][ T4487] dump_stack_lvl+0x100/0x190 [ 700.298139][ T4487] should_fail_ex.cold+0x5/0xa [ 700.298167][ T4487] _copy_to_user+0x32/0xd0 [ 700.298197][ T4487] pagemap_read+0x51b/0x830 [ 700.298218][ T4487] ? __pfx_pagemap_read+0x10/0x10 [ 700.298238][ T4487] ? rw_verify_area+0xce/0x6d0 [ 700.298262][ T4487] ? __pfx_pagemap_read+0x10/0x10 [ 700.298279][ T4487] vfs_read+0x1e4/0xb40 [ 700.298311][ T4487] ? __pfx_vfs_read+0x10/0x10 [ 700.298328][ T4487] ? find_held_lock+0x2b/0x80 [ 700.298339][ T4487] ? __fget_files+0x215/0x3d0 [ 700.298351][ T4487] ? __fget_files+0x215/0x3d0 [ 700.298364][ T4487] ? __fget_files+0x21f/0x3d0 [ 700.298379][ T4487] __x64_sys_pread64+0x1eb/0x250 [ 700.298391][ T4487] ? __pfx___x64_sys_pread64+0x10/0x10 [ 700.298401][ T4487] ? trace_syscall_enter+0xd9/0x110 [ 700.298428][ T4487] do_syscall_64+0x115/0x870 [ 700.298441][ T4487] ? clear_bhb_loop+0x40/0x90 [ 700.298456][ T4487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.298467][ T4487] RIP: 0033:0x7f1d05d9e019 [ 700.298477][ T4487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 700.298489][ T4487] RSP: 002b:00007f1d06d39028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 700.298501][ T4487] RAX: ffffffffffffffda RBX: 00007f1d06025fa0 RCX: 00007f1d05d9e019 [ 700.298508][ T4487] RDX: 0000000000019000 RSI: 0000200000000200 RDI: 0000000000000003 [ 700.298515][ T4487] RBP: 00007f1d06d39090 R08: 0000000000000000 R09: 0000000000000000 [ 700.298522][ T4487] R10: 0000001000000000 R11: 0000000000000246 R12: 0000000000000002 [ 700.298529][ T4487] R13: 00007f1d06026038 R14: 00007f1d06025fa0 R15: 00007ffc356ffb78 [ 700.298544][ T4487] [ 700.472046][ T4491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11725'. [ 700.477949][ T4495] IPv6: Can't replace route, no match found [ 700.493698][ T4491] syzkaller0: entered promiscuous mode [ 700.500718][ T4491] syzkaller0: entered allmulticast mode [ 700.572262][ T4497] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4497 comm=syz.5.11728 [ 700.671222][ T4501] 9p: Bad value for 'msize' [ 700.756765][ T4504] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 701.486797][ T4516] overlayfs: upper fs does not support tmpfile. [ 701.690152][ T4527] netlink: 'syz.5.11740': attribute type 12 has an invalid length. [ 701.991292][ T4541] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11745'. [ 702.008997][ T4542] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2579 sclass=netlink_route_socket pid=4542 comm=syz.5.11745 [ 702.080433][ T4548] syzkaller0: entered promiscuous mode [ 702.084745][ T4548] syzkaller0: entered allmulticast mode [ 702.092771][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.099076][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.106400][ T4548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.112581][ T4548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.117682][ T4548] tipc: Enabled bearer , priority 0 [ 702.122526][ T4547] tipc: Resetting bearer [ 702.145321][ T4547] tipc: Disabling bearer [ 702.542581][ T4563] loop2: detected capacity change from 0 to 3 [ 702.559242][ T4563] ldm_validate_privheads(): Disk read failed. [ 702.563106][ T4563] Dev loop2: unable to read RDB block 3 [ 702.569397][ T4563] loop2: unable to read partition table [ 702.579015][ T4563] loop2: partition table beyond EOD, truncated [ 702.581526][ T4563] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 703.072778][ T64] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 703.092029][ T64] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 703.095918][ T64] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 703.106863][ T64] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 703.109614][ T64] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 703.273140][ T4577] FAULT_INJECTION: forcing a failure. [ 703.273140][ T4577] name failslab, interval 1, probability 0, space 0, times 0 [ 703.304931][ T4577] CPU: 2 UID: 0 PID: 4577 Comm: syz.5.11758 Tainted: G L syzkaller #0 PREEMPT(full) [ 703.304951][ T4577] Tainted: [L]=SOFTLOCKUP [ 703.304955][ T4577] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 703.304962][ T4577] Call Trace: [ 703.304967][ T4577] [ 703.304973][ T4577] dump_stack_lvl+0x100/0x190 [ 703.304993][ T4577] should_fail_ex.cold+0x5/0xa [ 703.305009][ T4577] should_failslab+0xc2/0x120 [ 703.305037][ T4577] kmem_cache_alloc_noprof+0x91/0x6a0 [ 703.305057][ T4577] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 703.305081][ T4577] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 703.305100][ T4577] mmu_topup_memory_caches+0x25/0x170 [ 703.305123][ T4577] kvm_mmu_load+0xe2/0x2570 [ 703.305139][ T4577] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 703.305156][ T4577] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 703.305170][ T4577] ? __pfx_kvm_mmu_load+0x10/0x10 [ 703.305186][ T4577] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 703.305200][ T4577] ? kvm_check_and_inject_events+0x873/0x12a0 [ 703.305218][ T4577] ? record_steal_time+0x3a0/0xbb0 [ 703.305232][ T4577] vcpu_run+0x3aaa/0x5de0 [ 703.305256][ T4577] ? trace_event_raw_event_kvm_fpu+0x146/0x200 [ 703.305272][ T4577] ? __pfx_vcpu_run+0x10/0x10 [ 703.305294][ T4577] ? rcu_is_watching+0x12/0xc0 [ 703.305314][ T4577] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 703.305331][ T4577] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 703.305353][ T4577] kvm_vcpu_ioctl+0x730/0x1700 [ 703.305367][ T4577] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 703.305380][ T4577] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 703.305395][ T4577] ? do_vfs_ioctl+0x226/0x13e0 [ 703.305413][ T4577] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 703.305430][ T4577] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 703.305468][ T4577] ? __fget_files+0x215/0x3d0 [ 703.305479][ T4577] ? hook_file_ioctl_common+0x140/0x440 [ 703.305496][ T4577] ? selinux_file_ioctl+0x13b/0x290 [ 703.305513][ T4577] ? selinux_file_ioctl+0xb6/0x290 [ 703.305532][ T4577] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 703.305545][ T4577] __x64_sys_ioctl+0x18e/0x210 [ 703.305563][ T4577] do_syscall_64+0x115/0x870 [ 703.305576][ T4577] ? clear_bhb_loop+0x40/0x90 [ 703.305591][ T4577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.305603][ T4577] RIP: 0033:0x7f1d05d9e019 [ 703.305614][ T4577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 703.305625][ T4577] RSP: 002b:00007f1d06d39028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 703.305637][ T4577] RAX: ffffffffffffffda RBX: 00007f1d06025fa0 RCX: 00007f1d05d9e019 [ 703.305644][ T4577] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 703.305651][ T4577] RBP: 00007f1d06d39090 R08: 0000000000000000 R09: 0000000000000000 [ 703.305657][ T4577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 703.305664][ T4577] R13: 00007f1d06026038 R14: 00007f1d06025fa0 R15: 00007ffc356ffb78 [ 703.305678][ T4577] [ 703.557414][ T42] kauditd_printk_skb: 201 callbacks suppressed [ 703.557428][ T42] audit: type=1400 audit(1785458204.037:4511): avc: denied { node_bind } for pid=4586 comm="syz.2.11759" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 703.600483][ T42] audit: type=1400 audit(1785458204.047:4512): avc: denied { recv } for pid=42 comm="kauditd" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=46888 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 703.625516][ T42] audit: type=1400 audit(1785458204.067:4513): avc: denied { module_request } for pid=4574 comm="syz-executor" kmod="netdev-rose7" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 703.663912][ T42] audit: type=1400 audit(1785458204.107:4514): avc: denied { read write } for pid=4139 comm="syz-executor" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 703.684488][ T1232] syz_tun (unregistering): left allmulticast mode [ 703.686900][ T1232] syz_tun (unregistering): left promiscuous mode [ 703.691998][ T1232] bridge0: port 3(syz_tun) entered disabled state [ 703.695882][ T42] audit: type=1400 audit(1785458204.107:4515): avc: denied { open } for pid=4139 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 703.712467][ T42] audit: type=1400 audit(1785458204.107:4516): avc: denied { ioctl } for pid=4139 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 703.745611][ T42] audit: type=1400 audit(1785458204.167:4517): avc: denied { read } for pid=4589 comm="syz.2.11761" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 703.771846][ T4574] lo speed is unknown, defaulting to 1000 [ 703.776352][ T42] audit: type=1400 audit(1785458204.167:4518): avc: denied { open } for pid=4589 comm="syz.2.11761" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 703.784917][ T42] audit: type=1400 audit(1785458204.167:4519): avc: denied { ioctl } for pid=4589 comm="syz.2.11761" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 703.818831][ T42] audit: type=1400 audit(1785458204.167:4520): avc: denied { mounton } for pid=4589 comm="syz.2.11761" path="/113/sys" dev="tmpfs" ino=607 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 704.061228][ T5818] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 704.066218][ T5818] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.266142][ T5818] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 704.269597][ T5818] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.418182][ T4621] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4621 comm=syz.2.11767 [ 704.571717][ T5818] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 704.584501][ T5818] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.754615][ T4629] 9p: Bad value for 'msize' [ 704.813090][ T5818] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 704.816327][ T5818] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.991528][ T4574] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.001194][ T4574] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.003752][ T4574] bridge_slave_0: entered allmulticast mode [ 705.006648][ T4574] bridge_slave_0: entered promiscuous mode [ 705.015817][ T4574] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.031997][ T4574] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.034540][ T4574] bridge_slave_1: entered allmulticast mode [ 705.037749][ T4574] bridge_slave_1: entered promiscuous mode [ 705.142280][ T4574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 705.169824][ T3972] Bluetooth: hci3: command tx timeout [ 705.174782][ T4574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 705.216248][ T4651] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 705.221513][ T4652] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 705.257674][ T4574] team0: Port device team_slave_0 added [ 705.328075][ T4574] team0: Port device team_slave_1 added [ 705.362877][ T4655] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 705.368841][ T4651] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=4651 comm=syz.5.11778 [ 705.427837][ T4574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 705.431931][ T4574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 705.451204][ T4574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 705.457462][ T4574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 705.460469][ T4574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 705.469686][ T4574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 705.584269][ T5818] bridge_slave_1: left allmulticast mode [ 705.590688][ T5818] bridge_slave_1: left promiscuous mode [ 705.602438][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.627327][ T5818] bridge_slave_0: left allmulticast mode [ 705.633499][ T5818] bridge_slave_0: left promiscuous mode [ 705.641540][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.696191][ T5818] lo: left allmulticast mode [ 705.791175][ T4670] FAULT_INJECTION: forcing a failure. [ 705.791175][ T4670] name failslab, interval 1, probability 0, space 0, times 0 [ 705.825594][ T4670] CPU: 2 UID: 0 PID: 4670 Comm: syz.3.11785 Tainted: G L syzkaller #0 PREEMPT(full) [ 705.825615][ T4670] Tainted: [L]=SOFTLOCKUP [ 705.825620][ T4670] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 705.825627][ T4670] Call Trace: [ 705.825631][ T4670] [ 705.825637][ T4670] dump_stack_lvl+0x100/0x190 [ 705.825656][ T4670] should_fail_ex.cold+0x5/0xa [ 705.825672][ T4670] should_failslab+0xc2/0x120 [ 705.825688][ T4670] kmem_cache_alloc_noprof+0x91/0x6a0 [ 705.825702][ T4670] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 705.825720][ T4670] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 705.825738][ T4670] mmu_topup_memory_caches+0x25/0x170 [ 705.825756][ T4670] kvm_mmu_load+0xe2/0x2570 [ 705.825776][ T4670] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 705.825788][ T4670] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 705.825802][ T4670] ? __pfx_kvm_mmu_load+0x10/0x10 [ 705.825817][ T4670] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 705.825831][ T4670] ? kvm_check_and_inject_events+0x873/0x12a0 [ 705.825847][ T4670] ? record_steal_time+0x3a0/0xbb0 [ 705.825861][ T4670] vcpu_run+0x3aaa/0x5de0 [ 705.825882][ T4670] ? trace_event_raw_event_kvm_fpu+0x146/0x200 [ 705.825898][ T4670] ? __pfx_vcpu_run+0x10/0x10 [ 705.825919][ T4670] ? rcu_is_watching+0x12/0xc0 [ 705.825939][ T4670] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 705.825956][ T4670] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 705.825977][ T4670] kvm_vcpu_ioctl+0x730/0x1700 [ 705.825991][ T4670] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 705.826007][ T4670] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 705.826029][ T4670] ? do_vfs_ioctl+0x226/0x13e0 [ 705.826055][ T4670] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 705.826082][ T4670] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 705.826119][ T4670] ? __fget_files+0x215/0x3d0 [ 705.826133][ T4670] ? hook_file_ioctl_common+0x140/0x440 [ 705.826150][ T4670] ? selinux_file_ioctl+0x13b/0x290 [ 705.826167][ T4670] ? selinux_file_ioctl+0xb6/0x290 [ 705.826185][ T4670] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 705.826199][ T4670] __x64_sys_ioctl+0x18e/0x210 [ 705.826217][ T4670] do_syscall_64+0x115/0x870 [ 705.826230][ T4670] ? clear_bhb_loop+0x40/0x90 [ 705.826245][ T4670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.826257][ T4670] RIP: 0033:0x7f3568f9e019 [ 705.826269][ T4670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 705.826281][ T4670] RSP: 002b:00007f3569e74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 705.826292][ T4670] RAX: ffffffffffffffda RBX: 00007f3569225fa0 RCX: 00007f3568f9e019 [ 705.826300][ T4670] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 705.826306][ T4670] RBP: 00007f3569e74090 R08: 0000000000000000 R09: 0000000000000000 [ 705.826313][ T4670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 705.826319][ T4670] R13: 00007f3569226038 R14: 00007f3569225fa0 R15: 00007fff8ee0bb58 [ 705.826334][ T4670] [ 706.228018][ T5818] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 706.234947][ T5818] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 706.238966][ T5818] bond0 (unregistering): Released all slaves [ 706.244192][ T5818] bond1 (unregistering): Released all slaves [ 706.255473][ T4574] hsr_slave_0: entered promiscuous mode [ 706.258009][ T4574] hsr_slave_1: entered promiscuous mode [ 706.268094][ T4574] debugfs: 'hsr0' already exists in 'hsr' [ 706.272366][ T4574] Cannot create hsr debugfs directory [ 706.282393][ T5449] 8021q: adding VLAN 0 to HW filter on device eth5 [ 706.388150][ T5818] tipc: Left network mode [ 706.751410][ T4704] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11793'. [ 706.908512][ T4704] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4704 comm=syz.2.11793 [ 706.922729][ T5449] 8021q: adding VLAN 0 to HW filter on device eth6 [ 706.952001][ T5818] hsr_slave_0: left promiscuous mode [ 706.956351][ T4712] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11795'. [ 706.961316][ T5818] hsr_slave_1: left promiscuous mode [ 706.963587][ T5818] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 706.966115][ T5818] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 706.973013][ T5818] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 707.000016][ T5818] veth1_macvtap: left promiscuous mode [ 707.002718][ T5818] veth0_macvtap: left promiscuous mode [ 707.011328][ T5818] veth1_vlan: left promiscuous mode [ 707.013210][ T5818] veth0_vlan: left promiscuous mode [ 707.248622][ T3972] Bluetooth: hci3: command tx timeout [ 707.248696][ T4726] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4726 comm=syz.3.11795 [ 707.256476][ T4726] netlink: 52 bytes leftover after parsing attributes in process `syz.3.11795'. [ 707.425546][ T4710] syzkaller1: entered promiscuous mode [ 707.427486][ T4710] syzkaller1: entered allmulticast mode [ 707.524764][ T4574] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.531506][ T4574] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 707.957988][ T4574] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.974573][ T4737] FAULT_INJECTION: forcing a failure. [ 707.974573][ T4737] name failslab, interval 1, probability 0, space 0, times 0 [ 707.980178][ T4574] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 707.987886][ T4744] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11801'. [ 707.989643][ T4737] CPU: 0 UID: 0 PID: 4737 Comm: syz.2.11799 Tainted: G L syzkaller #0 PREEMPT(full) [ 707.989662][ T4737] Tainted: [L]=SOFTLOCKUP [ 707.989666][ T4737] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 707.989673][ T4737] Call Trace: [ 707.989678][ T4737] [ 707.989682][ T4737] dump_stack_lvl+0x100/0x190 [ 707.989701][ T4737] should_fail_ex.cold+0x5/0xa [ 707.989717][ T4737] should_failslab+0xc2/0x120 [ 707.989733][ T4737] kmem_cache_alloc_noprof+0x91/0x6a0 [ 707.989762][ T4737] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 707.989781][ T4737] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 707.989798][ T4737] mmu_topup_memory_caches+0x25/0x170 [ 707.989822][ T4737] kvm_mmu_load+0xe2/0x2570 [ 707.989838][ T4737] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 707.989850][ T4737] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 707.989864][ T4737] ? __pfx_kvm_mmu_load+0x10/0x10 [ 707.989879][ T4737] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 707.989893][ T4737] ? kvm_check_and_inject_events+0x873/0x12a0 [ 707.989910][ T4737] ? record_steal_time+0x3a0/0xbb0 [ 707.989924][ T4737] vcpu_run+0x3aaa/0x5de0 [ 707.989945][ T4737] ? trace_event_raw_event_kvm_fpu+0x146/0x200 [ 707.989962][ T4737] ? __pfx_vcpu_run+0x10/0x10 [ 707.989983][ T4737] ? rcu_is_watching+0x12/0xc0 [ 707.990004][ T4737] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 707.990021][ T4737] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 707.990042][ T4737] kvm_vcpu_ioctl+0x730/0x1700 [ 707.990056][ T4737] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 707.990070][ T4737] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 707.990085][ T4737] ? do_vfs_ioctl+0x226/0x13e0 [ 707.990102][ T4737] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 707.990119][ T4737] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 707.990143][ T4737] ? __fget_files+0x215/0x3d0 [ 707.990154][ T4737] ? hook_file_ioctl_common+0x140/0x440 [ 707.990171][ T4737] ? selinux_file_ioctl+0x13b/0x290 [ 707.990188][ T4737] ? selinux_file_ioctl+0xb6/0x290 [ 707.990207][ T4737] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 707.990221][ T4737] __x64_sys_ioctl+0x18e/0x210 [ 707.990239][ T4737] do_syscall_64+0x115/0x870 [ 707.990252][ T4737] ? clear_bhb_loop+0x40/0x90 [ 707.990266][ T4737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.990278][ T4737] RIP: 0033:0x7f60db99e019 [ 707.990289][ T4737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 707.990301][ T4737] RSP: 002b:00007f60d9bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 707.990312][ T4737] RAX: ffffffffffffffda RBX: 00007f60dbc25fa0 RCX: 00007f60db99e019 [ 707.990320][ T4737] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 707.990327][ T4737] RBP: 00007f60d9bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 707.990333][ T4737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 707.990340][ T4737] R13: 00007f60dbc26038 R14: 00007f60dbc25fa0 R15: 00007fff74683d58 [ 707.990354][ T4737] [ 708.057863][ T9] page_pool_release_retry() stalled pool shutdown: id 164, 1 inflight 60 sec [ 708.117447][ T4744] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11801'. [ 708.125191][ T4744] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22) [ 708.253877][ T4574] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.260269][ T4574] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 708.401949][ T4574] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.421212][ T4574] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 708.576640][ T42] kauditd_printk_skb: 258 callbacks suppressed [ 708.576653][ T42] audit: type=1400 audit(1785458209.057:4777): avc: denied { search } for pid=4760 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 708.608226][ T42] audit: type=1400 audit(1785458209.077:4778): avc: denied { create } for pid=4762 comm="syz.3.11806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 708.632354][ T42] audit: type=1400 audit(1785458209.077:4779): avc: denied { bind } for pid=4762 comm="syz.3.11806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 708.646633][ T42] audit: type=1400 audit(1785458209.077:4780): avc: denied { setopt } for pid=4762 comm="syz.3.11806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 708.672638][ T42] audit: type=1400 audit(1785458209.087:4781): avc: denied { search } for pid=4760 comm="rm" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 708.685816][ T42] audit: type=1400 audit(1785458209.087:4782): avc: denied { search } for pid=4760 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 708.712743][ T42] audit: type=1400 audit(1785458209.087:4783): avc: denied { accept } for pid=4762 comm="syz.3.11806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 708.729475][ T42] audit: type=1400 audit(1785458209.087:4784): avc: denied { write } for pid=4760 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 708.749453][ T42] audit: type=1400 audit(1785458209.087:4785): avc: denied { remove_name } for pid=4760 comm="rm" name="resolv.conf.eth7.link" dev="tmpfs" ino=35972 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 708.757981][ T42] audit: type=1400 audit(1785458209.087:4786): avc: denied { write } for pid=4762 comm="syz.3.11806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 708.762308][ T4766] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4766 comm=syz.5.11807 [ 708.874833][ T5449] 8021q: adding VLAN 0 to HW filter on device eth7 [ 708.917867][ T4574] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 708.926573][ T4574] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 708.933392][ T4574] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 708.937367][ T4574] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 708.943340][ T4574] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 708.951512][ T4772] SELinux: policydb version -1680938763 does not match my version range 15-35 [ 708.956615][ T4772] SELinux: failed to load policy [ 708.962659][ T4574] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 708.967557][ T4574] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 708.978215][ T4574] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 709.142554][ T4574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 709.166474][ T4574] 8021q: adding VLAN 0 to HW filter on device team0 [ 709.192767][T23008] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.194856][T23008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 709.213583][T23008] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.215622][T23008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 709.331348][ T3972] Bluetooth: hci3: command tx timeout [ 709.397455][ T4794] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 709.420716][ T4794] pci 0000:00:1d.0: BAR 4 [io 0xc0e0-0xc0ff] [ 709.443147][ T5449] 8021q: adding VLAN 0 to HW filter on device eth8 [ 709.469745][ T4794] pci 0000:00:1d.0: Adding to iommu group 7 [ 709.560637][ T4794] pci 0000:00:1d.7: [8086:293a] type 00 class 0x0c0320 conventional PCI endpoint [ 709.582985][ T4794] pci 0000:00:1d.7: BAR 0 [mem 0xfeaf7000-0xfeaf7fff] [ 709.628039][ T4794] pci 0000:00:1d.7: Adding to iommu group 7 [ 709.654797][ T4794] pci 0000:00:1d.7: BAR 0 [mem 0x80801000-0x80801fff]: assigned [ 709.662555][ T4794] pci 0000:00:1d.0: BAR 4 [io 0x2000-0x201f]: assigned [ 709.907286][ T4794] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 224028 usecs [ 710.046258][ T4574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 710.073446][ T4828] FAULT_INJECTION: forcing a failure. [ 710.073446][ T4828] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 710.077475][ T4828] CPU: 2 UID: 0 PID: 4828 Comm: syz.5.11821 Tainted: G L syzkaller #0 PREEMPT(full) [ 710.077493][ T4828] Tainted: [L]=SOFTLOCKUP [ 710.077497][ T4828] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 710.077504][ T4828] Call Trace: [ 710.077509][ T4828] [ 710.077514][ T4828] dump_stack_lvl+0x100/0x190 [ 710.077533][ T4828] should_fail_ex.cold+0x5/0xa [ 710.077548][ T4828] _copy_to_user+0x32/0xd0 [ 710.077565][ T4828] simple_read_from_buffer+0xcb/0x170 [ 710.077579][ T4828] proc_fail_nth_read+0x1af/0x230 [ 710.077597][ T4828] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 710.077615][ T4828] ? rw_verify_area+0xce/0x6d0 [ 710.077631][ T4828] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 710.077649][ T4828] vfs_read+0x1e4/0xb40 [ 710.077673][ T4828] ? __pfx_vfs_read+0x10/0x10 [ 710.077690][ T4828] ? __fget_files+0x215/0x3d0 [ 710.077705][ T4828] ? __fget_files+0x21f/0x3d0 [ 710.077720][ T4828] ksys_read+0x12a/0x250 [ 710.077738][ T4828] ? __pfx_ksys_read+0x10/0x10 [ 710.077755][ T4828] ? trace_syscall_enter+0xd9/0x110 [ 710.077775][ T4828] do_syscall_64+0x115/0x870 [ 710.077789][ T4828] ? clear_bhb_loop+0x40/0x90 [ 710.077804][ T4828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.077816][ T4828] RIP: 0033:0x7f1d05d5e84e [ 710.077826][ T4828] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 710.077837][ T4828] RSP: 002b:00007f1d06d38fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 710.077849][ T4828] RAX: ffffffffffffffda RBX: 00007f1d06d396c0 RCX: 00007f1d05d5e84e [ 710.077856][ T4828] RDX: 000000000000000f RSI: 00007f1d06d390a0 RDI: 0000000000000004 [ 710.077863][ T4828] RBP: 00007f1d06d39090 R08: 0000000000000000 R09: 0000000000000000 [ 710.077869][ T4828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 710.077876][ T4828] R13: 00007f1d06026038 R14: 00007f1d06025fa0 R15: 00007ffc356ffb78 [ 710.077890][ T4828] [ 710.100922][ T4794] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 710.246735][ T4836] FAULT_INJECTION: forcing a failure. [ 710.246735][ T4836] name failslab, interval 1, probability 0, space 0, times 0 [ 710.250744][ T4836] CPU: 2 UID: 0 PID: 4836 Comm: syz.2.11822 Tainted: G L syzkaller #0 PREEMPT(full) [ 710.250762][ T4836] Tainted: [L]=SOFTLOCKUP [ 710.250766][ T4836] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 710.250773][ T4836] Call Trace: [ 710.250778][ T4836] [ 710.250783][ T4836] dump_stack_lvl+0x100/0x190 [ 710.250801][ T4836] should_fail_ex.cold+0x5/0xa [ 710.250815][ T4836] ? __skb_get_hash_net+0x153/0x560 [ 710.250835][ T4836] should_failslab+0xc2/0x120 [ 710.250852][ T4836] kmem_cache_alloc_noprof+0x91/0x6a0 [ 710.250866][ T4836] ? lock_acquire+0x1b9/0x370 [ 710.250880][ T4836] ? skb_clone+0x190/0x400 [ 710.250897][ T4836] skb_clone+0x190/0x400 [ 710.250911][ T4836] dev_queue_xmit_nit+0x255/0xa60 [ 710.250926][ T4836] ? __pfx_match_fanout_group+0x10/0x10 [ 710.250956][ T4836] dev_hard_start_xmit+0x2f5/0x760 [ 710.250978][ T4836] __dev_queue_xmit+0x1bbf/0x4970 [ 710.250993][ T4836] ? look_up_lock_class+0x64/0x120 [ 710.251007][ T4836] ? __lock_acquire+0x49f/0x1a40 [ 710.251020][ T4836] ? __pfx___dev_queue_xmit+0x10/0x10 [ 710.251031][ T4836] ? register_lock_class+0x40/0x560 [ 710.251049][ T4836] ? __lock_acquire+0x49f/0x1a40 [ 710.251064][ T4836] ? __asan_memcpy+0x3c/0x60 [ 710.251079][ T4836] ? find_held_lock+0x2b/0x80 [ 710.251094][ T4836] ip_finish_output2+0xf4a/0x2400 [ 710.251114][ T4836] ? do_csum+0x1a3/0x380 [ 710.251127][ T4836] ? __pfx_ip_finish_output2+0x10/0x10 [ 710.251139][ T4836] ? ip_fraglist_prepare+0x497/0x660 [ 710.251154][ T4836] ip_do_fragment+0x15d1/0x1c10 [ 710.251167][ T4836] ? __pfx_ip_finish_output2+0x10/0x10 [ 710.251185][ T4836] ? __pfx_ip_do_fragment+0x10/0x10 [ 710.251197][ T4836] ? ip_dst_mtu_maybe_forward+0x413/0x960 [ 710.251209][ T4836] ? ip_dst_mtu_maybe_forward+0x413/0x960 [ 710.251224][ T4836] ? ip_dst_mtu_maybe_forward+0x41d/0x960 [ 710.251238][ T4836] ip_fragment.constprop.0+0x161/0x230 [ 710.251252][ T4836] __ip_finish_output.part.0+0x3f8/0x6f0 [ 710.251267][ T4836] ip_output+0x39b/0xc10 [ 710.251279][ T4836] ? __pfx_ip_output+0x10/0x10 [ 710.251293][ T4836] ? __pfx_ip_finish_output+0x10/0x10 [ 710.251305][ T4836] ? rcu_is_watching+0x12/0xc0 [ 710.251323][ T4836] ? __ip_make_skb+0x10a9/0x1f90 [ 710.251334][ T4836] ? kfree+0x1e5/0x6c0 [ 710.251352][ T4836] ? __pfx_ip_output+0x10/0x10 [ 710.251365][ T4836] ip_send_skb+0x232/0x2a0 [ 710.251378][ T4836] udp_send_skb+0xa58/0xfe0 [ 710.251406][ T4836] udp_sendmsg+0x12b1/0x2720 [ 710.251418][ T4836] ? avc_has_perm_noaudit+0x145/0x3b0 [ 710.251433][ T4836] ? __pfx_udp_sendmsg+0x10/0x10 [ 710.251445][ T4836] ? __pfx_avc_has_perm+0x10/0x10 [ 710.251461][ T4836] ? __lock_acquire+0x49f/0x1a40 [ 710.251477][ T4836] ? __pfx_sock_has_perm+0x10/0x10 [ 710.251501][ T4836] ? __pfx_udp_sendmsg+0x10/0x10 [ 710.251514][ T4836] inet_sendmsg+0x105/0x140 [ 710.251549][ T4836] __sys_sendto+0x453/0x4e0 [ 710.251561][ T4836] ? __pfx_inet_sendmsg+0x10/0x10 [ 710.251576][ T4836] ? __pfx___sys_sendto+0x10/0x10 [ 710.251592][ T4836] ? trace_buffer_unlock_commit_regs+0x375/0x540 [ 710.251616][ T4836] ? find_held_lock+0x2b/0x80 [ 710.251625][ T4836] ? trace_syscall_enter+0xd9/0x110 [ 710.251642][ T4836] ? trace_syscall_enter+0xd9/0x110 [ 710.251659][ T4836] __x64_sys_sendto+0xe0/0x1c0 [ 710.251676][ T4836] ? trace_syscall_enter+0xe3/0x110 [ 710.251691][ T4836] do_syscall_64+0x115/0x870 [ 710.251704][ T4836] ? clear_bhb_loop+0x40/0x90 [ 710.251718][ T4836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.251731][ T4836] RIP: 0033:0x7f60db99e019 [ 710.251742][ T4836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 710.251753][ T4836] RSP: 002b:00007f60d9bd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 710.251764][ T4836] RAX: ffffffffffffffda RBX: 00007f60dbc26090 RCX: 00007f60db99e019 [ 710.251771][ T4836] RDX: 0000000000006200 RSI: 0000200000000c80 RDI: 0000000000000005 [ 710.251778][ T4836] RBP: 00007f60d9bd5090 R08: 0000000000000000 R09: 0000000000000000 [ 710.251785][ T4836] R10: 0000000088050000 R11: 0000000000000246 R12: 0000000000000002 [ 710.251792][ T4836] R13: 00007f60dbc26128 R14: 00007f60dbc26090 R15: 00007fff74683d58 [ 710.251806][ T4836] [ 710.474207][ T4794] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 1 [ 710.483025][ T4794] uhci_hcd 0000:00:1d.0: detected 2 ports [ 710.497720][ T4794] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002000 [ 710.510645][ T4794] usb usb1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02 [ 710.514016][ T4794] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 710.516598][ T4794] usb usb1: Product: UHCI Host Controller [ 710.518606][ T4794] usb usb1: Manufacturer: Linux syzkaller uhci_hcd [ 710.520654][ T4794] usb usb1: SerialNumber: 0000:00:1d.0 [ 710.648190][ T4794] hub 1-0:1.0: USB hub found [ 710.655077][ T4794] hub 1-0:1.0: 2 ports detected [ 710.702291][ T4844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11825'. [ 710.704245][ T4574] veth0_vlan: entered promiscuous mode [ 710.714451][ T4574] veth1_vlan: entered promiscuous mode [ 710.732233][ T4844] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11825'. [ 710.786648][ T4574] veth0_macvtap: entered promiscuous mode [ 710.822151][ T4574] veth1_macvtap: entered promiscuous mode [ 710.830219][ T4794] pci 0000:00:1d.7: PCI INT D: failed to register GSI [ 710.832543][ T4794] pci 0000:00:1d.7: Can't enable PCI device, BIOS handoff failed. [ 710.835042][ T4794] pci 0000:00:1d.7: quirk_usb_early_handoff+0x0/0x1360 took 48826 usecs [ 710.876216][ T4574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 710.890352][ T4574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 710.951719][ T5818] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.951982][ T5818] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.985853][T26765] ehci-pci 0000:00:1d.7: PCI INT D: failed to register GSI [ 711.000047][T15923] usb 1-1: new full-speed USB device number 2 using uhci_hcd [ 711.011009][ T5818] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.011422][ T5818] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.154712][T26775] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 711.154729][T26775] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 711.168951][T15923] usb 1-1: not running at top speed; connect to a high speed hub [ 711.206062][T15923] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 711.206083][T15923] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 711.206094][T15923] usb 1-1: Product: QEMU USB Tablet [ 711.206103][T15923] usb 1-1: Manufacturer: QEMU [ 711.206111][T15923] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 711.233278][T26775] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 711.233294][T26775] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 711.296973][T15923] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb1/1-1/1-1:1.0/0003:0627:0001.0009/input/input43 [ 711.322659][ T4858] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 711.371417][T15923] hid-generic 0003:0627:0001.0009: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 711.408937][ T3972] Bluetooth: hci3: command tx timeout [ 711.703387][ T10] bridge0: entered promiscuous mode [ 711.710380][ T4874] 9p: Bad value for 'dfltgid' [ 711.711966][ T4874] 9p: Bad value for 'dfltgid' [ 711.928974][ T4886] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 712.186770][ T4886] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 712.194314][ T4886] overlayfs: failed to look up (tracing) for ino (-66) [ 712.458227][ T4916] FAULT_INJECTION: forcing a failure. [ 712.458227][ T4916] name failslab, interval 1, probability 0, space 0, times 0 [ 712.461992][ T4916] CPU: 0 UID: 0 PID: 4916 Comm: syz.3.11846 Tainted: G L syzkaller #0 PREEMPT(full) [ 712.462010][ T4916] Tainted: [L]=SOFTLOCKUP [ 712.462014][ T4916] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 712.462021][ T4916] Call Trace: [ 712.462026][ T4916] [ 712.462030][ T4916] dump_stack_lvl+0x100/0x190 [ 712.462049][ T4916] should_fail_ex.cold+0x5/0xa [ 712.462062][ T4916] ? __skb_get_hash_net+0x153/0x560 [ 712.462081][ T4916] should_failslab+0xc2/0x120 [ 712.462097][ T4916] kmem_cache_alloc_noprof+0x91/0x6a0 [ 712.462111][ T4916] ? lock_acquire+0x1b9/0x370 [ 712.462126][ T4916] ? skb_clone+0x190/0x400 [ 712.462142][ T4916] skb_clone+0x190/0x400 [ 712.462156][ T4916] dev_queue_xmit_nit+0x255/0xa60 [ 712.462171][ T4916] ? __pfx_match_fanout_group+0x10/0x10 [ 712.462196][ T4916] dev_hard_start_xmit+0x2f5/0x760 [ 712.462218][ T4916] __dev_queue_xmit+0x1bbf/0x4970 [ 712.462232][ T4916] ? do_raw_spin_lock+0x128/0x260 [ 712.462249][ T4916] ? __pfx___dev_queue_xmit+0x10/0x10 [ 712.462261][ T4916] ? mark_held_locks+0x40/0x70 [ 712.462274][ T4916] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 712.462289][ T4916] ? __lock_acquire+0x49f/0x1a40 [ 712.462309][ T4916] ? find_held_lock+0x2b/0x80 [ 712.462324][ T4916] ip_finish_output2+0xf4a/0x2400 [ 712.462338][ T4916] ? do_csum+0x1a3/0x380 [ 712.462350][ T4916] ? __pfx_ip_finish_output2+0x10/0x10 [ 712.462363][ T4916] ? ip_fraglist_prepare+0x497/0x660 [ 712.462378][ T4916] ip_do_fragment+0x15d1/0x1c10 [ 712.462391][ T4916] ? __pfx_ip_finish_output2+0x10/0x10 [ 712.462408][ T4916] ? __pfx_ip_do_fragment+0x10/0x10 [ 712.462421][ T4916] ? ip_dst_mtu_maybe_forward+0x413/0x960 [ 712.462433][ T4916] ? ip_dst_mtu_maybe_forward+0x413/0x960 [ 712.462448][ T4916] ? ip_dst_mtu_maybe_forward+0x41d/0x960 [ 712.462462][ T4916] ip_fragment.constprop.0+0x161/0x230 [ 712.462476][ T4916] __ip_finish_output.part.0+0x3f8/0x6f0 [ 712.462491][ T4916] ip_output+0x39b/0xc10 [ 712.462503][ T4916] ? __pfx_ip_output+0x10/0x10 [ 712.462517][ T4916] ? __pfx_ip_finish_output+0x10/0x10 [ 712.462529][ T4916] ? rcu_is_watching+0x12/0xc0 [ 712.462546][ T4916] ? __ip_make_skb+0x10a9/0x1f90 [ 712.462558][ T4916] ? kfree+0x1e5/0x6c0 [ 712.462575][ T4916] ? __pfx_ip_output+0x10/0x10 [ 712.462588][ T4916] ip_send_skb+0x232/0x2a0 [ 712.462602][ T4916] udp_send_skb+0xa58/0xfe0 [ 712.462624][ T4916] udp_sendmsg+0x12b1/0x2720 [ 712.462636][ T4916] ? avc_has_perm_noaudit+0x145/0x3b0 [ 712.462651][ T4916] ? __pfx_udp_sendmsg+0x10/0x10 [ 712.462663][ T4916] ? __pfx_avc_has_perm+0x10/0x10 [ 712.462678][ T4916] ? __lock_acquire+0x49f/0x1a40 [ 712.462694][ T4916] ? __pfx_sock_has_perm+0x10/0x10 [ 712.462718][ T4916] ? __pfx_udp_sendmsg+0x10/0x10 [ 712.462730][ T4916] inet_sendmsg+0x105/0x140 [ 712.462745][ T4916] __sys_sendto+0x453/0x4e0 [ 712.462757][ T4916] ? __pfx_inet_sendmsg+0x10/0x10 [ 712.462775][ T4916] ? __pfx___sys_sendto+0x10/0x10 [ 712.462791][ T4916] ? trace_buffer_unlock_commit_regs+0x375/0x540 [ 712.462815][ T4916] ? find_held_lock+0x2b/0x80 [ 712.462824][ T4916] ? trace_syscall_enter+0xd9/0x110 [ 712.462840][ T4916] ? trace_syscall_enter+0xd9/0x110 [ 712.462857][ T4916] __x64_sys_sendto+0xe0/0x1c0 [ 712.462869][ T4916] ? trace_syscall_enter+0xe3/0x110 [ 712.462885][ T4916] do_syscall_64+0x115/0x870 [ 712.462897][ T4916] ? clear_bhb_loop+0x40/0x90 [ 712.462912][ T4916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.462924][ T4916] RIP: 0033:0x7f3568f9e019 [ 712.462934][ T4916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 712.462945][ T4916] RSP: 002b:00007f3569e53028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 712.462957][ T4916] RAX: ffffffffffffffda RBX: 00007f3569226090 RCX: 00007f3568f9e019 [ 712.462964][ T4916] RDX: 0000000000006200 RSI: 0000200000000c80 RDI: 0000000000000005 [ 712.462971][ T4916] RBP: 00007f3569e53090 R08: 0000000000000000 R09: 0000000000000000 [ 712.462977][ T4916] R10: 0000000088050000 R11: 0000000000000246 R12: 0000000000000002 [ 712.462984][ T4916] R13: 00007f3569226128 R14: 00007f3569226090 R15: 00007fff8ee0bb58 [ 712.462998][ T4916] [ 712.597199][ T4913] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20001 [ 712.611954][ T4913] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20001 [ 712.626388][ T4913] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20001 [ 712.857121][ T4927] netlink: 'syz.2.11849': attribute type 1 has an invalid length. [ 712.998998][ T4927] bond4: entered promiscuous mode [ 713.007988][ T4927] 8021q: adding VLAN 0 to HW filter on device bond4 [ 713.102643][ T4935] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 713.123459][ T4935] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 713.127743][ T4935] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 713.132516][ T4935] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 713.266389][ T4945] usb usb8: usbfs: process 4945 (syz.5.11857) did not claim interface 0 before use [ 713.269499][ T4942] netlink: 'syz.3.11854': attribute type 1 has an invalid length. [ 713.269513][ T4942] netlink: 224 bytes leftover after parsing attributes in process `syz.3.11854'. [ 713.598496][ T42] kauditd_printk_skb: 322 callbacks suppressed [ 713.598514][ T42] audit: type=1400 audit(1785458214.077:5109): avc: denied { read } for pid=5449 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 713.775401][ T42] audit: type=1400 audit(1785458214.257:5110): avc: denied { create } for pid=4960 comm="syz.2.11862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 713.827010][ T42] audit: type=1400 audit(1785458214.307:5111): avc: denied { setopt } for pid=4960 comm="syz.2.11862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 713.828963][ T4963] FAULT_INJECTION: forcing a failure. [ 713.828963][ T4963] name failslab, interval 1, probability 0, space 0, times 0 [ 713.837221][ T4963] CPU: 0 UID: 0 PID: 4963 Comm: syz.2.11862 Tainted: G L syzkaller #0 PREEMPT(full) [ 713.837240][ T4963] Tainted: [L]=SOFTLOCKUP [ 713.837244][ T4963] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 713.837251][ T4963] Call Trace: [ 713.837256][ T4963] [ 713.837260][ T4963] dump_stack_lvl+0x100/0x190 [ 713.837278][ T4963] should_fail_ex.cold+0x5/0xa [ 713.837292][ T4963] ? __skb_get_hash_net+0x153/0x560 [ 713.837312][ T4963] should_failslab+0xc2/0x120 [ 713.837328][ T4963] kmem_cache_alloc_noprof+0x91/0x6a0 [ 713.837342][ T4963] ? lock_acquire+0x1b9/0x370 [ 713.837356][ T4963] ? skb_clone+0x190/0x400 [ 713.837372][ T4963] skb_clone+0x190/0x400 [ 713.837390][ T4963] dev_queue_xmit_nit+0x255/0xa60 [ 713.837405][ T4963] ? __pfx_match_fanout_group+0x10/0x10 [ 713.837427][ T4963] dev_hard_start_xmit+0x2f5/0x760 [ 713.837448][ T4963] __dev_queue_xmit+0x1bbf/0x4970 [ 713.837461][ T4963] ? __siphash_unaligned+0x1eb/0x360 [ 713.837479][ T4963] ? __pfx___dev_queue_xmit+0x10/0x10 [ 713.837493][ T4963] ? __lock_acquire+0x49f/0x1a40 [ 713.837508][ T4963] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 713.837527][ T4963] ? find_held_lock+0x2b/0x80 [ 713.837541][ T4963] ip_finish_output2+0xf4a/0x2400 [ 713.837555][ T4963] ? do_csum+0x1a3/0x380 [ 713.837568][ T4963] ? __pfx_ip_finish_output2+0x10/0x10 [ 713.837580][ T4963] ? ip_fraglist_prepare+0x497/0x660 [ 713.837595][ T4963] ip_do_fragment+0x15d1/0x1c10 [ 713.837608][ T4963] ? __pfx_ip_finish_output2+0x10/0x10 [ 713.837625][ T4963] ? __pfx_ip_do_fragment+0x10/0x10 [ 713.837638][ T4963] ? ip_dst_mtu_maybe_forward+0x413/0x960 [ 713.837650][ T4963] ? ip_dst_mtu_maybe_forward+0x413/0x960 [ 713.837665][ T4963] ? ip_dst_mtu_maybe_forward+0x41d/0x960 [ 713.837679][ T4963] ip_fragment.constprop.0+0x161/0x230 [ 713.837693][ T4963] __ip_finish_output.part.0+0x3f8/0x6f0 [ 713.837708][ T4963] ip_output+0x39b/0xc10 [ 713.837720][ T4963] ? __pfx_ip_output+0x10/0x10 [ 713.837734][ T4963] ? __pfx_ip_finish_output+0x10/0x10 [ 713.837746][ T4963] ? rcu_is_watching+0x12/0xc0 [ 713.837764][ T4963] ? __ip_make_skb+0x10a9/0x1f90 [ 713.837776][ T4963] ? kfree+0x1e5/0x6c0 [ 713.837794][ T4963] ? __pfx_ip_output+0x10/0x10 [ 713.837806][ T4963] ip_send_skb+0x232/0x2a0 [ 713.837820][ T4963] udp_send_skb+0xa58/0xfe0 [ 713.837842][ T4963] udp_sendmsg+0x12b1/0x2720 [ 713.837854][ T4963] ? avc_has_perm_noaudit+0x145/0x3b0 [ 713.837870][ T4963] ? __pfx_udp_sendmsg+0x10/0x10 [ 713.837882][ T4963] ? __pfx_avc_has_perm+0x10/0x10 [ 713.837897][ T4963] ? __lock_acquire+0x49f/0x1a40 [ 713.837913][ T4963] ? __pfx_sock_has_perm+0x10/0x10 [ 713.837937][ T4963] ? __pfx_udp_sendmsg+0x10/0x10 [ 713.837949][ T4963] inet_sendmsg+0x105/0x140 [ 713.837964][ T4963] __sys_sendto+0x453/0x4e0 [ 713.837977][ T4963] ? __pfx_inet_sendmsg+0x10/0x10 [ 713.837992][ T4963] ? __pfx___sys_sendto+0x10/0x10 [ 713.838008][ T4963] ? trace_buffer_unlock_commit_regs+0x375/0x540 [ 713.838030][ T4963] ? find_held_lock+0x2b/0x80 [ 713.838040][ T4963] ? trace_syscall_enter+0xd9/0x110 [ 713.838056][ T4963] ? trace_syscall_enter+0xd9/0x110 [ 713.838073][ T4963] __x64_sys_sendto+0xe0/0x1c0 [ 713.838086][ T4963] ? trace_syscall_enter+0xe3/0x110 [ 713.838102][ T4963] do_syscall_64+0x115/0x870 [ 713.838115][ T4963] ? clear_bhb_loop+0x40/0x90 [ 713.838129][ T4963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.838142][ T4963] RIP: 0033:0x7f60db99e019 [ 713.838152][ T4963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 713.838164][ T4963] RSP: 002b:00007f60d9bd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 713.838175][ T4963] RAX: ffffffffffffffda RBX: 00007f60dbc26090 RCX: 00007f60db99e019 [ 713.838182][ T4963] RDX: 0000000000006200 RSI: 0000200000000c80 RDI: 0000000000000005 [ 713.838189][ T4963] RBP: 00007f60d9bd5090 R08: 0000000000000000 R09: 0000000000000000 [ 713.838196][ T4963] R10: 0000000088050000 R11: 0000000000000246 R12: 0000000000000002 [ 713.838203][ T4963] R13: 00007f60dbc26128 R14: 00007f60dbc26090 R15: 00007fff74683d58 [ 713.838217][ T4963] [ 714.013571][ T42] audit: type=1400 audit(1785458214.477:5112): avc: denied { read } for pid=4951 comm="syz.5.11860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 714.092564][ T42] audit: type=1400 audit(1785458214.577:5113): avc: denied { execmem } for pid=4964 comm="syz.5.11863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 714.101127][ T42] audit: type=1400 audit(1785458214.587:5114): avc: denied { mmap_zero } for pid=4964 comm="syz.5.11863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 714.134890][ T42] audit: type=1400 audit(1785458214.617:5115): avc: denied { allowed } for pid=4964 comm="syz.5.11863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 714.158873][ T42] audit: type=1400 audit(1785458214.627:5116): avc: denied { egress } for pid=23 comm="ksoftirqd/2" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 714.182200][ T42] audit: type=1400 audit(1785458214.627:5117): avc: denied { sendto } for pid=23 comm="ksoftirqd/2" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 714.208205][ T42] audit: type=1400 audit(1785458214.637:5118): avc: denied { create } for pid=4964 comm="syz.5.11863" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 714.276107][ T4967] netlink: 'syz.2.11864': attribute type 4 has an invalid length. [ 714.483042][ T4977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11868'. [ 714.489723][ T4978] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11868'. [ 714.544429][ T4975] loop5: detected capacity change from 0 to 7 [ 714.558885][ T4975] Dev loop5: unable to read RDB block 7 [ 714.565817][ T4975] loop5: unable to read partition table [ 714.575681][ T4975] loop5: partition table beyond EOD, truncated [ 714.581219][ T4975] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 715.318989][ T5007] netlink: zone id is out of range [ 715.338000][ T5007] netlink: 830 bytes leftover after parsing attributes in process `syz.5.11879'. [ 715.461544][ T5025] usb usb8: usbfs: process 5025 (syz.3.11883) did not claim interface 0 before use [ 716.210501][ T5057] FAULT_INJECTION: forcing a failure. [ 716.210501][ T5057] name failslab, interval 1, probability 0, space 0, times 0 [ 716.214504][ T5057] CPU: 0 UID: 0 PID: 5057 Comm: syz.7.11895 Tainted: G L syzkaller #0 PREEMPT(full) [ 716.214522][ T5057] Tainted: [L]=SOFTLOCKUP [ 716.214526][ T5057] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 716.214533][ T5057] Call Trace: [ 716.214538][ T5057] [ 716.214542][ T5057] dump_stack_lvl+0x100/0x190 [ 716.214561][ T5057] should_fail_ex.cold+0x5/0xa [ 716.214575][ T5057] ? __skb_get_hash_net+0x153/0x560 [ 716.214594][ T5057] should_failslab+0xc2/0x120 [ 716.214611][ T5057] kmem_cache_alloc_noprof+0x91/0x6a0 [ 716.214625][ T5057] ? lock_acquire+0x1b9/0x370 [ 716.214640][ T5057] ? skb_clone+0x190/0x400 [ 716.214656][ T5057] skb_clone+0x190/0x400 [ 716.214670][ T5057] dev_queue_xmit_nit+0x255/0xa60 [ 716.214689][ T5057] ? __pfx_match_fanout_group+0x10/0x10 [ 716.214711][ T5057] dev_hard_start_xmit+0x2f5/0x760 [ 716.214732][ T5057] __dev_queue_xmit+0x1bbf/0x4970 [ 716.214747][ T5057] ? look_up_lock_class+0x64/0x120 [ 716.214760][ T5057] ? __lock_acquire+0x49f/0x1a40 [ 716.214774][ T5057] ? __pfx___dev_queue_xmit+0x10/0x10 [ 716.214784][ T5057] ? register_lock_class+0x40/0x560 [ 716.214802][ T5057] ? __lock_acquire+0x49f/0x1a40 [ 716.214817][ T5057] ? __asan_memcpy+0x3c/0x60 [ 716.214832][ T5057] ? find_held_lock+0x2b/0x80 [ 716.214846][ T5057] ip_finish_output2+0xf4a/0x2400 [ 716.214860][ T5057] ? do_csum+0x1a3/0x380 [ 716.214872][ T5057] ? __pfx_ip_finish_output2+0x10/0x10 [ 716.214885][ T5057] ? ip_fraglist_prepare+0x497/0x660 [ 716.214900][ T5057] ip_do_fragment+0x15d1/0x1c10 [ 716.214913][ T5057] ? __pfx_ip_finish_output2+0x10/0x10 [ 716.214930][ T5057] ? __pfx_ip_do_fragment+0x10/0x10 [ 716.214943][ T5057] ? ip_dst_mtu_maybe_forward+0x413/0x960 [ 716.214955][ T5057] ? ip_dst_mtu_maybe_forward+0x413/0x960 [ 716.214970][ T5057] ? ip_dst_mtu_maybe_forward+0x41d/0x960 [ 716.214984][ T5057] ip_fragment.constprop.0+0x161/0x230 [ 716.214998][ T5057] __ip_finish_output.part.0+0x3f8/0x6f0 [ 716.215012][ T5057] ip_output+0x39b/0xc10 [ 716.215025][ T5057] ? __pfx_ip_output+0x10/0x10 [ 716.215038][ T5057] ? __pfx_ip_finish_output+0x10/0x10 [ 716.215050][ T5057] ? rcu_is_watching+0x12/0xc0 [ 716.215068][ T5057] ? __ip_make_skb+0x10a9/0x1f90 [ 716.215080][ T5057] ? kfree+0x1e5/0x6c0 [ 716.215097][ T5057] ? __pfx_ip_output+0x10/0x10 [ 716.215110][ T5057] ip_send_skb+0x232/0x2a0 [ 716.215124][ T5057] udp_send_skb+0xa58/0xfe0 [ 