last executing test programs: 13m18.721107963s ago: executing program 32 (id=1123): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x40) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)={0xfff}) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000040)=0x5) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x27, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_fd={0x18, 0x1, 0x1, 0x0, 0x1}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @exit, @map_idx={0x18, 0xb, 0x5, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x770f1b27}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x2, &(0x7f0000000340)=@raw=[@map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000380)='syzkaller\x00', 0x7ff, 0x5, &(0x7f00000003c0)=""/5, 0x41000, 0x13, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0xd, 0x8001, 0x80000001}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f00000004c0)=[{0x3, 0x2, 0x3, 0x2}], 0x10, 0xc}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000006c0)={@fallback=r0, 0x0, 0x0, 0x200, &(0x7f00000005c0)=[0x0], 0x1, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r5 = eventfd(0xd) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000700)={@fallback=r5, r1, 0x0, 0x23, r2, @void, @void, @void, @value=0xffffffffffffffff, r4}, 0x20) r6 = getuid() quotactl_fd$Q_SETQUOTA(r2, 0x1, r6, &(0x7f0000000740)={0x81, 0x8000000000000000, 0x7, 0x5, 0xe5a, 0x8, 0x2, 0x7fff, 0x6}) r7 = add_key(&(0x7f0000000880)='rxrpc\x00', &(0x7f00000008c0)={'syz', 0x1}, &(0x7f0000000900)="d900ef4159c6ff2d6a634c6d22c4cf21d7446a22727cc046acadfb809a4f9c8fbb8e60d6c77fb3176cb7cd3312a3e771bb706c6e4f30f132ff4e6a6f9e55835d7b4c1df097149c53ae3244b358803a313c98737753435ff72778568ded550750fe8af16dc1481cef15f472e34c9761459fe2a34231534e4fdac4deb45cc16d11f03aa3e29fa86fbfb2c23b7b8c57ae32533cac060fcaa71bc7d9a10f13317115a35808bb24213a3f39f01800d65db038bc6c4ad6b2d197b20dadcdef0d3ffbd91d0cd39203", 0xc5, 0xfffffffffffffffd) add_key$user(&(0x7f00000007c0), &(0x7f0000000800)={'syz', 0x3}, &(0x7f0000000840)="4ba2b063c4942d82e7aecb83d6d7b855e184c0237d46b2a7f6bf0873ea7dd7fa1d9c3444dfaa5a86c7dcdae0e4c5be98c6ec5d", 0x33, r7) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f0000000a00)={0x1, 0xb, 0x2}) ioctl$OCFS2_IOC_GROUP_ADD64(r2, 0x40186f03, 0xfffffffffffffffc) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000a80), r3) getsockname$packet(r3, &(0x7f0000000ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000b00)=0x14) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000c00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8830080}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x5c, r8, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r9}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010100}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x6d}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc080}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e40)={{r3, 0xffffffffffffffff}, &(0x7f0000000dc0), &(0x7f0000000e00)=r1}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f00)=@bpf_tracing={0x1a, 0x1b, &(0x7f0000000c40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, [@cb_func={0x18, 0xb, 0x4, 0x0, 0x5}, @exit, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000d40)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x4c, '\x00', r9, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000d80)={0x1, 0xe, 0x7, 0x7fffffff}, 0x10, 0x1d2ef, 0xffffffffffffffff, 0x1, &(0x7f0000000e80)=[r10, r3, r3, r3, r3, r3, r3], &(0x7f0000000ec0)=[{0x0, 0x4, 0xe, 0xd}], 0x10, 0x7}, 0x94) r11 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000fc0), 0x442501, 0x0) r12 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000001000), 0x2, 0x0) getgroups(0x1, &(0x7f0000001040)=[0x0]) fchown(r12, r6, r13) ioctl$PPPIOCGIDLE64(r3, 0x8010743f, &(0x7f0000001080)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001140)={0x0, 0x0}, &(0x7f0000001180)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000011c0)={{{@in6=@private2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f00000012c0)=0xe8) lsetxattr$system_posix_acl(&(0x7f00000010c0)='./file0\x00', &(0x7f0000001100)='system.posix_acl_access\x00', &(0x7f0000001300)={{}, {0x1, 0x5}, [{0x2, 0x4, r14}, {0x2, 0x4, r15}], {0x4, 0x5}, [{0x8, 0x1, r13}, {0x8, 0x3, 0xee01}, {0x8, 0x5, r13}], {0x10, 0x3}, {0x20, 0x6}}, 0x4c, 0x3) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001480)={@ifindex=r9, 0x1f, 0x0, 0x7, &(0x7f0000001380), 0x0, 0x0, &(0x7f00000013c0)=[0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0, 0x0], &(0x7f0000001440)=[0x0, 0x0]}, 0x40) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r11, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x50, 0x0, 0x8, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x927b86c0e6f1c7a}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4089}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 12m21.72107476s ago: executing program 33 (id=2118): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0}, 0x4008804) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000002140)=@l2tp={0x2, 0x0, @remote, 0xfffffffe}, 0x80, &(0x7f0000002240)=[{&(0x7f0000001040)="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"/1182, 0x49e}, {&(0x7f0000002b40)="da752f575198baaac222d34e85893d37a6bd281687872ed9151c56f415698f3fecf56eebf5edb42ed5d54e0419b2a13128d3ad19b6eed6b450aad46baaa57203e0d4f567d8d79fe07e7b3142de43e55cf69c65db2469175cf60c82f49d0f9dc4c4dde733a14d57f4117ed2f46aea5950ff0176d73349c2808eee62ce1c7d846ffdf65211f3192dabe5b3ac1516ad90e618d0ca9e4ac2778acabeac244f2f90af2616647e5cf8ab5e2ac404ebf2a866c8a73f68ae2cc4523e63e3a1aa5ab60a23e4c47534bda546042120c5333d91fefc68226bc9149d282937797a2fe036a58c9ecd19e54bcfb85d3f75ec7c74d86be94ef6b9191e0fa86d2a9330af3f592e24bc30b84632e5121bf04abc0e12f4073f6678ad97b786cc73b8175e35eda542e3631d283a3ca6fef91607ec7dee1b4a62bae169cc8fb64e8bdef95474f0b3c526f69ce55281e18016a4785875ba99e313fd63f66cfd36234bcc6048f25bce8cce39cf709eb10e1ea88497ff7401aae0d4a7e07f14691b6c4b75dc16e2586744317ffbb9966d8bfb16efcdf6ab308426e5c1aec6a6636122ffaca89af3b03834612b93989d0bbb251a42c1b48b86ac7162ad8d5cbf3d6cfccdc590724ff6caa853", 0x1c0}], 0x2}, 0x404) 12m2.109889566s ago: executing program 34 (id=2488): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x402) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000006c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 7m51.038787348s ago: executing program 3 (id=4929): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) fgetxattr(r0, &(0x7f00000000c0)=@known='user.incfs.id\x00', &(0x7f0000000140)=""/66, 0x42) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x605, 0xfffffffc, 0x83, {0x0, 0x0, 0x0, 0x0, 0x1001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 7m50.994132831s ago: executing program 3 (id=4931): setresuid(0x0, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) syz_io_uring_setup(0x131, &(0x7f00000000c0)={0x0, 0xb2f2, 0x2000, 0x2, 0xfffffffd}, &(0x7f0000ffe000), 0x0, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, 0x1000}) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) 7m50.106931304s ago: executing program 3 (id=4938): r0 = socket$inet(0x2, 0x803, 0x6) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x2}, 0x0) getsockopt$inet_mreqsrc(r0, 0xff000000, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 7m50.105209003s ago: executing program 3 (id=4940): setns(0xc9, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r2, 0x1000006) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x1000000}) syz_usb_connect(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd5000000010902"], 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000580)=0x1) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000840)=""/4093, 0xffd}], 0x1}, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004300338b4ab502000000000000", @ANYRES32, @ANYRES8=r4], 0xfe33) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@gettaction={0x20, 0x32, 0x605, 0x70bd2a, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x850}, 0x24000800) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) setuid(0xee00) unshare(0xa000400) write(r5, &(0x7f0000000140)="07312fe5cec4130d49f4eacfe853e78ddabbce9684956f0e4c04ec8938a3015da0331ab517114d9653bc99ee2d654ce178cb75e6d906a7", 0x37) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0800000004000000040000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000d0654abeb4887ab8000000000006b43348b1ae45ca0000000000"], 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000000000001400078005001400090000000800124008001f000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}}, 0x0) r8 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, &(0x7f0000000300), &(0x7f0000000340)=r9}, 0x20) 7m46.955688742s ago: executing program 3 (id=4960): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001000000000000000000d100000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a19020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d616376746170000000080001400000000514000000110001"], 0xe8}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000c40)=ANY=[@ANYBLOB="660000001000010009000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000da44000024003a8020000a8013fffd00fe8000000009000000020040000000000500080002000000140003007866726d30"], 0x58}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r4 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {0x0}, 0x96000}) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x11c, r3, 0x300, 0x70bd27, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008055) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r6) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r7, 0x20, 0x70bd29, 0x25dfdbff}, 0x14}}, 0x20004010) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r8 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000003c0)={0x17a, 0x1, 0x4, 0x0, 0xa5}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r8, 0xc100565c, &(0x7f0000000540)={0x4, 0x7, 0x2, {0x1, @sliced={0x6, [0x2, 0x7, 0x3, 0xf, 0x6, 0x2, 0x4, 0x9, 0x0, 0x101, 0x595, 0x9, 0x9, 0x8d, 0x4, 0x4, 0x2, 0x2, 0xbe0, 0xe, 0xffff, 0x0, 0xb, 0x4, 0xbe5c, 0x3, 0x1, 0x2, 0x2, 0x3, 0x4, 0x1, 0x4, 0xf801, 0x4, 0x81, 0xfffb, 0x81, 0x3, 0x7, 0xeb4, 0xfff9, 0x0, 0x2, 0xd, 0x40, 0xf789, 0x2], 0x8e4f16d}}, 0xfffffe00}) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/ehci-pci/unbind\x00', 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) 7m46.847556187s ago: executing program 3 (id=4961): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./myproc/interrupts\x00', 0x0, 0x0) read(r0, &(0x7f0000000340)=""/1003, 0xfdef) 7m40.690176196s ago: executing program 4 (id=4976): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x0, 0x55007}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0xfffffffffffffffa}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = inotify_init() syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="043e18020142e73ffbe8dacb893d7a02"], 0x1b) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000180)='net/xfrm_stat\x00') lseek(r3, 0x10001, 0x0) move_mount(r3, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x10) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x30000004) r4 = pidfd_getfd(r3, r0, 0x0) ioctl$XFS_IOC_ERROR_INJECTION(r3, 0x40085874, &(0x7f0000000100)={r4, 0x40}) 7m40.605361614s ago: executing program 4 (id=4977): r0 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000300)=[{0x18, 0x110, 0x1, 'd\x00'}], 0x18, 0xffffffff}, 0x0) 7m40.602431403s ago: executing program 4 (id=4980): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r1) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x2, 0x9}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0xffff, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xf4, 0x0, 0x4, 0xb, 0x3}, 0x31}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r5, 0x18}, 0x80, &(0x7f00000034c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005004024c10200000001125ce882cbf400930bf4533f", 0x20}, {&(0x7f00000022c0)="ffc9ace87aade11690dd52a158", 0xd}], 0x2}, 0x8000) 7m38.077926399s ago: executing program 4 (id=4986): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/pci/devices/0000:00:00.0/driver_override\x00', 0x2, 0x0) write(r0, &(0x7f0000002480)="7666696f2d7063691e448b9a54b0b9be7cc4b354ce7e70dc594f756b368cf8a599cd0ba7620a", 0x26) (async) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000800)={0x0, 0x0, 0x80, 0x2, 0x28a}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_RECV_ZC={0x3a, 0x7, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x0, 0x0, {0x0, 0x0, 0x8001}}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000380)=0xe9) (async) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xfffffffffffffffd, 0x8}) r6 = getpgid(0xffffffffffffffff) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x64, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x3, 0x6e8, 0x0, 0x0, 0x1000, 0xffffffff, r6, 0x0, 0x80}}}, &(0x7f0000000080)) (async) rt_sigsuspend(&(0x7f0000000180)={[0xbc]}, 0x8) 7m37.158262618s ago: executing program 4 (id=5000): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x1c7080, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0xb, r2}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x4c80, &(0x7f0000000140)={0x0, 0x9b87, 0x810, 0x3, 0x9e}, &(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000040)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xd, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r5, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) splice(r3, 0x0, r4, 0x0, 0x10500, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x2, 0x0) r6 = syz_clone(0x4060000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r7, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) ptrace(0x4206, r6) ptrace(0x4208, r6) ptrace(0x4207, r6) ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)) 7m36.978365321s ago: executing program 4 (id=5004): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0x15, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x30000}, [@ringbuf_output={{0x18, 0x5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x255fdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x2, 0xb}, {0x1, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c3fd3fc1411a8884788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 7m31.858010367s ago: executing program 35 (id=4961): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./myproc/interrupts\x00', 0x0, 0x0) read(r0, &(0x7f0000000340)=""/1003, 0xfdef) 7m21.489721415s ago: executing program 36 (id=5004): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0x15, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x30000}, [@ringbuf_output={{0x18, 0x5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x255fdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x2, 0xb}, {0x1, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c3fd3fc1411a8884788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 6m35.43503102s ago: executing program 8 (id=5440): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000)={0x2, 0x3}, 0x2) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000540)='\x04\x00\x00\x00\x04\xb0\xfe\x98\x9a\xf2T\xde8s]q\xc7!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}h\xc6\x0e\xd9\v\xda\xbf\xc5\xfets\x9c\xf9C\xca\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x4703d2d, 0xfffffffd, {0x60, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0x0, 0xfff8}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='gadgetfs\x00', 0xc94, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r5, &(0x7f0000001300)=ANY=[@ANYBLOB="10000000f1000300", @ANYRES8=r5], 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x4040034}, 0x4c802) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x4, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) 6m32.989826495s ago: executing program 8 (id=5456): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x2, 0x9}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'}) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, 0x0, 0x8000) 6m32.677825432s ago: executing program 8 (id=5465): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) (async) r1 = memfd_secret(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) chdir(&(0x7f0000000140)='./file1\x00') r2 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0xc0089364, &(0x7f0000000180)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000008, 0x11, r1, 0x0) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) (async) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x10, &(0x7f0000000080)={0x3}) (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000100)={0x2, @meta={0x43465052, 0x2e8a4677, 0x4db9, 0x8978, 0x789faf77}}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x13, &(0x7f0000000200)=0x1, 0x4) (async) r5 = accept4(r0, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r5) 6m32.676291012s ago: executing program 8 (id=5473): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x2, 0x9}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'}) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, 0x0, 0x8000) 6m30.386884341s ago: executing program 8 (id=5475): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'wg0\x00'}) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000240)=0x8, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) sendmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000600)="aac93da63bc0d4ca72", 0x9}], 0x1}, 0x40) recvfrom(r1, 0x0, 0x0, 0x99bcb88de02507f2, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={r0, &(0x7f0000000000)='\x00 ', &(0x7f0000000600)=@udp=r2, 0x2}, 0x20) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r4) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r5, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xbf}], 0x1, 0x182, 0xffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)}, 0x20) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, r7}, 0x14) syz_emit_ethernet(0xd81, &(0x7f0000000700)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xd4b, 0x2b, 0x0, @private2, @local, {[], {0x2100, 0x0, 0xd4b, 0x0, @gue={{0x2, 0x1, 0x3, 0x6, 0x100, @val=0x80}, "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"}}}}}}}, 0x0) 6m30.316564606s ago: executing program 37 (id=5475): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'wg0\x00'}) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000240)=0x8, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) sendmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000600)="aac93da63bc0d4ca72", 0x9}], 0x1}, 0x40) recvfrom(r1, 0x0, 0x0, 0x99bcb88de02507f2, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={r0, &(0x7f0000000000)='\x00 ', &(0x7f0000000600)=@udp=r2, 0x2}, 0x20) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r4) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r5, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xbf}], 0x1, 0x182, 0xffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)}, 0x20) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, r7}, 0x14) syz_emit_ethernet(0xd81, &(0x7f0000000700)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xd4b, 0x2b, 0x0, @private2, @local, {[], {0x2100, 0x0, 0xd4b, 0x0, @gue={{0x2, 0x1, 0x3, 0x6, 0x100, @val=0x80}, "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"}}}}}}}, 0x0) 6m9.815534995s ago: executing program 9 (id=5584): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') pread64(r1, &(0x7f0000019200)=""/102400, 0x19000, 0x1000000000) r2 = socket$tipc(0x1e, 0x2, 0x0) keyctl$join(0x1, 0xfffffffffffffffd) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x2001, 0x4, 0x1}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r4, 0xc23, 0x70bd2a, 0x0, {{}, {}, {0x14, 0x19, {0x8, 0x1, 0xfffffffd, 0x8}}}}, 0x30}, 0x1, 0x0, 0x0, 0x48014}, 0x4080) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000000)={0x10, 0x24, 0x1, 0x16, 0x3, 0x20, 0x5, 0xda, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_USER_PORT_KEY={0x6, 0x19, 0x4}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004815}, 0x0) 6m9.697131235s ago: executing program 9 (id=5585): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8}}}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x200000}}], 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00)=0x0) nanosleep(&(0x7f0000001a00)={0x5}, &(0x7f0000001a40)) r9 = getpid() syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r9}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) nanosleep(&(0x7f0000001a80)={0x5}, &(0x7f0000001ac0)) r10 = syz_open_dev$ublk_bdev(&(0x7f0000003000), r5, 0x0) pread64$ublk_bdev(r10, &(0x7f0000005000)=""/4096, 0x1000, 0x0) syz_ublk_process_io(r8, 0x0, 0x1, &(0x7f0000000e00), 0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000f00)=@ublk_stop_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207507, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5}}) io_uring_enter(r1, 0x0, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000001000)=@ublk_del_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5}}) io_uring_enter(r1, 0x0, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) 6m8.71752481s ago: executing program 9 (id=5598): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x1000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_expedited', 0x40082, 0x509cb86664327f4) r2 = fanotify_init(0x81, 0x40000) fanotify_mark(r2, 0x105, 0x30, r1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x10002, 0x6, 0xdddd1000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="602200004400010029bd7000040000000200000004004880482201"], 0x2260}, 0x1, 0x0, 0x0, 0x4040994}, 0x20008814) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r3, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x2}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {}, @connect={{0x2, 0x3}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0x9}, {0x0, 0x8}, {0x5}, @control={0x0, 0xfffffffc}}, {0x0, 0xfc, 0x0, 0x0, @time, {0x1b, 0x1}, {}, @ext={0x0, 0x0}}], 0x70) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4}) ioctl(r4, 0x8b1a, &(0x7f0000000040)) 6m8.716416457s ago: executing program 9 (id=5602): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b4"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x17}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x7800, 0x700, 0xe52, 0x9, {{0xc, 0x4, 0x2, 0x1, 0x30, 0x68, 0x0, 0xba, 0x2f, 0x0, @multicast1, @rand_addr=0x64010100, {[@rr={0x7, 0x17, 0xd3, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3a}, @local, @remote]}, @timestamp={0x44, 0x4, 0x7b, 0x0, 0x9}, @noop]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x7800, 0x700, 0xe52, 0x9, {{0xc, 0x4, 0x2, 0x1, 0x30, 0x68, 0x0, 0xba, 0x2f, 0x0, @multicast1, @rand_addr=0x64010100, {[@rr={0x7, 0x17, 0xd3, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3a}, @local, @remote]}, @timestamp={0x44, 0x4, 0x7b, 0x0, 0x9}, @noop]}}}}}) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@ifindex=r1, r0, 0x31, 0x8, 0x0, @void, @value=r2}, 0x20) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000880)={r9, @in6={{0x2, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4}}, 0x8000, 0x6}, &(0x7f0000000300)=0x90) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000880)={r9, @in6={{0x2, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4}}, 0x8000, 0x6}, &(0x7f0000000300)=0x90) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="3183a100000000000000190000000c0001800800030001000000"], 0x20}}, 0x40010) ioctl$FBIO_WAITFORVSYNC(r3, 0x40044620, 0x0) (async) ioctl$FBIO_WAITFORVSYNC(r3, 0x40044620, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='.