last executing test programs: 45.049929895s ago: executing program 3 (id=164): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x3, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000280)="b9800000c00f3235000400000f300f0116b9800000c00f3235008000000f300f0866baf80cb83848f189ef66bafc0cb800000000efb97b0800000f320fff58f466baf80cb85f1c548aef66bafc0cb000eec4e1a1ece3660ffa26", 0x5a}], 0x1, 0x11, 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000040)={0x81, 0xffffffff, 0x9, 0x70f39cc2, 0xd, "355ab418f05aeb9b8052f9b02f217ff95ddfa0"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 44.940304228s ago: executing program 3 (id=165): r0 = socket$nl_route(0x10, 0x3, 0x0) getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)=0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipmr_delroute={0x4c, 0x19, 0x0, 0x70bd2b, 0x25dfdc00, {0x80, 0x10, 0x10, 0xd, 0xfc, 0x3, 0xc8, 0x9, 0xe00}, [@RTA_FLOW={0x8, 0xb, 0x1}, @RTA_SRC={0x8, 0x2, @loopback}, @RTA_IP_PROTO={0x5, 0x1b, 0x1}, @RTA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @RTA_UID={0x8, 0x19, r1}, @RTA_PRIORITY={0x8, 0x6, 0xe8e}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001000390500"/20, @ANYRES32=0x0, @ANYBLOB="10100000105000003c0012800b000100697036746e6c00002c000280140003002001000000000000003f0000000000000214000200fc0200"/68], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f00000000c0)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000100)=0x2c) (async) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x140001, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r4 = syz_open_dev$video(&(0x7f00000003c0), 0x0, 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./sys\x00', 0x1ff) (async) setns(0xc9, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x1c}}, 0x0) getsockname$packet(r6, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000019c0)=ANY=[@ANYBLOB="3c35ec0010e384060009000000d12231d72cd727e72f0c9af7e7963122e555a83025606700b149947bbe69c7055f3d8befccd51007d14031420b03b97f0424d24aa65063540fefd3ea5d8b5a49686ba0685eddcf696c4dd645c2842c80", @ANYRES64=r6, @ANYRESHEX=r5], 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000) (async) sendmsg$nl_route(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x503, 0x70bd28, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3816}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x7}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}}, 0x240000c0) (async) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000400)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000440)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f00000004c0)}, 0x400000}) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000001c0)=0xd) (async) getsockopt(r2, 0x0, 0x3, &(0x7f0000000940)=""/4096, &(0x7f0000001940)=0x1000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), r2) (async, rerun: 64) r8 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) sendmmsg$inet6(r8, &(0x7f0000000540)=[{{&(0x7f0000000580)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x8140) (async) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000005c0)={0x1, &(0x7f0000000600)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000001a80)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001b40)=@delqdisc={0x78, 0x25, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0xffee, 0xffe0}, {0xa, 0xffff}, {0x6, 0xd}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x1756fae6}, @TCA_RATE={0x6, 0x5, {0x9e, 0x1}}, @TCA_RATE={0x6, 0x5, {0xdb, 0x82}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x1000}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xd0e}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xdc}]}, 0x78}, 0x1, 0x0, 0x0, 0x24000803}, 0x0) 44.790071867s ago: executing program 3 (id=168): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaee}, 0x7, 0x7}, [{0x8, 0xfffff000, 0x2, 0x9, 0x1ff, 0xafe}, {0xe, 0xfffffffe, 0x1, 0x9, 0x4, 0x7}, {0x2, 0xfe73, 0x6, 0x8, 0x2, 0x10000}, {0x4320, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x4}, {0x6, 0x44, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x8009ef, 0x1, 0x3, 0x9, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xf7b, 0xa000, 0x8, 0x5, 0xa17}, {0x7, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x6, 0xfff, 0xe4af, 0x0, 0x8, 0x7}, {0x6, 0xd, 0x230, 0x400, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x4, 0x3}, {0x83, 0x3, 0x4, 0x7, 0x9, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0x11, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x80000000}, {0x2, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x0, 0x527e, 0xc7, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xbd52, 0x80, 0xef35}, {0x9, 0xb, 0x4, 0x8001, 0xfffffff8, 0x1}, {0x3, 0x8, 0xd, 0x1d00, 0x5, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd14, 0x9, 0x40}, {0x0, 0xd, 0x9, 0x8, 0xffffffff, 0x1}, {0xfffff125, 0x1000, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x20000002}, {0xec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x6, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x0, 0x9, 0x3, 0x5, 0x3, 0x2}, {0x4, 0xffff, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0x44}, {0x4, 0x4, 0x8, 0xfff, 0x6, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x7, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x594, 0xf90, 0xc, 0x3}, {0x5, 0x657a0ecc, 0x1, 0xa4, 0x0, 0x7}, {0x5, 0xe1, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0xe, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x6, 0x7, 0xd7d6, 0x9}, {0x42, 0x2, 0x6, 0x7, 0xae45, 0x5}, {0x6, 0x9c, 0x5, 0x80, 0x7fffffff, 0x5}, {0x7, 0x3, 0x3, 0x7, 0x0, 0x4}, {0x1, 0x2, 0x8, 0x8, 0x9, 0x5}, {0x1, 0x1, 0xfffffffe, 0x800, 0x0, 0x1}, {0x8, 0x5, 0x3fd, 0x4, 0xffffffff, 0x7}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x9}, {0x3, 0x80000001, 0xb, 0x1, 0x80000000}, {0x0, 0xfffffff7, 0x84e5, 0x7f, 0x3a, 0x3fd}, {0x8000, 0x7, 0x2, 0xd8, 0xa}, {0x9, 0x1004, 0x8, 0x6, 0x1, 0x2}, {0x0, 0x9, 0x9, 0xd, 0x7fffffff, 0xfffffc00}, {0x1, 0xfffffffc, 0x6, 0x2, 0xc0, 0xfffff44c}, {0x4, 0x3, 0xfffffff5, 0x9, 0xbe, 0x4}, {0x6, 0x3, 0x0, 0x7fff, 0x5, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x200, 0x9, 0xbc, 0x11}, {0x1ff, 0xfffffffc, 0x1, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x0, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x4, 0x2, 0x8}, {0xb8000000, 0xfffffff8, 0x7, 0x9, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x7f, 0x7, 0x8, 0x80}, {0x10001, 0x4, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0xa, 0x6, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fff, 0x2, 0xffffff7f, 0x381, 0x8, 0x1}, {0x9, 0x4, 0x1, 0x80000000, 0xae, 0x9}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x47, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x1, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x0, 0x3, 0xfffffffd}, {0x3, 0x2, 0x1fd, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x14, 0x3}, {0x80000000, 0x4, 0x899, 0xfff, 0x0, 0x2}, {0x5, 0x80000, 0x0, 0x1, 0x3, 0x3}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0x5}, {0x2, 0x20000000, 0x3, 0x6, 0x81, 0x5}, {0x6, 0x7ff, 0x1, 0x40, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5}, {0x3, 0x9, 0x1, 0x3b1c, 0x2, 0x6}, {0x4, 0x49354bbb, 0x2, 0x3, 0x7, 0x9}, {0x5, 0x2, 0x10, 0x9, 0x2, 0x400}, {0x40000fff, 0x54, 0x8, 0xc, 0x0, 0x6}, {0x401, 0x6, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x84, 0x3}, {0xc45c, 0xa, 0x0, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x405}, {0x7011, 0xfff, 0x9, 0x1, 0x9, 0x2}, {0x1, 0xff, 0x8, 0x2968, 0x2, 0xfffffffc}, {0x0, 0x9, 0xc402, 0x1, 0x100, 0xc72}, {0xfffffff9, 0x5, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x3, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x3ff, 0xb, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x7f, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x81, 0x6, 0x2f, 0x7}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x8000, 0x8, 0xd, 0x1, 0x5, 0x4}, {0xcab, 0xd, 0x4, 0xf, 0x8, 0x7}, {0x2, 0x2, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x0, 0x0, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x5, 0x7, 0xffffffff, 0xd, 0x1}, {0x5, 0x1000, 0x9, 0x8000, 0x24e, 0x1}, {0x7, 0x7, 0x7, 0x80000000, 0x1, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0x6, 0x7}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x5, 0x2, 0x5, 0x0, 0x7}, {0x8, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x4}, {0x5}, {}, {0x5}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x2) (async, rerun: 64) r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) (rerun: 64) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000000c0)) openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x141802, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 43.928324873s ago: executing program 3 (id=180): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000180)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='dummy_udc.', 0xa) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000280)=0xa, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f00000002c0)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f0000000000)={@multicast2, @empty}, 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) (async) symlinkat(&(0x7f0000000180)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) (async) write(r0, &(0x7f0000000240)='dummy_udc.', 0xa) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000280)=0xa, 0x4) (async) socket$netlink(0x10, 0x3, 0x4) (async) write(r1, &(0x7f00000002c0)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f0000000000)={@multicast2, @empty}, 0x8) (async) 43.830434434s ago: executing program 3 (id=183): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f00000000c0)) (async) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x6) r4 = fanotify_init(0x200, 0x1000) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1, 0x4e26, 0x714, 0x4e23, 0x5}, {@in=@multicast2, 0x4d4, 0x6c}, @in6=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0xae26}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x9, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000004b40)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000004b80)={0x0, 0x0, &(0x7f0000004bc0)={&(0x7f0000004c00)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r8, @ANYBLOB="08000500", @ANYRES32=r8, @ANYBLOB="1c0012"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x240408d4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004c40)={0x0, 0x0, &(0x7f0000004c80)={&(0x7f0000004cc0)=ANY=[@ANYBLOB="e8000000190001002dbd7000fbdbdf2502202000ff02ff020018000008000100ac1414aac100098026"], 0xe8}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000004d00)={0x0, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) sendmsg$nl_xfrm(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@local, @in6=@empty, 0x4e23, 0x0, 0x2, 0xfffe, 0xa, 0xe0, 0x80, 0xbca13077d9628b57}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@mcast2, @in=@loopback, @in=@remote, @in=@private=0xa010102, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x400c801}, 0x0) (async) r10 = dup(r3) fanotify_mark(r4, 0x1, 0x48001028, r10, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000004900)={0x10, 0x4, &(0x7f00000049c0)=ANY=[@ANYBLOB="e5000000000000007910480000000000610408000000000095000000"], &(0x7f0000004a00)='GPL\x00', 0x3, 0xfd90, &(0x7f0000004a40)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe6b}, 0x48) openat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x2d41, 0xd5) (async) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000580), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r11, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r11, &(0x7f00000006c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r10, &(0x7f0000002700)={0x50, 0x0, r12, {0x7, 0x1f, 0x0, 0xffffffff8480a242, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x90cd6fd0b52b8e8c}}, 0x50) (async) syz_fuse_handle_req(r11, &(0x7f0000002780)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000004780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004840)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r14 = openat(0xffffffffffffff9c, &(0x7f0000004880)='./file0\x00', 0x109881, 0x34) fcntl$lock(r14, 0x7, &(0x7f00000048c0)={0x1, 0x1, 0x700, 0x1000000, r13}) 43.598967859s ago: executing program 3 (id=192): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) (async) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) (async, rerun: 32) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 32) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000180)) (async) r4 = dup(r3) (async, rerun: 64) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x222200, 0x0) (rerun: 64) r6 = fcntl$dupfd(r2, 0x0, r5) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000200)={0x0, r4}) r7 = open(&(0x7f00000000c0)='./bus\x00', 0x4427e, 0x9a) fallocate(r7, 0x0, 0x0, 0x1000f4) lseek(r7, 0x5, 0x4) (async) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5a0}, 0x26) (async, rerun: 32) close(0x4) (async, rerun: 32) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x13, 0x0, &(0x7f0000000000)) 43.544146884s ago: executing program 32 (id=192): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) (async) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) (async, rerun: 32) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 32) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000180)) (async) r4 = dup(r3) (async, rerun: 64) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x222200, 0x0) (rerun: 64) r6 = fcntl$dupfd(r2, 0x0, r5) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000200)={0x0, r4}) r7 = open(&(0x7f00000000c0)='./bus\x00', 0x4427e, 0x9a) fallocate(r7, 0x0, 0x0, 0x1000f4) lseek(r7, 0x5, 0x4) (async) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5a0}, 0x26) (async, rerun: 32) close(0x4) (async, rerun: 32) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x13, 0x0, &(0x7f0000000000)) 36.951323619s ago: executing program 0 (id=272): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x20000007c, 0x0) r2 = dup3(r0, r1, 0x0) read$FUSE(r2, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES64=r3, @ANYRES32, @ANYRES16=r2, @ANYRES32=0x0, @ANYRES32=r2, @ANYRES16=0x0], 0x50) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES64=r1], 0x38}, 0x1, 0x0, 0x0, 0x48}, 0x40) 36.950704817s ago: executing program 0 (id=273): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff0001000000000071273fa79d93014b8e3381b6"], 0xfffffffffffffead) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000300)=r1}, 0x20) r3 = syz_create_resource$binfmt(&(0x7f0000000440)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) close(r4) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000380), &(0x7f00000003c0)=r0}, 0x20) set_mempolicy(0x0, 0x0, 0x1) r5 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001a000100000000000000000102000001000000090000000005001b0001"], 0x24}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 36.379472476s ago: executing program 0 (id=276): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) (async) syz_open_dev$MSR(&(0x7f0000000040), 0x6, 0x0) getsockopt$inet_int(r0, 0x0, 0x17, 0x0, &(0x7f0000000000)) mount(&(0x7f0000000200)=@sr0, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000280)='adfs\x00', 0x208403, 0x0) 36.377614051s ago: executing program 0 (id=278): r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x1, 0x803, 0x0) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000840)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000880)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f00000008c0)={0x0, 0x0, 0x10001, 0x5}) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f00000008c0)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000900)={{}, {0x0, 0x989680}}, 0x0) (async) timer_settime(0x0, 0x1, &(0x7f0000000900)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknod$loop(&(0x7f0000000940)='./file0\x00', 0xfff, 0x0) (async) mknod$loop(&(0x7f0000000940)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000980)='./file0\x00', 0x0, &(0x7f00000009c0)={[&(0x7f0000000a00)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) (async) execve(&(0x7f0000000980)='./file0\x00', 0x0, &(0x7f00000009c0)={[&(0x7f0000000a00)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280), 0xa14000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000300)='./bus\x00') prlimit64(0x0, 0x6, &(0x7f0000000800)={0x0, 0x4}, 0x0) (async) prlimit64(0x0, 0x6, &(0x7f0000000800)={0x0, 0x4}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file7\x00', 0x1c0) vmsplice(r1, &(0x7f00000006c0)=[{&(0x7f00000004c0)="f9e55f4510e955f62806bfef85cf9d5a15283e932383b709ccce6d158955d718abe4e632ccbe357d75439bc5e423cf", 0x2f}, {&(0x7f0000000500)="974860cbc93424b8c64b31c8b65d89400ca4625be74c6ce1d950", 0x1a}, {&(0x7f0000000540)="35ccdf4723d27ac382923621e12f03496680bc448426a9f83cbd5bfec8e9bc9c77e497672fc645a4607625e1da021e16dec0f12272a714fd1f5a303c15f3196554c08cfadfa46c705766f5b2e4715a2a038bd9d40c1d1a5bb09df14c5708f0735de9970f5e50deeee3629b8cab502dabfd91bf4976570f46b9bb7e90649eea16ad32788315197ded6569107a683b0306b7a8f0560571d653e88b3a7e4f0a419bcace99af4142f66a80fcc3fe194f54ec6e2f8ecf7a40139673bda580365aa2f0ec02c4", 0xc3}, {&(0x7f0000000640)="b01a56082cd6d97173779d36af775929380bf2220490413e242ea304b6b13d326ca3e03007afef6f9acc7ae8abd362f12ca071f9202f8dc3febfca9995685aae730dcd9247376e8cecb3f12821892a372ec909decdb196cb81d5039035ab", 0x5e}], 0x4, 0x1) (async) vmsplice(r1, &(0x7f00000006c0)=[{&(0x7f00000004c0)="f9e55f4510e955f62806bfef85cf9d5a15283e932383b709ccce6d158955d718abe4e632ccbe357d75439bc5e423cf", 0x2f}, {&(0x7f0000000500)="974860cbc93424b8c64b31c8b65d89400ca4625be74c6ce1d950", 0x1a}, {&(0x7f0000000540)="35ccdf4723d27ac382923621e12f03496680bc448426a9f83cbd5bfec8e9bc9c77e497672fc645a4607625e1da021e16dec0f12272a714fd1f5a303c15f3196554c08cfadfa46c705766f5b2e4715a2a038bd9d40c1d1a5bb09df14c5708f0735de9970f5e50deeee3629b8cab502dabfd91bf4976570f46b9bb7e90649eea16ad32788315197ded6569107a683b0306b7a8f0560571d653e88b3a7e4f0a419bcace99af4142f66a80fcc3fe194f54ec6e2f8ecf7a40139673bda580365aa2f0ec02c4", 0xc3}, {&(0x7f0000000640)="b01a56082cd6d97173779d36af775929380bf2220490413e242ea304b6b13d326ca3e03007afef6f9acc7ae8abd362f12ca071f9202f8dc3febfca9995685aae730dcd9247376e8cecb3f12821892a372ec909decdb196cb81d5039035ab", 0x5e}], 0x4, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file7/file0\x00', 0x0) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file7/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xa6) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) r5 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000700)="cc2476bc3c0395dae245c67b49f9ddf0be1f95e56cffd2a8866842f6b113275802e1f0bd391c3031615ca973b7e187584f2a0cb375445d6b75a8f651d3c7c5eb1b8f765944f07c0060c5ee39e5b02f9c5820d0077ab56564db7a8967ef5d1e826ddaa8fae8d8a3b14bd5b5d87e7318b2f7d66579a67d5f8926b0536a95279926f5d6dc9c99c4dcc5fd7a4ee74fded503e56c53466a14570e02bbbd1ebadaaf249c470bf0f32839b73352acb42b175c28ac2e6435bc08fabbf7e8843e6efa417f1ca0b6eab8eeac85989f1c26bdf6aa225066cae78850f2cd982db9", 0xdb) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x68, 0x0, 0xc8, r4}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x68, 0x0, 0xc8, r4}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 36.299667369s ago: executing program 0 (id=281): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setxattr$security_evm(&(0x7f0000000000)='./dev\x00', &(0x7f0000000040), &(0x7f00000000c0)=@md5={0x1, "27f85bae658d99e039db2ea78ffd9b4c"}, 0x11, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1f7) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10000) 35.868967988s ago: executing program 0 (id=284): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)) r0 = socket$nl_route(0x10, 0x3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000005c0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dce, 0x1, 0xb4, 0xd, 0x0, 0x6, 0x7, 0x8000, 0x6, 0xfc000004, 0x403, 0xbbf, 0x800003, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0xa, 0x4, 0x100002, 0xc3, 0x5d6, 0x80, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x6, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x0, 0x9, 0xffffffff, 0x5, 0x81, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x4, 0x5, 0x491, 0x9, 0x8, 0x1, 0x424, 0x102, 0x5, 0x41, 0x5, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x7, 0x7ff, 0xff, 0x1001, 0x10000001, 0x7, 0x21, 0x9, 0x80, 0x7, 0x1000, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000806, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xb, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000b40)=0x7f, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000bc0)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000c80), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000cc0), 0x0, &(0x7f0000000d00)=ANY=[@ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000400']) mount$fuse(0x0, 0x0, &(0x7f0000000d40), 0x1010, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000d80)=@target={'target ', {'PCI:', '5', ':', 'b', ':', 'd', '.', '1e'}}, 0x14) openat$kvm(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000e00)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000e40)=[@text32={0x20, &(0x7f0000000e80)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000ec0)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x439, 0x70bd2a, 0x40, {0x0, 0x0, 0x0, 0x0, 0x21801, 0x1303}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @sit={{0x8}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @mcast2}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x5}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40054d0}, 0x4000020) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 35.840965258s ago: executing program 33 (id=284): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)) r0 = socket$nl_route(0x10, 0x3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000005c0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dce, 0x1, 0xb4, 0xd, 0x0, 0x6, 0x7, 0x8000, 0x6, 0xfc000004, 0x403, 0xbbf, 0x800003, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0xa, 0x4, 0x100002, 0xc3, 0x5d6, 0x80, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x6, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x0, 0x9, 0xffffffff, 0x5, 0x81, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x4, 0x5, 0x491, 0x9, 0x8, 0x1, 0x424, 0x102, 0x5, 0x41, 0x5, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x7, 0x7ff, 0xff, 0x1001, 0x10000001, 0x7, 0x21, 0x9, 0x80, 0x7, 0x1000, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000806, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xb, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000b40)=0x7f, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000bc0)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000c80), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000cc0), 0x0, &(0x7f0000000d00)=ANY=[@ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000400']) mount$fuse(0x0, 0x0, &(0x7f0000000d40), 0x1010, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000d80)=@target={'target ', {'PCI:', '5', ':', 'b', ':', 'd', '.', '1e'}}, 0x14) openat$kvm(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000e00)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000e40)=[@text32={0x20, &(0x7f0000000e80)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000ec0)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x439, 0x70bd2a, 0x40, {0x0, 0x0, 0x0, 0x0, 0x21801, 0x1303}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @sit={{0x8}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @mcast2}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x5}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40054d0}, 0x4000020) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 22.770245889s ago: executing program 2 (id=485): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x30000, 0x200000, &(0x7f0000200000/0x200000)=nil}) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x14000}) 22.65865454s ago: executing program 2 (id=489): fsopen(&(0x7f0000000000)='ntfs3\x00', 0x0) r0 = socket(0x15, 0x5, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000004780)) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000300), r3) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000047c0)={&(0x7f0000004800)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000048c0)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0100000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000004900)={0x16, 0x10, &(0x7f00000049c0)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff450200000000000018110000", @ANYRES32=r5, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bf610000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000004a40)='GPL\x00', 0x7, 0x0, 0x0, 0x2a079ff5b90a2b9f, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000004a80)={0x0, 0x0, &(0x7f0000004ac0)={&(0x7f0000004b00)=@newtaction={0x48, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x0}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) getresuid(&(0x7f00000003c0), &(0x7f0000000400)=0x0, &(0x7f0000000440)) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000480), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f00000005c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r8, &(0x7f0000002600)="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", 0x2000, &(0x7f0000004600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000046c0)={0x90, 0x0, 0x4000000000, {0x3, 0x0, 0x0, 0x8001, 0x0, 0x0, {0x10000000000000, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x2001, 