last executing test programs: 1m56.888578477s ago: executing program 32 (id=726): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x6, 0x0, @void}}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 1m53.304384693s ago: executing program 33 (id=804): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x8, 0x0, 0x102}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) write(r1, &(0x7f0000000140)="00008848d100582a", 0x8) 1m45.488956885s ago: executing program 5 (id=931): r0 = syz_io_uring_setup(0x47a8, &(0x7f00000002c0)={0x0, 0x46b4, 0x80, 0x1, 0x200}, &(0x7f0000000180), &(0x7f0000000700), &(0x7f0000000000)) syz_io_uring_setup(0x10278e, 0x0, &(0x7f0000000200), &(0x7f00000000c0), &(0x7f0000000000)) io_uring_enter(r0, 0x369a, 0x0, 0x1, 0x0, 0x0) 1m45.488633277s ago: executing program 5 (id=932): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000240)="0f0d51f40f01d10fc75800f30fc73600102ed5c01dc0000000008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f3036db45ef0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x55}], 0x47, 0x42, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[], 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) setns(0xc9, 0x0) socket(0x8, 0x2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m45.298807652s ago: executing program 5 (id=935): r0 = syz_open_dev$evdev(0x0, 0x2, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0xfffffffffffffe8c, &(0x7f0000000200)="952bb3e00aae9a4c3a"}) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xb, 0x40) ioctl$FS_IOC_SETFLAGS(r1, 0x40046602, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x80004509, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB, @ANYRES64=r4], 0x5c}, 0x1, 0x0, 0x0, 0xc840}, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 1m45.234483415s ago: executing program 5 (id=936): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000300)='./file0\x00', 0x0, 0x8b7840, 0x0) 1m45.2333602s ago: executing program 1 (id=938): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$tun(r0, &(0x7f0000000280)={@void, @val={0x3, 0x3, 0x8, 0x3, 0x16, 0xc}, @ipv4=@generic={{0x5, 0x4, 0x1, 0xb, 0x24, 0x65, 0x0, 0x9, 0x84, 0x0, @private=0xa010101, @local}, "c7050804000000000200000001001504"}}, 0x2e) 1m45.177025988s ago: executing program 5 (id=939): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) write(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m45.174768236s ago: executing program 1 (id=940): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = socket$inet6(0xa, 0x80003, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = msgget$private(0x0, 0x1c0) msgctl$IPC_SET(r4, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) msgsnd(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0320000099"], 0x8, 0x0) msgctl$IPC_RMID(r4, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) getegid() setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x3, 0x1, 0x7}}, 0xe8) ptrace$getenv(0x4201, r1, 0x4, &(0x7f0000000040)) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) pread64(r6, &(0x7f0000000340)=""/69, 0x45, 0x3) 1m45.098223388s ago: executing program 5 (id=941): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000002f00090027bd7000fddbdf250400000007000b0005de00"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x20040004) recvmsg(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x2000) 1m45.027663539s ago: executing program 34 (id=941): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000002f00090027bd7000fddbdf250400000007000b0005de00"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x20040004) recvmsg(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x2000) 1m44.294065923s ago: executing program 1 (id=945): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000240)="0f0d51f40f01d10fc75800f30fc73600102ed5c01dc0000000008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f3036db45ef0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x55}], 0x47, 0x42, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[], 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) setns(0xc9, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m44.038177784s ago: executing program 1 (id=947): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000300)='./file0\x00', 0x0, 0x8b7840, 0x0) 1m44.037103708s ago: executing program 1 (id=949): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x2, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x1f, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m43.659182471s ago: executing program 1 (id=950): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "ecf0ff19", "4e67cb72f328ac2f"}, 0x28) writev(r0, &(0x7f0000001340)=[{&(0x7f0000001380)="9e8146c2697ff09756633cbf6ecd33ba61515db55c8ee8a3d05dccccc8ba0f99e72579e76fb05ee6055b2f7eaae327419ecad0812c03e879df5d93984d2fa09dc695391e2d2bfa185e14e34f4b99379ead97a28502f983d23a5595dba256ec615a6b03e9d57d307a5c3f05f2a1d8861e4928b8421d88b7bf57cf7c09e81cae9fabedaffee10769657c16f22bff32e45c9889d98356365b8c866ff182cb2626f0762d5406cb7b7ffc7f828ef9208297ca1606037ae1dc784b5219ed9ba8094422e716ce1f5da58b150a36e2e7c5765bf41dced9a90d105977459a7c14468bedd85a4e8ac5319be7307790fad1", 0xec}], 0x1) 1m43.638903623s ago: executing program 35 (id=950): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "ecf0ff19", "4e67cb72f328ac2f"}, 0x28) writev(r0, &(0x7f0000001340)=[{&(0x7f0000001380)="9e8146c2697ff09756633cbf6ecd33ba61515db55c8ee8a3d05dccccc8ba0f99e72579e76fb05ee6055b2f7eaae327419ecad0812c03e879df5d93984d2fa09dc695391e2d2bfa185e14e34f4b99379ead97a28502f983d23a5595dba256ec615a6b03e9d57d307a5c3f05f2a1d8861e4928b8421d88b7bf57cf7c09e81cae9fabedaffee10769657c16f22bff32e45c9889d98356365b8c866ff182cb2626f0762d5406cb7b7ffc7f828ef9208297ca1606037ae1dc784b5219ed9ba8094422e716ce1f5da58b150a36e2e7c5765bf41dced9a90d105977459a7c14468bedd85a4e8ac5319be7307790fad1", 0xec}], 0x1) 1m35.308617393s ago: executing program 6 (id=1050): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040)={0x5}, 0x4) sendto$inet6(r0, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) (fail_nth: 1) 1m35.176593387s ago: executing program 6 (id=1051): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0xffff, 0x10}, {0x0, 0xfff1}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x5c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x75df, 0xffffffffffffffff, 0x55ef, 0x5}, 0x19}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x884}, 0x40) r7 = socket$kcm(0x11, 0x3, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r6, 0x18}, 0x80, &(0x7f00000034c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005004024c10200000006125ce882cbf400930bf4533f", 0x20}, {&(0x7f00000022c0)="ffc9ace87aade11690dd52a158e0", 0xe}], 0x2}, 0x8000) 1m35.043678678s ago: executing program 6 (id=1052): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)='\x00\x00\x00\x00', 0x4) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001f00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0xfff}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="5c71f91b05c413550230b4c817a6", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x6}, &(0x7f00000000c0)=0x8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c69700014000780080006400000020008000840"], 0x60}, 0x1, 0x0, 0x0, 0x404c014}, 0xd4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c000000090601020000000000000000030000000900020073797a31000000000500010007000000440007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084"], 0x6c}, 0x1, 0x0, 0x0, 0xe730d03276346fbd}, 0x0) 1m34.131542685s ago: executing program 6 (id=1060): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000300)='./file0\x00', 0x0, 0x8b7840, 0x0) 1m34.129770736s ago: executing program 6 (id=1062): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = socket$inet6(0xa, 0x80003, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = msgget$private(0x0, 0x1c0) msgctl$IPC_SET(r4, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) msgsnd(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0320000099"], 0x8, 0x0) msgctl$IPC_RMID(r4, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) getegid() setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x3, 0x1, 0x7}}, 0xe8) ptrace$getenv(0x4201, r1, 0x4, &(0x7f0000000040)) r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) pread64(r5, &(0x7f0000000340)=""/69, 0x45, 0x3) 1m34.051221097s ago: executing program 7 (id=1063): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x6, 0x9, &(0x7f0000000200)={{0x2b, @local, 0xfffe, 0x80000001, 'lc\x00', 0x2, 0x0, 0x45}, {@rand_addr=0x64010102, 0x4e24, 0x4, 0x100, 0xaa, 0x400}}, 0x44) getsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000000040)) 1m34.05098687s ago: executing program 7 (id=1064): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x23, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000002900)=r2, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) epoll_create1(0x80000) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000200)=[@sack_perm, @window={0x3, 0x0, 0x5f08}, @window={0x3, 0x400, 0x1000}, @timestamp], 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r5, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='hybla', 0x5) recvfrom$inet(r5, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x4}, {}, {0xd, 0x2}}, [@filter_kind_options=@f_cgroup={{0x6}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) 1m33.8829225s ago: executing program 6 (id=1065): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x6, 0xffe0}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) 1m33.772014334s ago: executing program 36 (id=1065): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x6, 0xffe0}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) 1m33.118136871s ago: executing program 7 (id=1071): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000000000)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed6ee3738256e06a40e07fff0797e", 0x28) 1m33.039832869s ago: executing program 7 (id=1072): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000300)='./file0\x00', 0x0, 0x8b7840, 0x0) 1m32.968227074s ago: executing program 7 (id=1073): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000280)={0x2, 0x0, 0x6, {0xffff8001, 0xe7fffffc, 0xe44, 0xf}}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000180)=0x2000000) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0xff, 0x9}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f00000023c0)={0x2, 0x4e24, @broadcast}, 0x10) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r6, 0x1, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x1c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004080}, 0x4000000) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000080)) writev(r7, &(0x7f0000000340)=[{&(0x7f0000000140)="3751f02b82f73ccfc7c431617753f5732f765c975ebce8947e5388c4ff26fa3893119fd147a1576d9456136ab5f15493d175754e4b666e989869d01d418adc376ca22d8077c1b54bea92b5977a41d70ebcc4735ce6c012a5fe5ab7fef98e864216699a235d615ded3292397894b34a794bc14a2edfdc6978c0c97bcb02de69264d", 0x81}, {&(0x7f0000000200)="d0f2c13a3028c25f419badebc5eba629dffd4c836f512ca2b57abe2b67a6665aedfeaa392d738e830b94958751bc4b3721b5f33c04933169a3c1dfb5534eee", 0x3f}], 0x2) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000020c0), r5) sendmsg$NLBL_MGMT_C_PROTOCOLS(r5, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000002100)={0x14, r8, 0xb11, 0x70bd2d, 0x25dfdbfd}, 0x14}}, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x1d8, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000040)={r10}, &(0x7f0000000080)=ANY=[], 0x0, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x4}}}]}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x4080016}, 0x0) 1m32.795769763s ago: executing program 2 (id=1075): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedf", 0x3d}, {&(0x7f0000000ac0)="3fe4", 0x2}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e", 0xe}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49", 0xc}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m32.650865674s ago: executing program 7 (id=1076): r0 = userfaultfd(0x80001) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f00000005c0)={0x16, &(0x7f0000000440)=[{0x3b, '\x00', @st={0x4, [{0x3, @uvalue=0x2}, {0x1, @svalue=0x2c83}, {0x3, @uvalue=0x1}, {0x0, @svalue=0x4}]}, 0x2}, {0x28, '\x00', @data=0x6, 0x40083183}]}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x10b841, 0x0) pwritev2(r2, &(0x7f0000000600)=[{&(0x7f0000000580)="e5", 0x1}], 0x1, 0x1, 0x81, 0x1a) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x48, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1001}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0xc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "a1e1"}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004001}, 0x8000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000e, 0x2072, 0xffffffffffffffff, 0xd0fb8000) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) accept(r5, 0x0, 0x0) syz_open_dev$mtd(&(0x7f0000000000), 0x260c, 0x400200) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local}, 0xc) getsockopt$inet_buf(r6, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) 1m32.579699623s ago: executing program 37 (id=1076): r0 = userfaultfd(0x80001) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f00000005c0)={0x16, &(0x7f0000000440)=[{0x3b, '\x00', @st={0x4, [{0x3, @uvalue=0x2}, {0x1, @svalue=0x2c83}, {0x3, @uvalue=0x1}, {0x0, @svalue=0x4}]}, 0x2}, {0x28, '\x00', @data=0x6, 0x40083183}]}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x10b841, 0x0) pwritev2(r2, &(0x7f0000000600)=[{&(0x7f0000000580)="e5", 0x1}], 0x1, 0x1, 0x81, 0x1a) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x48, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1001}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0xc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "a1e1"}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004001}, 0x8000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000e, 0x2072, 0xffffffffffffffff, 0xd0fb8000) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) accept(r5, 0x0, 0x0) syz_open_dev$mtd(&(0x7f0000000000), 0x260c, 0x400200) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local}, 0xc) getsockopt$inet_buf(r6, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) 1m32.526994068s ago: executing program 2 (id=1079): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000680)={0x0, @in6={{0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}}, [0xfffffffffffffffa, 0x3, 0x7, 0x3, 0x4, 0x3, 0xc, 0x8, 0x3, 0x5, 0x7, 0x100000000, 0x6, 0x2, 0x6]}, 0x0) 1m32.517724205s ago: executing program 2 (id=1080): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000001580)=""/4096, 0x1000}], 0x1}, 0x5}], 0x1, 0x23, 0x0) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000300)='.', 0x1}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) pipe(0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) 1m32.111537765s ago: executing program 2 (id=1081): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000300)='./file0\x00', 0x0, 0x8b7840, 0x0) 1m32.040358841s ago: executing program 2 (id=1082): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in=@broadcast, @in6=@private2}}, {{@in6=@mcast2}, 0x0, @in6=@private1}}, &(0x7f0000000180)=0xe8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x2710, 0x0, 'rr\x00'}, 0x2c) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000210)={0x2, 0x2710, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 1m31.785646617s ago: executing program 2 (id=1083): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010736bd7000ffdbdf250100000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_set_cpb_data={{0x1}, {0x5b, 0x7f}}}}, 0x8) 1m31.63567714s ago: executing program 38 (id=1083): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010736bd7000ffdbdf250100000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_set_cpb_data={{0x1}, {0x5b, 0x7f}}}}, 0x8) 30.432386694s ago: executing program 3 (id=2056): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000001580)=""/4096, 0x1000}], 0x1}, 0x5}], 0x1, 0x23, 0x0) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000300)='.', 0x1}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xf3a, 0x1000000000000000) 30.219358457s ago: executing program 3 (id=2059): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtaction={0x14, 0x30, 0xb, 0x2, 0x25dfdbfc, {0x0, 0x0, 0x6a00}}, 0x14}}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f01b, 0x7}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000101000000600000000000000000", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) r5 = socket(0x10, 0x80002, 0x0) connect$netlink(r5, 0x0, 0x0) sendmsg$nl_route(r5, 0x0, 0x48008) recvfrom$inet(r5, &(0x7f0000000040)=""/223, 0xdf, 0x10001, 0x0, 0x0) 30.039130007s ago: executing program 3 (id=2064): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) write(r0, &(0x7f0000000500), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b05, &(0x7f0000000100)={'wlan1\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x200, 0x2000008, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) 29.982600132s ago: executing program 3 (id=2065): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x68) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f00000001c0)) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r4 = accept(r0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00082abd7000ffdbdf253b000000080003001724565965d342b289cde22466bd57156a99ea3fc409284accfcc15b02c5fcd2910eb80523fd3af527183c1647fdb401861f84f21bf35fa243f90d4e9aeeedbb3b964cbf4d19cc37df20df45ca79b8b70692d8eafd93021653bccdac39d30723b2c1c9783b4faf67f27f7bb48795865c944c29feef62e97ec8ab802a4207e56a36e65ec2fca2f5935b7e6bfc9b03cf28f521f2bd2e2086dd0a3d4cb2dd3526b878057e14b8568c3e0125ec11d7bdbb2e8d8a89c3675bc600000000000000", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8840}, 0x44810) r5 = openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x50000, 0x20, 0xe}, 0x18) read$snapshot(r5, &(0x7f0000000180)=""/36, 0x24) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) 29.122507148s ago: executing program 3 (id=2073): syz_emit_ethernet(0x237, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd602a1c9902013c0000000000000000000000000000000000ff02"], 0x0) mount(0x0, 0x0, 0x0, 0x244d002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f00000000c0)={@rand_addr, @initdev}, &(0x7f0000000100)=0x8) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x32) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg$unix(r2, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000300)=""/17, 0x11}], 0x1}}], 0x1, 0x40, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write(r0, &(0x7f00000001c0)='1', 0x1) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 29.042382918s ago: executing program 3 (id=2074): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x18000000000002a0, 0x48, 0x62, &(0x7f0000000600)="b9ff03075fe9008cb89e08e086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x2) read$char_usb(r3, &(0x7f0000000b40)=""/4096, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000001b80)='my_sys/file0\x00', 0x40001, 0x1c) write(r4, &(0x7f0000000100)='0', 0x1) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f0000001bc0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001a00020000000800170003000000080013000000020008000300030000000800070000000200080002"], 0x5c}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r7, 0x0) syz_clone(0x12a0211, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) mkdir(&(0x7f0000000180)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x47) r8 = syz_usb_connect$rtl8150(0x2, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r8, &(0x7f00000005c0)={0x2c, &(0x7f0000000380)={0x0, 0x3, 0xd7, {0xd7, 0x10, "79d6094bbf8a7d31c9f7972515462d07a18f8e745641f1c1a26d5cdd0274f03c4032b15aa9d4ea258721d6093660e73aab0989273a158271ca05e0ec259fc63cbf58237b8527b9999aac6cb7279b85e4395f7a1c26375c78f5f2d3c14e6367bf62767f2c5b9b0ae9ce2c6bf03cdf213214425fa28146e7341fb8e28834c153adde1bbcccceb27e9f7b3b01c163541fff513c6a6a6d491a20d7cb4aef07219245e3ae98579ad56208045a7ac495cdaf1fd0446ae24baa54366da4b2e6f006cf01edaaeddcbf2cdd84c0726ea29ed4df562bb2b3d045"}}, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc07}}, &(0x7f00000004c0)={0x0, 0xf, 0x1a, {0x5, 0xf, 0x1a, 0x2, [@wireless={0xb, 0x10, 0x1, 0x0, 0x0, 0x84, 0x5, 0x391d, 0xf7}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x2, 0x0, 0x5}]}}, &(0x7f0000000540)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x60, 0x8e, 0xc, "c0f6b0a4", "f4fbf5d4"}}, &(0x7f0000000580)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x18, 0xfc, 0x0, 0x3, 0x2, 0x4}}}, &(0x7f0000000a80)={0x84, &(0x7f0000000600)={0x20, 0x6, 0x9d, "99e8ea4b295fd16fa6bc6255a28d6de9e3b49a35cbc1da4a5a69eec9513ff218ceaa48a7b91d6bd735464959ccb0e1355987fd139c77098d09fbb61742b68db064765dbf8222a0178020be1f30a93a9236b66b16bd12b54252feafef4196cea74d9522e13e1206896c922b80f276cf34c1fd1ab1ccb12c70b6c2837bee5791b107e462ab5045a2d3c3022683edce9f6e13a46908b937581ab77b7b1c5a"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x40, 0x4}}, &(0x7f00000007c0)={0x40, 0x7, 0x2, 0x3f}, &(0x7f0000000800)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000840)={0x40, 0xb, 0x2, "7485"}, &(0x7f0000000880)={0x40, 0xf, 0x2, 0x2}, &(0x7f00000008c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000900)={0x40, 0x17, 0x6, @random="72ed1c874107"}, &(0x7f0000000940)={0x40, 