last executing test programs: 10m49.435484751s ago: executing program 32 (id=1618): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x2f, 0x7, 0x2, 0x200, 0x40, @private1, @remote, 0x10, 0x7, 0x40, 0x2}}) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x9059, 0x4840) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1e000000e9660000060000000100000020000000", @ANYRES32, @ANYBLOB="0100010000000000fa00000000000000000000001f200d0ed4468edb65caf3711b59d10ed717730b71320b2106b88f7d36bb5ebe6be46b9f5ce91825e12503cc7ab1a4fdaef02b032c1d9c1d1fb35ae596df4b9d3ed11105a1afe9334c470c6dbc0bd36a81b0abadeebb096857f6b852", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="01000000010000000300"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000580000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6}, 0x94) 9m46.571707307s ago: executing program 33 (id=2490): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) rseq(&(0x7f0000000180), 0x20, 0x1, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x2049c0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r1, 0x80045105, &(0x7f00000000c0)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x3, 0x180, 0x2, 0x13, 0xf1, 0x100000001, 0x10, 0x5, 0x0, 0x29, 0x0, 0x4, 0x0, 0xbd9], 0x40000, 0x43180}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x6, 0x4, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x9, 0x8, 0x8000000009, 0x803, 0x0, 0x9, 0x9], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee3001, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x33000, 0x8, 0x0, 0x42, 0x5, 0x9, 0x6, 0x36, 0xd, 0x6, 0x89}, {0x0, 0xd000, 0xe, 0x5, 0x3, 0x7, 0xfd, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x0, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0x0, 0x8, 0x7, 0xe}, {0xf000, 0x1000, 0xf, 0x3, 0x16, 0x7, 0x9, 0x8, 0x7, 0x9, 0xf7, 0x97}, {0xeeefa000, 0xdddcffff, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0x9c, 0x82, 0x2f, 0x1, 0x7}, {0x54000, 0x3000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xdddd0000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0xff, 0x9, 0x2, 0xc, 0xb0, 0x83}, {0xeeee0000, 0x30}, {0xf000, 0x7}, 0x80000021, 0x0, 0xdddd1000, 0x2024, 0x2, 0xa400, 0x100000, [0x6800000000000000, 0x5, 0x2, 0x20008]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000bc0)=""/4073, 0xff4}, {&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000000140)=""/54, 0x36}, {&(0x7f0000000080)=""/24, 0x18}], 0x4}, 0x8}], 0x4000000000001b6, 0x180, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r4, 0x641e) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3100000000080041007369770014003300626f6e64300000ffff00000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) syz_usb_connect$cdc_ecm(0x4, 0x64, &(0x7f0000000940)=ANY=[@ANYBLOB="12010003020000ff2505a1a44000010203010902520001010940060904000803020600010a24060000f704def4d005240003000d240f010a000000040004000c2407f5830005000600060006246eb9dfcc1a090010090582023000f47e0309050302ff038101b2"], &(0x7f0000000840)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x110, 0x5, 0x5, 0x7f, 0xff, 0x4}, 0x5, &(0x7f0000000340)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x421}}, {0x2, &(0x7f00000004c0)=@string={0x2}}, {0x0, 0x0}, {0x0, 0x0}, {0x6, &(0x7f0000000700)=@string={0x6, 0x3, "61abd125"}}]}) syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) 9m39.493826704s ago: executing program 1 (id=2577): r0 = userfaultfd(0x801) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc}, 0x90) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x181641, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x1f00, 0x12) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000a67000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x4000, 0x8e40fe99ab8109c0}) r2 = getpid() ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x2, 0x5, 0xb7a4, 0x1, 0x4}, 0x3e3, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x2, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x101, 0x7fff, 0x7, 0x5, 0xa, 0x1, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x8001, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80020000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x6, 0xa, 0x1b, 0x202, 0x2, 0x5, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0xffffff87, 0xe, 0xa0, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0x9, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x6, 0xe6, 0x6, 0x10001, 0x8, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x4000005, 0x63, 0x4, 0x18000, 0x10, 0x1000, 0x0, 0x8, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x4, 0x5, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x1, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x5, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x6, 0x3, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x4, 0x10, 0x8, 0x9, 0x5, 0x3ff, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xfff7, 0x2, 0x89, 0x2, 0x6, 0x1, 0x73, 0xfffff80e, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x81, 0x80000004, 0x400009, 0x9, 0x0, 0x2, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x0, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0xd58, 0x4b5f, 0x7, 0x7fffffff, 0xffffffff, 0x40000001, 0x80000000, 0xb, 0x0, 0xc8d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x2, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000005, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0xc, 0xb, 0x9, 0x1, 0x7f, 0x9a, 0x9, 0x0, 0x802, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20000000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b14, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x8, 0x10001, 0x1, 0x7, 0x1, 0x1, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0x9, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0xff, 0x5, 0x2, 0x2, 0x4, 0xfffc, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0x3, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x193, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x0, 0x459, 0x10001, 0x9, 0x0, 0x2, 0x9, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x1, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0x3, 0x9, 0x1, 0x80000000, 0x9, 0x0, 0x5, 0x808081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x409, 0x8, 0x5, 0x8, 0x1ff, 0x7fef, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x4, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xfffffffc, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x3, 0x81, 0x8, 0x16, 0x8, 0x9, 0x80, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x6, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x9, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x6, 0x2, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0x0, 0x6, 0xea, 0x3, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff6, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x2, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x2000008, 0x2000a, 0x9, 0x2, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93d, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x9, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x4, 0x62, 0x2, 0x1, 0xfffffffa, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x1000042, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x0, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x101, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0x9, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x12d8) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 9m39.162458838s ago: executing program 1 (id=2579): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x20, 0x18, &(0x7f0000000500)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x80028}, @ptr={0x70742a85, 0xf0, 0x0, 0x0, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0xfffffffffffffffe, 0x1, 0x48}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 9m39.096066524s ago: executing program 1 (id=2580): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000100)={0x0, 0xb, 0x1, 0x10000, 0x0, [0x0, 0x0, 0x0], [0x7, 0x0, 0x6, 0x80000000], [0x80000001, 0xbdc, 0x14, 0x9], [0x517, 0x9, 0xb, 0xff]}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000180)={r1}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000007c0)={0x28, 0x3, r3, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000}) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) (async) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) unlink(&(0x7f0000000180)='./file1\x00') (async) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0) (async) close(0x3) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0x180400, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x800}) 9m39.016079898s ago: executing program 1 (id=2581): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000500)={@ptr={0x70742a85, 0x460, 0x0, 0x0, 0x2, 0x80028}, @ptr={0x66646185, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0xfffffffffffffffe, 0x1, 0x48}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 9m39.015762657s ago: executing program 1 (id=2582): keyctl$dh_compute(0x17, &(0x7f0000000d80), 0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={'cryptd(blake2b-160)\x00'}}) r0 = socket$netlink(0x10, 0x3, 0x15) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x3, 0x12) write$P9_RWALK(r1, &(0x7f0000000080)={0x7e, 0x6f, 0x1, {0x9, [{0x0, 0x1, 0x5}, {0x20, 0x2, 0x3}, {0x0, 0x3, 0x1}, {0x40, 0x1, 0x6}, {0x20, 0x3, 0x5}, {0x10, 0x2, 0x1}, {0x40, 0x4, 0x1}, {0x20, 0x0, 0x7}, {0x1, 0x3, 0x5}]}}, 0x7e) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "64f9ff", 0x20, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[@hopopts={0x0, 0x3, '\x00', [@hao={0xc9, 0x10, @mcast1={0xff, 0x3}}, @jumbo]}]}}}}}, 0x0) 9m38.776040877s ago: executing program 1 (id=2586): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000d40)={0x52, 0x0, 'client1\x00', 0x0, "2cd367818b4014ff", "859e92f118c4484604734b1d43209426c1bd711b936fc2c4d28f902e94f8e647"}) (async) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) (async) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$dsp(r2, &(0x7f00000000c0)=""/108, 0x6c) write$dsp(r1, &(0x7f0000002000)='`', 0x88020) r3 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x20000, 0x800) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045540, &(0x7f0000000100)) (async) sendto$inet6(r3, &(0x7f00000002c0)="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", 0x1000, 0x20004000, &(0x7f00000012c0)={0xa, 0x4e24, 0x40, @mcast1, 0x401}, 0x1c) 9m23.484862072s ago: executing program 34 (id=2586): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000d40)={0x52, 0x0, 'client1\x00', 0x0, "2cd367818b4014ff", "859e92f118c4484604734b1d43209426c1bd711b936fc2c4d28f902e94f8e647"}) (async) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) (async) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$dsp(r2, &(0x7f00000000c0)=""/108, 0x6c) write$dsp(r1, &(0x7f0000002000)='`', 0x88020) r3 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x20000, 0x800) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045540, &(0x7f0000000100)) (async) sendto$inet6(r3, &(0x7f00000002c0)="f3f340e3b88fcba499dce185dd049d99a1e12815f856b9138e3a2f07bc6ed1a85147b05c7bad72264824da5061b3854d1f93ec774b16b1874650288d60684ce96422b309ff0da07f503ba8e216e8b1fcad81053110079fbc5e03480fd4b00d32793ff15ce43b69341bee33f0de443ad94adfbb29f33fbc80efb82d43196b0e9cda5b32cb778b1ddec21ba10df4fa24ac3235f5e979659c8b48a42042ea755d8a67b7e66c88a47304c905cb082f1ea236b6ef717317f37c536ba5f359288bea899419f9ab992c6cd55c1aca16c64cabf102f0ace5e2c0afdd0709fea5ff6f162d23a35d157b61330e0028d9eddcda98753e822a3d85d47bc0aa07250b0f1adda4b7e22a4806ab9fb8daf85b314d4e8802a086adf30b0805de3b79b763f383b8f732e5c5bffc0c3803b97e8c803395174741a5e66242c7d50a18a0ca52465936b48f20002d32502ac6f6d2b89d529f201e70c06c3c4b027eb88913b0ab30b9e8e47b3d15277b5e34bda88cbd76108ddc3f97d7de9ce6b5ccd369a1dd3b5277c6add038ba0c2097a8c6bfdb326706dee83d3a86116d285dd25e756f972eb111a7d886c5d3f0223875fe1231e06a2069fd3ff5833ec1451c3e0cb08ac2e856cb51780cdd86a1577591c2777087a70b03d4a2f98802a5b4130cb723d99a6b16d32183dee437b360271024a871bb65301748f4360799afd463a7ac4ed0d7b91befa1f574ae7532fe6fe5dd576c349cf55dc13cc09a5345419705c666d9649244c5d48fe0ced007d35f22a4c25f1094bd3e1302bfc9386eeb5754e931015c043220752a8cea4790a85740cf99e961b9f91b6e0067881b4e9054c1f0de66298af60ed51411b1a325cc16a618956b998eb0cd5389c5a3530d7d3471c3f7d79479e4e2352e864734594a58db15f743f13fefd8c5e641bdb00523d11eef17e86892cf53c74d60ee90107ac8dd239a1e51ae16630e555a8cf6e3f7c2f4d3015a41b51a2e9c777ee7df22fcaf5059fae47aa02c90a59c57c8067ae114f6817ba4b4a01219a0affd2c537a31d2f1ced3c5e78e663a7f53b8d4ceb018fdb358c9c8b3a6da8da1b0ab1c732154476770b11ad907d7be2557e4e6218d257bc251834ac55d28e0e75555b945ec71ad6d62e031f02bdff0b7d67f8db4b2c7823c2aaec0040f03d36c36a51cdeb3d01f6555120bee38deca96b4adb727cc652318ebd7bff470d4d7c025e292d021fa300d9be9399776d87e10769abfa5af2dd1f5e2924cce8c1168c5856f8a624f1ab6382b428457c70ffc2977d46da976201f63f4b5c2963898258c550641eae2554e9715c1cf85bb31f071380ecc2adb12f98166374ac98267ff4789936fb371412b7f9d60bfd15242f76e344e5c84c5d7c982b9fbd81fcd18f33e75d511d5261189dab65cad0bba7efb57db350e997cd80330673d6af3999f0e1206198bc4f1e88efbc58aaa33d410d8cd9733eadeb93e925418fb73022fd3293732346b877903b63e39c20bf1d060fd82e0dd585ffa007d64913b7a9c06fe007395bbb74115dad7a7e59b692534264cc8a33d3fccb21677cbb426eac40a2780c00b6223e9263b4a016f570b5ceace951480bf36d712b800f673744dccdc3cad0df1456bc6780f4f76b741a2e18ccb246a854ea7f94da66ea06a2c9e888ae88526b6611bfe52ce61effddd177c90530625f4dd218f7b37163e767cea5a7cc9070583e9b2f1f7f2b91216d2d0d87950bb890c2ce67d31a6b3ef7774f439b6347825f57b82b5ce1eb3df7afded170ea5ded97f328517f8f83078f29ec540da0d4649b7cac51f1444b527ca858f190afcad636c92106fbcb3dd61fd20cb5f4d03ac4f4b7e120cda698eeb4efc75142fc078c58efa3ae5688df938b9dd76ab04ea01ac800d30d390ccf24b3856230903417e542b6a896859128d3071ae4e0f00c2c7fc74c0b16120fa7ee87dcefff19cc84cd7a5f184b00fa1fd9b85ba1c6884cab5eb6939052248bf2662d7a56579acccf4838d7ff91d8efb4b7a247846b1e560385a10a22d5bc96d0cc4b2751ad667547f39d46e88e76375e64cc6bcd2885167132c0786ae428aab44b227b0136133fbda7e9f428e611fc8e89ba463a05deae11540f8978f3597e7dfde31fcccbc48b25eeffa6225f9d6ee82a7943c9425b0343234e0c01d686c468f4539c1248172cb7f7e5784f5a1310ec61c5e154e1180094337f7dc4582b0e7337ac2bcf11ea24471e09ea803d8e4a4eb48e7261b432d23feee9aa0d061f7f268b09467e931290042dde28fa6acab94fc5989a24abca91154846eb72e7b50e70e53ba1be1231fd98f5f305e9e6b9fb34e96e3f1d02ec4c5ff7e0c1079fdb4c6e0375d90acedc9824d96c8c298ff23c524b79e52426c77ad3f8a3e45c00ef866a331158e9e7bd73228db984f6fdf714138c0ea9c3924fee8148a9cf758af23ad7756a3d119bc56e67b94ec3d5ec0fb8aa2b827747cef9ee009ccc30b0906706f3fa0dd46442d290e4c9b8fa091dddc0687490acf8556a5cdd91551156078c737de7f85acb92479b65926110150989f838406c1241ca04b79d002670975ec94eb21dcee2feec8613c925064dd5a762864d7abeeb7f5a7521b6a665c215dd1f797836646d43e2ae80cfd7e211fb8c859276a5a4e5aa8c43e704af9a7a8aebbf161bbc7df18bb54b85775c1167e26ea2f2e490c73867b2e27cc29dbdd436b79d52e9f9d92590600ee3d8a8e7947f6e28baefe9915d43bb1d8cb2fcea3f99529cb15115c0dc25b45adf5016af4c8ad1a21869714df649d9f3e9f2f9d9c4ab18fdaf029b68fe98ed5ed4bc0ba7c20a867502049fc11c03a9e870bd2e5cef160a68021ed795d8ced29bc9263964bbc289802bce9641824f8298d61695c3dbcfb5b4ae9cb39be25a6edaa2407ad84dafdc4edae83a43c57340a8c8de361adbf43db43e435acb6d5864f9b26f87045f56b95b57c86c53f8f8cd8aa777c8ae8f313f25e074209a8bb733e5ab10b64c9821a34c07a3e18a3daf9ee5e1a40dd3f3e88240ee86da41c73dc1a8fbeeea17d9c49e0cab77d1add2e293c5dfc8e6c9d5c00d7d262a80cc965a41d7398adc783e11b4f1ec17786c4ae9c3423ed2b252f49a8edd4f35e9301fe0565b21aa8115d4aa641bec86f9aff577e0557017970222243fe0230d95130c087bd78cefe5ffb3ab6504328860da76018539bedcacccaf51e5c2d3158a68cbdae0320d4a19aa767f1836ca5d88bcc9ff865d6fb1ca2dc0ccb20fea5eefef2b69fd05bb63d02acac9c6d9d83aab5d6f84aa4d5bfaea4a4dc8920716405267656138bf10721cf9e0b803f66e59c5c2033c5242fa5f2bb7b4efcdb04f41d630c83bcb5e7f6120c2b7ad0eff8e5514dd82d11180c33c75c7a2afae26b9ef9c4c45cff73a5b84151de8fd728a893ee2fc9381328945fc156abf388decbeb946c49ccf68b78f04cf249f8d3293baa0e97c3bf0cf739deff0ae9e0b213e6a127bd5a02d98440206b4d44e71201143f4dadeda9c344d5fc144fb90c0598a37a904eb3bbab375cccc390ee480d722c4c3d4dd7abefae89a1a9dca266b48b7ee2c51966ae600690257b4313c0d8a90b2bca6d7ac76e86ce50a244933d90bd997d02e64d28e5a65ad866106a8926eda795bacd629056de6f8a53d94c5d3c765dc739399f65ce37f095792ac54d43da41bb6016e7b0f49a96c3edefc1ffb20061535ff9e80e5c81b6933b3e77a3e7ff98ed59358704ad4a17515350c826d51bd8c41f0f737f1abb3c14e04b3678eee891ee42361bf9668b008919ef11226b1b0cdd3fa5044f87af4e8ccf064c16883d5b52b0d3fcd6a5a003f57b35e65cea31317eb3b65236fd66a94443c98d0415728d25b9ca9854f1389f80feaa8ccd0c21ea82e36a20cac45202c49e92ec03edcf5021946e7cddf80934eb3860edef20dfd5d55806b27bc9634737692cbdbeb5d24cf6688ac802e284f3bc4bab8dbbaeac9d69becc6c802d21a07761008e3a7f4f860818013dcc2d3ca7d4488833ad87291e80e7ea8eea4dceac6ee94f1403ae7f9ee4d4e199b7b86924ba614420e3a9710b9961edd395b4156f385e9557b2831ea639df2b99e174327dd335184a43c4e6a586eb4bec27d40801555300fc6593739e837af607bd24ef7bebb88528c099604d9615b98d2f8458932258b8fa9262d100a83a60d8ca73b75441484a5549f28c3278b5bd56b88c8c971601a6afb64ce31782cb8be4634f0a9a70a0bdf388e6801187e97e2698c797f0e1d2dc3a64f5b4b4d9b1ada234f259b2c31a498574e1b9bbe48dde3a736871f981de8259c1185b89e46d1cc6bf7202414741520d70d19c7373b3c38da18722a45f098f929fbdc3ebeb17ac762fc4031db5c61b0c94d222c91656cbbde9048a086b6537d1401fb4755bcdbf967e99d770554b8cb6c98e2d6164fe3a90fabe488fa0fd7505f88db49cd607dcb5421b8365117cf2d3e86f1c9ba8202d537f87cf0ae3e39fa171316b7c5f544edb42054493552fa05d39dbf13ad8bc195bd6f51485f5167dd26b9ada1baeacfd6a81ca1a1b80111ab7ac92c32560a2236f354c2a4a907fc0ee3c488a7a8bae3dc10303a3deeb66cacc85d125a736923f0bff1f8c1e7abcd736e270786f54be05778d23c82009d0e4ffa57f0292f47eb6fc2ae341e682ca675f0eb23c0b6bb789b4e0146c6675b6c4de43f24ad93d9bc052c3251b478410cf5622e35fc12d3e4c177eda26a3a309965d9ec1a745cf5537773a82c6c7bb47b21ffa6422435d85d3a8b5f3387541cb5326f120f589ce627f3a5fe1e00eda81094a6c9bda23caeec63d727eb205da4b8b31b3a52a1e5ba2735ce263bcfac7120b2c5237f624b3aa5efa80bb2fa4536b164d299a4fec634ae3382911b1b37da444a30bb87ad60eb956d1143f1acee73936617cdca5747d9b80921e963952791669cc3bcb39fd048b3c04e368c9fd7fa8ca03b322ed1165d69a64960c04f931eb632f60f870a8212c9afc2fef9b78d600e497cf42be0e850d4b34fbe5b7ea78c1ca76617780aacc55578070e238822ecc20b0529be4b5c0290e42406dab82681b657b2b270acca5c87f24a2cdc08ce84203573da2f4e7abab64e4df15ca07767f44fa53537680f67cf86b6a94348ae204cc2701b31f07d13bc0461027edb953c325143f4daad9f6ea283ead622327502c8f7a1c080f4ed78d7c68c49523110f6ade2bee779015350818a321e58171c1e31ea0fe75000d7b7e6748fe0ac49a098a3d576ddd10abb922e061d1008207ff095b0d31391adfd44949518f5dcebacc5c3f2fee31797b7b5950c2aea2fc4bcf6be9513c5866e11d31dfbb8cb373ace11f4a3c341f9f4d66b4b2dd6adba05929d1489c0b513248653b8870f24474908e54d34f32a95e6cbb8277cdfe150138fc93797709259ce04defc48dcc9a2cc902eebb5cf8dd156f63feeb1245e44b97e833e8ea4c50ce405fe4d47e432fec3b48bf78e6c8b61148a5b022f208a736d3d85b7fe97955e56afeac79234fab7ab6554a64dbd93ebe8bbe5befa05a7d8e626f17a268078927e774b63dec64c9a9a8371f83b15e7bca3d8c24a4fa42eb38c61ba5c77cec95bc606a6d7f5325e7ad3cb87402180421b95e924e271d3b378006665cb12e776266de0d395d3f43b20f5c880953c7a90c5ce4ce9b86bccf4262a806588ef3d41850d41defb632266a9cc35ddb983c88327c1a8b7b2c6077bc57c618f76c73d6840b029749ecdbef1c8f1dfe6d74545585274102bc0c9caf0c135bcac5b54f", 0x1000, 0x20004000, &(0x7f00000012c0)={0xa, 0x4e24, 0x40, @mcast1, 0x401}, 0x1c) 8m32.903161545s ago: executing program 4 (id=3411): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x5000) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f000001ea80)={0x2, 0x0, @ioapic={0x2, 0x101, 0x400, 0x5, 0x0, [{0x8, 0xc, 0x4, '\x00', 0xa}, {0xe, 0x3, 0x2, '\x00', 0xa}, {0x17, 0xe7, 0x3, '\x00', 0x5}, {0x6, 0x8, 0x0, '\x00', 0xa2}, {0x9, 0x3, 0x6, '\x00', 0x9}, {0x1, 0x80, 0x31, '\x00', 0x80}, {0x0, 0x80, 0x10}, {0x7b, 0x1, 0x6, '\x00', 0x8}, {0x2, 0x7, 0x9, '\x00', 0xf}, {0x7f, 0x0, 0xe, '\x00', 0xff}, {0x4, 0x9, 0x8, '\x00', 0x9}, {0x10, 0x7, 0xdd, '\x00', 0x9}, {0x7f, 0x5, 0x9, '\x00', 0xff}, {0x8, 0x2, 0xd, '\x00', 0x8d}, {0xd7, 0x3, 0xfd, '\x00', 0x4}, {0xff, 0xff, 0x9, '\x00', 0x6}, {0x4, 0x1, 0x2, '\x00', 0x6}, {0x49, 0x3, 0x9, '\x00', 0x9}, {0x8, 0x1, 0xcf, '\x00', 0x24}, {0xb, 0x7f, 0x7f, '\x00', 0x6}, {0x14, 0x9, 0x8, '\x00', 0x10}, {0x5, 0xc2, 0xc, '\x00', 0x1}, {0xf9, 0x7, 0x47}, {0x9, 0x2, 0x5, '\x00', 0xfa}]}}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 8m32.603546285s ago: executing program 4 (id=3413): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0x5450, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x6a, 0x2, 0x0, &(0x7f0000000300)) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="780023e3070a0102000000000000e96db119af190d91d83cf022d771468600000a0000060900020073797a30000000005800048054000180090001006d657461000000004400028008000140000056d60800f80d0000000008000140000000010800014000000009080001400000000b080002"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$getownex(r8, 0x10, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000027c0)={0x2c, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @nested={0x4, 0x6}]}, @nested={0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="050000001000010000000000000000000000000a70000020060a01040000000000000000020000003c000480380001800e000100696d6d65646961746500eaff230002800800014000000003400000000408000180ffffffff1400048010000180090001007866726d000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x98}}, 0x48000) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r12, 0x4018aee3, &(0x7f00000000c0)=@attr_pmu_filter={0x0, 0x1, 0x1, &(0x7f0000000080)={0x0, 0x3}}) ioctl$KVM_RUN(r12, 0xae80, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000100)=ANY=[@ANYRES32=r9, @ANYRES8=r5, @ANYRES16], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x24004000) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0xa8681, 0x0) 8m32.423789795s ago: executing program 4 (id=3414): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001800010301"], 0x58}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f9022476f1", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x804) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001800dd8d00000000ffffff2502101000fe0400060000002008001e0001"], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) syz_emit_ethernet(0xde, &(0x7f0000000200)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0xa8, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x2a, 0xc2, 0x0, 0x0, 0x1, {[@mptcp=@remove_addr={0x1e, 0x91, 0x2, 0x0, "5922ef63dde1079a8da9d0150b14b8903280907e74a583beee77af67d1bbd7396988f9aa1d636de6ef3c0a0731115163553914933c232d7bd9ea1fa32f04683bb525f5a9b5c2dc75ebef37e7d9e2a196e9cd7c58d613d62084a69fae248c0e98de4c0cd48e0468ba9cfe6a12ada31bbc5fa5fc0da8cb427f8f5c3072a18dceb95cc28e26808ef7844b42303676ae"}]}}}}}}}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r8 = socket$kcm(0x2, 0x2, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000600)) syz_usb_connect(0x0, 0x32, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000083ef0840e07d6e67db77000000030902"], 0x0) dup(r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f00000000c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) readv(r10, &(0x7f0000000040)=[{&(0x7f0000001640)=""/228, 0xe4}], 0x1) 8m30.924572578s ago: executing program 4 (id=3423): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000080)={0xf0f02a, 0x17}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x28, 0x4, 0x8, 0x3, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9f3dd937e73e3ff9}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000061000400000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @sk_msg}, 0x48) 8m30.825289855s ago: executing program 4 (id=3424): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_off}]}) chdir(&(0x7f00000000c0)='./bus\x00') linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) getxattr(&(0x7f0000000180)='./bus/file0\x00', &(0x7f0000000200)=@random={'security.', '^\\{\x00'}, &(0x7f0000000240)=""/238, 0xee) unlink(&(0x7f0000000000)='./file7\x00') 8m30.765237917s ago: executing program 4 (id=3425): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x7e}) r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x4, 0x4, 0x0, 0x1, 0xfefffffe}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r2, r2, 0x2f}, 0x20) (async) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r5, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r3, r4, 0x4, r3}, 0x10) (async) r6 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r6, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000100)=[{}], 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000010000000000000200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800002c0000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000d3285c51815f6ee1c4330000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0xc00000}, 0x94) (async) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000580)={{{@in=@rand_addr=0x64010100, @in=@empty, 0x4e24, 0xf930, 0x4e20, 0xa2f6, 0x2, 0x20, 0x80, 0x11, 0x0, r8}, {0x15ef, 0x3ff, 0x9, 0x8, 0x0, 0x4, 0x49f, 0x6}, {0x0, 0x6, 0x3, 0x2}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d2, 0x6c}, 0xa, @in=@multicast2, 0x3503, 0x1, 0x0, 0x6, 0x0, 0x8, 0x80000001}}, 0xe8) r9 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$dsp(r9, &(0x7f00000000c0)=""/108, 0x6c) write$dsp(r7, &(0x7f0000002000)='`', 0x88020) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCGPTLCK(r10, 0x80045439, &(0x7f0000000040)) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r11 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r11, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000680)={0xc, @broadcast, 0x4e23, 0x2, 'ovf\x00', 0xe, 0x4, 0x59}, 0x2c) (async) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000040)={0x4}, 0x8) (async) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000340), 0x50f183, 0x0) 8m11.308216892s ago: executing program 35 (id=3425): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x7e}) r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x4, 0x4, 0x0, 0x1, 0xfefffffe}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r2, r2, 0x2f}, 0x20) (async) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r5, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r3, r4, 0x4, r3}, 0x10) (async) r6 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r6, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000100)=[{}], 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000010000000000000200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800002c0000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000d3285c51815f6ee1c4330000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0xc00000}, 0x94) (async) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000580)={{{@in=@rand_addr=0x64010100, @in=@empty, 0x4e24, 0xf930, 0x4e20, 0xa2f6, 0x2, 0x20, 0x80, 0x11, 0x0, r8}, {0x15ef, 0x3ff, 0x9, 0x8, 0x0, 0x4, 0x49f, 0x6}, {0x0, 0x6, 0x3, 0x2}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d2, 0x6c}, 0xa, @in=@multicast2, 0x3503, 0x1, 0x0, 0x6, 0x0, 0x8, 0x80000001}}, 0xe8) r9 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$dsp(r9, &(0x7f00000000c0)=""/108, 0x6c) write$dsp(r7, &(0x7f0000002000)='`', 0x88020) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCGPTLCK(r10, 0x80045439, &(0x7f0000000040)) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r11 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r11, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000680)={0xc, @broadcast, 0x4e23, 0x2, 'ovf\x00', 0xe, 0x4, 0x59}, 