\x00\x00\x00\x00\x00\x00\x00Y\x00\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) madvise(&(0x7f0000e95000/0x4000)=nil, 0x4000, 0x12) r11 = syz_open_dev$evdev(&(0x7f0000000280), 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000001540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c662181c276789f7d302e9b5b00602473636f56746578743de470a8154611b432b64d73766166665f752c00"]) ioctl$EVIOCGBITKEY(r11, 0x80404521, &(0x7f00000002c0)=""/202) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close_range(r10, 0xffffffffffffffff, 0x0) (async) close_range(r10, 0xffffffffffffffff, 0x0) 6m8.61753767s ago: executing program 9 (id=5607): syz_emit_ethernet(0x46, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb763e", 0x10, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x41}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5, 0x2}}}}}}, 0x0) 6m8.076478479s ago: executing program 9 (id=5619): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = accept4$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14, 0x800) shutdown(r3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010001fff000000008000000000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="14005d800b0201000280829097c6d090f7fc94b4094512fc63c2644b663a9f2e78590f708dc333a9a979c8"], 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40800) 6m8.00672903s ago: executing program 38 (id=5619): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = accept4$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14, 0x800) shutdown(r3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010001fff000000008000000000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="14005d800b0201000280829097c6d090f7fc94b4094512fc63c2644b663a9f2e78590f708dc333a9a979c8"], 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40800) 3m10.705731269s ago: executing program 6 (id=7302): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/tty/ttyS0/console\x00', 0x2, 0x0) (fail_nth: 29) 3m10.626878348s ago: executing program 6 (id=7303): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000220a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a312000000038000000030a01040000000000000000010000010900010073797a30000000000c000240000000000000000109000300030000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 3m10.506560203s ago: executing program 6 (id=7305): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000700)="0000000000000000003b9ac9ff00"/26, 0x1a) 3m10.416496521s ago: executing program 6 (id=7307): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x1, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x1) setsockopt$inet6_int(r2, 0x29, 0x100000000001f, &(0x7f0000000180)=0x1, 0x4) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)={0x54, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc}, {0xc}}]}, 0x54}}, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000100)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r3, 0x0, 0x70bd26, 0x25dfdbfc, {}, ["", ""]}, 0x1c}}, 0x0) 3m10.316005166s ago: executing program 6 (id=7312): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x30140, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffc}, 0x9) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000fffe00010affffa42c0000000080000000"], 0x14}}, 0x10) setsockopt(r1, 0x3, 0x8, &(0x7f0000000180)="d736edf45371efc9fb5fb974a216faf8e7f81e63cf6f17b637", 0x19) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000810500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1c00080009000100626f6e64000000000c00028005001004070000000000ecff00000000"], 0x3c}, 0x1, 0x0, 0x0, 0x22004002}, 0x4040800) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000000c0)=@x86={0x2, 0xfb, 0x80, 0x0, 0x4, 0x6, 0x2, 0x0, 0x4, 0x8, 0x10, 0x3, 0x0, 0xfffffff8, 0x8, 0x4, 0x6, 0x8, 0x0, '\x00', 0x0, 0x7}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f00000001c0)=0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000140)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r7, 0x6, 0x3, 0x0, &(0x7f0000000040)) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xf9, 0x40, 0x42, 0xfb, 0x0, 0xc, 0x0, 0xfb, 0x4, 0xfc, 0x38}}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x2, 0x6, 0x100000000008, 0x20, 0x3, 0x3, 0x80000000106c, 0x100, 0x9, 0x4, 0x1c00000, 0x6, 0x0, 0x8, 0x0, 0xd], 0x1, 0x3c4610}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000012002df8001c00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00.'], 0x28}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r8 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r8, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004051}, 0x8000) ioctl$KVM_RUN(r6, 0xae80, 0x0) r9 = fsopen(&(0x7f00000000c0)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r2, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) ioctl$KVM_RUN(r10, 0xae80, 0x0) 3m8.676642539s ago: executing program 6 (id=7323): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000001, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x1, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x7, 0xfffffffd, 0x5}, {0x8, 0x3f000000, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0x0, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x0, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x5, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x9, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x8, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x8, 0x1, 0x1ff, 0x40}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0xfffffffb, 0xeac}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x10000, 0xffffffff, 0x4, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0x2}, {0x7, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0xffff, 0x9, 0x44, 0xc, 0x1}, {0x6, 0x10, 0xf, 0x80002, 0x6, 0x44}, {0xf23, 0x3ff, 0x0, 0x4000009, 0xffffffff}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x400, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x1}, {0x3, 0x7, 0x4, 0x4, 0x1c716ddc, 0x2}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x6f}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x2, 0x1000, 0x9, 0x9}, {0xe, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0xe3f6, 0x8, 0xfffffff7, 0x1, 0x6, 0xc}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f1, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x7, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0xb, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x2, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x3, 0x5, 0x3ff, 0x3649}, {0x800007, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc5, 0x3, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x4, 0xfc, 0x7, 0x6, 0x10}, {0xf, 0xfffffffe, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0x10001, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0xa, 0x7, 0x9, 0x10, 0x1}, {0x5, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x94, 0x4, 0x40000088}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0x5, 0x7, 0x5, 0x2, 0x1ff, 0x80000001}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x10000007, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x5, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x3, 0x3, 0x6, 0x800, 0x7}, {0x0, 0x0, 0x3, 0x2, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0xc851, 0x3}, {0x6, 0x731, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x0, 0x9, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x3, 0x40, 0x2}, {0x1, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x5a, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x800}, {0x61, 0x29, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x8, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x3, 0x4, 0x2, 0x1, 0x3, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x9, 0xe61, 0xc5c3, 0x3, 0x1}, {0x4, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0x40ce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0xcf}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0x4}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4}, {}, {0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x1, 0x1}, {0x4}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {}, {}, {0x2}, {0x5, 0x1}, {}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x800) 3m8.562889157s ago: executing program 39 (id=7323): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000001, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x1, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x7, 0xfffffffd, 0x5}, {0x8, 0x3f000000, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0x0, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x0, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x5, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x9, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x8, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x8, 0x1, 0x1ff, 0x40}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0xfffffffb, 0xeac}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x10000, 0xffffffff, 0x4, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0x2}, {0x7, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0xffff, 0x9, 0x44, 0xc, 0x1}, {0x6, 0x10, 0xf, 0x80002, 0x6, 0x44}, {0xf23, 0x3ff, 0x0, 0x4000009, 0xffffffff}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x400, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x1}, {0x3, 0x7, 0x4, 0x4, 0x1c716ddc, 0x2}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x6f}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x2, 0x1000, 0x9, 0x9}, {0xe, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0xe3f6, 0x8, 0xfffffff7, 0x1, 0x6, 0xc}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f1, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x7, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0xb, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x2, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x3, 0x5, 0x3ff, 0x3649}, {0x800007, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc5, 0x3, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x4, 0xfc, 0x7, 0x6, 0x10}, {0xf, 0xfffffffe, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0x10001, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0xa, 0x7, 0x9, 0x10, 0x1}, {0x5, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x94, 0x4, 0x40000088}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0x5, 0x7, 0x5, 0x2, 0x1ff, 0x80000001}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x10000007, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x5, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x3, 0x3, 0x6, 0x800, 0x7}, {0x0, 0x0, 0x3, 0x2, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0xc851, 0x3}, {0x6, 0x731, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x0, 0x9, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x3, 0x40, 0x2}, {0x1, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x5a, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x800}, {0x61, 0x29, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x8, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x3, 0x4, 0x2, 0x1, 0x3, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x9, 0xe61, 0xc5c3, 0x3, 0x1}, {0x4, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0x40ce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0xcf}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0x4}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4}, {}, {0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x1, 0x1}, {0x4}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {}, {}, {0x2}, {0x5, 0x1}, {}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x800) 1m34.604511231s ago: executing program 0 (id=8612): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1c, 0x3b, 0x1, 0x70bd27, 0x25dfdbfd, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48c1}, 0x20040010) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x2, 0x200}, 0xc) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, 0x0}], 0x1, 0x6d, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xfffffffffffffe3f}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x13, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x1}) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xc, 0xb}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x8}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 1m34.322528519s ago: executing program 0 (id=8619): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x6) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000003800)={0xf, {"a2e3ad21e08eeb661b5de00987f70e06d038e7ff7fc6e5539b0d650e8b089b3f353b6e090890e0878f0e1ac6e7049b3b43959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07410936cd3b78130daa61d8e8041800005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb0200000000000000aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82fb3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870900000000000000ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491230600000000000000e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d0bfa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d868420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0005000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276fbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3070054da9a050000004e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d49ffdac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c0150730100020000338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b5e3576a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd72583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eafb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f17b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607cbac2a3559ad4f75461f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd5644462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7d80965eae5c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f1900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e33319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de01bab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da2f8000005900000000d80a4fe654578376e599aff3565b1d531f30912b9945032681ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0ea8953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0009000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd9d884836174faf1aa6fcd3febe21a472ed3bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b8a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000002eec082d62b58df000000000000000000000000000000000000000000000000000100", 0x1000}}, 0x1006) socket(0x40000000015, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r7) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002940)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd25, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x7, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x6}, {0x3, 0x0, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x1ff, 0x2, 0x20487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xffffffff, 0x6, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x3, 0x2008, 0x7fff, 0x4, 0x8, 0x6}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0x3, 0x2}, {0x0, 0x3, 0x2, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0x80000e, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x102}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x7fff, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x1000007, 0x5, 0x2, 0x3}, {0x1, 0x32158140, 0x2ed5, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffff7, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x6, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0x8c7, 0x4, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0xbb, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x2d, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x20007fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x405, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0xffffffff, 0xb, 0x9}, {0x8, 0x4, 0x1, 0x100, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x4, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x18, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x9, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb5, 0xe, 0x3, 0x7e8, 0x6, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0xb0, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x68}, {0x7, 0x20, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0x400, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0x101, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x1, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x1000, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x1}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x0, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x2, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0xb}, {0x47, 0x6, 0x8936, 0xdcb, 0x3, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xffe, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7ff, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x20003, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {}, {}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6, 0x1}, {0x2}, {0xb82e57098c7a44e9}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r8, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r6, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)='k', 0x14}], 0x1}, 0x20000885) 1m34.076385828s ago: executing program 0 (id=8623): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x2, 0x9}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0xffff, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xf4, 0x0, 0x4, 0xb, 0x3}, 0x31}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r6, 0x18}, 0x80, &(0x7f00000034c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005000024c1020000ff88125ce882cbf400930bf4533f", 0x20}, {&(0x7f00000022c0)="ffc9ace87aade1", 0x7}], 0x2}, 0x8000) 1m33.836483314s ago: executing program 0 (id=8633): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x240002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000002000000", @ANYRES32=r3, @ANYBLOB="0000000000400000000000000080"]) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6_vti0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000120005ff00000400040000000000004a", @ANYRES32, @ANYBLOB="040000000380020008002e"], 0x50}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) sendmmsg$inet(r5, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r5, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000140)={@empty, @dev={0xac, 0x14, 0x14, 0x37}, 0x1, 0x4, [@multicast2, @remote, @empty, @remote]}, 0x20) r6 = socket$kcm(0x2, 0x3, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x20, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080200000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r7], 0x24}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x0, 0x3}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x300, 0x0, 0x0, 0x89, 0x0, @rand_addr, @empty}, {{0x4, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x2}}}}, 0x36) 1m33.757479375s ago: executing program 0 (id=8638): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/tty/ttyS0/console\x00', 0x2, 0x0) write$eventfd(r0, &(0x7f0000000040)=0x731, 0x8) 1m33.385655669s ago: executing program 0 (id=8642): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3d86dd602100000014040000000000000000000000000000000000fe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYBLOB], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x2f, 0x9, 0x70bd25, 0x3000000, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @u32=0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42014}, 0x4080040) 1m33.302648732s ago: executing program 40 (id=8642): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3d86dd602100000014040000000000000000000000000000000000fe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYBLOB], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x2f, 0x9, 0x70bd25, 0x3000000, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @u32=0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42014}, 0x4080040) 1.98040759s ago: executing program 1 (id=9395): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x70bd26, 0x25dfdbff, {{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x44}, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x2f, 0x0, 0xffffffffffffffff}, {@in=@remote, 0x4d2, 0x33}, @in=@remote, {0xfffffffffffffff8, 0x3, 0x3ec, 0x80000001, 0x7, 0x6, 0xe, 0x8}, {0xe374, 0x0, 0x6, 0xf377}, {0x7f, 0x0, 0x2}, 0x70bd2c, 0x3504, 0x2, 0x2, 0x2}, 0xfffffffc, 0x1b1d}}, 0xf8}, 0x1, 0x0, 0x0, 0x4004000}, 0x40040c0) 1.979851557s ago: executing program 1 (id=9397): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000007000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a312000000038000000030a01040000000000000000010000010900010073797a30000000000c000240000000000000000109000300030000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 1.831066163s ago: executing program 1 (id=9399): syz_emit_ethernet(0x0, 0x0, 0x0) mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in6=@mcast2, 0x4e20, 0x4, 0x1, 0x0, 0xa, 0x60, 0x80, 0x8, 0x0, 0xee01}, {0x0, 0x402ce3e, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x9d4, 0x0, 0x100}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) (fail_nth: 4) 1.760410144s ago: executing program 1 (id=9403): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0x4}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40050}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd700000ff8c000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000cac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.710049077s ago: executing program 1 (id=9405): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000002100010326bd7078fadbdf2505"], 0x14}}, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000401000beca05310400000000000937a9acd048c600000000000000", @ANYRES32=0x0, @ANYBLOB="000100000000000010001280080001007369740004000280"], 0x30}}, 0x0) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r4, @ANYBLOB="0800c300741300000800c400010000000400c5"], 0x30}}, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f00000001c0)={r0, &(0x7f0000000040)='#$$\x00', 0x100, &(0x7f0000000080)={@_ha_fsid={[0x8, 0x7]}, {0xed46, 0x3}}, 0x2, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)}) write$UHID_INPUT(r5, &(0x7f00000010c0)={0x8, {"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", 0x1000}}, 0x1006) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) open_by_handle_at(r8, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000fe"], 