0x19, 0x2, "acb5"}, &(0x7f0000000980)={0x40, 0x1a, 0x2, 0xb9fa}, &(0x7f00000009c0)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000a00)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000a40)={0x40, 0x21, 0x1, 0x7}}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x610000, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8b20, &(0x7f0000000040)={'ip6tnl0\x00', @multicast}) 14.050421908s ago: executing program 39 (id=2074): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x18000000000002a0, 0x48, 0x62, &(0x7f0000000600)="b9ff03075fe9008cb89e08e086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x2) read$char_usb(r3, &(0x7f0000000b40)=""/4096, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000001b80)='my_sys/file0\x00', 0x40001, 0x1c) write(r4, &(0x7f0000000100)='0', 0x1) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f0000001bc0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001a00020000000800170003000000080013000000020008000300030000000800070000000200080002"], 0x5c}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r7, 0x0) syz_clone(0x12a0211, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) mkdir(&(0x7f0000000180)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x47) r8 = syz_usb_connect$rtl8150(0x2, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r8, &(0x7f00000005c0)={0x2c, &(0x7f0000000380)={0x0, 0x3, 0xd7, {0xd7, 0x10, "79d6094bbf8a7d31c9f7972515462d07a18f8e745641f1c1a26d5cdd0274f03c4032b15aa9d4ea258721d6093660e73aab0989273a158271ca05e0ec259fc63cbf58237b8527b9999aac6cb7279b85e4395f7a1c26375c78f5f2d3c14e6367bf62767f2c5b9b0ae9ce2c6bf03cdf213214425fa28146e7341fb8e28834c153adde1bbcccceb27e9f7b3b01c163541fff513c6a6a6d491a20d7cb4aef07219245e3ae98579ad56208045a7ac495cdaf1fd0446ae24baa54366da4b2e6f006cf01edaaeddcbf2cdd84c0726ea29ed4df562bb2b3d045"}}, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc07}}, &(0x7f00000004c0)={0x0, 0xf, 0x1a, {0x5, 0xf, 0x1a, 0x2, [@wireless={0xb, 0x10, 0x1, 0x0, 0x0, 0x84, 0x5, 0x391d, 0xf7}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x2, 0x0, 0x5}]}}, &(0x7f0000000540)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x60, 0x8e, 0xc, "c0f6b0a4", "f4fbf5d4"}}, &(0x7f0000000580)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x18, 0xfc, 0x0, 0x3, 0x2, 0x4}}}, &(0x7f0000000a80)={0x84, &(0x7f0000000600)={0x20, 0x6, 0x9d, "99e8ea4b295fd16fa6bc6255a28d6de9e3b49a35cbc1da4a5a69eec9513ff218ceaa48a7b91d6bd735464959ccb0e1355987fd139c77098d09fbb61742b68db064765dbf8222a0178020be1f30a93a9236b66b16bd12b54252feafef4196cea74d9522e13e1206896c922b80f276cf34c1fd1ab1ccb12c70b6c2837bee5791b107e462ab5045a2d3c3022683edce9f6e13a46908b937581ab77b7b1c5a"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x40, 0x4}}, &(0x7f00000007c0)={0x40, 0x7, 0x2, 0x3f}, &(0x7f0000000800)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000840)={0x40, 0xb, 0x2, "7485"}, &(0x7f0000000880)={0x40, 0xf, 0x2, 0x2}, &(0x7f00000008c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000900)={0x40, 0x17, 0x6, @random="72ed1c874107"}, &(0x7f0000000940)={0x40, 0x19, 0x2, "acb5"}, &(0x7f0000000980)={0x40, 0x1a, 0x2, 0xb9fa}, &(0x7f00000009c0)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000a00)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000a40)={0x40, 0x21, 0x1, 0x7}}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x610000, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8b20, &(0x7f0000000040)={'ip6tnl0\x00', @multicast}) 2.584629561s ago: executing program 9 (id=2319): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r2, 0x29, 0x48, 0x0, &(0x7f00007d0000)) listen(r1, 0xfffffff8) r3 = io_uring_setup(0x3458, &(0x7f0000000080)={0x0, 0xffffeffa, 0x18, 0x2, 0x281}) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f0000001040)=[{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}], 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) ptrace(0x8, r4) ptrace$poke(0x4, r4, &(0x7f0000000040), 0x8000) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 1.964957258s ago: executing program 9 (id=2331): r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, 0x0) syz_emit_ethernet(0x46, &(0x7f00000001c0)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x68, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x5, 0x0, 0x0, 0x47, 0x3a3, {0x7, 0x4, 0x1, 0x3d, 0x9, 0x67, 0x1c, 0x8, 0x33, 0x8, @empty, @rand_addr=0x64010101, {[@timestamp={0x44, 0x8, 0x8f, 0x0, 0x3, [0xa]}]}}}}}}}, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000180)={r1, &(0x7f00000000c0)=""/187}) 1.904259061s ago: executing program 9 (id=2332): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0xf83, &(0x7f0000000080)={0x0, 0x50ad, 0x200, 0x3, 0x1cd}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000780)={0xfffffffffffffffc, 0x0, 0x3, 0x1}, 0x1) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000940)={r2, 0x2}, 0x0, &(0x7f0000000b80)="cb44", 0x0) add_key(&(0x7f00000007c0)='id_legacy\x00', &(0x7f0000000800)={'syz', 0x2}, &(0x7f0000000880)="8300078a07889e4357dbb9dd61c7b95b8390565447c368c642830df2579f8e10a6fcbd9dc1d320e0e357f19bce", 0x2d, 0xffffffffffffffff) r4 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0305710, &(0x7f0000000040)={0x0, 0x7ff, 0x41}) close(0x3) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[@ANYBLOB="580000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000da44000024001a8020000a8014000700fe8000000000000000020040000000000500080002000000140003007866726d30"], 0x58}}, 0x0) 1.890461607s ago: executing program 9 (id=2335): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000020)='./proc/net/afs/cells\x00', 0x2, 0x0) readlink(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000300)=""/17, 0x11) write(r1, &(0x7f0000000040)='add syz0 ::', 0xb) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f0000000280)={0x1, 0x0, 0x101, 0x6, {0xd48, 0x7, 0xee, 0xc8}}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e", 0x36}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e", 0xe}], 0x2, 0x0, 0x0, 0xc0}], 0x1, 0x48040) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x300000c, 0x20010, r2, 0x9d8bc000) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) r7 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r7, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x80000000, @mcast1, 0x1}, 0x1c, 0x0}}], 0x1, 0x20008850) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mount$afs(0x0, &(0x7f000009df40)='.\x00', &(0x7f000009df80), 0x14000, &(0x7f000009dfc0)={[{@dyn}]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000000)) 1.663568287s ago: executing program 9 (id=2338): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000980)={0x2, 0x0, @ioapic={0xfee00, 0x2967, 0x1f8, 0x3, 0x0, [{0x98, 0x10, 0x81, '\x00', 0x7f}, {0x41, 0x8, 0x30, '\x00', 0xf5}, {0xe9, 0x1, 0x9, '\x00', 0x11}, {0x7, 0x9, 0xff, '\x00', 0x8f}, {0x3, 0x5, 0x92, '\x00', 0xa}, {0xf, 0xe3, 0x8, '\x00', 0xaa}, {0x6, 0x8, 0x6, '\x00', 0x10}, {0x1, 0x3, 0x8, '\x00', 0x67}, {0x80, 0xfc, 0xa, '\x00', 0xa8}, {0x8, 0x2, 0x13, '\x00', 0x9f}, {0x2, 0xa, 0x16, '\x00', 0x3}, {0x2, 0xa, 0x3, '\x00', 0xa}, {0x1e, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x85}, {0x5, 0xa0, 0x47, '\x00', 0x4}, {0x7, 0x3, 0x3, '\x00', 0xa6}, {0x5, 0x0, 0xf, '\x00', 0x7}, {0x5e, 0xa, 0x8}, {0x7f, 0x6, 0x7, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x5, 0x8, 0x20, '\x00', 0xfc}, {0x3, 0xff, 0xc6, '\x00', 0x8}]}}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x9}, 0x8) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 945.945579ms ago: executing program 8 (id=2346): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[], 0x18}}, 0x400c010) recvmmsg(r0, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)=""/197, 0xc5}], 0x1}, 0x2}], 0x1, 0x100, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="00010000010a07020000000000000000000001010900010073797a3100000000d100060083db8f2d3e640009ca413cae03a3e09f25336b854d992858d5e3a5d7d3f0bd203a44bcd777e4106827b6bbb99afe38c89ef6fc9baf3869bc661110e6f76d6579eb297876cc42787d1e0413fdd2c88015876dc7bd3c96fa6b9f7ca05242311f3c023afae317345ba403897cdfc6ab9f0b7aeca11780e5c1c10a71f642fc0b7d5eaa497d3b2981b723649275dd07fb2b8818b37bf537aa2a921b0230e2ede9bcc2c6b0cb964c718310634cdd728549fe5e970d7bc5d37dd3a9775bd54ed808e4601b6a31929465888a833ef1b39797a3c191b30000000c0004400000000000000002"], 0x100}, 0x1, 0x0, 0x0, 0x56}, 0x40) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000780)=ANY=[@ANYBLOB="d663a0b3c85534b6f7746fe168471eae85c7797af9d5", @ANYRES16=r5, @ANYBLOB="000229bd7000fddbdf25130000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000200000008000b00c2b000000600110000100000080001007063690011000200303030303a30303a31302e3000000000080003000200000008000b000800000006001100ff070000"], 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x800) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2080, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = eventfd(0x42) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f00000002c0)={0x2, 0x0, 0x1, r8, 0x3}) sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002000010000000000fddbdf250a000000000000079aa200000c001400ee"], 0x28}}, 0x44080) r9 = dup(r7) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_io_uring_setup(0x29d7, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xf}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r13, r14, r15, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x49, 0x0, 0x7, &(0x7f0000000340)={0x24, 0x8, 0x5}, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r12, 0x1, 0x1, 0x61, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000740)) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000004) sendmsg$nl_generic(r11, &(0x7f0000000200)={0x0, 0x5a, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000041a85743820000000000000003010000000000001c000100e5ff060086dd0000100007a3dafe0fe444c3c7ac8de0ed24ef3af8bf87cacd35d5549fe728d3a825c293c7981829cfe9c6ef13a879e06474534c68a3822368b320de19929da2050099d81961ff1d9c8edf530cd2e07c4d50", @ANYRES16=r1], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 945.563773ms ago: executing program 0 (id=2347): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x437, 0x1, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000010), 0x0, 0x2) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000050)={0x53, 0xffffffff, 0x10, 0x20, @buffer, &(0x7f0000000110)="8506200000000000000000000000e600", &(0x7f0000000140)=""/64, 0x3e8}) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000210)={0x53, 0xfffffffd, 0xa, 0x20, @buffer={0x0, 0x200, &(0x7f0000000610)=""/512}, &(0x7f0000000310)="28000000000000000100", &(0x7f0000000340)=""/64, 0x3e8}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x9) socket$key(0xf, 0x3, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r4], 0x3c}, 0x1, 0x0, 0x0, 0x20004800}, 0x8010) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2) 683.225964ms ago: executing program 9 (id=2348): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x5, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x3, 0x0, @loopback}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000280)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x3, 0x4, 0x1c, 0x67, 0x0, 0x7, 0x1, 0x0, @rand_addr=0x64010100, @multicast1}, @address_reply={0x12, 0x0, 0x0, 0x5}}}}}, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 553.986965ms ago: executing program 8 (id=2349): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000200)={@val={0x0, 0x9200}, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @local, @val={@void, {0x8100, 0x2, 0x1, 0x3}}, {@ipv6={0x86dd, @dccp_packet={0x2, 0x6, "d3e0f1", 0x1e6, 0x21, 0xff, @remote, @empty, {[@hopopts={0x2c, 0x2, '\x00', [@pad1, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}, @dstopts={0xc, 0xa, '\x00', [@padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x30, {0x0, 0xa, 0x3, 0x5843, [0x8, 0x82, 0x4, 0xa, 0xa9b]}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @loopback}]}, @routing={0xc, 0x6, 0x2, 0x4e, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback]}, @routing={0x3c, 0xe, 0x2, 0x2, 0x0, [@mcast1, @rand_addr=' \x01\x00', @remote, @mcast2, @private0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @dstopts={0x2f, 0x2, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0xfffffffe}, @enc_lim={0x4, 0x1, 0x53}, @jumbo={0xc2, 0x4, 0x6}, @enc_lim={0x4, 0x1, 0x7b}]}, @fragment={0x1, 0x0, 0xff, 0x0, 0x0, 0x1, 0x67}, @dstopts={0x87, 0x2, '\x00', [@generic={0x0, 0x11, "081e64c6769a4d0857d5ca3433da5837b4"}]}], {{0x4e22, 0x4e22, 0x4, 0x1, 0x5, 0x0, 0x0, 0x6, 0x7, "7c8b99", 0xff, "499858"}, "e065d61c53f8bf64175912675e72ef4d6314934c901801ba6a00aaf534853dad259b1aaf856e9c1829581bf832fbd159eaec6893c3046a9675bc383e2e9bf8a994dac684c9d07539a7276af72b303117dac1d47f97e3931798bece3a544b"}}}}}}}, 0x224) 483.066623ms ago: executing program 4 (id=2351): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1070bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x207, 0x70bd2c, 0x25dfdb00, {0x0, 0x0, 0x0, r5, {0xa6, 0xc}, {0xffff, 0xfff1}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 482.67194ms ago: executing program 0 (id=2352): rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffd4e, 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x4c8b43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x3f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x13, 0x0, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file1\x00', &(0x7f0000000000)='gfs2\x00', 0x0, &(0x7f0000000380)='acl') (async) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000180)="0f20c035000001000f22c0b8331c39410f23d00f21f8352000000e0f23f8c74424005cec0000c744240209000000c7442406000000000f0114240f08f32ed9f6b8010000000f01d9c4c1fc525f220f01cb0fc7bcba004000009ad4000000ed00", 0x60}], 0x1, 0x11, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2020, 0x0, {0x2}}) (async) r9 = socket$inet6(0xa, 0x1, 0x100) (async, rerun: 32) r10 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x58bb, 0x10000, 0x10001, 0xa4}, &(0x7f0000000740)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) (rerun: 32) syz_io_uring_submit(r11, r12, r13, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f0000000380)=@in6={0xa, 0x4e20, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}}) (async) r14 = syz_ublk_setup_io_uring(0x23e4, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x2, 0x27e, 0x0, r10}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r15, r16, r17, &(0x7f0000000980)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r14, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x400000}}) (async, rerun: 32) syz_ublk_add_dev(r14, r15, r16, r17, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) (rerun: 32) r18 = syz_io_uring_setup(0x324c, &(0x7f0000000400)={0x0, 0x81f3, 0x10, 0x0, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r22 = io_uring_register$IORING_REGISTER_PERSONALITY(r18, 0x9, 0x0, 0x0) syz_io_uring_submit(r19, r20, r21, &(0x7f0000000280)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, r18, &(0x7f00000001c0)={0x20000004}, 0x3, 0x0, 0x1, {0x0, r22}}) (async) syz_io_uring_submit(0x0, r12, r17, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x60, 0x0, r7, 0x80, &(0x7f0000000200)=@sco, 0x0, 0x0, 0x1, {0x0, r22}}) (async) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000000)={'gretap0\x00', &(0x7f0000000080)=@ethtool_ts_info={0x3a}}) (async) close(r7) (async) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x1000) 413.971431ms ago: executing program 8 (id=2353): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x3f00, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @local}}}], 0x20}, 0x0) 413.768336ms ago: executing program 0 (id=2354): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x2000) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x2000) (async) 412.679261ms ago: executing program 8 (id=2355): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000016c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000540)={0x14, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xe}, @broadcast, @broadcast, @initial, {0x3, 0x9}}, 0xfffd, @void}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040080}, 0x28008004) 333.951219ms ago: executing program 4 (id=2356): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x300000c, 0x20010, r0, 0x9d8bc000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 333.703068ms ago: executing program 8 (id=2357): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000004100)={0x2020}, 0x2020) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r5, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000001c0)='m', 0xfffffdfc}]) io_destroy(r5) syz_open_dev$evdev(0x0, 0x2, 0x862b01) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) write$binfmt_misc(r2, &(0x7f0000000080)="578129fcd1494221a3ca517996b6ee881b", 0x11) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x10, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf21, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ldst={0x3, 0x3, 0x3, 0x0, 0xa, 0xfffffffffffffff4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x4}, 0x94) pread64(r1, &(0x7f0000000340)=""/69, 0x45, 0x3) 333.597507ms ago: executing program 0 (id=2358): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010105, 0x4e20, 0x3, 'dh\x00', 0x30, 0x660f5380, 0x3}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000440)={{0x84, @broadcast, 0x4f29, 0x3, 'ovf\x00', 0x5, 0xc, 0x6c}, {@rand_addr=0x64010101, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0xffff0000, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 285.457454ms ago: executing program 0 (id=2359): sendto$inet(0xffffffffffffffff, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377a", 0x18, 0x805, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x220400) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r3, &(0x7f0000000c40)=[{&(0x7f0000000140)=""/127, 0x7f}], 0x1, 0x0, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xdb, &(0x7f0000000400)=[{}], 0x8, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0xe4, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001900)={0x13, 0x8, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, [@tail_call]}, &(0x7f0000000800)='GPL\x00', 0x1, 0x1000, &(0x7f0000000840)=""/4096, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, r0, 0x8, &(0x7f0000001840)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000001880)={0xaeed, 0x4, 0xffff, 0xfffffff9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000018c0)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0xd6}, 0x94) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000019c0)={0x0, 0x80000001, 0x8}, 0xc) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001a00)={0xffffffffffffffff, 0x8, 0x8}, 0xc) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001a40)='/proc/sysvipc/msg\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0x19, 0x9, &(0x7f00000000c0)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @ldst={0x0, 0x2, 0x3, 0x9, 0x0, 0x50, 0xffffffffffffffff}], &(0x7f0000000180)='syzkaller\x00', 0x7ff, 0x0, 0x0, 0x0, 0x12, '\x00', r4, @cgroup_sockopt, r1, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x6, 0x800, 0x7fff}, 0x10, r5, r6, 0x3, &(0x7f0000001a80)=[0x1, 0xffffffffffffffff, r8, r9, r10, r11], &(0x7f0000001ac0)=[{0x4, 0x3, 0xa, 0x8}, {0x1, 0x5, 0x3, 0x5}, {0x5, 0x4, 0xf, 0xb}], 0x10, 0x80000000}, 0x94) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x149000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000020000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) 229.49196ms ago: executing program 0 (id=2360): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x437, 0x1, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000010), 0x0, 0x2) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000050)={0x53, 0xffffffff, 0x10, 0x20, @buffer, &(0x7f0000000110)="8506200000000000000000000000e600", &(0x7f0000000140)=""/64, 0x3e8}) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000210)={0x53, 0xfffffffd, 0xa, 0x20, @buffer={0x0, 0x200, &(0x7f0000000610)=""/512}, &(0x7f0000000310)="28000000000000000100", &(0x7f0000000340)=""/64, 0x3e8}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x9) socket$key(0xf, 0x3, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r4], 0x3c}, 0x1, 0x0, 0x0, 0x20004800}, 0x8010) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2) 155.228854ms ago: executing program 4 (id=2361): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000016c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000540)={0x3c, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xe}, @broadcast, @broadcast, @initial, {0x3, 0x9}}, 0xfffd, @void}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040080}, 0x28008004) (fail_nth: 9) 76.06892ms ago: executing program 4 (id=2362): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) (async) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$OCFS2_IOC_GROUP_ADD(r1, 0x40186f02, &(0x7f0000000000)={0x5, 0xe, 0x8}) (async, rerun: 64) epoll_create1(0x0) (rerun: 64) r2 = socket$nl_rdma(0x10, 0x3, 0x14) (async, rerun: 32) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) (rerun: 32) r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='blkio.bfq.io_serviced\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) sendmsg$NL80211_CMD_GET_REG(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000010) (async) r6 = syz_open_pts(r4, 0x1e342) ioctl$KDMKTONE(r6, 