0x2c) (async) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000040)={0x4}, 0x8) (async) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000340), 0x50f183, 0x0) 6m35.878226519s ago: executing program 0 (id=4118): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x20, 0x0, 0x1, 0x7}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="b0000000", @ANYRES16, @ANYBLOB="01"], 0xb0}}, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) 6m32.903164103s ago: executing program 0 (id=4174): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3b0, 0xffffffff, 0xffffffff, 0x3b0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffffff], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0x3], 0x5, 0x14, 0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001680)={{0x1, 0xffffffffffffffff}, &(0x7f0000001240), &(0x7f0000001640)}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x1b, &(0x7f00000016c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5c2a}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x0, 0x7, 0xb, 0x9, 0x20, 0x8}, @ldst={0x3, 0x1, 0x6, 0xc, 0x4, 0x2f}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xa09310ffe3f4f744}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r5 = fanotify_init(0x0, 0x0) r6 = epoll_create1(0x0) r7 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000001440), 0x800, 0x0) r8 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0) read$snddsp(r8, &(0x7f0000000240)=""/203, 0xcb) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000014c0)='/sys/kernel/vmcoreinfo', 0x40403, 0x302) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001540)=@bpf_tracing={0x1a, 0xf, &(0x7f0000001380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffaf0d, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xc6}}}, &(0x7f0000001400)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, 0x1a, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001480)={0x0, 0xb, 0x7, 0x101}, 0x10, 0xf6d5, r3, 0x0, &(0x7f0000001500)=[r8, r9], 0x0, 0x10, 0x57}, 0x94) r10 = fcntl$dupfd(r5, 0x0, r6) r11 = fanotify_init(0x40, 0x109c03) fanotify_mark(r11, 0x21, 0x0, r10, 0x0) fanotify_mark(r10, 0x2, 0x40000038, r10, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r10, 0xc0184800, &(0x7f0000001340)={0xaa, r4, 0x2}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000040)={{0x0, 0x3, 0xc20, 0xadb12e32f182386c, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000000)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000000200)={{r12, 0x4, 0xa, 0x6, 0x7c65, 0x8, 0x10, 0xb, 0xffff, 0xfffffffc, 0x3, 0xd6, 0x5, 0x4, 0x5}}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 6m32.852336867s ago: executing program 0 (id=4175): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000500)={@ptr={0x77682a85, 0x0, 0x0, 0x0, 0x2, 0x80028}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0xfffffffffffffffe, 0x1, 0x48}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x1000000, 0x0}) 6m32.783038553s ago: executing program 0 (id=4178): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x48) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) close(0x3) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000dbd7000fcdbdf250200040000", @ANYRES32=r2, @ANYBLOB="0c009900000000000000000005001801370000000800270002000000080026006c090000"], 0x40}, 0x1, 0x0, 0x0, 0x20040840}, 0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000080)={0x4, 0x0, 0x1c, 0x1c, 0x100, &(0x7f0000000440)="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"}) 6m32.773241537s ago: executing program 0 (id=4179): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000480)={'icmp6\x00'}, &(0x7f00000004c0)=0x1e) (async) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000500)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="48b801000000000000000f21f8640f808c6a060623f848b8fcffffffffffffff0f23d80f21f835800000100f23f86464660f38807d0036400f23f440dec93e460f01c4af0f20d835200000000f22d8b91e0200000f32440f01d1", 0x5a}], 0x1, 0x10, 0x0, 0x0) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x33, 0x7f, 0x8, 0x20000, 0x0, 0x5, 0x2000000, 0x0, 0x3000000}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x2, 0x4, 0x3, 0x3]}}}]}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) 6m32.530508062s ago: executing program 0 (id=4186): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="120000000d000000040000000200000000000000", @ANYRES32, @ANYBLOB="00000000007eedc5e93a062536c82000000004000000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) close(r2) recvmsg(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1}, 0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r4 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc0105b08, &(0x7f0000000040)) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x80801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000380)={{&(0x7f0000668000/0x4000)=nil, 0x4000}, 0x5}) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newtaction={0x4c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x3ffe, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan3\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x7}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r10, 0xa, 0x28000000}, 0x0) io_uring_setup(0x428f, &(0x7f00000003c0)={0x0, 0xdc47, 0x400, 0x0, 0xaf}) 6m32.335344018s ago: executing program 36 (id=4186): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="120000000d000000040000000200000000000000", @ANYRES32, @ANYBLOB="00000000007eedc5e93a062536c82000000004000000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) close(r2) recvmsg(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1}, 0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r4 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc0105b08, &(0x7f0000000040)) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x80801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000380)={{&(0x7f0000668000/0x4000)=nil, 0x4000}, 0x5}) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newtaction={0x4c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x3ffe, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan3\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x7}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r10, 0xa, 0x28000000}, 0x0) io_uring_setup(0x428f, &(0x7f00000003c0)={0x0, 0xdc47, 0x400, 0x0, 0xaf}) 5m28.431979488s ago: executing program 8 (id=4742): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1c, 0x406}}}, 0x7) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20008890, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa1090000", 0x38}], 0x1}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80800, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x1a8, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@TCA_STAB={0x100, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xfb, 0xe, 0x7, 0x0, 0x3, 0xfa, 0x8}}, {0x14, 0x2, [0x8, 0x40, 0x4, 0x2, 0x3, 0x2, 0x5, 0x4]}}, {{0x1c, 0x1, {0xfa, 0x34, 0x6, 0x9, 0x0, 0xae, 0x6, 0x3}}, {0xa, 0x2, [0x4, 0x7, 0xda]}}, {{0x1c, 0x1, {0x4, 0xa, 0x40e, 0x6, 0x1, 0x9, 0x8, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0x4, 0x0, 0xfffd, 0xffffffc3, 0x1, 0x9, 0x9a, 0x6}}, {0x10, 0x2, [0x5, 0x9, 0xd, 0x6, 0x6, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x4, 0x101, 0x1, 0x1, 0x0, 0x1}}, {0x6, 0x2, [0xb851]}}, {{0x1c, 0x1, {0x8, 0x6, 0x1000, 0x8001, 0x0, 0x3, 0x3, 0x8}}, {0x14, 0x2, [0x7, 0x4, 0x5, 0x2, 0x40, 0x9, 0x97b, 0x3]}}]}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x0, 0x997f, 0x0, 0x0, 0x4, 0x6, 0xe, 0x80}}}}, @TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0xf6, 0xabe1, 0xa9bc, 0x1, 0x7577, 0x2, 0x4}}, {0xc, 0x2, [0xff, 0x4, 0x9, 0x2]}}, {{0x1c, 0x1, {0x2, 0x1, 0x3c09, 0x1, 0x2, 0xe92, 0x7, 0x1}}, {0x6, 0x2, [0x9]}}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40048d1}, 0x8040) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1c, 0x406}}}, 0x7) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20008890, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x80002, 0x0) (async) sendmsg(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa1090000", 0x38}], 0x1}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80800, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x1a8, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@TCA_STAB={0x100, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xfb, 0xe, 0x7, 0x0, 0x3, 0xfa, 0x8}}, {0x14, 0x2, [0x8, 0x40, 0x4, 0x2, 0x3, 0x2, 0x5, 0x4]}}, {{0x1c, 0x1, {0xfa, 0x34, 0x6, 0x9, 0x0, 0xae, 0x6, 0x3}}, {0xa, 0x2, [0x4, 0x7, 0xda]}}, {{0x1c, 0x1, {0x4, 0xa, 0x40e, 0x6, 0x1, 0x9, 0x8, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0x4, 0x0, 0xfffd, 0xffffffc3, 0x1, 0x9, 0x9a, 0x6}}, {0x10, 0x2, [0x5, 0x9, 0xd, 0x6, 0x6, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x4, 0x101, 0x1, 0x1, 0x0, 0x1}}, {0x6, 0x2, [0xb851]}}, {{0x1c, 0x1, {0x8, 0x6, 0x1000, 0x8001, 0x0, 0x3, 0x3, 0x8}}, {0x14, 0x2, [0x7, 0x4, 0x5, 0x2, 0x40, 0x9, 0x97b, 0x3]}}]}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x0, 0x997f, 0x0, 0x0, 0x4, 0x6, 0xe, 0x80}}}}, @TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0xf6, 0xabe1, 0xa9bc, 0x1, 0x7577, 0x2, 0x4}}, {0xc, 0x2, [0xff, 0x4, 0x9, 0x2]}}, {{0x1c, 0x1, {0x2, 0x1, 0x3c09, 0x1, 0x2, 0xe92, 0x7, 0x1}}, {0x6, 0x2, [0x9]}}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40048d1}, 0x8040) (async) 5m27.828415034s ago: executing program 8 (id=4758): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000480)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @rand_addr=0x64010101}, 0x2, 0x1, 0x0, 0x1}}, 0x2e) getsockopt(r2, 0x111, 0x3, 0x0, &(0x7f0000000080)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x0, 0x0) 5m27.827714723s ago: executing program 7 (id=4759): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r5, 0x6, 0x21, 0x0, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="29000080", @ANYRES16=r4, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r6, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c657230000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000001480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={&(0x7f0000000300)={0x1104, r1, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x60e, 0x40}}}}, [@NL80211_ATTR_NAN_FUNC={0x10b4, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x1008, 0xd, 0x0, 0x1, [{0x1004, 0x0, "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"}]}, @NL80211_NAN_FUNC_SRF={0x58, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x4c, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x3}]}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0xf}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x3}, @NL80211_NAN_FUNC_SERVICE_INFO={0x2d, 0xb, "9d2a182e890d988cb4752cddc61ad98e0ad234e9e66023f4cbf183b77d870e42a8abeceb52df413018"}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x2}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x1}]}, @NL80211_ATTR_NAN_FUNC={0x28, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SERVICE_INFO={0x1d, 0xb, "1346060197c021572bb575c45bfdf2dade0db05ffb9141203e"}]}]}, 0x1104}, 0x1, 0x0, 0x0, 0x20008080}, 0x800) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xb}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x267}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffffc}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x401}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x24040001) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0700000000000000000005000000180003800800040000000000080002002000000004000100290001801400020073797a5f74756e00000000000000"], 0x44}}, 0x0) 5m27.82632891s ago: executing program 8 (id=4761): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r4, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 5m27.740472235s ago: executing program 7 (id=4762): r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x2) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x20004051) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="19000000040000000400000009"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f0000000280)='P', &(0x7f0000000000)=""/7, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) io_submit(0x0, 0x3, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200)='p', 0x8200, 0x600}]) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r4, &(0x7f0000000200)}, 0x20) fchdir(r3) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, r5) setpgid(0x0, r5) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYBLOB="0b00e880976b6408686030000500018099"], 0x2c}], 0x1}, 0x0) socket$kcm(0x11, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x60000, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x1e) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xa, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) 5m27.672564188s ago: executing program 8 (id=4763): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syz_emit_ethernet(0xa6, &(0x7f0000000200)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x70, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @empty, @mcast2, [@routing={0x3b, 0x6, 0x1, 0x1, 0x0, [@loopback, @private0, @rand_addr=' \x01\x00']}], "fafb17c133d11e59"}}}}}}}, 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x4) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x200100, 0x10) link(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') mknodat(r0, &(0x7f0000000140)='./file0\x00', 0x100, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x3) 5m27.669050434s ago: executing program 8 (id=4765): r0 = syz_open_dev$sndctrl(&(0x7f0000000140), 0xf, 0x4000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000240)=0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x4}) ioctl$COMEDI_UNLOCK(r2, 0x6406) openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x208040, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000050000000090a010400000000000000000100000008000a40000000030900020073797a32000000000900321f5dc728bdcdadecce918f89010073797a3000000000080005400000000414000980100002800c0001800800014000000002140000001000010000000000000000000000000a"], 0x98}}, 0x0) 5m27.547844547s ago: executing program 7 (id=4766): syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r0, 0x1, 0x70bd2a, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}}, 0x20048880) (async) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x1}) 5m27.547439394s ago: executing program 7 (id=4767): syz_io_uring_setup(0x1006a17, &(0x7f0000000100)={0x0, 0x15d2, 0x40, 0x2, 0x14}, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x9, 0x12}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8840}, 0x934ec06da191d2cb) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000004c0)=0x300820, 0x4) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x262) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1b}}, 0x80}, 0x1c) ioctl$FE_SET_PROPERTY(r2, 0x40106f52, &(0x7f0000000000)={0x21, &(0x7f00000000c0)=[{0x11, '\x00', @data=0x6, 0x9}]}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)={0xa0042, 0x101, 0xd}, 0x18) mount$binder(0x0, &(0x7f0000000500)='./bus/file0\x00', &(0x7f0000000540), 0x80, &(0x7f0000000580)={[{@stats}], [{@smackfsdef={'smackfsdef', 0x3d, '}-\'!%:{'}}, {@audit}, {@fsmagic={'fsmagic', 0x3d, 0x2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '}^(!#'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@measure}, {@subj_type={'subj_type', 0x3d, '\xff\xff'}}]}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000003680)={0x2020}, 0x2020) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_DEL_PMK(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r4, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x68}, 0x1, 0x0, 0x0, 0x28000}, 0x800) 5m27.402574049s ago: executing program 7 (id=4768): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0, 0xc000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x3fb, 0x7fff}) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4008080) 5m27.330585411s ago: executing program 8 (id=4769): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) (async) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0xdd) keyctl$clear(0x7, r1) munmap(&(0x7f0000234000/0x1000)=nil, 0x1000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r3, 0x513, 0x70bd26, 0x25dfdbff, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000044}, 0x40004) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x1000, 0x0, 0x3}, 0x20) 5m27.240901811s ago: executing program 37 (id=4769): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) (async) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0xdd) keyctl$clear(0x7, r1) munmap(&(0x7f0000234000/0x1000)=nil, 0x1000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r3, 0x513, 0x70bd26, 0x25dfdbff, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000044}, 0x40004) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x1000, 0x0, 0x3}, 0x20) 5m27.169135908s ago: executing program 7 (id=4771): socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000040)={0x0, 0xfffffffc, 0x60, {0x9, 0x10}, 0x800000}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00001e5000/0x18000)=nil, &(0x7f00000006c0)=[@text16={0x10, 0x0}], 0x1, 0x6, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r0, 0x0, 0x0) (async) syz_emit_ethernet(0x26, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffdae) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFCONF(r4, 0x8912, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x51, 0x9, 0xfffc, {0x20, 0x1}, {0x47, 0x2}, @rumble={0xd, 0x1}}) (async) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r5, &(0x7f0000000040)="e2", 0x12d8) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x300b, 0x4}) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r9 = dup3(r8, r7, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 5m27.067963297s ago: executing program 38 (id=4771): socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000040)={0x0, 0xfffffffc, 0x60, {0x9, 0x10}, 0x800000}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00001e5000/0x18000)=nil, &(0x7f00000006c0)=[@text16={0x10, 0x0}], 0x1, 0x6, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r0, 0x0, 0x0) (async) syz_emit_ethernet(0x26, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffdae) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFCONF(r4, 0x8912, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x51, 0x9, 0xfffc, {0x20, 0x1}, {0x47, 0x2}, @rumble={0xd, 0x1}}) (async) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r5, &(0x7f0000000040)="e2", 0x12d8) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x300b, 0x4}) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r9 = dup3(r8, r7, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 3m55.166619145s ago: executing program 3 (id=5919): r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000540)={0x2, 0x0, @pic={0x8, 0x7, 0xc, 0xfc, 0x81, 0x4, 0x1b, 0x1, 0x42, 0x4, 0x2, 0x80, 0x7, 0x6, 0x19, 0x3d}}) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="cc0000000000000012"]) 3m54.986518717s ago: executing program 3 (id=5921): r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xf7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f00000001c0)={0x3, 'wg2\x00', {0x7}, 0x8}) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r3, &(0x7f0000000200)={0x27, 0x0, 0x1, 0x7, 0x44, 0x2, "41546f970f7e28196e120247f2052071709a9031c62a6f3d4470447336b176174e19deb4fd372182f50bbf71003e9dfbed69b3eb6d959de8271a52cece0b00", 0x17}, 0x60) r4 = accept$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) getsockopt$inet_buf(r4, 0x0, 0x11, &(0x7f0000000300)=""/107, &(0x7f0000000380)=0x6b) r5 = syz_open_dev$sndpcmp(&(0x7f00000003c0), 0x10, 0xe001) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r5, 0x80184132, &(0x7f0000000400)) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000440), 0x480, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000500)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0], 0x0, 0x2e, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0xb6, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_GET(r6, &(0x7f0000000900)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0xb0, r7, 0x20, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x4}]}, 0xb0}, 0x1, 0x0, 0x0, 0x800}, 0x91) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000940)={0x0, r4, 0x9, 0x3, 0x9, 0x1}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000a80)={'ip_vti0\x00', &(0x7f0000000980)={'syztnl1\x00', r1, 0x96f0ed39f9ac57e5, 0x20, 0xfe0, 0x9, {{0x2b, 0x4, 0x2, 0x13, 0xac, 0x67, 0x0, 0xc, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@ssrr={0x89, 0x13, 0x89, [@empty, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @lsrr={0x83, 0x17, 0x26, [@broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x3d}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x13, 0xda, [@remote, @broadcast, @multicast2, @multicast2]}, @rr={0x7, 0x17, 0xee, [@rand_addr=0x64010100, @multicast2, @rand_addr=0x64010100, @empty, @private=0xa010100]}, @timestamp_prespec={0x44, 0x2c, 0xcc, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@broadcast, 0x4}, {@multicast1, 0x2}, {@loopback, 0x8}, {@rand_addr=0x64010101, 0x1}]}, @timestamp={0x44, 0x18, 0xcb, 0x0, 0x4, [0x6, 0x2, 0x7, 0x8, 0x3]}]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000ac0)={r6, r9, 0x25, 0x18, @void}, 0x10) ioctl$KVM_TDX_INIT_MEM_REGION(r6, 0xc008aeba, &(0x7f0000000b40)={0x3, 0x1, &(0x7f0000000b00)={&(0x7f0000ffb000/0x3000)=nil, 0xeeee0000, 0x800}}) r10 = accept4$alg(r6, 0x0, 0x0, 0x80800) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r10, 0xf503, 0x0) ioctl$PIO_FONTX(r6, 0x4b6c, &(0x7f0000000f80)={0x1f4, 0x12, &(0x7f0000000b80)="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"}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000fc0)={@loopback, 0x14, r9}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000001000)={0x0, 0x4c}, &(0x7f0000001040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000001080)={r11, 0x3400}, 0x8) setsockopt$inet_int(r6, 0x0, 0x1, &(0x7f00000010c0)=0x7, 0x4) accept$alg(r6, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000001140)={{0x1, 0x1, 0x18, r6, {0xee01, 0xee00}}, './file0\x00'}) newfstatat(0xffffffffffffff9c, &(0x7f0000001180)='.\x00', &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) sendmsg$nl_route(r6, &(0x7f0000001300)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)=@ipv6_delroute={0x80, 0x19, 0x2, 0x70bd2d, 0x25dfdbfb, {0xa, 0x80, 0x0, 0xe, 0xfd, 0x3, 0x0, 0x6, 0x1100}, [@RTA_IIF={0x8}, @RTA_UID={0x8, 0x19, r12}, @RTA_GATEWAY={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @RTA_UID={0x8, 0x19, r13}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_MULTIPATH={0xc, 0x9, {0x81, 0x2e, 0x3, r8}}, @RTA_GATEWAY={0x14, 0x5, @loopback}, @RTA_IIF={0x8, 0x3, r8}]}, 0x80}, 0x1, 0x0, 0x0, 0x41}, 0x8000) 3m54.822790931s ago: executing program 3 (id=5922): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x80, 0x1, 0x1, 0xe, 0x4}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40482) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000100)={{0x59, 0xf7}, {0x6, 0x8}, 0x5, 0x3, 0xb}) 3m54.690168519s ago: executing program 3 (id=5923): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000280)={{0x77359400}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r1, &(0x7f0000000180)) ioctl$TIOCSSOFTCAR(r0, 0x5412, &(0x7f0000000540)=0x13) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f}, 0x3d) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) syz_usb_connect$uac3(0x3, 0xf6, &(0x7f0000000640)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x582, 0x7, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe4, 0x3, 0x1, 0x8, 0x40, 0x7, {0x8, 0xb, 0x2, 0x1, 0x1, 0x21, 0x30, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xa, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x9}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0xfffa, 0x2c, 0x1}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0x5, 0x67, 0x10, 0x8}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xf9, 0x2, 0xfe, 0x0, "6eef", "1678"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x81, 0x81, 0x1, {0xa, 0x25, 0x25, 0x8, 0x41, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x2, 0x9, 0xe0, "b5134184"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0xa, 0x2, 0x9}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1, 0x8, 0xeb}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0x1, 0x6, 0x3f}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xf, 0x3, 0x5, 0x9, 0x7}, @as_header={0x17, 0x24, 0x1, 0x7d, 0x4, 0x1, 0x4, 0x1, 0xe, 0x0, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0xfb, 0x81, {0xa, 0x25, 0x25, 0x9, 0xc3, 0x6}}}}}}}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x201, 0x5, 0x3, 0x74, 0x40, 0xd}, 0x10, &(0x7f0000000780)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x6, 0x8, 0x4, 0xc}]}, 0x3, [{0xe1, &(0x7f00000007c0)=@string={0xe1, 0x3, "9fca42980b33f990ad8bd937d317389627667440e53e67b639f01023f49832cb75a46ded8063cf81b9d40700e07947664ee6fdb024b0fdd89d338905cb460ec275d2ef87ccfc00c2e14816d7f574afa1c8783b349f676e8a948b375a6db8b7b28f0dd56049b26ec79ba10586c0098da0756f965cdf9f561519330ab4dabb8764a44218dbc9c46ef0213f7941ee5aba3ab388c80db4a299b6efecb406aac9dc3a23babb5c45d8a3d3e8a8d08d6cc1482dc695938a2ed00661dda3a2510de5b25989596cd49bec115d76a88829a40f01a4ae10db5e15337eae631943774f09c3"}}, {0x91, &(0x7f00000008c0)=@string={0x91, 0x3, "44f9350a51a939b1500ec6a1d1fd120c06c62a533516f60623a72d32f6d213e633a50db2dadbf3b3718a4f0cec11e974e5a94aabf21b7ad1fc1d2db008f61a9a330c4d845d8189356cb2c891018f9e3eaa322e68fee6b73486fd323c40c585af1a07a957676a37c4a7c25ad3119822be76c8940a3494711637d944cf7f241c66eab3a8f2edb69b24b6e1d6cdf4f001"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x4ff}}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000f6ffffff00000000fcffffff8500000030000000180100002020642500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r3, r2, 0x2f}, 0x20) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)="27031c", 0x3}], 0x1}, 0x2400800c) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) syz_clone(0x8000800, &(0x7f00000003c0)="e3b1a8cd586e91419ffea0be776d8e10e5fa6b03502b7847da8389dfc26ca5302526e8d31613f4a434ac7d6ecc3389b38db0623f51cf0fa54fb007c1d45f3fafdb8ebca01fe4d2599787d57c99ebea02e745adbbad3869089743da8545a0b393545439590e62f0259a5683b282e41d5a6faad3d7f7e65eb7ebfca9c74343c77a533c43d82927c879ae8500e907a866de126056c830faa9b63ce43a0488f1286c4e0e5c918d09a526b99a71ea340148a3d6bd4198995fbb21a34cd6a00163a1bd087a1c9525e0c1db635af71cda5a3ee9160225f760235d", 0xd7, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000580)="3500f1c6d70044a2909cc4f9302c39b4bed11c706c03205e10244a17d64d3eccc0ff17b0169282edbc2dd7bf26c8ab5e64effd1adae335b3022da877796875da3471aa02fe9b8e85d06c580757cc2a4af4e57307276f8b15f2c02aae1eb4544a4df855b0c5a93040a8ce1938934d8a06f475bb64099415806684aa17d8b2574597e34114b1a3f76cad01e4acd556578e2b8c8ca5b0aa16cf39e1e90c766ba96b28b75547f84e7b342bfca763bd8d4ef08f3f20094dd2") creat(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_int(r6, 0x0, 0x16, 0x0, &(0x7f0000000540)) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r5, 0x0) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r7, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)="db796076192e88b152fbeb00eb6e16f4b8918a36386e03082c64ccc5b0bde4ae1fd4e9df768174d5d26f3d6495303605e4478500048bea204c1173de27a0193050892ac7e62f42817d10771c0508eb76558b452ed8e8f26a9ff92b6397070781b0dd47edc41a16adfd", 0x69, r3}, 