716.215146][ T5057] udp_sendmsg+0x12b1/0x2720 [ 716.215158][ T5057] ? avc_has_perm_noaudit+0x145/0x3b0 [ 716.215174][ T5057] ? __pfx_udp_sendmsg+0x10/0x10 [ 716.215185][ T5057] ? __pfx_avc_has_perm+0x10/0x10 [ 716.215201][ T5057] ? __lock_acquire+0x49f/0x1a40 [ 716.215217][ T5057] ? __pfx_sock_has_perm+0x10/0x10 [ 716.215241][ T5057] ? __pfx_udp_sendmsg+0x10/0x10 [ 716.215253][ T5057] inet_sendmsg+0x105/0x140 [ 716.215268][ T5057] __sys_sendto+0x453/0x4e0 [ 716.215281][ T5057] ? __pfx_inet_sendmsg+0x10/0x10 [ 716.215295][ T5057] ? __pfx___sys_sendto+0x10/0x10 [ 716.215311][ T5057] ? trace_buffer_unlock_commit_regs+0x375/0x540 [ 716.215334][ T5057] ? find_held_lock+0x2b/0x80 [ 716.215344][ T5057] ? trace_syscall_enter+0xd9/0x110 [ 716.215360][ T5057] ? trace_syscall_enter+0xd9/0x110 [ 716.215377][ T5057] __x64_sys_sendto+0xe0/0x1c0 [ 716.215390][ T5057] ? trace_syscall_enter+0xe3/0x110 [ 716.215405][ T5057] do_syscall_64+0x115/0x870 [ 716.215418][ T5057] ? clear_bhb_loop+0x40/0x90 [ 716.215432][ T5057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.215444][ T5057] RIP: 0033:0x7f7a13d9e019 [ 716.215455][ T5057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 716.215466][ T5057] RSP: 002b:00007f7a14d02028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 716.215477][ T5057] RAX: ffffffffffffffda RBX: 00007f7a14026090 RCX: 00007f7a13d9e019 [ 716.215484][ T5057] RDX: 0000000000006200 RSI: 0000200000000c80 RDI: 0000000000000005 [ 716.215510][ T5057] RBP: 00007f7a14d02090 R08: 0000000000000000 R09: 0000000000000000 [ 716.215520][ T5057] R10: 0000000088050000 R11: 0000000000000246 R12: 0000000000000002 [ 716.215529][ T5057] R13: 00007f7a14026128 R14: 00007f7a14026090 R15: 00007ffc141305e8 [ 716.215551][ T5057] [ 716.729229][ T5074] dummy_hcd dummy_hcd.0: remove, state 1 [ 716.758643][ T5074] usb usb5: USB disconnect, device number 1 [ 716.769394][ T5074] usb 5-1: USB disconnect, device number 19 [ 716.809123][ T5074] cdc_ncm 5-1:1.0 usb2: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 717.182996][ T5088] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11908'. [ 717.195433][ T5088] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11908'. [ 717.206444][ T5088] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11908'. [ 717.365572][ T5099] loop5: detected capacity change from 0 to 7 [ 717.406702][ T5099] Dev loop5: unable to read RDB block 7 [ 717.414329][ T5099] loop5: unable to read partition table [ 717.421569][ T5099] loop5: partition table beyond EOD, truncated [ 717.429592][ T5099] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 717.487432][ T5074] usblp0: removed [ 717.771185][ T5117] FAULT_INJECTION: forcing a failure. [ 717.771185][ T5117] name failslab, interval 1, probability 0, space 0, times 0 [ 717.775314][ T5117] CPU: 0 UID: 0 PID: 5117 Comm: syz.5.11912 Tainted: G L syzkaller #0 PREEMPT(full) [ 717.775333][ T5117] Tainted: [L]=SOFTLOCKUP [ 717.775337][ T5117] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 717.775344][ T5117] Call Trace: [ 717.775349][ T5117] [ 717.775357][ T5117] dump_stack_lvl+0x100/0x190 [ 717.775377][ T5117] should_fail_ex.cold+0x5/0xa [ 717.775390][ T5117] ? __skb_get_hash_net+0x153/0x560 [ 717.775409][ T5117] should_failslab+0xc2/0x120 [ 717.775425][ T5117] kmem_cache_alloc_noprof+0x91/0x6a0 [ 717.775439][ T5117] ? lock_acquire+0x1b9/0x370 [ 717.775453][ T5117] ? skb_clone+0x190/0x400 [ 717.775469][ T5117] skb_clone+0x190/0x400 [ 717.775504][ T5117] dev_queue_xmit_nit+0x255/0xa60 [ 717.775526][ T5117] ? __pfx_match_fanout_group+0x10/0x10 [ 717.775555][ T5117] dev_hard_start_xmit+0x2f5/0x760 [ 717.775578][ T5117] __dev_queue_xmit+0x1bbf/0x4970 [ 717.775594][ T5117] ? __pfx___dev_queue_xmit+0x10/0x10 [ 717.775605][ T5117] ? __pfx_stack_trace_save+0x10/0x10 [ 717.775618][ T5117] ? stack_depot_save_flags+0x27/0x9d0 [ 717.775637][ T5117] ? __lock_acquire+0x49f/0x1a40 [ 717.775651][ T5117] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 717.775670][ T5117] ? find_held_lock+0x2b/0x80 [ 717.775684][ T5117] ip_finish_output2+0xf4a/0x2400 [ 717.775698][ T5117] ? do_csum+0x1a3/0x380 [ 717.775710][ T5117] ? __pfx_ip_finish_output2+0x10/0x10 [ 717.775723][ T5117] ? ip_fraglist_prepare+0x497/0x660 [ 717.775738][ T5117] ip_do_fragment+0x15d1/0x1c10 [ 717.775751][ T5117] ? __pfx_ip_finish_output2+0x10/0x10 [ 717.775768][ T5117] ? __pfx_ip_do_fragment+0x10/0x10 [ 717.775780][ T5117] ? ip_dst_mtu_maybe_forward+0x413/0x960 [ 717.775792][ T5117] ? ip_dst_mtu_maybe_forward+0x413/0x960 [ 717.775807][ T5117] ? ip_dst_mtu_maybe_forward+0x41d/0x960 [ 717.775821][ T5117] ip_fragment.constprop.0+0x161/0x230 [ 717.775835][ T5117] __ip_finish_output.part.0+0x3f8/0x6f0 [ 717.775849][ T5117] ip_output+0x39b/0xc10 [ 717.775862][ T5117] ? __pfx_ip_output+0x10/0x10 [ 717.775875][ T5117] ? __pfx_ip_finish_output+0x10/0x10 [ 717.775887][ T5117] ? rcu_is_watching+0x12/0xc0 [ 717.775905][ T5117] ? __ip_make_skb+0x10a9/0x1f90 [ 717.775917][ T5117] ? kfree+0x1e5/0x6c0 [ 717.775934][ T5117] ? __pfx_ip_output+0x10/0x10 [ 717.775947][ T5117] ip_send_skb+0x232/0x2a0 [ 717.775960][ T5117] udp_send_skb+0xa58/0xfe0 [ 717.775983][ T5117] udp_sendmsg+0x12b1/0x2720 [ 717.775995][ T5117] ? avc_has_perm_noaudit+0x145/0x3b0 [ 717.776011][ T5117] ? __pfx_udp_sendmsg+0x10/0x10 [ 717.776022][ T5117] ? __pfx_avc_has_perm+0x10/0x10 [ 717.776034][ T5117] ? rcu_is_watching+0x12/0xc0 [ 717.776054][ T5117] ? __lock_acquire+0x49f/0x1a40 [ 717.776070][ T5117] ? __pfx_sock_has_perm+0x10/0x10 [ 717.776094][ T5117] ? __pfx_udp_sendmsg+0x10/0x10 [ 717.776106][ T5117] inet_sendmsg+0x105/0x140 [ 717.776121][ T5117] __sys_sendto+0x453/0x4e0 [ 717.776133][ T5117] ? __pfx_inet_sendmsg+0x10/0x10 [ 717.776148][ T5117] ? __pfx___sys_sendto+0x10/0x10 [ 717.776170][ T5117] ? find_held_lock+0x2b/0x80 [ 717.776180][ T5117] ? trace_syscall_enter+0xd9/0x110 [ 717.776195][ T5117] ? trace_syscall_enter+0xd9/0x110 [ 717.776212][ T5117] __x64_sys_sendto+0xe0/0x1c0 [ 717.776225][ T5117] ? trace_syscall_enter+0xe3/0x110 [ 717.776240][ T5117] do_syscall_64+0x115/0x870 [ 717.776253][ T5117] ? clear_bhb_loop+0x40/0x90 [ 717.776268][ T5117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.776280][ T5117] RIP: 0033:0x7f1d05d9e019 [ 717.776291][ T5117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 717.776302][ T5117] RSP: 002b:00007f1d06d18028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 717.776314][ T5117] RAX: ffffffffffffffda RBX: 00007f1d06026090 RCX: 00007f1d05d9e019 [ 717.776321][ T5117] RDX: 0000000000006200 RSI: 0000200000000c80 RDI: 0000000000000005 [ 717.776328][ T5117] RBP: 00007f1d06d18090 R08: 0000000000000000 R09: 0000000000000000 [ 717.776334][ T5117] R10: 0000000088050000 R11: 0000000000000246 R12: 0000000000000002 [ 717.776341][ T5117] R13: 00007f1d06026128 R14: 00007f1d06026090 R15: 00007ffc356ffb78 [ 717.776359][ T5117] [ 718.401560][ T5138] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11916'. [ 718.598986][ T5150] create_pit_timer: 20 callbacks suppressed [ 718.599001][ T5150] kvm: requested 31009 ns i8254 timer period limited to 200000 ns [ 718.611520][ T42] kauditd_printk_skb: 368 callbacks suppressed [ 718.611530][ T42] audit: type=1400 audit(1785458219.097:5487): avc: denied { read } for pid=5154 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 718.631128][ T42] audit: type=1400 audit(1785458219.107:5488): avc: denied { read open } for pid=5154 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 718.662740][ T42] audit: type=1400 audit(1785458219.107:5489): avc: denied { getattr } for pid=5154 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 718.677328][ T5150] kvm: requested 173485 ns i8254 timer period limited to 200000 ns [ 718.703092][ T42] audit: type=1400 audit(1785458219.167:5490): avc: denied { write } for pid=5153 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 718.706967][ T5150] kvm: requested 31009 ns i8254 timer period limited to 200000 ns [ 718.743987][ T42] audit: type=1400 audit(1785458219.167:5491): avc: denied { add_name } for pid=5153 comm="dhcpcd-run-hook" name="resolv.conf.usb2.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 718.749864][ T5150] kvm: requested 176838 ns i8254 timer period limited to 200000 ns [ 718.812321][ T5150] kvm: requested 72914 ns i8254 timer period limited to 200000 ns [ 718.823145][ T42] audit: type=1400 audit(1785458219.307:5492): avc: denied { write } for pid=5158 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 718.840368][ T5150] kvm: requested 195276 ns i8254 timer period limited to 200000 ns [ 718.846063][ T42] audit: type=1400 audit(1785458219.317:5493): avc: denied { read } for pid=5156 comm="syz.5.11920" dev="nsfs" ino=4026532263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 718.861455][ T5150] kvm: requested 186895 ns i8254 timer period limited to 200000 ns [ 718.867539][ T5074] dummy_hcd dummy_hcd.0: stopped [ 718.871850][ T5074] dummy_hcd dummy_hcd.0: USB bus 5 deregistered [ 718.873748][ T42] audit: type=1400 audit(1785458219.317:5494): avc: denied { open } for pid=5156 comm="syz.5.11920" path="net:[4026532263]" dev="nsfs" ino=4026532263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 718.879463][ T5150] kvm: requested 139962 ns i8254 timer period limited to 200000 ns [ 718.896358][ T42] audit: type=1400 audit(1785458219.317:5495): avc: denied { create } for pid=5156 comm="syz.5.11920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 718.915499][ T5150] kvm: requested 111466 ns i8254 timer period limited to 200000 ns [ 718.921277][ T42] audit: type=1400 audit(1785458219.317:5496): avc: denied { bind } for pid=5156 comm="syz.5.11920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 718.950645][ T5150] kvm: requested 116495 ns i8254 timer period limited to 200000 ns [ 719.110128][ T5163] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.113799][ T5163] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.384722][ T5163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 719.398008][ T5163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 719.678779][T24624] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.706028][ T5816] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.717817][ T5816] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.735752][ T5816] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.036403][ T5212] 9p: Bad value for 'msize' [ 720.266432][ T5229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11936'. [ 720.276651][ T5227] syzkaller0: entered promiscuous mode [ 720.279147][ T5227] syzkaller0: entered allmulticast mode [ 720.282436][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.287389][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.384854][ T5449] veth1_vlan: left promiscuous mode [ 720.452866][ T5239] netlink: 'syz.2.11941': attribute type 1 has an invalid length. [ 720.519846][ T5239] bond5: entered promiscuous mode [ 720.529460][ T5239] 8021q: adding VLAN 0 to HW filter on device bond5 [ 720.571651][ T5247] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 720.602941][ T5247] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 720.622047][ T5247] bond5: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 720.642255][ T5247] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 720.683503][ T5260] FAULT_INJECTION: forcing a failure. [ 720.683503][ T5260] name failslab, interval 1, probability 0, space 0, times 0 [ 720.687534][ T5260] CPU: 2 UID: 0 PID: 5260 Comm: syz.7.11947 Tainted: G L syzkaller #0 PREEMPT(full) [ 720.687552][ T5260] Tainted: [L]=SOFTLOCKUP [ 720.687557][ T5260] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 720.687564][ T5260] Call Trace: [ 720.687569][ T5260] [ 720.687573][ T5260] dump_stack_lvl+0x100/0x190 [ 720.687592][ T5260] should_fail_ex.cold+0x5/0xa [ 720.687608][ T5260] should_failslab+0xc2/0x120 [ 720.687625][ T5260] kmem_cache_alloc_noprof+0x91/0x6a0 [ 720.687643][ T5260] ? skb_clone+0x190/0x400 [ 720.687659][ T5260] skb_clone+0x190/0x400 [ 720.687674][ T5260] bpf_clone_redirect+0x166/0x500 [ 720.687703][ T5260] bpf_prog_1939c40fbf65037b+0x5f/0x68 [ 720.687714][ T5260] ? unwind_get_return_address+0x59/0xa0 [ 720.687734][ T5260] ? arch_stack_walk+0xa6/0xf0 [ 720.687755][ T5260] ? __lock_acquire+0x49f/0x1a40 [ 720.687771][ T5260] ? __lock_acquire+0x49f/0x1a40 [ 720.687785][ T5260] ? stack_trace_save+0x8e/0xc0 [ 720.687800][ T5260] ? find_held_lock+0x2b/0x80 [ 720.687810][ T5260] ? bpf_test_timer_enter+0xf7/0x2b0 [ 720.687833][ T5260] ? ktime_get+0x22c/0x320 [ 720.687851][ T5260] ? lockdep_hardirqs_on+0x78/0x100 [ 720.687866][ T5260] ? __pfx___cant_migrate+0x10/0x10 [ 720.687886][ T5260] ? bpf_test_timer_continue+0x17b/0x5d0 [ 720.687902][ T5260] ? lockdep_hardirqs_on+0x78/0x100 [ 720.687915][ T5260] bpf_test_run+0x39c/0xa40 [ 720.687932][ T5260] ? bpf_test_run+0x1c6/0xa40 [ 720.687950][ T5260] ? __pfx_bpf_test_run+0x10/0x10 [ 720.687977][ T5260] ? eth_type_trans+0x2e3/0x720 [ 720.688002][ T5260] bpf_prog_test_run_skb+0x15c4/0x3540 [ 720.688030][ T5260] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 720.688050][ T5260] ? fput+0x79/0x100 [ 720.688065][ T5260] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 720.688084][ T5260] __sys_bpf+0x2a12/0x4e80 [ 720.688101][ T5260] ? __pfx_check_buffer+0x10/0x10 [ 720.688123][ T5260] ? __pfx___sys_bpf+0x10/0x10 [ 720.688134][ T5260] ? __rb_reserve_next.constprop.0+0x6f6/0x1640 [ 720.688158][ T5260] ? ring_buffer_lock_reserve+0x48b/0x11c0 [ 720.688180][ T5260] ? rb_commit+0x129/0x9d0 [ 720.688205][ T5260] ? trace_event_buffer_commit+0x20a/0xa80 [ 720.688227][ T5260] ? __x64_sys_bpf+0xce/0x140 [ 720.688238][ T5260] __x64_sys_bpf+0xce/0x140 [ 720.688249][ T5260] ? rcu_is_watching+0x12/0xc0 [ 720.688269][ T5260] do_syscall_64+0x115/0x870 [ 720.688282][ T5260] ? clear_bhb_loop+0x40/0x90 [ 720.688310][ T5260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.688322][ T5260] RIP: 0033:0x7f7a13d9e019 [ 720.688333][ T5260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 720.688343][ T5260] RSP: 002b:00007f7a14d23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 720.688355][ T5260] RAX: ffffffffffffffda RBX: 00007f7a14025fa0 RCX: 00007f7a13d9e019 [ 720.688362][ T5260] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 000000000000000a [ 720.688368][ T5260] RBP: 00007f7a14d23090 R08: 0000000000000000 R09: 0000000000000000 [ 720.688375][ T5260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 720.688381][ T5260] R13: 00007f7a14026038 R14: 00007f7a14025fa0 R15: 00007ffc141305e8 [ 720.688395][ T5260] [ 720.887595][ T5449] veth1_vlan: entered promiscuous mode [ 720.931159][ T5250] lo speed is unknown, defaulting to 1000 [ 721.010460][ T5271] netlink: 'syz.7.11950': attribute type 4 has an invalid length. [ 721.020132][ T5271] netlink: 152 bytes leftover after parsing attributes in process `syz.7.11950'. [ 721.053247][ T5271] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 721.375795][ T5296] usb usb8: usbfs: process 5296 (syz.3.11959) did not claim interface 0 before use [ 721.699431][ T5320] netlink: 'syz.2.11967': attribute type 1 has an invalid length. [ 721.891318][ T5320] bond6: entered promiscuous mode [ 721.899157][ T5320] 8021q: adding VLAN 0 to HW filter on device bond6 [ 721.947393][ T5324] bond6: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 721.964447][ T5324] bond6: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 721.973499][ T5324] bond6: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 721.993719][ T5324] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 722.582437][ T5363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11979'. [ 722.599392][ T5363] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11979'. [ 722.664545][ T37] rpcbind: RPC call returned error 22 [ 723.276509][ T5392] lo: MTU too low for tipc bearer [ 723.285483][ T5392] tipc: Enabling of bearer rejected, failed to enable media [ 723.463936][ T5416] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 0, id = 0 [ 723.521865][ T5424] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11996'. [ 723.530070][ T5424] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11996'. [ 723.619044][ T5431] syzkaller0: entered promiscuous mode [ 723.622021][ T42] kauditd_printk_skb: 404 callbacks suppressed [ 723.622032][ T42] audit: type=1400 audit(1785458224.107:5901): avc: denied { read write } for pid=32523 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 723.637367][ T5431] syzkaller0: entered allmulticast mode [ 723.646171][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.650803][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.652414][ T42] audit: type=1400 audit(1785458224.107:5902): avc: denied { open } for pid=32523 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 723.709647][ T42] audit: type=1400 audit(1785458224.197:5903): avc: denied { prog_load } for pid=5434 comm="syz.5.11999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 723.719166][ T5438] 9p: Bad value for 'msize' [ 723.731688][ T42] audit: type=1400 audit(1785458224.207:5904): avc: denied { mounton } for pid=5435 comm="syz.2.12001" path="/179" dev="tmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 723.767859][ T42] audit: type=1400 audit(1785458224.207:5905): avc: denied { bpf } for pid=5436 comm="syz.3.12000" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 723.779414][ T42] audit: type=1400 audit(1785458224.207:5906): avc: denied { perfmon } for pid=5436 comm="syz.3.12000" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 723.790480][ T42] audit: type=1400 audit(1785458224.207:5907): avc: denied { prog_run } for pid=5436 comm="syz.3.12000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 723.796856][ T42] audit: type=1400 audit(1785458224.267:5908): avc: denied { bind } for pid=5434 comm="syz.5.11999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 723.803193][ T42] audit: type=1400 audit(1785458224.267:5909): avc: denied { name_bind } for pid=5434 comm="syz.5.11999" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 723.810506][ T42] audit: type=1400 audit(1785458224.267:5910): avc: denied { write } for pid=5434 comm="syz.5.11999" laddr=172.20.20.170 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 724.057152][ T5453] loop5: detected capacity change from 0 to 7 [ 724.301216][ T5453] Dev loop5: unable to read RDB block 7 [ 724.307300][ T5453] loop5: unable to read partition table [ 724.314463][ T5453] loop5: partition table beyond EOD, truncated [ 724.318109][ T5453] loop_reread_partitions: partition scan of loop5 (W %4FLQk݊5) failed (rc=-5) [ 724.517562][ T5476] 9p: Bad value for 'msize' [ 724.593853][ T5480] FAULT_INJECTION: forcing a failure. [ 724.593853][ T5480] name failslab, interval 1, probability 0, space 0, times 0 [ 724.597650][ T5480] CPU: 2 UID: 0 PID: 5480 Comm: syz.7.12015 Tainted: G L syzkaller #0 PREEMPT(full) [ 724.597668][ T5480] Tainted: [L]=SOFTLOCKUP [ 724.597672][ T5480] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 724.597679][ T5480] Call Trace: [ 724.597684][ T5480] [ 724.597689][ T5480] dump_stack_lvl+0x100/0x190 [ 724.597707][ T5480] should_fail_ex.cold+0x5/0xa [ 724.597722][ T5480] should_failslab+0xc2/0x120 [ 724.597739][ T5480] kmem_cache_alloc_noprof+0x91/0x6a0 [ 724.597753][ T5480] ? skb_clone+0x190/0x400 [ 724.597769][ T5480] skb_clone+0x190/0x400 [ 724.597783][ T5480] bpf_clone_redirect+0x166/0x500 [ 724.597803][ T5480] bpf_prog_1939c40fbf65037b+0x5f/0x68 [ 724.597814][ T5480] ? __schedule+0x126e/0x6730 [ 724.597826][ T5480] ? arch_stack_walk+0xa6/0xf0 [ 724.597849][ T5480] ? stack_trace_save+0x8e/0xc0 [ 724.597863][ T5480] ? __pfx___schedule+0x10/0x10 [ 