0x4b30, 0x6) (async) ioctl$PIO_UNIMAP(r6, 0x4b67, &(0x7f0000000240)={0x4, &(0x7f0000000200)=[{0x7d9, 0x4}, {0x6, 0x5}, {0x4, 0x8}, {0x7ff, 0x5}]}) (async) ioctl$KDSKBMETA(r6, 0x4b63, &(0x7f0000000280)=0x3) (async) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)=0x1000181) (async) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/ip6_mr_cache\x00') setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000400)={&(0x7f0000000340)=""/171, 0x211000, 0x1400, 0xfffff800, 0x2}, 0x20) (async, rerun: 64) sendmsg$NL80211_CMD_SET_POWER_SAVE(r7, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, r5, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) (async, rerun: 64) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r7, 0x3ba0, &(0x7f0000000580)={0x48, 0x7, r4, 0x0, 0x0, 0x0, 0x4, 0x3}) (async) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x2010, 0xffffffffffffffff, 0x0) (async) ioctl$NILFS_IOCTL_RESIZE(r2, 0x40086e8b, &(0x7f0000000600)=0x8) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r4, 0x24, &(0x7f0000000640)={0x1}, 0x0) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)={@fallback=r4, 0xffffffffffffffff, 0x26, 0x0, r4, @void, @value=r4}, 0x20) (async) ioctl$BLKCLOSEZONE(0xffffffffffffffff, 0x40101287, &(0x7f0000000700)={0x5, 0x5}) (async, rerun: 64) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000840)={@cgroup=r3, 0x22, 0x0, 0x7f, &(0x7f0000000740)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0], 0x0}, 0x40) (async, rerun: 64) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)={0x1b, 0x0, 0x0, 0xffffffff, 0x0, r7, 0xa47, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3}, 0x50) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000940)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) (rerun: 64) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000880)={@map=r9, r4, 0x36, 0x10, 0x0, @void, @value=r10, @void, @void, r8}, 0x20) (async) r11 = openat$cgroup_devices(r3, &(0x7f0000000980)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r11, &(0x7f00000009c0)={'a', ' *:* ', 'm\x00'}, 0x8) 15.60004ms ago: executing program 4 (id=2363): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0xa0181) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="49b5ed", 0x3}], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='dctcp', 0x5) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000001b00)="a6", 0x1001, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffd}, 0x1c) 3.975733ms ago: executing program 4 (id=2364): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], 0x18}}, 0x4) 0s ago: executing program 8 (id=2365): syz_emit_ethernet(0x237, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd602a1c9902013c0000000000000000000000000000000000ff02"], 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x50, 0xc00, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) kernel console output (not intermixed with test programs): le replacing table [ 194.780477][T12017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1984'. [ 195.036844][T12039] netlink: 'syz.8.1991': attribute type 12 has an invalid length. [ 195.248895][ T5514] hid-generic 000A:FFFFFF1D:0002.0008: unknown main item tag 0x0 [ 195.252190][ T5514] hid-generic 000A:FFFFFF1D:0002.0008: unknown main item tag 0x0 [ 195.256393][ T5514] hid-generic 000A:FFFFFF1D:0002.0008: unknown main item tag 0x0 [ 195.266539][ T5514] hid-generic 000A:FFFFFF1D:0002.0008: unknown main item tag 0x0 [ 195.270432][ T5514] hid-generic 000A:FFFFFF1D:0002.0008: unknown main item tag 0x0 [ 195.274177][ T5514] hid-generic 000A:FFFFFF1D:0002.0008: unknown main item tag 0x0 [ 195.281163][ T5514] hid-generic 000A:FFFFFF1D:0002.0008: unknown main item tag 0x0 [ 195.287536][ T5514] hid-generic 000A:FFFFFF1D:0002.0008: unknown main item tag 0x0 [ 195.294715][ T5514] hid-generic 000A:FFFFFF1D:0002.0008: unknown main item tag 0x0 [ 195.302095][ T5514] hid-generic 000A:FFFFFF1D:0002.0008: unknown main item tag 0x0 [ 195.340504][ T5437] veth0_vlan: left promiscuous mode [ 195.363557][ T5514] hid-generic 000A:FFFFFF1D:0002.0008: hidraw1: HID v0.04 Device [syz0] on syz1 [ 195.383157][ T5810] veth0_vlan: entered promiscuous mode [ 195.412531][T12061] fido_id[12061]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 195.441651][T12064] syzkaller0: entered promiscuous mode [ 195.444724][T12064] syzkaller0: entered allmulticast mode [ 195.449519][T12064] FAULT_INJECTION: forcing a failure. [ 195.449519][T12064] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.457920][T12064] CPU: 0 UID: 0 PID: 12064 Comm: syz.0.1998 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.457939][T12064] Tainted: [L]=SOFTLOCKUP [ 195.457943][T12064] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 195.457949][T12064] Call Trace: [ 195.457954][T12064] [ 195.457958][T12064] dump_stack_lvl+0x100/0x190 [ 195.457980][T12064] should_fail_ex.cold+0x5/0xa [ 195.457995][T12064] _copy_from_iter+0x1f4/0x1690 [ 195.458014][T12064] ? _copy_from_iter+0x270/0x1690 [ 195.458029][T12064] ? __pfx__copy_from_iter+0x10/0x10 [ 195.458045][T12064] ? __pfx__copy_from_iter+0x10/0x10 [ 195.458060][T12064] ? _copy_from_iter+0x270/0x1690 [ 195.458078][T12064] copy_page_from_iter+0x238/0x300 [ 195.458095][T12064] skb_copy_datagram_from_iter+0x399/0x720 [ 195.458113][T12064] tun_get_user+0x1889/0x3c20 [ 195.458131][T12064] ? __pfx_tun_get_user+0x10/0x10 [ 195.458143][T12064] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 195.458165][T12064] ? find_held_lock+0x2b/0x80 [ 195.458176][T12064] ? tun_get+0x191/0x370 [ 195.458185][T12064] ? tun_get+0x191/0x370 [ 195.458198][T12064] tun_chr_write_iter+0xdc/0x200 [ 195.458211][T12064] vfs_write+0x6ac/0x1050 [ 195.458222][T12064] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 195.458235][T12064] ? __pfx_vfs_write+0x10/0x10 [ 195.458244][T12064] ? find_held_lock+0x2b/0x80 [ 195.458262][T12064] ksys_write+0x12a/0x250 [ 195.458271][T12064] ? __pfx_ksys_write+0x10/0x10 [ 195.458284][T12064] do_syscall_64+0x115/0x870 [ 195.458297][T12064] ? clear_bhb_loop+0x70/0xc0 [ 195.458311][T12064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.458321][T12064] RIP: 0033:0x7fd2a0f9e0d9 [ 195.458331][T12064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.458342][T12064] RSP: 002b:00007fd2a1f4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 195.458354][T12064] RAX: ffffffffffffffda RBX: 00007fd2a1225fa0 RCX: 00007fd2a0f9e0d9 [ 195.458361][T12064] RDX: 000000000000ffdd RSI: 0000200000000200 RDI: 0000000000000003 [ 195.458367][T12064] RBP: 00007fd2a1f4e090 R08: 0000000000000000 R09: 0000000000000000 [ 195.458374][T12064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 195.458380][T12064] R13: 00007fd2a1226038 R14: 00007fd2a1225fa0 R15: 00007fff1d425b48 [ 195.458394][T12064] [ 195.596686][T12072] siw: device registration error -23 [ 195.852804][T12085] syz.9.2004: attempt to access beyond end of device [ 195.852804][T12085] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 195.862509][T12095] FAULT_INJECTION: forcing a failure. [ 195.862509][T12095] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.872576][T12085] gfs2: error -5 reading superblock [ 195.891529][T12095] CPU: 0 UID: 0 PID: 12095 Comm: syz.8.2006 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.891549][T12095] Tainted: [L]=SOFTLOCKUP [ 195.891554][T12095] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 195.891560][T12095] Call Trace: [ 195.891565][T12095] [ 195.891569][T12095] dump_stack_lvl+0x100/0x190 [ 195.891590][T12095] should_fail_ex.cold+0x5/0xa [ 195.891605][T12095] _copy_from_iter+0x1f4/0x1690 [ 195.891625][T12095] ? __pfx__copy_from_iter+0x10/0x10 [ 195.891640][T12095] ? trace_kmalloc+0xeb/0x110 [ 195.891656][T12095] ? __kasan_kmalloc+0xaa/0xb0 [ 195.891669][T12095] ? __kmalloc_noprof+0x343/0x820 [ 195.891683][T12095] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 195.891710][T12095] kernfs_fop_write_iter+0x186/0x5f0 [ 195.891727][T12095] vfs_write+0x6ac/0x1050 [ 195.891738][T12095] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 195.891755][T12095] ? __pfx_vfs_write+0x10/0x10 [ 195.891773][T12095] ksys_write+0x12a/0x250 [ 195.891783][T12095] ? __pfx_ksys_write+0x10/0x10 [ 195.891797][T12095] do_syscall_64+0x115/0x870 [ 195.891810][T12095] ? clear_bhb_loop+0x70/0xc0 [ 195.891823][T12095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.891834][T12095] RIP: 0033:0x7f23f199e0d9 [ 195.891845][T12095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.891860][T12095] RSP: 002b:00007f23f28b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 195.891871][T12095] RAX: ffffffffffffffda RBX: 00007f23f1c25fa0 RCX: 00007f23f199e0d9 [ 195.891878][T12095] RDX: 0000000000000003 RSI: 0000200000000500 RDI: 0000000000000003 [ 195.891885][T12095] RBP: 00007f23f28b3090 R08: 0000000000000000 R09: 0000000000000000 [ 195.891891][T12095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.891898][T12095] R13: 00007f23f1c26038 R14: 00007f23f1c25fa0 R15: 00007ffedad68b18 [ 195.891911][T12095] [ 196.223441][T12122] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2008'. [ 196.232788][T12121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2014'. [ 196.240423][T12121] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 196.271650][T12118] ip_tables: iptables: counters copy to user failed while replacing table [ 196.274980][T12121] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12121 comm=syz.0.2014 [ 196.317473][T12121] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 196.406237][T12133] FAULT_INJECTION: forcing a failure. [ 196.406237][T12133] name failslab, interval 1, probability 0, space 0, times 0 [ 196.410598][T12133] CPU: 2 UID: 0 PID: 12133 Comm: syz.8.2018 Tainted: G L syzkaller #0 PREEMPT(full) [ 196.410616][T12133] Tainted: [L]=SOFTLOCKUP [ 196.410620][T12133] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 196.410627][T12133] Call Trace: [ 196.410632][T12133] [ 196.410636][T12133] dump_stack_lvl+0x100/0x190 [ 196.410656][T12133] should_fail_ex.cold+0x5/0xa [ 196.410668][T12133] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 196.410687][T12133] should_failslab+0xc2/0x120 [ 196.410703][T12133] kmem_cache_alloc_noprof+0x91/0x6a0 [ 196.410717][T12133] ? skb_clone+0x190/0x400 [ 196.410735][T12133] skb_clone+0x190/0x400 [ 196.410749][T12133] netlink_deliver_tap+0xaed/0xcc0 [ 196.410776][T12133] netlink_unicast+0x62b/0x850 [ 196.410790][T12133] ? __pfx_netlink_unicast+0x10/0x10 [ 196.410808][T12133] netlink_sendmsg+0x8b0/0xda0 [ 196.410823][T12133] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.410836][T12133] ? selinux_socket_sendmsg+0x198/0x2f0 [ 196.410855][T12133] ____sys_sendmsg+0xa4d/0xbe0 [ 196.410866][T12133] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.410878][T12133] ? __pfx_____sys_sendmsg+0x10/0x10 [ 196.410895][T12133] ___sys_sendmsg+0x190/0x1e0 [ 196.410906][T12133] ? __pfx____sys_sendmsg+0x10/0x10 [ 196.410917][T12133] ? __lock_acquire+0x49f/0x1a40 [ 196.410935][T12133] ? get_pid_task+0x106/0x250 [ 196.410960][T12133] __sys_sendmsg+0x160/0x210 [ 196.410975][T12133] ? __pfx___sys_sendmsg+0x10/0x10 [ 196.410997][T12133] do_syscall_64+0x115/0x870 [ 196.411010][T12133] ? clear_bhb_loop+0x70/0xc0 [ 196.411023][T12133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.411034][T12133] RIP: 0033:0x7f23f199e0d9 [ 196.411044][T12133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.411054][T12133] RSP: 002b:00007f23f28b3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.411066][T12133] RAX: ffffffffffffffda RBX: 00007f23f1c25fa0 RCX: 00007f23f199e0d9 [ 196.411073][T12133] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 196.411080][T12133] RBP: 00007f23f28b3090 R08: 0000000000000000 R09: 0000000000000000 [ 196.411086][T12133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.411111][T12133] R13: 00007f23f1c26038 R14: 00007f23f1c25fa0 R15: 00007ffedad68b18 [ 196.411127][T12133] [ 196.411140][T12133] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2018'. [ 196.547592][T12136] netlink: zone id is out of range [ 196.549564][T12136] netlink: zone id is out of range [ 196.551458][T12136] netlink: zone id is out of range [ 196.553232][T12136] netlink: zone id is out of range [ 196.555300][T12136] netlink: zone id is out of range [ 196.557620][T12136] netlink: zone id is out of range [ 196.695833][T12142] syzkaller0: entered promiscuous mode [ 196.698537][T12142] syzkaller0: entered allmulticast mode [ 196.726203][T12146] siw: device registration error -23 [ 196.904712][ C2] ata1: illegal qc_active transition (00000000->00002000) [ 197.241140][ T1127] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 197.246528][ T1127] ata1.00: configured for UDMA/100 [ 198.089947][T12169] siw: device registration error -23 [ 198.160214][T12171] net_ratelimit: 42 callbacks suppressed [ 198.160229][T12171] ip_tables: iptables: counters copy to user failed while replacing table [ 199.120131][ T42] kauditd_printk_skb: 12 callbacks suppressed [ 199.120151][ T42] audit: type=1400 audit(1786956581.556:888): avc: denied { write } for pid=12187 comm="syz.9.2037" name="/" dev="9p" ino=77361197 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 199.131931][ T42] audit: type=1400 audit(1786956581.556:889): avc: denied { create } for pid=12187 comm="syz.9.2037" name="blkio.bfq.idle_time" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 199.142029][ T42] audit: type=1400 audit(1786956581.576:890): avc: denied { read append open } for pid=12187 comm="syz.9.2037" path="/253/file0/blkio.bfq.idle_time" dev="9p" ino=77361115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 199.297480][T12195] netlink: 'syz.3.2039': attribute type 7 has an invalid length. [ 199.300853][T12195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2039'. [ 199.304620][T12195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2039'. [ 199.347809][T12199] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 199.353776][T12199] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 199.369163][T12192] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2038'. [ 199.369576][ T42] audit: type=1400 audit(1786956581.806:891): avc: denied { append } for pid=12201 comm="syz.3.2040" name="card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 199.467614][ T1127] ata1.00: exception Emask 0x0 SAct 0x2000 SErr 0x0 action 0x6 [ 199.470467][ T1127] ata1.00: waking up from sleep [ 199.472147][ T1127] ata1: hard resetting link [ 199.502227][ T42] audit: type=1400 audit(1786956581.936:892): avc: denied { map } for pid=12210 comm="syz.3.2044" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 199.517953][T12216] ip_tables: iptables: counters copy to user failed while replacing table [ 199.694018][T12226] syzkaller0: entered promiscuous mode [ 199.696072][T12226] syzkaller0: entered allmulticast mode [ 199.790558][ T1127] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 199.798078][ T1127] ata1.00: configured for UDMA/100 [ 199.800108][ T1127] ata1: EH complete [ 199.890288][T12234] syzkaller0: entered promiscuous mode [ 199.892046][T12234] syzkaller0: entered allmulticast mode [ 200.002161][T12239] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2054'. [ 200.050697][ T42] audit: type=1400 audit(1786956582.486:893): avc: denied { mount } for pid=12242 comm="syz.9.2055" name="/" dev="autofs" ino=42371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 200.062765][T12243] overlayfs: workdir and upperdir must reside under the same mount [ 200.065528][ T42] audit: type=1400 audit(1786956582.496:894): avc: denied { mounton } for pid=12242 comm="syz.9.2055" path="/258/file0" dev="autofs" ino=42371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 200.100659][ T42] audit: type=1400 audit(1786956582.536:895): avc: denied { unmount } for pid=9092 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 200.128149][T12245] FAULT_INJECTION: forcing a failure. [ 200.128149][T12245] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 200.132367][T12245] CPU: 0 UID: 0 PID: 12245 Comm: syz.9.2057 Tainted: G L syzkaller #0 PREEMPT(full) [ 200.132386][T12245] Tainted: [L]=SOFTLOCKUP [ 200.132390][T12245] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 200.132397][T12245] Call Trace: [ 200.132403][T12245] [ 200.132408][T12245] dump_stack_lvl+0x100/0x190 [ 200.132428][T12245] should_fail_ex.cold+0x5/0xa [ 200.132441][T12245] ? prepare_alloc_pages+0x16d/0x5f0 [ 200.132459][T12245] should_fail_alloc_page+0xeb/0x140 [ 200.132475][T12245] prepare_alloc_pages+0x1f0/0x5f0 [ 200.132492][T12245] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 200.132508][T12245] ? tomoyo_check_open_permission+0x1a2/0x3c0 [ 200.132539][T12245] ? look_up_lock_class+0x55/0x120 [ 200.132553][T12245] ? register_lock_class+0x40/0x560 [ 200.132567][T12245] ? find_held_lock+0x2b/0x80 [ 200.132577][T12245] ? ima_match_policy+0x8b8/0x2340 [ 200.132591][T12245] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 200.132608][T12245] ? __lock_acquire+0x49f/0x1a40 [ 200.132626][T12245] ? lock_acquire+0x1b9/0x370 [ 200.132639][T12245] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 200.132654][T12245] ? policy_nodemask+0xed/0x4f0 [ 200.132671][T12245] alloc_pages_mpol+0x1fb/0x540 [ 200.132686][T12245] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 200.132705][T12245] folio_alloc_mpol_noprof+0x36/0x260 [ 200.132723][T12245] vma_alloc_folio_noprof+0xed/0x1d0 [ 200.132740][T12245] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 200.132760][T12245] do_anonymous_page+0xb2b/0x2080 [ 200.132779][T12245] ? rcu_read_unlock+0x2d/0xb0 [ 200.132793][T12245] __handle_mm_fault+0x1d2c/0x2a00 [ 200.132805][T12245] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 200.132823][T12245] ? __pfx___handle_mm_fault+0x10/0x10 [ 200.132835][T12245] ? pte_offset_map_lock+0x174/0x320 [ 200.132849][T12245] ? find_held_lock+0x2b/0x80 [ 200.132862][T12245] ? follow_page_pte+0x4d0/0x13f0 [ 200.132879][T12245] handle_mm_fault+0x37b/0xa30 [ 200.132892][T12245] __get_user_pages+0x1178/0x32a0 [ 200.132916][T12245] ? __pfx___get_user_pages+0x10/0x10 [ 200.132934][T12245] faultin_page_range+0x1f1/0x9e0 [ 200.132953][T12245] madvise_do_behavior+0x354/0x510 [ 200.132970][T12245] ? __pfx_madvise_do_behavior+0x10/0x10 [ 200.132994][T12245] do_madvise+0x238/0x290 [ 200.133018][T12245] ? __pfx_do_madvise+0x10/0x10 [ 200.133037][T12245] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 200.133055][T12245] ? ksys_write+0x1ac/0x250 [ 200.133066][T12245] ? __pfx_ksys_write+0x10/0x10 [ 200.133078][T12245] __x64_sys_madvise+0xa9/0x110 [ 200.133094][T12245] ? lockdep_hardirqs_on+0x78/0x100 [ 200.133106][T12245] do_syscall_64+0x115/0x870 [ 200.133118][T12245] ? clear_bhb_loop+0x70/0xc0 [ 200.133131][T12245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.133143][T12245] RIP: 0033:0x7f1ced99e0d9 [ 200.133153][T12245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.133164][T12245] RSP: 002b:00007f1cee7de028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 200.133175][T12245] RAX: ffffffffffffffda RBX: 00007f1cedc25fa0 RCX: 00007f1ced99e0d9 [ 200.133182][T12245] RDX: 0000000000000017 RSI: 0000000000800000 RDI: 00002000000ec000 [ 200.133189][T12245] RBP: 00007f1cee7de090 R08: 0000000000000000 R09: 0000000000000000 [ 200.133195][T12245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 200.133201][T12245] R13: 00007f1cedc26038 R14: 00007f1cedc25fa0 R15: 00007ffc1bf7c6d8 [ 200.133215][T12245] [ 200.335429][T12252] team0 (unregistering): Port device team_slave_0 removed [ 200.346616][T12252] team0 (unregistering): Port device team_slave_1 removed [ 200.364475][T12254] syzkaller1: entered promiscuous mode [ 200.366137][T12254] syzkaller1: entered allmulticast mode [ 200.499316][ T42] audit: type=1400 audit(1786956582.936:896): avc: denied { firmware_load } for pid=12262 comm="syz.0.2063" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 200.546632][T12263] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 200.554662][T12263] syz.0.2063 (12263) used greatest stack depth: 19120 bytes left [ 200.591295][T12271] program syz.0.2066 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 200.637933][ T1127] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 200.642590][ T1127] ata1.00: irq_stat 0x40000000 [ 200.644245][ T1127] ata1.00: failed command: ZAC MANAGEMENT OUT [ 200.649815][ T1127] ata1.00: cmd 9f/01:00:00:00:00/00:00:00:00:00/40 tag 18 [ 200.649815][ T1127] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 200.656738][ T1127] ata1.00: status: { DRDY ERR } [ 200.658447][ T1127] ata1.00: error: { ABRT } [ 200.659962][ T1127] ata1.00: device reported invalid CHS sector 0 [ 200.798459][T12278] ip_tables: iptables: counters copy to user failed while replacing table [ 201.055757][T12254] Process accounting resumed [ 201.065032][T12280] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2067'. [ 201.080467][T12290] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 201.093936][T12290] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10616 sclass=netlink_route_socket pid=12290 comm=syz.9.2070 [ 201.158729][T12292] FAULT_INJECTION: forcing a failure. [ 201.158729][T12292] name failslab, interval 1, probability 0, space 0, times 0 [ 201.162948][T12292] CPU: 0 UID: 0 PID: 12292 Comm: syz.9.2071 Tainted: G L syzkaller #0 PREEMPT(full) [ 201.162967][T12292] Tainted: [L]=SOFTLOCKUP [ 201.162971][T12292] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 