0x68) 3m53.26200039s ago: executing program 3 (id=5931): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0xc0089364, &(0x7f0000000180)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) r6 = syz_open_procfs(0x0, &(0x7f0000000340)='schedstat\x00') r7 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0), r2) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r7, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x1c}}, 0x20000000) preadv(r6, &(0x7f0000000040)=[{&(0x7f0000001300)=""/4112, 0x1010}], 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c000900080000", @ANYRES32], 0x4c}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000002340)="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", 0x1000}, {&(0x7f0000003340)="23d4b3df171fdd61d5999aab3ad0ae29dc176d12fd2f7236ddf05c31cfc614e4c62b4e97a9fec5b4f368d14268dd000f3f5720429b3f9ba43523ecf180f1c6", 0x3f}, {&(0x7f0000003380)="d8df6f10ba0e23dd01bb43d3927334577978de30c215c9be", 0x18}, {&(0x7f00000033c0)="e260b796914bd17a349e54f36b532fdda8cfcf512685e2e4f345201f9d8f8fe24379cbea8363dd75e187c85439bdcde23b9e5702aab4987d60eea8fd154e3748a3eda76bce66878452962b7da109a43e39c36a5ce74b6c5254bc24688d3f1247991e42ea9e0f2444585c7e2f857cd513930086bfb9491e52aa505f32d4671eeae3af022e169df03e5dc998c815f33d77bf041da71a4587a03e56e69d7d49433e63b028477d181f67c96042576ea0df07e5fb2b744a0187e4a02ea8fcb6a4bcebb7ac76b14140bd2a779508106af2c593ca8ec4ef494f99", 0xd7}], 0x4, &(0x7f0000003500)=[{0xd0, 0x102, 0x9, "b2bf29085c2d92407cc55220f6c4c0eddd6b6bd5c1e7f32d2a02398fa2446f8cc6bde367eeb71f21b4cde0bdaaea29cfcdfc1d3f8caf5d0fd52569c39ea71c676ba6389da5afd468d0746648d1584145a08c6fa89267952d1055fef93b56059a55986c76db6fb100cfa697a4f42635129d0b51496e605d14746f3e7d2a28d9246d7bcbacf382c28a60e797cc932754c1b6567138ae086eb9a1beb2ad4cc4c2aa075cbd0d80666dbf9848f85f38594f3a7091f711f1b224f8132e5651f8cd10f0"}, {0x60, 0x102, 0x8, "80719a52d214b39e5268ea6843af1154f96485bc0dae080b92c2163e08a04fd4c7d0853b04a703a7f52b2fd7c029a61d33f2d901cdff239b421a0112748990635012ef7955c2e7f7fea6b77cf9ca3d4f"}, {0xa0, 0x116, 0x3, "b223bd8cc8d53d0a3ecb2086f9d9bb12da24950f7de69ca7d18fb1551e65a61b0441a3c5e1188e47c4aee67487ae4278384ae4f855c1f5580f5a55591d7ffb8062a18a722fcc99d18cae8a5c13ce769d38f13970c2877d7a04abbdc65e6e8586e7c254c968a34de64cf97a00aa5060bef114a25f19efcada465f12d82594cb52bf765ca8766ea1ee4ca3"}, {0x20, 0x119, 0xfffffffe, "d0909b4ce0c51da1f81649a81c2f"}, {0x50, 0x10d, 0x1, "bcb94d0fc8afbe5311981a8fdc3d7123d7e2abc46898c92ce6688c650c7cc6f7275e3d137571dd086dbfaa80886a1a45f3e552f5c79fd61ce394f3"}], 0x240}}], 0x1, 0x0) bind$nfc_llcp(r4, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a050400000000000000000200000088000480340001800c0001007061796c6f6164002400028008000340000000000800024000000000080001400000001008000440000000022c0001800e000100696d6d6564696174650000001800028008000140000000140c000280050001002d00000024000180090001006d6574610000000014000280080001400000001408000240000000db0900010073797a30000000000900020073797a32"], 0xdc}}, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, 0x2, {0x2, 0x4e23, @empty}, 'pimreg0\x00'}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000080), 0x42, 0x0) 3m52.879686985s ago: executing program 3 (id=5933): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xec, r3, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x10, 0x61}}}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0xc6, 0x3}, {0x2, 0x7}, {0x1, 0x4}], "9d439ca2912fc01e"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x0, 0x1}, {0x7, 0x4}, {0x7, 0x2}, {0xf6, 0x6}, {0x5, 0x3}, {0xb2, 0x7}, {0x3}], "dc8498e7ae4c4b67"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x2, 0x3}, {0xf6}, {0x7, 0x6}, {0x6, 0x7}, {0x5, 0x2}, {0x3, 0x7}, {0x9, 0x6}, {0x8, 0x1}, {0x7f, 0x7}, {0x50, 0x2}, {0x9}, {0x2, 0x2}, {0x8, 0x6}, {0x3, 0x4}, {0x5, 0x1}, {0xfb, 0x2}, {0x0, 0x1}, {0x5}, {0xfa, 0x6}, {0x2, 0x6}], "7f40bc2da844cba2"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x8, 0x7}, {0x1, 0x7}, {0x6, 0x3}, {0x80}, {0x2, 0x5}, {0xd, 0x7}, {0x90, 0x7}, {0x81, 0x5}, {0x1, 0x1}, {0x5, 0x1}], "40733d2bb5395227"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0xc, 0x7}, {0x7, 0x7}, {0x5, 0x5}, {0xa, 0x1}, {0x7, 0x2}, {0x9, 0x2}, {0x0, 0x5}, {0x9}, {0x1}, {0x8, 0x7}, {0xe, 0x6}, {0x40, 0x5}, {0x8, 0x2}, {0x7f, 0x3}, {0xc, 0x6}, {0x21, 0x3}, {0xe, 0x6}], "cb859c6ab7f4f988"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x2, 0x6}, {0x3, 0x6}], "1e14b87afbdbe320"}}]}, 0xec}}, 0x800) timer_create(0xb, 0x0, &(0x7f0000000400)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x989680}}, 0x0) timer_gettime(r6, &(0x7f0000000040)) 3m37.83967459s ago: executing program 39 (id=5933): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xec, r3, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x10, 0x61}}}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0xc6, 0x3}, {0x2, 0x7}, {0x1, 0x4}], "9d439ca2912fc01e"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x0, 0x1}, {0x7, 0x4}, {0x7, 0x2}, {0xf6, 0x6}, {0x5, 0x3}, {0xb2, 0x7}, {0x3}], "dc8498e7ae4c4b67"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x2, 0x3}, {0xf6}, {0x7, 0x6}, {0x6, 0x7}, {0x5, 0x2}, {0x3, 0x7}, {0x9, 0x6}, {0x8, 0x1}, {0x7f, 0x7}, {0x50, 0x2}, {0x9}, {0x2, 0x2}, {0x8, 0x6}, {0x3, 0x4}, {0x5, 0x1}, {0xfb, 0x2}, {0x0, 0x1}, {0x5}, {0xfa, 0x6}, {0x2, 0x6}], "7f40bc2da844cba2"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x8, 0x7}, {0x1, 0x7}, {0x6, 0x3}, {0x80}, {0x2, 0x5}, {0xd, 0x7}, {0x90, 0x7}, {0x81, 0x5}, {0x1, 0x1}, {0x5, 0x1}], "40733d2bb5395227"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0xc, 0x7}, {0x7, 0x7}, {0x5, 0x5}, {0xa, 0x1}, {0x7, 0x2}, {0x9, 0x2}, {0x0, 0x5}, {0x9}, {0x1}, {0x8, 0x7}, {0xe, 0x6}, {0x40, 0x5}, {0x8, 0x2}, {0x7f, 0x3}, {0xc, 0x6}, {0x21, 0x3}, {0xe, 0x6}], "cb859c6ab7f4f988"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x2, 0x6}, {0x3, 0x6}], "1e14b87afbdbe320"}}]}, 0xec}}, 0x800) timer_create(0xb, 0x0, &(0x7f0000000400)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x989680}}, 0x0) timer_gettime(r6, &(0x7f0000000040)) 3.255648486s ago: executing program 9 (id=7738): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x1a8, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@TCA_STAB={0x100, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xfb, 0xe, 0x7, 0x0, 0x3, 0xfa, 0x8}}, {0x14, 0x2, [0x8, 0x40, 0x4, 0x2, 0x3, 0x2, 0x5, 0x4]}}, {{0x1c, 0x1, {0xfa, 0x34, 0x6, 0x9, 0x0, 0xae, 0x6, 0x3}}, {0xa, 0x2, [0x4, 0x7, 0xd9]}}, {{0x1c, 0x1, {0x4, 0xa, 0x40e, 0x6, 0x1, 0x9, 0x8, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0x4, 0x7, 0xfffd, 0xffffffc3, 0x1, 0x9, 0x9a, 0x6}}, {0x10, 0x2, [0x5, 0x9, 0xd, 0x6, 0x6, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x4, 0x101, 0x1, 0x1, 0x0, 0x1}}, {0x6, 0x2, [0xb851]}}, {{0x1c, 0x1, {0x8, 0x6, 0x1000, 0x8001, 0x0, 0x3, 0x3, 0x8}}, {0x14, 0x2, [0x7, 0x4, 0x5, 0x2, 0x40, 0x9, 0x97b, 0x3]}}]}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x0, 0x997f, 0x0, 0x0, 0x4, 0x6, 0xe, 0x80}}}}, @TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0xf6, 0xabe1, 0xa9bc, 0x1, 0x7577, 0x2, 0x4}}, {0xfffffffffffffebe, 0x2, [0xff, 0x4, 0x9, 0x2]}}, {{0x1c, 0x1, {0x2, 0x1, 0x3c09, 0x1, 0x2, 0xe92, 0x7, 0x1}}, {0x6, 0x2, [0x9]}}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40048d1}, 0x8040) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000018c0)={&(0x7f0000000340)=@newtfilter={0x1560, 0x2c, 0x4, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x7, 0x1}, {0xf, 0x10}, {0xc, 0xfffe}}, [@filter_kind_options=@f_fw={{0x7}, {0x152c, 0x2, [@TCA_FW_POLICE={0xc64, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x76, 0x3, 0xd8, 0x101, 0xfffffffb, 0x3, 0x7fff, 0x0, 0x1d2000, 0x9ca, 0x3e3200, 0x6, 0x6, 0x80000000, 0x800, 0xf, 0x7, 0x3, 0xf0b, 0x9, 0x6, 0xfff, 0x6, 0x2, 0xdd, 0x7fff, 0x5, 0x6, 0x6, 0x6, 0x1, 0x7f, 0x4, 0x4, 0x1, 0x13, 0xfff, 0xf4, 0x1, 0x2, 0xffffff7f, 0xfffffcb6, 0x2000, 0x4, 0x40000000, 0x2, 0x7ff, 0x8, 0x2, 0x7fff, 0xfffffeff, 0x1, 0x80, 0x6, 0xc6bc, 0x7fffffff, 0xfffff97e, 0x7, 0x6, 0x8, 0x1, 0x4, 0x1000, 0x5, 0xfffffffe, 0x9, 0x36, 0x6, 0x200, 0x2, 0x1, 0x273b603e, 0x6067, 0x6, 0x1, 0xfffffffe, 0x80000000, 0xfffffff7, 0x3, 0x5, 0x80000, 0x4, 0x4, 0x3ff, 0xd, 0x6, 0xe4, 0x0, 0x3ff, 0x7, 0x5b3aa732, 0x17a3b8fd, 0x1, 0x12c, 0x6, 0xe, 0x9, 0x2, 0x7, 0x444, 0xb0d, 0xffffff00, 0x0, 0x2, 0x81, 0x5, 0xfffffff7, 0x3, 0x101, 0xfffffffa, 0x6, 0x0, 0x700000, 0xd7ae, 0x3, 0xfffffff8, 0x2, 0x7, 0x6, 0x7, 0x1, 0x1, 0x9, 0x1ff, 0xb0, 0x10, 0x40, 0x7c, 0x6, 0x3, 0x4, 0x3, 0x5, 0x2, 0x3, 0x8, 0x7, 0xff, 0x2, 0x6, 0x4, 0x5, 0x8, 0x1, 0x5, 0x9147, 0x3, 0x0, 0x2, 0x8, 0x97, 0x0, 0x5, 0x3, 0xfffffffc, 0x1000, 0x6, 0x100, 0x1, 0x8, 0x5, 0xfffffffd, 0x8, 0x6, 0x61, 0x1, 0x0, 0xfffffffc, 0x6, 0x6, 0x1000, 0x3, 0x86d, 0x7fffffff, 0x9, 0x6, 0xfffffd2a, 0x5, 0x1, 0x3, 0x4, 0x5, 0xf, 0x2, 0x4, 0x2, 0x4, 0xeec, 0xff, 0x0, 0xf, 0x3ff, 0x1000, 0x10, 0x8, 0x7, 0x5, 0x562, 0xfffffff8, 0x7, 0x3, 0x101, 0x0, 0x116, 0x8, 0x8, 0x0, 0x80, 0x1636, 0x7f, 0x6, 0x8, 0x6, 0x5, 0x7, 0xd, 0x0, 0x5, 0xfffff847, 0x0, 0x846, 0x6, 0x8, 0x3, 0x80000001, 0x1ae1, 0x5, 0x40, 0x9, 0xc, 0x3, 0x8d, 0x0, 0x3, 0x2, 0x7ff, 0x2, 0x8, 0x6, 0x7, 0x4, 0x10000, 0x4, 0x401, 0x8, 0xb, 0x8, 0x7, 0x401, 0x2, 0x5, 0x3, 0x40, 0x4, 0x3, 0x3]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x870, 0x1, 0x2, 0xa9e0, 0x5, {0x7, 0x1, 0x55eb, 0x7fff, 0x5}, {0xf, 0x1, 0x2, 0xd, 0x8, 0xfff}, 0x2, 0x8, 0xd}}, @TCA_POLICE_RATE={0x404, 0x2, [0xc7, 0x7, 0x0, 0xccf8, 0x1, 0x197, 0x200, 0x4, 0xf4f, 0x3, 0x29, 0x5, 0x5, 0x101, 0x5, 0x23902cde, 0x5, 0xf7, 0xfffffffa, 0x4, 0x13e1, 0xc, 0x2, 0x7, 0xfffffff9, 0x81, 0x6, 0xbb78, 0x8bd, 0x4, 0xffff5f5d, 0x3, 0x4, 0x1, 0x6, 0x7, 0x80000001, 0x3, 0xee82, 0x7, 0x3, 0x6, 0xffff, 0x1, 0x9594, 0xd, 0x6, 0x4b8a, 0x6, 0x7fff, 0x1, 0xc7db, 0x1, 0xe, 0x9, 0x7bfb3551, 0x1, 0x3c, 0x2, 0xfffffffa, 0x0, 0xe2, 0x3, 0xef8, 0x7, 0x6, 0x6, 0x9, 0xfff, 0xfffffffd, 0xc27, 0x7ff, 0x4, 0x4, 0x6, 0x400000, 0x0, 0x8, 0x2, 0x0, 0x4, 0x9, 0x6, 0x3, 0x80, 0x6, 0xe0, 0x4, 0x3, 0x9, 0x6, 0x1, 0x4, 0x8, 0x1ff, 0x0, 0x7fff, 0x2, 0x9, 0x0, 0x5, 0xec, 0xfff, 0x367c293a, 0x2, 0x5, 0xffffffff, 0x2377, 0x3, 0x3, 0x5, 0x9, 0xffff, 0x6, 0x8001, 0x52, 0x9, 0x3, 0x5, 0x4, 0x888, 0xd, 0x12, 0x6, 0x3, 0x4, 0xfffffe1b, 0x3, 0xfffffffb, 0x67, 0x1ff, 0x9, 0xffff, 0x9, 0x6, 0xff, 0x7, 0x9, 0x6, 0x0, 0x2, 0x63, 0x3565d38f, 0x5, 0x2, 0x29d, 0x1ff, 0x8, 0x100, 0x3, 0x6, 0x3, 0x4, 0x9, 0xc, 0xd8, 0x3, 0xfffffffc, 0x5, 0xc, 0x3, 0x6, 0xcb, 0x7, 0x8, 0x9, 0x4, 0xfffffffc, 0x5, 0x6, 0x6, 0x4, 0x5, 0xfffffffb, 0x8e, 0xfffffffd, 0x9, 0x4, 0x0, 0x5a1, 0xfffffffa, 0x8, 0x1, 0x0, 0x3, 0xffffffff, 0x100, 0xc, 0x9, 0xffffffff, 0x7fffffff, 0x0, 0x7, 0x7, 0x400, 0x3, 0xffffffff, 0xe1b, 0x44ac, 0xe, 0x3, 0x80000001, 0x3, 0x2, 0x0, 0x3, 0x5, 0x5, 0x7, 0xf, 0xc, 0x9, 0x1, 0x600000, 0x4, 0xff, 0x4, 0x9, 0x7, 0x400, 0x80000001, 0x5, 0x4383, 0xe, 0xffffffff, 0x1, 0x6, 0xff, 0x5, 0x1295, 0xffff0001, 0x100, 0x2, 0x80000001, 0xc, 0x5, 0x2, 0x81, 0x2, 0x7, 0x2, 0x8000, 0x0, 0x9, 0x7f, 0xfff, 0x6, 0x10, 0x6, 0x8, 0x8, 0x702, 0x80, 0x7, 0x4, 0xe0]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffff9, 0xfff, 0xb, 0x8, 0x4, 0x0, 0xa04f, 0x5, 0x40, 0x1, 0x7c70, 0xffff, 0x2, 0xa7, 0x9610, 0xf, 0x8, 0x6, 0xa, 0xd, 0x5, 0x2, 0x6, 0x3, 0x4, 0x9, 0x2, 0xd8, 0x3, 0x3, 0xfffffff8, 0x90, 0x9, 0xffff, 0x4, 0x2, 0x2, 0x0, 0x1, 0x0, 0x1, 0xea, 0x8, 0x40, 0x7, 0xeae, 0x3ee, 0xf, 0xf35, 0x92, 0x300000, 0x400, 0x5, 0x1, 0x1000, 0x6, 0x934, 0x6, 0x200, 0x5, 0x1, 0x0, 0x56, 0xffffff81, 0x6, 0xffffffff, 0x1, 0x3ff, 0xfffffffa, 0x5, 0x5, 0x5, 0xfffffffd, 0x6, 0x6, 0x5, 0x3, 0x7f000, 0x1, 0x7, 0x5, 0xf, 0x42bf, 0x9, 0x4, 0x8, 0x40, 0x8, 0x1, 0xd, 0x2, 0x7, 0x96, 0x7, 0x0, 0x7, 0x7, 0x80000001, 0xfff, 0xffff, 0x9, 0x0, 0xf8917602, 0xb, 0x6, 0x81, 0x0, 0xd, 0xc, 0x80, 0x6, 0xf, 0xffff0001, 0x3, 0x97, 0x1, 0x0, 0x6, 0x0, 0x5, 0x5, 0x2, 0x63c, 0x2, 0x9, 0x1000, 0x0, 0x6, 0x7, 0x800, 0x7, 0xffff52fd, 0x2, 0x3, 0x6, 0x1f3, 0xb248, 0x80, 0x3, 0x8000, 0x9, 0x2, 0x3ff, 0x0, 0x0, 0xfffffffd, 0x7, 0x2, 0x9, 0x71, 0x5, 0x5, 0x4, 0x3, 0xd9e, 0x3, 0x4, 0x81, 0xffffff52, 0x100, 0x8, 0x8, 0x8, 0x3, 0x7ff, 0x8, 0x1, 0x2, 0x201, 0x2, 0x3, 0x80, 0x4, 0x5, 0xad9, 0xff, 0x5, 0x2, 0x10000, 0x5, 0x0, 0xfffffffb, 0xfffffffd, 0x401, 0x2, 0xffff0000, 0x1ff, 0x5, 0x0, 0x2, 0x2, 0x99a0, 0x3, 0xd, 0x6, 0x2, 0xb96, 0x2, 0x5, 0x3, 0x225, 0x5, 0xb69e, 0xfffffffe, 0xfffffff8, 0x8001, 0x1, 0x80000000, 0x0, 0x7, 0x5, 0x5, 0xfffff000, 0x7, 0x7, 0x7ff, 0x200, 0x401, 0x5e8, 0xad, 0x7, 0x91b6, 0x7, 0xff, 0x8, 0x6, 0x9, 0x0, 0x10000, 0x0, 0x8, 0x8, 0x4, 0x10001, 0x4, 0x6007, 0x8, 0x3, 0xff, 0x4e, 0x8, 0x2, 0xc23a, 0x454, 0x10000, 0x0, 0x5, 0x1, 0xff, 0x7ff, 0x8, 0x9, 0xffffffff, 0xff, 0x5, 0x3]}]}, @TCA_FW_POLICE={0x8bc, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xd1, 0x2, 0xffff94cd, 0x9, 0x9, {0xa1, 0x2, 0xa8, 0x0, 0x7, 0x4}, {0x1, 0x3, 0x5, 0x6, 0x800, 0x6}, 0xd6a, 0x8001, 0x6c3a4ea5}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x20000000, 0x5, 0x2b7d, 0x9, {0x6, 0x1, 0x6, 0x7fff, 0x3, 0x1}, {0x4, 0x2, 0x400, 0x400, 0xe, 0xfffffe00}, 0x101, 0x9, 0x800}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4de}, @TCA_POLICE_RESULT={0x8, 0x5, 0x81}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x1, 0x3, 0x5, 0x0, 0x100, 0xd0, 0x0, 0x3, 0x0, 0x18, 0x80, 0x8, 0x57, 0x4, 0x80, 0x80, 0x8, 0x7fff, 0x2, 0x1, 0x2, 0x1, 0xc0, 0xfffffff7, 0x6, 0x8, 0x8001, 0x5, 0x5, 0x9, 0x1, 0x1, 0xdb, 0x1, 0x9, 0x7, 0x66b, 0x7, 0xb, 0x2, 0x5ba, 0x31, 0x9, 0x3ff, 0xd7c, 0x8, 0x1, 0xa88, 0x10, 0xb38, 0x5, 0x3, 0x4, 0x6, 0x8001, 0x437, 0xffffffc0, 0x10000, 0x1ff, 0x2, 0x7fff, 0x81, 0xff, 0x3fff8000, 0x7, 0x4, 0x10, 0x50, 0x8, 0x5, 0xab4, 0x6, 0xfffffff9, 0x7fff, 0x6c4, 0xfffffff5, 0x3, 0x3f, 0x80, 0x7, 0x7, 0x5, 0x10000000, 0x0, 0xfffffffd, 0x2, 0x3, 0x0, 0x7fffffff, 0x7, 0x2, 0x4, 0x4, 0x8, 0x6, 0x5, 0x4, 0x6, 0x4, 0x9, 0x2d226282, 0x8, 0x1, 0x52a, 0x1, 0x401, 0x4b24, 0x9f0, 0xfdc, 0x7, 0x9, 0x4010000, 0x1246, 0x4, 0x0, 0x6, 0x4, 0x2, 0x9, 0x7, 0x10, 0x2, 0xfffffff7, 0x3c, 0x8000, 0xffffffff, 0x3, 0x5cab, 0x9, 0xfffffffb, 0xfff, 0x3, 0x2, 0x967, 0x2, 0x8, 0x401, 0x2, 0xfffffe01, 0xffff0001, 0x8, 0xbb, 0x7, 0x400, 0x4, 0x60000000, 0x8, 0x4, 0x3a0, 0x4, 0x4, 0x50, 0x73, 0x24, 0x7fffffff, 0x1c0f, 0x0, 0x3fe, 0x8, 0x2, 0xfffffe01, 0x9, 0x9, 0xb7a7, 0x0, 0xffffffff, 0x2, 0x1a79c0, 0xb, 0x1, 0x10000, 0x3b2cf21d, 0x85c, 0x4, 0x7, 0x6e2, 0xfffeffff, 0x7, 0xd00, 0x7, 0x80000001, 0x2, 0x1, 0xca6, 0x0, 0xffffffff, 0x4, 0x3, 0xd, 0x8001, 0xfffffffc, 0x4, 0x0, 0x8bd2, 0x7, 0x7860, 0x9, 0x6, 0xdfc, 0x100, 0x64ab, 0x100, 0x5, 0xbbc, 0x4, 0x586, 0x82, 0x9, 0x7, 0xa, 0x6, 0x8, 0x0, 0xa9, 0x9, 0xe3d3, 0x0, 0x3, 0x1, 0x80000000, 0xffffff01, 0x5c2d, 0x800, 0x4, 0x8, 0x2, 0x8, 0x6, 0x1, 0x2, 0x80000001, 0x9, 0x0, 0x9850, 0x9, 0x2, 0x200, 0xac3, 0xb845, 0x7fff, 0x400, 0x4, 0x7fff, 0x3, 0x9, 0x5, 0x80, 0xfffffff9, 0x400, 0x6, 0x5, 0x1, 0x2, 0x8, 0x3]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xf8}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x8000000, 0x68, 0x3, 0x0, 0x7f, 0x6, 0x6, 0x7, 0x5, 0x7, 0x3, 0x617, 0x7fff, 0x6d, 0x9, 0xfffffffe, 0x0, 0x4, 0x79a, 0x1, 0x3, 0xf, 0x3, 0xfffffffa, 0x7, 0xd1, 0x5, 0x6, 0x7ff, 0x1, 0x80000000, 0x6, 0x2, 0x7f, 0xea21, 0x4, 0xa02, 0xfffffff7, 0x7, 0x7, 0x8, 0x7, 0x4, 0x200, 0xcc, 0x0, 0x5, 0xfffffe43, 0x400, 0x8, 0x8001, 0x2, 0x9, 0x4, 0x290, 0x80, 0x8, 0x1, 0x800, 0x200, 0x0, 0x7fffffff, 0x7e000000, 0x40, 0x0, 0xffff, 0x6, 0x1000, 0xfffffffe, 0x0, 0x8, 0xfff, 0x80000000, 0xc, 0x1, 0xe, 0x7fff, 0xd50, 0xa56e, 0x9, 0xffff, 0x278b, 0x7ff, 0x4, 0x7ff, 0x7, 0x1, 0x6, 0x7, 0x81, 0x7fffffff, 0xfffffffd, 0x3, 0x8, 0x8000, 0xffffffff, 0x2, 0x3, 0xfffffff0, 0x4, 0x7fffffff, 0x5, 0x9, 0x3, 0x0, 0x5, 0x400, 0x1, 0xd, 0xfffffffc, 0x2, 0x2, 0x3ff, 0xfffffffd, 0x7000, 0xffffffff, 0x81, 0x4, 0x9, 0x3, 0xff0, 0x80000001, 0x8, 0xfff, 0xfffff800, 0x6, 0xabb2, 0x5, 0x0, 0x5, 0x6, 0x800, 0x6, 0x7f, 0x4, 0x8, 0x735f, 0x84, 0x3, 0x7, 0x1ff, 0x40, 0x40, 0x4, 0x400, 0x9, 0x3ff, 0x2, 0x8, 0x9, 0x7, 0x12, 0xffff0000, 0x3, 0x0, 0x2, 0x3, 0x8, 0x101, 0xfffffff8, 0x6, 0x400, 0xfffffffd, 0x5, 0x7ff, 0x5, 0x5, 0x5, 0x7, 0x7, 0x101, 0x918, 0x8, 0x400, 0x81, 0xd8f, 0x618, 0x3, 0xd70, 0x400, 0x1, 0x2, 0x27d, 0x3ef, 0x9, 0x6, 0xfffffff9, 0x9, 0x3ff, 0x9, 0x6000000, 0x6, 0x6, 0x6b39, 0x120, 0x8, 0x3, 0x40, 0x1, 0x8, 0x4, 0x5, 0x0, 0x8, 0xe, 0x400, 0x6, 0x4, 0x3ff, 0xffffffff, 0x7, 0xc535, 0x80, 0xa, 0x400, 0x6, 0x0, 0x2, 0x2, 0x3, 0xffff, 0x7, 0x2, 0x8, 0xfffffffc, 0x23, 0x8, 0x7, 0x800, 0x8000, 0xf6c, 0x0, 0x9, 0x5, 0x6, 0x3, 0x0, 0x0, 0x9, 0x5a7, 0x81, 0xee, 0x40, 0x2, 0x6, 0x10000, 0x8, 0x9, 0x5, 0xff, 0x0, 0x1, 0x800, 0x3, 0x7]}]}, @TCA_FW_MASK={0x8, 0x5, 0xfff}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x40}}]}, 0x1560}, 0x1, 0x0, 0x0, 0x48044}, 0x20000006) 3.045979313s ago: executing program 9 (id=7740): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) r0 = socket$packet(0x11, 0x3, 0x300) kexec_load(0x3, 0x2, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc56a4a866c499b04ef61", 0xa7, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82ba", 0x2d, 0x5, 0xffffffff}], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x55, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000740)="0c74c75350f4020000000000000048092534fe1863474f795d750648323c6ffe0036d4606115ae1e998105584d1b84c9deaeeeabfb231d0d34b38b8b55f78815e6fe0904e124e14e702d9591c68d6658c53725ca625f4c7c38080d9b582551be2371ee2bb689de8bbd3d428f5beb131c73ba3f2236bcde49edbb6abca7c311c8", 0x16}], 0x2, 0x0, 0x0, 0x10}, 0x24040814) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f0000000200)=""/83, 0x53}, {&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000002840)=""/4096, 0x1000}], 0x3}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000006c0)="b80d018ed0baf80c66b894eaea8266efbafc0cedb845008ed00f01c56766c7442400740000006766c7442402005000006766c744240600000000670f011424b819000f00d866b80500000066b9000000000f01c1f30f090f20dc0fd8cb", 0x5d}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00'}) 2.49258054s ago: executing program 9 (id=7746): prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setreuid(0xee01, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setresuid(0xee01, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000001440)='./file1\x00', 0x0, 0x0, 0x800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, 0x0, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) sendto$packet(r7, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x40000, &(0x7f0000000240)={0x11, 0xf8, 0x0, 0x1, 0x5, 0x6, @random="24f51e8e0a5a"}, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002940)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x10}, {}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x10000, 0x9, 0xffffff00, 0x7, 0x401, 0x163, 0x3ff, 0xffffffff, 0x2, 0x7, 0x9, 0x5, 0x8, 0x8, 0x4, 0xffffe98e, 0x4, 0x1, 0x6, 0x8, 0xb, 0x4bbe5655, 0x8, 0x2, 0xf717, 0x401, 0x6, 0xa0, 0x2, 0x2, 0x3, 0x4, 0x4, 0x4, 0x2, 0x4, 0x3, 0x1, 0x7ff, 0xf, 0x7, 0x8, 0x23, 0x20, 0x6, 0xffff, 0x6fe, 0x450, 0xfffffff2, 0x8, 0x9, 0x8, 0x54aa, 0x0, 0x0, 0x2, 0x7ff, 0x3, 0x8, 0x2, 0xd64, 0x1, 0x0, 0xfffffff0, 0xffffffff, 0x5, 0x7, 0xfffffffa, 0x9, 0x1, 0x5, 0x53d1631f, 0x7fffffff, 0x7, 0x4694, 0x99, 0x0, 0x346, 0x1, 0x8, 0x8001, 0xffff, 0x2, 0x7, 0x9, 0x9, 0x4, 0x81, 0x2, 0x0, 0x40, 0x1, 0x75, 0x59, 0x400, 0x92, 0x9, 0x8, 0x9, 0x80000001, 0x0, 0x8, 0x1, 0x2000, 0x4, 0xc371, 0x3, 0x800, 0x9, 0x4, 0xfff, 0x9, 0x7, 0x1, 0xfffe00, 0x1, 0x7, 0x4, 0xf507, 0x8001, 0x2, 0x9, 0x5, 0x5, 0x8, 0x5c, 0x5, 0x1, 0x40, 0x1000, 0xfb, 0x3, 0x9, 0x10000, 0xd, 0x4, 0x0, 0xcd9, 0x5, 0xb, 0x4, 0x6, 0x6, 0x5, 0x4, 0xc, 0xc, 0x1afc75f, 0x81, 0xfff, 0x4, 0xf2, 0x1, 0x4, 0x7, 0xf, 0x7, 0xfff, 0x94, 0xcbbb, 0xb07210c, 0x8000, 0x86, 0x7ff, 0x2, 0x6, 0x9, 0x8, 0x8, 0x6, 0x4, 0x896, 0x72, 0x80000000, 0xffff, 0xc, 0x5, 0x1, 0xfffffff1, 0x100, 0x6, 0x6, 0xc612, 0x3, 0xfff, 0x9, 0x4, 0x7, 0xfff, 0x2, 0x200, 0x80, 0x9, 0xe50, 0x6, 0x4, 0x6, 0x2, 0x7, 0x7, 0x3, 0x2, 0xffff, 0x10001, 0x9, 0x100, 0x3ff, 0x1, 0x5, 0x9, 0x5, 0xac5, 0x5fc, 0x3, 0x8, 0x5, 0x9, 0x8, 0x8ff, 0x7, 0x10000, 0x8, 0x2, 0x6, 0x80000001, 0xc, 0xff800000, 0x2, 0x1a2, 0x607, 0xe0e, 0xfffffc00, 0x5, 0x5, 0x9, 0xfffffff7, 0x1, 0x5, 0x6, 0x1, 0x0, 0x40, 0x6, 0x4, 0x80000000, 0x1, 0x4, 0x3ff, 0x9dd, 0x2703, 0xfffffff4, 0x0, 0x7, 0x15b9, 0x1, 0x7bbe]}, @TCA_TBF_RTAB={0x404, 0x2, [0x9, 0x100, 0x2, 0xc91, 0x5, 0x400, 0x1000, 0x2, 0x5, 0x3ff, 0x2, 0x200, 0x7, 0x2, 0x6, 0xdb6, 0x401, 0x6, 0xf, 0x100, 0x3, 0xb, 0x5, 0x77dedf80, 0x100, 0x7, 0x2, 0x4, 0x1, 0x5, 0x5, 0x5, 0x4, 0x7, 0x6, 0x6, 0x4, 0x0, 0x0, 0x3, 0x5, 0x2, 0x10, 0x101, 0x8, 0xd6, 0x8, 0x800, 0x3, 0x4, 0x10001, 0x66a, 0x7, 0x7, 0x6c, 0xa6d, 0x4, 0x6, 0x3, 0x8, 0x2, 0x3d, 0x4, 0x80000000, 0xc, 0x2, 0x40, 0x7, 0x2, 0x542a73c, 0xffffffff, 0x2, 0x4, 0xb0, 0xe7, 0x8, 0x8001, 0x7, 0xb, 0x4, 0x3, 0x2, 0x6, 0x1, 0x5, 0x10001, 0x3, 0x4, 0xffffffff, 0x5, 0x4, 0x7, 0x5, 0x3, 0x8, 0x4, 0x0, 0x374, 0x2, 0x4, 0x7, 0x81, 0x8, 0x7f, 0x9, 0x0, 0x4, 0x6, 0x2, 0xa08d, 0x100, 0x5, 0xffff248d, 0x5, 0x7, 0xa, 0x0, 0x671, 0x3, 0x10000, 0x8c, 0x2e7, 0xd6, 0x79, 0x9, 0x9, 0xc, 0xccf, 0x2, 0xb, 0x5, 0x100, 0x158, 0x4, 0x2, 0x7, 0x1, 0x401, 0x6, 0x5, 0xfffffffb, 0xe, 0x6, 0x80000001, 0x2, 0x7, 0x5, 0xab7, 0x6f18f07b, 0x80000001, 0x0, 0x9, 0xc1, 0x5, 0x4, 0x8, 0x7, 0x3, 0x8, 0x3ff, 0x0, 0x9, 0x203a, 0x3, 0x0, 0x8, 0x2, 0x7, 0x7, 0x8, 0x0, 0x4, 0x7ff, 0x4, 0x9, 0x2, 0x5, 0x1008000, 0x200, 0x3, 0x1, 0xfffffff6, 0x0, 0x7b, 0xfd, 0x5b653309, 0xe5, 0x14f, 0x6, 0x10001, 0x1, 0x7, 0x2, 0xffffffff, 0x0, 0x40100, 0x197, 0x3ff, 0x9, 0x4, 0x200, 0xcbf, 0x1ff, 0x80, 0x2, 0x2f74, 0x4, 0x1, 0x9, 0x0, 0x8, 0x8, 0x8000, 0x5, 0x8, 0xf, 0x9, 0x6057, 0x101, 0x8001, 0xad, 0x4, 0x7, 0x7, 0x2, 0x80000001, 0x8c6b, 0xd87, 0x82, 0x100, 0x0, 0x80000000, 0x0, 0x9a, 0x9, 0xfc3, 0x89, 0xa, 0x80000001, 0x2, 0x1, 0xffffffff, 0x4, 0x8000, 0x2, 0x3, 0x10000, 0x8486, 0x3, 0x8, 0x6, 0x0, 0x1, 0x3, 0x2, 0x9]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 1.786910628s ago: executing program 2 (id=7752): r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg/2:0:0:0\x00', 0x68600, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x400000, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4, @loopback}, @in={0x2, 0x4000, @broadcast}}}, 0x118) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}}, 0x14}}, 0x4040) (async) r6 = fanotify_init(0x202, 0x0) (async) rt_sigprocmask(0x1, &(0x7f0000000480)={[0x5]}, &(0x7f00000004c0), 0x8) r7 = dup2(r6, r2) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) splice(r7, &(0x7f0000000180)=0xfea, r1, &(0x7f00000002c0)=0x380000000000000, 0x8, 0x8) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) (rerun: 32) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x2000002, 0xe, 0xfffffffffffffda9, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) read$FUSE(r7, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0x9, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x1, @remote, 0xf1d9}]}, &(0x7f0000000000)=0x10) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) (async) sendto$inet6(r10, &(0x7f0000000080)="b0", 0x1, 0x800, &(0x7f0000000140)={0xa, 0x4e23, 0x800, @mcast2, 0xffffffff}, 0x1c) (async) ioctl$sock_TIOCINQ(r10, 0x541b, &(0x7f0000000040)) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) 1.685869332s ago: executing program 2 (id=7753): r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r1 = creat(&(0x7f0000000580)='./bus\x00', 0x0) r2 = fanotify_init(0xf00, 0x2) fanotify_mark(r2, 0x105, 0x8971, r1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000000c0)=0x6) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000040)=0x6, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0xfffffffd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)={0x88, 0x0, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xd70}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}]}, @NFACCT_FILTER={0x4}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9b}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) 1.601519184s ago: executing program 2 (id=7755): socketpair(0x1, 0x1, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x4200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x200200, 0x0) syz_clone3(&(0x7f00000008c0)={0x2000, &(0x7f00000001c0), &(0x7f0000000200)=0x0, &(0x7f0000000280), {0x2c}, &(0x7f0000000680)=""/206, 0xce, &(0x7f0000000780)=""/233, &(0x7f0000000880)=[0x0, 0x0, 0xffffffffffffffff, 0x0], 0x4}, 0x58) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000940)={0x0, 0x0}, &(0x7f0000000980)=0xc) ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0286405, &(0x7f00000009c0)={0x5, 0xe, {r6}, {r7}, 0x3ff, 0x1}) close(r4) r8 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r8, 0x894b, &(0x7f00000002c0)) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r9, {0x8, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x24040000) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r9, {0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x80}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x86, 0x2}, {0x5, 0x7}}}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x2}, {{0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20045080}, 0x140c0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r3, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) 1.394112152s ago: executing program 9 (id=7756): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000040)=""/47) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x12, 0xb, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x114, 0x0, 0x400, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x77, 0x5b, "28788841cca08cbe86ac2a980d70c8a1315fbe40efc06cd2f625f6805785c8ff1ba2bfa0825c627d560059245b3bdb4632fceac11a2cd6447ee0bbcdedd1e40f03124c793f9009ac7c3acf7050d9e808b76f5ef132dbfd652291e079139e57283d2c8ee075f1dc6445d04dcf6a46f21397a75d"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xe}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xb}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x2}, @NL80211_ATTR_FRAME_MATCH={0x5e, 0x5b, "6f35969a168ef2fc25b9534fbf8bc836b8de994dd33314c641d4828d3f109aa198818da6cf17a84e78088531fc679afe100c4a884e390dec3a88114149fdbb8576e28e5679b41af85ce25c18b470782e3c36a1b1d23510759389"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}]}, 0x114}, 0x1, 0x0, 0x0, 0x52000000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) io_uring_enter(r6, 0x2219, 0x34d3, 0x16, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x80) 1.223351581s ago: executing program 9 (id=7758): mkdir(&(0x7f0000000040)='./file0\x00', 0x100) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) readlink(&(0x7f0000002000)='./file0/file3\x00', &(0x7f00000021c0)=""/151, 0x97) syz_fuse_handle_req(r0, &(0x7f0000009680)="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", 0x2000, &(0x7f0000002540)={&(0x7f00000022c0)={0x50, 0x0, 0x53c1, {0x7, 0x2b, 0x3ff, 0x500c080, 0x3, 0x7, 0x69, 0x2005, 0x0, 0x0, 0x80, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000006e80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r0, &(0x7f0000006400)={0x10, 0xfffffffffffffffe, r1}, 0x10) utimes(&(0x7f0000000340)='./file0/file3\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="6d7008000000c25575da7c05b64f"]) 1.001918547s ago: executing program 5 (id=7759): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x336, '\x00', 0x0, 0x0}, 0x50) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2193, 0xd000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4040) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCL_GETSHIFTSTATE(r3, 0x541c, &(0x7f0000000080)={0x6, 