0x1) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(r9, 0x10f, 0x7f, &(0x7f0000000300)=0x1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000000)='yeah', 0x4) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 1.657915518s ago: executing program 1 (id=9407): fsopen(&(0x7f0000000000)='ceph\x00', 0x0) (async) r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='0.0.0.0:0:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='ms_mode\x00', &(0x7f0000000100)='crc\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='ms_mode\x00', &(0x7f0000000100)='crc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='mount_timeout\x00', &(0x7f0000000180)='1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x7041, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000005000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000005000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000380)=""/100, &(0x7f0000000400)=0x64) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000002c0)={0x0, {{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, '\x00', 0x22}}}}, 0x88) 1.538384656s ago: executing program 7 (id=9408): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000700)="000000000000010500"/27, 0x1b) 1.537050982s ago: executing program 7 (id=9410): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x255fdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x2, 0xb}, {0x1, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c3fd3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x3f, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.320914703s ago: executing program 7 (id=9412): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) r2 = fsopen(&(0x7f0000001400)='udf\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='iocharset', &(0x7f0000000180)='iocharset', 0x0) close(r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r3, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x25, 0x5}) fcntl$lock(r3, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x2, 0x9}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0xffff, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xf4, 0x0, 0x4, 0xb, 0x3}, 0x31}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r6, 0x18}, 0x80, &(0x7f00000034c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005000024c1020000ff88125ce882cbf400930bf4533f", 0x20}, {&(0x7f00000022c0)="ffc9ace87aade11690dd52a158e0", 0xe}], 0x2}, 0x8000) 1.146586583s ago: executing program 7 (id=9418): syz_emit_ethernet(0x0, 0x0, 0x0) mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) 1.140167569s ago: executing program 7 (id=9421): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x400]}}) ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f0000001040)) chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) capset(&(0x7f0000010000)={0x19980330}, &(0x7f0000000140)={0x2, 0x0, 0x8001, 0x3, 0xfffffff9, 0x200800}) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd23, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xc, 0xc}, {0x0, 0x9}, {0xa, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f00000010c0)=0xffffffffffffffff, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000100001000000000000000000bd00000a28000000000a010300000000000000000100000008000240000000030900010073797a310000000054000000030a01020000000000000000010000000900030073797a300000000028000480080002400000000008000140000000051400030076657468315f6d6163767461701a00000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xf0}}, 0x0) r6 = dup(r1) r7 = fsopen(&(0x7f0000001000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)=r6}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x3, 0x1, 0x0, 0x11, 0x0, 0x0, [{}]}]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x35}, 0x20) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000480)={'ip_vti0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x10, 0x21, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @exit, @call={0x85, 0x0, 0x0, 0xa7}, @map_val={0x18, 0x6, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x3}, @alu={0x7, 0x1, 0x0, 0x4, 0x3, 0xfffffffffffffff4, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='GPL\x00', 0x4, 0x8d, &(0x7f0000001100)=""/141, 0x40f00, 0x33, '\x00', r10, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0x7, 0x1, 0xe}, 0x10, 0xffffffffffffffff, r6, 0x9, 0x0, &(0x7f0000000540)=[{0x3, 0x5, 0xf, 0x3}, {0x1, 0x3, 0x3, 0x1}, {0x4, 0x4, 0xd, 0x2}, {0x2, 0x1, 0x6, 0x5}, {0x5, 0x2, 0xe, 0x1}, {0x3, 0x4, 0xc, 0xa}, {0x3, 0xfffffffd, 0xf, 0x8}, {0x5, 0x5, 0x107, 0xf}, {0x3, 0x2, 0xc, 0x3}], 0x10, 0x3}, 0x94) write$UHID_INPUT(r6, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x40400, 0x0) 945.306184ms ago: executing program 2 (id=9422): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'veth1\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000700)="ffffffffffff0011223344554305000f32000000000100112233445500112233445500ff0000", 0x26, 0x0, &(0x7f0000000800)={0x11, 0x300, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000a80)=ANY=[@ANYBLOB="3400000011000500000000000000000000ffff00", @ANYRES32=0x0, @ANYBLOB="000000000000000014000300626174616476300000000000000000007d6c73db27a08975c65cdf3b611077c197f8a9a0a0bf93f74bd696070e4265c41f5fe3a512339be8457660b7e91def081da0ce64817224a9c12d93daedfc"], 0x34}}, 0x0) 895.471955ms ago: executing program 7 (id=9425): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x542, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20004880, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) sendmmsg$inet(r1, &(0x7f0000003680)=[{{&(0x7f0000000080)={0x2, 0x4e1e, @multicast1}, 0x10, 0x0}}], 0x1, 0xc044) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) write$binfmt_misc(r1, 0x0, 0x0) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)=')', 0x1}], 0x1, 0x2, 0x0, 0xa1) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x0, 0x0}, 0x8) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r5, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r6, r4, 0x4}, 0x10) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) futex(&(0x7f0000000180), 0x5, 0x0, 0x0, &(0x7f0000000000), 0xaffffffa) r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/tty/ttyS0/console\x00', 0x2, 0x0) r8 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r8, 0xc008561c, &(0x7f0000000100)={0x9e0901, 0x3, @name="6c14f9104c575323652bb05c9764e27d0235e28510452c132c1eaa54d11e47a7"}) write$eventfd(r7, &(0x7f0000000040)=0x731, 0x8) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) ioctl$COMEDI_LOCK(r0, 0x6405) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r10, {0x0, 0x4}, {0xffff, 0xffff}, {0x7, 0xffe5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0x0, 0x4}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x20004014) recvmsg(r7, &(0x7f0000000700)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000340)=""/149, 0x95}, {&(0x7f0000000440)=""/15, 0xf}, {&(0x7f0000000480)=""/206, 0xce}, {&(0x7f0000000580)=""/60, 0x3c}, {&(0x7f00000005c0)=""/131, 0x83}], 0x5}, 0x80000083) 843.252307ms ago: executing program 2 (id=9426): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x4008090) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x20040084) syz_emit_ethernet(0x844, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a6080e0000fc020000000000330000000000000000fe8000000000000000000000000000aa223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3f520ad6e9be698eaa9bf5b939ce09919c9485c4725690ee2483315829a196f85a5ae552ebe19a2d6768ce2a6bf60fbb53104c7919b7cf28fa555fc9460df11e72eddebb2fc4eb6f83b16e0d65307e4210dfc209f0c68df65b57f420fd215546b798af6b6ab7bfb2fe6bd6142f877852717370b1ca39d199c149c3ead97c4e16229ce4c08a111a0fc64651c21e9174dd72442a9ae2a42d9433c7b54c8dd4b59203f9a2e227e9b043eb430e606cf98f3428ac8511948dd553bc0728c0626fbda71bd2a1d734d605e27bdb0be93b7b91284689e31fccb70c15f2c39da9011c84d36fe4b4b36ff26e45a34685fc638dbdaa068a3d3d4f5d44b74afc0fc7956e5fcc3fe405ac6d292d1d90f257f18fe14a3192d28ed369956aa2f91f9fee773cf7fb5d90705347eeadc1af86de78a498fa1a20e5b3f481a0595769654d969299506d8ffbc172a7fb9453a8a3787e80b167936863f2cc16c1d03481bd40e1abcf87a292559771572136932bf30e48174012a1d4d5f138f93140af2ceb9c821c7966ea7592d762975b5b33ef141b6b91eb388c91b924945c3231d0f299adb5a36e0c95a17872e7ebf0bc0e33baf5c46f9e2087b77bad0794d519ce7bc8674a70f3545d020454ded22f164185df3b4f952b132947b75333993fd73a6bac5836dd5720e559bcb82a4926734c5c3b1287c5fec219a99f71eb398430001f007306e9232c269c2886357f75d935e8de054341ac36f1df1fc77fbc347d90660f4d5658cfeb9e289f70968a7c0b38ae34c4bfa46b47964e223ac34f472e3231e8c285add5713592c76c062c3477beb55b279846f04f8d6a5ce2743c6a2020f0c5164953b8dca7e57239dc8a7f507bcf77767ab0b4602437171a09c8e80f5a165c4c37eaae386cfcb927dd1a935fa717fa1608792b34bafbc20cf11a678455894ede62788309ab7a7075535847a2b48260a613e521b01d75648263ad78e6176528dbf3e6c4e4d72066e617be5387183a51dd97d2e846c5d173b51e17a4c8d78a49c914cbe44236c52c78de45b44f9d80bc6f77c75135922a84579bce77baa71311889f5b7b90c5124b8298d5e9c81c442d60df00795854d3213a1ac254c8963c109f68b3ff5451c381f6fb56c116f86b71f988d1e9f732280cbf3d4e9791fefc4bdec5dc293fb77b02d5aab6bd8cd179b7e425126b7f78c0d004bc6470ecc2bbc422bd06a6bd8f717009509e6a88b01347b7a62b9dea6f7a7446a371f422499a6e66eeb6a7b0beb4a86a61f875a9bfe0f5d5f0d0e4c85852afaea97d74ebc80d6491a8a1c998c4b5bc34b3edaeba2df902cd5e14e016720e6c3c8b15287b2471c34251e26dc442720cd5d984e30b110b7370f233f865b9ac129fdf49ff02b303d7d4f91039d3bb58a9d64d7a72d8b8eba6b45a000370d4f0e9c0d411768441372e7112e5d4e7d70a9d6b428b8b85ee6209d6f73e7b024740c052166deeb843e4ab78d1d354d75a5827ff0d49d8964e75785f3594c7299c0917b48f3b2efb81a4c3a7d6e0f1cf50efe0360963c2e3ee390ed2a4c39f42e856eced0f2ee7beacd2ecbece493e911ca0460584323ea6d4a0c00864693c979cae38f0c5841bfaeebf609d1075163c120fea0bd0207d2dd07e5e2e0a5afe3efee0ee6bb9a926a8dba7a27a82c5421a5b20bfb5dbdef532a12435fcd899f15603209831711e0dcfaaf2104b2016f087fce44848c70b65a34b9be83df2064391fc5a8d169dc1943d226e57ab5ba06c656273d4efba73a8a61aae19df4d2445f3ce7e649af1b4ffc86106c9092ddd0aafeb45653d181cb32b06a1dd41573495f15c3b8c0019ba72a2eb163dfcbdbb235322ae27d7116af506f295c2424ab9191aa8ce0e4617b212af21983f8d2b19d7fdeec881f6fa448acc7c3e133b6f281583fad4467c05801e69"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1400000010"], 0x7c}}, 0x0) socket(0x2c, 0x5, 0xfffffff8) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB='\v\x00\x00\x00'], 0x119) pipe(&(0x7f0000000880)={0xffffffffffffffff}) setsockopt$inet_tcp_int(r3, 0x6, 0xc, &(0x7f0000000900)=0x4a66, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x3ffe, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x488cc}, 0x0) 785.258989ms ago: executing program 2 (id=9428): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x6) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00fe0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 785.080993ms ago: executing program 5 (id=9429): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfffffffffffffff9, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="b8000000100021040000009efedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000009000128009000100766c616e00000000800002800c0002000e0000000a000000340004800c00010017900000020000000c000100f04ae965cb0b00000c00010004000000002000000c000100001000000900000006000100020000000c0002000a0000000c000000280003800c00010008000000090000000c00010009000000030000000c000100090000000080000008000500", @ANYRES8=r0], 0xb8}}, 0x2) 683.417484ms ago: executing program 5 (id=9430): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@mcast2, @in6=@mcast2, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xfffffffffffffff7, 0xc, 0x0, 0x4000000000006, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1, 0x1}}, 0xb8}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6014d71800140600fe80000000f5000000000000000000aafe80000d"], 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 681.768679ms ago: executing program 5 (id=9432): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000700)="000000000000003b9ac9ff00"/26, 0x1a) 581.739432ms ago: executing program 5 (id=9433): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x400]}}) ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f0000001040)) chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) capset(&(0x7f0000010000)={0x19980330}, &(0x7f0000000140)={0x2, 0x0, 0x8001, 0x3, 0xfffffff9, 0x200800}) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd23, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xc, 0xc}, {0x0, 0x9}, {0xa, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f00000010c0)=0xffffffffffffffff, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000100001000000000000000000bd00000a28000000000a010300000000000000000100000008000240000000030900010073797a310000000054000000030a01020000000000000000010000000900030073797a300000000028000480080002400000000008000140000000051400030076657468315f6d6163767461701a00000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xf0}}, 0x0) r6 = dup(r1) r7 = fsopen(&(0x7f0000001000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)=r6}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x3, 0x1, 0x0, 0x11, 0x0, 0x0, [{}]}]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x35}, 0x20) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000480)={'ip_vti0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x10, 0x21, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @exit, @call={0x85, 0x0, 0x0, 0xa7}, @map_val={0x18, 0x6, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x3}, @alu={0x7, 0x1, 0x0, 0x4, 0x3, 0xfffffffffffffff4, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='GPL\x00', 0x4, 0x8d, &(0x7f0000001100)=""/141, 0x40f00, 0x33, '\x00', r10, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0x7, 0x1, 0xe}, 0x10, 0xffffffffffffffff, r6, 0x9, 0x0, &(0x7f0000000540)=[{0x3, 0x5, 0xf, 0x3}, {0x1, 0x3, 0x3, 0x1}, {0x4, 0x4, 0xd, 0x2}, {0x2, 0x1, 0x6, 0x5}, {0x5, 0x2, 0xe, 0x1}, {0x3, 0x4, 0xc, 0xa}, {0x3, 0xfffffffd, 0xf, 0x8}, {0x5, 0x5, 0x107, 0xf}, {0x3, 0x2, 0xc, 0x3}], 0x10, 0x3}, 0x94) write$UHID_INPUT(r6, &(0x7f0000001c00)={0x8, {"b0476b76ba5d044f65271519727e4ff1ff0d12c0e6bdf3ea1f52e24f60ca698457b32832b83d7e96694c1feb5809bd67002f71e0b97c0d5270c04ffa64f63b2e18ee4b7b572fe2f4d03cad38bcd106ff12f53b443ac6fc81da518f54b9004a44859529c07a2b1b8feddc0180a0f37b13babba1dd0813b7ea56dac4b7ffe9a2ef54221439ecc55223ef2d40f4ba8108c10387ddffbaed25d41e7692bf26ddfa747a666caff49843e38c86cac7323f784a17df6beaa49c3f4a98fb4013f4e573e2ef77b0965d4bfbdf7d5eada69406ca93f422495e00addfca1518085a40f10284ff59388ecf476a12ef1a540163922098d600519ae8cf3ef544344e9d968f341af618503b455f3976b76975270e94d714302382c63de5b7c1fad1fa373b369916cb3b4d583a9ebbaeb262884d25a0e1d9fb141de60df7e64cb38b6f7167991f8fba06bffe2d49133bbb462cd8a9493177eee5f03875b15c7a92c3cd6a3fdfc64f236e14fa05a0e8d3c45f13eecd22e13528c74186dc50e0e2af44177e26bded1161e5533375508dadb83db5126cc810f4e30d4e24ec12c3b99e5220aacf42c58f2960bd43c337dbd318aeeb5c9a6cd5ffd3bf1497bb48ab7bcb32c9c33c9f5b9bc4645b96f23f9e0d826b780030444ffb925f55df587ef5ca5ea74ccd66afc7981da496d6f037efbb0b08f3f5078c60ffb4db18d1b59996bd9b1513442785bf4ece8587b39d8176dc9c735d5ea25133b2053bba227b81faab7220326f8814a9df4eba4ecc6acdd82f70b653b56a18cc9dfa4deb0a112c797ab89a51a103c3a9085d828523370c4d79d9484f4dc910735a2c9b5b85197cd9c073df7a54b40df8e1bf595bab957900c2a1a7dc40e88ed0c55c362ffbb7f88a0725a6ae73b936a639e951faf9c45ae74a2ece2f6f88e425ee41d2c60cb083a2fd6d07381908a7f629e32f89a553cf0794f54b8bdc7bd541d88464a4f80ac0b8b625a803a55de4b05a95fc7f8fc3d6d79858ccb269b7b8b21657654164a9aa29f4e8462377e9d234a41ea69841a4aaa1e5f89f9b074f6f71cb1ffaa450c3160b0e319ec81ad30101db66218b0c69f97c234465dc45849fcfd62d396f2b50ddcc0ed7dd8651431534232ab6d1186d7760770a1fc6c77553a79d0297194f794997ee47781094a76d9dccf632dcbb527b3e68950d9bb534245c7f08ae1d6ef2750292ae28e5e6dcfe2a69737dd7a1e453f3902ae90789e98c212905422099904d3bfb949bde187682a59c01aa8e6a9972a63d6aaef4d4139b10a24e063707f1aba79bd59e3f9709a873dff401d1f356c4be5e449ae0e2633a1fe50ed367fe56b0499957c3b6cabb42256547995ea998f3937d153897d1c83f1ad922d6835bdfa3b986dc6f4bd927a4ca13fbaa99b7b43758e2329d588f40fac718b16cca855468643f3818496b4915fe9a2bdd3e68889fea24bc1dfa6287a801d49a7bb84654147448550d2919e4df3a943a88cf616befea4e7a4fddb7969311c6837f9529966241be1e57ed2d773debc542986d09866905a3f63b6e1820086d52a70f039154e839da7ea852c33bf3722a048f61bbf068519e050b8788370fb130a42e9f5322dfff65b15d588f9e926b70e4530e8b66697cabb1e8514831431fa0eaecb49f9613ed5fd7bc50f897bda36d24d4296e143e2480e325ec09a77c03a07b4f86eb703085313ebeee94ef5b1cde3f6a7efd785772eb4034039f598c07819b769416a223fab824c4ac50086e78042a1ccf47b6c7ede8540cded4bd4c920ce6c2b7493a5634c5e96bb761373623ab473b121d555bfd5a8bc3f5c5418bed83ffd0d6492840550fccc0c35746370396d0190b7b1d2cadcc150877e0d197f692f97cec790c95e3d3959dc7c68aca37306c1bc13ad33848395dba5e3c9ce8090bc0e7e8312091773641be56411921e3d473321c6d8bd10b7d3f5aedd6620bcaa06474bbb298bc77297b8b5dcb9e6b33dbe676460cca825609857724cee245306d07fda287d5fe57c424c27cf9b6cf0f16d2c6a8071bd57c826d7371841cf43dab1b42421ce416d0d3a9c80bc807d2e6761e53f06b3e63c0af1b4548d820118421205f040f4ab35307871e4c7a21ff28082c29e02e89486064661898c0eb1811c70a6124c1f25d62c38794a3e87c312c870db7b60d0df8b57860c94d1a9c561b327fae3a68ce9ff4551e418eb00766f0341c5e796e3cbbbe6b4864928b966110256d5475eb1fd7b2893b60e19e859baaf23c9233a1b064771671ee2d07c151e2e99c37a116a338788052a726a8519b8335e9ff4f71d00ab634543c20ddea1bf57d4f2b797182ff19618b6974d2b69d9f052934d527a1830bf2785842f35eaf32b65b7c9fdd6f0c41756072a59c0cce0b7305740729f1daa14e0092da9d022321b726d658fcef55affa2bbf36ad788f1f423b7dfd328435b4d5df315143d8b8028ba4bea6134a3dc9720c73d5e66b8b8168752eea6b78c75f04efd9677dbe419f13f5e1c9764276a83821b710307d8f85359b34d038ff17de45e8739d4b647fd1a8d794a3273d922af3374f5d3c75b8345b9dfdabb2c0418a358921e0e73d0fe88caab1741b913673e22ff4b59afa0f653a423d9b2bb20cbf07951a349eea18a891b4f4dc6df8e42a6181284f643de5fd2924ae54f672a1920343476c67333e1e8205bf4877b1251a83f417936714edb1c6975ba7969d2fcc2e69024a4669ac2f998116ade1bd84568b8f3f1fccbe95df9ed21db77315b7469f30bfae418415d9cb5aeea627ba6811e30d56d4f4bfe5f794ea4243e3cdfad3ef55199699b8433083b6f72f95effc5f2f613cfcefaf0b94e801ebcb7095a1474ee93142b82c9bf9886617b6bf69d08c83c76cd21d4cce5872d99de8e54bbff915ab923b2d24bb3aa178dd50b44fd0eb880ef33ca51d4bf5f0fbc8ffe18afe4245397f277e4efad955baa10cf56613481253d69c02e7661714b68be0fd64f29bdafbc8b4a0b30bd6709c67fe8e8915d0479b3902b1d0169fb5486b02e966ad5d8a2bcf42ecba59177cd85e17239667f6b045d1f873ce24733ae17e2d8432709062e786a32ac925121f1b0d46c66d4fb9088f4aa0cfe2149f6c2cb5b75d45349bc88fbd47e01ea07e7cd573335aab8d389846566800dd084bc3caa95f7632719c651f2d33be0fb56347c063b3c6e3e75c5e58caeb4c37574859b78c1ed018fbeed788a4305a9ee1c1ef65a0c83a7cd717a8c08ecd4e86370ffffd6d40a89a0b1e8c15a10ad5406e867e49319ad83bfbb925d5e240b4bd44fd751e7510d5ea03a6cab95f37155d1fd69aaea1db4a1f53714eb90e669209cf634f84a50c85bdc51838ebbb545b4387790df67f0122740c2abc910cf83230394172a56c9ffda6675bb8bb39846730a1bf764aeb92407c90a194da880cb8a4efb5b57a8311d864209c7fd226b93582b6b11eec559abfbba653c0569c219d3a2e60555cb739f9d32d564f23c4e98be78aa553610822af426f961df0df2185c61ccaa22b2a6aa6fb3e917bdfb2be9c3ffb8a50821321119c4cf4917db39548abc17bfba267fa50f6af15c560a21055f967f1ca6f656ddb556f9c7e17a771eeef7e80940d1c14ddf2c27647686fd0526460036aeea395fb10abef2be2ea96c9bb380370c08d1568d30eea0f3e6b7cf8f7edc7b36d4d0affd249330707b54ee620f208d885791171eb67a25a80fcc6922e0258c9673b6576564949dfa5bed9a0299bf952aade654de16e22d54fcd391ded6adab94ff621efcd91ef69acf8dfa1b22692ba3e49cd1d3fbed6db1402065ab37e457056877977ebac33ef566f28a19b9acb67a9cc53feb156814e880b3dd5a9119ffdbc5a45c20ea375f2882575b9a28740eebf63f2895d9ffac1ec33cbdcdede98a201424d000df1efd64dd7268cc1b2366ccfb09754822dafdb1821de5e6ebee09608e82e679fafb7a5100172f26998d31d7f27c2b310f0372c3b5e888f8e6efb56074177bf6a2a5bbd9ed070ad5aaf23ce144d1ac86cad110e5916a8a57e1e7fc3d37353f84f2f6d43d92ab8b35040467f3f8b1d23fac021bbac3710edc8e2e26d794db38e48020f63e94d4b4dca3e015537a8e3008274d55f81af931a0faf1a438444b6a0489b93f7b88f81f761eae0f82e60cb0cf2745ca8c9e30d3cc189c1405b1994ed71b00d90ea7a94102916cdc915620c363d04e51eabaaca6c2814a7c1e7aaeec80bdc13135b813e6d0eea83446a5c57ec29695c302c0d8da65b61fe8ada51a36e1aff34d449f9eb70cb94931226121ab121a971c2fc070ca84272d122c1696f52fbd5ed06783abe188dcf133c4d41e10295f6ffda69fa8c5a7c0fec3425a2d60523a60d280b5ce34eac5911268172e772fefba63a6f5c6dafa9e500a5e1355fb614613f8fc1ef5e5466fa19212bcdc349a865f4cee6ea80b11a410bb6e4ad677393973e38621d25ff6c4876ef8a8d2ba651be4a78d2ba9fafadcea8eff9cca3f4ab71a0b84917794e521220dad099ac8aaf32abd162348879e4299e4d46395f9d55267b635e18ca2e2fc96146b96c8a8055130b8d8cb10cc31382df34057bd8637f86e48adc854af408226752a04df8d0362db263e0959f2bd7e8a4d33a8c4b257e19d308280baf40cced1b3cd3a86ee22df0da49d750539eee1104e99a9f8a065e5499c73125a8a8430eda7aee156821a97c237611b50f682a2cccd0969304f0a50ae98800dfb32ee1bcfeab98182c34a51e67fa5bd738c22c44fc1269ce73f464edd2f31296e92e62df51cf55798ae2e3c33c57b09f4ecd13469122095a3563f95f0a04cf58dcea4aed5e8bdda7617863cbc37a97ebadb46d679f7e30014d96d0ac7ce9484368fa5fd19cbc3d139410a2bd7ffacef1bdf76dd1d5f34d2392fcb91c7585fc1ae7d8ba2aa8ded9645d5a5e76e2279b6e0692101137da946dfbd3836476f5dad7fed70115d716dce87b5ad755e5653a709f5aa42265ec9657ed406cc9256af3628c0116b8e1d23306983e9adbc19dec354870c98e2e76566895df933a80c4c36b617db4bbda1a4ca7d6c80a43734471fc92d0bdeacfc125dddd73febd8f7ef84f221d52ae71372cee802d59013a15958e850f8fdf46d8fd3b874633daf3b1f346470456c05722258480959dd6afcffa1f3f2ca033011339c5cb85b7d1c9b5916fb8dc9c2783df64eb5cca5af83a74fe5bb259f93722842eb4ac851e71f3cfd67a39590e7f8e20f018744b9277e6eb46b5f211df5f767ef29dc9a972e14c40ea2d4624f187f301c1116d3a61adeb5c6f7ccc021ac5e18d8b40d7f1f19daf4445c06e72db8701c267c0144c92cddd49af7a87aca5aa05d0e380dd27cc780d2f7db3bef26cc4fd358543e19d73179b879f7bdc702ab405270c93a3ed64153e20b5b663773a2ad4e8e3e1e8eaf39ec80d75d02f74ff94f0e095240a564eeece4fc9bcf19bf2243c700e1dae14a1b0217013977bfa05f681abc37714fe462d0a632044ce52fdaa1c1a806b1eb4370e23ca0247e536165aa9f1c2af8adfea369ee1f4a2c7823a7baef028a1e77501db48db6aa0d7e30969f7197368db02d443803b53b2899315f7e2ba9c5ae952a3866b4ea60f3d669e0a91f7ef640cd938646bf8822fe455f0302fccf87c7fad6daf38fde038fa596b83a9fd5bf675669a6cb2bab44c6617f07950bf34edb93bbcb4174630f275dbda7a0631c4b456e5f80eb6258c1874e77d426743e478917fe44b73dc203baa2cc442b84b5818409abae99d97a28754969bd393df", 0x1000}}, 0xfffffe38) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x40400, 0x0) 581.524229ms ago: executing program 2 (id=9434): syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_ENABLE_HIGH_LNB_VOLTAGE(r0, 0x6f44, 0x7fffffffffffffff) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000880)=0x3) r2 = socket$kcm(0x11, 0xa, 0x300) recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 360.264196ms ago: executing program 2 (id=9435): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000005c00)=""/253, 0xfd}], 0x7}}], 0x1, 0x0, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000020900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$NFT_MSG_GETOBJ(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002200)={0x14, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x20}}, 0x14}, 0x1, 0x0, 0x0, 0x20040011}, 