201.162978][T12292] Call Trace: [ 201.162983][T12292] [ 201.162988][T12292] dump_stack_lvl+0x100/0x190 [ 201.163009][T12292] should_fail_ex.cold+0x5/0xa [ 201.163024][T12292] should_failslab+0xc2/0x120 [ 201.163040][T12292] kmem_cache_alloc_noprof+0x91/0x6a0 [ 201.163054][T12292] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 201.163103][T12292] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 201.163121][T12292] mmu_topup_memory_caches+0x25/0x170 [ 201.163145][T12292] kvm_mmu_load+0xe2/0x2570 [ 201.163160][T12292] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 201.163173][T12292] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 201.163186][T12292] ? __pfx_kvm_mmu_load+0x10/0x10 [ 201.163200][T12292] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 201.163214][T12292] ? kvm_check_and_inject_events+0x873/0x12a0 [ 201.163230][T12292] ? record_steal_time+0x3a0/0xbb0 [ 201.163244][T12292] vcpu_run+0x3aaa/0x5de0 [ 201.163265][T12292] ? __pfx_vcpu_run+0x10/0x10 [ 201.163286][T12292] ? rcu_is_watching+0x12/0xc0 [ 201.163306][T12292] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 201.163322][T12292] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 201.163341][T12292] kvm_vcpu_ioctl+0x730/0x1700 [ 201.163355][T12292] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 201.163368][T12292] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 201.163383][T12292] ? do_vfs_ioctl+0x226/0x13e0 [ 201.163399][T12292] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 201.163415][T12292] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 201.163437][T12292] ? __fget_files+0x215/0x3d0 [ 201.163451][T12292] ? hook_file_ioctl_common+0x140/0x440 [ 201.163468][T12292] ? selinux_file_ioctl+0x13b/0x290 [ 201.163484][T12292] ? selinux_file_ioctl+0xb6/0x290 [ 201.163501][T12292] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 201.163514][T12292] __x64_sys_ioctl+0x18e/0x210 [ 201.163531][T12292] do_syscall_64+0x115/0x870 [ 201.163545][T12292] ? clear_bhb_loop+0x70/0xc0 [ 201.163559][T12292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.163570][T12292] RIP: 0033:0x7f1ced99e0d9 [ 201.163580][T12292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.163591][T12292] RSP: 002b:00007f1cee7de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 201.163603][T12292] RAX: ffffffffffffffda RBX: 00007f1cedc25fa0 RCX: 00007f1ced99e0d9 [ 201.163610][T12292] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 201.163616][T12292] RBP: 00007f1cee7de090 R08: 0000000000000000 R09: 0000000000000000 [ 201.163623][T12292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 201.163629][T12292] R13: 00007f1cedc26038 R14: 00007f1cedc25fa0 R15: 00007ffc1bf7c6d8 [ 201.163643][T12292] [ 201.392290][T12300] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 201.624448][ T42] audit: type=1400 audit(1786956584.056:897): avc: denied { watch } for pid=12312 comm="syz.9.2077" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 201.690786][T12317] FAULT_INJECTION: forcing a failure. [ 201.690786][T12317] name failslab, interval 1, probability 0, space 0, times 0 [ 201.702609][T12317] CPU: 3 UID: 0 PID: 12317 Comm: syz.9.2078 Tainted: G L syzkaller #0 PREEMPT(full) [ 201.702652][T12317] Tainted: [L]=SOFTLOCKUP [ 201.702657][T12317] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 201.702667][T12317] Call Trace: [ 201.702673][T12317] [ 201.702679][T12317] dump_stack_lvl+0x100/0x190 [ 201.702706][T12317] should_fail_ex.cold+0x5/0xa [ 201.702726][T12317] should_failslab+0xc2/0x120 [ 201.702750][T12317] __kmalloc_cache_noprof+0x91/0x6c0 [ 201.702767][T12317] ? nfnetlink_rcv_batch+0x780/0x2880 [ 201.702792][T12317] nfnetlink_rcv_batch+0x780/0x2880 [ 201.702823][T12317] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 201.702843][T12317] ? find_held_lock+0x2b/0x80 [ 201.702869][T12317] ? avc_has_perm_noaudit+0x145/0x3b0 [ 201.702908][T12317] ? __nla_parse+0x40/0x60 [ 201.702927][T12317] nfnetlink_rcv+0x3bd/0x440 [ 201.702947][T12317] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 201.702972][T12317] netlink_unicast+0x585/0x850 [ 201.702992][T12317] ? __pfx_netlink_unicast+0x10/0x10 [ 201.703008][T12317] ? __pfx_sock_has_perm+0x10/0x10 [ 201.703031][T12317] netlink_sendmsg+0x8b0/0xda0 [ 201.703051][T12317] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.703102][T12317] ? selinux_socket_sendmsg+0x198/0x2f0 [ 201.703128][T12317] ____sys_sendmsg+0xa4d/0xbe0 [ 201.703146][T12317] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.703168][T12317] ? __pfx_____sys_sendmsg+0x10/0x10 [ 201.703196][T12317] ___sys_sendmsg+0x190/0x1e0 [ 201.703214][T12317] ? __pfx____sys_sendmsg+0x10/0x10 [ 201.703230][T12317] ? __lock_acquire+0x49f/0x1a40 [ 201.703264][T12317] ? get_pid_task+0x106/0x250 [ 201.703311][T12317] __sys_sendmsg+0x160/0x210 [ 201.703337][T12317] ? __pfx___sys_sendmsg+0x10/0x10 [ 201.703375][T12317] do_syscall_64+0x115/0x870 [ 201.703396][T12317] ? clear_bhb_loop+0x70/0xc0 [ 201.703416][T12317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.703433][T12317] RIP: 0033:0x7f1ced99e0d9 [ 201.703449][T12317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.703467][T12317] RSP: 002b:00007f1cee7de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 201.703486][T12317] RAX: ffffffffffffffda RBX: 00007f1cedc25fa0 RCX: 00007f1ced99e0d9 [ 201.703498][T12317] RDX: 0000000004040080 RSI: 0000200000000000 RDI: 0000000000000003 [ 201.703509][T12317] RBP: 00007f1cee7de090 R08: 0000000000000000 R09: 0000000000000000 [ 201.703520][T12317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.703531][T12317] R13: 00007f1cedc26038 R14: 00007f1cedc25fa0 R15: 00007ffc1bf7c6d8 [ 201.703553][T12317] [ 201.723733][T12319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2080'. [ 201.790541][T12323] netlink: 'syz.9.2082': attribute type 11 has an invalid length. [ 201.794674][T12319] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2080'. [ 201.884935][T12328] overlayfs: conflicting lowerdir path [ 202.029696][ C2] ata1: illegal qc_active transition (00000000->00004000) [ 202.360423][ T1127] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 202.367628][ T1127] ata1.00: configured for UDMA/100 [ 202.663451][T12346] ip_tables: iptables: counters copy to user failed while replacing table [ 202.742534][T12354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2092'. [ 202.745581][T12354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.752959][T12354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.847225][T12357] netlink: 'syz.8.2093': attribute type 19 has an invalid length. [ 202.936644][T12363] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2090'. [ 203.478496][T12387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2097'. [ 203.486425][T12387] netlink: 'syz.0.2097': attribute type 7 has an invalid length. [ 203.491141][T12387] netlink: 'syz.0.2097': attribute type 13 has an invalid length. [ 203.500799][T12387] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1537 sclass=netlink_route_socket pid=12387 comm=syz.0.2097 [ 203.819001][T12413] FAULT_INJECTION: forcing a failure. [ 203.819001][T12413] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.823262][T12413] CPU: 3 UID: 0 PID: 12413 Comm: syz.0.2099 Tainted: G L syzkaller #0 PREEMPT(full) [ 203.823280][T12413] Tainted: [L]=SOFTLOCKUP [ 203.823285][T12413] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 203.823292][T12413] Call Trace: [ 203.823296][T12413] [ 203.823301][T12413] dump_stack_lvl+0x100/0x190 [ 203.823321][T12413] should_fail_ex.cold+0x5/0xa [ 203.823337][T12413] _copy_from_iter+0x1f4/0x1690 [ 203.823356][T12413] ? __asan_memset+0x23/0x50 [ 203.823369][T12413] ? __pfx__copy_from_iter+0x10/0x10 [ 203.823384][T12413] ? __pfx___alloc_skb+0x10/0x10 [ 203.823403][T12413] netlink_sendmsg+0x808/0xda0 [ 203.823419][T12413] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.823433][T12413] ? selinux_socket_sendmsg+0x198/0x2f0 [ 203.823451][T12413] ____sys_sendmsg+0xa4d/0xbe0 [ 203.823462][T12413] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.823475][T12413] ? __pfx_____sys_sendmsg+0x10/0x10 [ 203.823491][T12413] ___sys_sendmsg+0x190/0x1e0 [ 203.823503][T12413] ? __pfx____sys_sendmsg+0x10/0x10 [ 203.823513][T12413] ? __lock_acquire+0x49f/0x1a40 [ 203.823527][T12413] ? get_pid_task+0x106/0x250 [ 203.823553][T12413] __sys_sendmsg+0x160/0x210 [ 203.823568][T12413] ? __pfx___sys_sendmsg+0x10/0x10 [ 203.823589][T12413] do_syscall_64+0x115/0x870 [ 203.823603][T12413] ? clear_bhb_loop+0x70/0xc0 [ 203.823616][T12413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.823627][T12413] RIP: 0033:0x7fd2a0f9e0d9 [ 203.823637][T12413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.823648][T12413] RSP: 002b:00007fd2a1f4e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.823673][T12413] RAX: ffffffffffffffda RBX: 00007fd2a1225fa0 RCX: 00007fd2a0f9e0d9 [ 203.823680][T12413] RDX: 0000000028008004 RSI: 0000200000003740 RDI: 0000000000000004 [ 203.823686][T12413] RBP: 00007fd2a1f4e090 R08: 0000000000000000 R09: 0000000000000000 [ 203.823693][T12413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.823699][T12413] R13: 00007fd2a1226038 R14: 00007fd2a1225fa0 R15: 00007fff1d425b48 [ 203.823713][T12413] [ 204.008146][T12422] siw: device registration error -23 [ 204.546740][ T5810] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 204.566185][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 204.569184][ T42] audit: type=1400 audit(1786956586.997:909): avc: denied { unmount } for pid=9092 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 204.696821][ T5810] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 204.706791][ T5810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.710122][ T5810] usb 5-1: Product: syz [ 204.711960][ T5810] usb 5-1: Manufacturer: syz [ 204.713942][ T5810] usb 5-1: SerialNumber: syz [ 204.718473][T12453] scsi_strcpy_devinfo: vendor string 'b~sb%`Qʮ~G|\D5X2aE' is too long [ 204.725795][T12453] scsi_strcpy_devinfo: vendor string 'b~sb%`Qʮ~G|\D5X2aE' is too long [ 204.800271][ T5811] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 204.840851][T12458] siw: device registration error -23 [ 204.951776][T12462] ubi0: attaching mtd0 [ 204.962853][T12462] ubi0: scanning is finished [ 204.964828][T12462] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 205.161739][T12462] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 205.244116][ T5810] usb 5-1: USB disconnect, device number 13 [ 205.336842][T12468] __nla_validate_parse: 1 callbacks suppressed [ 205.336863][T12468] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2117'. [ 205.385106][T12470] FAULT_INJECTION: forcing a failure. [ 205.385106][T12470] name failslab, interval 1, probability 0, space 0, times 0 [ 205.390084][T12470] CPU: 0 UID: 0 PID: 12470 Comm: syz.8.2118 Tainted: G L syzkaller #0 PREEMPT(full) [ 205.390103][T12470] Tainted: [L]=SOFTLOCKUP [ 205.390107][T12470] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 205.390113][T12470] Call Trace: [ 205.390118][T12470] [ 205.390122][T12470] dump_stack_lvl+0x100/0x190 [ 205.390143][T12470] should_fail_ex.cold+0x5/0xa [ 205.390158][T12470] should_failslab+0xc2/0x120 [ 205.390174][T12470] kmem_cache_alloc_noprof+0x91/0x6a0 [ 205.390188][T12470] ? __kernfs_new_node+0xd2/0xa10 [ 205.390205][T12470] __kernfs_new_node+0xd2/0xa10 [ 205.390220][T12470] ? __pfx___kernfs_new_node+0x10/0x10 [ 205.390237][T12470] ? find_held_lock+0x2b/0x80 [ 205.390248][T12470] ? kernfs_root+0xee/0x2a0 [ 205.390259][T12470] ? kernfs_root+0xee/0x2a0 [ 205.390274][T12470] kernfs_create_dir_ns+0xa6/0x2b0 [ 205.390291][T12470] internal_create_group+0x36f/0xfb0 [ 205.390308][T12470] ? __pfx_internal_create_group+0x10/0x10 [ 205.390322][T12470] ? kernfs_create_link+0x1bd/0x240 [ 205.390341][T12470] internal_create_groups+0x9d/0x150 [ 205.390354][T12470] device_add+0x7c8/0x1970 [ 205.391647][T12470] ? __pfx_device_add+0x10/0x10 [ 205.391663][T12470] ? lockdep_init_map_type+0x5c/0x250 [ 205.391678][T12470] ? __init_waitqueue_head+0xca/0x150 [ 205.391704][T12470] netdev_register_kobject+0x1df/0x410 [ 205.391731][T12470] register_netdevice+0x15b6/0x25a0 [ 205.391750][T12470] ? __pfx_register_netdevice+0x10/0x10 [ 205.391769][T12470] bond_newlink+0x6a/0x100 [ 205.391796][T12470] ? __pfx_bond_newlink+0x10/0x10 [ 205.391807][T12470] rtnl_newlink+0x1499/0x2380 [ 205.391829][T12470] ? __pfx_rtnl_newlink+0x10/0x10 [ 205.391843][T12470] ? find_held_lock+0x2b/0x80 [ 205.391852][T12470] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 205.391867][T12470] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 205.391882][T12470] ? avc_has_perm_noaudit+0x145/0x3b0 [ 205.391906][T12470] ? find_held_lock+0x2b/0x80 [ 205.391915][T12470] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 205.391930][T12470] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 205.391946][T12470] ? __pfx_rtnl_newlink+0x10/0x10 [ 205.391961][T12470] rtnetlink_rcv_msg+0x95e/0xe90 [ 205.391978][T12470] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 205.391997][T12470] ? ref_tracker_free+0x37e/0x6c0 [ 205.392016][T12470] netlink_rcv_skb+0x159/0x420 [ 205.392029][T12470] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 205.392045][T12470] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 205.392062][T12470] ? netlink_deliver_tap+0x1ae/0xcc0 [ 205.392076][T12470] netlink_unicast+0x585/0x850 [ 205.392090][T12470] ? __pfx_netlink_unicast+0x10/0x10 [ 205.392106][T12470] netlink_sendmsg+0x8b0/0xda0 [ 205.392121][T12470] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.392134][T12470] ? selinux_socket_sendmsg+0x198/0x2f0 [ 205.392153][T12470] ____sys_sendmsg+0xa4d/0xbe0 [ 205.392163][T12470] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.392176][T12470] ? __pfx_____sys_sendmsg+0x10/0x10 [ 205.392193][T12470] ___sys_sendmsg+0x190/0x1e0 [ 205.392205][T12470] ? __pfx____sys_sendmsg+0x10/0x10 [ 205.392215][T12470] ? __lock_acquire+0x49f/0x1a40 [ 205.392229][T12470] ? get_pid_task+0x106/0x250 [ 205.392256][T12470] __sys_sendmsg+0x160/0x210 [ 205.392270][T12470] ? __pfx___sys_sendmsg+0x10/0x10 [ 205.392293][T12470] do_syscall_64+0x115/0x870 [ 205.392307][T12470] ? clear_bhb_loop+0x70/0xc0 [ 205.392321][T12470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.392333][T12470] RIP: 0033:0x7f23f199e0d9 [ 205.392344][T12470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.392355][T12470] RSP: 002b:00007f23f28b3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.392367][T12470] RAX: ffffffffffffffda RBX: 00007f23f1c25fa0 RCX: 00007f23f199e0d9 [ 205.392374][T12470] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 205.392381][T12470] RBP: 00007f23f28b3090 R08: 0000000000000000 R09: 0000000000000000 [ 205.392387][T12470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 205.392393][T12470] R13: 00007f23f1c26038 R14: 00007f23f1c25fa0 R15: 00007ffedad68b18 [ 205.392407][T12470] [ 205.528488][T12470] bond3 (unregistered): Released all slaves [ 205.607809][T12475] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 205.664220][T12475] tipc: Enabling of bearer rejected, failed to enable media [ 205.781839][T12482] siw: device registration error -23 [ 205.867433][ T5811] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 205.868757][ T1127] ata1.00: exception Emask 0x0 SAct 0x10000000 SErr 0x0 action 0x6 [ 205.869913][ T5811] ath9k_htc: Failed to initialize the device [ 205.873241][ T1127] ata1.00: waking up from sleep [ 205.875961][ T1127] ata1: hard resetting link [ 205.880905][ T5810] usb 5-1: ath9k_htc: USB layer deinitialized [ 205.900220][ T42] audit: type=1400 audit(1786956588.337:910): avc: denied { read write } for pid=12486 comm="syz.0.2125" name="mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 205.916246][ T42] audit: type=1400 audit(1786956588.337:911): avc: denied { open } for pid=12486 comm="syz.0.2125" path="/dev/mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 205.929990][T12491] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2124'. [ 205.982187][T12493] geneve2: entered allmulticast mode [ 206.018642][ T42] audit: type=1400 audit(1786956588.457:912): avc: denied { ioctl } for pid=12486 comm="syz.0.2125" path="/dev/mtd0" dev="devtmpfs" ino=714 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 206.061488][ T42] audit: type=1400 audit(1786956588.497:913): avc: denied { write } for pid=12496 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.132837][ T42] audit: type=1400 audit(1786956588.567:914): avc: denied { write } for pid=12501 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.197331][ T1127] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 206.204539][ T1127] ata1.00: configured for UDMA/100 [ 206.210661][ T1127] ata1: EH complete [ 206.290808][ T42] audit: type=1400 audit(1786956588.727:915): avc: denied { write } for pid=12504 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.341117][ T42] audit: type=1400 audit(1786956588.777:916): avc: denied { getopt } for pid=12507 comm="syz.8.2127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 206.433030][ T42] audit: type=1400 audit(1786956588.867:917): avc: denied { write } for pid=12509 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.497962][T12514] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2129'. [ 206.600617][T12521] binder: BINDER_SET_CONTEXT_MGR already set [ 206.613055][T12521] binder: 12520:12521 ioctl 4018620d 200000000340 returned -16 [ 206.846573][ T1127] ata1.00: exception Emask 0x0 SAct 0x40000000 SErr 0x0 action 0x6 [ 206.851600][ T1127] ata1.00: waking up from sleep [ 206.857111][ T1127] ata1: hard resetting link [ 206.859523][T12538] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2137'. [ 206.880657][ T42] audit: type=1400 audit(1786956589.317:918): avc: denied { listen } for pid=12537 comm="syz.8.2137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 207.030978][T12548] input input20: cannot allocate more than FF_MAX_EFFECTS effects [ 207.094397][T12550] 8021q: VLANs not supported on ip6_vti0 [ 207.099754][T12549] 8021q: VLANs not supported on ip6_vti0 [ 207.177748][ T1127] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 207.183329][ T1127] ata1.00: configured for UDMA/100 [ 207.187283][ T1127] ata1: EH complete [ 207.394346][T12557] ip_tables: iptables: counters copy to user failed while replacing table [ 207.526810][T12564] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2143'. [ 208.156704][T12580] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 208.299610][T12591] syzkaller0: entered promiscuous mode [ 208.301985][T12591] syzkaller0: entered allmulticast mode [ 208.305167][T12591] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 65487 [ 208.418172][T12597] syzkaller0: entered promiscuous mode [ 208.424542][T12597] syzkaller0: entered allmulticast mode [ 208.430998][T12597] FAULT_INJECTION: forcing a failure. [ 208.430998][T12597] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.436951][T12597] CPU: 3 UID: 0 PID: 12597 Comm: syz.8.2155 Tainted: G L syzkaller #0 PREEMPT(full) [ 208.436979][T12597] Tainted: [L]=SOFTLOCKUP [ 208.436985][T12597] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 208.436995][T12597] Call Trace: [ 208.437001][T12597] [ 208.437008][T12597] dump_stack_lvl+0x100/0x190 [ 208.437098][T12597] should_fail_ex.cold+0x5/0xa [ 208.437140][T12597] _copy_from_iter+0x1f4/0x1690 [ 208.437192][T12597] ? _copy_from_iter+0x270/0x1690 [ 208.437216][T12597] ? __pfx__copy_from_iter+0x10/0x10 [ 208.437242][T12597] ? __pfx__copy_from_iter+0x10/0x10 [ 208.437267][T12597] ? _copy_from_iter+0x270/0x1690 [ 208.437294][T12597] copy_page_from_iter+0x238/0x300 [ 208.437320][T12597] skb_copy_datagram_from_iter+0x399/0x720 [ 208.437385][T12597] tun_get_user+0x1889/0x3c20 [ 208.437440][T12597] ? __pfx_tun_get_user+0x10/0x10 [ 208.437454][T12597] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 208.437495][T12597] ? find_held_lock+0x2b/0x80 [ 208.437530][T12597] ? tun_get+0x191/0x370 [ 208.437540][T12597] ? tun_get+0x191/0x370 [ 208.437561][T12597] tun_chr_write_iter+0xdc/0x200 [ 208.437581][T12597] vfs_write+0x6ac/0x1050 [ 208.437614][T12597] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 208.437630][T12597] ? __pfx_vfs_write+0x10/0x10 [ 208.437643][T12597] ? find_held_lock+0x2b/0x80 [ 208.437672][T12597] ksys_write+0x12a/0x250 [ 208.437688][T12597] ? __pfx_ksys_write+0x10/0x10 [ 208.437710][T12597] do_syscall_64+0x115/0x870 [ 208.437768][T12597] ? clear_bhb_loop+0x70/0xc0 [ 208.437789][T12597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.437805][T12597] RIP: 0033:0x7f23f199e0d9 [ 208.437821][T12597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.437832][T12597] RSP: 002b:00007f23f28b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 208.437858][T12597] RAX: ffffffffffffffda RBX: 00007f23f1c25fa0 RCX: 00007f23f199e0d9 [ 208.437869][T12597] RDX: 000000000000ffdd RSI: 0000200000000200 RDI: 0000000000000003 [ 208.437879][T12597] RBP: 00007f23f28b3090 R08: 0000000000000000 R09: 0000000000000000 [ 208.437889][T12597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 208.437899][T12597] R13: 00007f23f1c26038 R14: 00007f23f1c25fa0 R15: 00007ffedad68b18 [ 208.437922][T12597] [ 208.649976][ T1127] ata1.00: exception Emask 0x0 SAct 0x2 SErr 0x0 action 0x6 [ 208.653165][ T1127] ata1.00: waking up from sleep [ 208.659944][ T1127] ata1: hard resetting link [ 208.835032][ T9038] cgroup: fork rejected by pids controller in /syz8 [ 208.980640][ T1127] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 209.003433][ T1127] ata1.00: configured for UDMA/100 [ 209.005524][ T1127] ata1: EH complete [ 209.184051][T12626] ip_tables: iptables: counters copy to user failed while replacing table [ 209.356438][ T5733] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 209.365140][ T5733] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 209.368370][ T5733] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 209.371727][ T5733] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 209.374324][ T5733] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 209.669800][T12642] siw: device registration error -23 [ 209.677546][T12629] lo speed is unknown, defaulting to 1000 [ 209.938123][T12654] binder: 12650:12654 ioctl c0306201 2000000001c0 returned -14 [ 210.010306][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 210.010318][ T42] audit: type=1400 audit(1786956592.447:926): avc: denied { node_bind } for pid=12658 comm="syz.0.2169" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 210.020679][T12629] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.024218][T12659] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12659 comm=syz.0.2169 [ 210.027877][T12629] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.036582][T12629] bridge_slave_0: entered allmulticast mode [ 210.042343][T12629] bridge_slave_0: entered promiscuous mode [ 210.057136][T12629] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.065662][T12629] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.068206][T12629] bridge_slave_1: entered allmulticast mode [ 210.070958][T12629] bridge_slave_1: entered promiscuous mode [ 210.090679][T12629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.099337][T12629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.114878][T12629] team0: Port device team_slave_0 added [ 210.119230][T12629] team0: Port device team_slave_1 added [ 210.135026][T12629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.137617][T12629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.145134][T12629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.149592][T12629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.151864][T12629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.159876][T12629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.194567][T12629] hsr_slave_0: entered promiscuous mode [ 210.197145][T12629] hsr_slave_1: entered promiscuous mode [ 210.199999][T12629] debugfs: 'hsr0' already exists in 'hsr' [ 210.202320][T12629] Cannot create hsr debugfs directory [ 210.372812][T12629] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.474163][T12629] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.562883][T12629] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.773181][T12629] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.983641][T12629] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 210.992247][T12629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 210.998041][T12629] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 211.004432][T12629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 211.008525][T12629] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 211.014305][T12629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 211.022766][T12629] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 211.029882][T12629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 211.118877][T12629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.133683][T12629] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.142346][ T110] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.144708][ T110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.159227][ T110] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.161464][ T110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.476589][ T64] Bluetooth: hci3: command tx timeout [ 211.512784][T12679] IPVS: rr: UDP 127.0.0.1:10000 - no destination available [ 211.546263][ T1127] ata1.00: exception Emask 0x0 SAct 0x1000 SErr 0x0 action 0x6 [ 211.550203][ T1127] ata1.00: waking up from sleep [ 211.552353][ T1127] ata1: hard resetting link [ 211.617634][T12629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.633342][T12704] ip_tables: iptables: counters copy to user failed while replacing table [ 211.646533][ T42] audit: type=1400 audit(1786956594.088:927): avc: denied { name_bind } for pid=12702 comm="syz.0.2178" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 211.801403][T12629] veth0_vlan: entered promiscuous mode [ 211.809572][T12629] veth1_vlan: entered promiscuous mode [ 211.850423][T12629] veth0_macvtap: entered promiscuous mode [ 211.857638][T12629] veth1_macvtap: entered promiscuous mode [ 211.872296][T12629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.884294][T12629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.888001][ T1127] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 211.891661][ T1127] ata1.00: configured for UDMA/100 [ 211.893471][ T1127] ata1: EH complete [ 211.958318][ T8269] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.974761][ T8269] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.041524][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.045478][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.055622][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.082758][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.087104][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.093569][ T42] audit: type=1400 audit(1786956594.528:928): avc: denied { mounton } for pid=12629 comm="syz-executor" path="/syzkaller.BVSsrr/syz-tmp" dev="sda1" ino=2045 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 212.095463][ T5803] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.118816][ T42] audit: type=1400 audit(1786956594.558:929): avc: denied { mounton } for pid=12629 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 212.157078][T12715] FAULT_INJECTION: forcing a failure. [ 212.157078][T12715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.161700][T12715] CPU: 2 UID: 0 PID: 12715 Comm: syz.8.2163 Tainted: G L syzkaller #0 PREEMPT(full) [ 212.161721][T12715] Tainted: [L]=SOFTLOCKUP [ 212.161725][T12715] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 212.161732][T12715] Call Trace: [ 212.161737][T12715] [ 212.161742][T12715] dump_stack_lvl+0x100/0x190 [ 212.161774][T12715] should_fail_ex.cold+0x5/0xa [ 212.161795][T12715] _copy_from_user+0x2e/0xd0 [ 212.161838][T12715] kstrtouint_from_user+0xd6/0x1d0 [ 212.161858][T12715] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 212.161877][T12715] ? __lock_acquire+0x49f/0x1a40 [ 212.161909][T12715] proc_fail_nth_write+0x83/0x220 [ 212.161941][T12715] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 212.161966][T12715] vfs_write+0x2aa/0x1050 [ 212.161986][T12715] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 212.162008][T12715] ? __pfx_vfs_write+0x10/0x10 [ 212.162024][T12715] ? __fget_files+0x215/0x3d0 [ 212.162047][T12715] ? __fget_files+0x21f/0x3d0 [ 212.162072][T12715] ksys_write+0x12a/0x250 [ 212.162088][T12715] ? __pfx_ksys_write+0x10/0x10 [ 212.162110][T12715] do_syscall_64+0x115/0x870 [ 212.162131][T12715] ? clear_bhb_loop+0x70/0xc0 [ 212.162153][T12715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.162170][T12715] RIP: 0033:0x7f944555e90e [ 212.162186][T12715] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 212.162202][T12715] RSP: 002b:00007f94463bcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 212.162221][T12715] RAX: ffffffffffffffda RBX: 00007f94463bd6c0 RCX: 00007f944555e90e [ 212.162232][T12715] RDX: 0000000000000001 RSI: 00007f94463bd0a0 RDI: 0000000000000004 [ 212.162242][T12715] RBP: 00007f94463bd090 R08: 0000000000000000 R09: 0000000000000000 [ 212.162252][T12715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 212.162262][T12715] R13: 00007f9445826038 R14: 00007f9445825fa0 R15: 00007ffcfbb8e1a8 [ 212.162286][T12715] [ 212.398084][T12725] gfs2: error -5 reading superblock [ 212.441813][T12727] cgroup: Invalid name [ 212.441862][ T42] audit: type=1400 audit(1786956594.878:930): avc: denied { mounton } for pid=12726 comm="syz.8.2184" path="/4/file3" dev="tmpfs" ino=39 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 212.458589][T12727] openvswitch: netlink: IPv4 tunnel dst address is zero [ 212.467051][T12727] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.551639][T12735] db_root: cannot open: IMIX 'CD' 00000000000000000768 [ 212.577919][ T1127] ata1.00: exception Emask 0x0 SAct 0x10 SErr 0x0 action 0x6 [ 212.580563][ T1127] ata1.00: waking up from sleep [ 212.582237][ T1127] ata1: hard resetting link [ 212.785883][T12744] FAULT_INJECTION: forcing a failure. [ 212.785883][T12744] name failslab, interval 1, probability 0, space 0, times 0 [ 212.789864][T12744] CPU: 3 UID: 0 PID: 12744 Comm: syz.9.2191 Tainted: G L syzkaller #0 PREEMPT(full) [ 212.789882][T12744] Tainted: [L]=SOFTLOCKUP [ 212.789886][T12744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 212.789894][T12744] Call Trace: [ 212.789903][T12744] [ 212.789908][T12744] dump_stack_lvl+0x100/0x190 [ 212.789972][T12744] should_fail_ex.cold+0x5/0xa [ 212.789999][T12744] should_failslab+0xc2/0x120 [ 212.790035][T12744] kmem_cache_alloc_noprof+0x91/0x6a0 [ 212.790054][T12744] ? __kernfs_new_node+0xd2/0xa10 [ 212.790078][T12744] __kernfs_new_node+0xd2/0xa10 [ 212.790094][T12744] ? __pfx___kernfs_new_node+0x10/0x10 [ 212.790111][T12744] ? find_held_lock+0x2b/0x80 [ 212.790131][T12744] ? kernfs_root+0xee/0x2a0 [ 212.790142][T12744] ? kernfs_root+0xee/0x2a0 [ 212.790156][T12744] kernfs_new_node+0x117/0x150 [ 212.790173][T12744] __kernfs_create_file+0x53/0x350 [ 212.790192][T12744] sysfs_add_file_mode_ns+0x207/0x3c0 [ 212.790208][T12744] internal_create_group+0x593/0xfb0 [ 212.790224][T12744] ? __pfx_internal_create_group+0x10/0x10 [ 212.790238][T12744] ? kernfs_create_link+0x1bd/0x240 [ 212.790257][T12744] internal_create_groups+0x9d/0x150 [ 212.790270][T12744] device_add+0x71a/0x1970 [ 212.790317][T12744] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 212.790344][T12744] ? __pfx_device_add+0x10/0x10 [ 212.790360][T12744] ? lockdep_init_map_type+0x5c/0x250 [ 212.790375][T12744] ? __init_waitqueue_head+0xca/0x150 [ 212.790414][T12744] netdev_register_kobject+0x1df/0x410 [ 212.790455][T12744] register_netdevice+0x15b6/0x25a0 [ 212.790479][T12744] ? __pfx_register_netdevice+0x10/0x10 [ 212.790498][T12744] bond_newlink+0x6a/0x100 [ 212.790529][T12744] ? __pfx_bond_newlink+0x10/0x10 [ 212.790540][T12744] rtnl_newlink+0x1499/0x2380 [ 212.790562][T12744] ? __pfx_rtnl_newlink+0x10/0x10 [ 212.790576][T12744] ? find_held_lock+0x2b/0x80 [ 212.790586][T12744] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 212.790620][T12744] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 212.790634][T12744] ? avc_has_perm_noaudit+0x145/0x3b0 [ 212.790659][T12744] ? find_held_lock+0x2b/0x80 [ 212.790668][T12744] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 212.790683][T12744] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 212.790699][T12744] ? __pfx_rtnl_newlink+0x10/0x10 [ 212.790714][T12744] rtnetlink_rcv_msg+0x95e/0xe90 [ 212.790731][T12744] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 212.790750][T12744] ? ref_tracker_free+0x37e/0x6c0 [ 212.790776][T12744] netlink_rcv_skb+0x159/0x420 [ 212.790798][T12744] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 212.790814][T12744] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 212.790831][T12744] ? netlink_deliver_tap+0x1ae/0xcc0 [ 212.790845][T12744] netlink_unicast+0x585/0x850 [ 212.790862][T12744] ? __pfx_netlink_unicast+0x10/0x10 [ 212.790878][T12744] netlink_sendmsg+0x8b0/0xda0 [ 212.790892][T12744] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.790905][T12744] ? selinux_socket_sendmsg+0x198/0x2f0 [ 212.790924][T12744] ____sys_sendmsg+0xa4d/0xbe0 [ 212.790936][T12744] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.790949][T12744] ? __pfx_____sys_sendmsg+0x10/0x10 [ 212.790966][T12744] ___sys_sendmsg+0x190/0x1e0 [ 212.790978][T12744] ? __pfx____sys_sendmsg+0x10/0x10 [ 212.790988][T12744] ? __lock_acquire+0x49f/0x1a40 [ 212.791002][T12744] ? get_pid_task+0x106/0x250 [ 212.791050][T12744] __sys_sendmsg+0x160/0x210 [ 212.791067][T12744] ? __pfx___sys_sendmsg+0x10/0x10 [ 212.791089][T12744] do_syscall_64+0x115/0x870 [ 212.791133][T12744] ? clear_bhb_loop+0x70/0xc0 [ 212.791147][T12744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.791158][T12744] RIP: 0033:0x7f1ced99e0d9 [ 212.791170][T12744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.791181][T12744] RSP: 002b:00007f1cee7de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 212.791199][T12744] RAX: ffffffffffffffda RBX: 00007f1cedc25fa0 RCX: 00007f1ced99e0d9 [ 212.791206][T12744] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 212.791212][T12744] RBP: 00007f1cee7de090 R08: 0000000000000000 R09: 0000000000000000 [ 212.791219][T12744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 212.791226][T12744] R13: 00007f1cedc26038 R14: 00007f1cedc25fa0 R15: 00007ffc1bf7c6d8 [ 212.791240][T12744] [ 212.792999][T12744] bond1 (unregistered): Released all slaves [ 212.896283][ T1127] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 212.963593][ T1127] ata1.00: configured for UDMA/100 [ 212.966201][ T1127] ata1: EH complete [ 213.012685][T12750] ip_tables: iptables: counters copy to user failed while replacing table [ 213.118346][T12755] syzkaller0: entered promiscuous mode [ 213.123880][T12755] syzkaller0: entered allmulticast mode [ 213.123926][ T42] audit: type=1400 audit(1786956595.558:931): avc: denied { execute } for pid=12756 comm="syz.0.2196" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 213.138332][T12757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2196'. [ 213.149189][ T42] audit: type=1400 audit(1786956595.588:932): avc: denied { create } for pid=12756 comm="syz.0.2196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 213.169183][ T42] audit: type=1400 audit(1786956595.588:933): avc: denied { setopt } for pid=12756 comm="syz.0.2196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 213.275329][ T6011] usb 14-1: new high-speed USB device number 3 using dummy_hcd [ 213.435752][ T6011] usb 14-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 213.441812][ T6011] usb 14-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 213.455266][ T6011] usb 14-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.459724][ T6011] usb 14-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 213.475483][ T6011] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.481883][ T6011] usb 14-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 213.486909][ T6011] usb 14-1: Product: syz [ 213.488741][ T6011] usb 14-1: Manufacturer: syz [ 213.507998][T12761] block nbd0: NBD_DISCONNECT [ 213.508799][ T6011] cdc_wdm 14-1:1.0: skipping garbage [ 213.511874][ T42] audit: type=1400 audit(1786956595.948:934): avc: denied { write } for pid=12760 comm="syz.0.2197" name="functions" dev="configfs" ino=9363 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 213.512301][ T6011] cdc_wdm 14-1:1.0: skipping garbage [ 213.521809][ T6011] cdc_wdm 14-1:1.0: cdc-wdm0: USB WDM device [ 213.525505][ T6011] cdc_wdm 14-1:1.0: Unknown control protocol [ 213.527278][ T42] audit: type=1400 audit(1786956595.968:935): avc: denied { write } for pid=12760 comm="syz.0.2197" name="c.1" dev="configfs" ino=35222 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 213.545515][ T64] Bluetooth: hci3: command tx timeout [ 213.588251][T12762] block nbd0: Disconnected due to user request. [ 213.600206][T12762] block nbd0: shutting down sockets [ 213.749882][T12761] configfs-gadget.g1 gadget.0: HOST MAC fa:0e:5c:d3:bf:c7 [ 213.753346][T12761] configfs-gadget.g1 gadget.0: MAC 86:cf:98:bf:01:59 [ 213.799315][T12761] configfs-gadget.g1 gadget.0: HOST MAC 0e:12:29:25:44:db [ 213.803254][T12761] configfs-gadget.g1 gadget.0: MAC 5e:0b:9e:89:25:28 [ 213.832665][ T5810] usb 14-1: USB disconnect, device number 3 [ 214.075602][ T5811] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 214.100380][T12777] program syz.9.2199 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 214.245656][ T5811] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 214.251742][ T5811] usb 5-1: Dual-Role OTG device on HNP port [ 214.255365][ T5811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.274021][ T5811] gspca_main: spca501-2.14.0 probing 0000:0000 [ 214.276620][ T5811] gspca_spca501: reg write: error -32 [ 214.278514][ T5811] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 214.281370][ T5811] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 214.288044][ T5811] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 214.427839][T12791] netlink: 'syz.8.2204': attribute type 1 has an invalid length. [ 214.437171][T12791] 8021q: VLANs not supported on vxcan0 [ 214.445865][ T1127] ata1.00: exception Emask 0x0 SAct 0x8 SErr 0x0 action 0x6 [ 214.458431][ T1127] ata1.00: waking up from sleep [ 214.460405][ T1127] ata1: hard resetting link [ 214.499886][ T5811] cdc_ncm 5-1:1.2: MAC-Address: fa:0e:5c:d3:bf:c7 [ 214.538518][T12797] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2204'. [ 214.631506][ T5811] cdc_ncm 5-1:1.2 usb2: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), fa:0e:5c:d3:bf:c7 [ 214.670965][ T5811] usb 5-1: No union descriptors [ 214.791541][ T1127] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 214.799927][ T1127] ata1.00: configured for UDMA/100 [ 214.803808][ T1127] ata1: EH complete [ 214.818408][T12814] nvme_fcloop: fcloop_set_cmd_drop: DROP: Starting at instance 0 of fabric opcode x1 drop +0 instances [ 214.895405][T12823] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 214.900042][T12823] overlayfs: overlapping lowerdir path [ 214.900132][T12824] overlayfs: conflicting lowerdir path [ 214.903752][T12827] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 214.910165][T12823] syzkaller0: entered promiscuous mode [ 214.912046][T12823] syzkaller0: entered allmulticast mode [ 215.076458][T12839] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 215.118556][T12839] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 215.143000][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 215.143033][ T42] audit: type=1400 audit(1786956597.578:947): avc: denied { write } for pid=12841 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.202553][ T42] audit: type=1400 audit(1786956597.638:948): avc: denied { write } for pid=12849 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.222663][T12852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.233448][T12852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.255807][T12857] team0 (unregistering): Port device team_slave_0 removed [ 215.270349][T12857] team0 (unregistering): Port device team_slave_1 removed [ 215.280678][ T42] audit: type=1400 audit(1786956597.718:949): avc: denied { create } for pid=12853 comm="syz.9.2216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 215.391360][T12867] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=12867 comm=syz.8.2217 [ 215.530152][ T42] audit: type=1400 audit(1786956597.968:950): avc: denied { write } for pid=12872 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.582259][ T42] audit: type=1400 audit(1786956598.018:951): avc: denied { write } for pid=12880 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.614352][T12883] FAULT_INJECTION: forcing a failure. [ 215.614352][T12883] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 215.620315][T12883] CPU: 3 UID: 0 PID: 12883 Comm: syz.9.2220 Tainted: G L syzkaller #0 PREEMPT(full) [ 215.620342][T12883] Tainted: [L]=SOFTLOCKUP [ 215.620349][T12883] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 215.620357][T12883] Call Trace: [ 215.620361][T12883] [ 215.620378][T12883] dump_stack_lvl+0x100/0x190 [ 215.620402][T12883] should_fail_ex.cold+0x5/0xa [ 215.620416][T12883] ? prepare_alloc_pages+0x16d/0x5f0 [ 215.620442][T12883] should_fail_alloc_page+0xeb/0x140 [ 215.620465][T12883] prepare_alloc_pages+0x1f0/0x5f0 [ 215.620492][T12883] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 215.620515][T12883] ? tomoyo_check_open_permission+0x1a2/0x3c0 [ 215.620561][T12883] ? look_up_lock_class+0x55/0x120 [ 215.620583][T12883] ? register_lock_class+0x40/0x560 [ 215.620607][T12883] ? find_held_lock+0x2b/0x80 [ 215.620623][T12883] ? ima_match_policy+0x8b8/0x2340 [ 215.620647][T12883] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 215.620674][T12883] ? __lock_acquire+0x49f/0x1a40 [ 215.620704][T12883] ? lock_acquire+0x1b9/0x370 [ 215.620726][T12883] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 215.620751][T12883] ? policy_nodemask+0xed/0x4f0 [ 215.620777][T12883] alloc_pages_mpol+0x1fb/0x540 [ 215.620802][T12883] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 215.620831][T12883] folio_alloc_mpol_noprof+0x36/0x260 [ 215.620865][T12883] vma_alloc_folio_noprof+0xed/0x1d0 [ 215.620892][T12883] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 215.620926][T12883] do_anonymous_page+0xb2b/0x2080 [ 215.620968][T12883] ? rcu_read_unlock+0x2d/0xb0 [ 215.620992][T12883] __handle_mm_fault+0x1d2c/0x2a00 [ 215.621012][T12883] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 