0x0, r9, 0x0, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r3, r7, r9) socket$inet(0x2, 0xa, 0xc867) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r2, &(0x7f0000000240)='\n', 0x0}, 0x20) r10 = syz_open_dev$sndpcmc(&(0x7f0000000280), 0x0, 0x0) ppoll(&(0x7f00000002c0)=[{r10, 0x200}], 0x1, 0x0, 0x0, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r11, 0x6, 0x13, &(0x7f0000004b80)=0x100000001, 0x76dc) connect$inet6(r11, &(0x7f0000004bc0), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r11, 0x6, 0x1f, &(0x7f0000004c00), 0x4) r12 = fcntl$dupfd(r11, 0x0, r11) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r11, 0x6, 0x14, &(0x7f0000004c40)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r12, &(0x7f0000004c80)={0x0, 0x0, &(0x7f0000004cc0)={&(0x7f0000004d00)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) 22.651199027s ago: executing program 2 (id=491): r0 = socket(0x10, 0x3, 0x0) setuid(0xee01) (async) setuid(0xee01) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000440)=0x8, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000440)=0x8, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0x0, 0x0) (async) execveat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000140), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000180)={"dfff00", 0x0, 0x5, 0x6, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "ffe9ff00"]}) ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000200)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1}) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000240)={"4497acf4", 0xb, 0x4, 0x0, 0x3, 0x1000006, "5500578ea5f4ffffffeb00001000", "1575b859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) select(0x40, &(0x7f00000002c0)={0x8, 0x8000000000000000, 0xfe00000000000000, 0x3, 0x1000, 0x2, 0x9f3, 0x2040000}, 0x0, 0x0, 0x0) (async) select(0x40, &(0x7f00000002c0)={0x8, 0x8000000000000000, 0xfe00000000000000, 0x3, 0x1000, 0x2, 0x9f3, 0x2040000}, 0x0, 0x0, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000480), 0x8) close(r3) (async) close(r3) fcntl$setstatus(r3, 0x4, 0x2c00) r4 = gettid() fcntl$setown(r3, 0x8, r4) (async) fcntl$setown(r3, 0x8, r4) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001880)=[{&(0x7f00000004c0)=""/130, 0x82}, {&(0x7f0000000580)=""/236, 0xec}, {&(0x7f0000000680)=""/32, 0x20}, {&(0x7f00000006c0)=""/65, 0x41}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/203, 0xcb}, {&(0x7f0000001840)=""/2, 0x2}], 0x7) (async) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001880)=[{&(0x7f00000004c0)=""/130, 0x82}, {&(0x7f0000000580)=""/236, 0xec}, {&(0x7f0000000680)=""/32, 0x20}, {&(0x7f00000006c0)=""/65, 0x41}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/203, 0xcb}, {&(0x7f0000001840)=""/2, 0x2}], 0x7) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x58, 0xc, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4040000) mount(0x0, &(0x7f0000000340)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000340)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/net/afs/rootcell\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x204031, 0xffffffffffffffff, 0xec775000) write(r6, &(0x7f0000000400)='syz', 0x3) (async) write(r6, &(0x7f0000000400)='syz', 0x3) setsockopt$inet_mreqn(r1, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000001a80)=@sack_info={0x0, 0x7f}, 0xc) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000001ac0)=@assoc_value={0x0, 0x8}, &(0x7f0000001b00)=0x8) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000102c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES64=r3, @ANYRESDEC=r0, @ANYRES16=r4], 0x40}}, 0x4064825) 21.759898166s ago: executing program 2 (id=506): r0 = socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x81c0, 0x80000001) mount$overlay(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300), 0x8, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000d80), 0x800, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000dc0), 0x80000, 0x0) read$FUSE(r1, &(0x7f0000000e00)={0x2020}, 0x2020) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0, 0x41) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000003c0)={0x8}) chdir(&(0x7f0000000d00)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000d40)='./file1\x00', 0x8042, 0x34) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$poke(0x420f, r3, 0x0, 0x101) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) timerfd_create(0x9, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@delpolicy={0x58, 0x14, 0x1, 0x0, 0x25dfdbfb, {{@in=@multicast1, @in6=@loopback, 0x0, 0x80, 0x7, 0x0, 0x0, 0x80}}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008050}, 0x0) r6 = socket(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)={r0}) bind$xdp(r6, &(0x7f0000000080)={0x2d, 0x0, r4, 0xc}, 0x10) r7 = socket(0x2d, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x800000, 0x0, 0x8, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x8000, 0x20, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x3de8, 0x4, 0x5, 0x5, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x803, 0x2, 0x5, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000011, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0xb, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x5, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0xfff, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xfffffeff, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x232, 0x5, 0x2, 0x9, 0x3, 0xcdd, 0x2, 0xd6b, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x3, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xff, 0x7, 0x1, 0x82, 0x530, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x4, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x3, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7ffd, 0x5, 0x5, 0x0, 0x8, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x5, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x400002, 0x0, 0x1, 0x1, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x9, 0x9, 0x8, 0x0, 0x8000, 0xa, 0x2009, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0xe, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x7e54, 0xa, 0x2, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0x7, 0x7, 0x2, 0x2, 0x4]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x2, 0x5, 0x2, 0xb0, {0xb, 0x2, 0x2d88, 0x8, 0xffff, 0x10000}, {0xc, 0x0, 0x6, 0x6, 0x1, 0x1}, 0x6, 0xa0000, 0x2}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x0) bind$xdp(r7, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) close(r7) 21.689690389s ago: executing program 2 (id=507): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r5 = socket$inet(0x2, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) sendmsg$nl_generic(r6, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x1cc, 0x36, 0x1, 0x70bd25, 0x25dfdbfd, {0x16}, [@typed={0x8, 0x1b, 0x0, 0x0, @u32=0xc3}, @generic="cc224f3a9c9e48f197895ac12b1c3098aa7a0b7a936f0790b06d5406618ccd975fe2206303ab55947c68e208f45c1a7f7dc4c40f2e03449ffdf9aa57f278aada9935ec1324174d34b6011e8715f3514209e8f880933b2f7586eeb4de2b9d54d853180732b38530bc", @typed={0x8, 0xd5, 0x0, 0x0, @pid=r7}, @typed={0x8, 0x7c, 0x0, 0x0, @fd=r4}, @generic="8475b8f6225c8c673093ad93201a32553dacd0d4d4da6b3b4de76b172815e2101d4103c9b96da2e646dac81061ab00a51e0b56461872866c1b93380338f07160f94675dba88098fc03ba0d8e18a16852ccfe118be14fdf8a8de0178e63aa51e1e958cdbdf45552e9f54cd298eaf38edc774ad4290f16effb5732f58113ca38c1cc8105c6e983af33aec73822cc1ba20f41fc1806d629ef16be07ec1fa5a3bf1bffc8fb05cb3db11809334ff9d526b9020d8225adc9c87af7", @generic="945907bbc29e4498c35d237d95d26122e0b76404e2c240cd48d08dc3a7d28b1d9dc0fd9a79419fb9da88206fad66e942a3bd3792f5360a90252ca442c52c16ee3aaf2a72870f995563c86201ad9f41ca3e97b8a1d2d9c574d1012ce886769c924dee20ed581b25734f48cff9e59936831adc578baffd6837a54f177a51"]}, 0x1cc}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180)='syzkaller0\x00', 0xb) sendmsg$NL80211_CMD_PROBE_CLIENT(r6, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4841}, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x10) 21.360033164s ago: executing program 2 (id=510): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/sda\x00', 0x101042, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x40000000) r1 = syz_io_uring_setup(0xf04, 0x0, 0x0, 0x0, 0x0) syz_ublk_add_dev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = io_uring_setup(0x1b7b, &(0x7f0000002480)={0x0, 0x78e8, 0xfc84, 0x2, 0x2a0}) io_uring_enter(r2, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 21.332521394s ago: executing program 34 (id=510): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/sda\x00', 0x101042, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x40000000) r1 = syz_io_uring_setup(0xf04, 0x0, 0x0, 0x0, 0x0) syz_ublk_add_dev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = io_uring_setup(0x1b7b, &(0x7f0000002480)={0x0, 0x78e8, 0xfc84, 0x2, 0x2a0}) io_uring_enter(r2, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 13.699226973s ago: executing program 6 (id=633): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write(r1, &(0x7f0000000000)="aefc00001a0025f00385bc04fef7681d0a0b49ff708800008002280008020200ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) r2 = socket(0x10, 0x803, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x10000}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'pim6reg1\x00', 0x1000}) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp6_SCTP_PLPMTUD_PROBE_INTERVAL(r2, 0x84, 0x85, &(0x7f0000000140)={0x1, @in6={{0xa, 0x6e61, 0x42e04fae, @remote, 0x10000}}, 0x1}, &(0x7f0000000300)=0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000380)={r4, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x52, 0x8303}, 0x90) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="bd8b9c4fb6c8979a0000dc", @ANYRES32=r3, @ANYBLOB="46000600000000001400128009000100626f6e640000000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x0) mknodat$md(0xffffffffffffff9c, &(0x7f0000000880)='./md0\x00', 0x6180, 0x0) r5 = openat$md_node(0xffffffffffffff9c, &(0x7f00000008c0)='./md0\x00', 0x2, 0x0) ioctl$RUN_ARRAY(r5, 0x40081271, &(0x7f0000000900)) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x2241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000540)={'syzkaller0\x00', 0x5005}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000580)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x20, 0x1, {{0x0, 0x0, 0x2}}}]}}}]}]}}]}, 0x8c}}, 0x0) r10 = socket$inet(0x2, 0x2, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prctl$PR_SET_NAME(0xf, &(0x7f0000000980)=':\x00') r12 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000b80)={r12}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f0000000800)={'syzkaller0\x00', 0x1}) write$tun(r7, &(0x7f0000000840)=ANY=[@ANYBLOB="03030800030016000c004565"], 0x2e) sendmsg$sock(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)="54000000100001040000000000000000000000000000000000000000000000000f00030073797a6b616c6c6572300000240012000a00010076786c616e00000014000200080003007b000000080002007f000001", 0x54}], 0x1}, 0x0) 13.569543534s ago: executing program 6 (id=634): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/console\x00', 0x1, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000bfd000/0x400000)=nil) ioctl$TCXONC(r2, 0x540a, 0x3) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000540)={0xf444, 0x4, 0x2, 0x4, 0x15, "0dcaaaf2f86ab7c276e85c26a4a6c42ec80c0f"}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000400)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000440), 0x2) read(0xffffffffffffffff, &(0x7f0000000480)=""/88, 0x58) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="010025bd7000fddbdf253800000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x4040000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"/304, @ANYRES16=r2, @ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x801) pipe2$watch_queue(&(0x7f0000000180), 0x80) 13.568902382s ago: executing program 6 (id=635): socket$kcm(0x29, 0x2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x1, 0x0}, 0x8) r1 = memfd_secret(0x80000) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) r3 = getpgrp(0xffffffffffffffff) r4 = gettid() r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r2, 0x35, 0x0, @val=@iter={&(0x7f0000000080)=@task={r3, r4, r5}, 0x10}}, 0x20) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r0, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1b, r7, 0x8, 0x0, 0xffffffffffffffc7, 0x10, 0x0, 0x0, r0, 0x0, 0x1, 0x0, &(0x7f00000002c0)=[{0x0, 0x1, 0xd, 0x9}], 0x10, 0x3}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000480)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x0, 0x4, 0x0, 0x4, 0xfffffffc}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xfffffff8, 0x5, 0xfffffffe, 0x1, 0x345}}]}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x70}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000640)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000000780)={r6, &(0x7f0000000680)='/proc/thread-self\x00', 0x500, &(0x7f00000006c0)={@_ha_fsid={[0xffff, 0x80]}, {0x40, 0xa, 0xa, 0x9}}, 0x2, &(0x7f0000000700), &(0x7f0000000740)=0x1}) r12 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./nfsd/versions\x00', 0x2, 0x0) write(r12, &(0x7f0000000800)="2d32202b3399707f3191342f78202d34202b2d2e312026342e320a", 0x1b) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r12, 0x84, 0x7c, &(0x7f0000000240)={0x1, 0x3fa1, 0x7}, &(0x7f0000000340)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1a, 0x0, &(0x7f0000000300), &(0x7f0000000380)='syzkaller\x00', 0x0, 0xb0, &(0x7f00000003c0)=""/176, 0x41000, 0x6, '\x00', r10, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0xfffffffe}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0x80007ff, 0x401}, 0x10, 0xffffffffffffffff, r1, 0x3, &(0x7f0000000840)=[r11, r1, r1, r1, r11, r5, r1, r12, r1, r1], &(0x7f0000000300)=[{0x5, 0x3, 0x6, 0x6}, {0x5, 0x2, 0x5, 0x8}, {0x2, 0x5, 0x5, 0x7}], 0x10, 0x80000001}, 0x94) 13.497581953s ago: executing program 6 (id=636): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0xa0) mount$bind(&(0x7f0000000340)='.\x00', &(0x7f0000000380)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f00000003c0)='./file0/../file0\x00') r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001c00)=@bpf_lsm={0x1d, 0x21, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @map_fd={0x18, 0x8, 0x1, 0x0, 0x1}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x7}, @exit, @alu={0x4, 0x0, 0x4, 0x9, 0x5, 0xfffffffffffffff4, 0xfffffffffffffffc}, @map_fd={0x18, 0x3}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0x8, 0x1000, &(0x7f0000000b80)=""/4096, 0x41100, 0x21, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001b80)={0x4, 0xc, 0x40, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x8}, 0x94) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001cc0), 0x220002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001d00)={r0, r1, 0x2, 0x0, @void}, 0x10) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ff9000/0x4000)=nil) mount$bind(&(0x7f0000000b00)='.\x00', &(0x7f0000000b40)='./file0\x00', 0x0, 0xd5848, 0x0) pivot_root(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='./file0/../file0\x00') 13.497309836s ago: executing program 6 (id=637): pipe(0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-ce\x00'}, 0x58) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) socket$nl_generic(0x10, 0x3, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@bridge_delneigh={0x1c, 0x1c, 0x1, 0x2000002, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040051}, 0x40c0) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x20000001, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000080)={0x0, 0x0, 0x3, "dbb49b01f7ae8daa05c65e54e6f700000000006000", 0x61006b1a}) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001400030500008000ffdbdf2502075b", @ANYRES32, @ANYBLOB="080002007f00000108000400ac1e0001140003"], 0x3c}, 0x1, 0x0, 0x0, 0xc090}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 13.406585438s ago: executing program 6 (id=638): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010000d0421bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="b2000600410c04001c0012800c0001006d6163766c616e000c000280080009000700000008000540", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x8840}, 0x4) r2 = syz_io_uring_setup(0x7d62, &(0x7f0000000340)={0x0, 0x5228, 0x2, 0x1, 0x33a}, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r3 = syz_ublk_setup_io_uring(0x4d22, &(0x7f0000000100)={0x0, 0x354c, 0x1, 0x3, 0x373, 0x0, r2}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rpc\x00') r5 = openat(r4, &(0x7f00000002c0)='auth.unix.ip/channel\x00', 0x2, 0x0) mknod(&(0x7f0000000480)='./file0\x00', 0x8001420, 0x1) select(0x2a, 0x0, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', 0x40000, 0x2) fcntl$notify(r6, 0x402, 0x8000000e) r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x20842, 0x0) writev(r7, &(0x7f0000000540)=[{&(0x7f0000000580)="e1", 0x5603d}], 0x1) write(r5, &(0x7f0000000300)=' \\ 127.0.0.1 2000000000 \\xalhost\n', 0x24) io_uring_setup(0x63f, &(0x7f0000000240)={0x0, 0xee6c, 0x2000, 0x0, 0x37b, 0x0, r3}) 13.328450244s ago: executing program 35 (id=638): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010000d0421bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="b2000600410c04001c0012800c0001006d6163766c616e000c000280080009000700000008000540", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x8840}, 0x4) r2 = syz_io_uring_setup(0x7d62, &(0x7f0000000340)={0x0, 0x5228, 0x2, 0x1, 0x33a}, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r3 = syz_ublk_setup_io_uring(0x4d22, &(0x7f0000000100)={0x0, 0x354c, 0x1, 0x3, 0x373, 0x0, r2}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rpc\x00') r5 = openat(r4, &(0x7f00000002c0)='auth.unix.ip/channel\x00', 0x2, 0x0) mknod(&(0x7f0000000480)='./file0\x00', 0x8001420, 0x1) select(0x2a, 0x0, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', 0x40000, 0x2) fcntl$notify(r6, 0x402, 0x8000000e) r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x20842, 0x0) writev(r7, &(0x7f0000000540)=[{&(0x7f0000000580)="e1", 0x5603d}], 0x1) write(r5, &(0x7f0000000300)=' \\ 127.0.0.1 2000000000 \\xalhost\n', 0x24) io_uring_setup(0x63f, &(0x7f0000000240)={0x0, 0xee6c, 0x2000, 0x0, 0x37b, 0x0, r3}) 13.279950811s ago: executing program 5 (id=640): syz_open_dev$video(0x0, 0x0, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000002080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14ad3d65dd610210ff000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073009331002300001400038010f0ff7f0c00018006000100000000001480fc001164d750c6000000000000000100000a"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c0001800600010058"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) 13.279606345s ago: executing program 5 (id=641): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x6c, 0x0, 0x0, 0x10000000}, {0x6}]}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x62181) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x1, 0x6, "a049db", 0x81, 0x3e}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xfc, {"a2e3ad09ed1a09f91b37090987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f383b6c090890c0879b0a0ac6e70a9b3361959b509a240d5b0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d074d0936cd3b78130daa61d8e8048500005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 12.406117976s ago: executing program 5 (id=650): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001280)=[{{&(0x7f00000012c0)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x41}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000001340)="ef", 0x1}], 0x1}}], 0x1, 0x20040140) listen(r0, 0xfff) r1 = accept(r0, 0xfffffffffffffffd, &(0x7f0000001380)) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x3, 0x16, &(0x7f0000001480)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf200000000000000700000008ffffffbd0301000000000095000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d4301000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9755ba08554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a6538b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c51231422bb8fab4d4d897db2c544c0ec50b8eac8c63d2b1cd06a39702bd547f5ebaa6954f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564b8f8a621483fb2a5ff221e0d831d64759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d8b570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91f0eb18e21dfdab3c84ec11377fbbfd1e000000000000"], &(0x7f0000001a80)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20400, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r5 = socket$l2tp6(0xa, 0x2, 0x73) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001840), r1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000001980)={'syztnl1\x00', &(0x7f0000001880)={'syztnl1\x00', r4, 0x40, 0x10, 0xffff, 0x2, {{0x34, 0x4, 0x0, 0x0, 0xd0, 0x67, 0x0, 0x9, 0x2f, 0x0, @rand_addr=0x64010102, @broadcast, {[@timestamp={0x44, 0x8, 0xa9, 0x0, 0xa, [0x9]}, @timestamp_addr={0x44, 0xc, 0xbd, 0x1, 0x7, [{@private=0xa010102}]}, @timestamp={0x44, 0x20, 0xcd, 0x0, 0x2, [0x3, 0x1, 0xbe39, 0x400, 0xf, 0x1, 0x507c]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x3c, 0xde, 0x3, 0x1, [{@private=0xa010102, 0x5}, {@private=0xa010101, 0x9}, {@rand_addr=0x64010101, 0x4}, {@multicast1, 0x754}, {@local, 0x8}, {@loopback, 0x3}, {@broadcast, 0x200}]}, @end, @noop, @timestamp_prespec={0x44, 0x44, 0x60, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xc}, {@private=0xa010102, 0x2}, {@multicast2, 0x5}, {@private=0xa010101, 0x1}, {@remote}, {@broadcast, 0x4}, {@private=0xa010101, 0x4}, {@loopback, 0x6}]}, @end]}}}}}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000001b00)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001b40)=ANY=[@ANYBLOB="e8000002e87b264304271345bb7ced2cdbabb555b60ae718a5a5ae12a0dc5a62a9160193415f1e704ef4bd8c611e3e6701e5", @ANYRES16=r6, @ANYBLOB="10002cbd7000fcdbdf25030000001c000180080003000300000008000100", @ANYRES32=r4, @ANYBLOB="08000300020000000500050007000000200001800800030001000000140002006272696467655f736c6176655f300000050005000800000005000300c600000070000180080003000100000008000100", @ANYRES32=r4, @ANYBLOB="140002007665746830000000000000000000000008000300000000001400020062617461647630000000000000000000080003000100000014000200767863616e3100000000000000000000080003000100000008000100", @ANYRES32=r7, @ANYBLOB="0500030000000000050003007f000000"], 0xe8}, 0x1, 0x0, 0x0, 0xc840}, 0x10) bind$l2tp6(r5, &(0x7f0000001100)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001140), 0xffffffffffffffff) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000019c0)={'ip6_vti0\x00', 0x0}) r12 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r12, 0x107, 0xf, &(0x7f0000001a00), 0x56) sendmsg$kcm(r12, &(0x7f0000001a40)={&(0x7f0000001c80)=@xdp={0x2c, 0x0, r11, 0x42}, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001d40)="27030200dc0f14000e0007000024c1020000ff3207c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200040000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x7, 0x1f45, 0x4, 0x7ff}, 0x4, 0x1, 0x0, 0x7, 0x2ff, 0xb, 0x1a, 0x1c, 0x4, 0x7131d5f9, {0x7, 0x80000001, 0x7, 0x81, 0x3, 0xf70a}}}}]}, 0x78}}, 0x0) r13 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtfilter={0xe94, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x4, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0xf, 0x4}, {0xf, 0x7, 0x694, 0x51, 0x8001}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x7}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x7fffffff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x685, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x7, 0x9}, {0x1, 0xfffffffb, 0x6, 0x6, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffa, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x2}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0xd, 0x7fff, 0x4, 0x8, 0x6}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x1, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x1, 0x1ff, 0x1000, 0x9c, 0x1, 0x7}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158142, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x2, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0xd, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x9, 0x6, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0xe628, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x4, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x2, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0x5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0x1ff, 0x9, 0x6, 0x6, 0x9, 0x83}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x8401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x4, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x84, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x0, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x9}, {0x7, 0xd, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0x7fff, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x7}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x7}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x4, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0xfffffffe, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x5}, {0x8, 0x10, 0xcc, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b8}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x4, 0x1, 0x8, 0xfa2f}, {0x10, 