0x20040088) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r5, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="2d000e0080000000ffffffffffff0802110000000802110000000000000000000000000064000000250300000000000008002600b409"], 0x80}}, 0x0) ioctl$FIOCLEX(r1, 0x5451) 241.895279ms ago: executing program 5 (id=9436): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./sys/bus/usb/devices/usb5/bConfigurationValue\x00', 0x10001, 0x0) write(r0, &(0x7f0000000500)='0', 0x1) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x2, 0x805, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)="a5ce", 0xfed0) r4 = openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(r2, 0x0, r4, 0x0, 0xaaa, 0x9) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000007c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0xfffffffffffffff9, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="b80000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000009000128009000100766c616e00000000800002800c0002000e0000000a000000340004800c00010017900000020000000c000100f04ae965cb0b00000c00010004000000002000000c000100001000000900000006000100020000000c0002000a0000000c000000280003800c00010008000000090000000c00010009000000030000000c000100090000000080000008000500", @ANYRES8=r5], 0xb8}}, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/thermal/cooling_device0/cur_state\x00', 0x1, 0x0) 170.974293ms ago: executing program 5 (id=9437): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x27, 0x6, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x9, 0x70a0af8c93042c75}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x4, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x4, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x5, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd25, 0x65dfdbfe, {0x0, 0x0, 0x0, r7, {0x2, 0xffe0}, {0xfff1, 0xfff1}, {0xfff2, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044005}, 0x4041080) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r8, 0x8010aa01, &(0x7f0000000140)={&(0x7f000074d000/0x2000)=nil, 0x2000}) r9 = epoll_create(0x40) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:1d.0/remove\x00', 0x1, 0x0) write(r10, &(0x7f0000000400)='1', 0x1) r11 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r11, &(0x7f0000000800)='1', 0x1) (fail_nth: 4) epoll_pwait(r9, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x9, &(0x7f0000000340)={[0x100000000]}, 0x8) 0s ago: executing program 2 (id=9438): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETDEBUG(r3, 0x400454c9, &(0x7f00000007c0)=0x2) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_devices(r3, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) kernel console output (not intermixed with test programs): 0 [ 839.633740][ T880] loop6: unable to read partition table [ 839.635795][ T880] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 839.727378][ T884] uhci_hcd 0000:00:1d.0: remove, state 1 [ 839.729321][ T884] usb usb1: USB disconnect, device number 1 [ 839.743362][ T884] uhci_hcd 0000:00:1d.0: USB bus 1 deregistered [ 839.858479][ T887] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 839.877384][ T887] pci 0000:00:1d.0: BAR 4 [io 0x2020-0x203f] [ 839.885570][ T42] kauditd_printk_skb: 196 callbacks suppressed [ 839.885585][ T42] audit: type=1800 audit(2000000592.496:4375): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17059 res=0 errno=0 [ 839.892183][ T887] pci 0000:00:1d.0: Adding to iommu group 7 [ 839.905306][ T894] No source specified [ 839.905515][ T42] audit: type=1800 audit(2000000592.516:4376): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16930 res=0 errno=0 [ 839.906752][ T887] pci 0000:00:1d.0: BAR 4 [io 0x2020-0x203f]: assigned [ 839.913992][ T42] audit: type=1800 audit(2000000592.516:4377): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=464648 res=0 errno=0 [ 839.933080][ T42] audit: type=1800 audit(2000000592.546:4378): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=309213 res=0 errno=0 [ 839.939625][ T42] audit: type=1800 audit(2000000592.546:4379): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=464663 res=0 errno=0 [ 839.956770][ T42] audit: type=1800 audit(2000000592.566:4380): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17059 res=0 errno=0 [ 839.968077][ T42] audit: type=1800 audit(2000000592.576:4381): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16414 res=0 errno=0 [ 840.004233][ T887] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 73205 usecs [ 840.009095][ T42] audit: type=1800 audit(2000000592.616:4382): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17059 res=0 errno=0 [ 840.026996][ T42] audit: type=1800 audit(2000000592.636:4383): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16414 res=0 errno=0 [ 840.047375][ T887] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 840.050810][ T887] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 1 [ 840.054561][ T887] uhci_hcd 0000:00:1d.0: detected 2 ports [ 840.056372][ T42] audit: type=1800 audit(2000000592.666:4384): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=309213 res=0 errno=0 [ 840.063241][ T887] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002020 [ 840.065360][ T903] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8813'. [ 840.065954][ T887] usb usb1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02 [ 840.068682][ T903] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8813'. [ 840.072448][ T887] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 840.076989][ T887] usb usb1: Product: UHCI Host Controller [ 840.078850][ T887] usb usb1: Manufacturer: Linux syzkaller uhci_hcd [ 840.080852][ T887] usb usb1: SerialNumber: 0000:00:1d.0 [ 840.087551][ T909] syzkaller0: entered promiscuous mode [ 840.089386][ T909] syzkaller0: entered allmulticast mode [ 840.213648][ T915] binder: 913:915 ioctl 40285881 200000000080 returned -22 [ 840.220061][ T914] loop6: detected capacity change from 0 to 2640 [ 840.224915][ T914] ldm_validate_partition_table(): Disk read failed. [ 840.231186][ T914] Dev loop6: unable to read RDB block 0 [ 840.233137][ T914] loop6: unable to read partition table [ 840.235005][ T914] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 840.263171][ T917] No source specified [ 840.305161][ T920] netlink: 100 bytes leftover after parsing attributes in process `syz.7.8820'. [ 840.318196][ T921] netlink: 236 bytes leftover after parsing attributes in process `syz.1.8819'. [ 840.433501][ T932] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 840.476482][ T938] syzkaller0: entered promiscuous mode [ 840.478246][ T938] syzkaller0: entered allmulticast mode [ 840.485720][ T938] FAULT_INJECTION: forcing a failure. [ 840.485720][ T938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 840.489893][ T938] CPU: 0 UID: 0 PID: 938 Comm: syz.1.8825 Tainted: G L syzkaller #0 PREEMPT(full) [ 840.489912][ T938] Tainted: [L]=SOFTLOCKUP [ 840.489916][ T938] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 840.489923][ T938] Call Trace: [ 840.489928][ T938] [ 840.489934][ T938] dump_stack_lvl+0x100/0x190 [ 840.489956][ T938] should_fail_ex.cold+0x5/0xa [ 840.489972][ T938] _copy_from_iter+0x1f4/0x1690 [ 840.489991][ T938] ? _copy_from_iter+0x350/0x1690 [ 840.490006][ T938] ? _copy_from_iter+0x270/0x1690 [ 840.490022][ T938] ? __pfx__copy_from_iter+0x10/0x10 [ 840.490045][ T938] ? __pfx__copy_from_iter+0x10/0x10 [ 840.490061][ T938] ? _copy_from_iter+0x270/0x1690 [ 840.490080][ T938] copy_page_from_iter+0x238/0x300 [ 840.490098][ T938] skb_copy_datagram_from_iter+0x399/0x720 [ 840.490116][ T938] packet_sendmsg+0x2257/0x4f00 [ 840.490141][ T938] ? sock_has_perm+0x25a/0x2f0 [ 840.490157][ T938] ? __pfx_sock_has_perm+0x10/0x10 [ 840.490176][ T938] ? __pfx_packet_sendmsg+0x10/0x10 [ 840.490191][ T938] ? __might_fault+0xc5/0x140 [ 840.490207][ T938] ? selinux_socket_sendmsg+0x198/0x2f0 [ 840.490236][ T938] __sys_sendto+0x48b/0x4e0 [ 840.490249][ T938] ? __pfx_packet_sendmsg+0x10/0x10 [ 840.490264][ T938] ? __pfx___sys_sendto+0x10/0x10 [ 840.490282][ T938] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 840.490306][ T938] ? ksys_write+0x1ac/0x250 [ 840.490318][ T938] ? __pfx_ksys_write+0x10/0x10 [ 840.490330][ T938] __x64_sys_sendto+0xe0/0x1c0 [ 840.490343][ T938] ? do_syscall_64+0x90/0x870 [ 840.490359][ T938] ? lockdep_hardirqs_on+0x78/0x100 [ 840.490375][ T938] do_syscall_64+0x115/0x870 [ 840.490390][ T938] ? clear_bhb_loop+0x70/0xc0 [ 840.490406][ T938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.490418][ T938] RIP: 0033:0x7f098e79e0d9 [ 840.490429][ T938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 840.490440][ T938] RSP: 002b:00007f098f613028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 840.490452][ T938] RAX: ffffffffffffffda RBX: 00007f098ea25fa0 RCX: 00007f098e79e0d9 [ 840.490459][ T938] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 0000000000000005 [ 840.490466][ T938] RBP: 00007f098f613090 R08: 0000200000000140 R09: 0000000000000014 [ 840.490473][ T938] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000002 [ 840.490480][ T938] R13: 00007f098ea26038 R14: 00007f098ea25fa0 R15: 00007ffcbbe12ba8 [ 840.490494][ T938] [ 840.611900][ T5805] net_ratelimit: 43 callbacks suppressed [ 840.611922][ T5805] bond6: (slave dummy0): failed to get link speed/duplex [ 840.631122][ T5805] bond5: (slave dummy0): failed to get link speed/duplex [ 840.657267][ T946] set match dimension is over the limit! [ 840.671825][ T942] IPv6: sit1: Disabled Multicast RS [ 840.674210][ T942] sit1: entered allmulticast mode [ 840.681878][ T948] syzkaller0: entered promiscuous mode [ 840.683596][ T948] syzkaller0: entered allmulticast mode [ 840.742796][ T952] No source specified [ 840.781838][ T5539] bond5: (slave dummy0): failed to get link speed/duplex [ 840.801334][ T5539] bond6: (slave dummy0): failed to get link speed/duplex [ 840.848673][ T965] netlink: 'syz.1.8834': attribute type 2 has an invalid length. [ 840.855771][ T967] jffs2: notice: (967) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 840.872308][ T971] loop6: detected capacity change from 0 to 2640 [ 840.874920][ T971] ldm_validate_partition_table(): Disk read failed. [ 840.874965][ T971] Dev loop6: unable to read RDB block 0 [ 840.875041][ T971] loop6: unable to read partition table [ 840.875139][ T971] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 840.891635][ T5539] bond5: (slave dummy0): failed to get link speed/duplex [ 840.913755][ T5539] bond6: (slave dummy0): failed to get link speed/duplex [ 840.984110][ T977] lo speed is unknown, defaulting to 1000 [ 841.064109][ T5805] bond5: (slave dummy0): failed to get link speed/duplex [ 841.082045][ T5805] bond6: (slave dummy0): failed to get link speed/duplex [ 841.134143][ T1000] syzkaller0: entered promiscuous mode [ 841.136736][ T1000] syzkaller0: entered allmulticast mode [ 841.191538][ T5539] bond5: (slave dummy0): failed to get link speed/duplex [ 841.212631][ T5539] bond6: (slave dummy0): failed to get link speed/duplex [ 841.460655][ T1012] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 841.461268][T28004] usb 12-1: new high-speed USB device number 10 using dummy_hcd [ 841.466938][ T1012] printk: legacy console [ttyS0] disabled [ 843.763075][ T1151] printk: legacy console [ttyS0] enabled [ 843.788621][ T1155] loop6: detected capacity change from 0 to 2640 [ 843.795189][ T1155] ldm_validate_partition_table(): Disk read failed. [ 843.798124][ T1155] Dev loop6: unable to read RDB block 0 [ 843.800689][ T1155] loop6: unable to read partition table [ 843.804849][ T1155] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 844.075991][ T1169] syzkaller0: entered promiscuous mode [ 844.077920][ T1169] syzkaller0: entered allmulticast mode [ 844.111289][ T7560] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 844.207145][ T1175] FAULT_INJECTION: forcing a failure. [ 844.207145][ T1175] name failslab, interval 1, probability 0, space 0, times 0 [ 844.215494][ T1175] CPU: 0 UID: 0 PID: 1175 Comm: syz.1.8899 Tainted: G L syzkaller #0 PREEMPT(full) [ 844.215516][ T1175] Tainted: [L]=SOFTLOCKUP [ 844.215520][ T1175] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 844.215527][ T1175] Call Trace: [ 844.215540][ T1175] [ 844.215545][ T1175] dump_stack_lvl+0x100/0x190 [ 844.215567][ T1175] should_fail_ex.cold+0x5/0xa [ 844.215584][ T1175] should_failslab+0xc2/0x120 [ 844.215601][ T1175] __kmalloc_noprof+0xfc/0x820 [ 844.215615][ T1175] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 844.215636][ T1175] kernfs_fop_write_iter+0x26a/0x5f0 [ 844.215659][ T1175] vfs_write+0x6ac/0x1050 [ 844.215671][ T1175] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 844.215690][ T1175] ? __pfx_vfs_write+0x10/0x10 [ 844.215709][ T1175] ksys_write+0x12a/0x250 [ 844.215720][ T1175] ? __pfx_ksys_write+0x10/0x10 [ 844.215734][ T1175] do_syscall_64+0x115/0x870 [ 844.215752][ T1175] ? clear_bhb_loop+0x70/0xc0 [ 844.215766][ T1175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.215779][ T1175] RIP: 0033:0x7f098e79e0d9 [ 844.215789][ T1175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 844.215800][ T1175] RSP: 002b:00007f098f613028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 844.215819][ T1175] RAX: ffffffffffffffda RBX: 00007f098ea25fa0 RCX: 00007f098e79e0d9 [ 844.215826][ T1175] RDX: 0000000000000008 RSI: 0000200000000040 RDI: 0000000000000003 [ 844.215833][ T1175] RBP: 00007f098f613090 R08: 0000000000000000 R09: 0000000000000000 [ 844.215839][ T1175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 844.215846][ T1175] R13: 00007f098ea26038 R14: 00007f098ea25fa0 R15: 00007ffcbbe12ba8 [ 844.215861][ T1175] [ 844.226890][T28004] usb 12-1: USB disconnect, device number 10 [ 844.271070][ T7560] usb 10-1: Using ep0 maxpacket: 16 [ 844.287602][ T7560] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 844.293208][ T7560] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 129, changing to 7 [ 844.302486][ T7560] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.306144][ T7560] usb 10-1: Product: syz [ 844.307951][ T7560] usb 10-1: Manufacturer: syz [ 844.309876][ T7560] usb 10-1: SerialNumber: syz [ 844.452812][ T1182] CUSE: unknown device info "" [ 844.454351][ T1182] CUSE: unknown device info "" [ 844.455689][ T1182] CUSE: unknown device info "" [ 844.457058][ T1182] CUSE: unknown device info "" [ 844.458564][ T1182] CUSE: DEVNAME unspecified [ 844.524806][ T1186] loop6: detected capacity change from 0 to 2640 [ 844.527495][ T1186] ldm_validate_partition_table(): Disk read failed. [ 844.529800][ T1186] Dev loop6: unable to read RDB block 0 [ 844.534611][ T1186] loop6: unable to read partition table [ 844.536623][ T1186] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 844.604737][ T1193] syzkaller0: entered promiscuous mode [ 844.607122][ T1193] syzkaller0: entered allmulticast mode [ 844.702352][ T1194] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=1194 comm=syz.2.8904 [ 844.808276][ T1201] jffs2: notice: (1201) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 844.854649][ T1206] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=1206 comm=syz.1.8911 [ 844.943772][ T42] kauditd_printk_skb: 139 callbacks suppressed [ 844.943794][ T42] audit: type=1800 audit(2000000597.556:4524): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16414 res=0 errno=0 [ 844.978360][ T42] audit: type=1800 audit(2000000597.586:4525): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=309213 res=0 errno=0 [ 844.984290][ T1213] jffs2: notice: (1213) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 845.001397][ T42] audit: type=1400 audit(2000000597.606:4526): avc: denied { write } for pid=1212 comm="syz.1.8913" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 845.011584][ T42] audit: type=1800 audit(2000000597.626:4527): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16414 res=0 errno=0 [ 845.057006][ T42] audit: type=1400 audit(2000000597.666:4528): avc: denied { write } for pid=1211 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 845.069154][ T42] audit: type=1800 audit(2000000597.676:4529): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=309213 res=0 errno=0 [ 845.091109][ T42] audit: type=1800 audit(2000000597.686:4530): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17059 res=0 errno=0 [ 845.107664][ T42] audit: type=1800 audit(2000000597.696:4531): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16414 res=0 errno=0 [ 845.143847][ T42] audit: type=1800 audit(2000000597.756:4532): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16414 res=0 errno=0 [ 845.156189][ T1227] loop6: detected capacity change from 0 to 2640 [ 845.159614][ T1227] ldm_validate_partition_table(): Disk read failed. [ 845.163223][ T1223] syzkaller0: entered promiscuous mode [ 845.163246][ T1223] syzkaller0: entered allmulticast mode [ 845.168842][ T1227] Dev loop6: unable to read RDB block 0 [ 845.170762][ T42] audit: type=1400 audit(2000000597.776:4533): avc: denied { write } for pid=1225 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 845.172361][ T1227] loop6: unable to read partition table [ 845.180827][ T1227] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 845.313647][ T1231] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 13 out of range (51000000..2150000000) [ 846.869791][ T7560] usb 10-1: USB disconnect, device number 13 [ 846.921284][ T1262] FAULT_INJECTION: forcing a failure. [ 846.921284][ T1262] name failslab, interval 1, probability 0, space 0, times 0 [ 846.927043][ T1262] CPU: 1 UID: 0 PID: 1262 Comm: syz.5.8925 Tainted: G L syzkaller #0 PREEMPT(full) [ 846.927072][ T1262] Tainted: [L]=SOFTLOCKUP [ 846.927078][ T1262] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 846.927089][ T1262] Call Trace: [ 846.927096][ T1262] [ 846.927104][ T1262] dump_stack_lvl+0x100/0x190 [ 846.927133][ T1262] should_fail_ex.cold+0x5/0xa [ 846.927174][ T1262] should_failslab+0xc2/0x120 [ 846.927201][ T1262] kmem_cache_alloc_noprof+0x91/0x6a0 [ 846.927222][ T1262] ? do_getname+0x35/0x390 [ 846.927249][ T1262] do_getname+0x35/0x390 [ 846.927271][ T1262] do_sys_openat2+0xc7/0x1e0 [ 846.927293][ T1262] ? __pfx_do_sys_openat2+0x10/0x10 [ 846.927317][ T1262] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 846.927347][ T1262] ? __fget_files+0x21f/0x3d0 [ 846.927368][ T1262] __x64_sys_openat+0x12d/0x210 [ 846.927390][ T1262] ? __pfx___x64_sys_openat+0x10/0x10 [ 846.927410][ T1262] ? ksys_write+0x1ac/0x250 [ 846.927432][ T1262] do_syscall_64+0x115/0x870 [ 846.927455][ T1262] ? clear_bhb_loop+0x70/0xc0 [ 846.927486][ T1262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.927508][ T1262] RIP: 0033:0x7f864419e0d9 [ 846.927524][ T1262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 846.927540][ T1262] RSP: 002b:00007f8645037028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 846.927559][ T1262] RAX: ffffffffffffffda RBX: 00007f8644425fa0 RCX: 00007f864419e0d9 [ 846.927570][ T1262] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 846.927580][ T1262] RBP: 00007f8645037090 R08: 0000000000000000 R09: 0000000000000000 [ 846.927590][ T1262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 846.927600][ T1262] R13: 00007f8644426038 R14: 00007f8644425fa0 R15: 00007ffcda423bf8 [ 846.927627][ T1262] [ 848.917724][ T5439] veth0_vlan: left promiscuous mode [ 848.932045][T28004] veth0_vlan: entered promiscuous mode [ 849.013738][ T7099] net_ratelimit: 61 callbacks suppressed [ 849.013761][ T7099] bond6: (slave dummy0): failed to get link speed/duplex [ 849.043660][ T1281] netlink: 'syz.1.8929': attribute type 1 has an invalid length. [ 849.090126][ T1289] jffs2: notice: (1289) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 849.101485][ T1281] 8021q: adding VLAN 0 to HW filter on device bond1 [ 849.119013][ T5539] bond5: (slave dummy0): failed to get link speed/duplex [ 849.141175][T27201] bond6: (slave dummy0): failed to get link speed/duplex [ 849.190299][ T1296] netlink: 'syz.7.8933': attribute type 1 has an invalid length. [ 849.208890][ T1299] jffs2: notice: (1299) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 849.250876][ T1296] 8021q: adding VLAN 0 to HW filter on device bond19 [ 849.311969][ T1304] bond19: (slave veth19): Enslaving as an active interface with a down link [ 849.322210][ T1296] bond18: (slave dummy0): Releasing backup interface [ 849.366872][ T1304] netlink: 'syz.7.8933': attribute type 10 has an invalid length. [ 849.381691][ T1304] __nla_validate_parse: 5 callbacks suppressed [ 849.381704][ T1304] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8933'. [ 849.381767][ T1296] bond19: (slave dummy0): Enslaving as an active interface with a down link [ 849.467409][ T1313] loop6: detected capacity change from 0 to 2640 [ 849.474477][ T1313] buffer_io_error: 116 callbacks suppressed [ 849.474495][ T1313] Buffer I/O error on dev loop6, logical block 0, async page read [ 849.485666][ T413] Buffer I/O error on dev loop6, logical block 0, async page read [ 849.494267][ T1313] Buffer I/O error on dev loop6, logical block 0, async page read [ 849.497627][ T1313] Buffer I/O error on dev loop6, logical block 0, async page read [ 849.501594][ T413] Buffer I/O error on dev loop6, logical block 0, async page read [ 849.505026][ T1313] Buffer I/O error on dev loop6, logical block 0, async page read [ 849.508821][ T413] Buffer I/O error on dev loop6, logical block 0, async page read [ 849.512764][ T1313] Buffer I/O error on dev loop6, logical block 0, async page read [ 849.516719][ T413] Buffer I/O error on dev loop6, logical block 0, async page read [ 849.520123][ T1313] Buffer I/O error on dev loop6, logical block 0, async page read [ 849.524589][ T1313] ldm_validate_partition_table(): Disk read failed. [ 849.527301][ T1313] Dev loop6: unable to read RDB block 0 [ 849.529673][ T1313] loop6: unable to read partition table [ 849.532483][ T1313] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 850.004808][ T42] kauditd_printk_skb: 33 callbacks suppressed [ 850.004837][ T42] audit: type=1800 audit(2000000602.616:4567): pid=1322 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.8939" name="rescan" dev="sysfs" ino=1106 res=0 errno=0 [ 850.327579][ T42] audit: type=1800 audit(2000000602.916:4568): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16930 res=0 errno=0 [ 850.383150][ T42] audit: type=1800 audit(2000000602.996:4569): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16801 res=0 errno=0 [ 853.047410][ T42] audit: type=1800 audit(2000000605.656:4570): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16414 res=0 errno=0 [ 853.061896][T27201] bond6: (slave dummy0): failed to get link speed/duplex [ 853.082637][T27201] bond5: (slave dummy0): failed to get link speed/duplex [ 853.120746][ T42] audit: type=1800 audit(2000000605.726:4571): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=309213 res=0 errno=0 [ 853.131309][ T1350] syzkaller1: entered promiscuous mode [ 853.133131][ T1350] syzkaller1: entered allmulticast mode [ 853.139067][ T42] audit: type=1400 