215.621039][T12883] ? __pfx___handle_mm_fault+0x10/0x10 [ 215.621058][T12883] ? pte_offset_map_lock+0x174/0x320 [ 215.621082][T12883] ? find_held_lock+0x2b/0x80 [ 215.621104][T12883] ? follow_page_pte+0x4d0/0x13f0 [ 215.621131][T12883] handle_mm_fault+0x37b/0xa30 [ 215.621154][T12883] __get_user_pages+0x1178/0x32a0 [ 215.621189][T12883] ? __pfx___get_user_pages+0x10/0x10 [ 215.621220][T12883] faultin_page_range+0x1f1/0x9e0 [ 215.621251][T12883] madvise_do_behavior+0x354/0x510 [ 215.621279][T12883] ? __pfx_madvise_do_behavior+0x10/0x10 [ 215.621325][T12883] do_madvise+0x238/0x290 [ 215.621350][T12883] ? __pfx_do_madvise+0x10/0x10 [ 215.621379][T12883] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 215.621406][T12883] ? ksys_write+0x1ac/0x250 [ 215.621432][T12883] ? __pfx_ksys_write+0x10/0x10 [ 215.621454][T12883] __x64_sys_madvise+0xa9/0x110 [ 215.621480][T12883] ? lockdep_hardirqs_on+0x78/0x100 [ 215.621501][T12883] do_syscall_64+0x115/0x870 [ 215.621522][T12883] ? clear_bhb_loop+0x70/0xc0 [ 215.621544][T12883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.621562][T12883] RIP: 0033:0x7f1ced99e0d9 [ 215.621580][T12883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.621598][T12883] RSP: 002b:00007f1cee7de028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 215.621617][T12883] RAX: ffffffffffffffda RBX: 00007f1cedc25fa0 RCX: 00007f1ced99e0d9 [ 215.621630][T12883] RDX: 0000000000000017 RSI: 0000000000800000 RDI: 00002000000ec000 [ 215.621641][T12883] RBP: 00007f1cee7de090 R08: 0000000000000000 R09: 0000000000000000 [ 215.621651][T12883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 215.621661][T12883] R13: 00007f1cedc26038 R14: 00007f1cedc25fa0 R15: 00007ffc1bf7c6d8 [ 215.621685][T12883] [ 215.629645][ T64] Bluetooth: hci3: command tx timeout [ 215.804927][ T6011] usb 13-1: new high-speed USB device number 8 using dummy_hcd [ 215.975188][ T6011] usb 13-1: Using ep0 maxpacket: 8 [ 215.978409][ T6011] usb 13-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 215.991896][ T6011] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 215.996475][ T6011] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 216.000886][ T6011] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.009982][ T6011] usb 13-1: config 0 descriptor?? [ 216.020680][T12896] FAULT_INJECTION: forcing a failure. [ 216.020680][T12896] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 216.028015][T12896] CPU: 0 UID: 0 PID: 12896 Comm: syz.9.2222 Tainted: G L syzkaller #0 PREEMPT(full) [ 216.028044][T12896] Tainted: [L]=SOFTLOCKUP [ 216.028051][T12896] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 216.028076][T12896] Call Trace: [ 216.028083][T12896] [ 216.028090][T12896] dump_stack_lvl+0x100/0x190 [ 216.028182][T12896] should_fail_ex.cold+0x5/0xa [ 216.028218][T12896] ? prepare_alloc_pages+0x16d/0x5f0 [ 216.028273][T12896] should_fail_alloc_page+0xeb/0x140 [ 216.028307][T12896] prepare_alloc_pages+0x1f0/0x5f0 [ 216.028335][T12896] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 216.028360][T12896] ? tomoyo_check_open_permission+0x1a2/0x3c0 [ 216.028432][T12896] ? look_up_lock_class+0x55/0x120 [ 216.028503][T12896] ? register_lock_class+0x40/0x560 [ 216.028539][T12896] ? find_held_lock+0x2b/0x80 [ 216.028556][T12896] ? ima_match_policy+0x8b8/0x2340 [ 216.028580][T12896] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 216.028626][T12896] ? __lock_acquire+0x49f/0x1a40 [ 216.028660][T12896] ? lock_acquire+0x1b9/0x370 [ 216.028683][T12896] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 216.028727][T12896] ? policy_nodemask+0xed/0x4f0 [ 216.028755][T12896] alloc_pages_mpol+0x1fb/0x540 [ 216.028782][T12896] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 216.028814][T12896] folio_alloc_mpol_noprof+0x36/0x260 [ 216.028842][T12896] vma_alloc_folio_noprof+0xed/0x1d0 [ 216.028982][T12896] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 216.029013][T12896] do_anonymous_page+0xb2b/0x2080 [ 216.029044][T12896] ? rcu_read_unlock+0x2d/0xb0 [ 216.029064][T12896] __handle_mm_fault+0x1d2c/0x2a00 [ 216.029082][T12896] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 216.029107][T12896] ? __pfx___handle_mm_fault+0x10/0x10 [ 216.029124][T12896] ? pte_offset_map_lock+0x174/0x320 [ 216.029143][T12896] ? find_held_lock+0x2b/0x80 [ 216.029164][T12896] ? follow_page_pte+0x4d0/0x13f0 [ 216.029188][T12896] handle_mm_fault+0x37b/0xa30 [ 216.029208][T12896] __get_user_pages+0x1178/0x32a0 [ 216.029236][T12896] ? __pfx___get_user_pages+0x10/0x10 [ 216.029264][T12896] faultin_page_range+0x1f1/0x9e0 [ 216.029294][T12896] madvise_do_behavior+0x354/0x510 [ 216.029323][T12896] ? __pfx_madvise_do_behavior+0x10/0x10 [ 216.029359][T12896] do_madvise+0x238/0x290 [ 216.029383][T12896] ? __pfx_do_madvise+0x10/0x10 [ 216.029411][T12896] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 216.029443][T12896] ? ksys_write+0x1ac/0x250 [ 216.029469][T12896] ? __pfx_ksys_write+0x10/0x10 [ 216.029489][T12896] __x64_sys_madvise+0xa9/0x110 [ 216.029513][T12896] ? lockdep_hardirqs_on+0x78/0x100 [ 216.029533][T12896] do_syscall_64+0x115/0x870 [ 216.029550][T12896] ? clear_bhb_loop+0x70/0xc0 [ 216.029573][T12896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.029590][T12896] RIP: 0033:0x7f1ced99e0d9 [ 216.029605][T12896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.029619][T12896] RSP: 002b:00007f1cee7bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 216.029646][T12896] RAX: ffffffffffffffda RBX: 00007f1cedc26090 RCX: 00007f1ced99e0d9 [ 216.029656][T12896] RDX: 0000000000000017 RSI: 0000000000800000 RDI: 00002000000ec000 [ 216.029665][T12896] RBP: 00007f1cee7bd090 R08: 0000000000000000 R09: 0000000000000000 [ 216.029675][T12896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 216.029684][T12896] R13: 00007f1cedc26128 R14: 00007f1cedc26090 R15: 00007ffc1bf7c6d8 [ 216.029712][T12896] [ 216.254476][ T6011] iowarrior 13-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 216.269376][ T6011] usb 13-1: USB disconnect, device number 8 [ 216.537708][T12906] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 216.575468][ T5733] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 216.590503][ T5733] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 216.594811][ T5733] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 216.599550][ T5733] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 216.603312][ T5733] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 216.928812][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.958730][ T42] audit: type=1400 audit(1786956599.398:952): avc: denied { write } for pid=12919 comm="syz.0.2225" name="functions" dev="configfs" ino=9363 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 216.963183][T12908] lo speed is unknown, defaulting to 1000 [ 216.980348][ T42] audit: type=1400 audit(1786956599.418:953): avc: denied { write } for pid=12919 comm="syz.0.2225" name="c.1" dev="configfs" ino=35222 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 216.987883][ T42] audit: type=1400 audit(1786956599.418:954): avc: denied { write } for pid=12919 comm="syz.0.2225" name="c.1" dev="configfs" ino=35222 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 216.998207][T12920] syzkaller0: entered promiscuous mode [ 217.001546][T12920] syzkaller0: entered allmulticast mode [ 217.076971][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.124617][T12929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2228'. [ 217.128696][ T42] audit: type=1400 audit(1786956599.568:955): avc: denied { ioctl } for pid=12925 comm="syz.8.2227" path="socket:[45608]" dev="sockfs" ino=45608 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 217.135030][T12929] netlink: 'syz.0.2228': attribute type 10 has an invalid length. [ 217.141473][T12929] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2228'. [ 217.191717][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.292471][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.345367][T12908] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.354813][T12908] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.357581][T12908] bridge_slave_0: entered allmulticast mode [ 217.368963][T12908] bridge_slave_0: entered promiscuous mode [ 217.379534][T12908] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.382733][T12908] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.386715][T12908] bridge_slave_1: entered allmulticast mode [ 217.391999][T12908] bridge_slave_1: entered promiscuous mode [ 217.438575][T12908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.451715][T12908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.543084][T12908] team0: Port device team_slave_0 added [ 217.553709][T12908] team0: Port device team_slave_1 added [ 217.618663][T12908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.623276][T12908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.632033][T12908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.637357][T12908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.639642][T12908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.648574][T12908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.688470][T12958] FAULT_INJECTION: forcing a failure. [ 217.688470][T12958] name failslab, interval 1, probability 0, space 0, times 0 [ 217.697623][ T13] bridge_slave_1: left allmulticast mode [ 217.700136][ T13] bridge_slave_1: left promiscuous mode [ 217.703386][T12958] CPU: 0 UID: 0 PID: 12958 Comm: syz.9.2234 Tainted: G L syzkaller #0 PREEMPT(full) [ 217.703405][T12958] Tainted: [L]=SOFTLOCKUP [ 217.703409][T12958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 217.703416][T12958] Call Trace: [ 217.703421][T12958] [ 217.703426][T12958] dump_stack_lvl+0x100/0x190 [ 217.703445][T12958] should_fail_ex.cold+0x5/0xa [ 217.703461][T12958] should_failslab+0xc2/0x120 [ 217.703476][T12958] __kmalloc_noprof+0xfc/0x820 [ 217.703490][T12958] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 217.703540][T12958] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 217.703558][T12958] genl_family_rcv_msg_doit+0xc7/0x300 [ 217.703573][T12958] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 217.703592][T12958] ? bpf_lsm_capable+0x9/0x10 [ 217.703611][T12958] ? security_capable+0x80/0x260 [ 217.703640][T12958] ? ns_capable+0xd2/0xf0 [ 217.703662][T12958] genl_rcv_msg+0x560/0x800 [ 217.703677][T12958] ? __pfx_genl_rcv_msg+0x10/0x10 [ 217.703691][T12958] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 217.703718][T12958] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 217.703734][T12958] ? __pfx_nl80211_post_doit+0x10/0x10 [ 217.703752][T12958] netlink_rcv_skb+0x159/0x420 [ 217.703768][T12958] ? __pfx_genl_rcv_msg+0x10/0x10 [ 217.703783][T12958] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 217.703800][T12958] ? netlink_deliver_tap+0x1ae/0xcc0 [ 217.703813][T12958] genl_rcv+0x28/0x40 [ 217.703825][T12958] netlink_unicast+0x585/0x850 [ 217.703839][T12958] ? __pfx_netlink_unicast+0x10/0x10 [ 217.703855][T12958] netlink_sendmsg+0x8b0/0xda0 [ 217.703869][T12958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.703882][T12958] ? selinux_socket_sendmsg+0x198/0x2f0 [ 217.703902][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.703901][T12958] ____sys_sendmsg+0xa4d/0xbe0 [ 217.703925][T12958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.703938][T12958] ? __pfx_____sys_sendmsg+0x10/0x10 [ 217.703954][T12958] ___sys_sendmsg+0x190/0x1e0 [ 217.703966][T12958] ? __pfx____sys_sendmsg+0x10/0x10 [ 217.703977][T12958] ? __lock_acquire+0x49f/0x1a40 [ 217.703991][T12958] ? get_pid_task+0x106/0x250 [ 217.704016][T12958] __sys_sendmsg+0x160/0x210 [ 217.704031][T12958] ? __pfx___sys_sendmsg+0x10/0x10 [ 217.704053][T12958] do_syscall_64+0x115/0x870 [ 217.704066][T12958] ? clear_bhb_loop+0x70/0xc0 [ 217.704078][T12958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.704090][T12958] RIP: 0033:0x7f1ced99e0d9 [ 217.704100][T12958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.704111][T12958] RSP: 002b:00007f1cee7de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.704123][T12958] RAX: ffffffffffffffda RBX: 00007f1cedc25fa0 RCX: 00007f1ced99e0d9 [ 217.704129][T12958] RDX: 0000000028008004 RSI: 0000200000003740 RDI: 0000000000000004 [ 217.704136][T12958] RBP: 00007f1cee7de090 R08: 0000000000000000 R09: 0000000000000000 [ 217.704142][T12958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.704149][T12958] R13: 00007f1cedc26038 R14: 00007f1cedc25fa0 R15: 00007ffc1bf7c6d8 [ 217.704163][T12958] [ 217.784931][ T64] Bluetooth: hci3: command tx timeout [ 217.814185][ T13] bridge_slave_0: left allmulticast mode [ 217.825836][ T13] bridge_slave_0: left promiscuous mode [ 217.827946][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.893017][ T42] audit: type=1400 audit(1786956600.318:956): avc: denied { write } for pid=12961 comm="syz.9.2236" name="nullb" dev="configfs" ino=5494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 217.952833][T12967] siw: device registration error -23 [ 218.012997][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.019495][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.024465][ T13] bond0 (unregistering): Released all slaves [ 218.040933][ T13] bond1 (unregistering): Released all slaves [ 218.126153][T12908] hsr_slave_0: entered promiscuous mode [ 218.130366][T12908] hsr_slave_1: entered promiscuous mode [ 218.134052][T12908] debugfs: 'hsr0' already exists in 'hsr' [ 218.137769][T12908] Cannot create hsr debugfs directory [ 218.191708][T12971] syzkaller0: entered promiscuous mode [ 218.193801][T12971] syzkaller0: entered allmulticast mode [ 218.274748][ T5825] usb 14-1: new full-speed USB device number 4 using dummy_hcd [ 218.446956][ T5825] usb 14-1: New USB device found, idVendor=0b05, idProduct=1a30, bcdDevice= 0.40 [ 218.450918][ T5825] usb 14-1: config 1 interface 0 altsetting 24 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 218.456205][ T5825] usb 14-1: config 1 interface 0 altsetting 24 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 218.466551][ T5825] usb 14-1: config 1 interface 0 altsetting 24 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 218.471533][ T5825] usb 14-1: config 1 interface 0 has no altsetting 0 [ 218.481788][ T5825] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.487124][ T5825] usb 14-1: Product: В [ 218.494044][ T5825] usb 14-1: Manufacturer: 傄썓፵풣젂䇽蛂᲌皯߂陴䜙勷줉ᘽனൡ꾮 [ 218.506943][ T5825] usb 14-1: SerialNumber: syz [ 218.515134][T12965] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 218.519971][T12965] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 218.545979][T12978] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 218.547685][T12982] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 218.556460][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.559025][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.562410][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.567370][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.610003][ T13] veth1_macvtap: left promiscuous mode [ 218.611862][ T13] veth0_macvtap: left promiscuous mode [ 218.613793][ T13] veth1_vlan: left promiscuous mode [ 218.618953][ T13] veth0_vlan: left promiscuous mode [ 218.637688][T12982] /dev/nullb0: Can't open blockdev [ 218.652427][T12986] ip_tables: iptables: counters copy to user failed while replacing table [ 218.698712][T12988] ip_tables: iptables: counters copy to user failed while replacing table [ 218.710566][T12988] FAULT_INJECTION: forcing a failure. [ 218.710566][T12988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.714959][T12988] CPU: 3 UID: 0 PID: 12988 Comm: syz.8.2243 Tainted: G L syzkaller #0 PREEMPT(full) [ 218.714978][T12988] Tainted: [L]=SOFTLOCKUP [ 218.714983][T12988] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 218.714990][T12988] Call Trace: [ 218.715015][T12988] [ 218.715022][T12988] dump_stack_lvl+0x100/0x190 [ 218.715057][T12988] should_fail_ex.cold+0x5/0xa [ 218.715072][T12988] _copy_from_user+0x2e/0xd0 [ 218.715106][T12988] copy_msghdr_from_user+0x9f/0x4c0 [ 218.715123][T12988] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 218.715141][T12988] ___sys_sendmsg+0x106/0x1e0 [ 218.715154][T12988] ? __pfx____sys_sendmsg+0x10/0x10 [ 218.715165][T12988] ? __lock_acquire+0x49f/0x1a40 [ 218.715180][T12988] ? get_pid_task+0x106/0x250 [ 218.715206][T12988] __sys_sendmsg+0x160/0x210 [ 218.715222][T12988] ? __pfx___sys_sendmsg+0x10/0x10 [ 218.715244][T12988] do_syscall_64+0x115/0x870 [ 218.715260][T12988] ? clear_bhb_loop+0x70/0xc0 [ 218.715273][T12988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.715284][T12988] RIP: 0033:0x7f944559e0d9 [ 218.715294][T12988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.715310][T12988] RSP: 002b:00007f94463bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 218.715322][T12988] RAX: ffffffffffffffda RBX: 00007f9445825fa0 RCX: 00007f944559e0d9 [ 218.715329][T12988] RDX: 0000000000044810 RSI: 0000200000000900 RDI: 0000000000000006 [ 218.715336][T12988] RBP: 00007f94463bd090 R08: 0000000000000000 R09: 0000000000000000 [ 218.715342][T12988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.715349][T12988] R13: 00007f9445826038 R14: 00007f9445825fa0 R15: 00007ffcfbb8e1a8 [ 218.715362][T12988] [ 218.791196][ T64] Bluetooth: hci4: command tx timeout [ 219.019275][ T1127] ata1.00: exception Emask 0x0 SAct 0x10000 SErr 0x0 action 0x6 [ 219.024770][ T1127] ata1.00: waking up from sleep [ 219.026480][ T1127] ata1: hard resetting link [ 219.048750][ T5437] 8021q: adding VLAN 0 to HW filter on device eth25 [ 219.073700][T12965] null_blk: disk nullb1 created [ 219.348868][ T1127] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 219.355882][ T1127] ata1.00: configured for UDMA/100 [ 219.357763][ T1127] ata1: EH complete [ 219.650184][ T5437] 8021q: adding VLAN 0 to HW filter on device eth26 [ 219.677462][ T13] IPVS: stop unused estimator thread 0... [ 219.836716][T13028] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2252'. [ 219.897983][T12908] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 219.903515][T12908] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 219.907801][T12908] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 219.924179][T12908] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 219.928955][T13034] FAULT_INJECTION: forcing a failure. [ 219.928955][T13034] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 219.932338][T12908] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 219.933282][T13034] CPU: 2 UID: 0 PID: 13034 Comm: syz.8.2254 Tainted: G L syzkaller #0 PREEMPT(full) [ 219.933299][T13034] Tainted: [L]=SOFTLOCKUP [ 219.933303][T13034] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 219.933310][T13034] Call Trace: [ 219.933315][T13034] [ 219.933324][T13034] dump_stack_lvl+0x100/0x190 [ 219.933344][T13034] should_fail_ex.cold+0x5/0xa [ 219.933357][T13034] ? prepare_alloc_pages+0x16d/0x5f0 [ 219.933375][T13034] should_fail_alloc_page+0xeb/0x140 [ 219.933391][T13034] prepare_alloc_pages+0x1f0/0x5f0 [ 219.933408][T13034] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 219.933423][T13034] ? tomoyo_check_open_permission+0x1a2/0x3c0 [ 219.933443][T13034] ? look_up_lock_class+0x55/0x120 [ 219.933458][T13034] ? register_lock_class+0x40/0x560 [ 219.933472][T13034] ? find_held_lock+0x2b/0x80 [ 219.933482][T13034] ? ima_match_policy+0x8b8/0x2340 [ 219.933496][T13034] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 219.933512][T13034] ? __lock_acquire+0x49f/0x1a40 [ 219.933531][T13034] ? lock_acquire+0x1b9/0x370 [ 219.933544][T13034] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 219.933559][T13034] ? policy_nodemask+0xed/0x4f0 [ 219.933575][T13034] alloc_pages_mpol+0x1fb/0x540 [ 219.933590][T13034] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 219.933609][T13034] folio_alloc_mpol_noprof+0x36/0x260 [ 219.933627][T13034] vma_alloc_folio_noprof+0xed/0x1d0 [ 219.933644][T13034] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 219.933665][T13034] do_anonymous_page+0xb2b/0x2080 [ 219.933683][T13034] ? rcu_read_unlock+0x2d/0xb0 [ 219.933697][T13034] __handle_mm_fault+0x1d2c/0x2a00 [ 219.933709][T13034] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 219.933726][T13034] ? __pfx___handle_mm_fault+0x10/0x10 [ 219.933738][T13034] ? pte_offset_map_lock+0x174/0x320 [ 219.933752][T13034] ? find_held_lock+0x2b/0x80 [ 219.933765][T13034] ? follow_page_pte+0x4d0/0x13f0 [ 219.933783][T13034] handle_mm_fault+0x37b/0xa30 [ 219.933795][T13034] __get_user_pages+0x1178/0x32a0 [ 219.933815][T13034] ? __pfx___get_user_pages+0x10/0x10 [ 219.933833][T13034] faultin_page_range+0x1f1/0x9e0 [ 219.933852][T13034] madvise_do_behavior+0x354/0x510 [ 219.933870][T13034] ? __pfx_madvise_do_behavior+0x10/0x10 [ 219.933893][T13034] do_madvise+0x238/0x290 [ 219.933908][T13034] ? __pfx_do_madvise+0x10/0x10 [ 219.933927][T13034] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 219.933946][T13034] ? ksys_write+0x1ac/0x250 [ 219.933956][T13034] ? __pfx_ksys_write+0x10/0x10 [ 219.933968][T13034] __x64_sys_madvise+0xa9/0x110 [ 219.933984][T13034] ? lockdep_hardirqs_on+0x78/0x100 [ 219.933996][T13034] do_syscall_64+0x115/0x870 [ 219.934008][T13034] ? clear_bhb_loop+0x70/0xc0 [ 219.934022][T13034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.934033][T13034] RIP: 0033:0x7f944559e0d9 [ 219.934042][T13034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.934053][T13034] RSP: 