0x5e20, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0xffffffff, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000002, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x2a8b7572, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x4, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x2001, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x801, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x3, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x3}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x7}}]}, 0xe94}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0) 12.133865536s ago: executing program 5 (id=651): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newnexthop={0x3c, 0x68, 0x901, 0x0, 0x0, {}, [@NHA_GROUP_TYPE={0x6}, @NHA_GROUP={0x1c, 0x2, [{0x1, 0x4}, {0x2, 0xd4}, {0x1, 0x2}]}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xaa}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000140)) r2 = syz_open_pts(r0, 0x2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0xf) ioctl$TCSBRK(r2, 0x400455c8, 0x2) r3 = syz_open_dev$video(&(0x7f0000000340), 0x7, 0x80) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000380)={0x980000, 0x1, 0x7, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x980913, 0x0, '\x00', @string=0x0}}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000001c0)=0xc0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)=0xbc) 12.066164263s ago: executing program 5 (id=653): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) accept4$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev}, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000001c0)='X', 0x1, 0x30008000, &(0x7f0000000200)={0xa, 0x4e23, 0x89, @loopback}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x110) write(r2, &(0x7f0000000100)='27', 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000700)={0x1, &(0x7f0000000740)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 11.859089294s ago: executing program 5 (id=657): mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000a00)='./proc\x00', &(0x7f0000000a40)='proc\x00', 0x4000, 0x0) r0 = gettid() timer_create(0x7, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x2, r0, 0x1, &(0x7f0000000100)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000ac0)='27', 0x2) mount$tmpfs(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000040), 0x1, &(0x7f00000000c0)=ANY=[]) 6.416975626s ago: executing program 4 (id=711): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001500)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000015c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000002800)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0xfffffffa, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x80000a, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x0, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0x8, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x62, 0xc00, 0x9, 0xa, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x401, 0xffe, 0x421, 0x3ff, 0x2, 0x2d, 0x7, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r10, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000082, 0x0, 0x1}]}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000003040)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000003080)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000030c0)={&(0x7f0000003100)=@xdp={0x2c, 0xdd86, r11, 0x3e}, 0x80, &(0x7f0000003180)=[{&(0x7f00000031c0)="80", 0x1}], 0x1}, 0x4) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000003200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003280)={&(0x7f0000000480)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r13, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x5, 0x10, 0x80, 0xb, 0x40, 0xbf, 0x814, 0x3, 0x1, 0x3fe2d524, 0x4, 0xd, 0x0, 0x95, 0x2}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 6.274823766s ago: executing program 4 (id=717): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fsopen(&(0x7f0000000240)='msdos\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000280)='uid', &(0x7f00000002c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0x0, 0x1}, 0x6) write(r0, &(0x7f0000000200)="464d85e9085de542d67c", 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f00000001c0), 0x2, 0x0) sendfile(r3, r3, 0x0, 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r4, &(0x7f0000000100)='wusb3801 0x4', 0xc) 6.16009617s ago: executing program 4 (id=718): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b000101000000090403001202060100052406000005240000000d240100000000000000000000090582020002000000090503021f02100000"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) (async) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000a80)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x6cb, 0x73f6, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x0, 0x9, "", [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x1, 0x1, 0x8, {0x9, 0x21, 0xb95f, 0x4, 0x1, {0x22, 0xddf}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7, 0x9, 0xff}}}}}]}}]}}, &(0x7f0000000e80)={0xa, &(0x7f0000000ac0)={0xa, 0x6, 0x300, 0xeb, 0x2, 0x3, 0x20, 0x5}, 0x10, &(0x7f0000000b00)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0xa5, 0x0, 0x8001, 0x8}]}, 0x9, [{0x17, &(0x7f0000000b40)=@string={0x17, 0x3, "346c2a15f0018f7e5426d625ed54a9862316cec21e"}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x403}}, {0x70, &(0x7f0000000c00)=@string={0x70, 0x3, "da8dfea48468452cc5ad82dd615a78a19c86b815dfc9425d3743e329ed35d86a8278b5358201c2ff830f2e793e4bbbb0433796de7ea1eb15d4934a0171e041f90c411b515a16b09199234b7419cf4f3cb9ea9023b9d9c69b5d9496c1344d6f24ff0c1a9e1f445efde84eae0f5de3"}}, {0xf3, &(0x7f0000000c80)=@string={0xf3, 0x3, "b71f2d447f290e84ea1de7bd8839f44b4c45a71e6731a651ecd009f48190ac951368c9ab20481b49343fffcfbfc27e74cce04a0bb1251ef7950823b28e3ee983dcbb667f98a6a8c83a57abbfd4d261f4a9d75bcd6c815d5eedc13fb85c734073ab300c88fe1f42dadf01d2d2fb2483886089143fdf7c78f5df5b34bc88850717aaf6aa077420ae628e015518c40daf8e095b4f5e5e9dd17e0d0ccd4fc9f1e722128b9fd64f2f24a75311bf5b1d68a56aa3d8ddcae861563b60779cb116f4fd5e59a35937727a8bcae8020da6423876b0c565ccc90f55222f6cf16cd0f8c68b5e5d3541330a4fa0d6f8f06abdf6a8e4521c"}}, {0x6, &(0x7f0000000d80)=@string={0x6, 0x3, "afa4c13d"}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x81d}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x441}}, {0x4, &(0x7f0000003040)=@lang_id={0x4, 0x3, 0xc51}}]}) (async) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000940), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0xc0000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x48, r2, 0xb00, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xbf}]}, 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x11) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2720, 0x0, &(0x7f0000000e40)) (async) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) r5 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$DM_DEV_CREATE(r5, 0xc138fd03, &(0x7f0000000600)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) (async) ioctl$DM_TABLE_LOAD(r5, 0xc138fd09, &(0x7f0000000740)={0x4, 0x0, 0x0, 0x1a8, 0x138, 0x1, 0x0, 0x1, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '1\x00'}}, [@flakey={0x0, 0x448, 0x0, 0x70, 'flakey\x00', {{@ram_num={'1:', 0x1}, 0x20, '1024'}, 0x20, 0x0, 0x20, 0x0, ' 0'}}]}) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000100)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r6 = accept4(r3, 0x0, 0x0, 0x80000) recvmsg(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/81, 0x51}], 0x1}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000010000100f0ffffff000000000200000a140000001100010000400000000000000500000a"], 0x28}}, 0x20004010) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000400)) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f00000004c0)=[@increfs]}) (async) r9 = syz_ublk_setup_io_uring(0x542b, &(0x7f0000003080)={0x0, 0x1b5e, 0x4, 0x0, 0x313}, &(0x7f0000003100), &(0x7f0000003140), &(0x7f0000003180)) r10 = io_uring_setup(0x667, &(0x7f0000000f40)={0x0, 0xa14a, 0x400, 0x1, 0x235, 0x0, r9}) r11 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000fc0), 0x0) read$FUSE(r11, &(0x7f0000001000)={0x2020}, 0x20) (async) close_range(r10, 0xffffffffffffffff, 0x0) (async) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000540)=[@release={0x40046306, 0x2}, @reply={0x40406301, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) (async) ioctl(r3, 0x0, &(0x7f0000000340)="7573623000000000000000000000000003") 3.128633086s ago: executing program 4 (id=738): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x1, 0x4, 0x8, 0xfe, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x16, 0xc, &(0x7f0000000a80)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x1}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r1, 0x0, 0xe, 0x0, &(0x7f0000000bc0)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.079309781s ago: executing program 4 (id=739): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000516000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f000034a000/0x2000)=nil, 0x0}, 0x68) r0 = fsopen(&(0x7f00000001c0)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='source\x00', &(0x7f00000002c0)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='proto\x00', &(0x7f0000000340)='tcp\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async, rerun: 32) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 32) getsockopt$inet6_tcp_int(r1, 0x6, 0x8, 0xffffffffffffffff, &(0x7f0000000100)) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xc801) (async, rerun: 32) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x3e45, 0x1c080, 0x10040, 0x44a}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x40, 0x0, 0x0, 0xffffffffffffffff, 0x0}) (async, rerun: 64) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x4c, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x5, 0x38, 0x1000}}}}}}}, 0x0) (async, rerun: 64) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x2f) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0xd15, 0xffffff1b, {0x0}, {0xee00}, 0xfffffffffffffffd, 0x60000000000000}) syz_open_procfs(r3, &(0x7f0000000180)='numa_maps\x00') 2.990004649s ago: executing program 4 (id=742): r0 = gettid() timer_create(0xb, &(0x7f0000000380)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_connect(0x2, 0x24, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./dev\x00', &(0x7f00000004c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./dev/vhci\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000700)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x3, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000140)=0x1) sendmmsg$inet6(r2, &(0x7f0000000180)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380), 0x1}}], 0x3, 0x1c000) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000300)={r4, 0x1, 0x6, @multicast}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010427fd7000fdffffff00000000", @ANYRES32=0x0, @ANYBLOB="290000f8000400001c00128009000100626f6e64000000000c00028008001f0004000000"], 0x3c}}, 0x0) 2.249128463s ago: executing program 7 (id=753): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@can_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_SET={0x15, 0x4, {{{0x4, 0x1, 0x1}, 0x6, 0x0, 0x0, 0x0, "acd0c4c8999fd7e5"}, 0x6}}]}, 0x2c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = syz_clone(0x8020000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x40) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x60042, 0x0) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002", @ANYRES16], 0x78) ioctl$SNDCTL_SEQ_SYNC(r3, 0x5101) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x1e00, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a010400000000000000000200000a0900010073797a300000000040000000030a010400000000000000000200000a0900010073797a30000000000900030073797a30000000001400048008000140000000030800024000000000f0000000060a010400000000000000000200000a0900010073797a30000000000900020073797a3000000000240004802000018007000100727400001400028008000240000000040800014000000010a0000740be6c818d4e75bb9eebfa44cd99192ffe3984e8e946a76226bc38869cf725f3bc8db2788d4e608a29c3a29584be7567ba04f4ac0bcd7e1f474dd259fe0058a153e4f159a3144130a1ce3e7877be74ca53cdeaddc667c2e9a9692a2f387ebc74328163e35973dd5b2b7e238f2192305bce61c40ab8dfb31242ee74cc1370cecca0c308f0febd22b03a42799ece5ad33531a5b534859487ac95ec07ddee14000000110001"], 0x178}}, 0x0) 2.009457723s ago: executing program 7 (id=756): socket(0x400000000010, 0x3, 0x0) (async) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000840)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x10001, 0xdd, "185cd718c9265c24dd680ba83bac5b743efa4a979524f2ea299c7b4de82ca597141d38601515426b1d90e899d0e7193ca72af133fd3518b7b232f005b0a389097e98f601c47e50dbb69375bc8e58e06672982520898c531692ab4f5679d9cb21928800b51c7fa5e455ceb96317fd242796d30e6bafb1e2af8cd45fc4ef10726b8fa426573a8ba2a464115dd97c9acbe0eefb406603840172b2a784bd5d76d3ab2bf28fe7b2dd2e0f866a57734cd3ba6a569f14bfc460210489d44a2fb7bedb7f726edec3e985c51533c873b243c3ba7cddf5378d7b5feb8195e5b6584d"}}) 2.009151492s ago: executing program 7 (id=757): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x78}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000500)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000540)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r9, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x30004081) r10 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000880), 0x50082, 0x0) ioctl$CDROMREADRAW(r10, 0x5314, &(0x7f00000008c0)={0x9, 0x1, 0x7, 0xfd, 0x8, 0x1}) setsockopt$sock_int(r9, 0x1, 0x7, &(0x7f0000000840)=0x800, 0x4) r11 = gettid() ioctl$XFS_IOC_ERROR_CLEARALL(0xffffffffffffffff, 0x40085875) ioprio_get$pid(0x1, r11) r12 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000001340)="b9800000c00f3235000100000f30c74424003d010000c744240248be1beaff1c24f3400fc737f3476388c0262666470f38805ed1440f07c403b15f156c08ba5700c744240098000000c744240200000000ff1c24b9e30200000f32", 0x5b}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="040e0b080510"], 0xe) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, 0x0, 0x0) 1.259241861s ago: executing program 1 (id=759): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) (async, rerun: 32) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) (async) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f00000003c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000500)=""/24, 0x18, 0xb, 0xb, 0x8, 0x400, 0x6876}}, 0x120) (async) write$UHID_INPUT2(r2, &(0x7f0000000540)={0xc, {0x7, "2100005000fa00"}}, 0xd) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x3c, r1, 0x1, 0x2, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xd0}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x8}]}, 0x3c}}, 0x0) (async, rerun: 64) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000000040)=""/57) (async, rerun: 64) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f0000000100)={0x2b, &(0x7f0000000300)=[{0x27, '\x00', @data=0x7, 0x7}, {0x15, '\x00', @buffer={"f631bbaf35026b35532546bb50666b3cae8bec98dc014b6ea9138ab6768f4dcd", 0x20}, 0x4}]}) (async) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000314230c2ebd7000ffdbdf253300020073797a3100000000080000148cccae8c0033005a86b4cf74756e00"/60], 0x38}, 0x1, 0x0, 0x0, 0x14f7325d9d03b00}, 0x4000) 689.939415ms ago: executing program 1 (id=760): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/console\x00', 0x1, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000bfd000/0x400000)=nil) ioctl$TCXONC(r2, 0x540a, 0x3) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000540)={0xf444, 0x4, 0x2, 0x4, 0x15, "0dcaaaf2f86ab7c276e85c26a4a6c42ec80c0f"}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000400)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000440), 0x2) read(0xffffffffffffffff, &(0x7f0000000480)=""/88, 0x58) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000500)={0x2, 0xfe}, 0x2) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x4040000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"/304, @ANYRES16=r2, @ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x801) pipe2$watch_queue(&(0x7f0000000180), 0x80) 688.186703ms ago: executing program 1 (id=761): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @ioapic={0x0, 0x5fa, 0x8, 0x1fb, 0x0, [{0x3, 0x9, 0x8, '\x00', 0x6}, {0x5, 0xb, 0x72, '\x00', 0x6}, {0xfe, 0x5, 0x9, '\x00', 0x8}, {0x81, 0x3, 0x6, '\x00', 0x5}, {0xb, 0x4d, 0x7f, '\x00', 0x60}, {0x0, 0x0, 0x2}, {0x1, 0x9, 0x9, '\x00', 0xa}, {0xd, 0x5, 0xb, '\x00', 0x10}, {0x8, 0x5, 0x0, '\x00', 0xff}, {0x6, 0x3, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x2, '\x00', 0xa3}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x3, 0x86, 0xa, '\x00', 0xf9}, {0x5, 0x4f, 0x2}, {0x61, 0x87, 0x96, '\x00', 0x7}, {0x6, 0x0, 0x23, '\x00', 0x79}, {0x3, 0x7, 0xd1, '\x00', 0x2}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x8, 0xe, 0xc0, '\x00', 0x2}, {0x3e, 0x48, 0xc, '\x00', 0x2}, {0xa, 0x2, 0x2, '\x00', 0x1}, {0x3, 0x7, 0x86, '\x00', 0x39}, {0x93, 0x9, 0x4, '\x00', 0xe6}, {0x9, 0x7f, 0xa0, '\x00', 0x47}]}}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x5, 0x8, 0x2, 0x0, 0x4, 0x9, 0x2, 0xc0, 0x6d, 0x26, 0x61, 0x7, 0x95, 0xd}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 629.92128ms ago: executing program 1 (id=762): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x70f9, 0x8102) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0xb) ioctl$UBLK_U_CMD_GET_DEV_INFO(0xffffffffffffffff, 0x80207502, &(0x7f00000000c0)={0x0, 0xffff, 0x40, &(0x7f0000000080)=@ublk_ctrl_dev_info_new=@any_dev}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) ioctl$FE_GET_EVENT(r1, 0x80286f4e, &(0x7f0000000180)={0x0, {0x0, 0x0, @vsb}}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000001c0)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000200)=0x20) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={r4}, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f00000002c0)={0x340, 0x2c, 0x100, 0x70bd2b, 0x25dfdbfe, {0x9}, [@generic="dabbdd4de75cfa7157683ed2f0ce9e2b7f428a6d1711838e886313d9286b8d4ab353df50f9175da410bf17729022b04e9d72347e33185dd90e1617f1fc0c075e2242bfd6404627affac5466d3965c6059e821894794d885fa8097e08187561a6121a42996130afd46d289347ff0dc7dd18cbc6a1dd39952bed06c6d9b4de8d9c5dbf92f94b52f0f08e5a946943e086530cffbcee978e", @nested={0xc, 0x10b, 0x0, 0x1, [@nested={0x4, 0x86}, @nested={0x4, 0x16b}]}, @generic="fd762553d56b09f2851a647a4f3dcd111a65606a67de4c66495612e812338979bb7c90edc0accc0ed9c92529655cbf9e0771fb68aef01584eedf08ddc0695025754e8f8ce83de7a22ca86bc66a246306f67a78527b", @nested={0x110, 0x147, 0x0, 0x1, [@generic="879ad5aea939da5028b6c8b865977c053056fe8bdda751c03ef92f2c31f605315c57ec8f24e604481bdfc864b19b", @generic="1c31892386f85c48987b8656ddefae41e685f3b980e424a2580bd14c53496217866d70d136eee4e2", @generic="5fd419095e1cd4fc57ff31a4601977d5495ab6c32dbeb8d525f4b1545e18d7d5839eb76adc7b9da7ca354e2cfe74fc76ac90712b0bd38d289ef779db6762da33adcad16f40d9f0763fb5e1215c05fc19f368d1583723f59f10dd877c7d24ff534ad0f74af3c67d35418b35e4cd3a80c89e3f0aeace3666f442fa0194198a70d12964b8a24c80f7c55c634c5f8df6bfc70abe1a88d773ae2be2889e4aea230e43e6292f6b8612", @nested={0x4, 0x12f}, @nested={0x4, 0x10c}, @typed={0x8, 0x28, 0x0, 0x0, @u32=0x3}]}, @generic="88d1680d1ee94a74872264d98169cbe06d83607385b20b4400d3dfb9430ad2ee95afdf7ddf11043544eefc3525e79334602c72cea4d121c4b086e8fc4067a3667747a92b0f6b716f8c7e65bcbef285ec614bb3cf351cdb17e4caf19b86c7d19bc90cf1cfa3813c2ae3cac87986d4a4802a9889a06c79a042e090da0c1637475c4111d07d08b709420557be5af130ea1fb9418536c4bf535ea2d6d3ce6e148daddf393b2a79198935fe79cd7386083ca9df15574e4d9be5f867dbf7ac2ea639f91b5ee3f7e690d50e", @typed={0x4, 0xd1}, @generic="c539", @generic="018f90d6eef045a247f9e8575f62e0ac83c45a0622d263457b94d7ebaea552a56a18a00230bbfdda64304bbcf051e9d53dd760f4f55bd0eda1308d2b44a6cdd2d6e7fcb3ef00e7fb68ccba8792edce3c4ec4377952"]}, 0x340}}, 0x800) write$6lowpan_control(r1, &(0x7f0000000680)='connect aa:aa:aa:aa:aa:11 2', 0x1b) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000006c0)={'vxcan0\x00', 0x0}) write$tcp_mem(r1, &(0x7f0000000700)={0xf70d, 0x20, 0x8000000000000001, 0x20, 0x6}, 0x48) r6 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r6, &(0x7f0000000980)={0x2c, &(0x7f0000000800)={0x0, 0x1, 0x55, {0x55, 0x8, "eba643972c644916b6c721e3be842a78416ffcb4cc1a0a202adc7539dd7243425a86625404cb8b9ebce85dcf8bef974ea374823d25ee606c63d14cee94a5e42026c48caaab4d4b8256542332d0d82cc723d827"}}, &(0x7f0000000880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1810}}, &(0x7f00000008c0)={0x0, 0xf, 0x33, {0x5, 0xf, 0x33, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x6, 0x7, 0x6}, @ssp_cap={0x24, 0x10, 0xa, 0x3, 0x6, 0x7ff800, 0xf, 0xe8, [0x3f00, 0x30, 0xff0000, 0xc0c0, 0xf, 0xc0ff]}, @ptm_cap={0x3}]}}, &(0x7f0000000900)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x8, 0x1, 0x7, "3c5b54e1", "5d19c2b3"}}, &(0x7f0000000940)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x1, 0x40, 0x7, 0x0, 0x28, 0x2}}}, &(0x7f0000000dc0)={0x84, &(0x7f00000009c0)={0x20, 0x14, 0x2c, "7cde65a4ab8da47db8196e4d4f5991cebf95169c08a674f19fd5e2aef240d45ea2f6677496312324ab916a78"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0xfa}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000a80)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000ac0)={0x20, 0x0, 0x8, {0x1, 0x80, [0xf0f]}}, &(0x7f0000000b00)={0x40, 0x7, 0x2, 0xfff}, &(0x7f0000000b40)={0x40, 0x9, 0x1, 0xb}, &(0x7f0000000b80)={0x40, 0xb, 0x2, "38da"}, &(0x7f0000000bc0)={0x40, 0xf, 0x2}, &(0x7f0000000c00)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, &(0x7f0000000c40)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000c80)={0x40, 0x19, 0x2, '/X'}, &(0x7f0000000cc0)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000d00)={0x40, 0x1c, 0x1, 0x3a}, &(0x7f0000000d40)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000d80)={0x40, 0x21, 0x1, 0x7}}) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000e80)={0x0, 0x5}, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x38, 0x3e, 0x200, 0x70bd26, 0x25dfdbfe, {0x10}, [@nested={0x1c, 0x122, 0x0, 0x1, [@nested={0x4, 0xa6}, @nested={0x4, 0xa6}, @nested={0x4, 0xad}, @typed={0xc, 0x161, 0x0, 0x0, @u64=0xfffffffffffffffc}]}, @typed={0x8, 0xad, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000fc0)={'lo\x00', @remote}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000001000)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000001040)={r3, 0x4}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000010c0)=@assoc_value={r9, 0x2}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r8, 0x84, 0x65, &(0x7f0000001100)=[@in6={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000001140)={r3, 0x3}, &(0x7f0000001180)=0x8) splice(r7, &(0x7f00000011c0)=0x3, r8, &(0x7f0000001200)=0x1000, 0xe21b, 0x8) r10 = accept4$inet6(r1, &(0x7f0000001240), &(0x7f0000001280)=0x1c, 0x80000) ioctl$BTRFS_IOC_QUOTA_RESCAN(r10, 0x4040942c, &(0x7f00000012c0)={0x0, 0x1, [0x4, 0x7, 0x6, 0x3, 0x9, 0x1]}) setsockopt$inet_sctp6_SCTP_RTOINFO(r10, 0x84, 0x0, &(0x7f0000001300)={r2, 0x2d0, 0x6, 0x6}, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000001380), r8) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f00000014c0)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001480)={&(0x7f00000013c0)={0x84, r11, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@pci={{0x8}, {0x11}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x15) fgetxattr(r0, &(0x7f0000001500)=@known='user.incfs.metadata\x00', &(0x7f0000001540)=""/135, 0x87) sendmsg$nl_route_sched(r1, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x4842010}, 0xc, &(0x7f00000016c0)={&(0x7f0000001640)=@getchain={0x4c, 0x66, 0x10, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xc, 0x3}, {0xfff1, 0xffff}, {0x0, 0x4}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x94a}, {0x8, 0xb, 0xdb}, {0x8, 0xb, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 522.6953ms ago: executing program 7 (id=763): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) read(r0, &(0x7f0000000240)=""/85, 0x55) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x110) write(r1, &(0x7f0000000200)='27', 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000400)=0x3) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x2e, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x4, 'dh\x00', 0x0, 0x101, 0x6a}, 0x2c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000780)={'syzkaller0\x00', 0x1002}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000007c0)={'syzkaller0\x00', 0x0}) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000800)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x20, 0x1, {{0x0, 0x0, 0x2}}}]}}}]}]}}]}, 0x8c}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000a80)="3282db78e0ea55c52d87bc2a166b9e46818f5faca0b3a411e056b7928ccacd30019d925e47ecd2f92675d1d80000000000000004007d002ae35902b5d768e71db355cf220bb96b7a64e1d2629c3e21c5decd0e2e6f107e35a8081587d3dc42a0bc0d0c5e85c355c9cbadd6e8f8014acb52d24b961a3989d5102d540829ad660fdca299e7e74a71ed264d75a3e1dfb8331f1b441972bc5941fa418cfee6139c15eda91b1ecf8887e108b15c4c7505c31efe205c875a7c854aa65bcc2e04ea6739f968547df4ae455ecd6b0566ef52705630df27d81e2a544ecc09f8c73cec559d206644acdc56c717e19f04613456b8d7a386c0a700c032d0165c3b3f5716aa7f24e6fca5", 0x104}], 0x1}, 0x8400) write$tun(r3, &(0x7f0000000bc0)=ANY=[], 0x9dd7) fstat(r2, &(0x7f0000000080)) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/bsg/0:0:0:0\x00', 0x40040, 0x0) ioctl$BSG_IO(r7, 0x2285, &(0x7f0000000300)={0x51, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffeac, 0x0, 0x0, &(0x7f00000003c0)="d6", 0x0, 0xc30, 0x30, 0x0, 0x4}) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="66696c74657200000000440141269f5f93cb000000000000000000000000000078020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2fe320000000000000000000000df00"/668], &(0x7f0000000700)=0x2a0) 360.266662ms ago: executing program 7 (id=764): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') syz_clone3(&(0x7f0000000080)={0x2140280, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0xa1) fchdir(r0) creat(&(0x7f00000012c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xae) 359.694767ms ago: executing program 7 (id=765): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r2, &(0x7f0000001000)={0x2020}, 0x2020) mkdirat(r2, &(0x7f0000003040)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x2c) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @multicast}, 0x10) r4 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000200)=0x60, 0x80000) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r4, 0x118, 0x1, &(0x7f0000000240)=0x1ff, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010427fd7000fdffffff00000000", @ANYRES32=0x0, @ANYBLOB="296adf18dfa92191ea63415182001c00128009000100625addf02089d5d8f23b687ccb6f7c6400010000000100ba9c16650a0000001f0004000000"], 0x3c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000d80)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000e00)='./sys\x00', &(0x7f0000000e40)='sysfs\x00', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x200000, 0x20) setns(r6, 0x10000000) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000140), 0x0) acct(&(0x7f0000000640)='./sys/bus/pci/devices/0000:00:01.0/remove\x00') close(r7) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000340)='ns/net\x00') r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r7}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r8, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)="5c00000015006b03000000d86e6c1d0002117ea6ea6567e71b59000af32c6e020075f800250002000f00000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd70000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000680)={0x8000200d}) write(r10, &(0x7f0000000f40)='1', 0x1) r11 = openat(0xffffffffffffff9c, &(0x7f0000000f80)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r11, &(0x7f0000000fc0)='1', 0x1) 62.255538ms ago: executing program 1 (id=766): mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000) r0 = syz_open_dev$radio(&(0x7f0000000680), 0x3, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e24, 0x6f41bcbb, @empty, 0x2}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f000033d000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="d8df7e23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0x62}], 0xaaaaaaaaaaaab09, 0x41, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fdf000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x1b, 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000140)={[0x1268f1cd, 0xfffffffffffffff8, 0x5, 0x9c2, 0x6, 0x4, 0x458, 0x0, 0x6, 0x6, 0x3, 0x5, 0xfffffffffffffffd, 0x10000006, 0xd, 0x100000000], 0x4, 0x100000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, 0x0) 0s ago: executing program 1 (id=767): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000000)={'virt_wifi0\x00', 0x1}) ioctl(r0, 0x8b32, &(0x7f0000000040)) socket$inet(0x2, 0x3, 0x2) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast1}}}}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x6, &(0x7f0000000240)={0x0, 0x12dc, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x3, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) inotify_add_watch(0xffffffffffffffff, &(0x7f00000003c0)='.