audit(2000000605.726:4572): avc: denied { write } for pid=1344 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 853.166450][ T42] audit: type=1800 audit(2000000605.746:4573): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16414 res=0 errno=0 [ 853.200145][ T42] audit: type=1400 audit(2000000605.806:4574): avc: denied { write } for pid=1354 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 853.210088][ T42] audit: type=1800 audit(2000000605.816:4575): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16801 res=0 errno=0 [ 853.236798][ T42] audit: type=1800 audit(2000000605.846:4576): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17059 res=0 errno=0 [ 853.241124][ T12] bond5: (slave dummy0): failed to get link speed/duplex [ 853.261082][ T12] bond6: (slave dummy0): failed to get link speed/duplex [ 853.601201][ T1398] loop6: detected capacity change from 0 to 2640 [ 853.603861][ T1398] ldm_validate_partition_table(): Disk read failed. [ 853.606305][ T1398] Dev loop6: unable to read RDB block 0 [ 853.608296][ T1398] loop6: unable to read partition table [ 853.612785][ T1398] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 854.434244][ T5137] ldm_validate_partition_table(): Disk read failed. [ 854.436588][ T5137] Dev loop6: unable to read RDB block 0 [ 854.443380][ T5137] loop6: unable to read partition table [ 856.871221][ T5539] bond6: (slave dummy0): failed to get link speed/duplex [ 856.891313][ T12] bond5: (slave dummy0): failed to get link speed/duplex [ 856.904091][ T42] kauditd_printk_skb: 12 callbacks suppressed [ 856.904110][ T42] audit: type=1400 audit(2000000609.516:4589): avc: denied { write } for pid=1408 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 856.926986][ T42] audit: type=1800 audit(2000000609.516:4590): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=309213 res=0 errno=0 [ 856.949289][ T42] audit: type=1800 audit(2000000609.556:4591): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16414 res=0 errno=0 [ 856.968982][ T42] audit: type=1800 audit(2000000609.576:4592): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=309213 res=0 errno=0 [ 856.981576][ T5539] bond6: (slave dummy0): failed to get link speed/duplex [ 856.982008][ T42] audit: type=1400 audit(2000000609.586:4593): avc: denied { write } for pid=1413 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 856.994307][ T1415] futex_wake_op: syz.1.8957 tries to shift op by -1; fix this program [ 857.011140][ T5539] bond5: (slave dummy0): failed to get link speed/duplex [ 857.036964][ T42] audit: type=1800 audit(2000000609.646:4594): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17059 res=0 errno=0 [ 857.043817][ T1426] netlink: 'syz.7.8959': attribute type 1 has an invalid length. [ 857.056457][ T1428] netlink: 'syz.5.8958': attribute type 1 has an invalid length. [ 857.060640][ T42] audit: type=1800 audit(2000000609.666:4595): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16801 res=0 errno=0 [ 857.070636][ T42] audit: type=1800 audit(2000000609.676:4596): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=309213 res=0 errno=0 [ 857.084437][ T42] audit: type=1800 audit(2000000609.696:4597): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16414 res=0 errno=0 [ 857.103631][ T42] audit: type=1800 audit(2000000609.716:4598): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=309213 res=0 errno=0 [ 857.109526][ T1426] 8021q: adding VLAN 0 to HW filter on device bond20 [ 857.134246][ T1428] 8021q: adding VLAN 0 to HW filter on device bond6 [ 857.147316][ T1433] bond19: (slave dummy0): Releasing active interface [ 857.152156][ T1426] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8959'. [ 857.174435][ T1433] bond20: (slave dummy0): Enslaving as a backup interface with a down link [ 857.218626][ T1442] netlink: 'syz.5.8958': attribute type 10 has an invalid length. [ 857.221959][ T1438] bond6: (slave veth9): Enslaving as a backup interface with a down link [ 857.225427][ T1428] dummy0: left promiscuous mode [ 857.226047][ T1442] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8958'. [ 857.243788][ T1428] bond5: (slave dummy0): Removing an active aggregator [ 857.251750][ T1428] bond5: (slave dummy0): Releasing backup interface [ 857.299925][ T1428] bond6: (slave dummy0): Enslaving as a backup interface with an up link [ 857.304369][ T1442] dummy0: entered promiscuous mode [ 857.308878][ T1442] bond6: (slave dummy0): Releasing backup interface [ 857.372410][ T12] bond6: (slave dummy0): failed to get link speed/duplex [ 857.395461][ T1453] loop6: detected capacity change from 0 to 2640 [ 857.398365][ T1453] buffer_io_error: 48 callbacks suppressed [ 857.398382][ T1453] Buffer I/O error on dev loop6, logical block 0, async page read [ 857.404065][ T1453] Buffer I/O error on dev loop6, logical block 0, async page read [ 857.407203][ T1453] Buffer I/O error on dev loop6, logical block 0, async page read [ 857.410409][ T1453] Buffer I/O error on dev loop6, logical block 0, async page read [ 857.415768][ T1453] Buffer I/O error on dev loop6, logical block 0, async page read [ 857.418986][ T1453] Buffer I/O error on dev loop6, logical block 0, async page read [ 857.423313][ T1453] Buffer I/O error on dev loop6, logical block 0, async page read [ 857.426506][ T1453] Buffer I/O error on dev loop6, logical block 0, async page read [ 857.429344][ T1453] ldm_validate_partition_table(): Disk read failed. [ 857.431782][ T1453] Buffer I/O error on dev loop6, logical block 0, async page read [ 857.434389][ T1453] Buffer I/O error on dev loop6, logical block 0, async page read [ 857.436918][ T1453] Dev loop6: unable to read RDB block 0 [ 857.439131][ T1453] loop6: unable to read partition table [ 857.441221][ T1453] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 857.494724][ T1459] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 860.548623][ T9139] bond6: (slave dummy0): failed to get link speed/duplex [ 860.662304][ T5539] bond6: (slave dummy0): failed to get link speed/duplex [ 860.717141][ T1496] Cannot find del_set index 2 as target [ 860.801841][ T5539] bond6: (slave dummy0): failed to get link speed/duplex [ 863.716628][ T1522] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8979'. [ 863.721411][ T5539] bond6: (slave dummy0): failed to get link speed/duplex [ 863.744298][ T42] kauditd_printk_skb: 23 callbacks suppressed [ 863.744324][ T42] audit: type=1800 audit(2000000616.356:4622): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=309213 res=0 errno=0 [ 863.765831][ T1529] syzkaller0: entered promiscuous mode [ 863.767584][ T1529] syzkaller0: entered allmulticast mode [ 863.778922][ T42] audit: type=1800 audit(2000000616.386:4623): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16801 res=0 errno=0 [ 863.802273][ T42] audit: type=1800 audit(2000000616.416:4624): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17059 res=0 errno=0 [ 863.823127][ T42] audit: type=1800 audit(2000000616.426:4625): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16801 res=0 errno=0 [ 863.843985][ T1537] loop6: detected capacity change from 0 to 2640 [ 863.845587][ T42] audit: type=1800 audit(2000000616.446:4626): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17059 res=0 errno=0 [ 863.846390][ T1537] buffer_io_error: 11 callbacks suppressed [ 863.846400][ T1537] Buffer I/O error on dev loop6, logical block 0, async page read [ 863.862517][ T1537] Buffer I/O error on dev loop6, logical block 0, async page read [ 863.865033][ T1537] Buffer I/O error on dev loop6, logical block 0, async page read [ 863.867510][ T1537] Buffer I/O error on dev loop6, logical block 0, async page read [ 863.870118][ T1537] Buffer I/O error on dev loop6, logical block 0, async page read [ 863.873375][ T1537] Buffer I/O error on dev loop6, logical block 0, async page read [ 863.875900][ T1537] Buffer I/O error on dev loop6, logical block 0, async page read [ 863.878405][ T1537] Buffer I/O error on dev loop6, logical block 0, async page read [ 863.881336][ T1537] ldm_validate_partition_table(): Disk read failed. [ 863.883272][ T42] audit: type=1800 audit(2000000616.496:4627): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16414 res=0 errno=0 [ 863.883482][ T1537] Buffer I/O error on dev loop6, logical block 0, async page read [ 863.895061][ T1537] Buffer I/O error on dev loop6, logical block 0, async page read [ 863.897750][ T1537] Dev loop6: unable to read RDB block 0 [ 863.901771][ T1537] loop6: unable to read partition table [ 863.904076][ T1537] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 863.904106][ T5539] bond6: (slave dummy0): failed to get link speed/duplex [ 863.932144][ T42] audit: type=1800 audit(2000000616.546:4628): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16801 res=0 errno=0 [ 864.005790][ T42] audit: type=1800 audit(2000000616.616:4629): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=309213 res=0 errno=0 [ 864.021177][ T5805] bond6: (slave dummy0): failed to get link speed/duplex [ 864.036782][ T42] audit: type=1800 audit(2000000616.646:4630): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16801 res=0 errno=0 [ 864.087246][ T42] audit: type=1800 audit(2000000616.696:4631): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16801 res=0 errno=0 [ 864.105934][ T1551] overlayfs: cannot append lower layer [ 864.155836][ T1558] set match dimension is over the limit! [ 864.161911][ T5805] bond6: (slave dummy0): failed to get link speed/duplex [ 864.292699][ T5805] bond6: (slave dummy0): failed to get link speed/duplex [ 864.442840][ T1568] input: syz1 as /devices/virtual/input/input48 [ 864.572707][ T1576] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 867.561246][ T9139] bond6: (slave dummy0): failed to get link speed/duplex [ 867.627916][ T1597] jffs2: notice: (1597) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 867.682858][T10557] bond6: (slave dummy0): failed to get link speed/duplex [ 867.716406][ T1606] loop6: detected capacity change from 0 to 2640 [ 867.724182][ T1606] ldm_validate_partition_table(): Disk read failed. [ 867.727145][ T1606] Dev loop6: unable to read RDB block 0 [ 867.729562][ T1606] loop6: unable to read partition table [ 867.733080][ T1606] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 867.733306][ T1607] ip6erspan0: entered promiscuous mode [ 867.768908][ T1594] SELinux: context truncated [ 867.776136][ T1594] SELinux: invalid ocon [ 867.785294][ T1610] syzkaller1: entered promiscuous mode [ 867.789485][ T1610] syzkaller1: entered allmulticast mode [ 867.801114][ T9139] bond6: (slave dummy0): failed to get link speed/duplex [ 867.909085][ T1594] SELinux: failed to load policy [ 867.935782][ T9139] bond6: (slave dummy0): failed to get link speed/duplex [ 868.099988][ T1632] printk: legacy console [ttyS0] disabled [ 874.939214][ T1715] printk: legacy console [ttyS0] enabled [ 874.988732][ T1718] syzkaller0: entered promiscuous mode [ 874.991073][ T1718] syzkaller0: entered allmulticast mode [ 875.001120][T10557] bond6: (slave dummy0): failed to get link speed/duplex [ 875.004513][ T1723] FAULT_INJECTION: forcing a failure. [ 875.004513][ T1723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 875.009966][ T1723] CPU: 2 UID: 0 PID: 1723 Comm: syz.2.9039 Tainted: G L syzkaller #0 PREEMPT(full) [ 875.009990][ T1723] Tainted: [L]=SOFTLOCKUP [ 875.009996][ T1723] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 875.010015][ T1723] Call Trace: [ 875.010038][ T1723] [ 875.010044][ T1723] dump_stack_lvl+0x100/0x190 [ 875.010141][ T1723] should_fail_ex.cold+0x5/0xa [ 875.010180][ T1723] _copy_from_iter+0x1f4/0x1690 [ 875.010240][ T1723] ? __pfx__copy_from_iter+0x10/0x10 [ 875.010262][ T1723] ? trace_kmalloc+0xeb/0x110 [ 875.010305][ T1723] ? __kasan_kmalloc+0xaa/0xb0 [ 875.010326][ T1723] ? __kmalloc_noprof+0x343/0x820 [ 875.010347][ T1723] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 875.010384][ T1723] kernfs_fop_write_iter+0x186/0x5f0 [ 875.010411][ T1723] vfs_write+0x6ac/0x1050 [ 875.010437][ T1723] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 875.010463][ T1723] ? __pfx_vfs_write+0x10/0x10 [ 875.010493][ T1723] ksys_write+0x12a/0x250 [ 875.010508][ T1723] ? __pfx_ksys_write+0x10/0x10 [ 875.010531][ T1723] do_syscall_64+0x115/0x870 [ 875.010599][ T1723] ? clear_bhb_loop+0x70/0xc0 [ 875.010620][ T1723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.010638][ T1723] RIP: 0033:0x7f8dfc79e0d9 [ 875.010653][ T1723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 875.010669][ T1723] RSP: 002b:00007f8dfd612028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 875.010694][ T1723] RAX: ffffffffffffffda RBX: 00007f8dfca25fa0 RCX: 00007f8dfc79e0d9 [ 875.010705][ T1723] RDX: 0000000000000008 RSI: 0000200000000040 RDI: 0000000000000003 [ 875.010715][ T1723] RBP: 00007f8dfd612090 R08: 0000000000000000 R09: 0000000000000000 [ 875.010726][ T1723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 875.010736][ T1723] R13: 00007f8dfca26038 R14: 00007f8dfca25fa0 R15: 00007ffdeed61198 [ 875.010759][ T1723] [ 875.043782][ T1727] fuse: Unknown parameter ']—g¾„;n*/ [ 878.669071][ T1778] dump_stack_lvl+0x100/0x190 [ 878.669114][ T1778] should_fail_ex.cold+0x5/0xa [ 878.669137][ T1778] strncpy_from_user+0x3b/0x2d0 [ 878.669174][ T1778] do_getname+0x78/0x390 [ 878.669201][ T1778] do_sys_openat2+0xc7/0x1e0 [ 878.669225][ T1778] ? __pfx_do_sys_openat2+0x10/0x10 [ 878.669246][ T1778] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 878.669273][ T1778] ? __fget_files+0x21f/0x3d0 [ 878.669297][ T1778] __x64_sys_openat+0x12d/0x210 [ 878.669319][ T1778] ? __pfx___x64_sys_openat+0x10/0x10 [ 878.669341][ T1778] ? ksys_write+0x1ac/0x250 [ 878.669370][ T1778] do_syscall_64+0x115/0x870 [ 878.669393][ T1778] ? clear_bhb_loop+0x70/0xc0 [ 878.669415][ T1778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.669432][ T1778] RIP: 0033:0x7f864419e0d9 [ 878.669447][ T1778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 878.669464][ T1778] RSP: 002b:00007f8645037028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 878.669498][ T1778] RAX: ffffffffffffffda RBX: 00007f8644425fa0 RCX: 00007f864419e0d9 [ 878.669511][ T1778] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 878.669522][ T1778] RBP: 00007f8645037090 R08: 0000000000000000 R09: 0000000000000000 [ 878.669533][ T1778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 878.669543][ T1778] R13: 00007f8644426038 R14: 00007f8644425fa0 R15: 00007ffcda423bf8 [ 878.669570][ T1778] [ 878.743681][ T5539] bond6: (slave dummy0): failed to get link speed/duplex [ 878.806599][ T1793] binder: 1790:1793 unknown command 0 [ 878.808829][ T1793] binder: 1790:1793 ioctl c0306201 200000000180 returned -22 [ 878.809164][ T1795] loop6: detected capacity change from 0 to 2640 [ 878.816557][ T1795] buffer_io_error: 53 callbacks suppressed [ 878.816570][ T1795] Buffer I/O error on dev loop6, logical block 0, async page read [ 878.821090][ T1795] Buffer I/O error on dev loop6, logical block 0, async page read [ 878.824814][ T1795] Buffer I/O error on dev loop6, logical block 0, async page read [ 878.828968][ T1795] Buffer I/O error on dev loop6, logical block 0, async page read [ 878.836190][ T1795] Buffer I/O error on dev loop6, logical block 0, async page read [ 878.839664][ T1795] Buffer I/O error on dev loop6, logical block 0, async page read [ 878.843181][ T1795] Buffer I/O error on dev loop6, logical block 0, async page read [ 878.846255][ T1795] Buffer I/O error on dev loop6, logical block 0, async page read [ 878.849274][ T1795] ldm_validate_partition_table(): Disk read failed. [ 878.861097][ T1795] Buffer I/O error on dev loop6, logical block 0, async page read [ 878.863765][ T1795] Buffer I/O error on dev loop6, logical block 0, async page read [ 878.866415][ T1795] Dev loop6: unable to read RDB block 0 [ 878.868653][ T1795] loop6: unable to read partition table [ 878.874202][ T5805] bond6: (slave dummy0): failed to get link speed/duplex [ 878.878918][ T1795] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 879.390751][T20665] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 879.396616][T20665] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 879.413666][T20665] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 879.417362][T20665] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 879.420161][T20665] rtc rtc0: __rtc_set_alarm: err=-22 [ 881.961460][ T5805] bond6: (slave dummy0): failed to get link speed/duplex [ 881.977212][ T1818] netlink: 'syz.7.9072': attribute type 1 has an invalid length. [ 881.991485][ T1818] 8021q: adding VLAN 0 to HW filter on device bond21 [ 882.000439][ T1818] bond20: (slave dummy0): Releasing backup interface [ 882.043560][ T1818] bond21: (slave dummy0): Enslaving as a backup interface with a down link [ 882.048800][ T1825] netlink: 'syz.7.9072': attribute type 10 has an invalid length. [ 882.052117][ T1825] netlink: 40 bytes leftover after parsing attributes in process `syz.7.9072'. [ 882.071748][ T5539] bond6: (slave dummy0): failed to get link speed/duplex [ 882.176374][ T1836] jffs2: notice: (1836) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 882.193475][ T5539] bond6: (slave dummy0): failed to get link speed/duplex [ 882.206933][ T1839] netlink: 'syz.5.9074': attribute type 1 has an invalid length. [ 882.236396][ T1839] 8021q: adding VLAN 0 to HW filter on device bond7 [ 882.293220][ T1839] bond7: (slave veth11): Enslaving as a backup interface with a down link [ 882.304556][ T1839] dummy0: left promiscuous mode [ 882.308592][ T1839] bond7: (slave dummy0): Enslaving as a backup interface with an up link [ 882.316116][ T1839] netlink: 'syz.5.9074': attribute type 10 has an invalid length. [ 882.321136][ T1839] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9074'. [ 882.326397][ T1839] dummy0: entered promiscuous mode [ 882.340743][ T1839] bond7: (slave dummy0): Releasing backup interface [ 882.421303][ T5539] bond6: (slave dummy0): failed to get link speed/duplex [ 882.438337][ T1857] loop6: detected capacity change from 0 to 2640 [ 882.441883][ T1857] ldm_validate_partition_table(): Disk read failed. [ 882.444227][ T1857] Dev loop6: unable to read RDB block 0 [ 882.446143][ T1857] loop6: unable to read partition table [ 882.448080][ T1857] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 882.565856][ T1859] netlink: 64 bytes leftover after parsing attributes in process `syz.5.9086'. [ 882.748088][ T1868] netlink: 200 bytes leftover after parsing attributes in process `syz.5.9088'. [ 882.751483][ T1868] tmpfs: Unknown parameter 'usrquota_ock_hardli' [ 885.242895][ T42] kauditd_printk_skb: 33 callbacks suppressed [ 885.242910][ T42] audit: type=1800 audit(2000000637.856:4783): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17059 res=0 errno=0 [ 885.305158][ T42] audit: type=1800 audit(2000000637.916:4784): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17059 res=0 errno=0 [ 885.312552][ T1872] set match dimension is over the limit! [ 885.347207][ T42] audit: type=1800 audit(2000000637.956:4785): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17059 res=0 errno=0 [ 885.522284][ T1874] tipc: Started in network mode [ 885.523994][ T1874] tipc: Node identity ac141441, cluster identity 4711 [ 885.527043][ T1874] tipc: Enabled bearer , priority 10 [ 885.529517][ T1874] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=1874 comm=syz.7.9091 [ 885.531638][ T7099] bond6: (slave dummy0): failed to get link speed/duplex [ 885.553795][ T42] audit: type=1800 audit(2000000638.166:4786): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16801 res=0 errno=0 [ 885.569571][ T1880] jffs2: notice: (1880) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 885.574887][ T42] audit: type=1800 audit(2000000638.186:4787): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17059 res=0 errno=0 [ 885.591687][ T42] audit: type=1400 audit(2000000638.206:4788): avc: denied { write } for pid=1879 comm="syz.7.9093" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 885.605343][ T42] audit: type=1800 audit(2000000638.206:4789): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16801 res=0 errno=0 [ 885.613103][ T42] audit: type=1800 audit(2000000638.216:4790): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=309213 res=0 errno=0 [ 885.626149][ T42] audit: type=1800 audit(2000000638.236:4791): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16414 res=0 errno=0 [ 885.636381][ T42] audit: type=1800 audit(2000000638.246:4792): pid=1884 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.9094" name="rescan" dev="sysfs" ino=1106 res=0 errno=0 [ 885.651225][ T5805] bond6: (slave dummy0): failed to get link speed/duplex [ 885.696659][ T1892] netlink: 44 bytes leftover after parsing attributes in process `syz.7.9097'. [ 885.723108][ T1894] FAULT_INJECTION: forcing a failure. [ 885.723108][ T1894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 885.728968][ T1894] CPU: 1 UID: 0 PID: 1894 Comm: syz.1.9099 Tainted: G L syzkaller #0 PREEMPT(full) [ 885.728996][ T1894] Tainted: [L]=SOFTLOCKUP [ 885.729002][ T1894] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 885.729011][ T1894] Call Trace: [ 885.729018][ T1894] [ 885.729024][ T1894] dump_stack_lvl+0x100/0x190 [ 885.729053][ T1894] should_fail_ex.cold+0x5/0xa [ 885.729078][ T1894] _copy_from_user+0x2e/0xd0 [ 885.729108][ T1894] copy_msghdr_from_user+0x9f/0x4c0 [ 885.729173][ T1894] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 885.729200][ T1894] ___sys_sendmsg+0x106/0x1e0 [ 885.729218][ T1894] ? __pfx____sys_sendmsg+0x10/0x10 [ 885.729235][ T1894] ? __lock_acquire+0x49f/0x1a40 [ 885.729281][ T1894] ? get_pid_task+0x106/0x250 [ 885.729331][ T1894] __sys_sendmsg+0x160/0x210 [ 885.729353][ T1894] ? __pfx___sys_sendmsg+0x10/0x10 [ 885.729387][ T1894] do_syscall_64+0x115/0x870 [ 885.729415][ T1894] ? clear_bhb_loop+0x70/0xc0 [ 885.729438][ T1894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.729455][ T1894] RIP: 0033:0x7f098e79e0d9 [ 885.729469][ T1894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 885.729485][ T1894] RSP: 002b:00007f098f613028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 885.729502][ T1894] RAX: ffffffffffffffda RBX: 00007f098ea25fa0 RCX: 00007f098e79e0d9 [ 885.729512][ T1894] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 885.729522][ T1894] RBP: 00007f098f613090 R08: 0000000000000000 R09: 0000000000000000 [ 885.729533][ T1894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 885.729545][ T1894] R13: 00007f098ea26038 R14: 00007f098ea25fa0 R15: 00007ffcbbe12ba8 [ 885.729570][ T1894] [ 885.771138][ T5805] bond6: (slave dummy0): failed to get link speed/duplex [ 885.795819][ T1888] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9096'. [ 885.795889][ T1888] Unknown options in mask b7f2 [ 885.890280][ T1910] Cannot find set identified by id 0 to match [ 885.934154][ T5539] bond6: (slave dummy0): failed to get link speed/duplex [ 885.953889][ T1915] loop6: detected capacity change from 0 to 2640 [ 885.957446][ T1915] buffer_io_error: 32 callbacks