0xf5}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0xffffffff}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0xfff0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0xd, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd11, 0x0, 0x0, 0x0}, 0x94) 1.001590819s ago: executing program 2 (id=7760): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee01, 0x0) keyctl$setperm(0x5, r0, 0x20925) keyctl$read(0xb, r0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x100, 0x81) statx(r2, &(0x7f0000003340)='./file0\x00', 0x0, 0x2, &(0x7f0000003380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r0, r1, r3) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_GET_PROPERTY(r4, 0x80106f53, &(0x7f0000000040)={0x20, &(0x7f0000001240)=[{0x1f, '\x00', @data=0xc, 0x7}, {0x6, '\x00', @buffer={"f8c042d7a8781c094069bb0ebdee0ef4186c06dcf1c52699f69880b0d7000004", 0x20}, 0x6}]}) 914.593783ms ago: executing program 5 (id=7761): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0xffffffff}]}}}]}, 0x3c}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') 914.368017ms ago: executing program 6 (id=7762): r0 = socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0xfef3, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x100004, "628e0960f6d6d3f6ee6d6b84b345dccac643e7df3e526ff07833b291322d4a74", "882ed6741e7632daeaec0c95f2ad1cd6", {"8fb3d9fd3efe8e4ea8b5ec7448ddd6a3", "215990e1b896120966af96b22cf049f0"}}}}}}}}, 0x0) (async) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="d80000001400810d4e81f782db44b9040a11080211000000040000a118000280fec9201114000e1208000f0100810401a80016ea1f000640c9201114c92011148ed08734843cb12b00000803600cfab9c14dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146bffa07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adb", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x40804) 823.097348ms ago: executing program 2 (id=7763): r0 = fsopen(&(0x7f0000000100)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='co\xc5\x88I$\xe8', &(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 675.772236ms ago: executing program 6 (id=7764): r0 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000007ac0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000240)="2a69c258ca", 0x34000}, {0x0}], 0x2}}, {{0x0, 0x47, &(0x7f0000000940)=[{&(0x7f0000000480)="7349b402ed", 0x5}, {0x0, 0x11}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x40) 675.385946ms ago: executing program 2 (id=7765): r0 = syz_clone(0x100000, &(0x7f0000000100)="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", 0xc00, 0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa7f0a000340f40800450000380000008000019078ac1e0001ac14000000006c00007f0000010000000000008abeffff00"/70], 0x0) (async) syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa7f0a000340f40800450000380000008000019078ac1e0001ac14000000006c00007f0000010000000000008abeffff00"/70], 0x0) process_vm_writev(r0, &(0x7f0000004180)=[{&(0x7f0000003cc0)=""/115, 0x73}], 0x1, &(0x7f0000004240)=[{&(0x7f0000004200)=""/12, 0xc}], 0x1, 0x0) (async) process_vm_writev(r0, &(0x7f0000004180)=[{&(0x7f0000003cc0)=""/115, 0x73}], 0x1, &(0x7f0000004240)=[{&(0x7f0000004200)=""/12, 0xc}], 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x40000070, 0x0, 0x2}]}) (async) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x40000070, 0x0, 0x2}]}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r7, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r8, 0x1, 0x1, &(0x7f0000000000)=0xfffffffd, 0x4) (async) setsockopt$sock_int(r8, 0x1, 0x1, &(0x7f0000000000)=0xfffffffd, 0x4) connect$inet(r8, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x17b, 0x0, 0x5}]}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}]}, 0x44}}, 0x0) 596.012431ms ago: executing program 5 (id=7766): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) (async) r1 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000001600)='/proc/timer_list\x00', 0x0, 0x0) (async) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000f40)=ANY=[@ANYBLOB="0500000000000000008000000700000014f7ffff0900000009000000af010000a2b90000010000001000000008000000020000008af7ffff0600000009000000f70900000080dd170000000000000000040000000f0000000800000000020000ff01000009000000ff0100004f09000001000000cbd9e573090000000000000009000000f7ffffff0004000005000000ffffff7f0f000000bf00000000010000000000000000010001800000ca00000000010000bbb9080f2e00000003000000080000000800000006000000b10000000700000007000000000000000001000004000000"]) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x190ec) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000800)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0500000000"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) (async) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) (async) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000100)="89", 0x1}], 0x1) r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000001040), 0x80, 0x0) read$FUSE(r7, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="b805000000b9357b00000f01c1f3400f1bc143de5a00263e410f287ab7c744240002000000c74424027d7e493ec7442406000000000f0114240f20d835080000000f22d867366766400fc770000f01d1440f00ddb9800000c00f3235000400000f30", 0x62}], 0x1, 0x42, &(0x7f0000000180)=[@cstype0={0x4, 0x9}], 0x1) 595.773092ms ago: executing program 6 (id=7767): r0 = syz_open_dev$vim2m(&(0x7f0000000240), 0x5, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000001c0)=@mmap={0x0, 0x1, 0x4, 0x20, 0x0, {0x77359400}, {0x4, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x291d}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$inet6(0x2d, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}, 0xffff}], 0x1, 0x40, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x0, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) 484.181739ms ago: executing program 5 (id=7768): r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x180) mkdirat(r0, &(0x7f0000000380)='./file0\x00', 0x1ef) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x503, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x15a11}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}]}, 0x30}}, 0x44) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x59}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x18000000000002a0, 0x160, 0x0, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x7ec, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0), 0x4000, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="4e776664010000801a83d3aed1605724ba5302736748794c450724af34cdc6ab48399a3fedf5aee95c889bbe1036b6b0fb3a66942914a63cf66a991a2044c53333c4e0ca75c8aca1b41a0857dd0e95c46af7e5f15da5a709462692b6540f6488eb58e0b5be3a16a6c3608bbabaa7f24cb2777ae8375986077f847a5d504b27dd8bbe", @ANYRESHEX=r4, @ANYBLOB=',version=9p2000,access=client,\x00']) 407.421528ms ago: executing program 5 (id=7769): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) readv(r1, &(0x7f0000001b80)=[{&(0x7f0000000740)=""/4096, 0x1000}], 0x1) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0x2000001, 0x80003, 0x41565559, 0x1, 0x8000, 0x3, 0x6, 0x10, 0x1, 0x7, 0x0, 0x1}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x64, 0x0, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$inet(0x2, 0x2, 0x7) 406.971134ms ago: executing program 6 (id=7770): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000004480), 0x200c00, 0x0) write$UHID_INPUT(r1, &(0x7f0000000080)={0x18, {"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", 0x5bb1f126059684ef}}, 0x1006) recvmmsg(r1, &(0x7f0000004840)=[{{&(0x7f0000000000)=@hci, 0x80, &(0x7f0000001340)=[{&(0x7f00000010c0)=""/209, 0xd1}, {&(0x7f00000011c0)=""/196, 0xc4}, {&(0x7f00000012c0)=""/7, 0x7}, {&(0x7f0000001300)=""/63, 0x3f}], 0x4, &(0x7f0000001380)=""/4096, 0x1000}, 0xc}, {{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000002380)=""/36, 0x24}], 0x1, &(0x7f0000002400)=""/48, 0x30}, 0xffff}, {{&(0x7f0000002440)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000002600)=[{&(0x7f00000024c0)=""/46, 0x2e}, {&(0x7f0000002500)=""/135, 0x87}, {&(0x7f00000025c0)=""/63, 0x3f}], 0x3, &(0x7f0000002640)=""/122, 0x7a}, 0x1}, {{&(0x7f00000026c0)=@hci, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002740)=""/210, 0xd2}, {&(0x7f0000002840)=""/208, 0xd0}, {&(0x7f0000002940)=""/61, 0x3d}, {&(0x7f0000002980)=""/249, 0xf9}, {&(0x7f0000002a80)=""/235, 0xeb}, {&(0x7f0000002b80)=""/64, 0x40}, {&(0x7f0000002bc0)=""/184, 0xb8}, {&(0x7f0000002c80)=""/103, 0x67}, {&(0x7f0000002d00)=""/152, 0x98}], 0x9, &(0x7f0000002e80)=""/235, 0xeb}, 0xffffffff}, {{&(0x7f0000002f80)=@caif=@dbg, 0x80, &(0x7f00000030c0)=[{&(0x7f0000003000)=""/173, 0xad}], 0x1, &(0x7f0000003100)=""/189, 0xbd}, 0x9}, {{0x0, 0x0, &(0x7f00000042c0)=[{&(0x7f00000031c0)=""/4096, 0x1000}, {&(0x7f00000041c0)=""/240, 0xf0}], 0x2, &(0x7f0000004300)=""/27, 0x1b}, 0xf1a}, {{&(0x7f0000004340)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000004740)=[{&(0x7f00000043c0)=""/7, 0x7}, {&(0x7f0000004400)=""/74, 0x4a}, {&(0x7f0000004480)}, {&(0x7f00000044c0)=""/9, 0x9}, {&(0x7f0000004500)=""/185, 0xb9}, {&(0x7f00000045c0)=""/93, 0x5d}, {&(0x7f0000004640)=""/119, 0x77}, {&(0x7f00000046c0)=""/113, 0x71}], 0x8, &(0x7f00000047c0)=""/108, 0x6c}, 0x3}], 0x7, 0x40000040, &(0x7f0000004a00)={0x77359400}) recvmsg$can_bcm(r2, &(0x7f0000004d40)={&(0x7f0000004a40)=@nl=@proc, 0x80, &(0x7f0000004cc0)=[{&(0x7f0000004ac0)=""/159, 0x9f}, {&(0x7f0000004b80)=""/46, 0x2e}, {&(0x7f0000004bc0)=""/6, 0x6}, {&(0x7f0000004c00)=""/133, 0x85}], 0x4, &(0x7f0000004d00)=""/57, 0x39}, 0x40000000) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) dup(r0) (async) openat$dsp(0xffffffffffffff9c, &(0x7f0000004480), 0x200c00, 0x0) (async) write$UHID_INPUT(r1, &(0x7f0000000080)={0x18, {"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", 0x5bb1f126059684ef}}, 0x1006) (async) recvmmsg(r1, &(0x7f0000004840)=[{{&(0x7f0000000000)=@hci, 0x80, &(0x7f0000001340)=[{&(0x7f00000010c0)=""/209, 0xd1}, {&(0x7f00000011c0)=""/196, 0xc4}, {&(0x7f00000012c0)=""/7, 0x7}, {&(0x7f0000001300)=""/63, 0x3f}], 0x4, &(0x7f0000001380)=""/4096, 0x1000}, 0xc}, {{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000002380)=""/36, 0x24}], 0x1, &(0x7f0000002400)=""/48, 0x30}, 0xffff}, {{&(0x7f0000002440)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000002600)=[{&(0x7f00000024c0)=""/46, 0x2e}, {&(0x7f0000002500)=""/135, 0x87}, {&(0x7f00000025c0)=""/63, 0x3f}], 0x3, &(0x7f0000002640)=""/122, 0x7a}, 0x1}, {{&(0x7f00000026c0)=@hci, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002740)=""/210, 0xd2}, {&(0x7f0000002840)=""/208, 0xd0}, {&(0x7f0000002940)=""/61, 0x3d}, {&(0x7f0000002980)=""/249, 0xf9}, {&(0x7f0000002a80)=""/235, 0xeb}, {&(0x7f0000002b80)=""/64, 0x40}, {&(0x7f0000002bc0)=""/184, 0xb8}, {&(0x7f0000002c80)=""/103, 0x67}, {&(0x7f0000002d00)=""/152, 0x98}], 0x9, &(0x7f0000002e80)=""/235, 0xeb}, 0xffffffff}, {{&(0x7f0000002f80)=@caif=@dbg, 0x80, &(0x7f00000030c0)=[{&(0x7f0000003000)=""/173, 0xad}], 0x1, &(0x7f0000003100)=""/189, 0xbd}, 0x9}, {{0x0, 0x0, &(0x7f00000042c0)=[{&(0x7f00000031c0)=""/4096, 0x1000}, {&(0x7f00000041c0)=""/240, 0xf0}], 0x2, &(0x7f0000004300)=""/27, 0x1b}, 0xf1a}, {{&(0x7f0000004340)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000004740)=[{&(0x7f00000043c0)=""/7, 0x7}, {&(0x7f0000004400)=""/74, 0x4a}, {&(0x7f0000004480)}, {&(0x7f00000044c0)=""/9, 0x9}, {&(0x7f0000004500)=""/185, 0xb9}, {&(0x7f00000045c0)=""/93, 0x5d}, {&(0x7f0000004640)=""/119, 0x77}, {&(0x7f00000046c0)=""/113, 0x71}], 0x8, &(0x7f00000047c0)=""/108, 0x6c}, 0x3}], 0x7, 0x40000040, &(0x7f0000004a00)={0x77359400}) (async) recvmsg$can_bcm(r2, &(0x7f0000004d40)={&(0x7f0000004a40)=@nl=@proc, 0x80, &(0x7f0000004cc0)=[{&(0x7f0000004ac0)=""/159, 0x9f}, {&(0x7f0000004b80)=""/46, 0x2e}, {&(0x7f0000004bc0)=""/6, 0x6}, {&(0x7f0000004c00)=""/133, 0x85}], 0x4, &(0x7f0000004d00)=""/57, 0x39}, 0x40000000) (async) 308.98441ms ago: executing program 6 (id=7771): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r3 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async, rerun: 64) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (rerun: 64) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast1, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x2000000000000, 0x40, 0xfffffffffffffffd, 0x50}, {0x5}, 0x6, 0x40000000, 0x0, 0x1, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) (async, rerun: 64) r7 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (rerun: 64) write$6lowpan_control(r7, &(0x7f0000000240)='connect aa:aa:aa:aa:aa:10 1', 0x1b) (async, rerun: 32) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000000)=0x200000000) (rerun: 32) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x224, 0x52000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x5}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x48}}, 0x8000) write$vhost_msg_v2(r6, &(0x7f00000006c0)={0x2, 0x0, {&(0x7f0000000080)=""/62, 0xfffffffffffffdac, 0x0, 0x3, 0x2}}, 0x48) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e"], 0xb8}}, 0x20004000) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000007c0)={r9, &(0x7f00000005c0)="326b28eb05639956026a71308f11f2c1d3afb48dfc59508323306ee8aeb52db2d9ae2f37b7e1b76747c784e09ea3784b5c1b606023e83e7860d045f34d48bf66c94aa42f46d4ba25e679206a77a226c9425f1ed3545b86b337745097b5df9b88854c990890d4bb3e869502212a52dbb66bcc755bdb7b3233d9ffe1bd7032328af9e18f88fa5d7bf5f43e9b03272e6508ee776ca9ef972014585e1c61515aac9dee9e581babedaf4d452b8b367649956e7dacd6dbf23b5cc5a8a0a29de011a62b97eb560e9e731dd1900afc47c57b54dbe9d13c4f429ccc0f0610b8c1daab8d09", &(0x7f0000000740)=""/3}, 0x20) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) (async) r11 = syz_open_dev$dri(&(0x7f0000000040), 0x100006, 0x0) ioctl$DRM_IOCTL_PANTHOR_VM_BIND(r11, 0xc0186443, &(0x7f0000000200)={0x0, 0x0, {0x30, 0x0, 0x0}}) (async) ppoll(&(0x7f0000000440)=[{r10}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x81, &(0x7f0000000200)={[{@nr_inodes={'nr_inodes', 0x3d, [0x65]}}]}) (async, rerun: 64) r12 = dup3(r10, r0, 0x0) (rerun: 64) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f00000003c0)={0x60, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x4, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}, @acquire_done={0x40106309, 0x3}], 0x0, 0x0, 0x0}) 167.546773ms ago: executing program 9 (id=7772): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064d1, &(0x7f0000000080)={0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x207601a}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$NS_GET_OWNER_UID(r3, 0xc0046686, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {}, [], {0x4, 0x4}, [], {}, {0x20, 0x5}}, 0x24, 0x2) rmdir(&(0x7f0000000000)='./file0\x00') socket$nl_crypto(0x10, 0x3, 0x15) 666.815µs ago: executing program 5 (id=7773): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000001000010429bd70000000000000000000", @ANYRESHEX, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r1, @ANYBLOB="080002"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) dup(r2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000000)={{0x0, 0x2, 0x400, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, &(0x7f00000000c0)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) syz_emit_ethernet(0x76, &(0x7f0000000080)=ANY=[@ANYBLOB="ef7fc200000086082b9827c186dd60cb3e0200403a00fc16e1b838a642b59f00000000000000ff02000000000000000000000000000104009078000000006097436700000200fe880000000000000000000000000001fe8000000000000000000000000000aa00010000000000000106000000000000"], 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r5}, 0x20) r6 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = getpgid(0x0) fcntl$setownex(r8, 0xf, &(0x7f0000000140)={0x2, r9}) sendmmsg$unix(r7, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="11", 0x1}], 0x1}}], 0x1, 0x20040001) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, r10, 0x25, 0x2, @void}, 0x10) io_setup(0x7d46, &(0x7f00000005c0)) io_setup(0xccee, &(0x7f0000001700)) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103100, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r13, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000108, 0x0, 0x400000003c}]}) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1086dd69000000001406fffe800000000000000000000000000039fe80"], 0x0) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) r14 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r14, 0xffffffffffffffff, 0x0) 0s ago: executing program 6 (id=7774): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x404, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000ec0)={0x3, 0x400400}, 0x0) getrlimit(0x6, &(0x7f0000000080)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0x6) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) (rerun: 64) kernel console output (not intermixed with test programs): 00000000010 [ 788.144040][T30083] RAX: ffffffffffffffda RBX: 00007f6c29415fa0 RCX: 00007f6c2919ce59 [ 788.144047][T30083] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 788.144053][T30083] RBP: 00007f6c29f8a090 R08: 0000000000000000 R09: 0000000000000000 [ 788.144059][T30083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 788.144066][T30083] R13: 00007f6c29416038 R14: 00007f6c29415fa0 R15: 00007fff0a899e68 [ 788.144080][T30083] [ 788.366389][T30090] fuse: Unknown parameter '0x0000000000000003' [ 788.874193][T30109] vxcan0: tx address claim with dest, not broadcast [ 789.333984][T30116] veth1_macvtap: left promiscuous mode [ 789.337998][T30116] macsec0: entered promiscuous mode [ 789.345858][T30116] veth1_macvtap: entered promiscuous mode [ 789.350067][T30116] macsec0: left promiscuous mode [ 789.364892][T30117] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7322'. [ 789.370812][T30116] netlink: 'syz.9.7321': attribute type 3 has an invalid length. [ 789.657739][ T5833] usb 7-1: USB disconnect, device number 42 [ 789.707458][T30132] FAULT_INJECTION: forcing a failure. [ 789.707458][T30132] name failslab, interval 1, probability 0, space 0, times 0 [ 789.751722][T30132] CPU: 3 UID: 0 PID: 30132 Comm: syz.5.7326 Tainted: G L syzkaller #0 PREEMPT(full) [ 789.751752][T30132] Tainted: [L]=SOFTLOCKUP [ 789.751759][T30132] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 789.751769][T30132] Call Trace: [ 789.751776][T30132] [ 789.751783][T30132] dump_stack_lvl+0x100/0x190 [ 789.751813][T30132] should_fail_ex.cold+0x5/0xa [ 789.751834][T30132] ? tomoyo_encode2+0xfb/0x3c0 [ 789.751858][T30132] should_failslab+0xc2/0x120 [ 789.751879][T30132] __kmalloc_noprof+0xe0/0x850 [ 789.751904][T30132] ? d_absolute_path+0x136/0x1b0 [ 789.751992][T30132] tomoyo_encode2+0xfb/0x3c0 [ 789.752020][T30132] tomoyo_encode+0x29/0x50 [ 789.752039][T30132] tomoyo_realpath_from_path+0x18c/0x690 [ 789.752069][T30132] tomoyo_path_number_perm+0x23c/0x580 [ 789.752089][T30132] ? tomoyo_path_number_perm+0x22e/0x580 [ 789.752112][T30132] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 789.752127][T30132] ? selinux_inode_permission+0x14a/0x1130 [ 789.752153][T30132] ? look_up_lock_class+0x64/0x120 [ 789.752199][T30132] ? from_kuid+0x8d/0xd0 [ 789.752217][T30132] ? __pfx_from_kuid+0x10/0x10 [ 789.752242][T30132] tomoyo_path_chown+0x173/0x1b0 [ 789.752259][T30132] ? __pfx_tomoyo_path_chown+0x10/0x10 [ 789.752276][T30132] ? from_vfsuid+0xea/0x140 [ 789.752293][T30132] ? __pfx_from_vfsuid+0x10/0x10 [ 789.752314][T30132] security_path_chown+0x12a/0x2d0 [ 789.752337][T30132] chown_common+0x3da/0x6e0 [ 789.752388][T30132] ? __pfx_chown_common+0x10/0x10 [ 789.752412][T30132] ? mnt_get_write_access+0x52/0x2f0 [ 789.752435][T30132] ? mnt_get_write_access+0x1e9/0x2f0 [ 789.752457][T30132] do_fchownat+0x18e/0x1f0 [ 789.752478][T30132] ? __pfx_do_fchownat+0x10/0x10 [ 789.752495][T30132] ? ksys_write+0x1ac/0x250 [ 789.752514][T30132] ? __pfx_ksys_write+0x10/0x10 [ 789.752537][T30132] __x64_sys_lchown+0x7e/0xc0 [ 789.752559][T30132] ? lockdep_hardirqs_on+0x78/0x100 [ 789.752580][T30132] do_syscall_64+0x10b/0x860 [ 789.752602][T30132] ? clear_bhb_loop+0x40/0x90 [ 789.752623][T30132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.752640][T30132] RIP: 0033:0x7fcc2f99ce59 [ 789.752655][T30132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 789.752669][T30132] RSP: 002b:00007fcc30789028 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 789.752682][T30132] RAX: ffffffffffffffda RBX: 00007fcc2fc16090 RCX: 00007fcc2f99ce59 [ 789.752694][T30132] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 789.752704][T30132] RBP: 00007fcc30789090 R08: 0000000000000000 R09: 0000000000000000 [ 789.752714][T30132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 789.752724][T30132] R13: 00007fcc2fc16128 R14: 00007fcc2fc16090 R15: 00007fff64073aa8 [ 789.752747][T30132] [ 789.757589][T30132] ERROR: Out of memory at tomoyo_realpath_from_path. [ 789.943870][T30138] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 789.952404][T30138] FAULT_INJECTION: forcing a failure. [ 789.952404][T30138] name failslab, interval 1, probability 0, space 0, times 0 [ 789.956497][T30138] CPU: 0 UID: 0 PID: 30138 Comm: syz.9.7329 Tainted: G L syzkaller #0 PREEMPT(full) [ 789.956515][T30138] Tainted: [L]=SOFTLOCKUP [ 789.956520][T30138] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 789.956527][T30138] Call Trace: [ 789.956533][T30138] [ 789.956537][T30138] dump_stack_lvl+0x100/0x190 [ 789.956558][T30138] should_fail_ex.cold+0x5/0xa [ 789.956575][T30138] should_failslab+0xc2/0x120 [ 789.956593][T30138] __kmalloc_node_noprof+0xe6/0x850 [ 789.956611][T30138] ? __vmalloc_node_range_noprof+0x409/0x1630 [ 789.956629][T30138] __vmalloc_node_range_noprof+0x409/0x1630 [ 789.956644][T30138] ? rcu_is_watching+0x12/0xc0 [ 789.956665][T30138] ? vhost_task_create+0x1db/0x370 [ 789.956685][T30138] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 789.956703][T30138] ? rcu_is_watching+0x12/0xc0 [ 789.956719][T30138] ? trace_kmem_cache_alloc+0xd5/0x100 [ 789.956733][T30138] ? vhost_task_create+0x1db/0x370 [ 789.956748][T30138] __vmalloc_node_noprof+0xad/0xf0 [ 789.956761][T30138] ? vhost_task_create+0x1db/0x370 [ 789.956778][T30138] copy_process+0x7fb/0x7ed0 [ 789.956796][T30138] ? __pfx_copy_process+0x10/0x10 [ 789.956808][T30138] ? lockdep_init_map_type+0x5c/0x250 [ 789.956824][T30138] ? lockdep_init_map_type+0x5c/0x250 [ 789.956843][T30138] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 789.956865][T30138] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 789.956895][T30138] vhost_task_create+0x1db/0x370 [ 789.956920][T30138] ? __pfx_vhost_task_create+0x10/0x10 [ 789.956940][T30138] ? register_lock_class+0x40/0x560 [ 789.956958][T30138] ? __pfx_vhost_task_fn+0x10/0x10 [ 789.956974][T30138] ? __pfx___mutex_lock+0x10/0x10 [ 789.956985][T30138] ? kasan_quarantine_put+0x104/0x240 [ 789.957007][T30138] kvm_mmu_post_init_vm+0x1b3/0x370 [ 789.957024][T30138] kvm_arch_vcpu_ioctl_run+0x66/0x1890 [ 789.957041][T30138] ? kvm_vcpu_ioctl+0x1546/0x1720 [ 789.957056][T30138] kvm_vcpu_ioctl+0x730/0x1720 [ 789.957070][T30138] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 789.957084][T30138] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 789.957100][T30138] ? do_vfs_ioctl+0x226/0x13e0 [ 789.957113][T30138] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 789.957125][T30138] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 789.957146][T30138] ? __fget_files+0x215/0x3d0 [ 789.957160][T30138] ? hook_file_ioctl_common+0x149/0x410 [ 789.957175][T30138] ? selinux_file_ioctl+0x13b/0x290 [ 789.957189][T30138] ? selinux_file_ioctl+0xb6/0x290 [ 789.957205][T30138] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 789.957217][T30138] __x64_sys_ioctl+0x18e/0x210 [ 789.957230][T30138] do_syscall_64+0x10b/0x860 [ 789.957246][T30138] ? clear_bhb_loop+0x40/0x90 [ 789.957260][T30138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.957271][T30138] RIP: 0033:0x7f34ef59ce59 [ 789.957281][T30138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 789.957291][T30138] RSP: 002b:00007f34f0421028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 789.957303][T30138] RAX: ffffffffffffffda RBX: 00007f34ef815fa0 RCX: 00007f34ef59ce59 [ 789.957310][T30138] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 789.957317][T30138] RBP: 00007f34f0421090 R08: 0000000000000000 R09: 0000000000000000 [ 789.957323][T30138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 789.957329][T30138] R13: 00007f34ef816038 R14: 00007f34ef815fa0 R15: 00007ffdc26b86a8 [ 789.957344][T30138] [ 790.003542][T30142] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 790.017803][ T40] kauditd_printk_skb: 1502 callbacks suppressed [ 790.017820][ T40] audit: type=1400 audit(2000001218.709:140324): avc: denied { recv } for pid=5720 comm="sshd-session" saddr=10.0.2.2 src=43090 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 790.030475][T30142] @0Ùc)Ñi“Bˆýx: renamed from bond_slave_1 (while UP) [ 790.030704][ T40] audit: type=1400 audit(2000001218.709:140325): avc: denied { recv } for pid=5720 comm="sshd-session" saddr=10.0.2.2 src=43090 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 790.108867][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 790.108883][ C1] audit: audit_lost=962 audit_rate_limit=0 audit_backlog_limit=64 [ 790.108892][ C1] audit: backlog limit exceeded [ 790.110044][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 790.110053][ C1] audit: audit_lost=963 audit_rate_limit=0 audit_backlog_limit=64 [ 790.110060][ C1] audit: backlog limit exceeded [ 790.111375][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 790.111384][ C1] audit: audit_lost=964 audit_rate_limit=0 audit_backlog_limit=64 [ 791.024774][ T5833] IPVS: starting estimator thread 0... [ 791.125867][T30175] IPVS: using max 45 ests per chain, 108000 per kthread [ 791.130244][T30177] FAULT_INJECTION: forcing a failure. [ 791.130244][T30177] name failslab, interval 1, probability 0, space 0, times 0 [ 791.137044][T30177] CPU: 1 UID: 0 PID: 30177 Comm: syz.6.7342 Tainted: G L syzkaller #0 PREEMPT(full) [ 791.137071][T30177] Tainted: [L]=SOFTLOCKUP [ 791.137078][T30177] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 791.137089][T30177] Call Trace: [ 791.137096][T30177] [ 791.137104][T30177] dump_stack_lvl+0x100/0x190 [ 791.137131][T30177] should_fail_ex.cold+0x5/0xa [ 791.137156][T30177] ? tomoyo_realpath_from_path+0xb6/0x690 [ 791.137182][T30177] should_failslab+0xc2/0x120 [ 791.137202][T30177] __kmalloc_noprof+0xe0/0x850 [ 791.137226][T30177] ? kfree+0x1dd/0x6c0 [ 791.137252][T30177] tomoyo_realpath_from_path+0xb6/0x690 [ 791.137282][T30177] tomoyo_path_number_perm+0x23c/0x580 [ 791.137303][T30177] ? tomoyo_path_number_perm+0x22e/0x580 [ 791.137330][T30177] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 791.137350][T30177] ? selinux_inode_permission+0x14a/0x1130 [ 791.137377][T30177] ? look_up_lock_class+0x55/0x120 [ 791.137423][T30177] ? from_kgid+0x8f/0xd0 [ 791.137444][T30177] ? __pfx_from_kgid+0x10/0x10 [ 791.137469][T30177] tomoyo_path_chown+0x14b/0x1b0 [ 791.137486][T30177] ? __pfx_tomoyo_path_chown+0x10/0x10 [ 791.137504][T30177] ? from_vfsuid+0xea/0x140 [ 791.137523][T30177] ? __pfx_from_vfsuid+0x10/0x10 [ 791.137544][T30177] security_path_chown+0x12a/0x2d0 [ 791.137568][T30177] chown_common+0x3da/0x6e0 [ 791.137597][T30177] ? __pfx_chown_common+0x10/0x10 [ 791.137621][T30177] ? mnt_get_write_access+0x52/0x2f0 [ 791.137645][T30177] ? mnt_get_write_access+0x1e9/0x2f0 [ 791.137666][T30177] do_fchownat+0x18e/0x1f0 [ 791.137690][T30177] ? __pfx_do_fchownat+0x10/0x10 [ 