\x00', 0x400017e) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x105000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) shutdown(r2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c0, 0x0, 0x98, 0x130, 0x260, 0x328, 0x0, 0x98, 0x130, 0x1c8, 0x328, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mark={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x420) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x20, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={r4, @in6={{0xa, 0x4e21, 0x4, @empty, 0x9}}, 0x4f2, 0x4, 0x624e, 0xa, 0x55, 0x7f}, 0x9c) kernel console output (not intermixed with test programs): form_write+0x10/0x10 [ 85.293036][ T7707] ? file_update_time_flags+0x38c/0x520 [ 85.293049][ T7707] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 85.293061][ T7707] shmem_file_write_iter+0x10e/0x140 [ 85.293074][ T7707] __kernel_write_iter+0x2ac/0x930 [ 85.293088][ T7707] ? __pfx___kernel_write_iter+0x10/0x10 [ 85.293101][ T7707] ? __up_read+0x333/0x980 [ 85.293115][ T7707] ? dump_user_range+0x7e0/0xe90 [ 85.293130][ T7707] ? copy_mc_enhanced_fast_string+0x6/0xf [ 85.293147][ T7707] dump_user_range+0xa0d/0xe90 [ 85.293165][ T7707] ? __pfx_dump_user_range+0x10/0x10 [ 85.293183][ T7707] ? elf_coredump_extra_notes_write+0xbb/0x450 [ 85.293199][ T7707] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 85.293214][ T7707] ? __pfx_writenote+0x10/0x10 [ 85.293232][ T7707] elf_core_dump+0x2d97/0x3d60 [ 85.293256][ T7707] ? __pfx_elf_core_dump+0x10/0x10 [ 85.293269][ T7707] ? kasan_save_stack+0x3f/0x50 [ 85.293282][ T7707] ? kasan_save_stack+0x30/0x50 [ 85.293294][ T7707] ? kasan_save_track+0x14/0x30 [ 85.293306][ T7707] ? __kasan_kmalloc+0xaa/0xb0 [ 85.293318][ T7707] ? __kvmalloc_node_noprof+0x35b/0x9b0 [ 85.293331][ T7707] ? get_signal+0x1f20/0x21d0 [ 85.293341][ T7707] ? arch_do_signal_or_restart+0x91/0x7e0 [ 85.293358][ T7707] ? irqentry_exit+0x542/0xab0 [ 85.293371][ T7707] ? 0xffffffffff600000 [ 85.293397][ T7707] ? lock_acquire+0x1d1/0x380 [ 85.293408][ T7707] ? get_signal+0x1f20/0x21d0 [ 85.293423][ T7707] ? vfs_coredump+0x2606/0x58c0 [ 85.293435][ T7707] vfs_coredump+0x2606/0x58c0 [ 85.293455][ T7707] ? __pfx_vfs_coredump+0x10/0x10 [ 85.293472][ T7707] ? __lock_acquire+0x5c0/0x1f40 [ 85.293484][ T7707] ? lock_acquire+0x1d1/0x380 [ 85.293494][ T7707] ? unwind_next_frame+0xbd/0x2090 [ 85.293514][ T7707] ? lock_acquire+0x1d1/0x380 [ 85.293524][ T7707] ? is_bpf_text_address+0x25/0x1a0 [ 85.293539][ T7707] ? find_held_lock+0x2b/0x80 [ 85.293554][ T7707] ? is_bpf_text_address+0x8a/0x1a0 [ 85.293567][ T7707] ? is_bpf_text_address+0x8a/0x1a0 [ 85.293582][ T7707] ? bpf_ksym_find+0x128/0x1c0 [ 85.293598][ T7707] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 85.293617][ T7707] ? is_bpf_text_address+0x94/0x1a0 [ 85.293643][ T7707] ? __sigqueue_free+0xbe/0x2a0 [ 85.293657][ T7707] ? stack_trace_save+0x8e/0xc0 [ 85.293679][ T7707] ? kasan_save_stack+0x3f/0x50 [ 85.293691][ T7707] ? kasan_save_stack+0x30/0x50 [ 85.293704][ T7707] ? kasan_save_track+0x14/0x30 [ 85.293716][ T7707] ? kasan_save_free_info+0x3b/0x70 [ 85.293726][ T7707] ? __kasan_slab_free+0x5f/0x80 [ 85.293739][ T7707] ? kmem_cache_free+0x127/0x6c0 [ 85.293748][ T7707] ? __sigqueue_free+0xbe/0x2a0 [ 85.293760][ T7707] ? get_signal+0xb02/0x21d0 [ 85.293769][ T7707] ? arch_do_signal_or_restart+0x91/0x7e0 [ 85.293786][ T7707] ? irqentry_exit+0x542/0xab0 [ 85.293794][ T7707] ? asm_exc_general_protection+0x26/0x30 [ 85.293830][ T7707] ? rcu_is_watching+0x13/0xc0 [ 85.293847][ T7707] get_signal+0x1f20/0x21d0 [ 85.293863][ T7707] ? __pfx_get_signal+0x10/0x10 [ 85.293878][ T7707] arch_do_signal_or_restart+0x91/0x7e0 [ 85.293897][ T7707] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 85.293918][ T7707] ? cond_local_irq_disable.part.0+0x38/0x40 [ 85.293929][ T7707] ? exc_general_protection+0x120/0x240 [ 85.293946][ T7707] irqentry_exit+0x542/0xab0 [ 85.293958][ T7707] asm_exc_general_protection+0x26/0x30 [ 85.293969][ T7707] RIP: 0033:0x7f57a6b9f561 [ 85.293979][ T7707] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 85.293989][ T7707] RSP: 002b:00002000000003b0 EFLAGS: 00010217 [ 85.293999][ T7707] RAX: 0000000000000000 RBX: 00007f57a6e25fa0 RCX: 00007f57a6b9f559 [ 85.294006][ T7707] RDX: 00002000000003c0 RSI: 00002000000003b0 RDI: 0000000000200000 [ 85.294012][ T7707] RBP: 00007f57a6c36b20 R08: 0000200000000440 R09: 0000200000000440 [ 85.294019][ T7707] R10: 0000200000000400 R11: 0000000000000206 R12: 0000000000000000 [ 85.294025][ T7707] R13: 00007f57a6e26038 R14: 00007f57a6e25fa0 R15: 00007ffdf17663f8 [ 85.294040][ T7707] [ 85.306733][ T43] kauditd_printk_skb: 59 callbacks suppressed [ 85.306744][ T43] audit: type=1400 audit(1792609234.498:753): avc: denied { setopt } for pid=7818 comm="syz.2.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 85.324583][ T7707] memory: usage 307200kB, limit 307200kB, failcnt 19435 [ 85.324602][ T7707] memory+swap: usage 432180kB, limit 9007199254740988kB, failcnt 0 [ 85.324614][ T7707] kmem: usage 5732kB, limit 9007199254740988kB, failcnt 0 [ 85.324624][ T7707] Memory cgroup stats for /syz5: [ 85.324752][ T7707] cache 308256768 [ 85.324760][ T7707] rss 434176 [ 85.324766][ T7707] rss_huge 0 [ 85.324773][ T7707] shmem 308256768 [ 85.324779][ T7707] mapped_file 0 [ 85.324786][ T7707] dirty 0 [ 85.324793][ T7707] writeback 0 [ 85.324799][ T7707] workingset_refault_anon 2 [ 85.324805][ T7707] workingset_refault_file 0 [ 85.324812][ T7707] swap 127979520 [ 85.324818][ T7707] swapcached 128012288 [ 85.324825][ T7707] pgpgin 107279 [ 85.324831][ T7707] pgpgout 31912 [ 85.324838][ T7707] pgfault 8391 [ 85.324845][ T7707] pgmajfault 1 [ 85.324852][ T7707] inactive_anon 180428800 [ 85.324858][ T7707] active_anon 128274432 [ 85.324865][ T7707] inactive_file 0 [ 85.324871][ T7707] active_file 0 [ 85.324877][ T7707] unevictable 0 [ 85.324945][ T7707] hierarchical_memory_limit 314572800 [ 85.324954][ T7707] hierarchical_memsw_limit 9223372036854771712 [ 85.324962][ T7707] total_cache 308256768 [ 85.324968][ T7707] total_rss 434176 [ 85.324975][ T7707] total_rss_huge 0 [ 85.324981][ T7707] total_shmem 308256768 [ 85.324989][ T7707] total_mapped_file 0 [ 85.324995][ T7707] total_dirty 0 [ 85.325002][ T7707] total_writeback 0 [ 85.325007][ T7707] total_workingset_refault_anon 2 [ 85.325015][ T7707] total_workingset_refault_file 0 [ 85.325022][ T7707] total_swap 127979520 [ 85.325029][ T7707] total_swapcached 128012288 [ 85.325036][ T7707] total_pgpgin 107279 [ 85.325042][ T7707] total_pgpgout 31912 [ 85.325048][ T7707] total_pgfault 8391 [ 85.325054][ T7707] total_pgmajfault 1 [ 85.325060][ T7707] total_inactive_anon 180428800 [ 85.325066][ T7707] total_active_anon 128274432 [ 85.325073][ T7707] total_inactive_file 0 [ 85.325079][ T7707] total_active_file 0 [ 85.325085][ T7707] total_unevictable 0 [ 85.325091][ T7707] anon_cost 0 [ 85.325097][ T7707] file_cost 0 [ 85.325103][ T7707] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.357,pid=7662,uid=0 [ 85.327408][ T7707] Memory cgroup out of memory: Killed process 7662 (syz.5.357) total-vm:98704kB, anon-rss:1336kB, file-rss:56388kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 85.333962][ T43] audit: type=1400 audit(1792609234.528:754): avc: denied { lock } for pid=7820 comm="syz.4.395" path="socket:[18999]" dev="sockfs" ino=18999 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 85.339769][ T7822] netlink: 6060 bytes leftover after parsing attributes in process `syz.4.395'. [ 85.393450][ T7690] syz.5.357 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 85.393473][ T7690] CPU: 3 UID: 0 PID: 7690 Comm: syz.5.357 Not tainted syzkaller #0 PREEMPT(full) [ 85.393485][ T7690] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.393492][ T7690] Call Trace: [ 85.393497][ T7690] [ 85.393501][ T7690] dump_stack_lvl+0x100/0x190 [ 85.393522][ T7690] dump_header+0xfb/0x606 [ 85.393536][ T7690] oom_kill_process.cold+0xd/0x380 [ 85.393550][ T7690] out_of_memory+0x340/0x14f0 [ 85.393569][ T7690] ? __pfx_out_of_memory+0x10/0x10 [ 85.393588][ T7690] mem_cgroup_out_of_memory+0xc6/0x130 [ 85.393602][ T7690] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 85.393614][ T7690] ? find_held_lock+0x2b/0x80 [ 85.393633][ T7690] ? do_raw_spin_unlock+0x145/0x1e0 [ 85.393647][ T7690] ? _raw_spin_unlock+0x28/0x50 [ 85.393664][ T7690] try_charge_memcg+0x783/0xf60 [ 85.393685][ T7690] ? __pfx_try_charge_memcg+0x10/0x10 [ 85.393701][ T7690] ? find_held_lock+0x2b/0x80 [ 85.393715][ T7690] ? rcu_read_unlock+0x17/0x60 [ 85.393725][ T7690] ? rcu_read_unlock+0x17/0x60 [ 85.393735][ T7690] ? find_held_lock+0x2b/0x80 [ 85.393750][ T7690] ? rcu_read_unlock+0x17/0x60 [ 85.393763][ T7690] charge_memcg+0x1ae/0x210 [ 85.393781][ T7690] __mem_cgroup_charge+0x2b/0x1c0 [ 85.393793][ T7690] shmem_alloc_and_add_folio+0x451/0xd40 [ 85.393815][ T7690] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 85.393833][ T7690] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 85.393851][ T7690] ? __lock_acquire+0x5c0/0x1f40 [ 85.393864][ T7690] shmem_get_folio_gfp+0x756/0x1980 [ 85.393885][ T7690] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 85.393901][ T7690] ? inode_set_ctime_current+0x9c/0x850 [ 85.393918][ T7690] ? find_held_lock+0x2b/0x80 [ 85.393934][ T7690] ? timestamp_truncate+0x22e/0x2f0 [ 85.393953][ T7690] shmem_write_begin+0x1a4/0x420 [ 85.393971][ T7690] ? __pfx_shmem_write_begin+0x10/0x10 [ 85.393989][ T7690] ? inode_set_ctime_current+0x283/0x850 [ 85.394006][ T7690] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 85.394025][ T7690] ? inode_maybe_inc_iversion+0x169/0x220 [ 85.394041][ T7690] generic_perform_write+0x292/0xa40 [ 85.394055][ T7690] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 85.394071][ T7690] ? __pfx_generic_perform_write+0x10/0x10 [ 85.394086][ T7690] ? mnt_put_write_access_file+0x4e/0x100 [ 85.394102][ T7690] ? file_update_time_flags+0x38c/0x520 [ 85.394115][ T7690] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 85.394127][ T7690] shmem_file_write_iter+0x10e/0x140 [ 85.394140][ T7690] __kernel_write_iter+0x2ac/0x930 [ 85.394158][ T7690] ? __pfx___kernel_write_iter+0x10/0x10 [ 85.394171][ T7690] ? __up_read+0x333/0x980 [ 85.394185][ T7690] ? dump_user_range+0x7e0/0xe90 [ 85.394203][ T7690] dump_user_range+0xa0d/0xe90 [ 85.394220][ T7690] ? __pfx_dump_user_range+0x10/0x10 [ 85.394237][ T7690] ? elf_coredump_extra_notes_write+0xbb/0x450 [ 85.394252][ T7690] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 85.394267][ T7690] ? __pfx_writenote+0x10/0x10 [ 85.394285][ T7690] elf_core_dump+0x2d97/0x3d60 [ 85.394308][ T7690] ? __pfx_elf_core_dump+0x10/0x10 [ 85.394321][ T7690] ? kasan_save_stack+0x3f/0x50 [ 85.394334][ T7690] ? kasan_save_stack+0x30/0x50 [ 85.394346][ T7690] ? kasan_save_track+0x14/0x30 [ 85.394359][ T7690] ? __kasan_kmalloc+0xaa/0xb0 [ 85.394371][ T7690] ? __kvmalloc_node_noprof+0x35b/0x9b0 [ 85.394384][ T7690] ? get_signal+0x1f20/0x21d0 [ 85.394394][ T7690] ? arch_do_signal_or_restart+0x91/0x7e0 [ 85.394410][ T7690] ? irqentry_exit+0x542/0xab0 [ 85.394423][ T7690] ? 0xffffffffff600000 [ 85.394449][ T7690] ? lock_acquire+0x1d1/0x380 [ 85.394460][ T7690] ? get_signal+0x1f20/0x21d0 [ 85.394475][ T7690] ? vfs_coredump+0x2606/0x58c0 [ 85.394487][ T7690] vfs_coredump+0x2606/0x58c0 [ 85.394507][ T7690] ? __pfx_vfs_coredump+0x10/0x10 [ 85.394523][ T7690] ? __lock_acquire+0x5c0/0x1f40 [ 85.394536][ T7690] ? lock_acquire+0x1d1/0x380 [ 85.394546][ T7690] ? unwind_next_frame+0xbd/0x2090 [ 85.394565][ T7690] ? lock_acquire+0x1d1/0x380 [ 85.394576][ T7690] ? is_bpf_text_address+0x25/0x1a0 [ 85.394591][ T7690] ? find_held_lock+0x2b/0x80 [ 85.394606][ T7690] ? is_bpf_text_address+0x8a/0x1a0 [ 85.394620][ T7690] ? is_bpf_text_address+0x8a/0x1a0 [ 85.394634][ T7690] ? bpf_ksym_find+0x128/0x1c0 [ 85.394650][ T7690] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 85.394670][ T7690] ? is_bpf_text_address+0x94/0x1a0 [ 85.394693][ T7690] ? __sigqueue_free+0xbe/0x2a0 [ 85.394706][ T7690] ? stack_trace_save+0x8e/0xc0 [ 85.394728][ T7690] ? kasan_save_stack+0x3f/0x50 [ 85.394740][ T7690] ? kasan_save_stack+0x30/0x50 [ 85.394752][ T7690] ? kasan_save_track+0x14/0x30 [ 85.394765][ T7690] ? kasan_save_free_info+0x3b/0x70 [ 85.394775][ T7690] ? __kasan_slab_free+0x5f/0x80 [ 85.394788][ T7690] ? kmem_cache_free+0x127/0x6c0 [ 85.394797][ T7690] ? __sigqueue_free+0xbe/0x2a0 [ 85.394809][ T7690] ? get_signal+0xb02/0x21d0 [ 85.394819][ T7690] ? arch_do_signal_or_restart+0x91/0x7e0 [ 85.394835][ T7690] ? irqentry_exit+0x542/0xab0 [ 85.394844][ T7690] ? asm_exc_general_protection+0x26/0x30 [ 85.394878][ T7690] ? rcu_is_watching+0x13/0xc0 [ 85.394895][ T7690] get_signal+0x1f20/0x21d0 [ 85.394911][ T7690] ? __pfx_get_signal+0x10/0x10 [ 85.394926][ T7690] arch_do_signal_or_restart+0x91/0x7e0 [ 85.394944][ T7690] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 85.394965][ T7690] ? cond_local_irq_disable.part.0+0x38/0x40 [ 85.394977][ T7690] ? exc_general_protection+0x120/0x240 [ 85.394994][ T7690] irqentry_exit+0x542/0xab0 [ 85.395005][ T7690] asm_exc_general_protection+0x26/0x30 [ 85.395016][ T7690] RIP: 0033:0x7f57a6b9f561 [ 85.395026][ T7690] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 85.395039][ T7690] RSP: 002b:00002000000003b0 EFLAGS: 00010217 [ 85.395053][ T7690] RAX: 0000000000000000 RBX: 00007f57a6e25fa0 RCX: 00007f57a6b9f559 [ 85.395063][ T7690] RDX: 00002000000003c0 RSI: 00002000000003b0 RDI: 0000000000200000 [ 85.395073][ T7690] RBP: 00007f57a6c36b20 R08: 0000200000000440 R09: 0000200000000440 [ 85.395083][ T7690] R10: 0000200000000400 R11: 0000000000000206 R12: 0000000000000000 [ 85.395094][ T7690] R13: 00007f57a6e26038 R14: 00007f57a6e25fa0 R15: 00007ffdf17663f8 [ 85.395120][ T7690] [ 85.395128][ T7690] memory: usage 307200kB, limit 307200kB, failcnt 19762 [ 85.395138][ T7690] memory+swap: usage 431960kB, limit 9007199254740988kB, failcnt 0 [ 85.395149][ T7690] kmem: usage 5552kB, limit 9007199254740988kB, failcnt 0 [ 85.395165][ T7690] Memory cgroup stats for /syz5: [ 85.395261][ T7690] cache 308256768 [ 85.395269][ T7690] rss 434176 [ 85.395276][ T7690] rss_huge 0 [ 85.395282][ T7690] shmem 308256768 [ 85.395288][ T7690] mapped_file 0 [ 85.395294][ T7690] dirty 0 [ 85.395300][ T7690] writeback 0 [ 85.395306][ T7690] workingset_refault_anon 2 [ 85.395313][ T7690] workingset_refault_file 0 [ 85.395319][ T7690] swap 127979520 [ 85.395326][ T7690] swapcached 128012288 [ 85.395332][ T7690] pgpgin 107279 [ 85.395339][ T7690] pgpgout 31912 [ 85.395345][ T7690] pgfault 8391 [ 85.395351][ T7690] pgmajfault 1 [ 85.395358][ T7690] inactive_anon 180428800 [ 85.395365][ T7690] active_anon 128274432 [ 85.395372][ T7690] inactive_file 0 [ 85.395378][ T7690] active_file 0 [ 85.395384][ T7690] unevictable 0 [ 85.395391][ T7690] hierarchical_memory_limit 314572800 [ 85.395415][ T7690] hierarchical_memsw_limit 9223372036854771712 [ 85.436378][ T7690] total_cache 308256768 [ 85.436391][ T7690] total_rss 434176 [ 85.436397][ T7690] total_rss_huge 0 [ 85.436404][ T7690] total_shmem 308256768 [ 85.436411][ T7690] total_mapped_file 0 [ 85.436417][ T7690] total_dirty 0 [ 85.436424][ T7690] total_writeback 0 [ 85.436430][ T7690] total_workingset_refault_anon 2 [ 85.436438][ T7690] total_workingset_refault_file 0 [ 85.436445][ T7690] total_swap 127979520 [ 85.436452][ T7690] total_swapcached 128012288 [ 85.436459][ T7690] total_pgpgin 107279 [ 85.436465][ T7690] total_pgpgout 31912 [ 85.436472][ T7690] total_pgfault 8391 [ 85.436478][ T7690] total_pgmajfault 1 [ 85.436485][ T7690] total_inactive_anon 180428800 [ 85.436492][ T7690] total_active_anon 128274432 [ 85.436499][ T7690] total_inactive_file 0 [ 85.436505][ T7690] total_active_file 0 [ 85.436512][ T7690] total_unevictable 0 [ 85.436519][ T7690] anon_cost 0 [ 85.436525][ T7690] file_cost 0 [ 85.436532][ T7690] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.357,pid=7666,uid=0 [ 85.436707][ T7690] Memory cgroup out of memory: Killed process 7666 (syz.5.357) total-vm:98836kB, anon-rss:1336kB, file-rss:55172kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000 [ 85.950621][ T5738] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 86.025475][ T7861] fuse: fd is not a fuse device [ 86.224009][ T43] audit: type=1400 audit(1792609235.418:755): avc: denied { getopt } for pid=7866 comm="syz.4.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 86.259102][ T7661] syz.5.357 (7661) used greatest stack depth: 19112 bytes left [ 86.329286][ T7877] netlink: 'syz.4.415': attribute type 1 has an invalid length. [ 86.345972][ T7666] syz.5.357 (7666) used greatest stack depth: 18584 bytes left [ 86.405223][ T7882] netlink: 56 bytes leftover after parsing attributes in process `syz.1.416'. [ 86.413197][ T7877] netlink: 12 bytes leftover after parsing attributes in process `syz.4.415'. [ 86.761780][ T7901] netlink: 40 bytes leftover after parsing attributes in process `syz.5.420'. [ 86.828323][ T43] audit: type=1400 audit(1792609236.028:756): avc: denied { ioctl } for pid=7902 comm="syz.5.421" path="socket:[19088]" dev="sockfs" ino=19088 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 86.830934][ T43] audit: type=1400 audit(1792609236.028:757): avc: denied { write } for pid=7902 comm="syz.5.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 86.872493][ T7698] syz.5.357 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 86.872517][ T7698] CPU: 2 UID: 0 PID: 7698 Comm: syz.5.357 Not tainted syzkaller #0 PREEMPT(full) [ 86.872530][ T7698] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.872537][ T7698] Call Trace: [ 86.872541][ T7698] [ 86.872545][ T7698] dump_stack_lvl+0x100/0x190 [ 86.872567][ T7698] dump_header+0xfb/0x606 [ 86.872580][ T7698] oom_kill_process.cold+0xd/0x380 [ 86.872594][ T7698] out_of_memory+0x340/0x14f0 [ 86.872614][ T7698] ? __pfx_out_of_memory+0x10/0x10 [ 86.872633][ T7698] mem_cgroup_out_of_memory+0xc6/0x130 [ 86.872647][ T7698] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 86.872659][ T7698] ? find_held_lock+0x2b/0x80 [ 86.872677][ T7698] ? do_raw_spin_unlock+0x145/0x1e0 [ 86.872692][ T7698] ? _raw_spin_unlock+0x28/0x50 [ 86.872709][ T7698] try_charge_memcg+0x783/0xf60 [ 86.872730][ T7698] ? __pfx_try_charge_memcg+0x10/0x10 [ 86.872747][ T7698] ? find_held_lock+0x2b/0x80 [ 86.872761][ T7698] ? rcu_read_unlock+0x17/0x60 [ 86.872771][ T7698] ? rcu_read_unlock+0x17/0x60 [ 86.872781][ T7698] ? find_held_lock+0x2b/0x80 [ 86.872796][ T7698] ? rcu_read_unlock+0x17/0x60 [ 86.872809][ T7698] charge_memcg+0x1ae/0x210 [ 86.872843][ T7698] __mem_cgroup_charge+0x2b/0x1c0 [ 86.872855][ T7698] shmem_alloc_and_add_folio+0x451/0xd40 [ 86.872877][ T7698] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 86.872895][ T7698] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 86.872916][ T7698] shmem_get_folio_gfp+0x756/0x1980 [ 86.872937][ T7698] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 86.872955][ T7698] ? vm_normal_page+0x1d1/0x380 [ 86.872969][ T7698] ? __pfx_vm_normal_page+0x10/0x10 [ 86.872984][ T7698] shmem_write_begin+0x1a4/0x420 [ 86.873003][ T7698] ? __pfx_shmem_write_begin+0x10/0x10 [ 86.873021][ T7698] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 86.873043][ T7698] generic_perform_write+0x292/0xa40 [ 86.873057][ T7698] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 86.873073][ T7698] ? __pfx_generic_perform_write+0x10/0x10 [ 86.873089][ T7698] ? file_update_time_flags+0x38c/0x520 [ 86.873103][ T7698] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 86.873114][ T7698] shmem_file_write_iter+0x10e/0x140 [ 86.873131][ T7698] __kernel_write_iter+0x2ac/0x930 [ 86.873145][ T7698] ? __pfx___kernel_write_iter+0x10/0x10 [ 86.873158][ T7698] ? __up_read+0x333/0x980 [ 86.873172][ T7698] ? dump_user_range+0x7e0/0xe90 [ 86.873186][ T7698] ? call_depth_return_thunk+0xd0/0xd0 [ 86.873202][ T7698] dump_user_range+0xa0d/0xe90 [ 86.873219][ T7698] ? __pfx_dump_user_range+0x10/0x10 [ 86.873237][ T7698] ? elf_coredump_extra_notes_write+0xbb/0x450 [ 86.873251][ T7698] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 86.873266][ T7698] ? __pfx_writenote+0x10/0x10 [ 86.873284][ T7698] elf_core_dump+0x2d97/0x3d60 [ 86.873307][ T7698] ? __pfx_elf_core_dump+0x10/0x10 [ 86.873320][ T7698] ? kasan_save_stack+0x3f/0x50 [ 86.873333][ T7698] ? kasan_save_stack+0x30/0x50 [ 86.873345][ T7698] ? kasan_save_track+0x14/0x30 [ 86.873358][ T7698] ? __kasan_kmalloc+0xaa/0xb0 [ 86.873370][ T7698] ? __kvmalloc_node_noprof+0x35b/0x9b0 [ 86.873383][ T7698] ? get_signal+0x1f20/0x21d0 [ 86.873393][ T7698] ? arch_do_signal_or_restart+0x91/0x7e0 [ 86.873409][ T7698] ? irqentry_exit+0x542/0xab0 [ 86.873422][ T7698] ? 