suppressed [ 885.957462][ T1915] Buffer I/O error on dev loop6, logical block 0, async page read [ 885.961201][ T1908] printk: legacy console [ttyS0] disabled [ 885.964252][ T1915] Buffer I/O error on dev loop6, logical block 0, async page read [ 889.828194][ T1982] printk: legacy console [ttyS0] enabled [ 889.864961][ T1985] FAULT_INJECTION: forcing a failure. [ 889.864961][ T1985] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 889.870151][ T1985] CPU: 3 UID: 0 PID: 1985 Comm: syz.2.9128 Tainted: G L syzkaller #0 PREEMPT(full) [ 889.870178][ T1985] Tainted: [L]=SOFTLOCKUP [ 889.870183][ T1985] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 889.870192][ T1985] Call Trace: [ 889.870198][ T1985] [ 889.870204][ T1985] dump_stack_lvl+0x100/0x190 [ 889.870233][ T1985] should_fail_ex.cold+0x5/0xa [ 889.870253][ T1985] _copy_to_user+0x32/0xd0 [ 889.870276][ T1985] simple_read_from_buffer+0xcb/0x170 [ 889.870307][ T1985] proc_fail_nth_read+0x1af/0x230 [ 889.870332][ T1985] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 889.870356][ T1985] ? rw_verify_area+0xce/0x6d0 [ 889.870377][ T1985] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 889.870400][ T1985] vfs_read+0x1e4/0xb40 [ 889.870430][ T1985] ? __pfx_vfs_read+0x10/0x10 [ 889.870451][ T1985] ? __fget_files+0x215/0x3d0 [ 889.870471][ T1985] ? __fget_files+0x21f/0x3d0 [ 889.870491][ T1985] ksys_read+0x12a/0x250 [ 889.870503][ T1985] ? __pfx_ksys_read+0x10/0x10 [ 889.870522][ T1985] do_syscall_64+0x115/0x870 [ 889.870543][ T1985] ? clear_bhb_loop+0x70/0xc0 [ 889.870562][ T1985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.870576][ T1985] RIP: 0033:0x7f8dfc75e90e [ 889.870590][ T1985] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 889.870604][ T1985] RSP: 002b:00007f8dfd611fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 889.870621][ T1985] RAX: ffffffffffffffda RBX: 00007f8dfd6126c0 RCX: 00007f8dfc75e90e [ 889.870630][ T1985] RDX: 000000000000000f RSI: 00007f8dfd6120a0 RDI: 0000000000000004 [ 889.870639][ T1985] RBP: 00007f8dfd612090 R08: 0000000000000000 R09: 0000000000000000 [ 889.870647][ T1985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 889.870655][ T1985] R13: 00007f8dfca26038 R14: 00007f8dfca25fa0 R15: 00007ffdeed61198 [ 889.870675][ T1985] [ 889.937828][T10557] bond6: (slave dummy0): failed to get link speed/duplex [ 890.045428][ T1990] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3599605440 (3599605440 ns) > initial count (3285526220 ns). Using initial count to start timer. [ 890.045698][ T1996] syzkaller0: entered promiscuous mode [ 890.055165][ T1996] syzkaller0: entered allmulticast mode [ 890.055207][ T1990] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (52285443328 ns). Using initial count to start timer. [ 890.255568][ T42] kauditd_printk_skb: 44 callbacks suppressed [ 890.255603][ T42] audit: type=1800 audit(2000000642.866:4837): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16414 res=0 errno=0 [ 890.257585][ T2002] syzkaller0: entered promiscuous mode [ 890.266523][ T2002] syzkaller0: entered allmulticast mode [ 890.271098][ T2002] FAULT_INJECTION: forcing a failure. [ 890.271098][ T2002] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 890.275285][ T2002] CPU: 3 UID: 0 PID: 2002 Comm: syz.2.9134 Tainted: G L syzkaller #0 PREEMPT(full) [ 890.275309][ T2002] Tainted: [L]=SOFTLOCKUP [ 890.275313][ T2002] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 890.275327][ T2002] Call Trace: [ 890.275348][ T2002] [ 890.275353][ T2002] dump_stack_lvl+0x100/0x190 [ 890.275427][ T2002] should_fail_ex.cold+0x5/0xa [ 890.275472][ T2002] _copy_from_user+0x2e/0xd0 [ 890.275525][ T2002] copy_msghdr_from_user+0x9f/0x4c0 [ 890.275570][ T2002] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 890.275588][ T2002] ___sys_sendmsg+0x106/0x1e0 [ 890.275605][ T2002] ? __pfx____sys_sendmsg+0x10/0x10 [ 890.275622][ T2002] ? __lock_acquire+0x49f/0x1a40 [ 890.275666][ T2002] ? get_pid_task+0x106/0x250 [ 890.275717][ T2002] __sys_sendmsg+0x160/0x210 [ 890.275742][ T2002] ? __pfx___sys_sendmsg+0x10/0x10 [ 890.275768][ T2002] do_syscall_64+0x115/0x870 [ 890.275826][ T2002] ? clear_bhb_loop+0x70/0xc0 [ 890.275842][ T2002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.275854][ T2002] RIP: 0033:0x7f8dfc79e0d9 [ 890.275865][ T2002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 890.275876][ T2002] RSP: 002b:00007f8dfd612028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 890.275895][ T2002] RAX: ffffffffffffffda RBX: 00007f8dfca25fa0 RCX: 00007f8dfc79e0d9 [ 890.275902][ T2002] RDX: 0000000000008000 RSI: 00002000000000c0 RDI: 0000000000000007 [ 890.275909][ T2002] RBP: 00007f8dfd612090 R08: 0000000000000000 R09: 0000000000000000 [ 890.275915][ T2002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 890.275922][ T2002] R13: 00007f8dfca26038 R14: 00007f8dfca25fa0 R15: 00007ffdeed61198 [ 890.275937][ T2002] [ 890.352660][ T42] audit: type=1800 audit(2000000642.966:4838): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17059 res=0 errno=0 [ 890.359094][ T2005] loop6: detected capacity change from 0 to 2640 [ 890.391885][ T2005] ldm_validate_partition_table(): Disk read failed. [ 890.394156][ T2005] Dev loop6: unable to read RDB block 0 [ 890.396815][ T2005] loop6: unable to read partition table [ 890.398800][ T2005] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 890.443260][ T42] audit: type=1800 audit(2000000643.056:4839): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16801 res=0 errno=0 [ 890.453922][ T2007] usb usb8: usbfs: process 2007 (syz.5.9136) did not claim interface 0 before use [ 890.473409][ T2007] syzkaller0: entered promiscuous mode [ 890.475287][ T2007] syzkaller0: entered allmulticast mode [ 890.503371][ T42] audit: type=1800 audit(2000000643.116:4840): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16414 res=0 errno=0 [ 890.507074][ T2009] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 890.518891][ T42] audit: type=1800 audit(2000000643.126:4841): pid=2009 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.9137" name="idVendor" dev="configfs" ino=165497 res=0 errno=0 [ 890.526469][ T42] audit: type=1800 audit(2000000643.126:4842): pid=2009 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.9137" name="idProduct" dev="configfs" ino=165498 res=0 errno=0 [ 890.548023][ T42] audit: type=1800 audit(2000000643.156:4843): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=476071 res=0 errno=0 [ 890.556675][ T2009] jffs2: notice: (2009) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 890.563181][ T5875] net_ratelimit: 4 callbacks suppressed [ 890.563194][ T5875] bond6: (slave dummy0): failed to get link speed/duplex [ 890.599951][ T42] audit: type=1800 audit(2000000643.206:4844): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16930 res=0 errno=0 [ 890.650410][ T42] audit: type=1800 audit(2000000643.256:4845): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17059 res=0 errno=0 [ 890.674180][ T7099] bond6: (slave dummy0): failed to get link speed/duplex [ 890.690103][ T42] audit: type=1800 audit(2000000643.296:4846): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16801 res=0 errno=0 [ 890.831142][ T7099] bond6: (slave dummy0): failed to get link speed/duplex [ 890.951117][ T5875] bond6: (slave dummy0): failed to get link speed/duplex [ 891.071151][ T5875] bond6: (slave dummy0): failed to get link speed/duplex [ 891.085007][ T2036] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9143'. [ 891.090005][ T2036] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9143'. [ 891.094043][ T2036] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 891.181165][ T5875] bond6: (slave dummy0): failed to get link speed/duplex [ 891.226710][ T2049] loop6: detected capacity change from 0 to 2640 [ 891.229075][ T2049] buffer_io_error: 53 callbacks suppressed [ 891.229093][ T2049] Buffer I/O error on dev loop6, logical block 0, async page read [ 891.237418][ T2049] Buffer I/O error on dev loop6, logical block 0, async page read [ 891.241678][ T2049] Buffer I/O error on dev loop6, logical block 0, async page read [ 891.244909][ T2049] Buffer I/O error on dev loop6, logical block 0, async page read [ 891.247626][ T2049] Buffer I/O error on dev loop6, logical block 0, async page read [ 891.250474][ T2049] Buffer I/O error on dev loop6, logical block 0, async page read [ 891.256883][ T2049] Buffer I/O error on dev loop6, logical block 0, async page read [ 891.260295][ T2049] Buffer I/O error on dev loop6, logical block 0, async page read [ 891.265700][ T2049] ldm_validate_partition_table(): Disk read failed. [ 891.268770][ T2049] Buffer I/O error on dev loop6, logical block 0, async page read [ 891.272212][ T2049] Buffer I/O error on dev loop6, logical block 0, async page read [ 891.275042][ T2049] Dev loop6: unable to read RDB block 0 [ 891.276921][ T2049] loop6: unable to read partition table [ 891.281076][ T2049] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 891.301164][ T5539] bond6: (slave dummy0): failed to get link speed/duplex [ 891.421156][ T5539] bond6: (slave dummy0): failed to get link speed/duplex [ 891.531183][ T5875] bond6: (slave dummy0): failed to get link speed/duplex [ 891.830472][ T2076] FAULT_INJECTION: forcing a failure. [ 891.830472][ T2076] name failslab, interval 1, probability 0, space 0, times 0 [ 891.836335][ T2076] CPU: 1 UID: 0 PID: 2076 Comm: syz.5.9155 Tainted: G L syzkaller #0 PREEMPT(full) [ 891.836368][ T2076] Tainted: [L]=SOFTLOCKUP [ 891.836374][ T2076] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 891.836386][ T2076] Call Trace: [ 891.836394][ T2076] [ 891.836401][ T2076] dump_stack_lvl+0x100/0x190 [ 891.836431][ T2076] should_fail_ex.cold+0x5/0xa [ 891.836453][ T2076] should_failslab+0xc2/0x120 [ 891.836478][ T2076] kmem_cache_alloc_noprof+0x91/0x6a0 [ 891.836513][ T2076] ? stack_trace_save+0x8e/0xc0 [ 891.836536][ T2076] ? alloc_empty_file+0x5b/0x1c0 [ 891.836562][ T2076] alloc_empty_file+0x5b/0x1c0 [ 891.836584][ T2076] path_openat+0xe7/0x4280 [ 891.836605][ T2076] ? __kasan_slab_alloc+0x89/0x90 [ 891.836628][ T2076] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 891.836651][ T2076] ? do_getname+0x35/0x390 [ 891.836676][ T2076] ? do_sys_openat2+0xc7/0x1e0 [ 891.836700][ T2076] ? __x64_sys_openat+0x12d/0x210 [ 891.836719][ T2076] ? do_syscall_64+0x115/0x870 [ 891.836742][ T2076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.836766][ T2076] ? __pfx_path_openat+0x10/0x10 [ 891.836789][ T2076] do_file_open+0x20e/0x430 [ 891.836811][ T2076] ? __pfx_do_file_open+0x10/0x10 [ 891.836845][ T2076] ? alloc_fd+0x471/0x7a0 [ 891.836867][ T2076] ? do_getname+0x191/0x390 [ 891.836890][ T2076] do_sys_openat2+0x10f/0x1e0 [ 891.836913][ T2076] ? __pfx_do_sys_openat2+0x10/0x10 [ 891.836938][ T2076] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 891.836965][ T2076] ? __fget_files+0x21f/0x3d0 [ 891.836990][ T2076] __x64_sys_openat+0x12d/0x210 [ 891.837011][ T2076] ? __pfx___x64_sys_openat+0x10/0x10 [ 891.837034][ T2076] ? ksys_write+0x1ac/0x250 [ 891.837056][ T2076] do_syscall_64+0x115/0x870 [ 891.837077][ T2076] ? clear_bhb_loop+0x70/0xc0 [ 891.837096][ T2076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.837113][ T2076] RIP: 0033:0x7f864419e0d9 [ 891.837131][ T2076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 891.837147][ T2076] RSP: 002b:00007f8645037028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 891.837166][ T2076] RAX: ffffffffffffffda RBX: 00007f8644425fa0 RCX: 00007f864419e0d9 [ 891.837180][ T2076] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 891.837192][ T2076] RBP: 00007f8645037090 R08: 0000000000000000 R09: 0000000000000000 [ 891.837203][ T2076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 891.837212][ T2076] R13: 00007f8644426038 R14: 00007f8644425fa0 R15: 00007ffcda423bf8 [ 891.837237][ T2076] [ 891.997237][ T2080] CUSE: unknown device info "" [ 891.999395][ T2080] CUSE: unknown device info "" [ 892.001627][ T2080] CUSE: unknown device info "" [ 892.003625][ T2080] CUSE: unknown device info "" [ 892.005858][ T2080] CUSE: zero length info key specified [ 892.016745][ T2080] dvmrp0: entered allmulticast mode [ 892.060819][ T2089] loop6: detected capacity change from 0 to 2640 [ 892.068119][ T2089] ldm_validate_partition_table(): Disk read failed. [ 892.071832][ T2089] Dev loop6: unable to read RDB block 0 [ 892.075073][ T2089] loop6: unable to read partition table [ 892.081135][ T2089] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 892.482273][ T2113] jffs2: notice: (2113) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 892.500751][ T2114] IPVS: length: 18 != 6815752 [ 892.556386][ T2119] jffs2: notice: (2119) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 892.643344][ T2126] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 892.652987][ T2126] pci 0000:00:1d.0: BAR 4 [io 0x2020-0x203f] [ 892.664188][ T2126] pci 0000:00:1d.0: Adding to iommu group 7 [ 892.674125][ T2126] pci 0000:00:1d.0: BAR 4 [io 0x2020-0x203f]: assigned [ 892.740278][ T2126] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 62202 usecs [ 892.782793][ T2126] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 892.790003][ T2126] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 1 [ 892.794796][ T2126] uhci_hcd 0000:00:1d.0: detected 2 ports [ 892.799852][ T2126] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002020 [ 892.804489][ T2126] usb usb1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02 [ 892.809969][ T2126] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 892.813544][ T2126] usb usb1: Product: UHCI Host Controller [ 892.815998][ T2126] usb usb1: Manufacturer: Linux syzkaller uhci_hcd [ 892.818750][ T2126] usb usb1: SerialNumber: 0000:00:1d.0 [ 892.894805][ T7560] usb 12-1: new high-speed USB device number 13 using dummy_hcd [ 892.945968][ T2136] netlink: 'syz.5.9172': attribute type 1 has an invalid length. [ 892.975540][ T2136] 8021q: adding VLAN 0 to HW filter on device bond8 [ 892.982989][ T2136] dummy0: left promiscuous mode [ 892.988841][ T2136] bond8: (slave dummy0): Enslaving as a backup interface with an up link [ 892.994396][ T2136] netlink: 'syz.5.9172': attribute type 10 has an invalid length. [ 892.997703][ T2136] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9172'. [ 893.001753][ T2136] dummy0: entered promiscuous mode [ 893.005460][ T2136] bond8: (slave dummy0): Releasing backup interface [ 893.081051][ T7560] usb 12-1: Using ep0 maxpacket: 32 [ 893.086410][ T7560] usb 12-1: unable to get BOS descriptor or descriptor too short [ 893.091073][ T7560] usb 12-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 893.105438][ T7560] usb 12-1: config 14 has an invalid interface number: 57 but max is 1 [ 893.110845][ T7560] usb 12-1: config 14 has an invalid interface number: 228 but max is 1 [ 893.119969][ T7560] usb 12-1: config 14 has no interface number 0 [ 893.124508][ T7560] usb 12-1: config 14 has no interface number 1 [ 893.131115][ T7560] usb 12-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 893.134145][ T2141] loop6: detected capacity change from 0 to 2640 [ 893.137863][ T7560] usb 12-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 893.138829][ T2141] ldm_validate_partition_table(): Disk read failed. [ 893.147801][ T2141] Dev loop6: unable to read RDB block 0 [ 893.150040][ T7560] usb 12-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 893.150050][ T2141] loop6: unable to read partition table [ 893.150163][ T2141] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 893.159674][ T7560] usb 12-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 893.168049][ T7560] usb 12-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 893.176755][ T7560] usb 12-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 893.185442][ T7560] usb 12-1: config 14 interface 57 has no altsetting 0 [ 893.189787][ T7560] usb 12-1: config 14 interface 228 has no altsetting 0 [ 893.196942][ T7560] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.202186][ T7560] usb 12-1: Product: syz [ 893.203570][ T7560] usb 12-1: Manufacturer: syz [ 893.211045][ T7560] usb 12-1: SerialNumber: syz [ 893.250181][ T2145] binder: 2144:2145 ioctl 4054561e 200000000400 returned -22 [ 893.358811][ T5137] ldm_validate_partition_table(): Disk read failed. [ 893.361908][ T5137] Dev loop6: unable to read RDB block 0 [ 893.364675][ T5137] loop6: unable to read partition table [ 893.529760][ T2163] zero sized request [ 893.533266][ T2163] CIFS: iocharset name too long [ 893.601709][ T841] e1000 0000:00:06.0 eth0: Reset adapter [ 893.674308][ T2163] netlink: 7 bytes leftover after parsing attributes in process `syz.2.9180'. [ 893.758074][ T2176] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.762487][ T841] e1000 0000:00:06.0 eth0: Reset adapter [ 893.796277][ T2182] netlink: 'syz.1.9183': attribute type 1 has an invalid length. [ 893.802998][ T2172] uhci_hcd 0000:00:1d.0: remove, state 1 [ 893.804889][ T2172] usb usb1: USB disconnect, device number 1 [ 893.837457][ T2172] uhci_hcd 0000:00:1d.0: USB bus 1 deregistered [ 893.896512][ T2182] 8021q: adding VLAN 0 to HW filter on device bond3 [ 893.915839][ T2174] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 893.926919][ T2174] pci 0000:00:1d.0: BAR 4 [io 0x2020-0x203f] [ 893.931508][ T2185] bond3: (slave veth3): Enslaving as a backup interface with a down link [ 893.941434][ T2174] pci 0000:00:1d.0: Adding to iommu group 7 [ 893.944138][ T2182] netlink: 'syz.1.9183': attribute type 10 has an invalid length. [ 893.951157][ T2182] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9183'. [ 893.954509][ T2174] pci 0000:00:1d.0: BAR 4 [io 0x2020-0x203f]: assigned [ 893.956482][ T2182] : entered promiscuous mode [ 893.962772][ T2182] bond2: (slave ): Releasing active interface [ 894.023215][ T2174] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 62001 usecs [ 894.053123][ T2174] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 894.057914][ T2174] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 1 [ 894.060722][ T2174] uhci_hcd 0000:00:1d.0: detected 2 ports [ 894.063224][ T2174] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002020 [ 894.066011][ T2174] usb usb1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02 [ 894.069708][ T2174] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 894.072385][ T2174] usb usb1: Product: UHCI Host Controller [ 894.074211][ T2174] usb usb1: Manufacturer: Linux syzkaller uhci_hcd [ 894.076503][ T2174] usb usb1: SerialNumber: 0000:00:1d.0 [ 894.092113][ T29] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 894.176847][ T2193] loop6: detected capacity change from 0 to 2640 [ 894.179835][ T2193] ldm_validate_partition_table(): Disk read failed. [ 894.182082][ T2193] Dev loop6: unable to read RDB block 0 [ 894.184235][ T2193] loop6: unable to read partition table [ 894.186273][ T2193] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 894.242950][ T29] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 894.248656][ T29] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 894.254435][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 894.259013][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 894.263592][ T29] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 894.270336][ T29] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 894.274245][ T29] usb 7-1: Manufacturer: syz [ 895.581393][T10557] net_ratelimit: 34 callbacks suppressed [ 895.581446][T10557] bond6: (slave dummy0): failed to get link speed/duplex [ 895.660768][T21252] usb 12-1: USB disconnect, device number 13 [ 895.684606][ T42] kauditd_printk_skb: 111 callbacks suppressed [ 895.684626][ T42] audit: type=1800 audit(2000000648.296:4958): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17059 res=0 errno=0 [ 895.691363][T10557] bond6: (slave dummy0): failed to get link speed/duplex [ 895.811186][ T12] bond6: (slave dummy0): failed to get link speed/duplex [ 895.921617][T10557] bond6: (slave dummy0): failed to get link speed/duplex [ 895.922624][ T841] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 896.041157][ T5875] bond6: (slave dummy0): failed to get link speed/duplex [ 896.151246][ T5539] bond6: (slave dummy0): failed to get link speed/duplex [ 896.272094][ T12] bond6: (slave dummy0): failed to get link speed/duplex [ 896.391782][ T5805] bond6: (slave dummy0): failed to get link speed/duplex [ 896.511243][ T5805] bond6: (slave dummy0): failed to get link speed/duplex [ 896.621598][ T5805] bond6: (slave dummy0): failed to get link speed/duplex [ 896.836980][ T841] usb 7-1: USB disconnect, device number 16 [ 896.854518][ T42] audit: type=1400 audit(2000000649.466:4959): avc: denied { write } for pid=2213 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 896.862873][ T42] audit: type=1800 audit(2000000649.466:4960): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16414 res=0 errno=0 [ 896.907581][ T42] audit: type=1400 audit(2000000649.516:4961): avc: denied { write } for pid=2216 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 897.155306][ T42] audit: type=1400 audit(2000000649.766:4962): avc: denied { write } for pid=2220 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 897.163802][ T2224] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 897.190487][ T2230] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 897.201440][ T42] audit: type=1800 audit(2000000649.806:4963): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16801 res=0 errno=0 [ 897.229216][ T42] audit: type=1800 audit(2000000649.836:4964): pid=2238 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.9192" name="console" dev="sysfs" ino=13280 res=0 errno=0 [ 897.249638][ T42] audit: type=1400 audit(2000000649.836:4965): avc: denied { write } for pid=2236 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 897.261933][ T42] audit: type=1800 audit(2000000649.856:4966): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16414 res=0 errno=0 [ 897.262646][ T2242] jffs2: notice: (2242) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 897.294049][ T42] audit: type=1800 audit(2000524937.899:4967): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16801 res=0 errno=0 [ 897.314756][ T2245] syzkaller0: entered promiscuous mode [ 897.316635][ T2245] syzkaller0: entered allmulticast mode [ 897.499865][ T2258] loop6: detected capacity change from 0 to 2640 [ 897.504687][ T2258] buffer_io_error: 90 callbacks suppressed [ 897.504705][ T2258] Buffer I/O error on dev loop6, logical block 0, async page read [ 897.509733][ T2258] Buffer I/O error on dev loop6, logical block 0, async page read [ 897.512500][ T2258] Buffer I/O error on dev loop6, logical block 0, async page read [ 897.515042][ T2258] Buffer I/O error on dev loop6, logical block 0, async page read [ 897.517481][ T2258] Buffer I/O error on dev loop6, logical block 0, async page read [ 897.519953][ T2258] Buffer I/O error on dev loop6, logical block 0, async page read [ 897.522677][ T2258] Buffer I/O error on dev loop6, logical block 0, async