002b:00007f94463bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 219.934064][T13034] RAX: ffffffffffffffda RBX: 00007f9445825fa0 RCX: 00007f944559e0d9 [ 219.934071][T13034] RDX: 0000000000000017 RSI: 0000000000800000 RDI: 00002000000ec000 [ 219.934077][T13034] RBP: 00007f94463bd090 R08: 0000000000000000 R09: 0000000000000000 [ 219.934084][T13034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 219.934090][T13034] R13: 00007f9445826038 R14: 00007f9445825fa0 R15: 00007ffcfbb8e1a8 [ 219.934103][T13034] [ 220.065855][T12908] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 220.073011][ T5437] 8021q: adding VLAN 0 to HW filter on device eth27 [ 220.083217][T12908] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 220.106396][T12908] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 220.178851][T13049] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1546 sclass=netlink_tcpdiag_socket pid=13049 comm=syz.0.2256 [ 220.202511][ T42] kauditd_printk_skb: 10 callbacks suppressed [ 220.202525][ T42] audit: type=1400 audit(1786956602.639:967): avc: denied { mounton } for pid=13046 comm="syz.0.2256" path="/file0" dev="ramfs" ino=45993 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 220.221964][T13049] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 220.233278][T12908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.237942][T13049] overlayfs: failed to set xattr on upper [ 220.246378][T12908] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.251618][T13049] overlayfs: ...falling back to redirect_dir=nofollow. [ 220.253740][ T98] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.256772][ T98] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.257502][ T42] audit: type=1400 audit(1786956602.699:968): avc: denied { write } for pid=13051 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.268247][T13049] overlayfs: ...falling back to index=off. [ 220.272923][ T110] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.273701][T13049] overlayfs: ...falling back to uuid=null. [ 220.275343][ T110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.344469][ T42] audit: type=1400 audit(1786956602.779:969): avc: denied { write } for pid=13057 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.407155][ T5437] 8021q: adding VLAN 0 to HW filter on device eth28 [ 220.461543][T13056] FAULT_INJECTION: forcing a failure. [ 220.461543][T13056] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 220.478144][T13056] CPU: 3 UID: 0 PID: 13056 Comm: syz.8.2257 Tainted: G L syzkaller #0 PREEMPT(full) [ 220.478171][T13056] Tainted: [L]=SOFTLOCKUP [ 220.478176][T13056] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 220.478185][T13056] Call Trace: [ 220.478204][T13056] [ 220.478211][T13056] dump_stack_lvl+0x100/0x190 [ 220.478239][T13056] should_fail_ex.cold+0x5/0xa [ 220.478260][T13056] ? prepare_alloc_pages+0x16d/0x5f0 [ 220.478283][T13056] should_fail_alloc_page+0xeb/0x140 [ 220.478303][T13056] prepare_alloc_pages+0x1f0/0x5f0 [ 220.478325][T13056] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 220.478343][T13056] ? tomoyo_check_open_permission+0x1a2/0x3c0 [ 220.478371][T13056] ? mark_held_locks+0x40/0x70 [ 220.478389][T13056] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 220.478411][T13056] ? __lock_acquire+0x49f/0x1a40 [ 220.478434][T13056] ? lock_acquire+0x1b9/0x370 [ 220.478451][T13056] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 220.478470][T13056] ? policy_nodemask+0xed/0x4f0 [ 220.478490][T13056] alloc_pages_mpol+0x1fb/0x540 [ 220.478510][T13056] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 220.478534][T13056] folio_alloc_mpol_noprof+0x36/0x260 [ 220.478556][T13056] vma_alloc_folio_noprof+0xed/0x1d0 [ 220.478578][T13056] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 220.478605][T13056] do_anonymous_page+0xb2b/0x2080 [ 220.478628][T13056] ? rcu_read_unlock+0x2d/0xb0 [ 220.478646][T13056] __handle_mm_fault+0x1d2c/0x2a00 [ 220.478661][T13056] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 220.478683][T13056] ? __pfx___handle_mm_fault+0x10/0x10 [ 220.478698][T13056] ? pte_offset_map_lock+0x174/0x320 [ 220.478716][T13056] ? find_held_lock+0x2b/0x80 [ 220.478734][T13056] ? follow_page_pte+0x4d0/0x13f0 [ 220.478757][T13056] handle_mm_fault+0x37b/0xa30 [ 220.478774][T13056] __get_user_pages+0x1178/0x32a0 [ 220.478800][T13056] ? __pfx___get_user_pages+0x10/0x10 [ 220.478823][T13056] faultin_page_range+0x1f1/0x9e0 [ 220.478848][T13056] madvise_do_behavior+0x354/0x510 [ 220.478870][T13056] ? __pfx_madvise_do_behavior+0x10/0x10 [ 220.478901][T13056] do_madvise+0x238/0x290 [ 220.478920][T13056] ? __pfx_do_madvise+0x10/0x10 [ 220.478945][T13056] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 220.478971][T13056] ? ksys_write+0x1ac/0x250 [ 220.479008][T13056] ? __pfx_ksys_write+0x10/0x10 [ 220.479027][T13056] __x64_sys_madvise+0xa9/0x110 [ 220.479047][T13056] ? lockdep_hardirqs_on+0x78/0x100 [ 220.479063][T13056] do_syscall_64+0x115/0x870 [ 220.479078][T13056] ? clear_bhb_loop+0x70/0xc0 [ 220.479096][T13056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.479110][T13056] RIP: 0033:0x7f944559e0d9 [ 220.479123][T13056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.479137][T13056] RSP: 002b:00007f94463bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 220.479153][T13056] RAX: ffffffffffffffda RBX: 00007f9445825fa0 RCX: 00007f944559e0d9 [ 220.479163][T13056] RDX: 0000000000000017 RSI: 0000000000800000 RDI: 00002000000ec000 [ 220.479171][T13056] RBP: 00007f94463bd090 R08: 0000000000000000 R09: 0000000000000000 [ 220.479180][T13056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 220.479188][T13056] R13: 00007f9445826038 R14: 00007f9445825fa0 R15: 00007ffcfbb8e1a8 [ 220.479207][T13056] [ 220.598154][T13066] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2258'. [ 220.615109][ T42] audit: type=1400 audit(1786956603.049:970): avc: denied { write } for pid=13064 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.750068][ T42] audit: type=1400 audit(1786956603.189:971): avc: denied { write } for pid=13075 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.785971][ T5825] usbhid 14-1:1.0: can't add hid device: -71 [ 220.788029][ T5825] usbhid 14-1:1.0: probe with driver usbhid failed with error -71 [ 220.795511][ T5825] usb 14-1: USB disconnect, device number 4 [ 220.824422][ T64] Bluetooth: hci4: command tx timeout [ 220.870567][T12908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.903689][ T42] audit: type=1400 audit(1786956603.339:972): avc: denied { write } for pid=13081 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.005998][ T42] audit: type=1400 audit(1786956603.449:973): avc: denied { bind } for pid=13092 comm="syz.8.2261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 221.027592][ T42] audit: type=1400 audit(1786956603.469:974): avc: denied { write } for pid=13092 comm="syz.8.2261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 221.040030][T13097] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 221.050525][ T42] audit: type=1400 audit(1786956603.489:975): avc: denied { write } for pid=13091 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.069834][T13097] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 221.140274][T13109] netlink: 'syz.8.2266': attribute type 63 has an invalid length. [ 221.148434][ T42] audit: type=1400 audit(1786956603.579:976): avc: denied { watch } for pid=13100 comm="syz.0.2264" path="/sys/kernel/rcu_expedited" dev="sysfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 221.154329][T13109] netlink: 5 bytes leftover after parsing attributes in process `syz.8.2266'. [ 221.161847][T13105] FAULT_INJECTION: forcing a failure. [ 221.161847][T13105] name failslab, interval 1, probability 0, space 0, times 0 [ 221.166678][T13105] CPU: 0 UID: 0 PID: 13105 Comm: syz.9.2265 Tainted: G L syzkaller #0 PREEMPT(full) [ 221.166697][T13105] Tainted: [L]=SOFTLOCKUP [ 221.166702][T13105] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 221.166709][T13105] Call Trace: [ 221.166713][T13105] [ 221.166718][T13105] dump_stack_lvl+0x100/0x190 [ 221.166738][T13105] should_fail_ex.cold+0x5/0xa [ 221.166753][T13105] should_failslab+0xc2/0x120 [ 221.166768][T13105] kmem_cache_alloc_noprof+0x91/0x6a0 [ 221.166782][T13105] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 221.166811][T13105] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 221.166832][T13105] mmu_topup_memory_caches+0x25/0x170 [ 221.166855][T13105] kvm_mmu_load+0xe2/0x2570 [ 221.166871][T13105] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 221.166883][T13105] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 221.166902][T13105] ? __pfx_kvm_mmu_load+0x10/0x10 [ 221.166922][T13105] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 221.166943][T13105] ? kvm_check_and_inject_events+0x873/0x12a0 [ 221.166969][T13105] ? record_steal_time+0x3a0/0xbb0 [ 221.167019][T13105] vcpu_run+0x3aaa/0x5de0 [ 221.167048][T13105] ? __pfx_vcpu_run+0x10/0x10 [ 221.167068][T13105] ? rcu_is_watching+0x12/0xc0 [ 221.167088][T13105] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 221.167104][T13105] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 221.167124][T13105] kvm_vcpu_ioctl+0x730/0x1700 [ 221.167138][T13105] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 221.167150][T13105] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 221.167166][T13105] ? do_vfs_ioctl+0x226/0x13e0 [ 221.167183][T13105] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 221.167199][T13105] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 221.167221][T13105] ? __fget_files+0x215/0x3d0 [ 221.167233][T13105] ? hook_file_ioctl_common+0x140/0x440 [ 221.167250][T13105] ? selinux_file_ioctl+0x13b/0x290 [ 221.167266][T13105] ? selinux_file_ioctl+0xb6/0x290 [ 221.167283][T13105] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 221.167295][T13105] __x64_sys_ioctl+0x18e/0x210 [ 221.167312][T13105] do_syscall_64+0x115/0x870 [ 221.167327][T13105] ? clear_bhb_loop+0x70/0xc0 [ 221.167346][T13105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.167362][T13105] RIP: 0033:0x7f1ced99e0d9 [ 221.167377][T13105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.167389][T13105] RSP: 002b:00007f1cee7de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 221.167401][T13105] RAX: ffffffffffffffda RBX: 00007f1cedc25fa0 RCX: 00007f1ced99e0d9 [ 221.167408][T13105] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 221.167414][T13105] RBP: 00007f1cee7de090 R08: 0000000000000000 R09: 0000000000000000 [ 221.167421][T13105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 221.167427][T13105] R13: 00007f1cedc26038 R14: 00007f1cedc25fa0 R15: 00007ffc1bf7c6d8 [ 221.167441][T13105] [ 221.181310][T12908] veth0_vlan: entered promiscuous mode [ 221.301460][T12908] veth1_vlan: entered promiscuous mode [ 221.368966][T12908] veth0_macvtap: entered promiscuous mode [ 221.378737][T12908] veth1_macvtap: entered promiscuous mode [ 221.397087][T12908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.413453][T12908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.566965][ T110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.574473][ T110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.613212][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.616993][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.620211][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.622915][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.644693][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.661017][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.880302][T13152] ip_tables: iptables: counters copy to user failed while replacing table [ 222.074639][ T1127] ata1.00: exception Emask 0x0 SAct 0x80 SErr 0x0 action 0x6 [ 222.083360][ T1127] ata1.00: waking up from sleep [ 222.090892][ T1127] ata1: hard resetting link [ 222.419088][ T1127] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 222.429821][ T1127] ata1.00: configured for UDMA/100 [ 222.432729][ T1127] ata1: EH complete [ 222.548584][T13196] 8021q: VLANs not supported on ip_vti0 [ 222.733806][T13209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2279'. [ 222.904248][ T64] Bluetooth: hci4: command tx timeout [ 223.391748][T13229] ip_tables: iptables: counters copy to user failed while replacing table [ 223.397581][T13229] ip_tables: iptables: counters copy to user failed while replacing table [ 223.400713][T13229] ip_tables: iptables: counters copy to user failed while replacing table [ 223.403731][T13229] ip_tables: iptables: counters copy to user failed while replacing table [ 223.409979][T13229] ip_tables: iptables: counters copy to user failed while replacing table [ 223.412883][T13229] ip_tables: iptables: counters copy to user failed while replacing table [ 223.416824][T13229] ip_tables: iptables: counters copy to user failed while replacing table [ 223.539438][T13235] syzkaller0: entered promiscuous mode [ 223.541713][T13235] syzkaller0: entered allmulticast mode [ 223.623581][T13242] FAULT_INJECTION: forcing a failure. [ 223.623581][T13242] name failslab, interval 1, probability 0, space 0, times 0 [ 223.629118][T13242] CPU: 0 UID: 0 PID: 13242 Comm: syz.9.2287 Tainted: G L syzkaller #0 PREEMPT(full) [ 223.629144][T13242] Tainted: [L]=SOFTLOCKUP [ 223.629151][T13242] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 223.629161][T13242] Call Trace: [ 223.629168][T13242] [ 223.629176][T13242] dump_stack_lvl+0x100/0x190 [ 223.629205][T13242] should_fail_ex.cold+0x5/0xa [ 223.629223][T13242] should_failslab+0xc2/0x120 [ 223.629247][T13242] kmem_cache_alloc_noprof+0x91/0x6a0 [ 223.629275][T13242] ? do_raw_spin_lock+0x128/0x260 [ 223.629298][T13242] ? inet_bind_bucket_create+0x2d/0x280 [ 223.629343][T13242] inet_bind_bucket_create+0x2d/0x280 [ 223.629371][T13242] inet_csk_get_port+0x153f/0x28e0 [ 223.629396][T13242] ? trace_inet_sock_set_state+0x78/0x220 [ 223.629439][T13242] ? __pfx_inet_csk_get_port+0x10/0x10 [ 223.629459][T13242] inet_csk_listen_start+0x205/0x450 [ 223.629482][T13242] __inet_listen_sk+0x20f/0x510 [ 223.629502][T13242] ? __pfx___inet_listen_sk+0x10/0x10 [ 223.629524][T13242] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 223.629554][T13242] ? __local_bh_enable_ip+0x9e/0x120 [ 223.629588][T13242] inet_listen+0x93/0xd0 [ 223.629607][T13242] __sys_listen_socket+0x108/0x150 [ 223.629630][T13242] __sys_listen+0xa7/0x130 [ 223.629648][T13242] __x64_sys_listen+0x53/0x80 [ 223.629667][T13242] do_syscall_64+0x115/0x870 [ 223.629683][T13242] ? clear_bhb_loop+0x70/0xc0 [ 223.629703][T13242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.629720][T13242] RIP: 0033:0x7f1ced99e0d9 [ 223.629735][T13242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.629750][T13242] RSP: 002b:00007f1cee7de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 223.629768][T13242] RAX: ffffffffffffffda RBX: 00007f1cedc25fa0 RCX: 00007f1ced99e0d9 [ 223.629779][T13242] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 223.629786][T13242] RBP: 00007f1cee7de090 R08: 0000000000000000 R09: 0000000000000000 [ 223.629793][T13242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.629803][T13242] R13: 00007f1cedc26038 R14: 00007f1cedc25fa0 R15: 00007ffc1bf7c6d8 [ 223.629825][T13242] [ 223.764508][ T1127] ata1.00: exception Emask 0x0 SAct 0x200 SErr 0x0 action 0x6 [ 223.767852][ T1127] ata1.00: waking up from sleep [ 223.770118][ T1127] ata1: hard resetting link [ 224.093074][ T1127] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 224.122095][ T1127] ata1.00: configured for UDMA/100 [ 224.124859][ T1127] ata1: EH complete [ 224.985808][ T64] Bluetooth: hci4: command tx timeout [ 225.670397][T13253] bridge0: port 1(vlan2) entered blocking state [ 225.673188][T13253] bridge0: port 1(vlan2) entered disabled state [ 225.676165][T13253] vlan2: entered allmulticast mode [ 225.678204][T13253] geneve0: entered allmulticast mode [ 225.681727][T13253] vlan2: entered promiscuous mode [ 225.683929][T13253] geneve0: entered promiscuous mode [ 225.703529][T13266] net_ratelimit: 58 callbacks suppressed [ 225.715841][T13266] ip_tables: iptables: counters copy to user failed while replacing table [ 225.799953][T13279] 8021q: VLANs not supported on ip_vti0 [ 225.801889][T13281] 8021q: VLANs not supported on ip_vti0 [ 225.805756][ T42] kauditd_printk_skb: 23 callbacks suppressed [ 225.805771][ T42] audit: type=1400 audit(1786956608.249:1000): avc: denied { ioctl } for pid=13278 comm="syz.9.2298" path="socket:[48344]" dev="sockfs" ino=48344 ioctlcmd=0xb101 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 225.879078][T13284] FAULT_INJECTION: forcing a failure. [ 225.879078][T13284] name failslab, interval 1, probability 0, space 0, times 0 [ 225.884475][T13284] CPU: 2 UID: 0 PID: 13284 Comm: syz.9.2299 Tainted: G L syzkaller #0 PREEMPT(full) [ 225.884504][T13284] Tainted: [L]=SOFTLOCKUP [ 225.884511][T13284] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 225.884520][T13284] Call Trace: [ 225.884528][T13284] [ 225.884536][T13284] dump_stack_lvl+0x100/0x190 [ 225.884566][T13284] should_fail_ex.cold+0x5/0xa [ 225.884589][T13284] should_failslab+0xc2/0x120 [ 225.884615][T13284] kmem_cache_alloc_noprof+0x91/0x6a0 [ 225.884639][T13284] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 225.884668][T13284] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 225.884705][T13284] mmu_topup_memory_caches+0x25/0x170 [ 225.884730][T13284] kvm_mmu_load+0xe2/0x2570 [ 225.884754][T13284] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 225.884773][T13284] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 225.884794][T13284] ? __pfx_kvm_mmu_load+0x10/0x10 [ 225.884818][T13284] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 225.884841][T13284] ? kvm_check_and_inject_events+0x873/0x12a0 [ 225.884864][T13284] ? record_steal_time+0x3a0/0xbb0 [ 225.884880][T13284] vcpu_run+0x3aaa/0x5de0 [ 225.884902][T13284] ? __pfx_vcpu_run+0x10/0x10 [ 225.884922][T13284] ? rcu_is_watching+0x12/0xc0 [ 225.884942][T13284] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 225.884958][T13284] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 225.884977][T13284] kvm_vcpu_ioctl+0x730/0x1700 [ 225.884991][T13284] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 225.885004][T13284] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 225.885018][T13284] ? do_vfs_ioctl+0x226/0x13e0 [ 225.885035][T13284] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 225.885051][T13284] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 225.885073][T13284] ? __fget_files+0x215/0x3d0 [ 225.885084][T13284] ? hook_file_ioctl_common+0x140/0x440 [ 225.885100][T13284] ? selinux_file_ioctl+0x13b/0x290 [ 225.885116][T13284] ? selinux_file_ioctl+0xb6/0x290 [ 225.885132][T13284] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 225.885145][T13284] __x64_sys_ioctl+0x18e/0x210 [ 225.885162][T13284] do_syscall_64+0x115/0x870 [ 225.885179][T13284] ? clear_bhb_loop+0x70/0xc0 [ 225.885192][T13284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.885203][T13284] RIP: 0033:0x7f1ced99e0d9 [ 225.885214][T13284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.885224][T13284] RSP: 002b:00007f1cee7de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 225.885236][T13284] RAX: ffffffffffffffda RBX: 00007f1cedc25fa0 RCX: 00007f1ced99e0d9 [ 225.885243][T13284] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 225.885249][T13284] RBP: 00007f1cee7de090 R08: 0000000000000000 R09: 0000000000000000 [ 225.885255][T13284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 225.885261][T13284] R13: 00007f1cedc26038 R14: 00007f1cedc25fa0 R15: 00007ffc1bf7c6d8 [ 225.885275][T13284] [ 226.092513][ T10] IPVS: starting estimator thread 0... [ 226.096540][T13291] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2300'. [ 226.198719][ T42] audit: type=1400 audit(1786956608.639:1001): avc: denied { write } for pid=13294 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.204234][T13292] IPVS: using max 31 ests per chain, 74400 per kthread [ 226.278451][ T42] audit: type=1400 audit(1786956608.719:1002): avc: denied { write } for pid=13301 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.413758][ T5936] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 226.453677][ T10] usb 14-1: new high-speed USB device number 5 using dummy_hcd [ 226.574432][ T5936] usb 9-1: Using ep0 maxpacket: 8 [ 226.576837][ T5936] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 226.584295][ T5936] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 226.593306][ T5936] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.600665][ T5936] usb 9-1: config 0 descriptor?? [ 226.619446][ T10] usb 14-1: Using ep0 maxpacket: 8 [ 226.628031][ T42] audit: type=1400 audit(1786956609.069:1003): avc: denied { write } for pid=13307 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.628451][ T10] usb 14-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 226.653227][ T10] usb 14-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.666226][T13312] syzkaller0: entered promiscuous mode [ 226.668702][ T10] usb 14-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 226.672488][T13312] syzkaller0: entered allmulticast mode [ 226.674869][ T10] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 226.684046][ T10] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 