0xffffffffff600000 [ 86.873449][ T7698] ? lock_acquire+0x1d1/0x380 [ 86.873460][ T7698] ? get_signal+0x1f20/0x21d0 [ 86.873475][ T7698] ? vfs_coredump+0x2606/0x58c0 [ 86.873488][ T7698] vfs_coredump+0x2606/0x58c0 [ 86.873507][ T7698] ? __pfx_vfs_coredump+0x10/0x10 [ 86.873524][ T7698] ? __lock_acquire+0x5c0/0x1f40 [ 86.873537][ T7698] ? lock_acquire+0x1d1/0x380 [ 86.873547][ T7698] ? unwind_next_frame+0xbd/0x2090 [ 86.873566][ T7698] ? lock_acquire+0x1d1/0x380 [ 86.873577][ T7698] ? is_bpf_text_address+0x25/0x1a0 [ 86.873592][ T7698] ? find_held_lock+0x2b/0x80 [ 86.873606][ T7698] ? is_bpf_text_address+0x8a/0x1a0 [ 86.873620][ T7698] ? is_bpf_text_address+0x8a/0x1a0 [ 86.873635][ T7698] ? bpf_ksym_find+0x128/0x1c0 [ 86.873651][ T7698] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 86.873669][ T7698] ? is_bpf_text_address+0x94/0x1a0 [ 86.873693][ T7698] ? __sigqueue_free+0xbe/0x2a0 [ 86.873706][ T7698] ? stack_trace_save+0x8e/0xc0 [ 86.873728][ T7698] ? kasan_save_stack+0x3f/0x50 [ 86.873740][ T7698] ? kasan_save_stack+0x30/0x50 [ 86.873753][ T7698] ? kasan_save_track+0x14/0x30 [ 86.873765][ T7698] ? kasan_save_free_info+0x3b/0x70 [ 86.873775][ T7698] ? __kasan_slab_free+0x5f/0x80 [ 86.873788][ T7698] ? kmem_cache_free+0x127/0x6c0 [ 86.873797][ T7698] ? __sigqueue_free+0xbe/0x2a0 [ 86.873809][ T7698] ? get_signal+0xb02/0x21d0 [ 86.873818][ T7698] ? arch_do_signal_or_restart+0x91/0x7e0 [ 86.873835][ T7698] ? irqentry_exit+0x542/0xab0 [ 86.873843][ T7698] ? asm_exc_general_protection+0x26/0x30 [ 86.873879][ T7698] ? rcu_is_watching+0x13/0xc0 [ 86.873896][ T7698] get_signal+0x1f20/0x21d0 [ 86.873912][ T7698] ? __pfx_get_signal+0x10/0x10 [ 86.873927][ T7698] arch_do_signal_or_restart+0x91/0x7e0 [ 86.873946][ T7698] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 86.873967][ T7698] ? cond_local_irq_disable.part.0+0x38/0x40 [ 86.873978][ T7698] ? exc_general_protection+0x120/0x240 [ 86.873995][ T7698] irqentry_exit+0x542/0xab0 [ 86.874007][ T7698] asm_exc_general_protection+0x26/0x30 [ 86.874018][ T7698] RIP: 0033:0x7f57a6b9f561 [ 86.874028][ T7698] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 86.874038][ T7698] RSP: 002b:00002000000003b0 EFLAGS: 00010217 [ 86.874048][ T7698] RAX: 0000000000000000 RBX: 00007f57a6e25fa0 RCX: 00007f57a6b9f559 [ 86.874055][ T7698] RDX: 00002000000003c0 RSI: 00002000000003b0 RDI: 0000000000200000 [ 86.874061][ T7698] RBP: 00007f57a6c36b20 R08: 0000200000000440 R09: 0000200000000440 [ 86.874068][ T7698] R10: 0000200000000400 R11: 0000000000000206 R12: 0000000000000000 [ 86.874074][ T7698] R13: 00007f57a6e26038 R14: 00007f57a6e25fa0 R15: 00007ffdf17663f8 [ 86.874089][ T7698] [ 86.879584][ T7698] memory: usage 307072kB, limit 307200kB, failcnt 33544 [ 86.879594][ T7698] memory+swap: usage 432040kB, limit 9007199254740988kB, failcnt 0 [ 86.879601][ T7698] kmem: usage 5120kB, limit 9007199254740988kB, failcnt 0 [ 86.879607][ T7698] Memory cgroup stats for /syz5: [ 86.879699][ T7698] cache 308867072 [ 86.879704][ T7698] rss 319488 [ 86.879708][ T7698] rss_huge 0 [ 86.879711][ T7698] shmem 308867072 [ 86.879715][ T7698] mapped_file 0 [ 86.879719][ T7698] dirty 0 [ 86.879722][ T7698] writeback 0 [ 86.879726][ T7698] workingset_refault_anon 9 [ 86.879730][ T7698] workingset_refault_file 0 [ 86.879734][ T7698] swap 127967232 [ 86.879737][ T7698] swapcached 208896000 [ 86.879741][ T7698] pgpgin 150951 [ 86.879745][ T7698] pgpgout 75465 [ 86.879748][ T7698] pgfault 11006 [ 86.879752][ T7698] pgmajfault 8 [ 86.879755][ T7698] inactive_anon 76562432 [ 86.879759][ T7698] active_anon 232628224 [ 86.879763][ T7698] inactive_file 0 [ 86.879767][ T7698] active_file 0 [ 86.879771][ T7698] unevictable 0 [ 86.879774][ T7698] hierarchical_memory_limit 314572800 [ 86.885621][ T7698] hierarchical_memsw_limit 9223372036854771712 [ 86.885630][ T7698] total_cache 308867072 [ 86.885634][ T7698] total_rss 319488 [ 86.885637][ T7698] total_rss_huge 0 [ 86.885641][ T7698] total_shmem 308867072 [ 86.885645][ T7698] total_mapped_file 0 [ 86.885649][ T7698] total_dirty 0 [ 86.885653][ T7698] total_writeback 0 [ 86.885657][ T7698] total_workingset_refault_anon 9 [ 86.885661][ T7698] total_workingset_refault_file 0 [ 86.885665][ T7698] total_swap 127967232 [ 86.885669][ T7698] total_swapcached 208896000 [ 86.885673][ T7698] total_pgpgin 150951 [ 86.885677][ T7698] total_pgpgout 75465 [ 86.885681][ T7698] total_pgfault 11006 [ 86.885684][ T7698] total_pgmajfault 8 [ 86.885688][ T7698] total_inactive_anon 76562432 [ 86.885692][ T7698] total_active_anon 232628224 [ 86.885696][ T7698] total_inactive_file 0 [ 86.885700][ T7698] total_active_file 0 [ 86.885704][ T7698] total_unevictable 0 [ 86.885708][ T7698] anon_cost 0 [ 86.885711][ T7698] file_cost 0 [ 86.885715][ T7698] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.357,pid=7672,uid=0 [ 86.885771][ T7698] Memory cgroup out of memory: Killed process 7672 (syz.5.357) total-vm:98836kB, anon-rss:1340kB, file-rss:58308kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 86.948146][ T7684] syz.5.357 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 86.948168][ T7684] CPU: 2 UID: 0 PID: 7684 Comm: syz.5.357 Not tainted syzkaller #0 PREEMPT(full) [ 86.948180][ T7684] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.948187][ T7684] Call Trace: [ 86.948191][ T7684] [ 86.948196][ T7684] dump_stack_lvl+0x100/0x190 [ 86.948218][ T7684] dump_header+0xfb/0x606 [ 86.948232][ T7684] oom_kill_process.cold+0xd/0x380 [ 86.948246][ T7684] out_of_memory+0x340/0x14f0 [ 86.948265][ T7684] ? __pfx_out_of_memory+0x10/0x10 [ 86.948284][ T7684] mem_cgroup_out_of_memory+0xc6/0x130 [ 86.948298][ T7684] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 86.948311][ T7684] ? find_held_lock+0x2b/0x80 [ 86.948329][ T7684] ? do_raw_spin_unlock+0x145/0x1e0 [ 86.948343][ T7684] ? _raw_spin_unlock+0x28/0x50 [ 86.948360][ T7684] try_charge_memcg+0x783/0xf60 [ 86.948381][ T7684] ? __pfx_try_charge_memcg+0x10/0x10 [ 86.948397][ T7684] ? find_held_lock+0x2b/0x80 [ 86.948411][ T7684] ? rcu_read_unlock+0x17/0x60 [ 86.948421][ T7684] ? rcu_read_unlock+0x17/0x60 [ 86.948431][ T7684] ? find_held_lock+0x2b/0x80 [ 86.948446][ T7684] ? rcu_read_unlock+0x17/0x60 [ 86.948459][ T7684] charge_memcg+0x1ae/0x210 [ 86.948476][ T7684] __mem_cgroup_charge+0x2b/0x1c0 [ 86.948489][ T7684] shmem_alloc_and_add_folio+0x451/0xd40 [ 86.948510][ T7684] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 86.948529][ T7684] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 86.948547][ T7684] ? __lock_acquire+0x5c0/0x1f40 [ 86.948559][ T7684] shmem_get_folio_gfp+0x756/0x1980 [ 86.948580][ T7684] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 86.948596][ T7684] ? inode_set_ctime_current+0x9c/0x850 [ 86.948613][ T7684] ? find_held_lock+0x2b/0x80 [ 86.948629][ T7684] ? timestamp_truncate+0x22e/0x2f0 [ 86.948648][ T7684] shmem_write_begin+0x1a4/0x420 [ 86.948666][ T7684] ? __pfx_shmem_write_begin+0x10/0x10 [ 86.948684][ T7684] ? inode_set_ctime_current+0x283/0x850 [ 86.948703][ T7684] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 86.948722][ T7684] ? inode_maybe_inc_iversion+0x169/0x220 [ 86.948739][ T7684] generic_perform_write+0x292/0xa40 [ 86.948754][ T7684] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 86.948770][ T7684] ? __pfx_generic_perform_write+0x10/0x10 [ 86.948786][ T7684] ? mnt_put_write_access_file+0x4e/0x100 [ 86.948809][ T7684] ? file_update_time_flags+0x38c/0x520 [ 86.948827][ T7684] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 86.948843][ T7684] shmem_file_write_iter+0x10e/0x140 [ 86.948861][ T7684] __kernel_write_iter+0x2ac/0x930 [ 86.948876][ T7684] ? __pfx___kernel_write_iter+0x10/0x10 [ 86.948888][ T7684] ? __up_read+0x333/0x980 [ 86.948902][ T7684] ? dump_user_range+0x7e0/0xe90 [ 86.948920][ T7684] dump_user_range+0xa0d/0xe90 [ 86.948938][ T7684] ? __pfx_dump_user_range+0x10/0x10 [ 86.948955][ T7684] ? elf_coredump_extra_notes_write+0xbb/0x450 [ 86.948970][ T7684] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 86.948984][ T7684] ? __pfx_writenote+0x10/0x10 [ 86.949003][ T7684] elf_core_dump+0x2d97/0x3d60 [ 86.949025][ T7684] ? __pfx_elf_core_dump+0x10/0x10 [ 86.949039][ T7684] ? kasan_save_stack+0x3f/0x50 [ 86.949051][ T7684] ? kasan_save_stack+0x30/0x50 [ 86.949064][ T7684] ? kasan_save_track+0x14/0x30 [ 86.949093][ T7684] ? __kasan_kmalloc+0xaa/0xb0 [ 86.949105][ T7684] ? __kvmalloc_node_noprof+0x35b/0x9b0 [ 86.949118][ T7684] ? get_signal+0x1f20/0x21d0 [ 86.949132][ T7684] ? arch_do_signal_or_restart+0x91/0x7e0 [ 86.949149][ T7684] ? irqentry_exit+0x542/0xab0 [ 86.949162][ T7684] ? 0xffffffffff600000 [ 86.949189][ T7684] ? lock_acquire+0x1d1/0x380 [ 86.949199][ T7684] ? get_signal+0x1f20/0x21d0 [ 86.949214][ T7684] ? vfs_coredump+0x2606/0x58c0 [ 86.949227][ T7684] vfs_coredump+0x2606/0x58c0 [ 86.949246][ T7684] ? __pfx_vfs_coredump+0x10/0x10 [ 86.949263][ T7684] ? __lock_acquire+0x5c0/0x1f40 [ 86.949276][ T7684] ? lock_acquire+0x1d1/0x380 [ 86.949286][ T7684] ? unwind_next_frame+0xbd/0x2090 [ 86.949305][ T7684] ? lock_acquire+0x1d1/0x380 [ 86.949315][ T7684] ? is_bpf_text_address+0x25/0x1a0 [ 86.949331][ T7684] ? find_held_lock+0x2b/0x80 [ 86.949345][ T7684] ? is_bpf_text_address+0x8a/0x1a0 [ 86.949359][ T7684] ? is_bpf_text_address+0x8a/0x1a0 [ 86.949374][ T7684] ? bpf_ksym_find+0x128/0x1c0 [ 86.949390][ T7684] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 86.949409][ T7684] ? is_bpf_text_address+0x94/0x1a0 [ 86.949432][ T7684] ? __sigqueue_free+0xbe/0x2a0 [ 86.949445][ T7684] ? stack_trace_save+0x8e/0xc0 [ 86.949467][ T7684] ? kasan_save_stack+0x3f/0x50 [ 86.949479][ T7684] ? kasan_save_stack+0x30/0x50 [ 86.949492][ T7684] ? kasan_save_track+0x14/0x30 [ 86.949504][ T7684] ? kasan_save_free_info+0x3b/0x70 [ 86.949515][ T7684] ? __kasan_slab_free+0x5f/0x80 [ 86.949528][ T7684] ? kmem_cache_free+0x127/0x6c0 [ 86.949537][ T7684] ? __sigqueue_free+0xbe/0x2a0 [ 86.949549][ T7684] ? get_signal+0xb02/0x21d0 [ 86.949559][ T7684] ? arch_do_signal_or_restart+0x91/0x7e0 [ 86.949575][ T7684] ? irqentry_exit+0x542/0xab0 [ 86.949583][ T7684] ? asm_exc_general_protection+0x26/0x30 [ 86.949619][ T7684] ? rcu_is_watching+0x13/0xc0 [ 86.949636][ T7684] get_signal+0x1f20/0x21d0 [ 86.949653][ T7684] ? __pfx_get_signal+0x10/0x10 [ 86.949668][ T7684] arch_do_signal_or_restart+0x91/0x7e0 [ 86.949686][ T7684] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 86.949707][ T7684] ? cond_local_irq_disable.part.0+0x38/0x40 [ 86.949719][ T7684] ? exc_general_protection+0x120/0x240 [ 86.949736][ T7684] irqentry_exit+0x542/0xab0 [ 86.949748][ T7684] asm_exc_general_protection+0x26/0x30 [ 86.949758][ T7684] RIP: 0033:0x7f57a6b9f561 [ 86.949769][ T7684] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 86.949779][ T7684] RSP: 002b:00002000000003b0 EFLAGS: 00010217 [ 86.949788][ T7684] RAX: 0000000000000000 RBX: 00007f57a6e25fa0 RCX: 00007f57a6b9f559 [ 86.949795][ T7684] RDX: 00002000000003c0 RSI: 00002000000003b0 RDI: 0000000000200000 [ 86.949802][ T7684] RBP: 00007f57a6c36b20 R08: 0000200000000440 R09: 0000200000000440 [ 86.949808][ T7684] R10: 0000200000000400 R11: 0000000000000206 R12: 0000000000000000 [ 86.949815][ T7684] R13: 00007f57a6e26038 R14: 00007f57a6e25fa0 R15: 00007ffdf17663f8 [ 86.949830][ T7684] [ 86.971912][ T7684] memory: usage 306212kB, limit 307200kB, failcnt 34117 [ 86.971929][ T7684] memory+swap: usage 430808kB, limit 9007199254740988kB, failcnt 0 [ 86.971940][ T7684] kmem: usage 5028kB, limit 9007199254740988kB, failcnt 0 [ 86.971949][ T7684] Memory cgroup stats for /syz5: [ 86.972068][ T7684] cache 308035584 [ 86.972076][ T7684] rss 319488 [ 86.972082][ T7684] rss_huge 0 [ 86.972087][ T7684] shmem 308035584 [ 86.972093][ T7684] mapped_file 0 [ 86.972099][ T7684] dirty 0 [ 86.972104][ T7684] writeback 0 [ 86.972110][ T7684] workingset_refault_anon 9 [ 86.972116][ T7684] workingset_refault_file 0 [ 86.972122][ T7684] swap 127578112 [ 86.972128][ T7684] swapcached 209932288 [ 86.972134][ T7684] pgpgin 151002 [ 86.972140][ T7684] pgpgout 75714 [ 86.972146][ T7684] pgfault 11013 [ 86.972151][ T7684] pgmajfault 8 [ 86.972156][ T7684] inactive_anon 74784768 [ 86.972163][ T7684] active_anon 232837120 [ 86.972169][ T7684] inactive_file 0 [ 86.972174][ T7684] active_file 0 [ 86.972179][ T7684] unevictable 0 [ 86.972185][ T7684] hierarchical_memory_limit 314572800 [ 86.972192][ T7684] hierarchical_memsw_limit 9223372036854771712 [ 86.972199][ T7684] total_cache 308035584 [ 86.972205][ T7684] total_rss 319488 [ 86.972210][ T7684] total_rss_huge 0 [ 86.972216][ T7684] total_shmem 308035584 [ 86.972222][ T7684] total_mapped_file 0 [ 86.972228][ T7684] total_dirty 0 [ 86.972234][ T7684] total_writeback 0 [ 86.972240][ T7684] total_workingset_refault_anon 9 [ 86.972246][ T7684] total_workingset_refault_file 0 [ 86.972253][ T7684] total_swap 127578112 [ 86.972259][ T7684] total_swapcached 209932288 [ 86.972265][ T7684] total_pgpgin 151002 [ 86.972271][ T7684] total_pgpgout 75714 [ 86.972277][ T7684] total_pgfault 11013 [ 86.972283][ T7684] total_pgmajfault 8 [ 86.972289][ T7684] total_inactive_anon 74784768 [ 86.972295][ T7684] total_active_anon 232837120 [ 86.972301][ T7684] total_inactive_file 0 [ 86.972307][ T7684] total_active_file 0 [ 86.972313][ T7684] total_unevictable 0 [ 86.972319][ T7684] anon_cost 0 [ 86.972325][ T7684] file_cost 0 [ 86.972331][ T7684] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.357,pid=7684,uid=0 [ 86.972463][ T7684] Memory cgroup out of memory: Killed process 7684 (syz.5.357) total-vm:99100kB, anon-rss:1348kB, file-rss:57668kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 87.130516][ T43] audit: type=1400 audit(1792609236.328:758): avc: denied { listen } for pid=7906 comm="syz.5.423" lport=37289 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 87.130762][ T43] audit: type=1400 audit(1792609236.328:759): avc: denied { accept } for pid=7906 comm="syz.5.423" lport=37289 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 87.131030][ T43] audit: type=1400 audit(1792609236.328:760): avc: denied { write } for pid=7906 comm="syz.5.423" path="socket:[17227]" dev="sockfs" ino=17227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 87.131275][ T43] audit: type=1400 audit(1792609236.328:761): avc: denied { setopt } for pid=7906 comm="syz.5.423" lport=37289 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 87.162202][ T43] audit: type=1400 audit(1792609236.358:762): avc: denied { map } for pid=7908 comm="syz.5.424" path="/25/dev/sda" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 87.371731][ T7916] netlink: 8 bytes leftover after parsing attributes in process `syz.5.425'. [ 87.371755][ T7916] netlink: 48 bytes leftover after parsing attributes in process `syz.5.425'. [ 87.397603][ T7916] geneve2: entered promiscuous mode [ 87.397616][ T7916] geneve2: entered allmulticast mode [ 87.599406][ T7707] syz.5.357 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 87.599428][ T7707] CPU: 2 UID: 0 PID: 7707 Comm: syz.5.357 Not tainted syzkaller #0 PREEMPT(full) [ 87.599440][ T7707] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.599447][ T7707] Call Trace: [ 87.599451][ T7707] [ 87.599456][ T7707] dump_stack_lvl+0x100/0x190 [ 87.599499][ T7707] dump_header+0xfb/0x606 [ 87.599513][ T7707] oom_kill_process.cold+0xd/0x380 [ 87.599527][ T7707] out_of_memory+0x340/0x14f0 [ 87.599546][ T7707] ? __pfx_out_of_memory+0x10/0x10 [ 87.599565][ T7707] mem_cgroup_out_of_memory+0xc6/0x130 [ 87.599582][ T7707] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 87.599607][ T7707] ? find_held_lock+0x2b/0x80 [ 87.599626][ T7707] ? do_raw_spin_unlock+0x145/0x1e0 [ 87.599640][ T7707] ? _raw_spin_unlock+0x28/0x50 [ 87.599658][ T7707] try_charge_memcg+0x783/0xf60 [ 87.599679][ T7707] ? __pfx_try_charge_memcg+0x10/0x10 [ 87.599695][ T7707] ? find_held_lock+0x2b/0x80 [ 87.599709][ T7707] ? rcu_read_unlock+0x17/0x60 [ 87.599719][ T7707] ? rcu_read_unlock+0x17/0x60 [ 87.599729][ T7707] ? find_held_lock+0x2b/0x80 [ 87.599744][ T7707] ? rcu_read_unlock+0x17/0x60 [ 87.599758][ T7707] charge_memcg+0x1ae/0x210 [ 87.599775][ T7707] __mem_cgroup_charge+0x2b/0x1c0 [ 87.599788][ T7707] shmem_alloc_and_add_folio+0x451/0xd40 [ 87.599809][ T7707] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 87.599827][ T7707] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 87.599848][ T7707] shmem_get_folio_gfp+0x756/0x1980 [ 87.599869][ T7707] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 87.599887][ T7707] ? vm_normal_page+0x1d1/0x380 [ 87.599901][ T7707] ? __pfx_vm_normal_page+0x10/0x10 [ 87.599917][ T7707] shmem_write_begin+0x1a4/0x420 [ 87.599935][ T7707] ? __pfx_shmem_write_begin+0x10/0x10 [ 87.599954][ T7707] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 87.599976][ T7707] generic_perform_write+0x292/0xa40 [ 87.599990][ T7707] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 87.600006][ T7707] ? __pfx_generic_perform_write+0x10/0x10 [ 87.600023][ T7707] ? file_update_time_flags+0x38c/0x520 [ 87.600036][ T7707] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 87.600048][ T7707] shmem_file_write_iter+0x10e/0x140 [ 87.600067][ T7707] __kernel_write_iter+0x2ac/0x930 [ 87.600087][ T7707] ? __pfx___kernel_write_iter+0x10/0x10 [ 87.600104][ T7707] ? __up_read+0x333/0x980 [ 87.600128][ T7707] ? dump_user_range+0x7e0/0xe90 [ 87.600153][ T7707] ? copy_mc_enhanced_fast_string+0x6/0xf [ 87.600178][ T7707] dump_user_range+0xa0d/0xe90 [ 87.600209][ T7707] ? __pfx_dump_user_range+0x10/0x10 [ 87.600235][ T7707] ? elf_coredump_extra_notes_write+0xbb/0x450 [ 87.600258][ T7707] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 87.600283][ T7707] ? __pfx_writenote+0x10/0x10 [ 87.600312][ T7707] elf_core_dump+0x2d97/0x3d60 [ 87.600342][ T7707] ? __pfx_elf_core_dump+0x10/0x10 [ 87.600356][ T7707] ? kasan_save_stack+0x3f/0x50 [ 87.600368][ T7707] ? kasan_save_stack+0x30/0x50 [ 87.600381][ T7707] ? kasan_save_track+0x14/0x30 [ 87.600393][ T7707] ? __kasan_kmalloc+0xaa/0xb0 [ 87.600405][ T7707] ? __kvmalloc_node_noprof+0x35b/0x9b0 [ 87.600419][ T7707] ? get_signal+0x1f20/0x21d0 [ 87.600429][ T7707] ? arch_do_signal_or_restart+0x91/0x7e0 [ 87.600446][ T7707] ? irqentry_exit+0x542/0xab0 [ 87.600458][ T7707] ? 0xffffffffff600000 [ 87.600486][ T7707] ? lock_acquire+0x1d1/0x380 [ 87.600496][ T7707] ? get_signal+0x1f20/0x21d0 [ 87.600512][ T7707] ? vfs_coredump+0x2606/0x58c0 [ 87.600524][ T7707] vfs_coredump+0x2606/0x58c0 [ 87.600544][ T7707] ? __pfx_vfs_coredump+0x10/0x10 [ 87.600573][ T7707] ? __lock_acquire+0x5c0/0x1f40 [ 87.600588][ T7707] ? lock_acquire+0x1d1/0x380 [ 87.600598][ T7707] ? unwind_next_frame+0xbd/0x2090 [ 87.600618][ T7707] ? lock_acquire+0x1d1/0x380 [ 87.600628][ T7707] ? is_bpf_text_address+0x25/0x1a0 [ 87.600644][ T7707] ? find_held_lock+0x2b/0x80 [ 87.600658][ T7707] ? is_bpf_text_address+0x8a/0x1a0 [ 87.600672][ T7707] ? is_bpf_text_address+0x8a/0x1a0 [ 87.600687][ T7707] ? bpf_ksym_find+0x128/0x1c0 [ 87.600703][ T7707] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 87.600722][ T7707] ? is_bpf_text_address+0x94/0x1a0 [ 87.600745][ T7707] ? __sigqueue_free+0xbe/0x2a0 [ 87.600759][ T7707] ? stack_trace_save+0x8e/0xc0 [ 87.600781][ T7707] ? kasan_save_stack+0x3f/0x50 [ 87.600793][ T7707] ? kasan_save_stack+0x30/0x50 [ 87.600806][ T7707] ? kasan_save_track+0x14/0x30 [ 87.600818][ T7707] ? kasan_save_free_info+0x3b/0x70 [ 87.600828][ T7707] ? __kasan_slab_free+0x5f/0x80 [ 87.600841][ T7707] ? kmem_cache_free+0x127/0x6c0 [ 87.600850][ T7707] ? __sigqueue_free+0xbe/0x2a0 [ 87.600862][ T7707] ? get_signal+0xb02/0x21d0 [ 87.600872][ T7707] ? arch_do_signal_or_restart+0x91/0x7e0 [ 87.600888][ T7707] ? irqentry_exit+0x542/0xab0 [ 87.600897][ T7707] ? asm_exc_general_protection+0x26/0x30 [ 87.600932][ T7707] ? rcu_is_watching+0x13/0xc0 [ 87.600949][ T7707] get_signal+0x1f20/0x21d0 [ 87.600965][ T7707] ? __pfx_get_signal+0x10/0x10 [ 87.600981][ T7707] arch_do_signal_or_restart+0x91/0x7e0 [ 87.600999][ T7707] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 87.601020][ T7707] ? cond_local_irq_disable.part.0+0x38/0x40 [ 87.601031][ T7707] ? exc_general_protection+0x120/0x240 [ 87.601048][ T7707] irqentry_exit+0x542/0xab0 [ 87.601060][ T7707] asm_exc_general_protection+0x26/0x30 [ 87.601071][ T7707] RIP: 0033:0x7f57a6b9f561 [ 87.601082][ T7707] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 87.601092][ T7707] RSP: 002b:00002000000003b0 EFLAGS: 00010217 [ 87.601102][ T7707] RAX: 0000000000000000 RBX: 00007f57a6e25fa0 RCX: 00007f57a6b9f559 [ 87.601108][ T7707] RDX: 00002000000003c0 RSI: 00002000000003b0 RDI: 0000000000200000 [ 87.601115][ T7707] RBP: 00007f57a6c36b20 R08: 0000200000000440 R09: 0000200000000440 [ 87.601121][ T7707] R10: 0000200000000400 R11: 0000000000000206 R12: 0000000000000000 [ 87.601128][ T7707] R13: 00007f57a6e26038 R14: 00007f57a6e25fa0 R15: 00007ffdf17663f8 [ 87.601142][ T7707] [ 87.609376][ T7927] netlink: 24 bytes leftover after parsing attributes in process `syz.4.427'. [ 87.619951][ T7707] memory: usage 307200kB, limit 307200kB, failcnt 36741 [ 87.619963][ T7707] memory+swap: usage 431956kB, limit 9007199254740988kB, failcnt 0 [ 87.619969][ T7707] kmem: usage 4972kB, limit 9007199254740988kB, failcnt 0 [ 87.619976][ T7707] Memory cgroup stats for /syz5: [ 87.620056][ T7707] cache 309039104 [ 87.620061][ T7707] rss 430080 [ 87.620064][ T7707] rss_huge 0 [ 87.620068][ T7707] shmem 309035008 [ 87.620071][ T7707] mapped_file 0 [ 87.620075][ T7707] dirty 0 [ 87.620078][ T7707] writeback 0 [ 87.620082][ T7707] workingset_refault_anon 12 [ 87.620086][ T7707] workingset_refault_file 0 [ 87.620090][ T7707] swap 127750144 [ 87.620094][ T7707] swapcached 224415744 [ 87.620098][ T7707] pgpgin 177374 [ 87.620101][ T7707] pgpgout 101817 [ 87.620105][ T7707] pgfault 12359 [ 87.620109][ T7707] pgmajfault 12 [ 87.620112][ T7707] inactive_anon 150986752 [ 87.620116][ T7707] active_anon 158490624 [ 87.620120][ T7707] inactive_file 0 [ 87.620124][ T7707] active_file 0 [ 87.620127][ T7707] unevictable 0 [ 87.620131][ T7707] hierarchical_memory_limit 314572800 [ 87.620135][ T7707] hierarchical_memsw_limit 9223372036854771712 [ 87.620140][ T7707] total_cache 309039104 [ 87.620144][ T7707] total_rss 430080 [ 87.620147][ T7707] total_rss_huge 0 [ 87.620151][ T7707] total_shmem 309035008 [ 87.620155][ T7707] total_mapped_file 0 [ 87.620159][ T7707] total_dirty 0 [ 87.620162][ T7707] total_writeback 0 [ 87.620166][ T7707] total_workingset_refault_anon 12 [ 87.620177][ T7707] total_workingset_refault_file 0 [ 87.620182][ T7707] total_swap 127750144 [ 87.620185][ T7707] total_swapcached 224415744 [ 87.620189][ T7707] total_pgpgin 177374 [ 87.620193][ T7707] total_pgpgout 101817 [ 87.620197][ T7707] total_pgfault 12359 [ 87.620201][ T7707] total_pgmajfault 12 [ 87.620205][ T7707] total_inactive_anon 150986752 [ 87.620209][ T7707] total_active_anon 158490624 [ 87.620213][ T7707] total_inactive_file 0 [ 87.620217][ T7707] total_active_file 0 [ 87.620221][ T7707] total_unevictable 0 [ 87.620224][ T7707] anon_cost 0 [ 87.620228][ T7707] file_cost 0 [ 87.620232][ T7707] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.357,pid=7677,uid=0 [ 87.620284][ T7707] Memory cgroup out of memory: Killed process 7677 (syz.5.357) total-vm:98968kB, anon-rss:1340kB, file-rss:57668kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 87.836408][ T7668] syz.5.357 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 87.836430][ T7668] CPU: 2 UID: 0 PID: 7668 Comm: syz.5.357 Not tainted syzkaller #0 PREEMPT(full) [ 87.836442][ T7668] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.836449][ T7668] Call Trace: [ 87.836453][ T7668] [ 87.836458][ T7668] dump_stack_lvl+0x100/0x190 [ 87.836479][ T7668] dump_header+0xfb/0x606 [ 87.836493][ T7668] oom_kill_process.cold+0xd/0x380 [ 87.836507][ T7668] out_of_memory+0x340/0x14f0 [ 87.836526][ T7668] ? __pfx_out_of_memory+0x10/0x10 [ 87.836545][ T7668] mem_cgroup_out_of_memory+0xc6/0x130 [ 87.836560][ T7668] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 87.836572][ T7668] ? find_held_lock+0x2b/0x80 [ 87.836604][ T7668] ? do_raw_spin_unlock+0x145/0x1e0 [ 87.836619][ T7668] ? _raw_spin_unlock+0x28/0x50 [ 87.836636][ T7668] try_charge_memcg+0x783/0xf60 [ 87.836657][ T7668] ? __pfx_try_charge_memcg+0x10/0x10 [ 87.836673][ T7668] ? find_held_lock+0x2b/0x80 [ 87.836687][ T7668] ? rcu_read_unlock+0x17/0x60 [ 87.836697][ T7668] ? rcu_read_unlock+0x17/0x60 [ 87.836707][ T7668] ? find_held_lock+0x2b/0x80 [ 87.836722][ T7668] ? rcu_read_unlock+0x17/0x60 [ 87.836735][ T7668] charge_memcg+0x1ae/0x210 [ 87.836753][ T7668] __mem_cgroup_charge+0x2b/0x1c0 [ 87.836766][ T7668] shmem_alloc_and_add_folio+0x451/0xd40 [ 87.836787][ T7668] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 87.836805][ T7668] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 87.836826][ T7668] shmem_get_folio_gfp+0x756/0x1980 [ 87.836847][ T7668] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 87.836865][ T7668] ? vm_normal_page+0x1d1/0x380 [ 87.836878][ T7668] ? __pfx_vm_normal_page+0x10/0x10 [ 87.836894][ T7668] shmem_write_begin+0x1a4/0x420 [ 87.836912][ T7668] ? __pfx_shmem_write_begin+0x10/0x10 [ 87.836931][ T7668] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 87.836952][ T7668] generic_perform_write+0x292/0xa40 [ 87.836967][ T7668] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 87.836983][ T7668] ? __pfx_generic_perform_write+0x10/0x10 [ 87.836999][ T7668] ? file_update_time_flags+0x38c/0x520 [ 87.837012][ T7668] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 87.837024][ T7668] shmem_file_write_iter+0x10e/0x140 [ 87.837037][ T7668] __kernel_write_iter+0x2ac/0x930 [ 87.837051][ T7668] ? __pfx___kernel_write_iter+0x10/0x10 [ 87.837064][ T7668] ? __up_read+0x333/0x980 [ 87.837078][ T7668] ? dump_user_range+0x7e0/0xe90 [ 87.837095][ T7668] dump_user_range+0xa0d/0xe90 [ 87.837113][ T7668] ? __pfx_dump_user_range+0x10/0x10 [ 87.837130][ T7668] ? elf_coredump_extra_notes_write+0xbb/0x450 [ 87.837145][ T7668] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 87.837164][ T7668] ? __pfx_writenote+0x10/0x10 [ 87.837182][ T7668] elf_core_dump+0x2d97/0x3d60 [ 87.837205][ T7668] ? __pfx_elf_core_dump+0x10/0x10 [ 87.837218][ T7668] ? kasan_save_stack+0x3f/0x50 [ 87.837231][ T7668] ? kasan_save_stack+0x30/0x50 [ 87.837244][ T7668] ? kasan_save_track+0x14/0x30 [ 87.837256][ T7668] ? __kasan_kmalloc+0xaa/0xb0 [ 87.837268][ T7668] ? __kvmalloc_node_noprof+0x35b/0x9b0 [ 87.837281][ T7668] ? get_signal+0x1f20/0x21d0 [ 87.837291][ T7668] ? arch_do_signal_or_restart+0x91/0x7e0 [ 87.837308][ T7668] ? irqentry_exit+0x542/0xab0 [ 87.837320][ T7668] ? 