791.137711][T30177] ? ksys_write+0x1ac/0x250 [ 791.137729][T30177] ? __pfx_ksys_write+0x10/0x10 [ 791.137752][T30177] __x64_sys_lchown+0x7e/0xc0 [ 791.137774][T30177] ? lockdep_hardirqs_on+0x78/0x100 [ 791.137798][T30177] do_syscall_64+0x10b/0x860 [ 791.137821][T30177] ? clear_bhb_loop+0x40/0x90 [ 791.137842][T30177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.137859][T30177] RIP: 0033:0x7f6c2919ce59 [ 791.137874][T30177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 791.137890][T30177] RSP: 002b:00007f6c29f8a028 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 791.137907][T30177] RAX: ffffffffffffffda RBX: 00007f6c29415fa0 RCX: 00007f6c2919ce59 [ 791.137917][T30177] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 791.137927][T30177] RBP: 00007f6c29f8a090 R08: 0000000000000000 R09: 0000000000000000 [ 791.137937][T30177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 791.137946][T30177] R13: 00007f6c29416038 R14: 00007f6c29415fa0 R15: 00007fff0a899e68 [ 791.137984][T30177] [ 791.140618][T30177] ERROR: Out of memory at tomoyo_realpath_from_path. [ 791.538152][T19141] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 791.548298][T19141] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 791.558423][T19141] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 791.570273][T19141] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 791.574082][T19141] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 791.860189][ T46] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 791.882156][ T46] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.128140][ T46] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 792.131482][ T46] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.202749][T30226] netlink: 'syz.9.7355': attribute type 1 has an invalid length. [ 792.274240][T30226] veth3: entered promiscuous mode [ 792.358950][T30229] 8021q: VLANs not supported on ipvlan0 [ 792.423512][ T46] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 792.426816][ T46] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.548657][T30244] FAULT_INJECTION: forcing a failure. [ 792.548657][T30244] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 792.555208][T30244] CPU: 3 UID: 0 PID: 30244 Comm: syz.2.7360 Tainted: G L syzkaller #0 PREEMPT(full) [ 792.555235][T30244] Tainted: [L]=SOFTLOCKUP [ 792.555241][T30244] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 792.555252][T30244] Call Trace: [ 792.555259][T30244] [ 792.555265][T30244] dump_stack_lvl+0x100/0x190 [ 792.555417][T30244] should_fail_ex.cold+0x5/0xa [ 792.555469][T30244] _copy_to_user+0x32/0xd0 [ 792.555521][T30244] simple_read_from_buffer+0xcb/0x170 [ 792.555566][T30244] proc_fail_nth_read+0x1af/0x230 [ 792.555644][T30244] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 792.555666][T30244] ? rw_verify_area+0xce/0x6d0 [ 792.555686][T30244] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 792.555707][T30244] vfs_read+0x1e4/0xb30 [ 792.555732][T30244] ? __pfx_vfs_read+0x10/0x10 [ 792.555752][T30244] ? __fget_files+0x215/0x3d0 [ 792.555783][T30244] ? __fget_files+0x21f/0x3d0 [ 792.555815][T30244] ksys_read+0x12a/0x250 [ 792.555836][T30244] ? __pfx_ksys_read+0x10/0x10 [ 792.555859][T30244] ? rcu_is_watching+0x12/0xc0 [ 792.555911][T30244] do_syscall_64+0x10b/0x860 [ 792.556012][T30244] ? clear_bhb_loop+0x40/0x90 [ 792.556037][T30244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.556057][T30244] RIP: 0033:0x7f5a3115d68e [ 792.556074][T30244] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 792.556092][T30244] RSP: 002b:00007f5a31f88fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 792.556111][T30244] RAX: ffffffffffffffda RBX: 00007f5a31f896c0 RCX: 00007f5a3115d68e [ 792.556124][T30244] RDX: 000000000000000f RSI: 00007f5a31f890a0 RDI: 0000000000000003 [ 792.556136][T30244] RBP: 00007f5a31f89090 R08: 0000000000000000 R09: 0000000000000000 [ 792.556147][T30244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 792.556158][T30244] R13: 00007f5a31416038 R14: 00007f5a31415fa0 R15: 00007ffefc2a40a8 [ 792.556184][T30244] [ 792.720573][ T46] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 792.724816][ T46] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.766153][T30197] lo speed is unknown, defaulting to 1000 [ 792.959181][T30258] tmpfs: Bad value for 'mpol' [ 793.047794][ T46] lo: left allmulticast mode [ 793.050081][ T46] pimreg: left allmulticast mode [ 793.143583][ T46] team0: Port device ip6gre1 removed [ 793.211152][T21700] usb 14-1: new high-speed USB device number 25 using dummy_hcd [ 793.225874][ T46] bridge0 (unregistering): left promiscuous mode [ 793.351899][T30265] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7367'. [ 793.381786][T21700] usb 14-1: Using ep0 maxpacket: 32 [ 793.385445][T21700] usb 14-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 793.389369][T21700] usb 14-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 793.393831][T21700] usb 14-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 793.398573][T21700] usb 14-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 793.415090][T21700] usb 14-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.6a [ 793.418738][T21700] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.421944][T21700] usb 14-1: Product: syz [ 793.423522][T21700] usb 14-1: Manufacturer: syz [ 793.425456][T21700] usb 14-1: SerialNumber: syz [ 793.439729][ C3] imon 14-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 793.443789][T21700] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:155.0/input/input62 [ 793.651104][T21700] imon 14-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 793.653765][T21700] (id 0x00) [ 793.711006][T21700] rc_core: IR keymap rc-imon-pad not found [ 793.714438][T21700] Registered IR keymap rc-empty [ 793.716601][T21700] imon 14-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 793.720708][T21700] imon 14-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 793.724936][T19109] Bluetooth: hci1: command tx timeout [ 793.744902][ T46] bond0 (unregistering): Released all slaves [ 793.750278][ T46] bond1 (unregistering): Released all slaves [ 793.752813][T21700] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:155.0/rc/rc0 [ 793.758146][ T46] bond2 (unregistering): Released all slaves [ 793.758779][T21700] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:155.0/rc/rc0/input63 [ 793.768565][ T46] bond3 (unregistering): Released all slaves [ 793.776904][T21700] imon 14-1:155.0: iMON device (15c2:ffdc, intf0) on usb<14:25> initialized [ 793.779145][ T46] bond4 (unregistering): Released all slaves [ 794.014153][T30257] imon:send_packet: packet tx failed (-71) [ 794.016954][T21699] usb 14-1: USB disconnect, device number 25 [ 794.031381][T30257] imon:vfd_write: send packet #0 failed [ 794.108013][ T46] tipc: Left network mode [ 794.689711][T21699] IPVS: starting estimator thread 0... [ 794.753183][ T5446] 8021q: adding VLAN 0 to HW filter on device eth2 [ 794.804117][T30286] IPVS: using max 44 ests per chain, 105600 per kthread [ 794.910654][T30197] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.913385][T30197] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.915684][T30197] bridge_slave_0: entered allmulticast mode [ 794.938989][T30197] bridge_slave_0: entered promiscuous mode [ 794.949921][T30197] bridge0: port 2(bridge_slave_1) entered blocking state [ 794.964274][T30197] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.966748][T30197] bridge_slave_1: entered allmulticast mode [ 794.969581][T30197] bridge_slave_1: entered promiscuous mode [ 795.021165][ T40] kauditd_printk_skb: 2202 callbacks suppressed [ 795.021179][ T40] audit: type=1400 audit(2000001223.759:141648): avc: denied { write } for pid=30299 comm="syz.9.7372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 795.042397][ T40] audit: type=1400 audit(2000001223.759:141649): avc: denied { write } for pid=30299 comm="syz.9.7372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 795.058936][T30304] audit: audit_backlog=65 > audit_backlog_limit=64 [ 795.059464][T30301] audit: audit_backlog=65 > audit_backlog_limit=64 [ 795.062517][T30305] audit: audit_backlog=65 > audit_backlog_limit=64 [ 795.063881][T30301] audit: audit_lost=1258 audit_rate_limit=0 audit_backlog_limit=64 [ 795.065695][ T40] audit: type=1400 audit(2000001223.759:141650): avc: denied { write } for pid=30299 comm="syz.9.7372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 795.067498][T30305] audit: audit_lost=1259 audit_rate_limit=0 audit_backlog_limit=64 [ 795.067511][T30305] audit: backlog limit exceeded [ 795.067753][T30301] audit: backlog limit exceeded [ 795.099566][T30197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 795.118242][T30197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 795.176672][T30305] kvm: kvm [30299]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 795.199892][T30305] kvm: kvm [30299]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 795.248015][ T46] veth0_to_team: left promiscuous mode [ 795.275517][ T46] hsr_slave_0: left promiscuous mode [ 795.280272][ T46] hsr_slave_1: left promiscuous mode [ 795.291653][ T46] batman_adv: batadv0: Interface deactivated: ipvlan0 [ 795.296234][ T46] batman_adv: batadv0: Removing interface: ipvlan0 [ 795.600783][T30320] tipc: Can't bind to reserved service type 2 [ 795.812837][T19109] Bluetooth: hci1: command tx timeout [ 795.866153][T30330] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7380'. [ 795.881957][T30197] team0: Port device team_slave_0 added [ 795.887822][T30311] netlink: 'syz.2.7375': attribute type 1 has an invalid length. [ 795.895813][T30311] netlink: 'syz.2.7375': attribute type 2 has an invalid length. [ 795.905554][T30197] team0: Port device team_slave_1 added [ 796.008476][T30197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 796.010754][T30197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 796.021440][T30197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 796.030383][T30197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 796.034614][T30197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 796.052512][T30197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 796.121695][T30197] hsr_slave_0: entered promiscuous mode [ 796.128721][T30197] hsr_slave_1: entered promiscuous mode [ 796.144424][T30197] debugfs: 'hsr0' already exists in 'hsr' [ 796.148537][T30197] Cannot create hsr debugfs directory [ 796.208997][T30345] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 796.310958][ T2325] usb 14-1: new full-speed USB device number 26 using dummy_hcd [ 796.409674][T30349] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=1958477870 (3916955740 ns) > initial count (2199611658 ns). Using initial count to start timer. [ 796.452794][ T2325] usb 14-1: device descriptor read/64, error -71 [ 796.493831][ T46] IPVS: stop unused estimator thread 0... [ 796.589249][T30357] /dev/sg0: Can't lookup blockdev [ 796.721017][ T2325] usb 14-1: new full-speed USB device number 27 using dummy_hcd [ 796.851737][ T2325] usb 14-1: device descriptor read/64, error -71 [ 796.974475][ T2325] usb usb14-port1: attempt power cycle [ 797.027886][T30197] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 797.036090][T30197] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 797.040093][T30197] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 797.044454][T30197] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 797.048914][T30197] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 797.054804][T30197] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 797.058745][T30197] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 797.071528][T30197] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 797.108545][T30380] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=30380 comm=syz.5.7391 [ 797.201749][T30197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 797.229570][T30197] 8021q: adding VLAN 0 to HW filter on device team0 [ 797.239692][T15552] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.242255][T15552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 797.276605][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.278922][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 797.306697][T30386] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 797.331029][ T2325] usb 14-1: new full-speed USB device number 28 using dummy_hcd [ 797.354518][ T2325] usb 14-1: device descriptor read/8, error -71 [ 797.604085][ T2325] usb 14-1: new full-speed USB device number 29 using dummy_hcd [ 797.625680][ T2325] usb 14-1: device descriptor read/8, error -71 [ 797.642459][T30397] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 797.662723][T30397] FAULT_INJECTION: forcing a failure. [ 797.662723][T30397] name failslab, interval 1, probability 0, space 0, times 0 [ 797.673753][T30397] CPU: 0 UID: 0 PID: 30397 Comm: syz.2.7395 Tainted: G L syzkaller #0 PREEMPT(full) [ 797.673795][T30397] Tainted: [L]=SOFTLOCKUP [ 797.673802][T30397] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 797.673812][T30397] Call Trace: [ 797.673819][T30397] [ 797.673827][T30397] dump_stack_lvl+0x100/0x190 [ 797.673961][T30397] should_fail_ex.cold+0x5/0xa [ 797.674010][T30397] should_failslab+0xc2/0x120 [ 797.674053][T30397] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 797.674082][T30397] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 797.674111][T30397] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 797.674140][T30397] mmu_topup_memory_caches+0x25/0x170 [ 797.674169][T30397] kvm_mmu_load+0xd6/0x23e0 [ 797.674194][T30397] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 797.674213][T30397] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 797.674236][T30397] ? vmx_get_rflags+0x104/0x440 [ 797.674254][T30397] ? kvm_apic_accept_pic_intr+0xdf/0x1b0 [ 797.674272][T30397] ? __pfx_kvm_mmu_load+0x10/0x10 [ 797.674296][T30397] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 797.674318][T30397] ? kvm_check_and_inject_events+0x961/0x1070 [ 797.674345][T30397] ? record_steal_time+0x420/0xbc0 [ 797.674368][T30397] vcpu_run+0x39f4/0x5ca0 [ 797.674403][T30397] ? __pfx_vcpu_run+0x10/0x10 [ 797.674438][T30397] ? rcu_is_watching+0x12/0xc0 [ 797.674490][T30397] ? kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 797.674517][T30397] kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 797.674551][T30397] kvm_vcpu_ioctl+0x730/0x1720 [ 797.674574][T30397] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 797.674595][T30397] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 797.674621][T30397] ? do_vfs_ioctl+0x226/0x13e0 [ 797.674643][T30397] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 797.674663][T30397] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 797.674721][T30397] ? __fget_files+0x215/0x3d0 [ 797.674744][T30397] ? hook_file_ioctl_common+0x149/0x410 [ 797.674769][T30397] ? selinux_file_ioctl+0x13b/0x290 [ 797.674794][T30397] ? selinux_file_ioctl+0xb6/0x290 [ 797.674821][T30397] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 797.674843][T30397] __x64_sys_ioctl+0x18e/0x210 [ 797.674864][T30397] do_syscall_64+0x10b/0x860 [ 797.674969][T30397] ? clear_bhb_loop+0x40/0x90 [ 797.674992][T30397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.675011][T30397] RIP: 0033:0x7f5a3119ce59 [ 797.675028][T30397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 797.675046][T30397] RSP: 002b:00007f5a31f89028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 797.675065][T30397] RAX: ffffffffffffffda RBX: 00007f5a31415fa0 RCX: 00007f5a3119ce59 [ 797.675078][T30397] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 797.675088][T30397] RBP: 00007f5a31f89090 R08: 0000000000000000 R09: 0000000000000000 [ 797.675100][T30397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 797.675110][T30397] R13: 00007f5a31416038 R14: 00007f5a31415fa0 R15: 00007ffefc2a40a8 [ 797.675136][T30397] [ 797.732878][ T2325] usb usb14-port1: unable to enumerate USB device [ 797.840048][T19109] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 797.891351][T19109] Bluetooth: hci1: command tx timeout [ 798.143759][T30413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7398'. [ 798.378659][T30197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 798.856343][T30197] veth0_vlan: entered promiscuous mode [ 798.885398][T30197] veth1_vlan: entered promiscuous mode [ 798.929721][T30446] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 798.937145][T30446] FAULT_INJECTION: forcing a failure. [ 798.937145][T30446] name failslab, interval 1, probability 0, space 0, times 0 [ 798.941721][T30446] CPU: 2 UID: 0 PID: 30446 Comm: syz.5.7404 Tainted: G L syzkaller #0 PREEMPT(full) [ 798.941740][T30446] Tainted: [L]=SOFTLOCKUP [ 798.941744][T30446] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 798.941751][T30446] Call Trace: [ 798.941755][T30446] [ 798.941760][T30446] dump_stack_lvl+0x100/0x190 [ 798.941780][T30446] should_fail_ex.cold+0x5/0xa [ 798.941797][T30446] should_failslab+0xc2/0x120 [ 798.941810][T30446] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 798.941832][T30446] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 798.941863][T30446] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 798.941880][T30446] mmu_topup_memory_caches+0x25/0x170 [ 798.941897][T30446] kvm_mmu_load+0xd6/0x23e0 [ 798.941912][T30446] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 798.941923][T30446] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 798.941935][T30446] ? kvm_apic_accept_pic_intr+0xdf/0x1b0 [ 798.941946][T30446] ? __pfx_kvm_mmu_load+0x10/0x10 [ 798.941960][T30446] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 798.941973][T30446] ? kvm_check_and_inject_events+0x961/0x1070 [ 798.941989][T30446] ? record_steal_time+0x420/0xbc0 [ 798.942002][T30446] vcpu_run+0x39f4/0x5ca0 [ 798.942023][T30446] ? __pfx_vcpu_run+0x10/0x10 [ 798.942043][T30446] ? rcu_is_watching+0x12/0xc0 [ 798.942063][T30446] ? kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 798.942078][T30446] kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 798.942098][T30446] kvm_vcpu_ioctl+0x730/0x1720 [ 798.942111][T30446] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 798.942123][T30446] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 798.942139][T30446] ? do_vfs_ioctl+0x226/0x13e0 [ 798.942151][T30446] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 798.942163][T30446] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 798.942184][T30446] ? __fget_files+0x215/0x3d0 [ 798.942197][T30446] ? hook_file_ioctl_common+0x149/0x410 [ 798.942212][T30446] ? selinux_file_ioctl+0x13b/0x290 [ 798.942226][T30446] ? selinux_file_ioctl+0xb6/0x290 [ 798.942242][T30446] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 798.942254][T30446] __x64_sys_ioctl+0x18e/0x210 [ 798.942267][T30446] do_syscall_64+0x10b/0x860 [ 798.942284][T30446] ? clear_bhb_loop+0x40/0x90 [ 798.942298][T30446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.942310][T30446] RIP: 0033:0x7fcc2f99ce59 [ 798.942320][T30446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 798.942330][T30446] RSP: 002b:00007fcc307aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 798.942341][T30446] RAX: ffffffffffffffda RBX: 00007fcc2fc15fa0 RCX: 00007fcc2f99ce59 [ 798.942348][T30446] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 798.942354][T30446] RBP: 00007fcc307aa090 R08: 0000000000000000 R09: 0000000000000000 [ 798.942361][T30446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 798.942367][T30446] R13: 00007fcc2fc16038 R14: 00007fcc2fc15fa0 R15: 00007fff64073aa8 [ 798.942381][T30446] [ 798.948308][T30197] veth0_macvtap: entered promiscuous mode [ 799.062341][T30197] veth1_macvtap: entered promiscuous mode [ 799.087661][T30197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 799.123204][T30197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 799.132534][T15544] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.136653][T15544] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.166462][T30457] netlink: 596 bytes leftover after parsing attributes in process `syz.2.7407'. [ 799.175867][T30457] netlink: 596 bytes leftover after parsing attributes in process `syz.2.7407'. [ 799.185463][T15544] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.187755][T30454] netlink: 'syz.2.7407': attribute type 3 has an invalid length. [ 799.193050][T30457] netlink: 596 bytes leftover after parsing attributes in process `syz.2.7407'. [ 799.195626][T15544] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.200262][T30457] netlink: 596 bytes leftover after parsing attributes in process `syz.2.7407'. [ 799.222429][T30457] netlink: 596 bytes leftover after parsing attributes in process `syz.2.7407'. [ 799.244835][T30457] netlink: 596 bytes leftover after parsing attributes in process `syz.2.7407'. [ 799.261096][T30457] netlink: 596 bytes leftover after parsing attributes in process `syz.2.7407'. [ 799.266996][T30457] netlink: 596 bytes leftover after parsing attributes in process `syz.2.7407'. [ 799.445121][T15544] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 799.448534][T15544] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 799.478708][T30466] netlink: 'syz.2.7410': attribute type 39 has an invalid length. [ 799.517752][T15544] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 799.524531][T15544] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 799.759072][T30474] netlink: 'syz.2.7412': attribute type 5 has an invalid length. [ 799.779698][T30474] geneve2: entered promiscuous mode [ 799.781510][T30474] geneve2: entered allmulticast mode [ 799.785137][T15552] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 799.788033][T15552] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 799.791247][T15552] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 799.794335][T15552] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 799.976372][T19109] Bluetooth: hci1: command tx timeout [ 800.015299][T30485] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 800.040932][ T40] kauditd_printk_skb: 3889 callbacks suppressed [ 800.040945][ T40] audit: type=1400 audit(2000001228.769:145352): avc: denied { read } for pid=30487 comm="syz.2.7416" dev="nsfs" ino=4026533210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 800.061724][ T40] audit: type=1400 audit(2000001228.769:145353): avc: denied { read open } for pid=30487 comm="syz.2.7416" path="net:[4026533210]" dev="nsfs" ino=4026533210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 800.072949][ T40] audit: type=1400 audit(2000001228.769:145354): avc: denied { create } for pid=30487 comm="syz.2.7416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 800.085801][ T40] audit: type=1400 audit(2000001228.779:145355): avc: denied { create } for pid=30487 comm="syz.2.7416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 800.092253][ T40] audit: type=1400 audit(2000001228.779:145356): avc: denied { connect } for pid=30487 comm="syz.2.7416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 800.098378][ T40] audit: type=1400 audit(2000001228.789:145357): avc: denied { create } for pid=30487 comm="syz.2.7416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 800.105850][ T40] audit: type=1400 audit(2000001228.789:145358): avc: denied { write } for pid=30487 comm="syz.2.7416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 800.113171][ T40] audit: type=1400 audit(2000001228.789:145359): avc: denied { read } for pid=30487 comm="syz.2.7416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 800.118990][ T40] audit: type=1400 audit(2000001228.789:145360): avc: denied { read } for pid=30487 comm="syz.2.7416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 800.125561][ T40] audit: type=1400 audit(2000001228.789:145361): avc: denied { create } for pid=30487 comm="syz.2.7416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 800.727678][T30514] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 800.925424][T30520] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 800.936693][T30520] FAULT_INJECTION: forcing a failure. [ 800.936693][T30520] name failslab, interval 1, probability 0, space 0, times 0 [ 800.949119][T30520] CPU: 0 UID: 0 PID: 30520 Comm: syz.9.7430 Tainted: G L syzkaller #0 PREEMPT(full) [ 800.949138][T30520] Tainted: [L]=SOFTLOCKUP [ 800.949142][T30520] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 800.949148][T30520] Call Trace: [ 800.949153][T30520] [ 800.949171][T30520] dump_stack_lvl+0x100/0x190 [ 800.949191][T30520] should_fail_ex.cold+0x5/0xa [ 800.949209][T30520] should_failslab+0xc2/0x120 [ 800.949222][T30520] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 800.949239][T30520] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 800.949256][T30520] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 800.949272][T30520] mmu_topup_memory_caches+0x25/0x170 [ 800.949290][T30520] kvm_mmu_load+0xd6/0x23e0 [ 800.949305][T30520] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 800.949316][T30520] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 800.949327][T30520] ? vmx_get_rflags+0x104/0x440 [ 800.949337][T30520] ? kvm_apic_accept_pic_intr+0xdf/0x1b0 [ 800.949348][T30520] ? __pfx_kvm_mmu_load+0x10/0x10 [ 800.949362][T30520] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 800.949375][T30520] ? kvm_check_and_inject_events+0x961/0x1070 [ 800.949390][T30520] ? record_steal_time+0x420/0xbc0 [ 800.949404][T30520] vcpu_run+0x39f4/0x5ca0 [ 800.949424][T30520] ? __pfx_vcpu_run+0x10/0x10 [ 800.949444][T30520] ? rcu_is_watching+0x12/0xc0 [ 800.949464][T30520] ? kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 800.949480][T30520] kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 800.949499][T30520] kvm_vcpu_ioctl+0x730/0x1720 [ 800.949512][T30520] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 800.949524][T30520] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 800.949539][T30520] ? do_vfs_ioctl+0x226/0x13e0 [ 800.949552][T30520] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 800.949563][T30520] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 800.949584][T30520] ? __fget_files+0x215/0x3d0 [ 800.949597][T30520] ? hook_file_ioctl_common+0x149/0x410 [ 800.949612][T30520] ? selinux_file_ioctl+0x13b/0x290 [ 800.949627][T30520] ? selinux_file_ioctl+0xb6/0x290 [ 800.949643][T30520] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 800.949661][T30520] __x64_sys_ioctl+0x18e/0x210 [ 800.949679][T30520] do_syscall_64+0x10b/0x860 [ 800.949703][T30520] ? clear_bhb_loop+0x40/0x90 [ 800.949732][T30520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.949751][T30520] RIP: 0033:0x7f34ef59ce59 [ 800.949766][T30520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 800.949776][T30520] RSP: 002b:00007f34f0421028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 800.949788][T30520] RAX: ffffffffffffffda RBX: 00007f34ef815fa0 RCX: 00007f34ef59ce59 [ 800.949795][T30520] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 800.949802][T30520] RBP: 00007f34f0421090 R08: 0000000000000000 R09: 0000000000000000 [ 800.949808][T30520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 800.949815][T30520] R13: 00007f34ef816038 R14: 00007f34ef815fa0 R15: 00007ffdc26b86a8 [ 800.949829][T30520] [ 801.116594][T30521] hpfs: Bad magic ... probably not HPFS [ 801.126689][T30521] hpfs: Bad magic ... probably not HPFS [ 801.293455][T30541] overlayfs: failed to resolve './file0': -2 [ 801.348841][T30544] __nla_validate_parse: 31 callbacks suppressed [ 801.348856][T30544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7435'. [ 801.354808][T30544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7435'. [ 801.899361][T30563] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 801.918106][T30563] FAULT_INJECTION: forcing a failure. [ 801.918106][T30563] name failslab, interval 1, probability 0, space 0, times 0 [ 801.941345][T30563] CPU: 1 UID: 0 PID: 30563 Comm: syz.6.7443 Tainted: G L syzkaller #0 PREEMPT(full) [ 801.941366][T30563] Tainted: [L]=SOFTLOCKUP [ 801.941370][T30563] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 801.941377][T30563] Call Trace: [ 801.941381][T30563] [ 801.941386][T30563] dump_stack_lvl+0x100/0x190 [ 801.941405][T30563] should_fail_ex.cold+0x5/0xa [ 801.941422][T30563] should_failslab+0xc2/0x120 [ 801.941436][T30563] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 801.941453][T30563] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 801.941469][T30563] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 801.941486][T30563] mmu_topup_memory_caches+0x25/0x170 [ 801.941504][T30563] kvm_mmu_load+0xd6/0x23e0 [ 801.941532][T30563] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 801.941544][T30563] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 801.941556][T30563] ? vmx_get_rflags+0x104/0x440 [ 801.941566][T30563] ? kvm_apic_accept_pic_intr+0xdf/0x1b0 [ 801.941577][T30563] ? __pfx_kvm_mmu_load+0x10/0x10 [ 801.941591][T30563] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 801.941604][T30563] ? kvm_check_and_inject_events+0x961/0x1070 [ 801.941619][T30563] ? record_steal_time+0x420/0xbc0 [ 801.941633][T30563] vcpu_run+0x39f4/0x5ca0 [ 801.941654][T30563] ? __pfx_vcpu_run+0x10/0x10 [ 801.941674][T30563] ? rcu_is_watching+0x12/0xc0 [ 801.941694][T30563] ? kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 801.941710][T30563] kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 801.941729][T30563] kvm_vcpu_ioctl+0x730/0x1720 [ 801.941743][T30563] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 801.941755][T30563] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 801.941770][T30563] ? do_vfs_ioctl+0x226/0x13e0 [ 801.941782][T30563] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 801.941794][T30563] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 801.941814][T30563] ? __fget_files+0x215/0x3d0 [ 801.941829][T30563] ? hook_file_ioctl_common+0x149/0x410 [ 801.941843][T30563] ? selinux_file_ioctl+0x13b/0x290 [ 801.941858][T30563] ? selinux_file_ioctl+0xb6/0x290 [ 801.941874][T30563] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 801.941886][T30563] __x64_sys_ioctl+0x18e/0x210 [ 801.941903][T30563] do_syscall_64+0x10b/0x860 [ 801.941920][T30563] ? clear_bhb_loop+0x40/0x90 [ 801.941933][T30563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.941944][T30563] RIP: 0033:0x7f159059ce59 [ 801.941955][T30563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 801.941966][T30563] RSP: 002b:00007f1591458028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 801.941978][T30563] RAX: ffffffffffffffda RBX: 00007f1590815fa0 RCX: 00007f159059ce59 [ 801.941986][T30563] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 801.941992][T30563] RBP: 00007f1591458090 R08: 0000000000000000 R09: 0000000000000000 [ 801.941999][T30563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 801.942005][T30563] R13: 00007f1590816038 R14: 00007f1590815fa0 R15: 00007fff938c0408 [ 801.942019][T30563] [ 802.225345][T30574] 8021q: adding VLAN 0 to HW filter on device bond1 [ 802.357155][T30573] macsec1: entered promiscuous mode [ 802.363835][T30573] macsec1: entered allmulticast mode [ 802.927796][T30588] netlink: 32 bytes leftover after parsing attributes in process `syz.9.7451'. [ 803.064858][T30592] openvswitch: netlink: Key type 31 is not supported [ 803.178045][T30596] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 803.196030][T30596] FAULT_INJECTION: forcing a failure. [ 803.196030][T30596] name failslab, interval 1, probability 0, space 0, times 0 [ 803.204295][T30596] CPU: 3 UID: 0 PID: 30596 Comm: syz.2.7455 Tainted: G L syzkaller #0 PREEMPT(full) [ 803.204324][T30596] Tainted: [L]=SOFTLOCKUP [ 803.204330][T30596] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 803.204340][T30596] Call Trace: [ 803.204347][T30596] [ 803.204355][T30596] dump_stack_lvl+0x100/0x190 [ 803.204384][T30596] should_fail_ex.cold+0x5/0xa [ 803.204408][T30596] should_failslab+0xc2/0x120 [ 803.204430][T30596] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 803.204455][T30596] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 803.204481][T30596] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 803.204507][T30596] mmu_topup_memory_caches+0x25/0x170 [ 803.204533][T30596] kvm_mmu_load+0xd6/0x23e0 [ 803.204554][T30596] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 803.204572][T30596] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 803.204589][T30596] ? vmx_get_rflags+0x104/0x440 [ 803.204605][T30596] ? kvm_apic_accept_pic_intr+0xdf/0x1b0 [ 803.204622][T30596] ? __pfx_kvm_mmu_load+0x10/0x10 [ 803.204642][T30596] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 803.204662][T30596] ? kvm_check_and_inject_events+0x961/0x1070 [ 803.204684][T30596] ? record_steal_time+0x420/0xbc0 [ 803.204705][T30596] vcpu_run+0x39f4/0x5ca0 [ 803.204730][T30596] ? __pfx___schedule+0x10/0x10 [ 803.204760][T30596] ? lockdep_hardirqs_on+0x78/0x100 [ 803.204784][T30596] ? __pfx_vcpu_run+0x10/0x10 [ 803.204920][T30596] ? rcu_is_watching+0x12/0xc0 [ 803.204953][T30596] ? kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 803.204976][T30596] kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 803.205004][T30596] kvm_vcpu_ioctl+0x730/0x1720 [ 803.205025][T30596] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 803.205043][T30596] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 803.205066][T30596] ? do_vfs_ioctl+0x226/0x13e0 [ 803.205085][T30596] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 803.205103][T30596] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 803.205134][T30596] ? __fget_files+0x215/0x3d0 [ 803.205153][T30596] ? hook_file_ioctl_common+0x149/0x410 [ 803.205176][T30596] ? selinux_file_ioctl+0x13b/0x290 [ 803.205198][T30596] ? selinux_file_ioctl+0xb6/0x290 [ 803.205221][T30596] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 803.205240][T30596] __x64_sys_ioctl+0x18e/0x210 [ 803.205259][T30596] do_syscall_64+0x10b/0x860 [ 803.205283][T30596] ? clear_bhb_loop+0x40/0x90 [ 803.205303][T30596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.205321][T30596] RIP: 0033:0x7f5a3119ce59 [ 803.205336][T30596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 803.205351][T30596] RSP: 002b:00007f5a31f89028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 803.205369][T30596] RAX: ffffffffffffffda RBX: 00007f5a31415fa0 RCX: 00007f5a3119ce59 [ 803.205380][T30596] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 803.205390][T30596] RBP: 00007f5a31f89090 R08: 0000000000000000 R09: 0000000000000000 [ 803.205399][T30596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 803.205409][T30596] R13: 00007f5a31416038 R14: 00007f5a31415fa0 R15: 00007ffefc2a40a8 [ 803.205432][T30596] [ 803.392774][T30596] pic_ioport_write: 59 callbacks suppressed [ 803.392788][T30596] kvm: pic: level sensitive irq not supported [ 803.395326][T30596] picdev_read: 59 callbacks suppressed [ 803.395336][T30596] kvm: pic: non byte read [ 803.404841][T30596] kvm: pic: level sensitive irq not supported [ 803.405265][T30596] kvm: pic: non byte read [ 803.412330][T30596] kvm: pic: level sensitive irq not supported [ 803.412601][T30596] kvm: pic: non byte read [ 803.417585][T30596] kvm: pic: level sensitive irq not supported [ 803.417869][T30596] kvm: pic: non byte read [ 803.423166][T30596] kvm: pic: level sensitive irq not supported [ 803.423444][T30596] kvm: pic: non byte read [ 804.118706][T30632] netlink: 'syz.9.7465': attribute type 28 has an invalid length. [ 804.120501][T30634] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7468'. [ 804.127342][T30632] netlink: 'syz.9.7465': attribute type 3 has an invalid length. [ 804.136642][T30632] netlink: 132 bytes leftover after parsing attributes in process `syz.9.7465'. [ 804.179576][T30636] netlink: 'syz.2.7469': attribute type 2 has an invalid length. [ 804.217010][T30634] netlink: 372 bytes leftover after parsing attributes in process `syz.5.7468'. [ 804.582510][T30659] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7477'. [ 804.589335][T30656] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 804.600113][T30656] FAULT_INJECTION: forcing a failure. [ 804.600113][T30656] name failslab, interval 1, probability 0, space 0, times 0 [ 804.606704][T30656] CPU: 2 UID: 0 PID: 30656 Comm: syz.2.7478 Tainted: G L syzkaller #0 PREEMPT(full) [ 804.606722][T30656] Tainted: [L]=SOFTLOCKUP [ 804.606726][T30656] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 804.606733][T30656] Call Trace: [ 804.606737][T30656] [ 804.606742][T30656] dump_stack_lvl+0x100/0x190 [ 804.606868][T30656] should_fail_ex.cold+0x5/0xa [ 804.606903][T30656] should_failslab+0xc2/0x120 [ 804.606937][T30656] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 804.606954][T30656] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 804.606972][T30656] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 804.606988][T30656] mmu_topup_memory_caches+0x25/0x170 [ 804.607006][T30656] kvm_mmu_load+0xd6/0x23e0 [ 804.607021][T30656] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 804.607033][T30656] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 804.607044][T30656] ? vmx_get_rflags+0x104/0x440 [ 804.607054][T30656] ? kvm_apic_accept_pic_intr+0xdf/0x1b0 [ 804.607065][T30656] ? __pfx_kvm_mmu_load+0x10/0x10 [ 804.607079][T30656] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 804.607092][T30656] ? kvm_check_and_inject_events+0x961/0x1070 [ 804.607107][T30656] ? record_steal_time+0x420/0xbc0 [ 804.607121][T30656] vcpu_run+0x39f4/0x5ca0 [ 804.607141][T30656] ? __pfx_vcpu_run+0x10/0x10 [ 804.607161][T30656] ? rcu_is_watching+0x12/0xc0 [ 804.607226][T30656] ? kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 804.607242][T30656] kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 804.607262][T30656] kvm_vcpu_ioctl+0x730/0x1720 [ 804.607276][T30656] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 804.607288][T30656] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 804.607304][T30656] ? do_vfs_ioctl+0x226/0x13e0 [ 804.607318][T30656] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 804.607329][T30656] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 804.607371][T30656] ? __fget_files+0x215/0x3d0 [ 804.607385][T30656] ? hook_file_ioctl_common+0x149/0x410 [ 804.607399][T30656] ? selinux_file_ioctl+0x13b/0x290 [ 804.607414][T30656] ? selinux_file_ioctl+0xb6/0x290 [ 804.607430][T30656] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 804.607446][T30656] __x64_sys_ioctl+0x18e/0x210 [ 804.607465][T30656] do_syscall_64+0x10b/0x860 [ 804.607559][T30656] ? clear_bhb_loop+0x40/0x90 [ 804.607574][T30656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.607585][T30656] RIP: 0033:0x7f5a3119ce59 [ 804.607595][T30656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 804.607606][T30656] RSP: 002b:00007f5a31f89028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 804.607618][T30656] RAX: ffffffffffffffda RBX: 00007f5a31415fa0 RCX: 00007f5a3119ce59 [ 804.607625][T30656] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 804.607631][T30656] RBP: 00007f5a31f89090 R08: 0000000000000000 R09: 0000000000000000 [ 804.607638][T30656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 804.607644][T30656] R13: 00007f5a31416038 R14: 00007f5a31415fa0 R15: 00007ffefc2a40a8 [ 804.607658][T30656] [ 804.692234][ T5738] usb 10-1: new full-speed USB device number 52 using dummy_hcd [ 804.871488][ T5738] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 804.878153][ T5738] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 804.887687][ T5738] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 804.898913][ T5738] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.972444][T30676] netlink: 4376 bytes leftover after parsing attributes in process `syz.2.7482'. [ 804.975295][T30676] netlink: 4376 bytes leftover after parsing attributes in process `syz.2.7482'. [ 805.001190][T30681] 9pnet_virtio: no channels available for device syz [ 805.006551][T30681] 9pnet_virtio: no channels available for device syz [ 805.010511][T30681] 9pnet_virtio: no channels available for device syz [ 805.017249][T30681] 9pnet_virtio: no channels available for device syz [ 805.020143][T30681] 9pnet_virtio: no channels available for device syz [ 805.026365][T30681] 9pnet_virtio: no channels available for device syz [ 805.029294][T30681] 9pnet_virtio: no channels available for device syz [ 805.034535][T30681] 9pnet_virtio: no channels available for device syz [ 805.037411][T30681] 9pnet_virtio: no channels available for device syz [ 805.054499][T30677] syzkaller0: entered promiscuous mode [ 805.056877][T30677] syzkaller0: entered allmulticast mode [ 805.060548][ T40] kauditd_printk_skb: 1655 callbacks suppressed [ 805.060560][ T40] audit: type=1400 audit(2000001233.789:147017): avc: denied { recv } for pid=5721 comm="syz-executor" saddr=127.0.0.1 src=46836 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 805.075033][ T40] audit: type=1400 audit(2000001233.799:147018): avc: denied { unmount } for pid=30197 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 805.083438][ T40] audit: type=1400 audit(2000001233.809:147019): avc: denied { recv } for pid=40 comm="kauditd" saddr=10.0.2.2 src=43090 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 805.098271][ T40] audit: type=1400 audit(2000001233.829:147020): avc: denied { create } for pid=30673 comm="syz.9.7481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 805.110665][ T40] audit: type=1400 audit(2000001233.829:147021): avc: denied { write } for pid=30673 comm="syz.9.7481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 805.114233][T30677] tipc: Started in network mode [ 805.120116][ T40] audit: type=1400 audit(2000001233.829:147022): avc: denied { write } for pid=30673 comm="syz.9.7481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 805.120734][T30677] tipc: Node identity 32df429b251b, cluster identity 4711 [ 805.131682][ T40] audit: type=1400 audit(2000001233.839:147023): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=46836 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 805.132908][T30677] tipc: Enabled bearer , priority 0 [ 805.141534][ T40] audit: type=1400 audit(2000001233.839:147024): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=46836 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 805.152647][ T40] audit: type=1400 audit(2000001233.849:147025): avc: denied { recv } for pid=5720 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=46836 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 805.161592][ T40] audit: type=1400 audit(2000001233.849:147026): avc: denied { write } for pid=30673 comm="syz.9.7481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 805.177633][ T5738] usb 10-1: usb_control_msg returned -32 [ 805.179686][ T5738] usbtmc 10-1:16.0: can't read capabilities [ 805.333127][T30693] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7484'. [ 805.573604][T30703] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 805.582292][T30703] FAULT_INJECTION: forcing a failure. [ 805.582292][T30703] name failslab, interval 1, probability 0, space 0, times 0 [ 805.586331][T30703] CPU: 2 UID: 0 PID: 30703 Comm: syz.2.7490 Tainted: G L syzkaller #0 PREEMPT(full) [ 805.586348][T30703] Tainted: [L]=SOFTLOCKUP [ 805.586352][T30703] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 805.586358][T30703] Call Trace: [ 805.586363][T30703] [ 805.586367][T30703] dump_stack_lvl+0x100/0x190 [ 805.586387][T30703] should_fail_ex.cold+0x5/0xa [ 805.586404][T30703] should_failslab+0xc2/0x120 [ 805.586433][T30703] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 805.586450][T30703] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 805.586470][T30703] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 805.586495][T30703] mmu_topup_memory_caches+0x25/0x170 [ 805.586521][T30703] kvm_mmu_load+0xd6/0x23e0 [ 805.586542][T30703] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 805.586561][T30703] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 805.586580][T30703] ? vmx_get_rflags+0x104/0x440 [ 805.586599][T30703] ? kvm_apic_accept_pic_intr+0xdf/0x1b0 [ 805.586614][T30703] ? __pfx_kvm_mmu_load+0x10/0x10 [ 805.586638][T30703] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 805.586661][T30703] ? kvm_check_and_inject_events+0x961/0x1070 [ 805.586687][T30703] ? record_steal_time+0x420/0xbc0 [ 805.586717][T30703] vcpu_run+0x39f4/0x5ca0 [ 805.586752][T30703] ? __pfx_vcpu_run+0x10/0x10 [ 805.586786][T30703] ? rcu_is_watching+0x12/0xc0 [ 805.586819][T30703] ? kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 805.586845][T30703] kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 805.586876][T30703] kvm_vcpu_ioctl+0x730/0x1720 [ 805.586899][T30703] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 805.586921][T30703] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 805.586946][T30703] ? do_vfs_ioctl+0x226/0x13e0 [ 805.586968][T30703] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 805.586988][T30703] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 805.587021][T30703] ? __fget_files+0x215/0x3d0 [ 805.587043][T30703] ? hook_file_ioctl_common+0x149/0x410 [ 805.587060][T30703] ? selinux_file_ioctl+0x13b/0x290 [ 805.587075][T30703] ? selinux_file_ioctl+0xb6/0x290 [ 805.587091][T30703] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 805.587103][T30703] __x64_sys_ioctl+0x18e/0x210 [ 805.587115][T30703] do_syscall_64+0x10b/0x860 [ 805.587132][T30703] ? clear_bhb_loop+0x40/0x90 [ 805.587146][T30703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.587157][T30703] RIP: 0033:0x7f5a3119ce59 [ 805.587167][T30703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 805.587197][T30703] RSP: 002b:00007f5a31f89028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 805.587209][T30703] RAX: ffffffffffffffda RBX: 00007f5a31415fa0 RCX: 00007f5a3119ce59 [ 805.587216][T30703] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 805.587222][T30703] RBP: 00007f5a31f89090 R08: 0000000000000000 R09: 0000000000000000 [ 805.587229][T30703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 805.587235][T30703] R13: 00007f5a31416038 R14: 00007f5a31415fa0 R15: 00007ffefc2a40a8 [ 805.587250][T30703] [ 805.764777][ T2325] usb 10-1: USB disconnect, device number 52 [ 805.790129][T30673] tipc: Resetting bearer [ 805.848665][T30673] tipc: Disabling bearer [ 806.184693][T30721] netlink: 'syz.9.7495': attribute type 4 has an invalid length. [ 806.205773][T30721] .`: renamed from bond0 (while UP) [ 806.338004][T30722] vlan0: entered promiscuous mode [ 806.416592][T30728] __nla_validate_parse: 3 callbacks suppressed [ 806.416612][T30728] netlink: 84 bytes leftover after parsing attributes in process `syz.5.7498'. [ 806.508226][T30733] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7499'. [ 806.557787][T30733] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=30733 comm=syz.6.7499 [ 806.615062][T30738] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 806.629563][T30738] FAULT_INJECTION: forcing a failure. [ 806.629563][T30738] name failslab, interval 1, probability 0, space 0, times 0 [ 806.638063][T30738] CPU: 3 UID: 0 PID: 30738 Comm: syz.5.7501 Tainted: G L syzkaller #0 PREEMPT(full) [ 806.638082][T30738] Tainted: [L]=SOFTLOCKUP [ 806.638086][T30738] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 806.638093][T30738] Call Trace: [ 806.638097][T30738] [ 806.638102][T30738] dump_stack_lvl+0x100/0x190 [ 806.638122][T30738] should_fail_ex.cold+0x5/0xa [ 806.638139][T30738] should_failslab+0xc2/0x120 [ 806.638152][T30738] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 806.638169][T30738] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 806.638191][T30738] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 806.638220][T30738] mmu_topup_memory_caches+0x25/0x170 [ 806.638238][T30738] kvm_mmu_load+0xd6/0x23e0 [ 806.638253][T30738] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 806.638264][T30738] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 806.638276][T30738] ? vmx_get_rflags+0x104/0x440 [ 806.638286][T30738] ? kvm_apic_accept_pic_intr+0xdf/0x1b0 [ 806.638297][T30738] ? __pfx_kvm_mmu_load+0x10/0x10 [ 806.638310][T30738] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 806.638323][T30738] ? kvm_check_and_inject_events+0x961/0x1070 [ 806.638339][T30738] ? record_steal_time+0x420/0xbc0 [ 806.638351][T30738] vcpu_run+0x39f4/0x5ca0 [ 806.638372][T30738] ? __pfx_vcpu_run+0x10/0x10 [ 806.638392][T30738] ? rcu_is_watching+0x12/0xc0 [ 806.638412][T30738] ? kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 806.638427][T30738] kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 806.638447][T30738] kvm_vcpu_ioctl+0x730/0x1720 [ 806.638460][T30738] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 806.638472][T30738] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 806.638487][T30738] ? do_vfs_ioctl+0x226/0x13e0 [ 806.638500][T30738] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 806.638512][T30738] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 806.638533][T30738] ? __fget_files+0x215/0x3d0 [ 806.638546][T30738] ? hook_file_ioctl_common+0x149/0x410 [ 806.638561][T30738] ? selinux_file_ioctl+0x13b/0x290 [ 806.638575][T30738] ? selinux_file_ioctl+0xb6/0x290 [ 806.638591][T30738] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 806.638603][T30738] __x64_sys_ioctl+0x18e/0x210 [ 806.638615][T30738] do_syscall_64+0x10b/0x860 [ 806.638632][T30738] ? clear_bhb_loop+0x40/0x90 [ 806.638646][T30738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.638656][T30738] RIP: 0033:0x7fcc2f99ce59 [ 806.638667][T30738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 806.638678][T30738] RSP: 002b:00007fcc307aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 806.638689][T30738] RAX: ffffffffffffffda RBX: 00007fcc2fc15fa0 RCX: 00007fcc2f99ce59 [ 806.638696][T30738] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 806.638702][T30738] RBP: 00007fcc307aa090 R08: 0000000000000000 R09: 0000000000000000 [ 806.638709][T30738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 806.638715][T30738] R13: 00007fcc2fc16038 R14: 00007fcc2fc15fa0 R15: 00007fff64073aa8 [ 806.638728][T30738] [ 806.742909][T30738] kvm: pic: level sensitive irq not supported [ 806.743242][T30738] kvm: pic: non byte read [ 806.748629][T30738] kvm: pic: level sensitive irq not supported [ 806.748883][T30738] kvm: pic: non byte read [ 806.764633][T30738] kvm: pic: level sensitive irq not supported [ 806.764893][T30738] kvm: pic: non byte read [ 806.772267][T30738] kvm: pic: level sensitive irq not supported [ 806.772531][T30738] kvm: pic: non byte read [ 806.790191][T30738] kvm: pic: level sensitive irq not supported [ 806.790486][T30738] kvm: pic: non byte read [ 806.992557][ T1351] usb 7-1: new full-speed USB device number 43 using dummy_hcd [ 806.993574][T30752] syzkaller0: entered promiscuous mode [ 806.998004][T30752] syzkaller0: entered allmulticast mode [ 807.096416][T30752] tipc: Started in network mode [ 807.098082][T30752] tipc: Node identity c6964efbc7d3, cluster identity 4711 [ 807.104454][T30752] tipc: Enabled bearer , priority 0 [ 807.141846][ T1351] usb 7-1: device descriptor read/64, error -71 [ 807.270988][ T24] usb 14-1: new full-speed USB device number 30 using dummy_hcd [ 807.381066][ T1351] usb 7-1: new full-speed USB device number 44 using dummy_hcd [ 807.424871][ T24] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 807.428025][ T24] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 807.432673][ T24] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 807.436859][ T24] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.525823][ T1351] usb 7-1: device descriptor read/64, error -71 [ 807.559826][T30765] netlink: 'syz.5.7510': attribute type 1 has an invalid length. [ 807.584208][T30765] 8021q: adding VLAN 0 to HW filter on device bond2 [ 807.608600][T30765] bond2: (slave ip6gretap1): making interface the new active one [ 807.614140][T30765] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 807.642976][ T1351] usb usb7-port1: attempt power cycle [ 807.660905][ T24] usb 14-1: usb_control_msg returned -32 [ 807.662874][ T24] usbtmc 14-1:16.0: can't read capabilities [ 807.737759][T30768] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7511'. [ 807.770121][T30750] tipc: Resetting bearer [ 807.792702][T30750] tipc: Disabling bearer [ 807.803370][T30768] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=30768 comm=syz.5.7511 [ 807.880771][T30770] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7513'. [ 808.000939][ T1351] usb 7-1: new full-speed USB device number 45 using dummy_hcd [ 808.017273][T30775] netlink: 'syz.5.7515': attribute type 39 has an invalid length. [ 808.030123][ T1351] usb 7-1: device descriptor read/8, error -71 [ 808.170654][T30781] syzkaller0: entered promiscuous mode [ 808.174320][T30781] syzkaller0: entered allmulticast mode [ 808.180159][T30781] netlink: 'syz.6.7514': attribute type 7 has an invalid length. [ 808.184846][T30781] netlink: 'syz.6.7514': attribute type 8 has an invalid length. [ 808.188002][T30781] netlink: 'syz.6.7514': attribute type 7 has an invalid length. [ 808.192495][T30781] netlink: 208784 bytes leftover after parsing attributes in process `syz.6.7514'. [ 808.244074][ T5738] usb 14-1: USB disconnect, device number 30 [ 808.293491][ T1351] usb 7-1: new full-speed USB device number 46 using dummy_hcd [ 808.312792][ T1351] usb 7-1: device descriptor read/8, error -71 [ 808.423340][ T1351] usb usb7-port1: unable to enumerate USB device [ 808.439108][T30789] xt_hashlimit: size too large, truncated to 1048576 [ 808.443459][T30788] openvswitch: netlink: Flow actions attr not present in new flow. [ 808.789138][T30803] syzkaller0: entered promiscuous mode [ 808.791421][T30803] syzkaller0: entered allmulticast mode [ 808.809911][T30803] tcf_pedit_act: 7 callbacks suppressed [ 808.809929][T30803] tc action pedit offset must be on 32 bit boundaries [ 809.070247][T30816] netlink: 232 bytes leftover after parsing attributes in process `syz.9.7523'. [ 809.415202][T30820] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7524'. [ 809.425552][T30820] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 809.436926][T30820] overlayfs: missing 'lowerdir' [ 810.111708][ T40] kauditd_printk_skb: 1576 callbacks suppressed [ 810.111727][ T40] audit: type=1400 audit(2000001238.849:148603): avc: denied { ioctl } for pid=30840 comm="syz.2.7530" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 810.137435][ T40] audit: type=1400 audit(2000001238.869:148604): avc: denied { unmount } for pid=29837 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 810.146139][ T40] audit: type=1400 audit(2000001238.869:148605): avc: denied { recv } for pid=5721 comm="syz-executor" saddr=127.0.0.1 src=46836 