724.597874][ T5480] ? find_held_lock+0x2b/0x80 [ 724.597884][ T5480] ? bpf_test_timer_enter+0xf7/0x2b0 [ 724.597901][ T5480] ? preempt_schedule_thunk+0x16/0x40 [ 724.597914][ T5480] ? preempt_schedule_common+0x42/0xc0 [ 724.597927][ T5480] ? __pfx___cant_migrate+0x10/0x10 [ 724.597946][ T5480] ? bpf_test_timer_continue+0x17b/0x5d0 [ 724.597962][ T5480] ? lockdep_hardirqs_on+0x78/0x100 [ 724.597976][ T5480] bpf_test_run+0x39c/0xa40 [ 724.597993][ T5480] ? bpf_test_run+0x1c6/0xa40 [ 724.598011][ T5480] ? __pfx_bpf_test_run+0x10/0x10 [ 724.598037][ T5480] ? eth_type_trans+0x2e3/0x720 [ 724.598057][ T5480] bpf_prog_test_run_skb+0x15c4/0x3540 [ 724.598085][ T5480] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 724.598104][ T5480] ? fput+0x79/0x100 [ 724.598119][ T5480] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 724.598137][ T5480] __sys_bpf+0x2a12/0x4e80 [ 724.598150][ T5480] ? __pfx_check_buffer+0x10/0x10 [ 724.598171][ T5480] ? __pfx___sys_bpf+0x10/0x10 [ 724.598182][ T5480] ? __rb_reserve_next.constprop.0+0x6f6/0x1640 [ 724.598206][ T5480] ? ring_buffer_lock_reserve+0x48b/0x11c0 [ 724.598227][ T5480] ? rb_commit+0x129/0x9d0 [ 724.598252][ T5480] ? trace_event_buffer_commit+0x20a/0xa80 [ 724.598274][ T5480] ? __x64_sys_bpf+0xce/0x140 [ 724.598297][ T5480] __x64_sys_bpf+0xce/0x140 [ 724.598310][ T5480] ? rcu_is_watching+0x12/0xc0 [ 724.598329][ T5480] do_syscall_64+0x115/0x870 [ 724.598342][ T5480] ? clear_bhb_loop+0x40/0x90 [ 724.598356][ T5480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.598368][ T5480] RIP: 0033:0x7f7a13d9e019 [ 724.598377][ T5480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 724.598388][ T5480] RSP: 002b:00007f7a14d23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 724.598399][ T5480] RAX: ffffffffffffffda RBX: 00007f7a14025fa0 RCX: 00007f7a13d9e019 [ 724.598406][ T5480] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 000000000000000a [ 724.598413][ T5480] RBP: 00007f7a14d23090 R08: 0000000000000000 R09: 0000000000000000 [ 724.598419][ T5480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 724.598425][ T5480] R13: 00007f7a14026038 R14: 00007f7a14025fa0 R15: 00007ffc141305e8 [ 724.598439][ T5480] [ 724.963556][ T5486] syzkaller0: entered promiscuous mode [ 724.965422][ T5486] syzkaller0: entered allmulticast mode [ 724.977009][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.981358][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.987829][ T5484] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12016'. [ 725.036616][ T5484] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.051660][ T5484] bridge_slave_1 (unregistering): left allmulticast mode [ 725.053909][ T5484] bridge_slave_1 (unregistering): left promiscuous mode [ 725.056278][ T5484] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.316701][ T5502] netlink: 'syz.3.12021': attribute type 1 has an invalid length. [ 725.368876][ T5502] bond6: entered promiscuous mode [ 725.372507][ T5502] 8021q: adding VLAN 0 to HW filter on device bond6 [ 725.560263][ T5511] 9p: Bad value for 'msize' [ 725.867944][ T5518] /dev/sr0: Can't open blockdev [ 726.035870][ T5523] sg_write: data in/out 63015/14 bytes for SCSI command 0x0-- guessing data in; [ 726.035870][ T5523] program syz.2.12030 not setting count and/or reply_len properly [ 726.661479][ T5548] netlink: 'syz.3.12038': attribute type 1 has an invalid length. [ 726.741529][ T5548] bond7: entered promiscuous mode [ 726.756126][ T5548] 8021q: adding VLAN 0 to HW filter on device bond7 [ 727.171872][ T5574] kvm: kvm [5573]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x4 [ 727.458619][ T5583] 9p: Bad value for 'msize' [ 727.461770][ T5581] netlink: 'syz.7.12048': attribute type 1 has an invalid length. [ 727.686426][ T5591] netlink: 'syz.2.12051': attribute type 1 has an invalid length. [ 727.714510][ T5591] bond7: entered promiscuous mode [ 727.718428][ T5591] 8021q: adding VLAN 0 to HW filter on device bond7 [ 727.735084][ T5591] bond7: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 727.745423][ T5591] bond7: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 727.749734][ T5591] bond7: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 727.753846][ T5591] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 727.983585][ C0] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000c: 0000 [#1] SMP KASAN NOPTI [ 727.987396][ C0] KASAN: null-ptr-deref in range [0x0000000000000060-0x0000000000000067] [ 727.990126][ C0] CPU: 0 UID: 0 PID: 5594 Comm: syz.2.12053 Tainted: G L syzkaller #0 PREEMPT(full) [ 727.993533][ C0] Tainted: [L]=SOFTLOCKUP [ 727.994933][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 727.998100][ C0] RIP: 0010:dummy_queue+0x1ba/0xb00 [ 727.999803][ C0] Code: 00 49 83 bc 24 c8 05 00 00 00 0f 84 a6 07 00 00 e8 ab 19 39 fa 49 8d 7f 60 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 4f 07 00 00 45 8b 7f 60 31 ff [ 728.005759][ C0] RSP: 0018:ffffc90000007d38 EFLAGS: 00010206 [ 728.007685][ C0] RAX: dffffc0000000000 RBX: ffff88803d5ddb10 RCX: ffffffff87d146df [ 728.010153][ C0] RDX: 000000000000000c RSI: ffffffff87d14755 RDI: 0000000000000060 [ 728.012620][ C0] RBP: ffff88802ba5c0e0 R08: 0000000000000005 R09: 0000000000000005 [ 728.015121][ C0] R10: 0000000000000003 R11: 0000000000000000 R12: ffff88802ba5cc00 [ 728.017643][ C0] R13: ffff88803d5ddb00 R14: ffff88802ba5c0d8 R15: 0000000000000000 [ 728.020163][ C0] FS: 00007f60d9bf66c0(0000) GS:ffff8880d5dda000(0000) knlGS:0000000000000000 [ 728.022944][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 728.025033][ C0] CR2: 00007f60db9eb700 CR3: 0000000127a70000 CR4: 0000000000352ef0 [ 728.027580][ C0] Call Trace: [ 728.028667][ C0] [ 728.029647][ C0] ? find_held_lock+0x2b/0x80 [ 728.031160][ C0] ? eth_start_xmit+0x3d7/0x1390 [ 728.032762][ C0] usb_ep_queue+0xfa/0x3c0 [ 728.034201][ C0] eth_start_xmit+0x684/0x1390 [ 728.035746][ C0] ? __pfx_ncm_tx_timeout+0x10/0x10 [ 728.037389][ C0] ncm_tx_timeout+0x7f/0xb0 [ 728.038839][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 728.040522][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 728.042160][ C0] handle_softirqs+0x1ea/0x9b0 [ 728.043836][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 728.045553][ C0] ? _raw_spin_unlock+0x28/0x50 [ 728.047086][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 728.048850][ C0] __irq_exit_rcu+0x162/0x210 [ 728.050398][ C0] irq_exit_rcu+0x9/0x30 [ 728.051748][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 728.053498][ C0] [ 728.054426][ C0] [ 728.055350][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 728.057240][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp1+0x8/0x20 [ 728.059291][ C0] Code: bf 06 00 00 00 e9 b8 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 0c 24 <40> 0f b6 d6 40 0f b6 f7 bf 01 00 00 00 e9 86 fe ff ff 66 0f 1f 44 [ 728.065192][ C0] RSP: 0018:ffffc90003987d10 EFLAGS: 00000246 [ 728.067242][ C0] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff8298b75b [ 728.069686][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 728.072108][ C0] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 728.074545][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000005 [ 728.076961][ C0] R13: ffff88804652de00 R14: 0000000000000002 R15: 0000000000000005 [ 728.079677][ C0] ? __fget_files+0x24b/0x3d0 [ 728.081152][ C0] __fget_files+0x24b/0x3d0 [ 728.082586][ C0] io_uring_ctx_get_file+0x113/0x1b0 [ 728.084274][ C0] __do_sys_io_uring_enter+0xd1/0x1b10 [ 728.086008][ C0] ? trace_buffer_unlock_commit_regs+0x375/0x540 [ 728.087991][ C0] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 728.089884][ C0] ? trace_event_buffer_commit+0x20a/0xa80 [ 728.091740][ C0] ? find_held_lock+0x2b/0x80 [ 728.093223][ C0] ? trace_syscall_enter+0xd9/0x110 [ 728.094889][ C0] ? trace_syscall_enter+0xd9/0x110 [ 728.096528][ C0] do_syscall_64+0x115/0x870 [ 728.098039][ C0] ? clear_bhb_loop+0x40/0x90 [ 728.099527][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.101356][ C0] RIP: 0033:0x7f60db99e019 [ 728.102781][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 728.108783][ C0] RSP: 002b:00007f60d9bf5f38 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 728.111416][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f60db99e019 [ 728.113924][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000005 [ 728.116382][ C0] RBP: 0000000000000299 R08: 0000000000000000 R09: 0000000000000008 [ 728.118834][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000800 [ 728.121324][ C0] R13: 0000200000000808 R14: 0000000000000c41 R15: 0000000000000000 [ 728.123780][ C0] [ 728.124740][ C0] Modules linked in: [ 728.126170][ C0] ---[ end trace 0000000000000000 ]--- [ 728.128121][ C0] RIP: 0010:dummy_queue+0x1ba/0xb00 [ 728.129789][ C0] Code: 00 49 83 bc 24 c8 05 00 00 00 0f 84 a6 07 00 00 e8 ab 19 39 fa 49 8d 7f 60 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 4f 07 00 00 45 8b 7f 60 31 ff [ 728.136006][ C0] RSP: 0018:ffffc90000007d38 EFLAGS: 00010206 [ 728.137794][ C0] RAX: dffffc0000000000 RBX: ffff88803d5ddb10 RCX: ffffffff87d146df [ 728.140187][ C0] RDX: 000000000000000c RSI: ffffffff87d14755 RDI: 0000000000000060 [ 728.142611][ C0] RBP: ffff88802ba5c0e0 R08: 0000000000000005 R09: 0000000000000005 [ 728.145028][ C0] R10: 0000000000000003 R11: 0000000000000000 R12: ffff88802ba5cc00 [ 728.147371][ C0] R13: ffff88803d5ddb00 R14: ffff88802ba5c0d8 R15: 0000000000000000 [ 728.149799][ C0] FS: 00007f60d9bf66c0(0000) GS:ffff8880d5dda000(0000) knlGS:0000000000000000 [ 728.152527][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 728.154490][ C0] CR2: 00007f60db9eb700 CR3: 0000000127a70000 CR4: 0000000000352ef0 [ 728.157213][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 728.160426][ C0] Kernel Offset: disabled [ 728.161992][ C0] Rebooting in 86400 seconds..