0xffffffffff600000 [ 87.837347][ T7668] ? lock_acquire+0x1d1/0x380 [ 87.837358][ T7668] ? get_signal+0x1f20/0x21d0 [ 87.837373][ T7668] ? vfs_coredump+0x2606/0x58c0 [ 87.837385][ T7668] vfs_coredump+0x2606/0x58c0 [ 87.837405][ T7668] ? __pfx_vfs_coredump+0x10/0x10 [ 87.837421][ T7668] ? __lock_acquire+0x5c0/0x1f40 [ 87.837434][ T7668] ? lock_acquire+0x1d1/0x380 [ 87.837444][ T7668] ? unwind_next_frame+0xbd/0x2090 [ 87.837463][ T7668] ? lock_acquire+0x1d1/0x380 [ 87.837474][ T7668] ? is_bpf_text_address+0x25/0x1a0 [ 87.837489][ T7668] ? find_held_lock+0x2b/0x80 [ 87.837503][ T7668] ? is_bpf_text_address+0x8a/0x1a0 [ 87.837517][ T7668] ? is_bpf_text_address+0x8a/0x1a0 [ 87.837532][ T7668] ? bpf_ksym_find+0x128/0x1c0 [ 87.837548][ T7668] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 87.837567][ T7668] ? is_bpf_text_address+0x94/0x1a0 [ 87.837591][ T7668] ? __sigqueue_free+0xbe/0x2a0 [ 87.837604][ T7668] ? stack_trace_save+0x8e/0xc0 [ 87.837626][ T7668] ? kasan_save_stack+0x3f/0x50 [ 87.837638][ T7668] ? kasan_save_stack+0x30/0x50 [ 87.837650][ T7668] ? kasan_save_track+0x14/0x30 [ 87.837663][ T7668] ? kasan_save_free_info+0x3b/0x70 [ 87.837673][ T7668] ? __kasan_slab_free+0x5f/0x80 [ 87.837686][ T7668] ? kmem_cache_free+0x127/0x6c0 [ 87.837696][ T7668] ? __sigqueue_free+0xbe/0x2a0 [ 87.837708][ T7668] ? get_signal+0xb02/0x21d0 [ 87.837717][ T7668] ? arch_do_signal_or_restart+0x91/0x7e0 [ 87.837733][ T7668] ? irqentry_exit+0x542/0xab0 [ 87.837742][ T7668] ? asm_exc_general_protection+0x26/0x30 [ 87.837778][ T7668] ? rcu_is_watching+0x13/0xc0 [ 87.837795][ T7668] get_signal+0x1f20/0x21d0 [ 87.837811][ T7668] ? __pfx_get_signal+0x10/0x10 [ 87.837826][ T7668] arch_do_signal_or_restart+0x91/0x7e0 [ 87.837844][ T7668] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 87.837865][ T7668] ? cond_local_irq_disable.part.0+0x38/0x40 [ 87.837877][ T7668] ? exc_general_protection+0x120/0x240 [ 87.837893][ T7668] irqentry_exit+0x542/0xab0 [ 87.837905][ T7668] asm_exc_general_protection+0x26/0x30 [ 87.837916][ T7668] RIP: 0033:0x7f57a6b9f561 [ 87.837926][ T7668] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 87.837936][ T7668] RSP: 002b:00002000000003b0 EFLAGS: 00010217 [ 87.837946][ T7668] RAX: 0000000000000000 RBX: 00007f57a6e25fa0 RCX: 00007f57a6b9f559 [ 87.837952][ T7668] RDX: 00002000000003c0 RSI: 00002000000003b0 RDI: 0000000000200000 [ 87.837959][ T7668] RBP: 00007f57a6c36b20 R08: 0000200000000440 R09: 0000200000000440 [ 87.837965][ T7668] R10: 0000200000000400 R11: 0000000000000206 R12: 0000000000000000 [ 87.837972][ T7668] R13: 00007f57a6e26038 R14: 00007f57a6e25fa0 R15: 00007ffdf17663f8 [ 87.837987][ T7668] [ 87.845954][ T7668] memory: usage 307200kB, limit 307200kB, failcnt 37670 [ 87.845965][ T7668] memory+swap: usage 431956kB, limit 9007199254740988kB, failcnt 0 [ 87.845971][ T7668] kmem: usage 4972kB, limit 9007199254740988kB, failcnt 0 [ 87.845978][ T7668] Memory cgroup stats for /syz5: [ 87.846053][ T7668] cache 309039104 [ 87.846058][ T7668] rss 430080 [ 87.846062][ T7668] rss_huge 0 [ 87.846065][ T7668] shmem 309035008 [ 87.846069][ T7668] mapped_file 0 [ 87.846073][ T7668] dirty 0 [ 87.846076][ T7668] writeback 0 [ 87.846080][ T7668] workingset_refault_anon 12 [ 87.846084][ T7668] workingset_refault_file 0 [ 87.846088][ T7668] swap 127750144 [ 87.846092][ T7668] swapcached 224415744 [ 87.846096][ T7668] pgpgin 177374 [ 87.846099][ T7668] pgpgout 101817 [ 87.846103][ T7668] pgfault 12360 [ 87.846107][ T7668] pgmajfault 12 [ 87.846110][ T7668] inactive_anon 44408832 [ 87.846114][ T7668] active_anon 265068544 [ 87.846118][ T7668] inactive_file 0 [ 87.846122][ T7668] active_file 4096 [ 87.846125][ T7668] unevictable 0 [ 87.846129][ T7668] hierarchical_memory_limit 314572800 [ 87.846133][ T7668] hierarchical_memsw_limit 9223372036854771712 [ 87.846138][ T7668] total_cache 309039104 [ 87.846143][ T7668] total_rss 430080 [ 87.846146][ T7668] total_rss_huge 0 [ 87.846155][ T7668] total_shmem 309035008 [ 87.846159][ T7668] total_mapped_file 0 [ 87.846162][ T7668] total_dirty 0 [ 87.846166][ T7668] total_writeback 0 [ 87.846170][ T7668] total_workingset_refault_anon 12 [ 87.846174][ T7668] total_workingset_refault_file 0 [ 87.846178][ T7668] total_swap 127750144 [ 87.846182][ T7668] total_swapcached 224415744 [ 87.846186][ T7668] total_pgpgin 177374 [ 87.846190][ T7668] total_pgpgout 101817 [ 87.846193][ T7668] total_pgfault 12360 [ 87.846197][ T7668] total_pgmajfault 12 [ 87.846201][ T7668] total_inactive_anon 44408832 [ 87.846205][ T7668] total_active_anon 265068544 [ 87.846209][ T7668] total_inactive_file 0 [ 87.846213][ T7668] total_active_file 4096 [ 87.846217][ T7668] total_unevictable 0 [ 87.846221][ T7668] anon_cost 0 [ 87.846224][ T7668] file_cost 0 [ 87.846228][ T7668] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.357,pid=7670,uid=0 [ 87.846280][ T7668] Memory cgroup out of memory: Killed process 7670 (syz.5.357) total-vm:98836kB, anon-rss:1340kB, file-rss:57668kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 87.887892][ T1169] kworker/u33:12 invoked oom-killer: gfp_mask=0x408d40(GFP_NOFS|__GFP_ZERO|__GFP_NOFAIL|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 87.887916][ T1169] CPU: 0 UID: 0 PID: 1169 Comm: kworker/u33:12 Not tainted syzkaller #0 PREEMPT(full) [ 87.887929][ T1169] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.887949][ T1169] Workqueue: writeback wb_workfn (flush-8:0) [ 87.887983][ T1169] Call Trace: [ 87.887988][ T1169] [ 87.887993][ T1169] dump_stack_lvl+0x100/0x190 [ 87.888012][ T1169] dump_header+0xfb/0x606 [ 87.888025][ T1169] oom_kill_process.cold+0xd/0x380 [ 87.888039][ T1169] out_of_memory+0x340/0x14f0 [ 87.888058][ T1169] ? __pfx_out_of_memory+0x10/0x10 [ 87.888077][ T1169] mem_cgroup_out_of_memory+0xc6/0x130 [ 87.888092][ T1169] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 87.888105][ T1169] ? find_held_lock+0x2b/0x80 [ 87.888123][ T1169] ? do_raw_spin_unlock+0x145/0x1e0 [ 87.888137][ T1169] ? _raw_spin_unlock+0x28/0x50 [ 87.888155][ T1169] try_charge_memcg+0x783/0xf60 [ 87.888180][ T1169] ? __pfx_try_charge_memcg+0x10/0x10 [ 87.888197][ T1169] ? find_held_lock+0x2b/0x80 [ 87.888211][ T1169] ? rcu_read_unlock+0x17/0x60 [ 87.888221][ T1169] ? rcu_read_unlock+0x17/0x60 [ 87.888236][ T1169] obj_cgroup_charge_pages+0x2b/0x1f0 [ 87.888254][ T1169] __memcg_slab_post_alloc_hook+0x47f/0x10c0 [ 87.888270][ T1169] ? kasan_save_track+0x14/0x30 [ 87.888285][ T1169] kmem_cache_alloc_noprof+0x4f5/0x6a0 [ 87.888300][ T1169] ? alloc_buffer_head+0x21/0x140 [ 87.888315][ T1169] alloc_buffer_head+0x21/0x140 [ 87.888327][ T1169] folio_alloc_buffers+0x197/0x8e0 [ 87.888344][ T1169] create_empty_buffers+0x3a/0x660 [ 87.888359][ T1169] ? find_held_lock+0x2b/0x80 [ 87.888375][ T1169] folio_create_buffers+0x13b/0x1a0 [ 87.888391][ T1169] __block_write_full_folio+0xed/0xf90 [ 87.888408][ T1169] ? __pfx_blkdev_get_block+0x10/0x10 [ 87.888450][ T1169] block_write_full_folio+0x3b5/0x4e0 [ 87.888467][ T1169] ? __pfx_blkdev_get_block+0x10/0x10 [ 87.888483][ T1169] blkdev_writepages+0xc7/0x150 [ 87.888500][ T1169] ? __pfx_blkdev_writepages+0x10/0x10 [ 87.888516][ T1169] ? __lock_acquire+0x5c0/0x1f40 [ 87.888530][ T1169] ? __lock_acquire+0x5c0/0x1f40 [ 87.888542][ T1169] ? __pfx_blkdev_writepages+0x10/0x10 [ 87.888558][ T1169] do_writepages+0x278/0x600 [ 87.888572][ T1169] ? __pfx_do_writepages+0x10/0x10 [ 87.888584][ T1169] ? reacquire_held_locks+0xdd/0x1f0 [ 87.888595][ T1169] ? writeback_sb_inodes+0x3e1/0x1c40 [ 87.888611][ T1169] __writeback_single_inode+0x164/0x1560 [ 87.888625][ T1169] ? wbc_attach_and_unlock_inode+0xf7/0x120 [ 87.888641][ T1169] ? __pfx___writeback_single_inode+0x10/0x10 [ 87.888655][ T1169] ? do_raw_spin_unlock+0x145/0x1e0 [ 87.888671][ T1169] writeback_sb_inodes+0x766/0x1c40 [ 87.888693][ T1169] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 87.888710][ T1169] ? __lock_acquire+0x5c0/0x1f40 [ 87.888738][ T1169] ? __pfx___up_read+0x10/0x10 [ 87.888751][ T1169] ? __writeback_inodes_wb+0x107/0x2d0 [ 87.888769][ T1169] __writeback_inodes_wb+0xf8/0x2d0 [ 87.888785][ T1169] ? __pfx___writeback_inodes_wb+0x10/0x10 [ 87.888800][ T1169] ? queue_io+0x287/0x530 [ 87.888813][ T1169] wb_writeback+0x6f6/0xb50 [ 87.888831][ T1169] ? __pfx_wb_writeback+0x10/0x10 [ 87.888847][ T1169] ? get_nr_inodes+0x100/0x150 [ 87.888864][ T1169] ? _raw_spin_unlock_irq+0x23/0x50 [ 87.888880][ T1169] wb_workfn+0x8f4/0xc80 [ 87.888897][ T1169] ? __pfx_wb_workfn+0x10/0x10 [ 87.888915][ T1169] ? process_one_work+0x906/0x1b10 [ 87.888931][ T1169] ? process_one_work+0x906/0x1b10 [ 87.888949][ T1169] process_one_work+0xac7/0x1b10 [ 87.888971][ T1169] ? __pfx_process_one_work+0x10/0x10 [ 87.888987][ T1169] ? lock_acquire+0x1d1/0x380 [ 87.889002][ T1169] ? __pfx_wb_workfn+0x10/0x10 [ 87.889017][ T1169] worker_thread+0x5ef/0xe50 [ 87.889039][ T1169] ? kthread+0x13a/0x450 [ 87.889052][ T1169] ? __pfx_worker_thread+0x10/0x10 [ 87.889067][ T1169] kthread+0x373/0x450 [ 87.889080][ T1169] ? __pfx_kthread+0x10/0x10 [ 87.889095][ T1169] ret_from_fork+0x730/0xd60 [ 87.889109][ T1169] ? __pfx_ret_from_fork+0x10/0x10 [ 87.889123][ T1169] ? __switch_to+0x800/0x10e0 [ 87.889139][ T1169] ? __pfx_kthread+0x10/0x10 [ 87.889154][ T1169] ret_from_fork_asm+0x1a/0x30 [ 87.889177][ T1169] [ 87.891883][ T1169] memory: usage 307200kB, limit 307200kB, failcnt 37806 [ 87.891895][ T1169] memory+swap: usage 431956kB, limit 9007199254740988kB, failcnt 0 [ 87.891902][ T1169] kmem: usage 4972kB, limit 9007199254740988kB, failcnt 0 [ 87.891909][ T1169] Memory cgroup stats for /syz5: [ 87.892006][ T1169] cache 309039104 [ 87.892011][ T1169] rss 430080 [ 87.892015][ T1169] rss_huge 0 [ 87.892019][ T1169] shmem 309035008 [ 87.892023][ T1169] mapped_file 0 [ 87.892027][ T1169] dirty 0 [ 87.892031][ T1169] writeback 0 [ 87.892034][ T1169] workingset_refault_anon 12 [ 87.892039][ T1169] workingset_refault_file 0 [ 87.892043][ T1169] swap 127750144 [ 87.892047][ T1169] swapcached 224415744 [ 87.892051][ T1169] pgpgin 177374 [ 87.892055][ T1169] pgpgout 101817 [ 87.892058][ T1169] pgfault 12360 [ 87.892062][ T1169] pgmajfault 12 [ 87.892066][ T1169] inactive_anon 150986752 [ 87.892070][ T1169] active_anon 158490624 [ 87.892074][ T1169] inactive_file 0 [ 87.892078][ T1169] active_file 4096 [ 87.892082][ T1169] unevictable 0 [ 87.892086][ T1169] hierarchical_memory_limit 314572800 [ 87.892091][ T1169] hierarchical_memsw_limit 9223372036854771712 [ 87.892095][ T1169] total_cache 309039104 [ 87.892100][ T1169] total_rss 430080 [ 87.892104][ T1169] total_rss_huge 0 [ 87.892108][ T1169] total_shmem 309035008 [ 87.892112][ T1169] total_mapped_file 0 [ 87.892116][ T1169] total_dirty 0 [ 87.892119][ T1169] total_writeback 0 [ 87.892123][ T1169] total_workingset_refault_anon 12 [ 87.892128][ T1169] total_workingset_refault_file 0 [ 87.892132][ T1169] total_swap 127750144 [ 87.892136][ T1169] total_swapcached 224415744 [ 87.892141][ T1169] total_pgpgin 177374 [ 87.892145][ T1169] total_pgpgout 101817 [ 87.892149][ T1169] total_pgfault 12360 [ 87.892153][ T1169] total_pgmajfault 12 [ 87.892157][ T1169] total_inactive_anon 150986752 [ 87.892161][ T1169] total_active_anon 158490624 [ 87.892165][ T1169] total_inactive_file 0 [ 87.892174][ T1169] total_active_file 4096 [ 87.892179][ T1169] total_unevictable 0 [ 87.892183][ T1169] anon_cost 0 [ 87.892187][ T1169] file_cost 0 [ 87.892190][ T1169] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.357,pid=7668,uid=0 [ 87.892330][ T1169] Memory cgroup out of memory: Killed process 7668 (syz.5.357) total-vm:98836kB, anon-rss:1340kB, file-rss:57668kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 87.899115][ T7690] syz.5.357 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 87.899135][ T7690] CPU: 2 UID: 0 PID: 7690 Comm: syz.5.357 Not tainted syzkaller #0 PREEMPT(full) [ 87.899147][ T7690] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.899159][ T7690] Call Trace: [ 87.899163][ T7690] [ 87.899168][ T7690] dump_stack_lvl+0x100/0x190 [ 87.899190][ T7690] dump_header+0xfb/0x606 [ 87.899203][ T7690] oom_kill_process.cold+0xd/0x380 [ 87.899216][ T7690] out_of_memory+0x340/0x14f0 [ 87.899235][ T7690] ? __pfx_out_of_memory+0x10/0x10 [ 87.899255][ T7690] mem_cgroup_out_of_memory+0xc6/0x130 [ 87.899269][ T7690] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 87.899281][ T7690] ? find_held_lock+0x2b/0x80 [ 87.899299][ T7690] ? do_raw_spin_unlock+0x145/0x1e0 [ 87.899313][ T7690] ? _raw_spin_unlock+0x28/0x50 [ 87.899331][ T7690] try_charge_memcg+0x783/0xf60 [ 87.899351][ T7690] ? __pfx_try_charge_memcg+0x10/0x10 [ 87.899368][ T7690] ? find_held_lock+0x2b/0x80 [ 87.899382][ T7690] ? rcu_read_unlock+0x17/0x60 [ 87.899391][ T7690] ? rcu_read_unlock+0x17/0x60 [ 87.899401][ T7690] ? find_held_lock+0x2b/0x80 [ 87.899416][ T7690] ? rcu_read_unlock+0x17/0x60 [ 87.899429][ T7690] charge_memcg+0x1ae/0x210 [ 87.899447][ T7690] __mem_cgroup_charge+0x2b/0x1c0 [ 87.899480][ T7690] shmem_alloc_and_add_folio+0x451/0xd40 [ 87.899503][ T7690] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 87.899521][ T7690] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 87.899542][ T7690] shmem_get_folio_gfp+0x756/0x1980 [ 87.899563][ T7690] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 87.899594][ T7690] ? vm_normal_page+0x1d1/0x380 [ 87.899608][ T7690] ? __pfx_vm_normal_page+0x10/0x10 [ 87.899623][ T7690] shmem_write_begin+0x1a4/0x420 [ 87.899642][ T7690] ? __pfx_shmem_write_begin+0x10/0x10 [ 87.899661][ T7690] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 87.899682][ T7690] generic_perform_write+0x292/0xa40 [ 87.899697][ T7690] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 87.899713][ T7690] ? __pfx_generic_perform_write+0x10/0x10 [ 87.899729][ T7690] ? file_update_time_flags+0x38c/0x520 [ 87.899742][ T7690] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 87.899754][ T7690] shmem_file_write_iter+0x10e/0x140 [ 87.899767][ T7690] __kernel_write_iter+0x2ac/0x930 [ 87.899780][ T7690] ? __pfx___kernel_write_iter+0x10/0x10 [ 87.899793][ T7690] ? __up_read+0x333/0x980 [ 87.899807][ T7690] ? dump_user_range+0x7e0/0xe90 [ 87.899824][ T7690] dump_user_range+0xa0d/0xe90 [ 87.899842][ T7690] ? __pfx_dump_user_range+0x10/0x10 [ 87.899859][ T7690] ? elf_coredump_extra_notes_write+0xbb/0x450 [ 87.899874][ T7690] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 87.899888][ T7690] ? __pfx_writenote+0x10/0x10 [ 87.899906][ T7690] elf_core_dump+0x2d97/0x3d60 [ 87.899929][ T7690] ? __pfx_elf_core_dump+0x10/0x10 [ 87.899942][ T7690] ? kasan_save_stack+0x3f/0x50 [ 87.899955][ T7690] ? kasan_save_stack+0x30/0x50 [ 87.899967][ T7690] ? kasan_save_track+0x14/0x30 [ 87.899979][ T7690] ? __kasan_kmalloc+0xaa/0xb0 [ 87.899991][ T7690] ? __kvmalloc_node_noprof+0x35b/0x9b0 [ 87.900004][ T7690] ? get_signal+0x1f20/0x21d0 [ 87.900014][ T7690] ? arch_do_signal_or_restart+0x91/0x7e0 [ 87.900031][ T7690] ? irqentry_exit+0x542/0xab0 [ 87.900044][ T7690] ? 0xffffffffff600000 [ 87.900071][ T7690] ? lock_acquire+0x1d1/0x380 [ 87.900081][ T7690] ? get_signal+0x1f20/0x21d0 [ 87.900096][ T7690] ? vfs_coredump+0x2606/0x58c0 [ 87.900108][ T7690] vfs_coredump+0x2606/0x58c0 [ 87.900128][ T7690] ? __pfx_vfs_coredump+0x10/0x10 [ 87.900144][ T7690] ? __lock_acquire+0x5c0/0x1f40 [ 87.900161][ T7690] ? lock_acquire+0x1d1/0x380 [ 87.900171][ T7690] ? unwind_next_frame+0xbd/0x2090 [ 87.900190][ T7690] ? lock_acquire+0x1d1/0x380 [ 87.900200][ T7690] ? is_bpf_text_address+0x25/0x1a0 [ 87.900216][ T7690] ? find_held_lock+0x2b/0x80 [ 87.900230][ T7690] ? is_bpf_text_address+0x8a/0x1a0 [ 87.900244][ T7690] ? is_bpf_text_address+0x8a/0x1a0 [ 87.900258][ T7690] ? bpf_ksym_find+0x128/0x1c0 [ 87.900275][ T7690] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 87.900293][ T7690] ? is_bpf_text_address+0x94/0x1a0 [ 87.900317][ T7690] ? __sigqueue_free+0xbe/0x2a0 [ 87.900330][ T7690] ? stack_trace_save+0x8e/0xc0 [ 87.900352][ T7690] ? kasan_save_stack+0x3f/0x50 [ 87.900364][ T7690] ? kasan_save_stack+0x30/0x50 [ 87.900376][ T7690] ? kasan_save_track+0x14/0x30 [ 87.900389][ T7690] ? kasan_save_free_info+0x3b/0x70 [ 87.900398][ T7690] ? __kasan_slab_free+0x5f/0x80 [ 87.900411][ T7690] ? kmem_cache_free+0x127/0x6c0 [ 87.900421][ T7690] ? __sigqueue_free+0xbe/0x2a0 [ 87.900433][ T7690] ? get_signal+0xb02/0x21d0 [ 87.900442][ T7690] ? arch_do_signal_or_restart+0x91/0x7e0 [ 87.900458][ T7690] ? irqentry_exit+0x542/0xab0 [ 87.900467][ T7690] ? asm_exc_general_protection+0x26/0x30 [ 87.900502][ T7690] ? rcu_is_watching+0x13/0xc0 [ 87.900519][ T7690] get_signal+0x1f20/0x21d0 [ 87.900535][ T7690] ? __pfx_get_signal+0x10/0x10 [ 87.900550][ T7690] arch_do_signal_or_restart+0x91/0x7e0 [ 87.900569][ T7690] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 87.900589][ T7690] ? cond_local_irq_disable.part.0+0x38/0x40 [ 87.900601][ T7690] ? exc_general_protection+0x120/0x240 [ 87.900618][ T7690] irqentry_exit+0x542/0xab0 [ 87.900630][ T7690] asm_exc_general_protection+0x26/0x30 [ 87.900641][ T7690] RIP: 0033:0x7f57a6b9f561 [ 87.900650][ T7690] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 87.900661][ T7690] RSP: 002b:00002000000003b0 EFLAGS: 00010217 [ 87.900670][ T7690] RAX: 0000000000000000 RBX: 00007f57a6e25fa0 RCX: 00007f57a6b9f559 [ 87.900677][ T7690] RDX: 00002000000003c0 RSI: 00002000000003b0 RDI: 0000000000200000 [ 87.900684][ T7690] RBP: 00007f57a6c36b20 R08: 0000200000000440 R09: 0000200000000440 [ 87.900690][ T7690] R10: 0000200000000400 R11: 0000000000000206 R12: 0000000000000000 [ 87.900696][ T7690] R13: 00007f57a6e26038 R14: 00007f57a6e25fa0 R15: 00007ffdf17663f8 [ 87.900711][ T7690] [ 87.920431][ T7690] memory: usage 307200kB, limit 307200kB, failcnt 37875 [ 87.920444][ T7690] memory+swap: usage 431956kB, limit 9007199254740988kB, failcnt 0 [ 87.920451][ T7690] kmem: usage 4972kB, limit 9007199254740988kB, failcnt 0 [ 87.920457][ T7690] Memory cgroup stats for /syz5: [ 87.920532][ T7690] cache 309039104 [ 87.920538][ T7690] rss 430080 [ 87.920541][ T7690] rss_huge 0 [ 87.920545][ T7690] shmem 309035008 [ 87.920549][ T7690] mapped_file 0 [ 87.920552][ T7690] dirty 0 [ 87.920556][ T7690] writeback 0 [ 87.920559][ T7690] workingset_refault_anon 12 [ 87.920563][ T7690] workingset_refault_file 0 [ 87.920567][ T7690] swap 127750144 [ 87.920571][ T7690] swapcached 224415744 [ 87.920575][ T7690] pgpgin 177374 [ 87.920578][ T7690] pgpgout 101817 [ 87.920582][ T7690] pgfault 12360 [ 87.920585][ T7690] pgmajfault 12 [ 87.920589][ T7690] inactive_anon 44408832 [ 87.920593][ T7690] active_anon 265068544 [ 87.920597][ T7690] inactive_file 0 [ 87.920601][ T7690] active_file 4096 [ 87.920680][ T7690] unevictable 0 [ 87.920685][ T7690] hierarchical_memory_limit 314572800 [ 87.920690][ T7690] hierarchical_memsw_limit 9223372036854771712 [ 87.920695][ T7690] total_cache 309039104 [ 87.920698][ T7690] total_rss 430080 [ 87.920702][ T7690] total_rss_huge 0 [ 87.920706][ T7690] total_shmem 309035008 [ 87.920710][ T7690] total_mapped_file 0 [ 87.920714][ T7690] total_dirty 0 [ 87.920717][ T7690] total_writeback 0 [ 87.920721][ T7690] total_workingset_refault_anon 12 [ 87.920725][ T7690] total_workingset_refault_file 0 [ 87.920730][ T7690] total_swap 127750144 [ 87.920733][ T7690] total_swapcached 224415744 [ 87.920738][ T7690] total_pgpgin 177374 [ 87.920741][ T7690] total_pgpgout 101817 [ 87.920745][ T7690] total_pgfault 12360 [ 87.920749][ T7690] total_pgmajfault 12 [ 87.920753][ T7690] total_inactive_anon 44408832 [ 87.920757][ T7690] total_active_anon 265068544 [ 87.920761][ T7690] total_inactive_file 0 [ 87.920765][ T7690] total_active_file 4096 [ 87.920769][ T7690] total_unevictable 0 [ 87.920773][ T7690] anon_cost 0 [ 87.920776][ T7690] file_cost 0 [ 87.920780][ T7690] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.357,pid=7667,uid=0 [ 87.920833][ T7690] Memory cgroup out of memory: Killed process 7667 (syz.5.357) total-vm:98836kB, anon-rss:1340kB, file-rss:57668kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 87.945066][ T1169] Memory cgroup out of memory: Killed process 7660 (syz.5.357) total-vm:98704kB, anon-rss:1340kB, file-rss:57668kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 87.988312][ T7707] Memory cgroup out of memory: Killed process 7659 (syz.5.357) total-vm:98572kB, anon-rss:1340kB, file-rss:57668kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 88.570395][ T7677] syz.5.357 (7677) used greatest stack depth: 18504 bytes left [ 88.739942][ T7659] syz.5.357 (7659) used greatest stack depth: 18184 bytes left [ 89.211712][ T7680] syz.5.357 (7680) used greatest stack depth: 18152 bytes left [ 89.355206][ T8001] overlayfs: failed to clone lowerpath v[ 89.389576][ T8001] overlayfs: failed to clone lowerpath [ 89.475591][ T8013] openvswitch: netlink: nsh attr 1 has unexpected len 4 expected 8 [ 89.564021][ T8033] overlayfs: failed to clone upperpath [ 89.628239][ T8040] netlink: 4 bytes leftover after parsing attributes in process `syz.5.463'. [ 89.669232][ T8051] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 89.669403][ T8052] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 89.682983][ T8051] netlink: 'syz.4.467': attribute type 1 has an invalid length. [ 89.697808][ T8051] 8021q: adding VLAN 0 to HW filter on device bond2 [ 89.709552][ T8051] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1551 sclass=netlink_route_socket pid=8051 comm=syz.4.467 [ 89.714965][ T8057] netlink: 28 bytes leftover after parsing attributes in process `syz.5.469'. [ 89.775436][ T8070] Bluetooth: MGMT ver 1.23 [ 89.807569][ T5738] Bluetooth: hci3: ACL packet for unknown connection handle 201 v[ 89.908799][ T8086] fuse: Bad value for 'group_id' [ 89.908841][ T8086] fuse: Bad value for 'group_id' [ 90.076674][ T5883] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 90.238012][ T5883] usb 9-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 90.239000][ T5883] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.239044][ T5883] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 90.239066][ T5883] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 90.239098][ T5883] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.502470][ T43] kauditd_printk_skb: 19 callbacks suppressed [ 90.502502][ T43] audit: type=1400 audit(1792609239.698:782): avc: denied { mounton } for pid=8108 comm="syz.5.480" path="/45/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 90.601605][ T8117] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 90.626914][ T50] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 90.633271][ T5738] Bluetooth: hci3: unexpected event for opcode 0x0c1c [ 90.660378][ T43] audit: type=1400 audit(1792609239.858:783): avc: denied { setopt } for pid=8066 comm="syz.4.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 90.686563][ T43] audit: type=1400 audit(1792609239.878:784): avc: denied { watch watch_reads } for pid=8112 comm="syz.5.481" path="/proc/168/net/dev_snmp6" dev="proc" ino=4026533134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 91.278472][ T8154] Bluetooth: hci0: Invalid link key type 20 for 66:55:44:33:22:11 [ 91.328708][ T24] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 91.449385][ T43] audit: type=1400 audit(1792609240.648:785): avc: denied { write } for pid=8162 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.499395][ T43] audit: type=1400 audit(1792609240.698:786): avc: denied { write } for pid=8165 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.536521][ T8176] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 91.536534][ T8176] overlayfs: missing 'lowerdir' [ 91.552804][ T43] audit: type=1400 audit(1792609240.748:787): avc: denied { name_bind } for pid=8175 comm="syz.1.501" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 v[ 91.745972][ T43] audit: type=1400 audit(1792609240.938:788): avc: denied { mount } for pid=8190 comm="syz.2.506" name="/" dev="overlay" ino=597 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 91.763972][ T43] audit: type=1400 audit(1792609240.958:789): avc: denied { wake_alarm } for pid=8190 comm="syz.2.506" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 91.764777][ T43] audit: type=1400 audit(1792609240.958:790): avc: denied { bind } for pid=8190 comm="syz.2.