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 810.156658][ T40] audit: type=1400 audit(2000001238.879:148606): avc: denied { recv } for pid=5720 comm="sshd-session" saddr=10.0.2.2 src=43090 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 810.171036][T13598] usb 7-1: new full-speed USB device number 47 using dummy_hcd [ 810.184343][ T40] audit: type=1400 audit(2000001238.879:148607): avc: denied { recv } for pid=5720 comm="sshd-session" saddr=10.0.2.2 src=43090 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 810.203227][ T40] audit: type=1400 audit(2000001238.879:148608): avc: denied { recv } for pid=5720 comm="sshd-session" saddr=10.0.2.2 src=43090 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 810.231030][ T40] audit: type=1400 audit(2000001238.879:148609): avc: denied { recv } for pid=5720 comm="sshd-session" saddr=10.0.2.2 src=43090 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 810.243520][ T40] audit: type=1400 audit(2000001238.909:148610): avc: denied { read write } for pid=29837 comm="syz-executor" name="loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 810.256934][ T40] audit: type=1400 audit(2000001238.909:148611): avc: denied { read write open } for pid=29837 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 810.268107][ T40] audit: type=1400 audit(2000001238.909:148612): avc: denied { ioctl } for pid=29837 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=667 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 810.349460][T13598] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 810.358312][T13598] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 810.377776][T13598] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 810.384743][T13598] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.636895][T13598] usb 7-1: usb_control_msg returned -32 [ 810.639534][T13598] usbtmc 7-1:16.0: can't read capabilities [ 810.961014][T21699] usb 11-1: new full-speed USB device number 72 using dummy_hcd [ 811.031201][ T2325] usb 10-1: new full-speed USB device number 53 using dummy_hcd [ 811.112806][T21699] usb 11-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 811.117077][T21699] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 811.121430][T21699] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.181050][ T2325] usb 10-1: device descriptor read/64, error -71 [ 811.302744][T30866] SELinux: security_context_str_to_sid („) failed with errno=-22 [ 811.358777][T30866] batadv0: entered promiscuous mode [ 811.366010][T30866] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 811.369476][T30866] batadv0: left promiscuous mode [ 811.441029][ T2325] usb 10-1: new full-speed USB device number 54 using dummy_hcd [ 811.504906][T30870] ubi31: attaching mtd0 [ 811.509419][T30870] ubi31: scanning is finished [ 811.512962][T30870] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 811.580972][ T2325] usb 10-1: device descriptor read/64, error -71 [ 811.692519][T30870] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 811.695983][ T2325] usb usb10-port1: attempt power cycle [ 811.708591][T30873] usbtmc 7-1:16.0: usb_control_msg returned -32 [ 811.710645][ T1041] usb 7-1: USB disconnect, device number 47 [ 812.024497][T30881] overlay: Unknown parameter 'measure' [ 812.041094][ T2325] usb 10-1: new full-speed USB device number 55 using dummy_hcd [ 812.065346][ T2325] usb 10-1: device descriptor read/8, error -71 [ 812.140533][T30884] netlink: 'syz.9.7543': attribute type 4 has an invalid length. [ 812.145292][T30884] netlink: 'syz.9.7543': attribute type 1 has an invalid length. [ 812.148376][T30884] netlink: 228 bytes leftover after parsing attributes in process `syz.9.7543'. [ 812.301015][ T2325] usb 10-1: new full-speed USB device number 56 using dummy_hcd [ 812.326365][ T2325] usb 10-1: device descriptor read/8, error -71 [ 812.441401][ T2325] usb usb10-port1: unable to enumerate USB device [ 813.720312][ T54] usb 11-1: USB disconnect, device number 72 [ 813.755707][T30884] Set syz1 is full, maxelem 65536 reached [ 813.891429][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 813.938476][T30902] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7549'. [ 813.993862][T30904] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 814.000289][T30904] FAULT_INJECTION: forcing a failure. [ 814.000289][T30904] name failslab, interval 1, probability 0, space 0, times 0 [ 814.005156][T30904] CPU: 0 UID: 0 PID: 30904 Comm: syz.6.7550 Tainted: G L syzkaller #0 PREEMPT(full) [ 814.005174][T30904] Tainted: [L]=SOFTLOCKUP [ 814.005178][T30904] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 814.005185][T30904] Call Trace: [ 814.005189][T30904] [ 814.005193][T30904] dump_stack_lvl+0x100/0x190 [ 814.005214][T30904] should_fail_ex.cold+0x5/0xa [ 814.005242][T30904] should_failslab+0xc2/0x120 [ 814.005258][T30904] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 814.005275][T30904] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 814.005292][T30904] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 814.005308][T30904] mmu_topup_memory_caches+0x25/0x170 [ 814.005325][T30904] kvm_mmu_load+0xd6/0x23e0 [ 814.005340][T30904] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 814.005351][T30904] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 814.005362][T30904] ? vmx_get_rflags+0x104/0x440 [ 814.005373][T30904] ? kvm_apic_accept_pic_intr+0xdf/0x1b0 [ 814.005383][T30904] ? __pfx_kvm_mmu_load+0x10/0x10 [ 814.005397][T30904] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 814.005410][T30904] ? kvm_check_and_inject_events+0x961/0x1070 [ 814.005426][T30904] ? record_steal_time+0x420/0xbc0 [ 814.005439][T30904] vcpu_run+0x39f4/0x5ca0 [ 814.005460][T30904] ? __pfx_vcpu_run+0x10/0x10 [ 814.005479][T30904] ? rcu_is_watching+0x12/0xc0 [ 814.005503][T30904] ? kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 814.005519][T30904] kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 814.005538][T30904] kvm_vcpu_ioctl+0x730/0x1720 [ 814.005551][T30904] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 814.005563][T30904] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 814.005578][T30904] ? do_vfs_ioctl+0x226/0x13e0 [ 814.005591][T30904] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 814.005603][T30904] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 814.005624][T30904] ? __fget_files+0x215/0x3d0 [ 814.005637][T30904] ? hook_file_ioctl_common+0x149/0x410 [ 814.005652][T30904] ? selinux_file_ioctl+0x13b/0x290 [ 814.005666][T30904] ? selinux_file_ioctl+0xb6/0x290 [ 814.005682][T30904] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 814.005695][T30904] __x64_sys_ioctl+0x18e/0x210 [ 814.005707][T30904] do_syscall_64+0x10b/0x860 [ 814.005724][T30904] ? clear_bhb_loop+0x40/0x90 [ 814.005738][T30904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.005749][T30904] RIP: 0033:0x7f159059ce59 [ 814.005760][T30904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 814.005771][T30904] RSP: 002b:00007f1591458028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 814.005782][T30904] RAX: ffffffffffffffda RBX: 00007f1590815fa0 RCX: 00007f159059ce59 [ 814.005789][T30904] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 814.005795][T30904] RBP: 00007f1591458090 R08: 0000000000000000 R09: 0000000000000000 [ 814.005801][T30904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 814.005808][T30904] R13: 00007f1590816038 R14: 00007f1590815fa0 R15: 00007fff938c0408 [ 814.005822][T30904] [ 814.009069][T30904] kvm: pic: level sensitive irq not supported [ 814.147597][T30904] kvm: pic: non byte read [ 814.152309][T30904] kvm: pic: level sensitive irq not supported [ 814.152569][T30904] kvm: pic: non byte read [ 814.153712][T30904] kvm: pic: level sensitive irq not supported [ 814.157891][T30904] kvm: pic: non byte read [ 814.162721][T30904] kvm: pic: level sensitive irq not supported [ 814.162999][T30904] kvm: pic: non byte read [ 814.168308][T30904] kvm: pic: level sensitive irq not supported [ 814.168583][T30904] kvm: pic: non byte read [ 814.306599][T30911] option changes via remount are deprecated (pid=30910 comm=syz.5.7552) [ 814.310008][T30911] cgroup: option or name mismatch, new: 0x0 "none", old: 0x0 "" [ 814.356255][T30913] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=41144 sclass=netlink_xfrm_socket pid=30913 comm=syz.6.7553 [ 815.121941][ T40] kauditd_printk_skb: 741 callbacks suppressed [ 815.121984][ T40] audit: type=1400 audit(2000001243.859:149354): avc: denied { recv } for pid=5720 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=46836 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 815.173093][ T40] audit: type=1400 audit(2000001243.869:149355): avc: denied { recv } for pid=30945 comm="modprobe" saddr=10.0.2.2 src=43090 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 815.219225][ T40] audit: type=1400 audit(2000001243.879:149356): avc: denied { read write } for pid=29837 comm="syz-executor" name="loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 815.261011][ T40] audit: type=1400 audit(2000001243.879:149357): avc: denied { recv } for pid=226 comm="kworker/u32:7" saddr=10.0.2.2 src=43090 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 815.289576][ T40] audit: type=1400 audit(2000001243.879:149358): avc: denied { recv } for pid=226 comm="kworker/u32:7" saddr=10.0.2.2 src=43090 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 815.331864][ T40] audit: type=1400 audit(2000001243.889:149359): avc: denied { read write open } for pid=29837 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 815.355410][ T40] audit: type=1400 audit(2000001243.889:149360): avc: denied { ioctl } for pid=29837 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=667 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 815.379106][ T40] audit: type=1400 audit(2000001243.889:149361): avc: denied { recv } for pid=5720 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=46836 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 815.396329][ T40] audit: type=1400 audit(2000001243.889:149362): avc: denied { recv } for pid=5720 comm="sshd-session" saddr=127.0.0.1 src=46836 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 815.444980][ T40] audit: type=1400 audit(2000001243.959:149363): avc: denied { unmount } for pid=29588 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 815.861928][T30960] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pid=30960 comm=syz.2.7562 [ 816.151936][ T1041] usb 14-1: new high-speed USB device number 31 using dummy_hcd [ 816.311009][ T1041] usb 14-1: Using ep0 maxpacket: 32 [ 816.340705][ T1041] usb 14-1: unable to get BOS descriptor or descriptor too short [ 816.353056][ T1041] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 816.360611][ T1041] usb 14-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 816.366912][ T1041] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.372548][ T1041] usb 14-1: Product: syz [ 816.374061][ T1041] usb 14-1: Manufacturer: syz [ 816.375722][ T1041] usb 14-1: SerialNumber: syz [ 816.628294][ T1041] usb 14-1: Quirk or no altset; falling back to MIDI 1.0 [ 816.633437][ T1041] usb 14-1: MIDIStreaming interface descriptor not found [ 816.677215][T30996] fuse: Bad value for 'group_id' [ 816.679375][T30996] fuse: Bad value for 'group_id' [ 816.754531][ T1041] usb 14-1: USB disconnect, device number 31 [ 816.800110][T18779] udevd[18779]: setting mode of /dev/bus/usb/014/031 to 020664 failed: No such file or directory [ 816.805662][T18779] udevd[18779]: setting owner of /dev/bus/usb/014/031 to uid=0, gid=0 failed: No such file or directory [ 816.865853][T26988] udevd[26988]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb14/14-1/14-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 817.128027][T31011] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31011 comm=syz.5.7577 [ 817.137634][T31011] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7577'. [ 817.439118][T31022] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7581'. [ 817.777411][T31037] comedi comedi3: s526: a I/O base address must be specified [ 818.028008][T31051] /dev/sg0: Can't lookup blockdev [ 818.325337][T31062] usb usb8: usbfs: process 31062 (syz.2.7594) did not claim interface 0 before use [ 818.428205][T31065] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7594'. [ 818.456373][T31069] usb usb8: usbfs: process 31069 (syz.2.7594) did not claim interface 0 before use [ 818.612418][T31072] netlink: 64 bytes leftover after parsing attributes in process `syz.9.7596'. [ 818.619183][T31072] x_tables: ip_tables: .0 target: invalid size 8 (kernel) != (user) 4 [ 819.317226][T31100] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7603'. [ 819.405001][T31104] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31104 comm=syz.5.7603 [ 819.762892][T31120] netlink: 196 bytes leftover after parsing attributes in process `syz.6.7608'. [ 819.769306][T31120] netlink: 196 bytes leftover after parsing attributes in process `syz.6.7608'. [ 819.772680][T31120] netlink: 19 bytes leftover after parsing attributes in process `syz.6.7608'. [ 819.820590][T31118] kvm: requested 31847 ns i8254 timer period limited to 200000 ns [ 819.828442][T31118] kvm: requested 115657 ns i8254 timer period limited to 200000 ns [ 819.832154][T31118] kvm: requested 141638 ns i8254 timer period limited to 200000 ns [ 819.836586][T31118] kvm: requested 22628 ns i8254 timer period limited to 200000 ns [ 819.849787][T31118] kvm: requested 186057 ns i8254 timer period limited to 200000 ns [ 819.859326][T31118] kvm: requested 179352 ns i8254 timer period limited to 200000 ns [ 819.866122][T31118] kvm: requested 17600 ns i8254 timer period limited to 200000 ns [ 819.878147][T31118] kvm: requested 38552 ns i8254 timer period limited to 200000 ns [ 819.884939][T31118] kvm: requested 31847 ns i8254 timer period limited to 200000 ns [ 819.895360][T31118] kvm: requested 41066 ns i8254 timer period limited to 200000 ns [ 820.135591][ T40] kauditd_printk_skb: 1329 callbacks suppressed [ 820.135636][ T40] audit: type=1400 audit(2000001248.869:150693): avc: denied { recv } for pid=13598 comm="kworker/0:5" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=46836 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 820.150682][ T40] audit: type=1400 audit(2000001248.869:150694): avc: denied { recv } for pid=13598 comm="kworker/0:5" saddr=127.0.0.1 src=46836 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 820.158765][ T40] audit: type=1400 audit(2000001248.869:150695): avc: denied { recv } for pid=5720 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=46836 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 820.166562][ T40] audit: type=1400 audit(2000001248.869:150696): avc: denied { recv } for pid=5720 comm="sshd-session" saddr=10.0.2.2 src=43090 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 820.174719][ T40] audit: type=1400 audit(2000001248.879:150697): avc: denied { recv } for pid=5720 comm="sshd-session" saddr=10.0.2.2 src=43090 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 820.183951][ T40] audit: type=1400 audit(2000001248.889:150698): avc: denied { recv } for pid=5720 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=46836 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 820.191708][ T40] audit: type=1400 audit(2000001248.889:150699): avc: denied { recv } for pid=5721 comm="syz-executor" saddr=127.0.0.1 src=46836 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 820.199749][ T40] audit: type=1400 audit(2000001248.889:150700): avc: denied { recv } for pid=5721 comm="syz-executor" saddr=127.0.0.1 src=46836 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 820.209928][ T40] audit: type=1400 audit(2000001248.899:150701): avc: denied { mount } for pid=31130 comm="syz.5.7612" name="/" dev="ramfs" ino=168702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 820.219195][ T40] audit: type=1400 audit(2000001248.899:150702): avc: denied { recv } for pid=5720 comm="sshd-session" saddr=10.0.2.2 src=43090 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 820.238309][T31131] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 820.257348][T31131] overlayfs: failed to set xattr on upper [ 820.259910][T31131] overlayfs: ...falling back to redirect_dir=nofollow. [ 820.265067][T31131] overlayfs: ...falling back to metacopy=off. [ 820.270015][T31131] overlayfs: ...falling back to index=off. [ 820.276169][T31131] overlayfs: ...falling back to uuid=null. [ 820.589099][T31143] Mount JFS Failure: -5 [ 820.689735][T31145] syzkaller0: entered promiscuous mode [ 820.697683][T31145] syzkaller0: entered allmulticast mode [ 820.774302][T31145] tipc: Enabled bearer , priority 0 [ 820.882637][T31155] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 820.885620][T31155] overlayfs: failed to set xattr on upper [ 820.887563][T31155] overlayfs: ...falling back to redirect_dir=nofollow. [ 820.889749][T31155] overlayfs: ...falling back to index=off. [ 820.891804][T31155] overlayfs: ...falling back to uuid=null. [ 820.932042][T31155] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 821.058531][T31161] netlink: 64 bytes leftover after parsing attributes in process `syz.5.7620'. [ 821.100205][T31161] ref_ctr increment failed for inode: 0x27f offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88801b8cb100 [ 821.123635][T31163] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 821.165840][T31160] uprobe: syz.5.7620:31160 failed to unregister, leaking uprobe [ 821.427676][T31142] tipc: Resetting bearer [ 821.475908][T31142] tipc: Disabling bearer [ 821.501632][T31172] netlink: 'syz.2.7624': attribute type 1 has an invalid length. [ 821.556351][T31172] 8021q: adding VLAN 0 to HW filter on device bond1 [ 821.767840][T31174] bond1: (slave veth5): Enslaving as an active interface with a down link [ 821.818531][T31172] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 821.828993][T31172] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 822.218796][T31196] netlink: 'syz.6.7631': attribute type 1 has an invalid length. [ 822.221784][T31196] netlink: 224 bytes leftover after parsing attributes in process `syz.6.7631'. [ 822.369357][T31202] syzkaller0: entered promiscuous mode [ 822.376533][T31202] syzkaller0: entered allmulticast mode [ 822.446209][T31204] lo speed is unknown, defaulting to 1000 [ 822.449582][T31207] netlink: 5 bytes leftover after parsing attributes in process `syz.6.7634'. [ 822.453506][T31202] tipc: Enabled bearer , priority 0 [ 822.457867][T31207] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 823.097840][T31199] tipc: Resetting bearer [ 823.125969][T31199] tipc: Disabling bearer [ 823.360151][T31224] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7640'. [ 823.407563][T31227] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7640'. [ 823.826253][T31240] overlay: filesystem on ./file0 not supported as upperdir [ 823.992503][T31257] XFS (nbd9): no-recovery mounts must be read-only. [ 824.813595][T31297] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7661'. [ 824.831755][T31297] netlink: 'syz.9.7661': attribute type 89 has an invalid length. [ 824.834568][T31297] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7661'. [ 825.004383][T31303] geneve1: entered allmulticast mode [ 825.033783][T31298] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7662'. [ 825.052246][T31303] batman_adv: batadv0: Adding interface: gretap1 [ 825.056581][T31307] random: crng reseeded on system resumption [ 825.060989][T31303] batman_adv: batadv0: Interface activated: gretap1 [ 825.147194][ T40] kauditd_printk_skb: 1333 callbacks suppressed [ 825.147237][ T40] audit: type=1400 audit(2000001253.879:152036): avc: denied { recv } for pid=5720 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=46836 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 825.193648][ T40] audit: type=1400 audit(2000001253.929:152037): avc: denied { read } for pid=31306 comm="syz.5.7664" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:tpm_device_t:s0" [ 825.211326][ T40] audit: type=1400 audit(2000001253.929:152039): avc: denied { read open } for pid=31306 comm="syz.5.7664" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:tpm_device_t:s0" [ 825.233979][ T40] audit: type=1400 audit(2000001253.929:152038): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=46836 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 825.249872][ T40] audit: type=1400 audit(2000001253.929:152040): avc: denied { ioctl } for pid=31306 comm="syz.5.7664" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:tpm_device_t:s0" [ 825.270753][ T40] audit: type=1400 audit(2000001253.999:152041): avc: denied { read write } for pid=31310 comm="syz.2.7665" name="uhid" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 825.275829][T31311] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 825.280674][T31311] [U] J"—e:ÀÆ" [ 825.281013][ T40] audit: type=1400 audit(2000001253.999:152042): avc: denied { read write open } for pid=31310 comm="syz.2.7665" path="/dev/uhid" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 825.292807][ T40] audit: type=1400 audit(2000001254.019:152043): avc: denied { read write } for pid=31312 comm="syz.9.7666" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:tpm_device_t:s0" [ 825.305342][ T40] audit: type=1400 audit(2000001254.019:152044): avc: denied { read write open } for pid=31312 comm="syz.9.7666" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:tpm_device_t:s0" [ 825.305733][T31311] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 825.315578][ T40] audit: type=1400 audit(2000001254.019:152045): avc: denied { ioctl } for pid=31312 comm="syz.9.7666" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:tpm_device_t:s0" [ 825.316578][T31311] [U] J"—e:ÀÆ" [ 825.358602][T31308] create_pit_timer: 4 callbacks suppressed [ 825.358693][T31308] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 825.883890][T31335] xt_hashlimit: size too large, truncated to 1048576 [ 825.939980][ T5738] hid-generic 0005:00B6:0009.000F: unknown main item tag 0x0 [ 825.959262][ T5738] hid-generic 0005:00B6:0009.000F: unknown main item tag 0x0 [ 825.962725][ T5738] hid-generic 0005:00B6:0009.000F: unknown main item tag 0x0 [ 825.967667][ T5738] hid-generic 0005:00B6:0009.000F: unknown main item tag 0x0 [ 825.975445][ T5738] hid-generic 0005:00B6:0009.000F: unknown main item tag 0x0 [ 825.977859][ T5738] hid-generic 0005:00B6:0009.000F: unknown main item tag 0x0 [ 825.980108][ T5738] hid-generic 0005:00B6:0009.000F: unknown main item tag 0x0 [ 825.985059][ T5738] hid-generic 0005:00B6:0009.000F: unknown main item tag 0x0 [ 825.988276][ T5738] hid-generic 0005:00B6:0009.000F: unknown main item tag 0x0 [ 825.997167][ T5738] hid-generic 0005:00B6:0009.000F: unknown main item tag 0x0 [ 826.067912][ T5738] hid-generic 0005:00B6:0009.000F: hidraw0: BLUETOOTH HID v1ade12.f3 Device [syz0] on syz1 [ 826.076869][T31332] bond0 (unregistering): Released all slaves [ 826.344314][T31344] fido_id[31344]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 826.449850][T31353] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 826.486337][T31353] netlink: 'syz.2.7673': attribute type 2 has an invalid length. [ 826.843001][T31359] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7675'. [ 826.936983][ T1209] nci: nci_rsp_packet: unknown rsp opcode 0x804 [ 826.952227][T31371] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=31371 comm=syz.2.7678 [ 827.451051][ T24] usb 10-1: new full-speed USB device number 57 using dummy_hcd [ 827.613331][ T24] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 827.623704][ T24] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 827.636880][ T24] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 827.646216][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.894554][ T24] usb 10-1: usb_control_msg returned -32 [ 827.897228][ T24] usbtmc 10-1:16.0: can't read capabilities [ 828.712880][T31387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7682'. [ 828.853577][T31390] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 828.861966][T31390] FAULT_INJECTION: forcing a failure. [ 828.861966][T31390] name failslab, interval 1, probability 0, space 0, times 0 [ 828.865986][T31390] CPU: 0 UID: 0 PID: 31390 Comm: syz.2.7683 Tainted: G L syzkaller #0 PREEMPT(full) [ 828.866019][T31390] Tainted: [L]=SOFTLOCKUP [ 828.866023][T31390] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 828.866050][T31390] Call Trace: [ 828.866055][T31390] [ 828.866060][T31390] dump_stack_lvl+0x100/0x190 [ 828.866332][T31390] should_fail_ex.cold+0x5/0xa [ 828.866415][T31390] should_failslab+0xc2/0x120 [ 828.866527][T31390] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 828.866565][T31390] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 828.866602][T31390] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 828.866619][T31390] mmu_topup_memory_caches+0x25/0x170 [ 828.866658][T31390] kvm_mmu_load+0xd6/0x23e0 [ 828.866673][T31390] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 828.866686][T31390] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 828.866697][T31390] ? vmx_get_rflags+0x104/0x440 [ 828.866708][T31390] ? kvm_apic_accept_pic_intr+0xdf/0x1b0 [ 828.866719][T31390] ? __pfx_kvm_mmu_load+0x10/0x10 [ 828.866732][T31390] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 828.866746][T31390] ? kvm_check_and_inject_events+0x961/0x1070 [ 828.866783][T31390] ? record_steal_time+0x420/0xbc0 [ 828.866796][T31390] vcpu_run+0x39f4/0x5ca0 [ 828.866817][T31390] ? __pfx_vcpu_run+0x10/0x10 [ 828.866862][T31390] ? rcu_is_watching+0x12/0xc0 [ 828.866938][T31390] ? kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 828.866954][T31390] kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 828.866974][T31390] kvm_vcpu_ioctl+0x730/0x1720 [ 828.866987][T31390] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 828.867005][T31390] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 828.867035][T31390] ? do_vfs_ioctl+0x226/0x13e0 [ 828.867065][T31390] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 828.867078][T31390] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 828.867182][T31390] ? __fget_files+0x215/0x3d0 [ 828.867198][T31390] ? hook_file_ioctl_common+0x149/0x410 [ 828.867214][T31390] ? selinux_file_ioctl+0x13b/0x290 [ 828.867230][T31390] ? selinux_file_ioctl+0xb6/0x290 [ 828.867246][T31390] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 828.867259][T31390] __x64_sys_ioctl+0x18e/0x210 [ 828.867272][T31390] do_syscall_64+0x10b/0x860 [ 828.867385][T31390] ? clear_bhb_loop+0x40/0x90 [ 828.867400][T31390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.867411][T31390] RIP: 0033:0x7f5a3119ce59 [ 828.867422][T31390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 828.867433][T31390] RSP: 002b:00007f5a31f89028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 828.867446][T31390] RAX: ffffffffffffffda RBX: 00007f5a31415fa0 RCX: 00007f5a3119ce59 [ 828.867452][T31390] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 828.867459][T31390] RBP: 00007f5a31f89090 R08: 0000000000000000 R09: 0000000000000000 [ 828.867465][T31390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 828.867472][T31390] R13: 00007f5a31416038 R14: 00007f5a31415fa0 R15: 00007ffefc2a40a8 [ 828.867486][T31390] [ 828.995524][T31390] kvm: pic: level sensitive irq not supported [ 828.995874][T31390] kvm: pic: non byte read [ 829.000483][T31390] kvm: pic: level