page read [ 897.525279][ T2258] Buffer I/O error on dev loop6, logical block 0, async page read [ 897.527773][ T2258] ldm_validate_partition_table(): Disk read failed. [ 897.527785][ T2260] uhci_hcd 0000:00:1d.0: remove, state 1 [ 897.529863][ T2258] Buffer I/O error on dev loop6, logical block 0, async page read [ 897.529886][ T2258] Buffer I/O error on dev loop6, logical block 0, async page read [ 897.529914][ T2258] Dev loop6: unable to read RDB block 0 [ 897.531903][ T2260] usb usb1: USB disconnect, device number 1 [ 897.535521][ T2258] loop6: unable to read partition table [ 897.543062][ T2258] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 897.544115][ T2260] uhci_hcd 0000:00:1d.0: USB bus 1 deregistered [ 897.646300][ T2261] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 897.653693][ T2261] pci 0000:00:1d.0: BAR 4 [io 0x2020-0x203f] [ 897.660622][ T2261] pci 0000:00:1d.0: Adding to iommu group 7 [ 897.668987][ T2261] pci 0000:00:1d.0: BAR 4 [io 0x2020-0x203f]: assigned [ 897.759405][ T2261] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 85365 usecs [ 897.816800][ T2261] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 897.823254][ T2261] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 1 [ 897.826176][ T2261] uhci_hcd 0000:00:1d.0: detected 2 ports [ 897.829123][ T2261] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002020 [ 897.831847][ T2261] usb usb1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02 [ 897.835820][ T2261] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 897.838439][ T2261] usb usb1: Product: UHCI Host Controller [ 897.840232][ T2261] usb usb1: Manufacturer: Linux syzkaller uhci_hcd [ 897.842263][ T2261] usb usb1: SerialNumber: 0000:00:1d.0 [ 897.842701][ T2268] syzkaller0: entered promiscuous mode [ 897.846500][ T2268] syzkaller0: entered allmulticast mode [ 897.861997][ T2268] FAULT_INJECTION: forcing a failure. [ 897.861997][ T2268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 897.867611][ T2268] CPU: 0 UID: 0 PID: 2268 Comm: syz.7.9199 Tainted: G L syzkaller #0 PREEMPT(full) [ 897.867642][ T2268] Tainted: [L]=SOFTLOCKUP [ 897.867648][ T2268] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 897.867659][ T2268] Call Trace: [ 897.867667][ T2268] [ 897.867676][ T2268] dump_stack_lvl+0x100/0x190 [ 897.867708][ T2268] should_fail_ex.cold+0x5/0xa [ 897.867734][ T2268] _copy_from_user+0x2e/0xd0 [ 897.867763][ T2268] move_addr_to_kernel+0x65/0x170 [ 897.867797][ T2268] copy_msghdr_from_user+0x3f0/0x4c0 [ 897.867815][ T2268] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 897.867845][ T2268] ___sys_sendmsg+0x106/0x1e0 [ 897.867865][ T2268] ? __pfx____sys_sendmsg+0x10/0x10 [ 897.867883][ T2268] ? __lock_acquire+0x49f/0x1a40 [ 897.867928][ T2268] ? get_pid_task+0x106/0x250 [ 897.867962][ T2268] __sys_sendmsg+0x160/0x210 [ 897.867992][ T2268] ? __pfx___sys_sendmsg+0x10/0x10 [ 897.868019][ T2268] do_syscall_64+0x115/0x870 [ 897.868038][ T2268] ? clear_bhb_loop+0x70/0xc0 [ 897.868074][ T2268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.868090][ T2268] RIP: 0033:0x7fc639d9e0d9 [ 897.868107][ T2268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 897.868125][ T2268] RSP: 002b:00007fc63abf9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 897.868147][ T2268] RAX: ffffffffffffffda RBX: 00007fc63a025fa0 RCX: 00007fc639d9e0d9 [ 897.868160][ T2268] RDX: 0000000000008000 RSI: 00002000000000c0 RDI: 0000000000000007 [ 897.868173][ T2268] RBP: 00007fc63abf9090 R08: 0000000000000000 R09: 0000000000000000 [ 897.868185][ T2268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 897.868198][ T2268] R13: 00007fc63a026038 R14: 00007fc63a025fa0 R15: 00007fff2dd960b8 [ 897.868224][ T2268] [ 898.093910][ T2272] syzkaller0: entered promiscuous mode [ 898.096175][ T2272] syzkaller0: entered allmulticast mode [ 898.096185][ T2274] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9202'. [ 898.222181][ T2282] loop6: detected capacity change from 0 to 2640 [ 898.225069][ T2280] jffs2: notice: (2280) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 898.225764][ T2282] ldm_validate_partition_table(): Disk read failed. [ 898.237903][ T2282] Dev loop6: unable to read RDB block 0 [ 898.239919][ T2282] loop6: unable to read partition table [ 898.241842][ T2282] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 901.726677][ T5875] vlan2: left promiscuous mode [ 901.728651][ T5875] geneve0: left promiscuous mode [ 901.730593][ T5875] bridge0: port 3(vlan2) entered disabled state [ 901.735549][ T5875] bridge_slave_1: left promiscuous mode [ 901.738197][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.744935][ T5875] bridge_slave_0: left promiscuous mode [ 901.746928][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.752405][ T42] kauditd_printk_skb: 33 callbacks suppressed [ 901.752420][ T42] audit: type=1800 audit(2000524942.326:5001): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16801 res=0 errno=0 [ 901.820768][ T42] audit: type=1800 audit(2000524942.395:5002): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=309213 res=0 errno=0 [ 901.831678][ T2308] jffs2: notice: (2308) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 901.836792][ T2307] netlink: 'syz.7.9211': attribute type 1 has an invalid length. [ 901.838244][ T42] audit: type=1800 audit(2000524942.415:5003): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17059 res=0 errno=0 [ 901.862989][ T42] audit: type=1400 audit(2000524942.435:5004): avc: denied { write } for pid=2305 comm="syz.5.9209" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 901.882455][ T42] audit: type=1800 audit(2000524942.445:5005): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16801 res=0 errno=0 [ 901.913549][ T42] audit: type=1800 audit(2000524942.485:5006): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16414 res=0 errno=0 [ 901.930603][ T42] audit: type=1800 audit(2000524942.505:5007): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=309213 res=0 errno=0 [ 901.940992][ T2321] netlink: 'syz.7.9211': attribute type 10 has an invalid length. [ 901.944198][ T2321] netlink: 40 bytes leftover after parsing attributes in process `syz.7.9211'. [ 901.947999][ T42] audit: type=1800 audit(2000524942.515:5008): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=478627 res=0 errno=0 [ 901.951358][ T2320] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9214'. [ 901.998155][ T42] audit: type=1800 audit(2000524942.574:5009): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16801 res=0 errno=0 [ 902.069280][ T5875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 902.110882][ T5875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 902.169578][ T5875] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 902.218490][ T5875] bond0 (unregistering): Released all slaves [ 902.226776][ T5875] bond1 (unregistering): Released all slaves [ 902.235820][ T5875] bond2 (unregistering): Released all slaves [ 902.244300][ T5875] bond3 (unregistering): (slave veth3): Releasing active interface [ 902.283529][ T5875] bond3 (unregistering): Released all slaves [ 902.292630][ T5875] bond4 (unregistering): (slave veth5): Releasing backup interface [ 902.339763][ T5875] bond4 (unregistering): Released all slaves [ 902.353381][ T5875] bond5 (unregistering): Released all slaves [ 902.364233][ T5875] bond6 (unregistering): (slave veth7): Releasing active interface [ 902.389891][ T5875] bond6 (unregistering): Released all slaves [ 902.399506][ T5875] bond7 (unregistering): (slave veth9): Releasing backup interface [ 902.430708][ T5875] bond7 (unregistering): Released all slaves [ 902.439094][ T5875] bond8 (unregistering): Released all slaves [ 902.450320][ T5875] bond9 (unregistering): (slave veth11): Releasing backup interface [ 902.480261][ T5875] bond9 (unregistering): Released all slaves [ 902.489128][ T5875] bond10 (unregistering): (slave veth13): Releasing backup interface [ 902.521022][ T5875] bond10 (unregistering): Released all slaves [ 902.529960][ T5875] bond11 (unregistering): (slave veth15): Releasing backup interface [ 902.571270][ T5875] bond11 (unregistering): Released all slaves [ 902.579378][ T5875] bond12 (unregistering): Released all slaves [ 902.587133][ T5875] bond13 (unregistering): Released all slaves [ 902.596147][ T5875] bond14 (unregistering): (slave veth17): Releasing active interface [ 902.622676][ T5875] bond14 (unregistering): Released all slaves [ 902.635901][ T5875] bond15 (unregistering): Released all slaves [ 902.649759][ T5875] bond16 (unregistering): Released all slaves [ 902.662903][ T5875] bond17 (unregistering): Released all slaves [ 902.690327][ T2307] 8021q: adding VLAN 0 to HW filter on device bond22 [ 902.696336][ T2313] bond21: (slave dummy0): Releasing backup interface [ 902.727117][ T2313] bond22: (slave dummy0): Enslaving as a backup interface with a down link [ 902.754823][ T42] audit: type=1800 audit(2000524943.319:5010): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17059 res=0 errno=0 [ 902.835198][ T2337] loop6: detected capacity change from 0 to 2640 [ 902.843468][ T2337] buffer_io_error: 32 callbacks suppressed [ 902.843487][ T2337] Buffer I/O error on dev loop6, logical block 0, async page read [ 902.853991][ T7099] net_ratelimit: 13 callbacks suppressed [ 902.854011][ T7099] bond6: (slave dummy0): failed to get link speed/duplex [ 902.855375][ T2337] Buffer I/O error on dev loop6, logical block 0, async page read [ 902.869780][ T2342] set match dimension is over the limit! [ 902.886180][ T5875] tipc: Left network mode [ 902.896340][ T2337] Buffer I/O error on dev loop6, logical block 0, async page read [ 902.913565][ T2337] Buffer I/O error on dev loop6, logical block 0, async page read [ 902.920375][ T2337] Buffer I/O error on dev loop6, logical block 0, async page read [ 902.927599][ T2337] Buffer I/O error on dev loop6, logical block 0, async page read [ 902.933353][ T2337] Buffer I/O error on dev loop6, logical block 0, async page read [ 902.936712][ T2337] Buffer I/O error on dev loop6, logical block 0, async page read [ 902.940209][ T2337] ldm_validate_partition_table(): Disk read failed. [ 902.944732][ T2337] Buffer I/O error on dev loop6, logical block 0, async page read [ 902.967137][ T2337] Buffer I/O error on dev loop6, logical block 0, async page read [ 902.972233][ T2349] batman_adv: batadv0: Adding interface: veth0 [ 902.972479][ T2337] Dev loop6: unable to read RDB block 0 [ 902.977239][ T2349] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 902.977968][ T2337] loop6: unable to read partition table [ 902.990725][ T2337] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 903.025938][ T2349] batman_adv: batadv0: Interface activated: veth0 [ 903.030245][ T2352] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 903.052986][ T2352] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 903.060355][ T2352] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 903.063541][ T2352] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 903.106381][ T2352] batman_adv: batadv0: Interface deactivated: veth0 [ 903.109377][ T2352] batman_adv: batadv0: Removing interface: veth0 [ 903.224964][ T5805] bond6: (slave dummy0): failed to get link speed/duplex [ 903.329943][ T2370] netlink: 'syz.5.9227': attribute type 1 has an invalid length. [ 903.376932][ T2370] 8021q: adding VLAN 0 to HW filter on device bond9 [ 903.466128][ T2370] bond9: (slave veth13): Enslaving as a backup interface with a down link [ 903.469049][ T2375] dummy0: left promiscuous mode [ 903.497079][ T2375] bond9: (slave dummy0): Enslaving as a backup interface with an up link [ 903.501535][ T2370] netlink: 'syz.5.9227': attribute type 10 has an invalid length. [ 903.504193][ T2370] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9227'. [ 903.547330][T10557] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 903.559316][ T2381] omfs: Invalid superblock (0) [ 903.585670][ T2385] geneve2: entered allmulticast mode [ 903.675290][ T2370] dummy0: entered promiscuous mode [ 903.693411][ T12] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 903.700112][ T2370] bond9: (slave dummy0): Removing an active aggregator [ 903.716067][ T2370] bond9: (slave dummy0): Releasing backup interface [ 903.725146][ T2387] jffs2: notice: (2387) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 903.805278][ T2395] FAULT_INJECTION: forcing a failure. [ 903.805278][ T2395] name failslab, interval 1, probability 0, space 0, times 0 [ 903.816500][ T2395] CPU: 0 UID: 0 PID: 2395 Comm: syz.5.9234 Tainted: G L syzkaller #0 PREEMPT(full) [ 903.816534][ T2395] Tainted: [L]=SOFTLOCKUP [ 903.816539][ T2395] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 903.816548][ T2395] Call Trace: [ 903.816555][ T2395] [ 903.816564][ T2395] dump_stack_lvl+0x100/0x190 [ 903.816613][ T2395] should_fail_ex.cold+0x5/0xa [ 903.816640][ T2395] should_failslab+0xc2/0x120 [ 903.816667][ T2395] kmem_cache_alloc_noprof+0x91/0x6a0 [ 903.816688][ T2395] ? do_getname+0x35/0x390 [ 903.816717][ T2395] do_getname+0x35/0x390 [ 903.816741][ T2395] user_path_at+0x26/0x60 [ 903.816761][ T2395] __x64_sys_mount+0x1fb/0x310 [ 903.816782][ T2395] ? __pfx___x64_sys_mount+0x10/0x10 [ 903.816808][ T2395] do_syscall_64+0x115/0x870 [ 903.816834][ T2395] ? clear_bhb_loop+0x70/0xc0 [ 903.816860][ T2395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.816878][ T2395] RIP: 0033:0x7f864419e0d9 [ 903.816895][ T2395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 903.816914][ T2395] RSP: 002b:00007f8645037028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 903.816934][ T2395] RAX: ffffffffffffffda RBX: 00007f8644425fa0 RCX: 00007f864419e0d9 [ 903.816947][ T2395] RDX: 0000200000000400 RSI: 0000200000000200 RDI: 0000200000000300 [ 903.816958][ T2395] RBP: 00007f8645037090 R08: 0000000000000000 R09: 0000000000000000 [ 903.816970][ T2395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 903.816981][ T2395] R13: 00007f8644426038 R14: 00007f8644425fa0 R15: 00007ffcda423bf8 [ 903.817007][ T2395] [ 903.958183][ T2410] loop6: detected capacity change from 0 to 2640 [ 903.962037][ T2410] ldm_validate_partition_table(): Disk read failed. [ 903.964902][ T2410] Dev loop6: unable to read RDB block 0 [ 903.977094][ T2410] loop6: unable to read partition table [ 903.979118][ T2410] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 904.060305][ T2411] uhci_hcd 0000:00:1d.0: remove, state 1 [ 904.063523][ T2411] usb usb1: USB disconnect, device number 1 [ 904.092414][ T2411] uhci_hcd 0000:00:1d.0: USB bus 1 deregistered [ 904.174403][ T2417] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 904.182865][ T2417] pci 0000:00:1d.0: BAR 4 [io 0x2020-0x203f] [ 904.192850][ T2417] pci 0000:00:1d.0: Adding to iommu group 7 [ 904.205980][ T2417] pci 0000:00:1d.0: BAR 4 [io 0x2020-0x203f]: assigned [ 904.290142][ T2417] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 78274 usecs [ 904.333110][ T2417] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 904.339874][ T2417] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 1 [ 904.342668][ T2417] uhci_hcd 0000:00:1d.0: detected 2 ports [ 904.345937][ T2417] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002020 [ 904.352314][ T2417] usb usb1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02 [ 904.356377][ T2417] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 904.359160][ T2417] usb usb1: Product: UHCI Host Controller [ 904.361281][ T2417] usb usb1: Manufacturer: Linux syzkaller uhci_hcd [ 904.364001][ T2417] usb usb1: SerialNumber: 0000:00:1d.0 [ 907.113039][ T2405] ipvlan0: Caught tx_queue_len zero misconfig [ 907.148258][ T42] kauditd_printk_skb: 38 callbacks suppressed [ 907.148279][ T42] audit: type=1800 audit(2000524947.688:5049): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16801 res=0 errno=0 [ 907.162401][ T5539] bond6: (slave dummy0): failed to get link speed/duplex [ 907.166335][ T2423] CIFS: enabling forceuid mount option implicitly because uid= option is specified [ 907.169447][ T2423] CIFS mount error: No usable UNC path provided in device string! [ 907.169447][ T2423] [ 907.173034][ T2423] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 907.176905][ T42] audit: type=1400 audit(2000524947.718:5050): avc: denied { remount } for pid=2422 comm="syz.5.9239" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 907.190572][ T2423] jffs2: notice: (2423) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 907.222505][ T42] audit: type=1800 audit(2000524947.757:5051): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17059 res=0 errno=0 [ 907.273615][ T5539] bond6: (slave dummy0): failed to get link speed/duplex [ 907.285589][ T2429] netlink: 'syz.7.9242': attribute type 1 has an invalid length. [ 907.295473][ T42] audit: type=1800 audit(2000524947.837:5052): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17059 res=0 errno=0 [ 907.316597][ T42] audit: type=1800 audit(2000524947.857:5053): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16414 res=0 errno=0 [ 907.331949][ T42] audit: type=1800 audit(2000524947.867:5054): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=309213 res=0 errno=0 [ 907.336529][ T2429] 8021q: adding VLAN 0 to HW filter on device bond23 [ 907.344613][ T42] audit: type=1800 audit(2000524947.886:5055): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16801 res=0 errno=0 [ 907.390994][ T2430] 8021q: adding VLAN 0 to HW filter on device bond23 [ 907.393498][ T2430] bond23: (slave gre1): The slave device specified does not support setting the MAC address [ 907.405795][ T2430] bond23: (slave gre1): Error -95 calling set_mac_address [ 907.424896][ T2446] jffs2: notice: (2446) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 907.435475][ T42] audit: type=1400 audit(2000524947.966:5056): avc: denied { write } for pid=2444 comm="syz.5.9245" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 907.459292][ T42] audit: type=1800 audit(2000524947.996:5057): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16414 res=0 errno=0 [ 907.476320][T10557] bond6: (slave dummy0): failed to get link speed/duplex [ 907.486659][ T42] audit: type=1800 audit(2000524948.026:5058): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16801 res=0 errno=0 [ 907.612872][T10557] bond6: (slave dummy0): failed to get link speed/duplex [ 907.689157][ T2460] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9249'. [ 907.691213][ T2471] geneve2: entered allmulticast mode [ 907.728752][ T2468] syzkaller0: entered promiscuous mode [ 907.730682][ T2468] syzkaller0: entered allmulticast mode [ 907.746317][ T7099] bond6: (slave dummy0): failed to get link speed/duplex [ 907.829451][ T2460] syzkaller0: entered promiscuous mode [ 907.831411][ T2460] syzkaller0: entered allmulticast mode [ 907.852988][ T2478] xt_cluster: you have exceeded the maximum number of cluster nodes (205 > 32) [ 907.866884][ T2481] loop6: detected capacity change from 0 to 2640 [ 907.872481][ T2481] ldm_validate_partition_table(): Disk read failed. [ 907.875571][ T2481] Dev loop6: unable to read RDB block 0 [ 907.877976][ T2478] snd_dummy snd_dummy.0: control 2:0:0:syz0:0 is already present [ 907.882745][ T2481] loop6: unable to read partition table [ 907.885369][ T2481] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 907.910209][ T413] buffer_io_error: 48 callbacks suppressed [ 907.910228][ T413] Buffer I/O error on dev loop6, logical block 0, async page read [ 907.921385][ T413] Buffer I/O error on dev loop6, logical block 0, async page read [ 907.931765][ T413] Buffer I/O error on dev loop6, logical block 0, async page read [ 907.944655][ T413] Buffer I/O error on dev loop6, logical block 0, async page read [ 907.945332][ T2485] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9258'. [ 907.952204][ T413] Buffer I/O error on dev loop6, logical block 0, async page read [ 907.988540][ T7099] bond6: (slave dummy0): failed to get link speed/duplex [ 908.029795][ T2494] FAULT_INJECTION: forcing a failure. [ 908.029795][ T2494] name failslab, interval 1, probability 0, space 0, times 0 [ 908.033821][ T2494] CPU: 3 UID: 0 PID: 2494 Comm: syz.2.9261 Tainted: G L syzkaller #0 PREEMPT(full) [ 908.033840][ T2494] Tainted: [L]=SOFTLOCKUP [ 908.033844][ T2494] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 908.033851][ T2494] Call Trace: [ 908.033856][ T2494] [ 908.033860][ T2494] dump_stack_lvl+0x100/0x190 [ 908.033884][ T2494] should_fail_ex.cold+0x5/0xa [ 908.033900][ T2494] should_failslab+0xc2/0x120 [ 908.033919][ T2494] __kmalloc_noprof+0xfc/0x820 [ 908.033932][ T2494] ? __lock_acquire+0x49f/0x1a40 [ 908.033948][ T2494] ? tomoyo_encode2+0xfb/0x3c0 [ 908.033977][ T2494] tomoyo_encode2+0xfb/0x3c0 [ 908.033990][ T2494] tomoyo_encode+0x29/0x50 [ 908.034000][ T2494] tomoyo_mount_acl+0x14c/0x8b0 [ 908.034025][ T2494] ? is_bpf_text_address+0x8a/0x1a0 [ 908.034051][ T2494] ? bpf_ksym_find+0x128/0x1c0 [ 908.034070][ T2494] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 908.034087][ T2494] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 908.034104][ T2494] ? kernel_text_address+0x8d/0x100 [ 908.034118][ T2494] ? unwind_get_return_address+0x59/0xa0 [ 908.034145][ T2494] ? tomoyo_domain+0xb2/0x150 [ 908.034157][ T2494] ? tomoyo_profile+0x47/0x60 [ 908.034172][ T2494] tomoyo_mount_permission+0x214/0x460 [ 908.034189][ T2494] ? tomoyo_mount_permission+0x1f6/0x460 [ 908.034208][ T2494] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 908.034234][ T2494] security_sb_mount+0xdd/0x270 [ 908.034269][ T2494] path_mount+0x158/0x23d0 [ 908.034289][ T2494] ? __pfx_path_mount+0x10/0x10 [ 908.034303][ T2494] ? lockdep_hardirqs_on+0x78/0x100 [ 908.034322][ T2494] ? putname+0xb1/0x110 [ 908.034335][ T2494] ? kmem_cache_free+0x127/0x6b0 [ 908.034352][ T2494] ? __x64_sys_mount+0x293/0x310 [ 908.034366][ T2494] __x64_sys_mount+0x293/0x310 [ 908.034382][ T2494] ? __pfx___x64_sys_mount+0x10/0x10 [ 908.034401][ T2494] do_syscall_64+0x115/0x870 [ 908.034417][ T2494] ? clear_bhb_loop+0x70/0xc0 [ 908.034432][ T2494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.034444][ T2494] RIP: 0033:0x7f8dfc79e0d9 [ 908.034455][ T2494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 908.034467][ T2494] RSP: 002b:00007f8dfd612028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 908.034480][ T2494] RAX: ffffffffffffffda RBX: 00007f8dfca25fa0 RCX: 00007f8dfc79e0d9 [ 908.034487][ T2494] RDX: 0000200000000400 RSI: 0000200000000200 RDI: 0000200000000300 [ 908.034494][ T2494] RBP: 00007f8dfd612090 R08: 0000000000000000 R09: 0000000000000000 [ 908.034501][ T2494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 908.034507][ T2494] R13: 00007f8dfca26038 R14: 00007f8dfca25fa0 R15: 00007ffdeed61198 [ 908.034522][ T2494] [ 908.098649][T10557] bond6: (slave dummy0): failed to get link speed/duplex [ 908.140642][ T2491] kvm: kvm [2484]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 908.158000][ T2491] kvm: kvm [2484]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 908.221720][ T2497] tcf_pedit_act: 24 callbacks suppressed [ 908.221734][ T2497] tc action pedit offset must be on 32 bit boundaries [ 908.226445][ T2497] tc action pedit offset must be on 32 bit boundaries [ 908.228496][ T2497] tc action pedit offset must be on 32 bit boundaries [ 908.233169][ T2497] tc action pedit offset must be on 32 bit boundaries [ 908.235323][ T2497] tc action pedit offset must be on 32 bit boundaries [ 908.237447][ T2497] tc action pedit offset must be on 32 bit boundaries [ 908.239637][ T2497] tc action pedit offset must be on 32 bit boundaries [ 908.241819][ T2497] tc action pedit offset must be on 32 bit boundaries [ 908.244051][ T2497] tc action pedit offset must be on 32 bit boundaries [ 908.246169][ T2497] tc action pedit offset must be on 32 bit boundaries [ 908.248289][ T2497] 0: reclassify loop, rule prio 0, protocol 800 [ 908.305829][ T2499] syzkaller1: entered promiscuous mode [ 908.308186][ T2499] syzkaller1: entered allmulticast mode [ 908.329347][ T2501] jffs2: notice: (2501) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 908.420964][T10557] bond6: (slave dummy0): failed to get link speed/duplex [ 908.431401][ T2506] jffs2: notice: (2506) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 908.514630][ T2511] FAULT_INJECTION: forcing a failure. [ 908.514630][ T2511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 908.520523][ T2511] CPU: 3 UID: 0 PID: 2511 Comm: syz.5.9268 Tainted: G L syzkaller #0 PREEMPT(full) [ 908.520551][ T2511] Tainted: [L]=SOFTLOCKUP [ 908.520557][ T2511] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 908.520568][ T2511] Call Trace: [ 908.520583][ T2511] [ 908.520590][ T2511] dump_stack_lvl+0x100/0x190 [ 908.520618][ T2511] should_fail_ex.cold+0x5/0xa [ 908.520642][ T2511] _copy_from_user+0x2e/0xd0 [ 908.520668][ T2511] copy_msghdr_from_user+0x9f/0x4c0 [ 908.520687][ T2511] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 908.520715][ T2511] ___sys_sendmsg+0x106/0x1e0 [ 908.520752][ T2511] ? __pfx____sys_sendmsg+0x10/0x10 [ 908.520769][ T2511] ? __lock_acquire+0x49f/0x1a40 [ 908.520792][ T2511] ? get_pid_task+0x106/0x250 [ 908.520833][ T2511] __sys_sendmsg+0x160/0x210 [ 908.520856][ T2511] ? __pfx___sys_sendmsg+0x10/0x10 [ 908.520894][ T2511] do_syscall_64+0x115/0x870 [ 908.520918][ T2511] ? clear_bhb_loop+0x70/0xc0 [ 908.520939][ T2511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.520956][ T2511] RIP: 0033:0x7f864419e0d9 [ 908.520972][ T2511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 908.520988][ T2511] RSP: 002b:00007f8645037028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 908.521014][ T2511] RAX: ffffffffffffffda RBX: 00007f8644425fa0 RCX: 00007f864419e0d9 [ 908.521024][ T2511] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 908.521035][ T2511] RBP: 00007f8645037090 R08: 0000000000000000 R09: 0000000000000000 [ 908.521045][ T2511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 908.521055][ T2511] R13: 00007f8644426038 R14: 00007f8644425fa0 R15: 00007ffcda423bf8 [ 908.521079][ T2511] [ 908.646207][ T2519] netlink: 'syz.1.9271': attribute type 1 has an invalid length. [ 908.673575][ T2519] 8021q: adding VLAN 0 to HW filter on device bond4 [ 908.721185][ T2523] loop6: detected capacity change from 0 to 2640 [ 908.725946][ T2523] Buffer I/O error on dev loop6, logical block 0, async page read [ 908.729330][ T2523] Buffer I/O error on dev loop6, logical block 0, async page read [ 908.732537][ T2523] Buffer I/O error on dev loop6, logical block 0, async page read [ 908.736001][ T2523] Buffer I/O error on dev loop6, logical block 0, async page read [ 908.739242][ T2523] Buffer I/O error on dev loop6, logical block 0, async page read [ 908.742699][ T2523] ldm_validate_partition_table(): Disk read failed. [ 908.745926][ T2523] Dev loop6: unable to read RDB block 0 [ 908.749541][ T2523] loop6: unable to read partition table [ 908.752354][ T2523] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 908.756651][ T2519] bond4: (slave veth5): Enslaving as an active interface with a down link [ 908.766772][ T2519] netlink: 'syz.1.9271': attribute type 10 has an invalid length. [ 908.769680][ T2519] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9271'. [ 908.855927][ T2526] jffs2: notice: (2526) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 908.874468][ T12] bond6: (slave dummy0): failed to get link speed/duplex [ 908.925567][ T2530] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9274'. [ 908.930461][ T2531] netlink: 'syz.7.9275': attribute type 1 has an invalid length. [ 908.945170][ T2530] FAULT_INJECTION: forcing a failure. [ 908.945170][ T2530] name failslab, interval 1, probability 0, space 0, times 0 [ 908.952194][ T2530] CPU: 3 UID: 0 PID: 2530 Comm: syz.1.9274 Tainted: G L syzkaller #0 PREEMPT(full) [ 908.952215][ T2530] Tainted: [L]=SOFTLOCKUP [ 908.952220][ T2530] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 908.952227][ T2530] Call Trace: [ 908.952232][ T2530] [ 908.952238][ T2530] dump_stack_lvl+0x100/0x190 [ 908.952261][ T2530] should_fail_ex.cold+0x5/0xa [ 908.952276][ T2530] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 908.952310][ T2530] should_failslab+0xc2/0x120 [ 908.952327][ T2530] kmem_cache_alloc_noprof+0x91/0x6a0 [ 908.952344][ T2530] ? skb_clone+0x190/0x400 [ 908.952370][ T2530] skb_clone+0x190/0x400 [ 908.952390][ T2530] netlink_deliver_tap+0xaed/0xcc0 [ 908.952422][ T2530] netlink_unicast+0x6a5/0x850 [ 908.952438][ T2530] ? __pfx_netlink_unicast+0x10/0x10 [ 908.952449][ T2530] ? genl_rcv_msg+0x4be/0x800 [ 908.952467][ T2530] netlink_ack+0x655/0xb80 [ 908.952483][ T2530] netlink_rcv_skb+0x333/0x420 [ 908.952496][ T2530] ? __pfx_genl_rcv_msg+0x10/0x10 [ 908.952511][ T2530] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 908.952529][ T2530] ? netlink_deliver_tap+0x1ae/0xcc0 [ 908.952543][ T2530] genl_rcv+0x28/0x40 [ 908.952555][ T2530] netlink_unicast+0x585/0x850 [ 908.952569][ T2530] ? __pfx_netlink_unicast+0x10/0x10 [ 908.952586][ T2530] netlink_sendmsg+0x8b0/0xda0 [ 908.952601][ T2530] ? __pfx_netlink_sendmsg+0x10/0x10 [ 908.952615][ T2530] ? selinux_socket_sendmsg+0x198/0x2f0 [ 908.952636][ T2530] ____sys_sendmsg+0xa4d/0xbe0 [ 908.952655][ T2530] ? __pfx_netlink_sendmsg+0x10/0x10 [ 908.952669][ T2530] ? __pfx_____sys_sendmsg+0x10/0x10 [ 908.952694][ T2530] ___sys_sendmsg+0x190/0x1e0 [ 908.952706][ T2530] ? __pfx____sys_sendmsg+0x10/0x10 [ 908.952717][ T2530] ? __lock_acquire+0x49f/0x1a40 [ 908.952733][ T2530] ? get_pid_task+0x106/0x250 [ 908.952760][ T2530] __sys_sendmsg+0x160/0x210 [ 908.952777][ T2530] ? __pfx___sys_sendmsg+0x10/0x10 [ 908.952799][ T2530] do_syscall_64+0x115/0x870 [ 908.952817][ T2530] ? clear_bhb_loop+0x70/0xc0 [ 908.952831][ T2530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.952843][ T2530] RIP: 0033:0x7f098e79e0d9 [ 908.952854][ T2530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 908.952866][ T2530] RSP: 002b:00007f098f613028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 908.952878][ T2530] RAX: ffffffffffffffda RBX: 00007f098ea25fa0 RCX: 00007f098e79e0d9 [ 908.952891][ T2530] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 908.952898][ T2530] RBP: 00007f098f613090 R08: 0000000000000000 R09: 0000000000000000 [ 908.952904][ T2530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 908.952911][ T2530] R13: 00007f098ea26038 R14: 00007f098ea25fa0 R15: 00007ffcbbe12ba8 [ 908.952926][ T2530] [ 909.012089][ T2531] 8021q: adding VLAN 0 to HW filter on device bond24 [ 909.060673][ T2537] printk: legacy console [ttyS0] disabled [ 909.064248][ T5137] ldm_validate_partition_table(): Disk read failed. [ 909.068920][ T2531] netlink: 'syz.7.9275': attribute type 10 has an invalid length. [ 916.651519][ T3081] printk: legacy console [ttyS0] enabled [ 916.665723][ T3092] 8021q: adding VLAN 0 to HW filter on device bond8 [ 916.671395][ T3094] 8021q: VLANs not supported on gre0 [ 916.713390][ T3092] dummy0: left promiscuous mode [ 916.723490][ T3092] bond8: (slave dummy0): Enslaving as a backup interface with an up link [ 916.728957][ T3092] netlink: 'syz.2.9428': attribute type 10 has an invalid length. [ 916.732211][ T3092] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9428'. [ 916.736078][ T3092] dummy0: entered promiscuous mode [ 916.747031][ T3092] bond8: (slave dummy0): Releasing backup interface [ 916.758417][ T3100] jffs2: notice: (3100) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 916.855893][ T3106] loop6: detected capacity change from 0 to 2640 [ 916.863286][ T3026] ceph: No mds server is up or the cluster is laggy [ 916.868566][ T3106] ldm_validate_partition_table(): Disk read failed. [ 916.868611][ T3106] Dev loop6: unable to read RDB block 0 [ 916.868702][ T3106] loop6: unable to read partition table [ 916.868830][ T3106] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 916.891915][ T64] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 916.899579][ T64] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 916.912319][ T64] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 916.939090][ T64] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 916.942694][ T64] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 917.221450][ T3118] 8021q: VLANs not supported on ip6tnl0 [ 917.221910][ T3119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9435'. [ 917.228854][ T3119] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9435'. [ 917.279639][ T42] kauditd_printk_skb: 153 callbacks suppressed [ 917.279654][ T42] audit: type=1800 audit(2000524957.745:5345): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16801 res=0 errno=0 [ 917.322993][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 917.327190][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.353076][ T42] audit: type=1800 audit(2000524957.824:5346): pid=3123 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.9437" name="remove" dev="sysfs" ino=486555 res=0 errno=0 [ 917.353379][ T3123] uhci_hcd 0000:00:1d.0: remove, state 1 [ 917.362827][ T3123] usb usb1: USB disconnect, device number 1 [ 917.372050][ T3123] uhci_hcd 0000:00:1d.0: USB bus 1 deregistered [ 917.393851][ T42] audit: type=1800 audit(2000524957.864:5347): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16414 res=0 errno=0 [ 917.415061][ T42] audit: type=1800 audit(2000524957.874:5348): pid=3124 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.9437" name="rescan" dev="sysfs" ino=1106 res=0 errno=0 [ 917.468244][ T7099] syzkaller0: tun_net_xmit 76 [ 917.470805][ T3128] syzkaller0: create flow: hash 1982905335 index 1 [ 917.470883][ T3124] FAULT_INJECTION: forcing a failure. [ 917.470883][ T3124] name failslab, interval 1, probability 0, space 0, times 0 [ 917.470925][ T3124] CPU: 0 UID: 0 PID: 3124 Comm: syz.5.9437 Tainted: G L syzkaller #0 PREEMPT(full) [ 917.470942][ T3124] Tainted: [L]=SOFTLOCKUP [ 917.470947][ T3124] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 917.470960][ T3124] Call Trace: [ 917.470976][ T3124] [ 917.470982][ T3124] dump_stack_lvl+0x100/0x190 [ 917.471052][ T3124] should_fail_ex.cold+0x5/0xa [ 917.471081][ T3124] should_failslab+0xc2/0x120 [ 917.471113][ T3124] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 917.471134][ T3124] ? __pfx_vsnprintf+0x10/0x10 [ 917.471183][ T3124] ? kvasprintf_const+0x66/0x1a0 [ 917.471228][ T3124] kvasprintf+0xbc/0x150 [ 917.471245][ T3124] ? __pfx_kvasprintf+0x10/0x10 [ 917.471260][ T3124] ? pci_dev_assign_slot+0x28/0x1b0 [ 917.471287][ T3124] ? acpi_dev_for_each_child+0x88/0xc0 [ 917.471309][ T3124] ? find_held_lock+0x2b/0x80 [ 917.471334][ T3124] kvasprintf_const+0x66/0x1a0 [ 917.471352][ T3124] kobject_set_name_vargs+0x5a/0x140 [ 917.471367][ T3124] dev_set_name+0xc7/0x100 [ 917.471414][ T3124] ? __pfx_dev_set_name+0x10/0x10 [ 917.471430][ T3124] ? pci_dev_assign_slot+0x28/0x1b0 [ 917.471450][ T3124] ? pci_dev_assign_slot+0x151/0x1b0 [ 917.471470][ T3124] pci_setup_device+0x5f5/0x2500 [ 917.471487][ T3124] ? __pfx_pci_setup_device+0x10/0x10 [ 917.471501][ T3124] ? kasan_save_track+0x14/0x30 [ 917.471515][ T3124] ? __kasan_kmalloc+0xaa/0xb0 [ 917.471531][ T3124] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 917.471544][ T3124] ? lockdep_init_map_type+0x5c/0x250 [ 917.471560][ T3124] ? __raw_spin_lock_init+0x3a/0x110 [ 917.471580][ T3124] pci_scan_single_device+0x1ac/0x240 [ 917.471594][ T3124] ? __pfx_pci_scan_single_device+0x10/0x10 [ 917.471606][ T3124] ? __mutex_lock+0x82c/0x1bd0 [ 917.471644][ T3124] ? __mutex_lock+0x82c/0x1bd0 [ 917.471663][ T3124] pci_scan_slot+0x1c9/0x7c0 [ 917.471677][ T3124] ? __pfx_pci_scan_slot+0x10/0x10 [ 917.471690][ T3124] ? rcu_is_watching+0x12/0xc0 [ 917.471718][ T3124] pci_scan_child_bus_extend+0x6b/0x7b0 [ 917.471731][ T3124] ? pci_find_next_bus+0x60/0xb0 [ 917.471748][ T3124] pci_rescan_bus+0x18/0x40 [ 917.471760][ T3124] rescan_store+0xfb/0x130 [ 917.471776][ T3124] ? __pfx_rescan_store+0x10/0x10 [ 917.471789][ T3124] ? sysfs_file_kobj+0xe4/0x290 [ 917.471818][ T3124] ? __pfx_rescan_store+0x10/0x10 [ 917.471830][ T3124] bus_attr_store+0x74/0xb0 [ 917.471849][ T3124] ? __pfx_bus_attr_store+0x10/0x10 [ 917.471867][ T3124] sysfs_kf_write+0xf2/0x150 [ 917.471880][ T3124] kernfs_fop_write_iter+0x3e0/0x5f0 [ 917.471897][ T3124] ? __pfx_sysfs_kf_write+0x10/0x10 [ 917.471910][ T3124] vfs_write+0x6ac/0x1050 [ 917.471928][ T3124] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 917.471947][ T3124] ? __pfx_vfs_write+0x10/0x10 [ 917.471987][ T3124] ksys_write+0x12a/0x250 [ 917.472000][ T3124] ? __pfx_ksys_write+0x10/0x10 [ 917.472015][ T3124] do_syscall_64+0x115/0x870 [ 917.472031][ T3124] ? clear_bhb_loop+0x70/0xc0 [ 917.472047][ T3124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.472060][ T3124] RIP: 0033:0x7f864419e0d9 [ 917.472072][ T3124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 917.472084][ T3124] RSP: 002b:00007f8645016028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 917.472103][ T3124] RAX: ffffffffffffffda RBX: 00007f8644426090 RCX: 00007f864419e0d9 [ 917.472110][ T3124] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 000000000000000b [ 917.472118][ T3124] RBP: 00007f8645016090 R08: 0000000000000000 R09: 0000000000000000 [ 917.472125][ T3124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 917.472131][ T3124] R13: 00007f8644426128 R14: 00007f8644426090 R15: 00007ffcda423bf8 [ 917.472147][ T3124] [ 917.472292][ T3124] pci (null): [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 917.475540][ T3124] pci (null): BAR 4 [io 0x2020-0x203f] [ 917.476797][ T7099] syzkaller0: tun_net_xmit 48 [ 917.477359][ T3124] ------------[ cut here ]------------ [ 917.477367][ T3124] ret < 0 [ 917.477373][ T3124] WARNING: drivers/pci/probe.c:2768 at pci_device_add+0x133b/0x1810, CPU#0: syz.5.9437/3124 [ 917.477424][ T3124] Modules linked in: [ 917.477484][ T3124] CPU: 0 UID: 0 PID: 3124 Comm: syz.5.9437 Tainted: G L syzkaller #0 PREEMPT(full) [ 917.477502][ T3124] Tainted: [L]=SOFTLOCKUP [ 917.477507][ T3124] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 917.477514][ T3124] RIP: 0010:pci_device_add+0x133b/0x1810 [ 917.477528][ T3124] Code: e5 04 83 e0 8f 09 e8 88 83 c8 00 00 00 e9 28 f4 ff ff e8 c8 e6 ae fc 90 0f 0b 90 90 0f 0b 90 e9 0e f7 ff ff e8 b6 e6 ae fc 90 <0f> 0b 90 e9 7e fa ff ff e8 a8 e6 ae fc 90 0f 0b 90 e9 11 fa ff ff [ 917.477541][ T3124] RSP: 0018:ffffc90004d6f928 EFLAGS: 00010293 [ 917.477551][ T3124] RAX: 0000000000000000 RBX: 00000000ffffffea RCX: ffffffff855b8749 [ 917.477560][ T3124] RDX: ffff88802b8ca540 RSI: ffffffff855b8cca RDI: ffff88802b8ca540 [ 917.477568][ T3124] RBP: ffff88801c2e5000 R08: 0000000000000005 R09: 0000000000000000 [ 917.477576][ T3124] R10: 00000000ffffffea R11: 0000000000000000 R12: ffff888022ccc028 [ 917.477584][ T3124] R13: ffff888022ccc000 R14: 0000000000000001 R15: ffff888022cd0000 [ 917.477592][ T3124] FS: 00007f86450166c0(0000) GS:ffff8880d5de9000(0000) knlGS:0000000000000000 [ 917.477624][ T3124] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 917.477634][ T3124] CR2: 00007f5cfd71b6b0 CR3: 0000000044b0b000 CR4: 0000000000352ef0 [ 917.477642][ T3124] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000f80 [ 917.477650][ T3124] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 917.477658][ T3124] Call Trace: [ 917.477662][ T3124] [ 917.477670][ T3124] ? __pfx_pci_device_add+0x10/0x10 [ 917.477686][ T3124] ? __raw_spin_lock_init+0x3a/0x110 [ 917.477708][ T3124] pci_scan_single_device+0x1d0/0x240 [ 917.477721][ T3124] ? __pfx_pci_scan_single_device+0x10/0x10 [ 917.477733][ T3124] ? __mutex_lock+0x82c/0x1bd0 [ 917.477753][ T3124] ? __mutex_lock+0x82c/0x1bd0 [ 917.477776][ T3124] pci_scan_slot+0x1c9/0x7c0 [ 917.477790][ T3124] ? __pfx_pci_scan_slot+0x10/0x10 [ 917.477803][ T3124] ? rcu_is_watching+0x12/0xc0 [ 917.477826][ T3124] pci_scan_child_bus_extend+0x6b/0x7b0 [ 917.477839][ T3124] ? pci_find_next_bus+0x60/0xb0 [ 917.477856][ T3124] pci_rescan_bus+0x18/0x40 [ 917.477870][ T3124] rescan_store+0xfb/0x130 [ 917.477883][ T3124] ? __pfx_rescan_store+0x10/0x10 [ 917.477896][ T3124] ? sysfs_file_kobj+0xe4/0x290 [ 917.477917][ T3124] ? __pfx_rescan_store+0x10/0x10 [ 917.477929][ T3124] bus_attr_store+0x74/0xb0 [ 917.477949][ T3124] ? __pfx_bus_attr_store+0x10/0x10 [ 917.477967][ T3124] sysfs_kf_write+0xf2/0x150 [ 917.477980][ T3124] kernfs_fop_write_iter+0x3e0/0x5f0 [ 917.477997][ T3124] ? __pfx_sysfs_kf_write+0x10/0x10 [ 917.478010][ T3124] vfs_write+0x6ac/0x1050 [ 917.478023][ T3124] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 917.478042][ T3124] ? __pfx_vfs_write+0x10/0x10 [ 917.478062][ T3124] ksys_write+0x12a/0x250 [ 917.478073][ T3124] ? __pfx_ksys_write+0x10/0x10 [ 917.478089][ T3124] do_syscall_64+0x115/0x870 [ 917.478105][ T3124] ? clear_bhb_loop+0x70/0xc0 [ 917.478121][ T3124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.478134][ T3124] RIP: 0033:0x7f864419e0d9 [ 917.478145][ T3124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 917.478158][ T3124] RSP: 002b:00007f8645016028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 917.478170][ T3124] RAX: ffffffffffffffda RBX: 00007f8644426090 RCX: 00007f864419e0d9 [ 917.478178][ T3124] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 000000000000000b [ 917.478185][ T3124] RBP: 00007f8645016090 R08: 0000000000000000 R09: 0000000000000000 [ 917.478193][ T3124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 917.478201][ T3124] R13: 00007f8644426128 R14: 00007f8644426090 R15: 00007ffcda423bf8 [ 917.478216][ T3124] [ 917.478224][ T3124] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 917.478232][ T3124] CPU: 0 UID: 0 PID: 3124 Comm: syz.5.9437 Tainted: G L syzkaller #0 PREEMPT(full) [ 917.478248][ T3124] Tainted: [L]=SOFTLOCKUP [ 917.478252][ T3124] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 917.478259][ T3124] Call Trace: [ 917.478264][ T3124] [ 917.478268][ T3124] dump_stack_lvl+0x100/0x190 [ 917.478285][ T3124] vpanic+0x552/0x970 [ 917.478306][ T3124] ? __pfx_vpanic+0x10/0x10 [ 917.478321][ T3124] panic+0xd1/0xe0 [ 917.478332][ T3124] ? __pfx_panic+0x10/0x10 [ 917.478347][ T3124] ? check_panic_on_warn+0x1f/0x90 [ 917.478369][ T3124] check_panic_on_warn.cold+0x19/0x34 [ 917.478382][ T3124] ? pci_device_add+0x133b/0x1810 [ 917.478393][ T3124] __warn.cold+0x191/0x318 [ 917.478406][ T3124] __report_bug+0x30f/0x440 [ 917.478423][ T3124] ? pci_device_add+0x133b/0x1810 [ 917.478435][ T3124] ? __pfx___report_bug+0x10/0x10 [ 917.478454][ T3124] ? kasan_quarantine_put+0x104/0x240 [ 917.478469][ T3124] ? lockdep_hardirqs_on+0x78/0x100 [ 917.478486][ T3124] ? device_add+0x350/0x1970 [ 917.478503][ T3124] ? pci_device_add+0x133b/0x1810 [ 917.478515][ T3124] report_bug+0xb2/0x220 [ 917.478547][ T3124] ? pci_device_add+0x133b/0x1810 [ 917.478561][ T3124] handle_bug+0x16a/0x2a0 [ 917.478580][ T3124] exc_invalid_op+0x17/0x50 [ 917.478599][ T3124] asm_exc_invalid_op+0x1a/0x20 [ 917.478610][ T3124] RIP: 0010:pci_device_add+0x133b/0x1810 [ 917.478622][ T3124] Code: e5 04 83 e0 8f 09 e8 88 83 c8 00 00 00 e9 28 f4 ff ff e8 c8 e6 ae fc 90 0f 0b 90 90 0f 0b 90 e9 0e f7 ff ff e8 b6 e6 ae fc 90 <0f> 0b 90 e9 7e fa ff ff e8 a8 e6 ae fc 90 0f 0b 90 e9 11 fa ff ff [ 917.478634][ T3124] RSP: 0018:ffffc90004d6f928 EFLAGS: 00010293 [ 917.478643][ T3124] RAX: 0000000000000000 RBX: 00000000ffffffea RCX: ffffffff855b8749 [ 917.478651][ T3124] RDX: ffff88802b8ca540 RSI: ffffffff855b8cca RDI: ffff88802b8ca540 [ 917.478658][ T3124] RBP: ffff88801c2e5000 R08: 0000000000000005 R09: 0000000000000000 [ 917.478665][ T3124] R10: 00000000ffffffea R11: 0000000000000000 R12: ffff888022ccc028 [ 917.478673][ T3124] R13: ffff888022ccc000 R14: 0000000000000001 R15: ffff888022cd0000 [ 917.478684][ T3124] ? pci_device_add+0xdb9/0x1810 [ 917.478695][ T3124] ? pci_device_add+0x133a/0x1810 [ 917.478708][ T3124] ? pci_device_add+0x133a/0x1810 [ 917.478721][ T3124] ? __pfx_pci_device_add+0x10/0x10 [ 917.478735][ T3124] ? __raw_spin_lock_init+0x3a/0x110 [ 917.478754][ T3124] pci_scan_single_device+0x1d0/0x240 [ 917.478767][ T3124] ? __pfx_pci_scan_single_device+0x10/0x10 [ 917.478783][ T3124] ? __mutex_lock+0x82c/0x1bd0 [ 917.478800][ T3124] ? __mutex_lock+0x82c/0x1bd0 [ 917.478818][ T3124] pci_scan_slot+0x1c9/0x7c0 [ 917.478831][ T3124] ? __pfx_pci_scan_slot+0x10/0x10 [ 917.478844][ T3124] ? rcu_is_watching+0x12/0xc0 [ 917.478865][ T3124] pci_scan_child_bus_extend+0x6b/0x7b0 [ 917.478877][ T3124] ? pci_find_next_bus+0x60/0xb0 [ 917.478893][ T3124] pci_rescan_bus+0x18/0x40 [ 917.478905][ T3124] rescan_store+0xfb/0x130 [ 917.478917][ T3124] ? __pfx_rescan_store+0x10/0x10 [ 917.478931][ T3124] ? sysfs_file_kobj+0xe4/0x290 [ 917.478951][ T3124] ? __pfx_rescan_store+0x10/0x10 [ 917.478963][ T3124] bus_attr_store+0x74/0xb0 [ 917.478981][ T3124] ? __pfx_bus_attr_store+0x10/0x10 [ 917.478999][ T3124] sysfs_kf_write+0xf2/0x150 [ 917.479011][ T3124] kernfs_fop_write_iter+0x3e0/0x5f0 [ 917.479027][ T3124] ? __pfx_sysfs_kf_write+0x10/0x10 [ 917.479039][ T3124] vfs_write+0x6ac/0x1050 [ 917.479051][ T3124] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 917.479069][ T3124] ? __pfx_vfs_write+0x10/0x10 [ 917.479089][ T3124] ksys_write+0x12a/0x250 [ 917.479099][ T3124] ? __pfx_ksys_write+0x10/0x10 [ 917.479114][ T3124] do_syscall_64+0x115/0x870 [ 917.479130][ T3124] ? clear_bhb_loop+0x70/0xc0 [ 917.479144][ T3124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.479156][ T3124] RIP: 0033:0x7f864419e0d9 [ 917.479165][ T3124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 917.479176][ T3124] RSP: 002b:00007f8645016028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 917.479186][ T3124] RAX: ffffffffffffffda RBX: 00007f8644426090 RCX: 00007f864419e0d9 [ 917.479193][ T3124] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 000000000000000b [ 917.479200][ T3124] RBP: 00007f8645016090 R08: 0000000000000000 R09: 0000000000000000 [ 917.479207][ T3124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 917.479214][ T3124] R13: 00007f8644426128 R14: 00007f8644426090 R15: 00007ffcda423bf8 [ 917.479229][ T3124] [ 918.564766][ T3124] Shutting down cpus with NMI [ 918.565360][ T3124] Kernel Offset: disabled