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 91.778389][ T43] audit: type=1400 audit(1792609240.968:791): avc: denied { unmount } for pid=5723 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 91.846509][ T8194] geneve1: entered allmulticast mode [ 92.249646][ T66] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.254190][ T66] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.258466][ T66] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.259236][ T66] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.259606][ T66] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.293128][ T8203] cxacru 9-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 92.293602][ T8203] cxacru 9-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 92.425924][ T8199] rxe_eth0 speed is unknown, defaulting to 1000 [ 92.517604][ T8222] overlayfs: failed to resolve './cgroup': -2 v[ 92.762062][ T42] usb 9-1: USB disconnect, device number 4 [ 92.823181][ T8241] ocfs2: Unknown parameter '' [ 92.837436][ T8199] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.837570][ T8199] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.837666][ T8199] bridge_slave_0: entered allmulticast mode [ 92.838978][ T8199] bridge_slave_0: entered promiscuous mode [ 92.841273][ T8199] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.841386][ T8199] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.841648][ T8199] bridge_slave_1: entered allmulticast mode [ 92.842880][ T8199] bridge_slave_1: entered promiscuous mode [ 92.866195][ T8199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.869234][ T8199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.888884][ T8199] team0: Port device team_slave_0 added [ 92.890689][ T8199] team0: Port device team_slave_1 added [ 92.909635][ T8199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.909651][ T8199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.909672][ T8199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.910828][ T8199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.910839][ T8199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.910854][ T8199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.937268][ T8199] hsr_slave_0: entered promiscuous mode [ 92.937997][ T8199] hsr_slave_1: entered promiscuous mode [ 92.938583][ T8199] debugfs: 'hsr0' already exists in 'hsr' [ 92.938596][ T8199] Cannot create hsr debugfs directory [ 92.945686][ T8257] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 93.092060][ T8199] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 93.098457][ T8199] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.098819][ T8199] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 93.103403][ T8199] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.104186][ T8199] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 93.111342][ T8199] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.112059][ T8199] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 93.118417][ T8199] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.137206][ T8199] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.137339][ T8199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.137603][ T8199] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.137690][ T8199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.187659][ T8199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.195398][ T77] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.196261][ T77] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.209561][ T8199] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.215624][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.215705][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.221504][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.221549][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state v[ 93.494823][ T8199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.618155][ T8317] qnx6: unable to set blocksize [ 93.627585][ T8316] input: syz0 as /devices/virtual/input/input7 [ 93.669795][ T8199] veth0_vlan: entered promiscuous mode [ 93.675301][ T8319] netlink: 'syz.1.542': attribute type 12 has an invalid length. [ 93.678929][ T8199] veth1_vlan: entered promiscuous mode [ 93.699206][ T8199] veth0_macvtap: entered promiscuous mode [ 93.704510][ T8199] veth1_macvtap: entered promiscuous mode [ 93.715259][ T8325] IPv6: addrconf: prefix option has invalid lifetime [ 93.727960][ T8199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.731162][ T8199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.793824][ T6996] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.793865][ T6996] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.793897][ T6996] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.793928][ T6996] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.816626][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.816640][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.850191][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.850206][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.851102][ T8341] netlink: 14 bytes leftover after parsing attributes in process `syz.4.549'. [ 93.916203][ T8345] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 93.916219][ T8345] block device autoloading is deprecated and will be removed. [ 94.226853][ T5884] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 94.297768][ T5738] Bluetooth: hci0: command tx timeout [ 94.398355][ T5884] usb 11-1: unable to get BOS descriptor or descriptor too short [ 94.398382][ T5884] usb 11-1: New USB device found, idVendor=0bda, idProduct=0184, bcdDevice=6f.98 [ 94.400047][ T5884] usb 11-1: config 4 has an invalid interface number: 13 but max is 0 [ 94.400066][ T5884] usb 11-1: config 4 has no interface number 0 [ 94.400085][ T5884] usb 11-1: config 4 interface 13 has no altsetting 0 [ 94.401554][ T5884] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 94.401566][ T5884] usb 11-1: Product: syz [ 94.401573][ T5884] usb 11-1: Manufacturer: syz [ 94.401580][ T5884] usb 11-1: SerialNumber: syz [ 94.506017][ T8367] netlink: 92 bytes leftover after parsing attributes in process `syz.4.558'. [ 94.539487][ T8369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.559'. [ 94.571137][ T8375] Bluetooth: MGMT ver 1.23 [ 94.587677][ T8369] ./dev/sda1: Can't lookup blockdev [ 95.149718][ T8382] netlink: 'syz.1.563': attribute type 16 has an invalid length. [ 95.149749][ T8382] netlink: 'syz.1.563': attribute type 17 has an invalid length. [ 95.169357][ T8382] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.171126][ T8382] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.188461][ T5826] ip6_tunnel: ip6gretap0: Local routing loop detected! v[ 95.320862][ T8386] netlink: 48 bytes leftover after parsing attributes in process `syz.1.565'. [ 95.326246][ T8386] cgroup: none used incorrectly [ 95.474343][ T8402] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 95.493084][ T8405] netlink: 28 bytes leftover after parsing attributes in process `syz.5.570'. v[ 95.781972][ T8422] netlink: 'syz.5.577': attribute type 1 has an invalid length. [ 95.782645][ T8423] netlink: 'syz.5.577': attribute type 1 has an invalid length. [ 95.809739][ T8422] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.047064][ T5883] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 96.182217][ T43] kauditd_printk_skb: 22 callbacks suppressed [ 96.182244][ T43] audit: type=1400 audit(1792609245.378:813): avc: denied { write } for pid=8434 comm="syz.4.581" name="control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 96.366755][ T5738] Bluetooth: hci0: command tx timeout [ 96.659386][ T43] audit: type=1400 audit(1792609245.858:814): avc: denied { mount } for pid=8462 comm="syz.5.588" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 96.688753][ T8465] xt_cluster: node mask cannot exceed total number of nodes [ 96.762790][ T8463] input: syz0 as /devices/virtual/input/input8 [ 96.835530][ T8472] loop5: detected capacity change from 0 to 7 [ 96.845133][ T8472] Dev loop5: unable to read RDB block 7 [ 96.845167][ T8472] loop5: unable to read partition table [ 96.845337][ T8472] loop5: partition table beyond EOD, truncated [ 96.845375][ T8472] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 97.004515][ T5884] ums-realtek 11-1:4.13: USB Mass Storage device detected [ 97.118941][ T5884] usb 11-1: USB disconnect, device number 2 [ 97.136294][ T8495] netlink: 'syz.6.597': attribute type 1 has an invalid length. [ 97.473810][ T8522] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 97.499786][ T5138] Dev loop5: unable to read RDB block 7 [ 97.499861][ T5138] loop5: unable to read partition table [ 97.500019][ T5138] loop5: partition table beyond EOD, truncated [ 97.547884][ T8526] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 97.602445][ T43] audit: type=1400 audit(1792609246.798:815): avc: denied { unmount } for pid=7322 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 97.678910][ T43] audit: type=1400 audit(1792609246.878:816): avc: denied { connect } for pid=8538 comm="syz.4.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 97.735595][ T5738] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 98.249295][ T8556] kAFS: No cell specified [ 98.300735][ T43] audit: type=1400 audit(1792609247.498:817): avc: denied { setopt } for pid=8594 comm="syz.6.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 98.331379][ T43] audit: type=1400 audit(1792609247.528:818): avc: denied { write } for pid=8596 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.331450][ T43] audit: type=1400 audit(1792609247.528:819): avc: denied { create } for pid=8596 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 98.331487][ T43] audit: type=1400 audit(1792609247.528:820): avc: denied { write open } for pid=8596 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb4.link" dev="tmpfs" ino=2495 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 v[ 98.331793][ T43] audit: type=1400 audit(1792609247.528:821): avc: denied { append } for pid=8596 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" dev="tmpfs" ino=2495 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 98.332562][ T43] audit: type=1400 audit(1792609247.528:822): avc: denied { getattr } for pid=8596 comm="dhcpcd-run-hook" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 98.428920][ T8593] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 98.432255][ T8593] e1000e 0000:00:02.0 eth1: entered promiscuous mode [ 98.442098][ T8593] netlink: 'syz.1.612': attribute type 1 has an invalid length. [ 98.442121][ T8593] netlink: 1 bytes leftover after parsing attributes in process `syz.1.612'. [ 98.449340][ T5738] Bluetooth: hci0: command tx timeout [ 98.480271][ T8623] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 98.481693][ T8621] netlink: 16 bytes leftover after parsing attributes in process `syz.1.617'. [ 98.614015][ T5738] Bluetooth: hci3: unexpected event for opcode 0x0000 v[ 99.367509][ T8677] netlink: 4 bytes leftover after parsing attributes in process `syz.6.626'. [ 99.427210][ T8679] netlink: 16 bytes leftover after parsing attributes in process `syz.6.626'. [ 99.429754][ T8679] udc dummy_udc.0: failed to start g1: -19 [ 99.431727][ T8679] UDC core: g1: couldn't find an available UDC or it's busy [ 99.520407][ T8681] rxe_eth0 speed is unknown, defaulting to 1000 [ 99.561054][ T8684] overlayfs: failed to resolve './bus': -2 [ 99.633805][ T8690] netlink: 'syz.6.629': attribute type 21 has an invalid length. [ 99.770104][ T8700] netlink: 64138 bytes leftover after parsing attributes in process `syz.6.633'. [ 99.822084][ T8700] netlink: 28 bytes leftover after parsing attributes in process `syz.6.633'. [ 99.822112][ T8700] netlink: 28 bytes leftover after parsing attributes in process `syz.6.633'. [ 99.822127][ T8700] netlink: 8 bytes leftover after parsing attributes in process `syz.6.633'. v[ 100.142306][ T6996] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.216487][ T6996] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.263227][ T66] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.270184][ T66] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.270945][ T66] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.275717][ T66] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.276290][ T66] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.307720][ T6996] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.375142][ T6996] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.405671][ T8730] ./dev/mtdblock0: Can't lookup blockdev [ 100.457013][ T8734] netlink: 40 bytes leftover after parsing attributes in process `syz.1.645'. [ 100.481781][ T8734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.645'. [ 100.481804][ T8734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.645'. [ 100.502572][ T6996] bridge_slave_1: left allmulticast mode [ 100.502590][ T6996] bridge_slave_1: left promiscuous mode [ 100.502700][ T6996] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.513068][ T6996] bridge_slave_0: left allmulticast mode [ 100.513089][ T6996] bridge_slave_0: left promiscuous mode [ 100.513235][ T6996] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.613186][ T6996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.618475][ T6996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.625586][ T6996] bond0 (unregistering): Released all slaves [ 100.649188][ T8714] rxe_eth0 speed is unknown, defaulting to 1000 [ 100.725734][ T8746] netlink: 'syz.4.647': attribute type 11 has an invalid length. [ 100.871609][ T5440] 8021q: adding VLAN 0 to HW filter on device eth10 [ 100.943843][ T66] Bluetooth: hci2: unexpected event for opcode 0x0005 [ 101.034166][ T5440] 8021q: adding VLAN 0 to HW filter on device eth11 [ 101.074959][ T8721] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 101.193170][ T43] kauditd_printk_skb: 29 callbacks suppressed [ 101.193185][ T43] audit: type=1400 audit(1792609250.388:852): avc: denied { write } for pid=8772 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.275270][ T6996] hsr_slave_0: left promiscuous mode [ 101.276188][ T6996] hsr_slave_1: left promiscuous mode [ 101.278485][ T6996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.278499][ T6996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.282939][ T43] audit: type=1400 audit(1792609250.478:853): avc: denied { write } for pid=8780 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.292095][ T6996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.292113][ T6996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.306495][ T6996] veth1_macvtap: left promiscuous mode [ 101.306866][ T6996] veth0_macvtap: left promiscuous mode [ 101.306914][ T6996] veth1_vlan: left promiscuous mode [ 101.306959][ T6996] veth0_vlan: left promiscuous mode [ 101.440280][ T8790] netlink: 24 bytes leftover after parsing attributes in process `syz.1.654'. [ 101.522849][ T6996] team0 (unregistering): Port device team_slave_1 removed [ 101.523513][ T8788] FAULT_INJECTION: forcing a failure. [ 101.523513][ T8788] name fail_futex, interval 1, probability 0, space 0, times 1 [ 101.523547][ T8788] CPU: 0 UID: 0 PID: 8788 Comm: syz.5.653 Tainted: G L syzkaller #0 PREEMPT(full) [ 101.523564][ T8788] Tainted: [L]=SOFTLOCKUP [ 101.523569][ T8788] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 101.523586][ T8788] Call Trace: [ 101.523600][ T8788] [ 101.523605][ T8788] dump_stack_lvl+0x100/0x190 [ 101.523717][ T8788] should_fail_ex.cold+0x5/0xa [ 101.523751][ T8788] get_futex_key+0x1c9/0x13e0 [ 101.523797][ T8788] ? __pfx_get_futex_key+0x10/0x10 [ 101.523812][ T8788] ? bpf_prepare_filter+0xd59/0x11e0 [ 101.523866][ T8788] ? kfree+0x22b/0x6d0 [ 101.523896][ T8788] futex_wake+0xf4/0x5e0 [ 101.523916][ T8788] ? __pfx_futex_wake+0x10/0x10 [ 101.523936][ T8788] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 101.523951][ T8788] ? find_held_lock+0x2b/0x80 [ 101.523971][ T8788] do_futex+0x2b2/0x440 [ 101.523987][ T8788] ? __pfx_do_futex+0x10/0x10 [ 101.524003][ T8788] ? __seccomp_filter+0x896/0x1130 [ 101.524022][ T8788] __x64_sys_futex+0x34f/0x4d0 [ 101.524039][ T8788] ? __pfx___x64_sys_futex+0x10/0x10 [ 101.524060][ T8788] do_syscall_64+0x123/0x790 [ 101.524131][ T8788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.524145][ T8788] RIP: 0033:0x7f57a6b9f559 [ 101.524155][ T8788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.524168][ T8788] RSP: 002b:00007f57a7ad90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 101.524187][ T8788] RAX: ffffffffffffffda RBX: 00007f57a6e25fa8 RCX: 00007f57a6b9f559 [ 101.524194][ T8788] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f57a6e25fac [ 101.524202][ T8788] RBP: 00007f57a6e25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 101.524209][ T8788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.524215][ T8788] R13: 00007f57a6e26038 R14: 00007ffdf1766310 R15: 00007ffdf17663f8 [ 101.524230][ T8788] [ 101.569888][ T6996] team0 (unregistering): Port device team_slave_0 removed [ 101.576132][ T8796] Cannot find add_set index 0 as target [ 101.616303][ T43] audit: type=1400 audit(1792609250.808:854): avc: denied { mount } for pid=8798 comm="syz.4.656" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 101.675522][ T5440] 8021q: adding VLAN 0 to HW filter on device eth12 [ 101.680479][ T43] audit: type=1400 audit(1792609250.878:855): avc: denied { write } for pid=8798 comm="syz.4.656" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 101.780941][ T8714] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.780988][ T8714] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.781045][ T8714] bridge_slave_0: entered allmulticast mode [ 101.785064][ T8714] bridge_slave_0: entered promiscuous mode [ 101.786167][ T8714] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.786208][ T8714] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.786259][ T8714] bridge_slave_1: entered allmulticast mode [ 101.787346][ T8714] bridge_slave_1: entered promiscuous mode [ 101.808072][ T66] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 101.808111][ T66] Bluetooth: hci3: Injecting HCI hardware error event [ 101.809265][ T5738] Bluetooth: hci3: hardware error 0x00 [ 101.813814][ T8714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.816154][ T8714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.850456][ T8714] team0: Port device team_slave_0 added [ 101.851696][ T8714] team0: Port device team_slave_1 added [ 101.862238][ T8714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.862248][ T8714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.862262][ T8714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.863236][ T8714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.863244][ T8714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.863258][ T8714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.894939][ T43] audit: type=1400 audit(1792609251.088:856): avc: denied { write } for pid=8806 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.901081][ T8714] hsr_slave_0: entered promiscuous mode [ 101.901470][ T8714] hsr_slave_1: entered promiscuous mode [ 101.901750][ T8714] debugfs: 'hsr0' already exists in 'hsr' [ 101.901762][ T8714] Cannot create hsr debugfs directory [ 101.961056][ T43] audit: type=1400 audit(1792609251.158:857): avc: denied { write } for pid=8809 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.016902][ T5440] 8021q: adding VLAN 0 to HW filter on device eth13 [ 102.175578][ T8714] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 102.179806][ T8714] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.181456][ T8714] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 102.185879][ T8714] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.191589][ T8714] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 102.202216][ T8714] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.203188][ T8714] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 102.212624][ T8714] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.294906][ T8714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.310967][ T8714] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.329192][ T8563] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.329272][ T8563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.330188][ T8563] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.330241][ T8563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.366836][ T66] Bluetooth: hci0: command tx timeout [ 102.633031][ T8714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.636040][ T8830] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 102.636064][ T8830] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 102.636087][ T8830] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 102.655169][ T8830] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 102.663329][ T8830] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 102.686731][ T8830] netlink: 12 bytes leftover after parsing attributes in process `syz.1.658'. [ 102.719122][ T2321] infiniband syz1: ib_query_port failed (-19) [ 102.729511][ T1169] smbdirect: ib_dev[syz1] removed [ 102.777961][ T8714] veth0_vlan: entered promiscuous mode [ 102.782805][ T8714] veth1_vlan: entered promiscuous mode [ 102.796152][ T8714] veth0_macvtap: entered promiscuous mode [ 102.798773][ T8714] veth1_macvtap: entered promiscuous mode [ 102.807996][ T8714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.811575][ T8714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.846993][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.847436][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.847455][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.847472][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.867913][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.867926][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.882765][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.882778][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.888818][ T8842] netlink: 36 bytes leftover after parsing attributes in process `syz.1.659'. [ 102.888915][ T8842] netlink: 36 bytes leftover after parsing attributes in process `syz.1.659'. [ 102.888995][ T8842] netlink: 36 bytes leftover after parsing attributes in process `syz.1.659'. [ 102.889079][ T8842] netlink: 36 bytes leftover after parsing attributes in process `syz.1.659'. [ 102.889163][ T8842] netlink: 36 bytes leftover after parsing attributes in process `syz.1.659'. [ 103.390752][ T43] audit: type=1400 audit(1792609252.588:858): avc: denied { unmount } for pid=6926 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 v[ 103.490799][ T66] Bluetooth: hci2: unexpected event for opcode 0x0005 [ 103.741682][ T8903] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3422 sclass=netlink_route_socket pid=8903 comm=syz.1.663 [ 103.826617][ T8912] jffs2: notice: (8912) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 103.828162][ T8912] jffs2: notice: (8912) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 103.831733][ T8912] jffs2: notice: (8912) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 103.835367][ T8912] jffs2: notice: (8912) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 103.844326][ T8912] jffs2: notice: (8912) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 103.854383][ T8912] jffs2: notice: (8912) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 103.870747][ T8912] jffs2: notice: (8912) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 103.873455][ T8912] jffs2: notice: (8912) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 103.875973][ T8912] jffs2: notice: (8912) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 103.881537][ T8911] fuse: fd is not a fuse device [ 103.881755][ T8912] jffs2: notice: (8912) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 103.885203][ T8912] jffs2: notice: (8912) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 103.887087][ T5738] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 103.893044][ T8912] jffs2: notice: (8912) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 103.949297][ T8930] +: renamed from hsr0 (while UP) [ 103.979906][ T8935] netlink: ct family unspecified [ 103.979938][ T8935] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.980705][ T8935] FAULT_INJECTION: forcing a failure. [ 103.980705][ T8935] name failslab, interval 1, probability 0, space 0, times 0 [ 103.980726][ T8935] CPU: 1 UID: 0 PID: 8935 Comm: syz.7.669 Tainted: G L syzkaller #0 PREEMPT(full) [ 103.980742][ T8935] Tainted: [L]=SOFTLOCKUP [ 103.980746][ T8935] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.980753][ T8935] Call Trace: [ 103.980757][ T8935] [ 103.980763][ T8935] dump_stack_lvl+0x100/0x190 [ 103.980786][ T8935] should_fail_ex.cold+0x5/0xa [ 103.980804][ T8935] should_failslab+0xc2/0x120 [ 103.980822][ T8935] kmem_cache_alloc_noprof+0x92/0x6a0 [ 103.980836][ T8935] ? security_file_alloc+0x34/0x2c0 [ 103.980892][ T8935] security_file_alloc+0x34/0x2c0 [ 103.980910][ T8935] init_file+0x95/0x480 [ 103.980934][ T8935] alloc_empty_file+0x79/0x1c0 [ 103.980952][ T8935] alloc_file_clone+0x5a/0x100 [ 103.980971][ T8935] create_pipe_files+0x3e8/0x930 [ 103.980990][ T8935] do_pipe2+0xbd/0x1e0 [ 103.981007][ T8935] ? __pfx_do_pipe2+0x10/0x10 [ 103.981028][ T8935] __x64_sys_pipe+0x33/0x50 [ 103.981044][ T8935] do_syscall_64+0x123/0x790 [ 103.981077][ T8935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.981090][ T8935] RIP: 0033:0x7f043179f559 [ 103.981100][ T8935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.981112][ T8935] RSP: 002b:00007f0432740028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 103.981124][ T8935] RAX: ffffffffffffffda RBX: 00007f0431a25fa0 RCX: 00007f043179f559 [ 103.981132][ T8935] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 v[ 103.981139][ T8935] RBP: 00007f0431836b20 R08: 0000000000000000 R09: 0000000000000000 [ 103.981146][ T8935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.981153][ T8935] R13: 00007f0431a26038 R14: 00007f0431a25fa0 R15: 00007ffd5e78dc68 [ 103.981169][ T8935] [ 104.089742][ T8944] ip_tables: iptables: counters copy to user failed while replacing table [ 104.090978][ T8944] x_tables: duplicate underflow at hook 2 [ 104.120140][ T8941] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 104.120643][ T43] audit: type=1400 audit(1792609253.318:859): avc: denied { mounton } for pid=8940 comm="syz.7.672" path="/7/proc_dir/scsi/scsi" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=file permissive=1 [ 104.206451][ T43] audit: type=1400 audit(1792609253.398:860): avc: denied { create } for pid=8946 comm="syz.4.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 104.206687][ T43] audit: type=1400 audit(1792609253.398:861): avc: denied { bind } for pid=8946 comm="syz.4.