226.689467][ T42] audit: type=1400 audit(1786956609.129:1004): avc: denied { write } for pid=13314 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.690208][T13312] FAULT_INJECTION: forcing a failure. [ 226.690208][T13312] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.703683][ T10] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.703700][T13312] CPU: 2 UID: 0 PID: 13312 Comm: syz.0.2305 Tainted: G L syzkaller #0 PREEMPT(full) [ 226.703718][T13312] Tainted: [L]=SOFTLOCKUP [ 226.703723][T13312] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 226.703730][T13312] Call Trace: [ 226.703735][T13312] [ 226.703740][T13312] dump_stack_lvl+0x100/0x190 [ 226.703761][T13312] should_fail_ex.cold+0x5/0xa [ 226.703782][T13312] _copy_from_iter+0x1f4/0x1690 [ 226.703801][T13312] ? _copy_from_iter+0x270/0x1690 [ 226.703816][T13312] ? __pfx__copy_from_iter+0x10/0x10 [ 226.703838][T13312] ? __pfx__copy_from_iter+0x10/0x10 [ 226.703853][T13312] ? _copy_from_iter+0x270/0x1690 [ 226.703871][T13312] copy_page_from_iter+0x238/0x300 [ 226.703888][T13312] skb_copy_datagram_from_iter+0x399/0x720 [ 226.703907][T13312] tun_get_user+0x1889/0x3c20 [ 226.703953][T13312] ? __pfx_tun_get_user+0x10/0x10 [ 226.703966][T13312] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 226.703993][T13312] ? find_held_lock+0x2b/0x80 [ 226.704004][T13312] ? tun_get+0x191/0x370 [ 226.704013][T13312] ? tun_get+0x191/0x370 [ 226.704026][T13312] tun_chr_write_iter+0xdc/0x200 [ 226.704039][T13312] vfs_write+0x6ac/0x1050 [ 226.704050][T13312] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 226.704063][T13312] ? __pfx_vfs_write+0x10/0x10 [ 226.704072][T13312] ? find_held_lock+0x2b/0x80 [ 226.704089][T13312] ksys_write+0x12a/0x250 [ 226.704099][T13312] ? __pfx_ksys_write+0x10/0x10 [ 226.704113][T13312] do_syscall_64+0x115/0x870 [ 226.704126][T13312] ? clear_bhb_loop+0x70/0xc0 [ 226.704139][T13312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.704151][T13312] RIP: 0033:0x7fd2a0f9e0d9 [ 226.704162][T13312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.704172][T13312] RSP: 002b:00007fd2a1f4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 226.704184][T13312] RAX: ffffffffffffffda RBX: 00007fd2a1225fa0 RCX: 00007fd2a0f9e0d9 [ 226.704191][T13312] RDX: 000000000000ffdd RSI: 0000200000000200 RDI: 0000000000000003 [ 226.704197][T13312] RBP: 00007fd2a1f4e090 R08: 0000000000000000 R09: 0000000000000000 [ 226.704203][T13312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 226.704210][T13312] R13: 00007fd2a1226038 R14: 00007fd2a1225fa0 R15: 00007fff1d425b48 [ 226.704224][T13312] [ 226.792758][ T10] hub 14-1:1.0: bad descriptor, ignoring hub [ 226.794911][ T10] hub 14-1:1.0: probe with driver hub failed with error -5 [ 226.797696][ T10] cdc_wdm 14-1:1.0: skipping garbage [ 226.799560][ T10] cdc_wdm 14-1:1.0: skipping garbage [ 226.817249][ T10] cdc_wdm 14-1:1.0: cdc-wdm0: USB WDM device [ 226.820394][ T10] cdc_wdm 14-1:1.0: Unknown control protocol [ 226.900452][T13318] netlink: 220 bytes leftover after parsing attributes in process `syz.8.2307'. [ 226.903409][ T42] audit: type=1400 audit(1786956609.339:1005): avc: denied { write } for pid=13319 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.974401][ T42] audit: type=1400 audit(1786956609.419:1006): avc: denied { write } for pid=13327 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.116834][ T5936] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 227.119769][ T42] audit: type=1400 audit(1786956609.559:1007): avc: denied { write } for pid=13336 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.146610][ T5936] usb 9-1: USB disconnect, device number 2 [ 227.220223][ T42] audit: type=1400 audit(1786956609.659:1008): avc: denied { write } for pid=13346 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.251169][ T42] audit: type=1400 audit(1786956609.689:1009): avc: denied { accept } for pid=13298 comm="syz.9.2303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 227.342983][T13353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.348460][T13353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.387505][ T5825] usb 14-1: USB disconnect, device number 5 [ 227.683143][T13363] bridge_slave_0: left allmulticast mode [ 227.685211][T13363] bridge_slave_0: left promiscuous mode [ 227.687339][T13363] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.692578][T13363] bridge_slave_1: left allmulticast mode [ 227.696242][T13363] bridge_slave_1: left promiscuous mode [ 227.698211][T13363] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.704957][T13363] bond0: (slave bond_slave_0): Releasing backup interface [ 227.715136][T13363] bond0: (slave bond_slave_1): Releasing backup interface [ 227.723770][T13363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.726192][T13363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.730731][T13363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.733201][T13363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.750975][T13363] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 227.828546][T13363] tipc: Enabling of bearer rejected, failed to enable media [ 227.981109][ T64] Bluetooth: hci4: unexpected cc 0x204b length: 34 > 3 [ 228.049148][T13384] syzkaller0: entered promiscuous mode [ 228.051046][T13384] syzkaller0: entered allmulticast mode [ 228.167966][T13392] program syz.0.2321 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 228.173961][T13392] ata1.00: invalid service action 19 [ 228.190600][T13392] IPVS: rr: UDP 127.0.0.1:10000 - no destination available [ 228.503837][ T1127] ata1.00: exception Emask 0x0 SAct 0x4000 SErr 0x0 action 0x6 [ 228.506319][ T1127] ata1.00: waking up from sleep [ 228.507977][ T1127] ata1: hard resetting link [ 228.645775][T13425] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2334'. [ 228.696850][T13424] afs: Unknown parameter 'dynx' [ 228.838544][ T1127] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 228.856484][ T1127] ata1.00: configured for UDMA/100 [ 228.861666][ T1127] ata1: EH complete [ 229.010042][T13444] syzkaller0: entered promiscuous mode [ 229.011896][T13444] syzkaller0: entered allmulticast mode [ 229.151807][T13453] IPVS: dh: FWM 3 0x00000003 - no destination available [ 229.242483][T13456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2344'. [ 229.277753][T13456] 8021q: adding VLAN 0 to HW filter on device bond3 [ 229.286772][T13457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2340'. [ 229.592018][T13473] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2346'. [ 229.598847][T13473] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2346'. [ 229.643846][ T1127] ata1.00: exception Emask 0x0 SAct 0x80000000 SErr 0x0 action 0x6 [ 229.653285][ T1127] ata1.00: waking up from sleep [ 229.657860][ T1127] ata1: hard resetting link [ 229.963097][T13488] tmpfs: Bad value for 'mpol' [ 229.984704][ T1127] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 229.992178][ T1127] ata1.00: configured for UDMA/100 [ 229.999307][ T1127] ata1: EH complete [ 230.068855][T13495] gfs2: error -5 reading superblock [ 230.338026][ T1127] ata1.00: exception Emask 0x0 SAct 0x1 SErr 0x0 action 0x6 [ 230.348114][ T1127] ata1.00: waking up from sleep [ 230.354411][ T1127] ata1: hard resetting link [ 230.374580][T13526] FAULT_INJECTION: forcing a failure. [ 230.374580][T13526] name failslab, interval 1, probability 0, space 0, times 0 [ 230.378672][T13526] CPU: 0 UID: 0 PID: 13526 Comm: syz.4.2361 Tainted: G L syzkaller #0 PREEMPT(full) [ 230.378691][T13526] Tainted: [L]=SOFTLOCKUP [ 230.378695][T13526] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 230.378703][T13526] Call Trace: [ 230.378714][T13526] [ 230.378720][T13526] dump_stack_lvl+0x100/0x190 [ 230.378791][T13526] should_fail_ex.cold+0x5/0xa [ 230.378819][T13526] should_failslab+0xc2/0x120 [ 230.378862][T13526] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 230.378883][T13526] ? __alloc_skb+0x140/0x710 [ 230.378927][T13526] __alloc_skb+0x140/0x710 [ 230.378959][T13526] ? __alloc_skb+0x5b7/0x710 [ 230.378974][T13526] ? __pfx___alloc_skb+0x10/0x10 [ 230.378987][T13526] ? genl_rcv_msg+0x4be/0x800 [ 230.379016][T13526] netlink_ack+0x117/0xb80 [ 230.379032][T13526] netlink_rcv_skb+0x333/0x420 [ 230.379044][T13526] ? __pfx_genl_rcv_msg+0x10/0x10 [ 230.379058][T13526] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 230.379075][T13526] ? netlink_deliver_tap+0x1ae/0xcc0 [ 230.379088][T13526] genl_rcv+0x28/0x40 [ 230.379100][T13526] netlink_unicast+0x585/0x850 [ 230.379114][T13526] ? __pfx_netlink_unicast+0x10/0x10 [ 230.379130][T13526] netlink_sendmsg+0x8b0/0xda0 [ 230.379143][T13526] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.379157][T13526] ? selinux_socket_sendmsg+0x198/0x2f0 [ 230.379198][T13526] ____sys_sendmsg+0xa4d/0xbe0 [ 230.379209][T13526] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.379222][T13526] ? __pfx_____sys_sendmsg+0x10/0x10 [ 230.379238][T13526] ___sys_sendmsg+0x190/0x1e0 [ 230.379251][T13526] ? __pfx____sys_sendmsg+0x10/0x10 [ 230.379261][T13526] ? __lock_acquire+0x49f/0x1a40 [ 230.379286][T13526] ? get_pid_task+0x106/0x250 [ 230.379316][T13526] __sys_sendmsg+0x160/0x210 [ 230.379331][T13526] ? __pfx___sys_sendmsg+0x10/0x10 [ 230.379363][T13526] do_syscall_64+0x115/0x870 [ 230.379409][T13526] ? clear_bhb_loop+0x70/0xc0 [ 230.379423][T13526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.379435][T13526] RIP: 0033:0x7fc48b39e0d9 [ 230.379446][T13526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.379456][T13526] RSP: 002b:00007fc48c2c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.379475][T13526] RAX: ffffffffffffffda RBX: 00007fc48b625fa0 RCX: 00007fc48b39e0d9 [ 230.379482][T13526] RDX: 0000000028008004 RSI: 0000200000003740 RDI: 0000000000000004 [ 230.379488][T13526] RBP: 00007fc48c2c5090 R08: 0000000000000000 R09: 0000000000000000 [ 230.379495][T13526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.379501][T13526] R13: 00007fc48b626038 R14: 00007fc48b625fa0 R15: 00007ffc866fe248 [ 230.379514][T13526] [ 230.589977][ T5936] [ 230.590830][ T5936] ============================================ [ 230.592873][ T5936] WARNING: possible recursive locking detected [ 230.594686][ T5936] syzkaller #0 Tainted: G L [ 230.596670][ T5936] -------------------------------------------- [ 230.598633][ T5936] kworker/3:6/5936 is trying to acquire lock: [ 230.600546][ T5936] ffff888023139928 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x230/0x860 [ 230.603629][ T5936] [ 230.603629][ T5936] but task is already holding lock: [ 230.606398][ T5936] ffff88805a9c5928 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x230/0x860 [ 230.609863][ T5936] [ 230.609863][ T5936] other info that might help us debug this: [ 230.612474][ T5936] Possible unsafe locking scenario: [ 230.612474][ T5936] [ 230.614957][ T5936] CPU0 [ 230.616055][ T5936] ---- [ 230.617216][ T5936] lock(&grp->list_lock); [ 230.618666][ T5936] lock(&grp->list_lock); [ 230.620134][ T5936] [ 230.620134][ T5936] *** DEADLOCK *** [ 230.620134][ T5936] [ 230.622779][ T5936] May be due to missing lock nesting notation [ 230.622779][ T5936] [ 230.625511][ T5936] 3 locks held by kworker/3:6/5936: [ 230.627413][ T5936] #0: ffff88801c0aa940 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 230.630866][ T5936] #1: ffffc90003817d08 ((work_completion)(&runtime->event_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 230.634722][ T5936] #2: ffff88805a9c5928 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x230/0x860 [ 230.638073][ T5936] [ 230.638073][ T5936] stack backtrace: [ 230.640043][ T5936] CPU: 3 UID: 0 PID: 5936 Comm: kworker/3:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 230.640069][ T5936] Tainted: [L]=SOFTLOCKUP [ 230.640074][ T5936] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 230.640084][ T5936] Workqueue: events snd_rawmidi_input_event_work [ 230.640117][ T5936] Call Trace: [ 230.640123][ T5936] [ 230.640129][ T5936] dump_stack_lvl+0x100/0x190 [ 230.640146][ T5936] print_deadlock_bug.cold+0xbd/0xca [ 230.640174][ T5936] __lock_acquire+0x1256/0x1a40 [ 230.640190][ T5936] lock_acquire+0x1b9/0x370 [ 230.640202][ T5936] ? snd_seq_deliver_event+0x230/0x860 [ 230.640219][ T5936] ? do_raw_read_unlock+0x3f/0x70 [ 230.640235][ T5936] _raw_read_lock+0x5f/0x70 [ 230.640247][ T5936] ? snd_seq_deliver_event+0x230/0x860 [ 230.640263][ T5936] snd_seq_deliver_event+0x230/0x860 [ 230.640280][ T5936] ? do_raw_spin_lock+0x128/0x260 [ 230.640295][ T5936] ? __pfx_snd_seq_deliver_event+0x10/0x10 [ 230.640311][ T5936] ? mark_held_locks+0x40/0x70 [ 230.640323][ T5936] ? lockdep_hardirqs_on+0x78/0x100 [ 230.640335][ T5936] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 230.640345][ T5936] ? client_use_ptr+0x107/0x4b0 [ 230.640360][ T5936] snd_seq_kernel_client_dispatch+0x16f/0x1b0 [ 230.640377][ T5936] queue_broadcast_event.isra.0+0x143/0x1b0 [ 230.640390][ T5936] ? __pfx_queue_broadcast_event.isra.0+0x10/0x10 [ 230.640402][ T5936] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 230.640412][ T5936] ? snd_seq_timer_start+0x1f0/0x2a0 [ 230.640426][ T5936] snd_seq_control_queue+0x709/0xb70 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 230.640438][ T5936] ? __pfx_event_input_timer+0x10/0x10 [ 230.640453][ T5936] __snd_seq_deliver_single_event+0x127/0x1c0 [ 230.640470][ T5936] snd_seq_deliver_single_event+0x31f/0x8c0 [ 230.640487][ T5936] ? __pfx_snd_seq_deliver_single_event+0x10/0x10 [ 230.640504][ T5936] ? __lock_acquire+0x49f/0x1a40 [ 230.640518][ T5936] snd_seq_deliver_event+0x44b/0x860 [ 230.640534][ T5936] ? do_raw_spin_lock+0x128/0x260 [ 230.640550][ T5936] ? __pfx_snd_seq_deliver_event+0x10/0x10 [ 230.640565][ T5936] ? mark_held_locks+0x40/0x70 [ 230.640577][ T5936] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 230.640587][ T5936] ? lockdep_hardirqs_on+0x78/0x100 [ 230.640599][ T5936] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 230.640609][ T5936] ? client_use_ptr+0x107/0x4b0 [ 230.640624][ T5936] snd_seq_kernel_client_dispatch+0x16f/0x1b0 [ 230.640645][ T5936] send_timer_event.isra.0+0x130/0x190 [ 230.640663][ T5936] ? __pfx_send_timer_event.isra.0+0x10/0x10 [ 230.640679][ T5936] ? lockdep_hardirqs_on+0x78/0x100 [ 230.640690][ T5936] ? snd_seq_queue_timer_set_tempo+0x199/0x510 [ 230.640704][ T5936] snd_seq_oss_timer_start+0x1db/0x320 [ 230.640720][ T5936] ? __pfx_snd_seq_oss_timer_start+0x10/0x10 [ 230.640737][ T5936] ? snd_seq_oss_readq_put_timestamp+0xd1/0x260 [ 230.640751][ T5936] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 230.640762][ T5936] ? find_slot+0x166/0x1b0 [ 230.640773][ T5936] snd_seq_oss_midi_input+0x467/0xa30 [ 230.640790][ T5936] ? __pfx_snd_seq_oss_midi_input+0x10/0x10 [ 230.640811][ T5936] ? find_held_lock+0x2b/0x80 [ 230.640827][ T5936] ? snd_seq_port_use_ptr+0x128/0x190 [ 230.640853][ T5936] snd_seq_oss_event_input+0x194/0x250 [ 230.640870][ T5936] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 230.640889][ T5936] __snd_seq_deliver_single_event+0x127/0x1c0 [ 230.640910][ T5936] snd_seq_deliver_single_event+0x31f/0x8c0 [ 230.640927][ T5936] ? __pfx_snd_seq_deliver_single_event+0x10/0x10 [ 230.640943][ T5936] ? _raw_spin_unlock_irqrestore+0x31/0x80 [ 230.640954][ T5936] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 230.640964][ T5936] ? snd_seq_timer_get_cur_tick+0x50/0x70 [ 230.640979][ T5936] snd_seq_deliver_event+0x2c1/0x860 [ 230.640997][ T5936] ? __pfx_snd_seq_deliver_event+0x10/0x10 [ 230.641012][ T5936] ? mark_held_locks+0x40/0x70 [ 230.641025][ T5936] ? lockdep_hardirqs_on+0x78/0x100 [ 230.641036][ T5936] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 230.641047][ T5936] ? client_use_ptr+0x107/0x4b0 [ 230.641061][ T5936] snd_seq_kernel_client_dispatch+0x16f/0x1b0 [ 230.641079][ T5936] snd_midi_input_event+0x32f/0x470 [ 230.641098][ T5936] ? __pfx_snd_midi_input_event+0x10/0x10 [ 230.641119][ T5936] ? lock_acquire+0x5e/0x370 [ 230.641142][ T5936] ? __pfx_snd_midi_input_event+0x10/0x10 [ 230.641165][ T5936] snd_rawmidi_input_event_work+0x61/0x80 [ 230.641193][ T5936] process_one_work+0xa23/0x1940 [ 230.641210][ T5936] ? __pfx_process_one_work+0x10/0x10 [ 230.641224][ T5936] ? __pfx_snd_rawmidi_input_event_work+0x10/0x10 [ 230.641242][ T5936] worker_thread+0x5ef/0xe50 [ 230.641255][ T5936] ? __pfx_worker_thread+0x10/0x10 [ 230.641266][ T5936] ? kthread+0x13a/0x450 [ 230.641276][ T5936] ? __pfx_worker_thread+0x10/0x10 [ 230.641287][ T5936] kthread+0x370/0x450 [ 230.641297][ T5936] ? __pfx_kthread+0x10/0x10 [ 230.641307][ T5936] ret_from_fork+0x72b/0xd50 [ 230.641332][ T5936] ? __pfx_ret_from_fork+0x10/0x10 [ 230.641347][ T5936] ? __switch_to+0x800/0x10f0 [ 230.641365][ T5936] ? __pfx_kthread+0x10/0x10 [ 230.641376][ T5936] ret_from_fork_asm+0x1a/0x30 [ 230.641394][ T5936] [ 230.744345][ T1127] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 230.824120][ T1127] ata1.00: configured for UDMA/100 [ 230.825936][ T1127] ata1: EH complete [ 231.288458][ T5803] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.428059][ T5803] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.497180][ T5803] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.547516][ T5803] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.632503][ T5803] bridge_slave_1: left allmulticast mode [ 231.634532][ T5803] bridge_slave_1: left promiscuous mode [ 231.636439][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.640034][ T5803] bridge_slave_0: left allmulticast mode [ 231.641896][ T5803] bridge_slave_0: left promiscuous mode [ 231.644219][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.687663][ T5803] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.693084][ T5803] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.697097][ T5803] bond0 (unregistering): Released all slaves [ 231.748317][ T42] kauditd_printk_skb: 12 callbacks suppressed [ 231.748330][ T42] audit: type=1400 audit(1786956614.190:1022): avc: denied { write } for pid=13545 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.785859][ T42] audit: type=1400 audit(1786956614.230:1023): avc: denied { write } for pid=13548 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.804134][ T5437] 8021q: adding VLAN 0 to HW filter on device eth1 [ 231.851734][ T42] audit: type=1400 audit(1786956614.290:1024): avc: denied { write } for pid=13551 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.886549][ T5803] hsr_slave_0: left promiscuous mode [ 231.888701][ T5803] hsr_slave_1: left promiscuous mode [ 231.890780][ T42] audit: type=1400 audit(1786956614.330:1025): avc: denied { write } for pid=13554 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.890807][ T5803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.900275][ T5803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.903140][ T5803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.905484][ T5803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.909876][ T5803] veth1_macvtap: left promiscuous mode [ 231.911693][ T5803] veth0_macvtap: left promiscuous mode [ 231.913569][ T5803] veth1_vlan: left promiscuous mode [ 231.915290][ T5803] veth0_vlan: left promiscuous mode [ 231.971032][ T5803] team0 (unregistering): Port device team_slave_1 removed [ 231.979824][ T5803] team0 (unregistering): Port device team_slave_0 removed [ 232.006213][ T5437] 8021q: adding VLAN 0 to HW filter on device eth2 [ 232.067012][ T42] audit: type=1400 audit(1786956614.500:1026): avc: denied { write } for pid=13557 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.096534][ T42] audit: type=1400 audit(1786956614.540:1027): avc: denied { write } for pid=13560 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.138574][ T5437] 8021q: adding VLAN 0 to HW filter on device eth3 [ 232.232739][ T42] audit: type=1400 audit(1786956614.670:1028): avc: denied { write } for pid=13564 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.267593][ T42] audit: type=1400 audit(1786956614.710:1029): avc: denied { write } for pid=13567 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.276950][ T5803] IPVS: stop unused estimator thread 0... [ 232.289539][ T5437] 8021q: adding VLAN 0 to HW filter on device eth4 [ 232.319793][ T5803] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.386623][ T5803] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.446808][ T5803] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.497851][ T5803] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.628798][ T5803] bond0 (unregistering): Released all slaves [ 232.694264][ T42] audit: type=1400 audit(1786956615.140:1030): avc: denied { write } for pid=13573 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.734326][ T42] audit: type=1400 audit(1786956615.180:1031): avc: denied { write } for pid=13576 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.769041][ T5437] 8021q: adding VLAN 0 to HW filter on device eth29 [ 232.884538][ T5803] hsr_slave_0: left promiscuous mode [ 232.886559][ T5803] hsr_slave_1: left promiscuous mode [ 232.889922][ T5803] veth1_macvtap: left promiscuous mode [ 232.891744][ T5803] veth0_macvtap: left promiscuous mode [ 232.893604][ T5803] veth1_vlan: left promiscuous mode [ 232.895236][ T5803] veth0_vlan: left promiscuous mode [ 232.992875][ T5437] 8021q: adding VLAN 0 to HW filter on device eth30 [ 233.128582][ T5437] 8021q: adding VLAN 0 to HW filter on device eth31 [ 233.279429][ T5437] 8021q: adding VLAN 0 to HW filter on device eth32