sensitive irq not supported [ 829.000753][T31390] kvm: pic: non byte read [ 829.006868][T31390] kvm: pic: level sensitive irq not supported [ 829.007139][T31390] kvm: pic: non byte read [ 829.012160][T31390] kvm: pic: level sensitive irq not supported [ 829.012858][T31390] kvm: pic: non byte read [ 829.017690][T31390] kvm: pic: level sensitive irq not supported [ 829.018023][T31390] kvm: pic: non byte read [ 829.814765][T31364] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 829.828460][ T5738] usb 10-1: USB disconnect, device number 57 [ 830.180400][ T40] kauditd_printk_skb: 1029 callbacks suppressed [ 830.180436][ T40] audit: type=1400 audit(2000001258.909:153075): avc: denied { search } for pid=31407 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 830.189860][ T40] audit: type=1400 audit(2000001258.909:153076): avc: denied { read } for pid=31407 comm="cmp" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 830.197662][ T40] audit: type=1400 audit(2000001258.909:153077): avc: denied { read open } for pid=31407 comm="cmp" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 830.205466][ T40] audit: type=1400 audit(2000001258.909:153078): avc: denied { search } for pid=31407 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 830.212363][ T40] audit: type=1400 audit(2000001258.909:153079): avc: denied { search } for pid=31407 comm="cmp" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 830.219465][ T40] audit: type=1400 audit(2000001258.909:153080): avc: denied { search } for pid=31407 comm="cmp" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 830.226671][ T40] audit: type=1400 audit(2000001258.909:153081): avc: denied { read } for pid=31407 comm="cmp" name="resolv.conf.sl0.link" dev="tmpfs" ino=33532 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 830.234594][ T40] audit: type=1400 audit(2000001258.919:153082): avc: denied { open } for pid=31407 comm="cmp" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=33532 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 830.245151][ T40] audit: type=1400 audit(2000001258.919:153083): avc: denied { getattr } for pid=31407 comm="cmp" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 830.255418][ T40] audit: type=1400 audit(2000001258.919:153084): avc: denied { getattr } for pid=31407 comm="cmp" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=33532 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 837.449361][ T40] kauditd_printk_skb: 447 callbacks suppressed [ 837.449381][ T40] audit: type=1400 audit(2000001266.179:153532): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=43090 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 837.459536][ T40] audit: type=1400 audit(2000001266.189:153533): avc: denied { recv } for pid=5720 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=46836 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 837.467336][ T40] audit: type=1400 audit(2000001266.189:153534): avc: denied { recv } for pid=5720 comm="sshd-session" saddr=127.0.0.1 src=46836 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 837.573144][ T40] audit: type=1400 audit(2000001266.309:153535): avc: denied { egress } for pid=33 comm="ksoftirqd/3" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 837.581681][ T40] audit: type=1400 audit(2000001266.309:153536): avc: denied { sendto } for pid=33 comm="ksoftirqd/3" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 838.852535][ T40] audit: type=1400 audit(2000001267.589:153537): avc: denied { egress } for pid=33 comm="ksoftirqd/3" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 838.860582][ T40] audit: type=1400 audit(2000001267.589:153538): avc: denied { sendto } for pid=33 comm="ksoftirqd/3" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 842.251270][ T40] audit: type=1400 audit(2000001270.969:153539): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=43090 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 842.260760][ T40] audit: type=1400 audit(2000001270.969:153540): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=43090 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 842.272497][ T40] audit: type=1400 audit(2000001270.969:153541): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=43090 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 842.412620][T31424] loop2: detected capacity change from 0 to 3 [ 842.422768][T31424] loop2: [ 842.424197][T31424] loop2: partition table partially beyond EOD, truncated [ 842.451869][ T40] kauditd_printk_skb: 115 callbacks suppressed [ 842.451882][ T40] audit: type=1400 audit(2000001271.189:153657): avc: denied { ioctl } for pid=31419 comm="syz.5.7690" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 842.475597][ T40] audit: type=1400 audit(2000001271.189:153658): avc: denied { read } for pid=31427 comm="syz.9.7692" dev="nsfs" ino=4026533845 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 842.489614][ T40] audit: type=1400 audit(2000001271.189:153659): avc: denied { read open } for pid=31427 comm="syz.9.7692" path="net:[4026533845]" dev="nsfs" ino=4026533845 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 842.497129][ T40] audit: type=1400 audit(2000001271.189:153660): avc: denied { create } for pid=31427 comm="syz.9.7692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 842.502401][T31421] tmpfs: Unknown parameter 'mp|l' [ 842.505051][ T40] audit: type=1400 audit(2000001271.189:153661): avc: denied { ioctl } for pid=31427 comm="syz.9.7692" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:tpm_device_t:s0" [ 842.515676][ T40] audit: type=1400 audit(2000001271.199:153662): avc: denied { recv } for pid=31419 comm="syz.5.7690" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=46836 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 842.518500][T31429] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 842.526374][ T40] audit: type=1400 audit(2000001271.199:153663): avc: denied { recv } for pid=31419 comm="syz.5.7690" saddr=127.0.0.1 src=46836 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 842.543112][T31429] FAULT_INJECTION: forcing a failure. [ 842.543112][T31429] name failslab, interval 1, probability 0, space 0, times 0 [ 842.547522][ T40] audit: type=1400 audit(2000001271.209:153664): avc: denied { create } for pid=31427 comm="syz.9.7692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 842.554064][T31429] CPU: 0 UID: 0 PID: 31429 Comm: syz.9.7692 Tainted: G L syzkaller #0 PREEMPT(full) [ 842.554094][T31429] Tainted: [L]=SOFTLOCKUP [ 842.554098][T31429] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 842.554105][T31429] Call Trace: [ 842.554110][T31429] [ 842.554114][T31429] dump_stack_lvl+0x100/0x190 [ 842.554225][T31429] should_fail_ex.cold+0x5/0xa [ 842.554261][T31429] should_failslab+0xc2/0x120 [ 842.554295][T31429] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 842.554312][T31429] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 842.554329][T31429] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 842.554346][T31429] mmu_topup_memory_caches+0x25/0x170 [ 842.554364][T31429] kvm_mmu_load+0xd6/0x23e0 [ 842.554379][T31429] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 842.554391][T31429] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 842.554403][T31429] ? vmx_get_rflags+0x104/0x440 [ 842.554413][T31429] ? kvm_apic_accept_pic_intr+0xdf/0x1b0 [ 842.554423][T31429] ? __pfx_kvm_mmu_load+0x10/0x10 [ 842.554437][T31429] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 842.554450][T31429] ? kvm_check_and_inject_events+0x961/0x1070 [ 842.554466][T31429] ? record_steal_time+0x420/0xbc0 [ 842.554479][T31429] vcpu_run+0x39f4/0x5ca0 [ 842.554500][T31429] ? __pfx_vcpu_run+0x10/0x10 [ 842.554520][T31429] ? rcu_is_watching+0x12/0xc0 [ 842.554558][T31429] ? kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 842.554580][T31429] kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 842.554609][T31429] kvm_vcpu_ioctl+0x730/0x1720 [ 842.554653][T31429] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 842.554677][T31429] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 842.554702][T31429] ? do_vfs_ioctl+0x226/0x13e0 [ 842.554715][T31429] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 842.554727][T31429] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 842.554782][T31429] ? __fget_files+0x215/0x3d0 [ 842.554796][T31429] ? hook_file_ioctl_common+0x149/0x410 [ 842.554811][T31429] ? selinux_file_ioctl+0x13b/0x290 [ 842.554826][T31429] ? selinux_file_ioctl+0xb6/0x290 [ 842.554841][T31429] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 842.554854][T31429] __x64_sys_ioctl+0x18e/0x210 [ 842.554867][T31429] do_syscall_64+0x10b/0x860 [ 842.554952][T31429] ? clear_bhb_loop+0x40/0x90 [ 842.554966][T31429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.554978][T31429] RIP: 0033:0x7f34ef59ce59 [ 842.554989][T31429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 842.555000][T31429] RSP: 002b:00007f34f0421028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 842.555012][T31429] RAX: ffffffffffffffda RBX: 00007f34ef815fa0 RCX: 00007f34ef59ce59 [ 842.555019][T31429] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 842.555025][T31429] RBP: 00007f34f0421090 R08: 0000000000000000 R09: 0000000000000000 [ 842.555032][T31429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 842.555038][T31429] R13: 00007f34ef816038 R14: 00007f34ef815fa0 R15: 00007ffdc26b86a8 [ 842.555052][T31429] [ 842.606999][ T40] audit: type=1400 audit(2000001271.209:153665): avc: denied { recv } for pid=5720 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=46836 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 842.641544][T31429] kvm: pic: level sensitive irq not supported [ 842.641973][T31429] kvm: pic: non byte read [ 842.646348][T31429] kvm: pic: level sensitive irq not supported [ 842.665220][ T40] audit: type=1400 audit(2000001271.219:153666): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=10.0.2.2 src=43090 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 842.668567][T31429] kvm: pic: non byte read [ 842.734255][T31429] kvm: pic: level sensitive irq not supported [ 842.734586][T31429] kvm: pic: non byte read [ 842.740447][T31429] kvm: pic: level sensitive irq not supported [ 842.741534][T31429] kvm: pic: non byte read [ 842.746802][T31429] kvm: pic: level sensitive irq not supported [ 842.747115][T31429] kvm: pic: non byte read [ 842.988888][T31449] CUSE: unknown device info "" [ 842.990774][T31449] CUSE: zero length info key specified [ 843.298915][T31468] ip6t_srh: unknown srh invflags 4000 [ 843.302468][T31468] netlink: 100 bytes leftover after parsing attributes in process `syz.6.7702'. [ 843.394389][T31474] syzkaller0: entered promiscuous mode [ 843.396436][T31474] syzkaller0: entered allmulticast mode [ 843.450299][T31474] tipc: Enabled bearer , priority 0 [ 844.149243][T31469] tipc: Resetting bearer [ 844.186190][T31469] tipc: Disabling bearer [ 844.297470][T31494] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7710'. [ 844.946530][T31503] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 845.651302][T19109] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 846.129251][T31538] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 846.409959][T31544] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.414755][T31544] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 846.421129][T31552] netlink: 32 bytes leftover after parsing attributes in process `syz.9.7732'. [ 846.540831][T31554] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 846.548477][T31554] FAULT_INJECTION: forcing a failure. [ 846.548477][T31554] name failslab, interval 1, probability 0, space 0, times 0 [ 846.554238][T31554] CPU: 0 UID: 0 PID: 31554 Comm: syz.6.7733 Tainted: G L syzkaller #0 PREEMPT(full) [ 846.554257][T31554] Tainted: [L]=SOFTLOCKUP [ 846.554264][T31554] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 846.554273][T31554] Call Trace: [ 846.554279][T31554] [ 846.554287][T31554] dump_stack_lvl+0x100/0x190 [ 846.554316][T31554] should_fail_ex.cold+0x5/0xa [ 846.554344][T31554] should_failslab+0xc2/0x120 [ 846.554366][T31554] __kvmalloc_node_noprof+0xfa/0xa00 [ 846.554384][T31554] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 846.554413][T31554] ? kmem_cache_alloc_noprof+0x292/0x6e0 [ 846.554434][T31554] __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 846.554451][T31554] mmu_topup_memory_caches+0xbc/0x170 [ 846.554467][T31554] kvm_mmu_load+0xd6/0x23e0 [ 846.554481][T31554] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 846.554493][T31554] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 846.554504][T31554] ? vmx_get_rflags+0x104/0x440 [ 846.554515][T31554] ? kvm_apic_accept_pic_intr+0xdf/0x1b0 [ 846.554529][T31554] ? __pfx_kvm_mmu_load+0x10/0x10 [ 846.554543][T31554] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 846.554562][T31554] ? kvm_check_and_inject_events+0x961/0x1070 [ 846.554610][T31554] ? record_steal_time+0x420/0xbc0 [ 846.554634][T31554] vcpu_run+0x39f4/0x5ca0 [ 846.554659][T31554] ? __pfx_vcpu_run+0x10/0x10 [ 846.554679][T31554] ? rcu_is_watching+0x12/0xc0 [ 846.554699][T31554] ? kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 846.554714][T31554] kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 846.554734][T31554] kvm_vcpu_ioctl+0x730/0x1720 [ 846.554747][T31554] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 846.554759][T31554] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 846.554774][T31554] ? do_vfs_ioctl+0x226/0x13e0 [ 846.554786][T31554] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 846.554798][T31554] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 846.554818][T31554] ? __fget_files+0x215/0x3d0 [ 846.554832][T31554] ? hook_file_ioctl_common+0x149/0x410 [ 846.554847][T31554] ? selinux_file_ioctl+0x13b/0x290 [ 846.554861][T31554] ? selinux_file_ioctl+0xb6/0x290 [ 846.554877][T31554] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 846.554889][T31554] __x64_sys_ioctl+0x18e/0x210 [ 846.554902][T31554] do_syscall_64+0x10b/0x860 [ 846.554919][T31554] ? clear_bhb_loop+0x40/0x90 [ 846.554933][T31554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.554944][T31554] RIP: 0033:0x7f159059ce59 [ 846.554954][T31554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 846.554965][T31554] RSP: 002b:00007f1591458028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 846.554976][T31554] RAX: ffffffffffffffda RBX: 00007f1590815fa0 RCX: 00007f159059ce59 [ 846.554983][T31554] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 846.554990][T31554] RBP: 00007f1591458090 R08: 0000000000000000 R09: 0000000000000000 [ 846.554996][T31554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 846.555002][T31554] R13: 00007f1590816038 R14: 00007f1590815fa0 R15: 00007fff938c0408 [ 846.555016][T31554] [ 846.733245][T31544] netdevsim netdevsim2 netdevsim2 (unregistering): left allmulticast mode [ 846.758324][T31544] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.763240][T31544] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 846.901657][T31572] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 847.073839][T31544] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.078153][T31544] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 847.271704][T31544] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.275109][T31544] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 847.386632][T31588] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 847.485075][ T40] kauditd_printk_skb: 1111 callbacks suppressed [ 847.485110][ T40] audit: type=1400 audit(2000001276.219:154778): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=46836 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 847.495527][ T40] audit: type=1400 audit(2000001276.219:154779): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=127.0.0.1 src=46836 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 847.506884][ T40] audit: type=1400 audit(2000001276.219:154780): avc: denied { create } for pid=31590 comm="syz.6.7743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 847.513400][ T40] audit: type=1400 audit(2000001276.219:154781): avc: denied { create } for pid=31590 comm="syz.6.7743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 847.520725][ T40] audit: type=1400 audit(2000001276.219:154782): avc: denied { write } for pid=31590 comm="syz.6.7743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 847.528119][ T40] audit: type=1400 audit(2000001276.219:154783): avc: denied { recv } for pid=5720 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=46836 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 847.528454][ T188] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 847.535896][ T40] audit: type=1400 audit(2000001276.219:154784): avc: denied { nlmsg_write } for pid=31590 comm="syz.6.7743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 847.535935][ T40] audit: type=1400 audit(2000001276.219:154785): avc: denied { write } for pid=31590 comm="syz.6.7743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 847.535971][ T40] audit: type=1400 audit(2000001276.219:154786): avc: denied { recv } for pid=5720 comm="sshd-session" saddr=10.0.2.2 src=43090 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 847.555599][ T188] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 847.560009][ T40] audit: type=1400 audit(2000001276.219:154787): avc: denied { nlmsg_write } for pid=31590 comm="syz.6.7743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 847.612947][ T188] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 847.621025][ T188] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 847.675981][T25621] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 847.680029][T25621] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 847.706246][T31595] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7745'. [ 847.710073][T31595] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7745'. [ 847.724946][ T1209] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 847.734059][ T1209] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 847.842611][T31605] tmpfs: Bad value for 'mpol' [ 847.847707][T31603] syzkaller0: entered promiscuous mode [ 847.850004][T31603] syzkaller0: entered allmulticast mode [ 847.948876][T31603] tipc: Enabled bearer , priority 0 [ 848.586478][T31599] tipc: Resetting bearer [ 848.621971][T31599] tipc: Disabling bearer [ 848.998336][T31644] input: syz1 as /devices/virtual/input/input66 [ 849.137103][T31647] tmpfs: Unknown parameter 'mp' [ 849.334910][T31657] bond3: option downdelay: invalid value (18446744073709551615) [ 849.349916][T31657] bond3: option downdelay: allowed values 0 - 2147483647 [ 849.358476][T31657] bond3 (unregistering): Released all slaves [ 849.364142][T31660] netlink: 132 bytes leftover after parsing attributes in process `syz.6.7762'. [ 849.628086][T31674] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 849.654755][T31669] netlink: 'syz.2.7765': attribute type 8 has an invalid length. [ 849.659524][T31677] netlink: 'syz.2.7765': attribute type 8 has an invalid length. [ 850.199736][T31700] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7773'. [ 850.269448][T31700] [ 850.270503][T31700] ============================================ [ 850.273023][T31700] WARNING: possible recursive locking detected [ 850.275556][T31700] syzkaller #0 Tainted: G L [ 850.278150][T31700] -------------------------------------------- [ 850.280808][T31700] syz.5.7773/31700 is trying to acquire lock: [ 850.285447][T31700] ffff88803effe158 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x3b5/0xc60 [ 850.289957][T31700] [ 850.289957][T31700] but task is already holding lock: [ 850.292909][T31700] ffff88803effe158 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: generic_xdp_tx+0x2d0/0x510 [ 850.296875][T31700] [ 850.296875][T31700] other info that might help us debug this: [ 850.300122][T31700] Possible unsafe locking scenario: [ 850.300122][T31700] [ 850.303254][T31700] CPU0 [ 850.304658][T31700] ---- [ 850.306004][T31700] lock(&qdisc_xmit_lock_key#3); [ 850.308016][T31700] lock(&qdisc_xmit_lock_key#3); [ 850.310089][T31700] [ 850.310089][T31700] *** DEADLOCK *** [ 850.310089][T31700] [ 850.313374][T31700] May be due to missing lock nesting notation [ 850.313374][T31700] [ 850.316744][T31700] 8 locks held by syz.5.7773/31700: [ 850.318938][T31700] #0: ffffffff8e7e5620 (rcu_read_lock){....}-{1:3}, at: tun_get_user+0xfdf/0x3c20 [ 850.322794][T31700] #1: ffffffff8e7e5620 (rcu_read_lock){....}-{1:3}, at: netif_receive_skb+0xfa/0x7f0 [ 850.326688][T31700] #2: ffff88803effe158 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: generic_xdp_tx+0x2d0/0x510 [ 850.330917][T31700] #3: ffffffff8e7e5620 (rcu_read_lock){....}-{1:3}, at: icmp6_send+0x24d/0x3c60 [ 850.334804][T31700] #4: ffff8880233edca8 (k-slock-AF_INET6){+.-.}-{3:3}, at: icmp6_send+0xdd9/0x3c60 [ 850.338624][T31700] #5: ffffffff8e7e5620 (rcu_read_lock){....}-{1:3}, at: ip6_send_skb+0xb9/0x430 [ 850.342351][T31700] #6: ffffffff8e7e5620 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x135/0xa60 [ 850.346092][T31700] #7: ffffffff8e7e55c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x296/0x4950 [ 850.350254][T31700] [ 850.350254][T31700] stack backtrace: [ 850.352749][T31700] CPU: 0 UID: 0 PID: 31700 Comm: syz.5.7773 Tainted: G L syzkaller #0 PREEMPT(full) [ 850.352780][T31700] Tainted: [L]=SOFTLOCKUP [ 850.352789][T31700] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 850.352827][T31700] Call Trace: [ 850.352837][T31700] [ 850.352848][T31700] dump_stack_lvl+0x100/0x190 [ 850.352996][T31700] print_deadlock_bug.cold+0xbd/0xca [ 850.353103][T31700] __lock_acquire+0x12bb/0x2630 [ 850.353200][T31700] lock_acquire+0x1b1/0x370 [ 850.353225][T31700] ? sch_direct_xmit+0x3b5/0xc60 [ 850.353249][T31700] ? sch_direct_xmit+0xb2/0xc60 [ 850.353273][T31700] _raw_spin_lock+0x2e/0x40 [ 850.353332][T31700] ? sch_direct_xmit+0x3b5/0xc60 [ 850.353360][T31700] sch_direct_xmit+0x3b5/0xc60 [ 850.353387][T31700] ? __pfx_sch_direct_xmit+0x10/0x10 [ 850.353415][T31700] __qdisc_run+0x52d/0x1af0 [ 850.353444][T31700] __dev_queue_xmit+0x30ed/0x4950 [ 850.353476][T31700] ? check_noncircular+0x97/0x160 [ 850.353499][T31700] ? __pfx___dev_queue_xmit+0x10/0x10 [ 850.353526][T31700] ? __lock_acquire+0xd73/0x2630 [ 850.353551][T31700] ? mark_held_locks+0x40/0x70 [ 850.353578][T31700] ? mark_held_locks+0x40/0x70 [ 850.353603][T31700] neigh_connected_output+0x3b7/0x5d0 [ 850.353627][T31700] ip6_finish_output2+0xb0f/0x1ce0 [ 850.353652][T31700] __ip6_finish_output+0x357/0xdf0 [ 850.353672][T31700] ip6_output+0x2aa/0xa60 [ 850.353688][T31700] ? __pfx_ip6_output+0x10/0x10 [ 850.353705][T31700] ? __pfx_ip6_finish_output+0x10/0x10 [ 850.353724][T31700] ? lock_acquire+0x1b1/0x370 [ 850.353748][T31700] ? __pfx_ip6_output+0x10/0x10 [ 850.353766][T31700] ip6_local_out+0xcb/0x1f0 [ 850.353812][T31700] ip6_send_skb+0x112/0x430 [ 850.353833][T31700] ip6_push_pending_frames+0x3b/0x50 [ 850.353853][T31700] icmpv6_push_pending_frames+0x2c1/0x450 [ 850.353885][T31700] icmp6_send+0x2197/0x3c60 [ 850.353916][T31700] ? __pfx_icmp6_send+0x10/0x10 [ 850.353943][T31700] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 850.353964][T31700] ? xfrm6_input_addr+0x2ca/0x740 [ 850.353986][T31700] ? selinux_xfrm_decode_session+0x35/0x90 [ 850.354082][T31700] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 850.354110][T31700] ? ip6_route_output_flags+0x234/0x650 [ 850.354142][T31700] ? ip6_route_output_flags+0x234/0x650 [ 850.354170][T31700] ? ip6_link_failure+0x31/0x580 [ 850.354194][T31700] ip6_link_failure+0x31/0x580 [ 850.354220][T31700] ? __pfx_ip6_link_failure+0x10/0x10 [ 850.354245][T31700] vti6_tnl_xmit+0xd3f/0x1fe0 [ 850.354273][T31700] ? __pfx_vti6_tnl_xmit+0x10/0x10 [ 850.354302][T31700] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 850.354328][T31700] ? tun_chr_write_iter+0xdc/0x200 [ 850.354355][T31700] ? ksys_write+0x12a/0x250 [ 850.354420][T31700] ? do_syscall_64+0x10b/0x860 [ 850.354455][T31700] generic_xdp_tx+0x199/0x510 [ 850.354484][T31700] dev_map_generic_redirect+0x4cd/0x610 [ 850.354581][T31700] ? __pfx_dev_map_generic_redirect+0x10/0x10 [ 850.354612][T31700] dev_map_redirect_multi+0x3a3/0xa10 [ 850.354641][T31700] ? __pfx_dev_map_redirect_multi+0x10/0x10 [ 850.354666][T31700] ? rcu_read_lock_bh_held+0x2b/0x60 [ 850.354715][T31700] ? dev_map_redirect+0x324/0x6d0 [ 850.354743][T31700] ? bpf_prog_run_generic_xdp+0xd47/0x1610 [ 850.354774][T31700] xdp_do_generic_redirect+0x69a/0x820 [ 850.354803][T31700] do_xdp_generic+0x9ec/0x12c0 [ 850.354831][T31700] ? __pfx_do_xdp_generic+0x10/0x10 [ 850.354858][T31700] ? is_bpf_text_address+0x94/0x1a0 [ 850.354916][T31700] ? unwind_get_return_address+0x59/0xa0 [ 850.354974][T31700] ? arch_stack_walk+0xa6/0xf0 [ 850.355037][T31700] __netif_receive_skb_core.constprop.0+0x836/0x3530 [ 850.355075][T31700] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 850.355127][T31700] ? __skb_flow_dissect+0x1d2c/0x6b70 [ 850.355157][T31700] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.355181][T31700] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 850.355212][T31700] ? __pfx___skb_flow_dissect+0x10/0x10 [ 850.355241][T31700] ? __lock_acquire+0x4a5/0x2630 [ 850.355268][T31700] __netif_receive_skb_one_core+0xb0/0x1e0 [ 850.355294][T31700] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 850.355324][T31700] ? lock_acquire+0x1b1/0x370 [ 850.355351][T31700] __netif_receive_skb+0x1f/0x120 [ 850.355377][T31700] netif_receive_skb+0x13b/0x7f0 [ 850.355404][T31700] ? tun_build_skb.constprop.0+0x9b5/0x18f0 [ 850.355432][T31700] ? __pfx_netif_receive_skb+0x10/0x10 [ 850.355463][T31700] tun_rx_batched.isra.0+0x3f6/0x750 [ 850.355489][T31700] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 850.355517][T31700] ? rcu_is_watching+0x12/0xc0 [ 850.355544][T31700] ? tun_get_user+0x1cc8/0x3c20 [ 850.355570][T31700] tun_get_user+0x1e31/0x3c20 [ 850.355601][T31700] ? __pfx_tun_get_user+0x10/0x10 [ 850.355626][T31700] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 850.355707][T31700] ? find_held_lock+0x2b/0x80 [ 850.355728][T31700] ? tun_get+0x191/0x370 [ 850.355753][T31700] ? tun_get+0x191/0x370 [ 850.355782][T31700] tun_chr_write_iter+0xdc/0x200 [ 850.355813][T31700] vfs_write+0x6ac/0x1070 [ 850.355836][T31700] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 850.355862][T31700] ? __pfx_vfs_write+0x10/0x10 [ 850.355886][T31700] ? find_held_lock+0x2b/0x80 [ 850.355911][T31700] ksys_write+0x12a/0x250 [ 850.355931][T31700] ? __pfx_ksys_write+0x10/0x10 [ 850.355953][T31700] ? rcu_is_watching+0x12/0xc0 [ 850.355982][T31700] do_syscall_64+0x10b/0x860 [ 850.356006][T31700] ? clear_bhb_loop+0x40/0x90 [ 850.356028][T31700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.356054][T31700] RIP: 0033:0x7fcc2f95d68e [ 850.356074][T31700] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 850.356095][T31700] RSP: 002b:00007fcc307a9fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 850.356115][T31700] RAX: ffffffffffffffda RBX: 00007fcc307aa6c0 RCX: 00007fcc2f95d68e [ 850.356130][T31700] RDX: 000000000000004a RSI: 0000200000000080 RDI: 00000000000000c8 [ 850.356144][T31700] RBP: 00007fcc2fa32d6f R08: 0000000000000000 R09: 0000000000000000 [ 850.356157][T31700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 850.356167][T31700] R13: 00007fcc2fc16038 R14: 00007fcc2fc15fa0 R15: 00007fff64073aa8 [ 850.356186][T31700]