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 104.433339][ T8961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.433356][ T8961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.434108][ T8961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.434121][ T8961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.434608][ T8961] batman_adv: batadv0: Interface deactivated: gretap1 [ 104.434618][ T8961] batman_adv: batadv0: Removing interface: gretap1 [ 104.447756][ T5738] Bluetooth: hci0: command 0x041b tx timeout [ 104.478676][ T8964] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 104.597937][ T8978] bond0: entered promiscuous mode [ 104.597954][ T8978] bond_slave_0: entered promiscuous mode [ 104.598057][ T8978] bond_slave_1: entered promiscuous mode [ 104.600612][ T8978] batadv_slave_0: entered promiscuous mode [ 104.600847][ T8978] batadv_slave_0: left promiscuous mode [ 104.601132][ T8978] bond0: left promiscuous mode [ 104.601142][ T8978] bond_slave_0: left promiscuous mode [ 104.601271][ T8978] bond_slave_1: left promiscuous mode [ 105.202239][ T8986] overlayfs: failed to clone upperpath [ 105.293124][ T8990] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8990 comm=syz.1.687 [ 105.294626][ T8990] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8990 comm=syz.1.687 [ 105.294689][ T8990] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8990 comm=syz.1.687 [ 105.294740][ T8990] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8990 comm=syz.1.687 [ 105.294788][ T8990] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8990 comm=syz.1.687 [ 105.294839][ T8990] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8990 comm=syz.1.687 [ 105.294886][ T8990] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8990 comm=syz.1.687 [ 105.294933][ T8990] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8990 comm=syz.1.687 [ 105.294983][ T8990] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8990 comm=syz.1.687 [ 105.481747][ T8999] __nla_validate_parse: 66 callbacks suppressed [ 105.481770][ T8999] netlink: 92 bytes leftover after parsing attributes in process `syz.1.689'. [ 105.555017][ T5738] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 105.582976][ T9005] CIFS: Attempting to mount //127.0.0.1/share [ 106.205935][ T9013] FAULT_INJECTION: forcing a failure. [ 106.205935][ T9013] name failslab, interval 1, probability 0, space 0, times 0 [ 106.205959][ T9013] CPU: 3 UID: 0 PID: 9013 Comm: syz.4.694 Tainted: G L syzkaller #0 PREEMPT(full) [ 106.205976][ T9013] Tainted: [L]=SOFTLOCKUP [ 106.205981][ T9013] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.205988][ T9013] Call Trace: [ 106.205993][ T9013] [ 106.205998][ T9013] dump_stack_lvl+0x100/0x190 [ 106.206020][ T9013] should_fail_ex.cold+0x5/0xa [ 106.206037][ T9013] should_failslab+0xc2/0x120 [ 106.206054][ T9013] __kmalloc_cache_noprof+0x91/0x6d0 [ 106.206066][ T9013] ? alloc_vfsmnt+0x72/0x840 [ 106.206100][ T9013] alloc_vfsmnt+0x72/0x840 [ 106.206112][ T9013] ? copy_tree+0x550/0xc50 [ 106.206131][ T9013] clone_mnt+0x4b/0x9c0 [ 106.206145][ T9013] copy_tree+0x327/0xc50 [ 106.206166][ T9013] copy_mnt_ns+0x3e8/0x1180 [ 106.206181][ T9013] ? __pfx_copy_mnt_ns+0x10/0x10 [ 106.206196][ T9013] ? create_new_namespaces+0x30/0xac0 [ 106.206212][ T9013] create_new_namespaces+0xd3/0xac0 [ 106.206225][ T9013] ? bpf_lsm_capable+0x9/0x10 [ 106.206242][ T9013] ? security_capable+0x80/0x260 [ 106.206258][ T9013] unshare_nsproxy_namespaces+0xf6/0x210 [ 106.206271][ T9013] ksys_unshare+0x44f/0x980 [ 106.206284][ T9013] ? __pfx_ksys_unshare+0x10/0x10 [ 106.206296][ T9013] ? fput+0x7c/0x100 [ 106.206312][ T9013] ? ksys_write+0x1ac/0x250 [ 106.206329][ T9013] __x64_sys_unshare+0x31/0x40 [ 106.206340][ T9013] do_syscall_64+0x123/0x790 [ 106.206353][ T9013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.206365][ T9013] RIP: 0033:0x7f048c19f559 [ 106.206375][ T9013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.206386][ T9013] RSP: 002b:00007f048d0db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 106.206397][ T9013] RAX: ffffffffffffffda RBX: 00007f048c425fa0 RCX: 00007f048c19f559 [ 106.206405][ T9013] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002a020480 [ 106.206412][ T9013] RBP: 00007f048c236b20 R08: 0000000000000000 R09: 0000000000000000 [ 106.206418][ T9013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.206425][ T9013] R13: 00007f048c426038 R14: 00007f048c425fa0 R15: 00007fff62d5fe38 [ 106.206440][ T9013] [ 106.272263][ T9014] virtio-pci 0000:00:01.0: MSI/MSI-X disallowed for future drivers [ 106.272558][ T9014] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 106.272558][ T9014] [ 106.272692][ T9014] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 106.360872][ T9005] CIFS: VFS: Error connecting to socket. Aborting operation. [ 106.360916][ T9005] CIFS: VFS: cifs_mount failed w/return code = -4 [ 106.363208][ T9014] CIFS: Attempting to mount //172.20.20.170/share [ 106.366997][ C2] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 106.392642][ T43] kauditd_printk_skb: 6 callbacks suppressed [ 106.392654][ T43] audit: type=1400 audit(1792609255.588:868): avc: denied { mount } for pid=9019 comm="syz.7.696" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 106.414342][ T43] audit: type=1400 audit(1792609255.608:869): avc: denied { read } for pid=9019 comm="syz.7.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 106.461952][ T9031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.699'. [ 106.463234][ T9031] netlink: 12 bytes leftover after parsing attributes in process `syz.1.699'. [ 106.517080][ T9035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.700'. [ 106.526763][ T5738] Bluetooth: hci0: command 0x041b tx timeout [ 106.564426][ T9039] overlayfs: unescaped trailing colons in lowerdir mount option. [ 106.565165][ T5738] Bluetooth: hci0: unexpected event for opcode 0x1005 [ 106.602938][ T9043] netlink: 16 bytes leftover after parsing attributes in process `syz.1.703'. [ 106.914995][ T9061] overlayfs: failed to clone lowerpath [ 107.035545][ T9014] CIFS: VFS: Error connecting to socket. Aborting operation. [ 107.035573][ T9014] CIFS: VFS: cifs_mount failed w/return code = -4 [ 107.079009][ T9066] syzkaller0: entered promiscuous mode [ 107.079024][ T9066] syzkaller0: entered allmulticast mode v[ 107.200207][ T9075] vxcan1: tx drop: invalid da for name 0x0000000000002001 [ 107.230476][ T9078] loop6: detected capacity change from 0 to 7 [ 107.268367][ T9081] wusb3801 0-0004: supply vbus not found, using dummy regulator [ 107.288838][ T9081] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x04 [ 107.295468][ T9083] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_0, syncid = 1, id = 0 [ 107.320731][ T9078] Dev loop6: unable to read RDB block 7 [ 107.320754][ T9078] loop6: unable to read partition table [ 107.320843][ T9078] loop6: partition table beyond EOD, truncated [ 107.320875][ T9078] loop_reread_partitions: partition scan of loop6 (-ý? %`{5 FLQk݊A) failed (rc=-5) v[ 107.453190][ T9097] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 107.453206][ T9097] block device autoloading is deprecated and will be removed. [ 107.509108][ T9097] md: invalid raid superblock magic on ram15 [ 107.509129][ T9097] md: ram15 does not have a valid v0.0 superblock, not importing! [ 107.509196][ T9097] md: md_import_device returned -22 [ 107.705663][ T43] audit: type=1400 audit(1792609256.898:870): avc: denied { setopt } for pid=9100 comm="syz.7.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 107.874220][ T9118] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 107.903302][ T9120] netlink: 'syz.1.729': attribute type 1 has an invalid length. [ 108.017760][ T9120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.729'. [ 108.056707][ T50] usb 12-1: new low-speed USB device number 2 using dummy_hcd [ 108.187254][ T50] usb 12-1: device descriptor read/64, error -71 [ 108.437496][ T50] usb 12-1: new low-speed USB device number 3 using dummy_hcd [ 108.566714][ T50] usb 12-1: device descriptor read/64, error -71 [ 108.678409][ T50] usb usb12-port1: attempt power cycle [ 109.016745][ T50] usb 12-1: new low-speed USB device number 4 using dummy_hcd [ 109.038204][ T50] usb 12-1: device descriptor read/8, error -71 [ 109.239783][ T9139] netlink: 28 bytes leftover after parsing attributes in process `syz.1.735'. [ 109.276742][ T50] usb 12-1: new low-speed USB device number 5 using dummy_hcd [ 109.307104][ T50] usb 12-1: device descriptor read/8, error -71 [ 109.348034][ T9139] netlink: 'syz.1.735': attribute type 10 has an invalid length. [ 109.355720][ T9139] team0 (unregistering): Port device team_slave_0 removed [ 109.359933][ T9139] team0 (unregistering): Port device team_slave_1 removed [ 109.417046][ T50] usb usb12-port1: unable to enumerate USB device [ 110.196386][ T9148] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 110.555484][ T9166] batadv_slave_1: entered promiscuous mode [ 110.565438][ T9166] bond3 (unregistering): Released all slaves [ 110.831723][ T9169] netlink: 12 bytes leftover after parsing attributes in process `syz.7.743'. [ 110.903208][ T9176] tmpfs: Bad value for 'mpol' [ 110.993686][ T9178] netlink: 25 bytes leftover after parsing attributes in process `syz.7.746'. [ 110.994172][ T43] audit: type=1400 audit(1792609260.188:871): avc: denied { create } for pid=9177 comm="syz.7.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 111.013220][ T9178] netlink: 45349 bytes leftover after parsing attributes in process `syz.7.746'. [ 111.013339][ T9178] 0XD: renamed from eql [ 111.016321][ T9178] 0XD: remember to turn off Van-Jacobson compression on your slave devices [ 111.016340][ T9178] 0XD: left promiscuous mode [ 111.016349][ T9178] 0XD: entered allmulticast mode [ 111.131035][ T43] audit: type=1400 audit(1792609260.328:872): avc: denied { write } for pid=9184 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.206471][ T43] audit: type=1400 audit(1792609260.398:873): avc: denied { write } for pid=9189 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.232628][ T43] audit: type=1400 audit(1792609260.428:874): avc: denied { getopt } for pid=9193 comm="syz.1.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 111.588856][ T9163] batadv_slave_1: left promiscuous mode [ 111.867541][ T43] audit: type=1400 audit(1792609261.068:875): avc: denied { write } for pid=9223 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.929057][ T43] audit: type=1400 audit(1792609261.128:876): avc: denied { write } for pid=9226 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.018271][ T43] audit: type=1400 audit(1792609261.208:877): avc: denied { write } for pid=9229 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.059919][ T43] audit: type=1400 audit(1792609261.258:878): avc: denied { write } for pid=9232 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.236833][ T9241] netlink: 40 bytes leftover after parsing attributes in process `syz.1.759'. [ 112.571993][ T43] audit: type=1400 audit(1792609261.768:879): avc: denied { write } for pid=9259 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.605282][ T43] audit: type=1400 audit(1792609261.798:880): avc: denied { write } for pid=9264 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.941612][ T9282] FAULT_INJECTION: forcing a failure. [ 112.941612][ T9282] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.941650][ T9282] CPU: 2 UID: 0 PID: 9282 Comm: syz.7.763 Tainted: G L syzkaller #0 PREEMPT(full) [ 112.941666][ T9282] Tainted: [L]=SOFTLOCKUP [ 112.941670][ T9282] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 112.941688][ T9282] Call Trace: [ 112.941702][ T9282] [ 112.941707][ T9282] dump_stack_lvl+0x100/0x190 [ 112.941807][ T9282] should_fail_ex.cold+0x5/0xa [ 112.941833][ T9282] _copy_from_user+0x2e/0xd0 [ 112.941884][ T9282] do_ip_vs_set_ctl+0x53c/0xc90 [ 112.941941][ T9282] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 112.941953][ T9282] ? rcu_is_watching+0x13/0xc0 [ 112.941995][ T9282] ? find_held_lock+0x2b/0x80 [ 112.942017][ T9282] ? nf_sockopt_find.isra.0+0x222/0x290 [ 112.942034][ T9282] ? nf_sockopt_find.isra.0+0x222/0x290 [ 112.942056][ T9282] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 112.942123][ T9282] ? nf_setsockopt+0x8d/0xf0 [ 112.942136][ T9282] nf_setsockopt+0x8d/0xf0 [ 112.942153][ T9282] ip_setsockopt+0xcb/0xf0 [ 112.942167][ T9282] udp_setsockopt+0x64/0xb0 [ 112.942197][ T9282] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 112.942218][ T9282] do_sock_setsockopt+0xf3/0x1d0 [ 112.942236][ T9282] __sys_setsockopt+0x195/0x220 [ 112.942253][ T9282] __x64_sys_setsockopt+0xbd/0x160 [ 112.942265][ T9282] ? do_syscall_64+0xae/0x790 [ 112.942275][ T9282] ? lockdep_hardirqs_on+0x7d/0x110 [ 112.942292][ T9282] do_syscall_64+0x123/0x790 [ 112.942304][ T9282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.942317][ T9282] RIP: 0033:0x7f043179f559 [ 112.942327][ T9282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.942338][ T9282] RSP: 002b:00007f0432740028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 112.942358][ T9282] RAX: ffffffffffffffda RBX: 00007f0431a25fa0 RCX: 00007f043179f559 [ 112.942366][ T9282] RDX: 0000000000000482 RSI: 0000000000000000 RDI: 0000000000000007 [ 112.942372][ T9282] RBP: 00007f0431836b20 R08: 000000000000002c R09: 0000000000000000 [ 112.942379][ T9282] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 112.942385][ T9282] R13: 00007f0431a26038 R14: 00007f0431a25fa0 R15: 00007ffd5e78dc68 [ 112.942401][ T9282] [ 112.964659][ T9282] netlink: 28 bytes leftover after parsing attributes in process `syz.7.763'. [ 112.964683][ T9282] netlink: 28 bytes leftover after parsing attributes in process `syz.7.763'. [ 112.964696][ T9282] netlink: 8 bytes leftover after parsing attributes in process `syz.7.763'. [ 113.120906][ T43] audit: type=1400 audit(1792609262.318:881): avc: denied { associate } for pid=9284 comm="syz.7.764" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 113.133985][ T43] audit: type=1400 audit(1792609262.328:882): avc: denied { write } for pid=9283 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.190404][ T43] audit: type=1400 audit(1792609262.388:883): avc: denied { write } for pid=9291 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.194280][ T9292] batadv_slave_1: entered promiscuous mode [ 113.194849][ T9292] netlink: 28 bytes leftover after parsing attributes in process `syz.7.765'. [ 113.222174][ T9292] Console: switching to colour dummy device 80x25 [ 113.326337][ T9295] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 113.365857][ T9295] pci 0000:00:01.0: BAR 0 [mem 0xfe000000-0xfe7fffff pref] [ 113.366022][ T9295] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref] [ 113.366083][ T9295] pci 0000:00:01.0: BAR 4 [mem 0xfeaf4000-0xfeaf4fff] [ 113.366184][ T9295] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 113.376548][ T9295] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 113.394523][ T9295] pci 0000:00:01.0: Adding to iommu group 1 [ 113.407315][ T9295] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 113.407338][ T9295] pci 0000:00:01.0: vgaarb: bridge control possible [ 113.407375][ T9295] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 113.418102][ T9295] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned [ 113.448848][ T9295] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned [ 113.462256][ T9295] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff]: assigned [ 113.518251][ T9295] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 113.5183 ** replaying previous printk message ** [ 113.518389][ T9295] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 113.519460][ T9295] [drm] features: -virgl +edid -resource_blob -host_visible [ 113.519468][ T9295] [drm] features: -context_init -blob_alignment [ 113.530108][ T9295] ------------[ cut here ]------------ [ 113.530117][ T9295] kmem_cache of name 'virtio-gpu-vbufs' already exists [ 113.530124][ T9295] WARNING: mm/slab_common.c:111 at __kmem_cache_create_args+0xa9/0x440, CPU#1: syz.7.765/9295 [ 113.545470][ T9295] Modules linked in: [ 113.547128][ T9295] CPU: 1 UID: 0 PID: 9295 Comm: syz.7.765 Tainted: G L syzkaller #0 PREEMPT(full) [ 113.550697][ T9295] Tainted: [L]=SOFTLOCKUP SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 113.552356][ T9295] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 113.555980][ T9295] RIP: 0010:__kmem_cache_create_args+0xac/0x440 [ 113.558027][ T9295] Code: 48 8b 43 60 48 8d 58 a0 48 3d b0 73 f9 8f 74 1f 48 8b 7b 58 48 89 ee e8 62 98 73 09 85 c0 75 e0 48 8d 3d 47 43 ec 0f 48 89 ee <67> 48 0f b9 3a be 20 00 00 00 48 89 ef e8 e2 99 73 09 48 85 c0 0f [ 113.563964][ T9295] RSP: 0018:ffffc90003596f18 EFLAGS: 00010246 [ 113.565895][ T9295] RAX: 0000000000000000 RBX: ffff8881032e1400 RCX: fffff520006b2dbe [ 113.568487][ T9295] RDX: 0000000000000000 RSI: ffffffff8c91e920 RDI: ffffffff924a62d0 [ 113.570937][ T9295] RBP: ffffffff8c91e920 R08: 0000000000000000 R09: fffffbfff248bb2b [ 113.573391][ T9295] R10: ffffc90003596f18 R11: 0000000000000001 R12: 0000000000000000 [ 113.576806][ T9295] R13: ffffc90003596f88 R14: 00000000000000d8 R15: ffff8880467d4fce [ 113.579563][ T9295] FS: 00007f04326fe6c0(0000) GS:ffff8880d4830000(0000) knlGS:0000000000000000 [ 113.582386][ T9295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 113.584465][ T9295] CR2: 000000110c453a26 CR3: 000000003ff9f000 CR4: 0000000000352ef0 [ 113.587066][ T9295] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 113.589567][ T9295] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 113.592034][ T9295] Call Trace: [ 113.593095][ T9295] [ 113.594046][ T9295] virtio_gpu_alloc_vbufs+0xc2/0x150 [ 113.595796][ T9295] ? __pfx__printk+0x10/0x10 [ 113.597939][ T9295] ? __pfx_virtio_gpu_alloc_vbufs+0x10/0x10 [ 113.599814][ T9295] ? lockdep_init_map_type+0x5c/0x250 [ 113.601506][ T9295] virtio_gpu_init.cold+0x40d/0x127f [ 113.603183][ T9295] ? vga_remove_vgacon.cold+0x1d/0x99 [ 113.604880][ T9295] ? __pfx_virtio_gpu_init+0x10/0x10 [ 113.606534][ T9295] ? is_console_locked+0x9/0x20 [ 113.608164][ T9295] ? con_is_bound+0x141/0x190 [ 113.609695][ T9295] ? vga_remove_vgacon+0x21/0x30 [ 113.611311][ T9295] ? aperture_remove_conflicting_pci_devices+0x138/0x1e0 [ 113.613509][ T9295] virtio_gpu_probe+0x21c/0x360 [ 113.615059][ T9295] virtio_dev_probe+0x72a/0xd30 [ 113.616735][ T9295] ? __pfx_virtio_dev_probe+0x10/0x10 [ 113.618458][ T9295] ? kernfs_put+0x3f/0x60 [ 113.619898][ T9295] ? sysfs_do_create_link_sd+0xbb/0x140 [ 113.621691][ T9295] ? sysfs_create_link+0x68/0xc0 [ 113.623273][ T9295] ? __pfx_virtio_dev_probe+0x10/0x10 [ 113.624969][ T9295] really_probe+0x241/0xa60 [ 113.626411][ T9295] __driver_probe_device+0x210/0x460 [ 113.628078][ T9295] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 113.629972][ T9295] driver_probe_device+0x4a/0x140 [ 113.631569][ T9295] __device_attach_driver+0x1df/0x320 [ 113.633247][ T9295] ? __pfx___device_attach_driver+0x10/0x10 [ 113.635092][ T9295] bus_for_each_drv+0x159/0x1e0 [ 113.636697][ T9295] ? __pfx_bus_for_each_drv+0x10/0x10 [ 113.638404][ T9295] ? lockdep_hardirqs_on+0x7d/0x110 [ 113.640067][ T9295] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 113.641903][ T9295] __device_attach+0x1e4/0x4d0 [ 113.643429][ T9295] ? __pfx___device_attach+0x10/0x10 [ 113.645080][ T9295] ? do_raw_spin_unlock+0x145/0x1e0 [ 113.646708][ T5738] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 113.649118][ T9295] device_initial_probe+0xaf/0xd0 [ 113.650706][ T9295] bus_probe_device+0x64/0x160 [ 113.652227][ T9295] device_add+0x121d/0x1970 [ 113.653663][ T9295] ? __pfx_device_add+0x10/0x10 [ 113.655210][ T9295] ? __pfx___might_resched+0x10/0x10 [ 113.656947][ T9295] ? ioread8+0x8f/0xd0 [ 113.658270][ T9295] ? vp_synchronize_vectors+0x121/0x1f0 [ 113.660019][ T9295] ? __pfx_vp_set_status+0x10/0x10 [ 113.661627][ T9295] register_virtio_device+0x601/0x730 [ 113.663360][ T9295] ? __pfx_register_virtio_device+0x10/0x10 [ 113.665857][ T9295] ? __pfx_pcibios_set_master+0x10/0x10 [ 113.667741][ T9295] ? __raw_spin_lock_init+0x3a/0x110 [ 113.669437][ T9295] ? __pfx_virtio_pci_probe+0x10/0x10 [ 113.671038][ T9295] virtio_pci_probe+0x255/0x410 [ 113.672514][ T9295] local_pci_probe+0xdd/0x1b0 [ 113.673981][ T9295] pci_call_probe+0x176/0x800 [ 113.675480][ T9295] ? pci_match_device+0x147/0x7d0 [ 113.677142][ T9295] ? __pfx_pci_call_probe+0x10/0x10 [ 113.678736][ T9295] ? __pfx_pci_match_device+0x10/0x10 [ 113.680476][ T9295] ? pci_find_host_bridge+0x3c/0x80 [ 113.682120][ T9295] pci_device_probe+0x25b/0x400 [ 113.683673][ T9295] ? __pfx_pci_device_probe+0x10/0x10 [ 113.685367][ T9295] ? sysfs_create_link+0x68/0xc0 [ 113.687020][ T9295] ? __pfx_pci_device_probe+0x10/0x10 [ 113.688740][ T9295] really_probe+0x241/0xa60 [ 113.690174][ T9295] __driver_probe_device+0x210/0x460 [ 113.691825][ T9295] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 113.693645][ T9295] driver_probe_device+0x4a/0x140 [ 113.695213][ T9295] __device_attach_driver+0x1df/0x320 [ 113.696973][ T9295] ? __pfx___device_attach_driver+0x10/0x10 [ 113.698831][ T9295] bus_for_each_drv+0x159/0x1e0 [ 113.700385][ T9295] ? __pfx_bus_for_each_drv+0x10/0x10 [ 113.702105][ T9295] ? lockdep_hardirqs_on+0x7d/0x110 [ 113.703769][ T9295] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 113.705593][ T9295] __device_attach+0x1e4/0x4d0 [ 113.707135][ T9295] ? __pfx___device_attach+0x10/0x10 [ 113.708727][ T9295] device_initial_probe+0xaf/0xd0 [ 113.710246][ T9295] pci_bus_add_device+0xc5/0x100 [ 113.711756][ T9295] pci_bus_add_devices+0x9a/0x1f0 [ 113.713354][ T9295] pci_rescan_bus+0x2a/0x40 [ 113.714807][ T9295] rescan_store+0xfb/0x130 [ 113.716229][ T9295] ? __pfx_rescan_store+0x10/0x10 [ 113.717903][ T9295] ? sysfs_file_kobj+0xe4/0x290 [ 113.719503][ T9295] ? __pfx_rescan_store+0x10/0x10 [ 113.721085][ T9295] bus_attr_store+0x74/0xb0 [ 113.722519][ T9295] ? __pfx_bus_attr_store+0x10/0x10 [ 113.724152][ T9295] sysfs_kf_write+0xf2/0x150 [ 113.725610][ T9295] kernfs_fop_write_iter+0x3e0/0x5f0 [ 113.727368][ T9295] ? __pfx_sysfs_kf_write+0x10/0x10 [ 113.729033][ T9295] vfs_write+0x6af/0x1050 [ 113.730394][ T9295] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 113.732228][ T9295] ? __pfx_vfs_write+0x10/0x10 [ 113.733731][ T9295] ? find_held_lock+0x2b/0x80 [ 113.735225][ T9295] ksys_write+0x12a/0x250 [ 113.736663][ T9295] ? __pfx_ksys_write+0x10/0x10 [ 113.738216][ T9295] do_syscall_64+0x123/0x790 [ 113.739675][ T9295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.741519][ T9295] RIP: 0033:0x7f043179f559 [ 113.742924][ T9295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.748934][ T9295] RSP: 002b:00007f04326fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 113.751516][ T9295] RAX: ffffffffffffffda RBX: 00007f0431a26180 RCX: 00007f043179f559 [ 113.753957][ T9295] RDX: 0000000000000001 RSI: 0000200000000fc0 RDI: 000000000000000c [ 113.756380][ T9295] RBP: 00007f0431836b20 R08: 0000000000000000 R09: 0000000000000000 [ 113.758899][ T9295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.761371][ T9295] R13: 00007f0431a26218 R14: 00007f0431a26180 R15: 00007ffd5e78dc68 [ 113.763859][ T9295] [ 113.764866][ T9295] irq event stamp: 11033 [ 113.766227][ T9295] hardirqs last enabled at (11039): [] irqentry_exit+0x202/0xab0 [ 113.768996][ T9295] hardirqs last disabled at (11046): [] sysvec_apic_timer_interrupt+0xe/0xc0 [ 113.772149][ T9295] softirqs last enabled at (10968): [] __irq_exit_rcu+0x16a/0x210 [ 113.775072][ T9295] softirqs last disabled at (10963): [] __irq_exit_rcu+0x16a/0x210 [ 113.778018][ T9295] ---[ end trace 0000000000000000 ]--- [ 113.786908][ T9295] [drm] number of scanouts: 1 [ 113.786941][ T9295] [drm] number of cap sets: 0 [ 113.797738][ T9295] [drm:virtio_gpu_init.cold] *ERROR* modeset init failed [ 114.047425][ T9295] virtio_gpu virtio0: probe with driver virtio_gpu failed with error -4 [ 114.148631][ T6996] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.201937][ T6996] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.311019][ T6996] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.328523][ T9295] batadv_slave_1: left promiscuous mode [ 114.352506][ T6996] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.434079][ T6996] bridge_slave_1: left allmulticast mode [ 114.434096][ T6996] bridge_slave_1: left promiscuous mode [ 114.434229][ T6996] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.435733][ T6996] bridge_slave_0: left allmulticast mode [ 114.435745][ T6996] bridge_slave_0: left promiscuous mode [ 114.435838][ T6996] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.496198][ T43] audit: type=1400 audit(1792609263.688:884): avc: denied { write } for pid=9306 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.536039][ T6996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.540765][ T6996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.541663][ T6996] bond0 (unregistering): Released all slaves [ 114.545569][ T6996] bond1 (unregistering): Released all slaves [ 114.574941][ T5440] 8021q: adding VLAN 0 to HW filter on device eth14 [ 114.709867][ T5440] 8021q: adding VLAN 0 to HW filter on device eth15 [ 114.860027][ T5440] 8021q: adding VLAN 0 to HW filter on device eth16 [ 114.945063][ T6996] hsr_slave_0: left promiscuous mode [ 114.945492][ T6996] hsr_slave_1: left promiscuous mode [ 114.945849][ T6996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.945861][ T6996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.946341][ T6996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.946351][ T6996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.961006][ T6996] veth1_macvtap: left promiscuous mode [ 114.961036][ T6996] veth0_macvtap: left promiscuous mode [ 114.961127][ T6996] veth1_vlan: left promiscuous mode [ 114.961195][ T6996] veth0_vlan: left promiscuous mode [ 115.095954][ T6996] team0 (unregistering): Port device team_slave_1 removed [ 115.104769][ T6996] team0 (unregistering): Port device team_slave_0 removed [ 115.157096][ T5440] 8021q: adding VLAN 0 to HW filter on device eth17